Firmware version r33555 was flashed onto my Netgear 3700 router with complete success.
I now have a fully functioning Openvpn, complete with a Status>VPN successful connection and corresponding logs.
You probably know this anyway [sorry, I really am new to this ] but within each .tcp file, all the necessary information is there.
For example:
Server IP address.
Tunnel protocol type.
Port number.
Type of Encryption Cipher.
Hash Algorithm.
tls & ca certificates.
And probably more ...........
So I just copied & pasted all the required sections and put them in their restive locations within the Service>TCP tab and hey presto ....... connection.
When I say 'I', actually it was 'he'; I was watching the action yesterday evening, as someone with far superior knowledge than me, took over control of my 'puter remotely and 'did his magic'.
So now the real conundrum ...... Going through the VPN server (UK101) ...... On the desktop, I can watch BBC iPLayer via Internet explorer.
Via Google Chrome the ipLayer is blocked.
Same for the Roku 3 streaming box; BBC iPlayer is blocked
Therefore the Nordvpn server is allowing the iPlayer to stream via IE but not Chrome on the 'puter and neither via the Roku.
What could be going on ...?
Obviously the Nord is 'partially' working, or is that not possible?
Joined: 18 Mar 2014 Posts: 12917 Location: Netherlands
Posted: Thu Oct 26, 2017 9:11 Post subject:
Glad you got it working.
Regarding BBC, your webbrowser is also caching your geolocation (stored in cookies etc) so you should use the incognito mode of chrome or the inprivate of Firefox or delete all your cookies etc.
Glad you got it working.
Regarding BBC, your webbrowser is also caching your geolocation (stored in cookies etc) so you should use the incognito mode of chrome or the inprivate of Firefox or delete all your cookies etc.
Maybe the Roku has a similar mechanism?
Hello egc,
By deleting the cache in Chrome, I've now managed to stream BBC
I just have to work on the Roku box.
I'll probably just 'factory re-set' it, that should do the trick hopefully .......
Chrome works OK if the cache is cleared before attempting to stream, but Chrome has to be closed then re-opened.
Roku 3 is still not streaming. I did a complete factory re-set to delete any cache or residual memory, but it still refuses to stream.
The message Im seeing has nothing to do with viewing outside the UK, it simlply says "Something went wrong loading this programme - This is usually a temporary problem, try again later etc ....".
But, if I then change Wifi setting for my UK based BT router ...... Bingo .... BBC IPlayer streams immediately.
NordVPN (Server UK101)is obviouly allowing iPlayer to stream, by allowing Chrome and I.E access.
It's now just the Roku 3
I've tried both wired and WiFi connections and it's the same on both
I have tried both on their site and no connection and no errors.
I am running a netgear r7000 with latest Kong build.
Thanks
Latest syslog
Nov 18 18:09:18 DD-WRT user.info : cron : cron daemon successfully stopped
Nov 18 18:09:19 DD-WRT daemon.debug process_monitor[1138]: Restarting cron (time sync change)
Nov 18 18:09:19 DD-WRT user.info : cron : cron daemon successfully started
Nov 18 18:09:19 DD-WRT cron.info cron[1164]: (CRON) STARTUP (fork ok)
Nov 18 18:09:19 DD-WRT daemon.info dnsmasq[979]: reading /tmp/resolv.dnsmasq
Nov 18 18:09:19 DD-WRT daemon.info dnsmasq[979]: using local addresses only for domain test
Nov 18 18:09:19 DD-WRT daemon.info dnsmasq[979]: using local addresses only for domain onion
Nov 18 18:09:19 DD-WRT daemon.info dnsmasq[979]: using local addresses only for domain localhost
