[SOLVED]R7000 no internet after VPN connection to Cyberghos

Post new topic   Reply to topic    DD-WRT Forum Index -> Advanced Networking
Author Message
Makokha1990
DD-WRT Novice


Joined: 30 Jul 2022
Posts: 6

PostPosted: Sat Jul 30, 2022 7:58    Post subject: [SOLVED]R7000 no internet after VPN connection to Cyberghos Reply with quote
Hi,

I am coming a long way trying to install a VPN router with Cyberghost. After several weeks of bad Cyberghost support, we succeeded a few days ago in establishing the desired VPN connection, but now without an internet connection.

I am in Austria and need a network / VPN Router for Ireland. Magenta, as my ISP, has provided me with a 250k Cable Modem T3492LG-LC.

My Netgear R7000 is connected over LAN, and I used the guide from Cyberghost to get the corresponding settings.

https://support.cyberghostvpn.com/hc/en-us/articles/213811885-Router-How-to-Set-Up-OpenVPN-on-DD-WRT-Routers

I reset the NetGear router after several attempts with incorrect parameters from Cyberghost and then reconfigured the parameters. The Netgear router started successfully, and I had a good 40k down / 10k upload VPN connection with the Dublin server. After a normal restart the next day, I have no internet anymore. Also, a new reset of the NetGear router and a new configuration show no change.

The decisive hints and parameters came late from Cyberghost support: "try a new one via UDP and this time to set as encryption cypher AES 256 -GCM and secondary AES 128 GCM."

Additionally, I deactivated the firewall setting in the Magenta Router.

Does anyone have any idea why the internet connection is now missing? Is there an IP conflict with the magenta router?

Cyberghost support asked for an open 1194 port on the Magenta Router, but the configuration tells me port 443 is to be used.

I was just wondering why the internet connection worker once. I did right now the same again, resetting the NetGear Router and starting the same configuration ==> again, with NO Internet.

Checking the LAN panel, I have 192.168.1.134 as the IP address. Shouldn't it be the VPN Server address 10.1.4.123?


Last edited by Makokha1990 on Sat Jul 30, 2022 9:34; edited 1 time in total
Sponsor
foz111
DD-WRT Guru


Joined: 01 Oct 2017
Posts: 707
Location: Earth

PostPosted: Sat Jul 30, 2022 8:22    Post subject: Reply with quote
take a look at egc ovpn client guide
most vpn providers instructions are outdated
https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=327398

_________________
Netgear R7800 PPPoE Main Router
Network IPV4 - Isolated Vlan's with IoT Devices. Unifi AC-Pro x 3 AP's, Router Wi-Fi Disabled. OVPN Server With Paid Commercial Wireguard Client's. Gateway Mode, DNSMasq, Static Leases & DHCP, Pi-Hole DNS & Running Unbound.

No one can build you the bridge on which you, and only you, must cross the river of life!
Alozaros
DD-WRT Guru


Joined: 16 Nov 2015
Posts: 6440
Location: UK, London, just across the river..

PostPosted: Sat Jul 30, 2022 9:36    Post subject: Reply with quote
yep best to look at egc guide..
-also bear in mind some of the settings are probably not needed...as those guidelines are for an older firmware build...
-not bad idea to update to the current firmware build 49599...
and if you post OpenVPN output post it all...as its not clear where you loose connection...

I also noticed their guide is for port 443, so if you need to use another port you have to change it...to 1194 or whatever is used...

also inbound firewall on TUN is preferred option to use... Laughing
you can use Encryption Cipher:AES-256-GCM instead or even ChaChaPoly as those are a touch better

in general you don't have to open any ports..or at least i don't do that on my set ups... Rolling Eyes

_________________
Atheros
TP-Link WR740Nv1 ---DD-WRT 55630 WAP
TP-Link WR1043NDv2 -DD-WRT 55723 Gateway/DoT,Forced DNS,Ad-Block,Firewall,x4VLAN,VPN
TP-Link WR1043NDv2 -Gargoyle OS 1.15.x AP,DNS,QoS,Quotas
Qualcomm-Atheros
Netgear XR500 --DD-WRT 55779 Gateway/DoH,Forced DNS,AP Isolation,4VLAN,Ad-Block,Firewall,Vanilla
Netgear R7800 --DD-WRT 55819 Gateway/DoT,AD-Block,Forced DNS,AP&Net Isolation,x3VLAN,Firewall,Vanilla
Netgear R9000 --DD-WRT 55779 Gateway/DoT,AD-Block,AP Isolation,Firewall,Forced DNS,x2VLAN,Vanilla
Broadcom
Netgear R7000 --DD-WRT 55460 Gateway/SmartDNS/DoH,AD-Block,Firewall,Forced DNS,x3VLAN,VPN
NOT USING 5Ghz ANYWHERE
------------------------------------------------------
Stubby DNS over TLS I DNSCrypt v2 by mac913
Makokha1990
DD-WRT Novice


