L2TP or IKEv2 VPN Server Possible? Apple is removing PPTP

Post new topic   Reply to topic    DD-WRT Forum Index -> Broadcom SoC based Hardware
Goto page Previous  1, 2, 3, 4  Next
Author Message
<Kong>
DD-WRT Guru


Joined: 15 Dec 2010
Posts: 4339
Location: Germany

PostPosted: Wed Sep 28, 2016 18:56    Post subject: Reply with quote
DaveTheNerd wrote:
<Kong> wrote:
Softether which supports IPSEC is in the works, first test looks ok, just needs a bit of polishing in the webif.


This is not yet in your 30700 test build, correct?


Not in the std build, but if you look at the image sizes you will know which model I used for my test:-)

_________________
KONG PB's: http://www.desipro.de/ddwrt/
KONG Info: http://tips.desipro.de/
Sponsor
DaveTheNerd
DD-WRT User


Joined: 15 Jul 2008
Posts: 317

PostPosted: Wed Sep 28, 2016 19:33    Post subject: Reply with quote
<Kong> wrote:
DaveTheNerd wrote:
<Kong> wrote:
Softether which supports IPSEC is in the works, first test looks ok, just needs a bit of polishing in the webif.


This is not yet in your 30700 test build, correct?


Not in the std build, but if you look at the image sizes you will know which model I used for my test:-)


Ah hah! I'm on an R8500. I missed it by that much! Smile
SkyCrane
DD-WRT Novice


Joined: 25 Aug 2016
Posts: 3

PostPosted: Fri Sep 30, 2016 14:45    Post subject: Reply with quote
Thanks KONG for doing it! Waiting for a version for my R6300v2 with SoftEther goodies.
salzrat
DD-WRT Novice


Joined: 20 Dec 2014
Posts: 35

PostPosted: Thu Oct 06, 2016 7:41    Post subject: Reply with quote
I've just managed to connect my iphone to dd-wrt using OpenVPN.

It is a bit tricky because some of the guides are outdated or missing some information, but I finally managed it. If you have problems, ask here.
lyuan
DD-WRT User


Joined: 05 Apr 2011
Posts: 85

PostPosted: Thu Oct 06, 2016 15:48    Post subject: Reply with quote
salzrat wrote:
I've just managed to connect my iphone to dd-wrt using OpenVPN.

It is a bit tricky because some of the guides are outdated or missing some information, but I finally managed it. If you have problems, ask here.


Are we expecting SoftEther to be part of the next batch of Kong releases? If not, I think a guide to setting up OpenVPN would be very beneficial to quite a few people!

Thanks,

L.
salzrat
DD-WRT Novice


Joined: 20 Dec 2014
Posts: 35

PostPosted: Thu Oct 06, 2016 20:08    Post subject: Reply with quote
Basically, you can follow this tutorial:
https://www.dd-wrt.com/wiki/index.php/VPN_(the_easy_way)_v24%2B

Things I had to do differently or take care about:
- make sure to use openvpn 2.1.4 and not anything later, otherwise there is no easy-rsa
- use the opttion "nopass" when calling the build-keys-server batch file
- add the lines "script-security 2" and "comp-lzo" to the server additional config
- change the management port from 5001 to 14 in the additional config
- set the cipher to "cipher bf-cbc" in the client config file

The howto also contains a few debugging steps if it doesn't work right away that are useful. If you are stuck, you can post here...
[/list][/list]
qGUBcZWwBHb1
DD-WRT Novice


Joined: 27 Jan 2015
Posts: 32

PostPosted: Sun Oct 09, 2016 2:07    Post subject: Reply with quote
salzrat wrote:
Basically, you can follow this tutorial:
https://www.dd-wrt.com/wiki/index.php/VPN_(the_easy_way)_v24%2B

Things I had to do differently or take care about:
- make sure to use openvpn 2.1.4 and not anything later, otherwise there is no easy-rsa
- use the opttion "nopass" when calling the build-keys-server batch file
- add the lines "script-security 2" and "comp-lzo" to the server additional config
- change the management port from 5001 to 14 in the additional config
- set the cipher to "cipher bf-cbc" in the client config file

The howto also contains a few debugging steps if it doesn't work right away that are useful. If you are stuck, you can post here...
[/list][/list]


PPTP is broken. Do not use.
Blowfish (bf-cbc) & 3DES are broken due to SWEET32. Do not use.