Nov 18 18:09:19 DD-WRT daemon.info dnsmasq[979]: using local addresses only for domain local
Nov 18 18:09:19 DD-WRT daemon.info dnsmasq[979]: using local addresses only for domain invalid
Nov 18 18:09:19 DD-WRT daemon.info dnsmasq[979]: using local addresses only for domain example.net
Nov 18 18:09:19 DD-WRT daemon.info dnsmasq[979]: using local addresses only for domain example.org
Nov 18 18:09:19 DD-WRT daemon.info dnsmasq[979]: using local addresses only for domain example.com
Nov 18 18:09:19 DD-WRT daemon.info dnsmasq[979]: using nameserver 208.67.222.222#53
Nov 18 18:09:19 DD-WRT daemon.info dnsmasq[979]: using nameserver 208.67.220.220#53
Nov 18 18:09:19 DD-WRT daemon.info dnsmasq[979]: using nameserver 64.71.255.204#53
Nov 18 18:09:19 DD-WRT daemon.info dnsmasq[979]: using 2 more local addresses
Nov 18 18:09:19 DD-WRT daemon.info dnsmasq-dhcp[979]: DHCPDISCOVER(br0) c0:c1:c0:2d:0b:0f
Nov 18 18:09:19 DD-WRT daemon.info dnsmasq-dhcp[979]: DHCPOFFER(br0) 192.168.1.152 c0:c1:c0:2d:0b:0f
Nov 18 18:09:19 DD-WRT daemon.info dnsmasq-dhcp[979]: DHCPREQUEST(br0) 192.168.1.152 c0:c1:c0:2d:0b:0f
Nov 18 18:09:19 DD-WRT daemon.info dnsmasq-dhcp[979]: DHCPACK(br0) 192.168.1.152 c0:c1:c0:2d:0b:0f E3000
Nov 18 18:09:26 DD-WRT user.info : NAS : NAS lan (wl0 interface) successfully started
Nov 18 18:09:26 DD-WRT user.info : NAS : NAS lan (wl1 interface) successfully started
Nov 18 18:09:27 DD-WRT user.info : resetbutton : resetbutton daemon successfully stopped
Nov 18 18:09:27 DD-WRT user.info : resetbutton : resetbutton daemon successfully started
Nov 18 18:09:27 DD-WRT user.info : syslogd : syslog daemon successfully stopped
Nov 18 18:09:27 DD-WRT syslog.info syslogd exiting
Nov 18 18:09:27 DD-WRT syslog.info syslogd started: BusyBox v1.27.1
Nov 18 18:09:27 DD-WRT user.info : syslogd : syslog daemon successfully started
Nov 18 18:09:31 DD-WRT user.debug : ttraff: data collection started
Nov 18 18:09:44 DD-WRT daemon.info dnsmasq-dhcp[979]: DHCPREQUEST(br0) 192.168.1.150 64:5a:04:38:b3:86
Nov 18 18:09:44 DD-WRT daemon.info dnsmasq-dhcp[979]: DHCPACK(br0) 192.168.1.150 64:5a:04:38:b3:86 OOMA
Nov 18 18:10:16 DD-WRT daemon.info dnsmasq-dhcp[979]: DHCPREQUEST(br0) 192.168.1.172 08:66:98:9a:66:d2
Nov 18 18:10:16 DD-WRT daemon.info dnsmasq-dhcp[979]: DHCPACK(br0) 192.168.1.172 08:66:98:9a:66:d2 Apple-TV-2
Nov 18 18:10:30 DD-WRT daemon.info dnsmasq-dhcp[979]: DHCPREQUEST(br0) 192.168.1.185 6c:71:d9:f1:e3:cb
Nov 18 18:10:30 DD-WRT daemon.info dnsmasq-dhcp[979]: DHCPACK(br0) 192.168.1.185 6c:71:d9:f1:e3:cb Robert-PC
Nov 18 18:10:44 DD-WRT daemon.info dnsmasq-dhcp[979]: DHCPDISCOVER(br0) 74:2f:68:51:23:e1
Nov 18 18:10:44 DD-WRT daemon.info dnsmasq-dhcp[979]: DHCPOFFER(br0) 192.168.1.151 74:2f:68:51:23:e1
Nov 18 18:10:44 DD-WRT daemon.info dnsmasq-dhcp[979]: DHCPREQUEST(br0) 192.168.1.151 74:2f:68:51:23:e1
Nov 18 18:10:44 DD-WRT daemon.info dnsmasq-dhcp[979]: DHCPACK(br0) 192.168.1.151 74:2f:68:51:23:e1 HPLASER
Nov 18 18:11:04 DD-WRT daemon.info dnsmasq-dhcp[979]: DHCPREQUEST(br0) 192.168.1.153 bc:54:36:ee:c9:61
Nov 18 18:11:04 DD-WRT daemon.info dnsmasq-dhcp[979]: DHCPACK(br0) 192.168.1.153 bc:54:36:ee:c9:61 IPHONE
Nov 18 18:09:19 DD-WRT daemon.debug process_monitor[1138]: We need to re-update after 3600 seconds
Hello All,
been trying for a while and i finally got my Linksys E2500 with DD-WRT v24-sp2 (03/25/13) mega top show as cnnected in the state for OpenVPN, however i might have the same issue that fastbond a few pages ago:
to show as connected, however,
fastbond wrote:
After trying almost everything, it worked.