Joined: 30 Jul 2022
Posts: 6

PostPosted: Sat Jul 30, 2022 9:52    Post subject: Netgear R7000 DD-WRT v3.0-r48810 no internet after VPN conn Reply with quote
Hi

I don't lose my VPN connection at any point, but now I cannot establish any internet connection!

At first, I suspected the google browser, but all other browsers gave me the same error message. NO INTERNET

I tried the same with my iPhone over WiFi to check if my PC is telling me something wrong. Also, the mobile phone is confirming there is NO internet connection...
egc
DD-WRT Guru


Joined: 18 Mar 2014
Posts: 12889
Location: Netherlands

PostPosted: Sat Jul 30, 2022 10:11    Post subject: Reply with quote
Have a look at the OpenVPN Client setup guide
https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=327398

This is a sticky in this forum.

There is a paragraph about Cyberghost with updated settings.

After you have done that and still have trouble post a screenshot of the OpenVPN Setup page, contents of the Additional config and output of:
Code:
grep -i openvpn /var/log/messages

_________________
Routers:Netgear R7000, R6400v1, R6400v2, EA6900 (XvortexCFE), E2000, E1200v1, WRT54GS v1.
Install guide R6400v2, R6700v3,XR300:https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=316399
Install guide R7800/XR500: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=320614
Forum Guide Lines (important read):https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=324087
Makokha1990
DD-WRT Novice


Joined: 30 Jul 2022
Posts: 6

PostPosted: Sat Jul 30, 2022 11:13    Post subject: Netgear R7000 DD-WRT v3.0-r48810 no internet after VPN conn Reply with quote
Hi,

Thanks for the hints and provided links.

I have repeatedly tried to recreate and document the error pattern with the missing internet.

I did not change any parameters in the NetGear router or PC and suddenly had internet on my PC and also on the PC that uses the Dublin server. Strangely, however, I got a Belgian IP displayed with the command "iplocation.net".

After restarting my PC, the internet is no longer available. I continue to try to find a suitable configuration with the new documents and continue to test.
egc
DD-WRT Guru


Joined: 18 Mar 2014
Posts: 12889
Location: Netherlands

PostPosted: Sat Jul 30, 2022 13:00    Post subject: Reply with quote
Sorry I wasn't clear enough we need to see a screenshot of the OpenVPN Setup page (Services/VPN), and we need the contents of the Additional Config on that page.
_________________
Routers:Netgear R7000, R6400v1, R6400v2, EA6900 (XvortexCFE), E2000, E1200v1, WRT54GS v1.
Install guide R6400v2, R6700v3,XR300:https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=316399
Install guide R7800/XR500: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=320614
Forum Guide Lines (important read):https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=324087
Makokha1990
DD-WRT Novice


Joined: 30 Jul 2022
Posts: 6

PostPosted: Sat Jul 30, 2022 17:27    Post subject: Netgear R7000 DD-WRT v3.0-r48810 no internet after VPN conn Reply with quote
Hi,

here you go. I am sharing this here

additional config:


resolv-retry infinite
redirect-gateway def1
persist-key
persist-tun
nobind
cipher AES-256-CBC
ncp-disable
auth SHA256
ping 5
ping-exit 60
ping-timer-rem
explicit-exit-notify 2
script-security 2
remote-cert-tls server
route-delay 5
verb 4
the-joker
DD-WRT Developer/Maintainer


Joined: 31 Jul 2021
Posts: 2146
Location: All over YOUR webs

PostPosted: Sat Jul 30, 2022 17:30    Post subject: Reply with quote
From the screenshot thats at least a build from around 8 builds ago or more.
_________________
Saving your retinas from the burn!🔥
DD-WRT Inspired themes for routers
DD-WRT Inspired themes for the phpBB Forum
DD-WRT Inspired themes for the SVN Trac & FTP site
Join in for a chat @ #style_it_themes_public:matrix.org or #style_it_themes:discord

DD-WRT UI Themes Bug Reporting and Discussion thread

Router: ANus RT-AC68U E1 (recognized as C1)
Makokha1990
DD-WRT Novice


Joined: 30 Jul 2022
Posts: 6

PostPosted: Sat Jul 30, 2022 17:38    Post subject: Netgear R7000 DD-WRT v3.0-r48810 no internet after VPN conn Reply with quote
Hi,

I can find several posts in the forum that there is (was) an issue with DD-WRT firmware around July 2022. With newer Firmware the R7000 is restarting unexpectedly sometimes.