Use AES instead.
wesli
DD-WRT Novice


Joined: 01 Jul 2012
Posts: 27

PostPosted: Thu Oct 27, 2016 18:37    Post subject: Reply with quote
Hello Kong,

do you have any progress with Softether?

Kind regards,
wesli

<Kong> wrote:
DaveTheNerd wrote:
<Kong> wrote:
Softether which supports IPSEC is in the works, first test looks ok, just needs a bit of polishing in the webif.


This is not yet in your 30700 test build, correct?


Not in the std build, but if you look at the image sizes you will know which model I used for my test:-)
DaveTheNerd
DD-WRT User


Joined: 15 Jul 2008
Posts: 317

PostPosted: Thu Oct 27, 2016 18:54    Post subject: Reply with quote
wesli wrote:
Hello Kong,
do you have any progress with Softether?


Looks to be in today's 30800M, though no idea how to configure yet.



softether_30800.jpg
 Description:
 Filesize:  85.74 KB
 Viewed:  19044 Time(s)

softether_30800.jpg


nolimitz
DD-WRT Guru


Joined: 26 Nov 2010
Posts: 597

PostPosted: Fri Oct 28, 2016 6:30    Post subject: Reply with quote
DaveTheNerd wrote:
wesli wrote:
Hello Kong,
do you have any progress with Softether?


Looks to be in today's 30800M, though no idea how to configure yet.


Thanks for reporting,

@Kong, can we have a guide for this?
<Kong>
DD-WRT Guru


Joined: 15 Dec 2010
Posts: 4339
Location: Germany

PostPosted: Fri Oct 28, 2016 6:40    Post subject: Reply with quote
nolimitz wrote:
DaveTheNerd wrote:
wesli wrote:
Hello Kong,
do you have any progress with Softether?


Looks to be in today's 30800M, though no idea how to configure yet.


Thanks for reporting,

@Kong, can we have a guide for this?


Just use the softether windows client, connect to the running softether on the router configure it, once it is working the way you like it export the config and paste it into the config box.

_________________
KONG PB's: http://www.desipro.de/ddwrt/
KONG Info: http://tips.desipro.de/
wesli
DD-WRT Novice


Joined: 01 Jul 2012
Posts: 27

PostPosted: Fri Oct 28, 2016 7:59    Post subject: Reply with quote
@Kong
Thank you very much!

I can't connect with the vpn client. Which is the port on which the server is listening?
I also loged in via telnet on my R7000 router and started the softether server manually (vpnserver start), but the client can't still connect to the server. I tried following ports: 443, 992, 1194 and 5555.

Kind regards,
wesli
wesli
DD-WRT Novice


Joined: 01 Jul 2012
Posts: 27

PostPosted: Fri Oct 28, 2016 11:40    Post subject: Reply with quote
Found a part of the problem. I tried to connect to the LAN side of the router instead of the WAN side. I was able to connect to the router with the windows client using the WAN IP address. I configured the VPN sotftether server but still can't connect to the server using L2TP.
wesli
DD-WRT Novice


Joined: 01 Jul 2012
Posts: 27

PostPosted: Thu Nov 03, 2016 8:23    Post subject: Reply with quote
@Kong

I can not connect to the softether VPN server. I'm getting an Error code: 1.
I've installed for testing softether on a linux machine and was able to connect and configure it. But I'm not able to connect to the softether server on my R7000 router.
I connected to my router via telnet. "ps | grep vpnserver" shows 2 running processes.

Kind regards,
wesli



2016-11-03_09-18-29.png
 Description:
 Filesize:  81.55 KB
 Viewed:  18672 Time(s)

2016-11-03_09-18-29.png


Bloodboy
DD-WRT Novice


Joined: 28 Jul 2011
Posts: 13

PostPosted: Tue Nov 08, 2016 6:59    Post subject: Reply with quote
Hi all together,

has anyone made progress in unsing und configuring the new Softether-VPN-Server?

I have tried it myself, but I also wasnt able to connect to the Server using the VPN Server Manager Sad

I also cant see any open ports for it, but im not an expert...

Any ideas?
Goto page Previous  1, 2, 3, 4  Next Display posts from previous:    Page 2 of 4
Post new topic   Reply to topic    DD-WRT Forum Index -> Broadcom SoC based Hardware All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum