[SOLVED] v3.0-r47618 std openvpn express vpn not working

Post new topic   Reply to topic    DD-WRT Forum Index -> Advanced Networking
Goto page 1, 2  Next
Author Message
Cratebv212
DD-WRT User


Joined: 14 Dec 2016
Posts: 124

PostPosted: Sat Nov 06, 2021 15:27    Post subject: [SOLVED] v3.0-r47618 std openvpn express vpn not working Reply with quote
Firmware: DD-WRT v3.0-r47618 std (11/05/21)
Dell Inc. 0GDG8Y
Intel(R) Core(TM) i7-2600 CPU @ 3.40GHz

Just upgraded to this build this morning. Everything is working great so far except the openvpn client. The status page says it's connected but when I run speedtest.org or check my ip on the web it still shows my internet provider ip. The vpn ip shows up for about 5 seconds then reverts. I'll include a shot of my settings.
Sponsor
Cratebv212
DD-WRT User


Joined: 14 Dec 2016
Posts: 124

PostPosted: Sat Nov 06, 2021 15:37    Post subject: Reply with quote
Nevermind, I found new settings according to express vpn. I just noticed the mtu size reset when I upgraded and also the compression setting.
Cratebv212
DD-WRT User


Joined: 14 Dec 2016
Posts: 124

PostPosted: Sat Nov 06, 2021 15:44    Post subject: Reply with quote
Well, it only lasted about 1 minute again.
egc
DD-WRT Guru


Joined: 18 Mar 2014
Posts: 12915
Location: Netherlands

PostPosted: Sat Nov 06, 2021 15:44    Post subject: Reply with quote
Have a look in the documentation, it could be outdated though but see the Client setup guide: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=327398

But I do see some conspicuous settings:
Your encryption cipher is AES-256-CBC but your first data cipher is AES-256-GCM?

You are using a TLS key but have chosen TLS-crypt, but usually providers still use the older TLS-auth

You seem to have settings in the Additional config usually those are redundant or wrong, normally you do not need anything in additional config

Not related to your problem but I would choose UDP4 instead of UDP

I do not use ExpressVPN so it is a bit of guessing on my side Smile

I have transferred this to the Advanced Networking forum where these questions get better attention.
See the forum guidelines with helpful pointers about how to research your router, where and what to download, where and how to post and many other helpful hints:
https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=324087

_________________
Routers:Netgear R7000, R6400v1, R6400v2, EA6900 (XvortexCFE), E2000, E1200v1, WRT54GS v1.
Install guide R6400v2, R6700v3,XR300:https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=316399
Install guide R7800/XR500: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=320614
Forum Guide Lines (important read):https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=324087
Cratebv212
DD-WRT User


Joined: 14 Dec 2016
Posts: 124

PostPosted: Sat Nov 06, 2021 15:51    Post subject: Reply with quote
I just changed those settings to no avail. I'll check the post in the networking side of the forum. Thank you for your help.
Cratebv212
DD-WRT User


Joined: 14 Dec 2016
Posts: 124

PostPosted: Sat Nov 06, 2021 15:56    Post subject: Reply with quote
Screenshot of updated settings
eibgrad
DD-WRT Guru


Joined: 18 Sep 2010
Posts: 9157

PostPosted: Sun Nov 07, 2021 4:10    Post subject: Reply with quote
FWIW, on my own *working* ExpressVPN configuration, I have "Compression" set to No, "Tunnel MTU setting" to 1400, and "Tunnel UDP Fragment" set to 1300.

On a side note, is that PBR correct? It's NOT specifying a private network (e.g., 192.168.0.0/24, 10.0.0.0/8, 172.16.0.0.0/12), but something in the *public* IP space, 110.x.x.x.

_________________
ddwrt-ovpn-split-basic.sh (UPDATED!) * ddwrt-ovpn-split-advanced.sh (UPDATED!) * ddwrt-ovpn-client-killswitch.sh * ddwrt-ovpn-client-watchdog.sh * ddwrt-ovpn-remote-access.sh * ddwrt-ovpn-client-backup.sh * ddwrt-mount-usb-drives.sh * ddwrt-blacklist-domains.sh * ddwrt-wol-port-forward.sh * ddwrt-dns-monitor.sh (NEW!)
egc
DD-WRT Guru


Joined: 18 Mar 2014
Posts: 12915
Location: Netherlands

PostPosted: Sun Nov 07, 2021 7:13    Post subject: Reply with quote
Good catch!