My dd-wrt was siting behind my internet provider cable modem and after changing this cable modem to bridge mode and letting the dd-wrt router act as gateway, it worked!
The weird thing is that any VPN started from a device behind the dd-wrt would work with this config, but the dd-wrt itself.
Everything is fine now, thank you @eibgrad and others for the help!
Here is my log:
Quote:
State
Server: : Local Address: Remote Address: Client: CONNECTED: SUCCESS Local Address: 10.8.8.71 Remote Address: 10.8.8.71
Status
Log
Serverlog Clientlog 19700101 00:00:18 I OpenVPN 2.3.0 mipsel-unknown-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [MH] [IPv6] built on Mar 25 2013
19700101 00:00:18 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:16
19700101 00:00:18 W WARNING: file '/tmp/openvpncl/user.conf' is group or others accessible
19700101 00:00:18 W NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
19700101 00:00:18 W WARNING: file '/tmp/openvpncl/ta.key' is group or others accessible
19700101 00:00:18 I Control Channel Authentication: using '/tmp/openvpncl/ta.key' as a OpenVPN static key file
19700101 00:00:18 Outgoing Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
19700101 00:00:18 Incoming Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
19700101 00:00:18 Socket Buffers: R=[114688->131072] S=[114688->131072]
19700101 00:00:18 I UDPv4 link local: [undef]
19700101 00:00:18 I UDPv4 link remote: [AF_INET]185.93.1.93:1194
19700101 00:00:18 TLS: Initial packet from [AF_INET]185.93.1.93:1194 sid=25a55c91 10d5c318
19700101 00:00:18 W WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
19700101 00:00:18 N VERIFY ERROR: depth=1 error=certificate is not yet valid: C=PA ST=PA L=Panama O=NordVPN OU=NordVPN CN=us777.nordvpn.com name=NordVPN emailAddress=cert@nordvpn.com
19700101 00:00:18 N TLS_ERROR: BIO read tls_read_plaintext error: error:14090086:lib(20):func(144):reason(134)
19700101 00:00:18 N TLS Error: TLS object -> incoming plaintext read error
19700101 00:00:18 NOTE: --mute triggered...
19700101 00:00:18 1 variation(s) on previous 3 message(s) suppressed by --mute
19700101 00:00:18 I SIGUSR1[soft tls-error] received process restarting
19700101 00:00:18 Restart pause 2 second(s)
19700101 00:00:20 W NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
19700101 00:00:20 Socket Buffers: R=[114688->131072] S=[114688->131072]
19700101 00:00:20 I UDPv4 link local: [undef]
19700101 00:00:20 I UDPv4 link remote: [AF_INET]185.93.1.93:1194
19700101 00:00:20 TLS: Initial packet from [AF_INET]185.93.1.93:1194 sid=11eadc45 d0ee9e51
20171122 00:24:26 N TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
20171122 00:24:26 N TLS Error: TLS handshake failed
20171122 00:24:26 I SIGUSR1[soft tls-error] received process restarting
20171122 00:24:26 Restart pause 2 second(s)
20171122 00:24:28 W NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
20171122 00:24:28 Socket Buffers: R=[114688->131072] S=[114688->131072]
20171122 00:24:28 I UDPv4 link local: [undef]
20171122 00:24:28 I UDPv4 link remote: [AF_INET]185.93.1.93:1194
20171122 00:24:28 N TLS Error: Unroutable control packet received from [AF_INET]185.93.1.93:1194 (si=3 op=P_CONTROL_V1)
20171122 00:24:28 TLS: Initial packet from [AF_INET]185.93.1.93:1194 sid=0cfcb0ca 2d24f189
20171122 00:24:28 VERIFY OK: depth=1 C=PA ST=PA L=Panama O=NordVPN OU=NordVPN CN=us777.nordvpn.com name=NordVPN emailAddress=cert@nordvpn.com
20171122 00:24:28 VERIFY OK: nsCertType=SERVER
20171122 00:24:28 NOTE: --mute triggered...