The router was delivered with that DD-WRT Firmware, and so I was afraid to update
the-joker
DD-WRT Developer/Maintainer


Joined: 31 Jul 2021
Posts: 2146
Location: All over YOUR webs

PostPosted: Sat Jul 30, 2022 17:53    Post subject: Reply with quote
Not all reports have issues, so it may be very well configuration dependent.

Its not like you cant backup your current settings, upgrade reset to defaults and reconfigure from scratch and see for yourself.

Its not like you cant return to the current build you have, reset to defaults and restore the backup from that build to return to current state you are in now.

But sure, let fear prevent you from doing anything in life. Good luck with that philosophy.

_________________
Saving your retinas from the burn!🔥
DD-WRT Inspired themes for routers
DD-WRT Inspired themes for the phpBB Forum
DD-WRT Inspired themes for the SVN Trac & FTP site
Join in for a chat @ #style_it_themes_public:matrix.org or #style_it_themes:discord

DD-WRT UI Themes Bug Reporting and Discussion thread

Router: ANus RT-AC68U E1 (recognized as C1)
egc
DD-WRT Guru


Joined: 18 Mar 2014
Posts: 12889
Location: Netherlands

PostPosted: Sat Jul 30, 2022 18:44    Post subject: Reply with quote
To recap you do not need to open any ports on the primary (what you call Magenta) router let alone disable the firewall (that could cause that the internet stops)

That is all rubbish.

My advice make sure that the Magenta router is working in its normal state.

Upgrade to the latest build 49599 (not necessary per se as this build should work also, but it is recommended)
Reset to defaults.
Do NOT restore from a backup, put settings in manually!!

Make sure you have got a working internet including your wifi do not forget to set a wifi password.

Then download the OpenVPN Client setup guide and start reading, start with the DNS settings and read the specific Cyberghost instructions.

I suggest not only reading but actually try those Smile
Those settings worked in the past, of course things could have changed so we cannot guarantee that it will work but at least it is better then what the VPN provider is telling you.

If you have setup according to these instructions reboot the router
After rebooting and waited for a couple of minutes look at the OpenVPN status page, if it does not show CONNECTED SUCCES and/or you do not have internet show output:
Code:
grep -i openvpn /var/log/messages
cat /var/log/messages
cat /tmp/openvpncl/openvpn.conf

_________________
Routers:Netgear R7000, R6400v1, R6400v2, EA6900 (XvortexCFE), E2000, E1200v1, WRT54GS v1.
Install guide R6400v2, R6700v3,XR300:https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=316399
Install guide R7800/XR500: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=320614
Forum Guide Lines (important read):https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=324087
Makokha1990
DD-WRT Novice


Joined: 30 Jul 2022
Posts: 6

PostPosted: Sun Jul 31, 2022 13:22    Post subject: Netgear R7000 DD-WRT v3.0-r48810 no internet after VPN conn Reply with quote
Hi,

Thank you so much for your professional support; everything is working as far as expected.

Big shame on the Cyberghost support team, but I am guilty as well; I should have come directly here!

Reading well, the Cyberghost config page shows that it was made for the following:

"Firmware: DD-WRT v3.0-r40900 std (09/04/19)
Hardware: Linksys WRT32x"

I still don't update my firmware, which works well with your guidelines and your available Cyberghost PDF setting.

Also, your hint to NOT mind any ports and Firewall settings where important, even the PDF on this site here is saying, "Do not use any firewall rules"

I also replaced the additional config settings with the ones from the PDF.

Thanks again; I will observe and keep posting if something can be optimised
egc
DD-WRT Guru


Joined: 18 Mar 2014
Posts: 12889
Location: Netherlands

PostPosted: Sun Jul 31, 2022 13:26    Post subject: Reply with quote
Great to hear it is working.

Glad we could help Smile

_________________
Routers:Netgear R7000, R6400v1, R6400v2, EA6900 (XvortexCFE), E2000, E1200v1, WRT54GS v1.
Install guide R6400v2, R6700v3,XR300:https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=316399
Install guide R7800/XR500: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=320614
Forum Guide Lines (important read):https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=324087
Display posts from previous:    Page 1 of 1
Post new topic   Reply to topic    DD-WRT Forum Index -> Advanced Networking All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You cannot download files in this forum