If the PBR entries and the compression does not solve your problem post a picture of the OVPN status page (whole page) after you added:
verb 5
in the Additional OpenVPN Config and rebooted the router

_________________
Routers:Netgear R7000, R6400v1, R6400v2, EA6900 (XvortexCFE), E2000, E1200v1, WRT54GS v1.
Install guide R6400v2, R6700v3,XR300:https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=316399
Install guide R7800/XR500: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=320614
Forum Guide Lines (important read):https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=324087
Cratebv212
DD-WRT User


Joined: 14 Dec 2016
Posts: 124

PostPosted: Sun Nov 07, 2021 13:39    Post subject: Reply with quote
I changed the settings you suggested and still nothing. That pbr has worked for me for years to just send clients above 100 through the vpn. Here's a shot of the status page before and after the verb5.
Cratebv212
DD-WRT User


Joined: 14 Dec 2016
Posts: 124

PostPosted: Sun Nov 07, 2021 13:40    Post subject: Reply with quote
The screenshots are backwards. The before is connected and after has nothing.
egc
DD-WRT Guru


Joined: 18 Mar 2014
Posts: 12915
Location: Netherlands

PostPosted: Sun Nov 07, 2021 13:44    Post subject: Reply with quote
What is the local subnet of the router i.e. what is in Local IP Address on setup page?

Try the following:
Clear the PBR field, reboot the router and see if you have a VPN connection

Edit: did you set compression to No and changed MTU according to @eibgrad's advice

_________________
Routers:Netgear R7000, R6400v1, R6400v2, EA6900 (XvortexCFE), E2000, E1200v1, WRT54GS v1.
Install guide R6400v2, R6700v3,XR300:https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=316399
Install guide R7800/XR500: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=320614
Forum Guide Lines (important read):https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=324087
eibgrad
DD-WRT Guru


Joined: 18 Sep 2010
Posts: 9157

PostPosted: Sun Nov 07, 2021 15:26    Post subject: Reply with quote
There's nothing wrong w/ using 110.x.x.x provided that is your local network. I just found it a bit odd given 99.9% of NAT routers (at least for consumers) use a *private* IP address space, NOT a public one. But if the latter is your preference, so be it. When users complain about problems, we're always looking for things out of the ordinary.
_________________
ddwrt-ovpn-split-basic.sh (UPDATED!) * ddwrt-ovpn-split-advanced.sh (UPDATED!) * ddwrt-ovpn-client-killswitch.sh * ddwrt-ovpn-client-watchdog.sh * ddwrt-ovpn-remote-access.sh * ddwrt-ovpn-client-backup.sh * ddwrt-mount-usb-drives.sh * ddwrt-blacklist-domains.sh * ddwrt-wol-port-forward.sh * ddwrt-dns-monitor.sh (NEW!)
egc
DD-WRT Guru


Joined: 18 Mar 2014
Posts: 12915
Location: Netherlands

PostPosted: Sun Nov 07, 2021 15:41    Post subject: Reply with quote
What if the provider is using that network?
I admit chances are slim Smile

Would it not always be advisable to use a private address space?

https://en.m.wikipedia.org/wiki/Private_network

_________________
Routers:Netgear R7000, R6400v1, R6400v2, EA6900 (XvortexCFE), E2000, E1200v1, WRT54GS v1.
Install guide R6400v2, R6700v3,XR300:https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=316399
Install guide R7800/XR500: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=320614
Forum Guide Lines (important read):https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=324087
eibgrad
DD-WRT Guru


Joined: 18 Sep 2010
Posts: 9157

PostPosted: Sun Nov 07, 2021 15:47    Post subject: Reply with quote
egc wrote:
What if the provider is using that network?
I admit chances are slim Smile

Would it not always be advisable to use a private address space?

https://en.m.wikipedia.org/wiki/Private_network


Of course it would be better to use a proper private network in most cases. But *technically*, use of a public network will work, provided you never have a need to access that same public network over the WAN.

You could even make the argument (a weak one) that NOT using a private network ensures you do NOT have a conflict w/ the VPN (which is never going to use anything but a private network, typically 10.x.x.x).

_________________
ddwrt-ovpn-split-basic.sh (UPDATED!) * ddwrt-ovpn-split-advanced.sh (UPDATED!) * ddwrt-ovpn-client-killswitch.sh * ddwrt-ovpn-client-watchdog.sh * ddwrt-ovpn-remote-access.sh * ddwrt-ovpn-client-backup.sh * ddwrt-mount-usb-drives.sh * ddwrt-blacklist-domains.sh * ddwrt-wol-port-forward.sh * ddwrt-dns-monitor.sh (NEW!)
Cratebv212
DD-WRT User


Joined: 14 Dec 2016
Posts: 124

PostPosted: Sun Nov 07, 2021 22:15    Post subject: Reply with quote
When I get home I'll mess with it some more. I just don't understand why it worked flawlessly with a September build. I may try to erase and reset and of course set it up again. I usually upgrade without reset and never had a problem until this build.
Goto page 1, 2  Next Display posts from previous:    Page 1 of 2
Post new topic   Reply to topic    DD-WRT Forum Index -> Advanced Networking All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You cannot download files in this forum