20171122 00:24:30 7 variation(s) on previous 3 message(s) suppressed by --mute
20171122 00:24:30 N TLS Error: Unroutable control packet received from [AF_INET]185.93.1.93:1194 (si=3 op=P_CONTROL_V1)
20171122 00:24:31 N TLS Error: Unroutable control packet received from [AF_INET]185.93.1.93:1194 (si=3 op=P_CONTROL_V1)
20171122 00:24:31 N TLS Error: Unroutable control packet received from [AF_INET]185.93.1.93:1194 (si=3 op=P_CONTROL_V1)
20171122 00:24:31 W WARNING: 'link-mtu' is used inconsistently local='link-mtu 1638' remote='link-mtu 1634'
20171122 00:24:31 W WARNING: 'mtu-dynamic' is present in local config but missing in remote config local='mtu-dynamic'
20171122 00:24:31 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
20171122 00:24:31 Data Channel Encrypt: Using 512 bit message hash 'SHA512' for HMAC authentication
20171122 00:24:31 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
20171122 00:24:31 NOTE: --mute triggered...
20171122 00:24:31 2 variation(s) on previous 3 message(s) suppressed by --mute
20171122 00:24:31 I [us777.nordvpn.com] Peer Connection Initiated with [AF_INET]185.93.1.93:1194
20171122 00:24:33 SENT CONTROL [us777.nordvpn.com]: 'PUSH_REQUEST' (status=1)
20171122 00:24:33 PUSH: Received control message: 'PUSH_REPLY redirect-gateway def1 sndbuf 524288 rcvbuf 524288 dhcp-option DNS 78.46.223.24 dhcp-option DNS 162.242.211.137 route-gateway 10.8.8.1 topology subnet ping 60 ping-restart 180 ifconfig 10.8.8.71 255.255.255.0'
20171122 00:24:33 OPTIONS IMPORT: timers and/or timeouts modified
20171122 00:24:33 NOTE: --mute triggered...
20171122 00:24:33 1 variation(s) on previous 3 message(s) suppressed by --mute
20171122 00:24:33 Socket Buffers: R=[131072->229376] S=[131072->229376]
20171122 00:24:33 OPTIONS IMPORT: --ifconfig/up options modified
20171122 00:24:33 OPTIONS IMPORT: route options modified
20171122 00:24:33 OPTIONS IMPORT: route-related options modified
20171122 00:24:33 NOTE: --mute triggered...
20171122 00:24:33 1 variation(s) on previous 3 message(s) suppressed by --mute
20171122 00:24:33 ROUTE_GATEWAY 192.168.2.1/255.255.255.0 IFACE=vlan2 HWADDR=20:aa:4b:32:a1:88
20171122 00:24:33 I TUN/TAP device tun1 opened
20171122 00:24:33 TUN/TAP TX queue length set to 100
20171122 00:24:33 I do_ifconfig tt->ipv6=1 tt->did_ifconfig_ipv6_setup=0
20171122 00:24:33 I /sbin/ifconfig tun1 10.8.8.71 netmask 255.255.255.0 mtu 1500 broadcast 10.8.8.255
20171122 00:24:33 /sbin/route add -net 185.93.1.93 netmask 255.255.255.255 gw 192.168.2.1
20171122 00:24:33 /sbin/route add -net 0.0.0.0 netmask 128.0.0.0 gw 10.8.8.1
20171122 00:24:33 /sbin/route add -net 128.0.0.0 netmask 128.0.0.0 gw 10.8.8.1
20171122 00:24:33 I Initialization Sequence Completed
20171122 00:25:30 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16
20171122 00:25:30 D MANAGEMENT: CMD 'state'
20171122 00:25:30 MANAGEMENT: Client disconnected
20171122 00:25:30 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16
20171122 00:25:30 D MANAGEMENT: CMD 'state'
20171122 00:25:30 MANAGEMENT: Client disconnected
20171122 00:25:30 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16
20171122 00:25:30 D MANAGEMENT: CMD 'state'
20171122 00:25:30 MANAGEMENT: Client disconnected
20171122 00:25:30 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16
20171122 00:25:30 D MANAGEMENT: CMD 'log 500'
19700101 00:00:00
When i connect the router directly to my ISP cablemodem it does not seem to be able to establish connection with the modem (it keeps for ever blinking amber in that port)
Also, i have a UUT AC750GW router which is my main home router, i am setting up the E2500 just to use as a VPN router for the TVs.
Any clue what I might be doing wrong or what kind of configuration i need to change?
So, I am configuring a dedicated router inside of my home network to just connect my smart TVs to it. like I said, the main router (UUT AC750GW) is worjking fine. i have fairly enough options on that one to configure ports forwarding and that kind of things...
Also, I flashed the sub network with Open VPN, will be this DD-WRT v24-sp2 (03/25/13) mega running on a Linsys E2500.
I configured this OPEN VNC and the status on it is as shown in my previous post.
Now my question is.. should I configure anything on my main router (like port forwarding, or nat or anything else) in order to grant communciation from this subnet (Open VPN) to the Internet?
as you can see, the modem show sas connected, but any device connected to that linksys sees to not have access to internet. i does have a good IP address.
the SIP Modem is in mode bridge... and if i try connecting the DDWRT (linksys) router directly to the ISP it does not seem to be able successfully connect the OpenVPN Client.
Things are often slow here on holidays. Btw generally hold off on log details until someone asks.
Perhaps a more straight forward description of your hardware hook up would help. Why are you using such an old dd-wrt build; 2013? Is your router no longer supported?
Also it sounds more than a bit strange for you to be expecting to do a VPN to your ISP. Does your ISP offer VPN? And what is the role of OpenVNC in this system?
hth _________________ multi-tier router stack
wrt 3200's for speed & cpu power, NG R6300v2's for WiFi AP's,
wrt 1200v2 for one of my secure subnets.
wrt54GLs for ad'l 3rd tier machines.
Are you sure you configured your openvpn setup correctly? There's some TLS errors in the logs and that's usually not a good sign and can cause connection issues.
yes the version seems to be the latest one produced for this routers... at least, it is the one available when i go tot he routers database.. howerver, bot says they are Supported (green yes)...last updates for this router in the router database are from 2017-09-07
i do have another Rounter, a Linksys WRT54GL... but it seems like the version for it is the same.
description about my setup:
I'm connected to the ISP thru a Cisco DPC3825 modem configured as a bridge.
Connected to that modem (bridge) and getting it's WAN addres from ISP DCHP, I have a UUT router model AC750GW which give internet (wireless and ethernet) to all my house, DHCP serves 192.168.2.x.
My Laptops can connect with no issues to NordVPN services using the NORDVPN client.
Now, I want to have a sub network to connect my smart TVs thru DHCP. So I connected this new E2500 running DD-WRT, configured it to connect using Open VPN and to serve a wireless network for my TVs (192.168.3.x).
Unfortunately, like you saw in my logs, the OpenVPN on the E2500 router seems to be connected to NordVPN, but when i connect my laptop to the new sub net i can't reach internet. And I am connecting the OpenVPN to the same server that is working for me with the NORDVPN client when connected tot he main home network.
I am no expert, but i think maybe i need to do some routing tables in the UUT router to tell him what to do with the traffic that comes from the 192.168.3.x subnet.... but not sure if that's the issue and how to do it.
Are you sure you configured your openvpn setup correctly? There's some TLS errors in the logs and that's usually not a good sign and can cause connection issues.
So I live outside of the US but i have amazon prime video and also i'm planning to use the NORDVPN to connect to Netflix.
I'm not trying to do a VPN to my ISP, what i am trying to do is to offer my two TVs a connection to the router with OpenVPN to connect to netflix and amazon prime as if they had an IP in the US. So, anything connected to that router would go through the NORD VPN server, but the rest of my network devces remain connected normally to the internet with revular IP from my country.
the reason I dont want to mask ALL my network is that the NORDVPN badwith would be a bottle neck, an i dont really need all my devices masked, only the ones i want to use to watch amazon prime or netflix
Are you sure you configured your openvpn setup correctly? There's some TLS errors in the logs and that's usually not a good sign and can cause connection issues.
well I followed the instructions given in here in the first threads...
] but within each .tcp file, all the necessary information is there.
