[SOLVED] OpenVPN + ProtonVPN issue?

Post new topic   Reply to topic    DD-WRT Forum Index -> Advanced Networking
Goto page 1, 2  Next
Author Message
missddwrt
DD-WRT Novice


Joined: 22 Aug 2024
Posts: 15

PostPosted: Fri Oct 11, 2024 18:16    Post subject: [SOLVED] OpenVPN + ProtonVPN issue? Reply with quote
Mod Note: Split from New Build - 10/09/2024 - r58531 (Marvell) -kp69
Monza wrote:
Router/Version: Linksys WRT1200ac v1
File/Kernel: r58531 Linux 6.1.112-rt28 #749 SMP Wed Oct 9 03:49:37 +07 2024 armv7l
Previous/Reset: r58389 No reset
Mode/Status: Gateway,VPN,Stable
Issues/Errors: None (other than no OpenVPN connect)


Can someone please debug and fix the OpenVPN + ProtonVPN issue? Otherwise, can someone give me instructions how to debug the issue?
Sponsor
Monza
DD-WRT Guru


Joined: 01 Jul 2018
Posts: 536

PostPosted: Fri Oct 11, 2024 20:04    Post subject: Reply with quote
missddwrt wrote:
Can someone please debug and fix the OpenVPN + ProtonVPN issue? Otherwise, can someone give me instructions how to debug the issue?


I have yet to resolve the OpenVPN ProtonVpn setup issue. I can suggest doing as I did and setup a ProtonVPN Wireguard tunnel.You will find a speed increase but Wireguard has its cons as well. Still it's better than not having a functional VPN. I'll attach a photo of my setup page. I have my Roku's on static leases thru the WAN so ignore that.

There may never be a fix for the OpenVPN Proton config as it differs from the usual VPN config so this may be the only option other than going to another VPN provider with the standard setup config. (Edit: Yet ProtonVPN OpenVPN config worked great on r57956 and older firmware)

BTW, if anyone has suggestion for a better more secure Wireguard setup please share

Basic Wireguard review - https://vpncentral.com/wireguard-vpn-protocol/

Proton Wireguard info - https://protonvpn.com/blog/whats-the-best-vpn-protocol/

*******************************************************************************

IMHO Best/Easiest Overall Guide on DD-WRT Proton Wireguard setup - https://support.flashrouters.com/dd-wrt/wireguard-setup/protonvpn-wireguard-setup/

How to download Wireguard config files from Proton - https://protonvpn.com/support/wireguard-configurations/



WireGuardTunnel.jpg
 Description:
 Filesize:  313.09 KB
 Viewed:  5525 Time(s)

WireGuardTunnel.jpg


ewo32
DD-WRT User


Joined: 11 Nov 2023
Posts: 203

PostPosted: Fri Oct 11, 2024 21:05    Post subject: Reply with quote
Helps to read the instructions first if you expect bugs to be fixed Smile

Quote:
Please report findings with steps needed to reproduce, configuration, clients, output, logs and important information below!


Quote:
Important:
• Detail issues & relevant configs, logs: syslog klog 'dmesg' 'cat /tmp/var/log/messages' nvram set console_debug=1, serial.
• Firewall NAT: 'iptables -vnL' 'iptables -t nat -vnL' 'iptables -t mangle -vnL' & 'cat /tmp/.ipt'. Debug Analyze: strace tcpdump.
• Gremlins: reboot. cold boot. Reset & reconfigure not restore backup. Search Trac & discuss in forum before opening tickets.
• Include operating & wireless modes (e.g. Gateway, Router, AP, SB, WDS, Mesh) and applicable configurations to reproduce.


Also, its been mentioned elsewhere that BS prefers serial logs, apparently... and to not expect a fix without a log.
Monza
DD-WRT Guru


Joined: 01 Jul 2018
Posts: 536

PostPosted: Fri Oct 11, 2024 22:23    Post subject: Reply with quote
ewo32 wrote:
Helps to read the instructions first if you expect bugs to be fixed


Golly Gee, I never thought of reading the instructions !!!

I actually don't believe it will be fixed as it doesn't affect many people. Thanks again for you insight =)
kernel-panic69
DD-WRT Guru


Joined: 08 May 2018
Posts: 17101
Location: Texas, USA

PostPosted: Fri Oct 11, 2024 22:38    Post subject: Reply with quote
It may not be anything in DD-WRT, whatsoever. It could be on Proton's end. But without verbose logging from the OpenVPN client, etc., there's only so much that can be surmised. Configuration details and the documentation from ProtonVPN may help come to a conclusion. Wouldn't be the first time that a vendor's instructions for DD-WRT were bunk.
_________________
"Life is but a fleeting moment, a vapor that vanishes quickly; All is vanity"
Contribute To DD-WRT
Pogo - A minimal level of ability is expected and needed...
RSS feed for DD-WRT releases (2025)
RSS feed for DD-WRT releases (2024)
RSS feed for DD-WRT releases (2023)

----------------------
Linux User #377467 counter.li.org / linuxcounter.net
ewo32
DD-WRT User


Joined: 11 Nov 2023
Posts: 203

PostPosted: Fri Oct 11, 2024 22:40    Post subject: Reply with quote
@Monza I doubt its reasonable to expect a dev to invest the effort to find a fix, if the persons noting the absence of a fix are themselves unwilling to invest the effort to provide a config or log. As for "not impacting many people", you said elsewhere that this "impacts many people". Insightful to see the self contradiction ? Very Happy
Monza
DD-WRT Guru


Joined: 01 Jul 2018
Posts: 536

PostPosted: Fri Oct 11, 2024 23:13    Post subject: Reply with quote
@ewo32

Awww . . . you made me cry =D
kernel-panic69
DD-WRT Guru


Joined: 08 May 2018
Posts: 17101
Location: Texas, USA

PostPosted: Mon Oct 14, 2024 19:37    Post subject: Reply with quote
Due to https://svn.dd-wrt.com/ticket/7793, I opted to split this discussion out of the Marvell build thread because:
egc wrote:
Please post your problem in Advanced Networking forum so that we can discuss it.

Post the necessary information as outlined in the troubleshooting section of the OpenVPN Client setup guide.

I use proton as we speak without any problems.

_________________
"Life is but a fleeting moment, a vapor that vanishes quickly; All is vanity"
Contribute To DD-WRT
Pogo - A minimal level of ability is expected and needed...
RSS feed for DD-WRT releases (2025)
RSS feed for DD-WRT releases (2024)
RSS feed for DD-WRT releases (2023)

----------------------
Linux User #377467 counter.li.org / linuxcounter.net
egc
DD-WRT Guru


Joined: 18 Mar 2014
Posts: 13879
Location: Netherlands

PostPosted: Tue Oct 15, 2024 7:43    Post subject: Reply with quote
Thanks @kernel-panic69 now waiting for the necessary information.

As said I am using Proton as we speak, and although the free servers are often overcrowded, especially the "stealth" ports 80 and 443, resulting in AUTH fail, it works.
NL free servers usually are less overcrowded Smile

_________________
Routers:Netgear R7000, R6400v1, R6400v2, EA6900 (XvortexCFE), E2000, E1200v1, WRT54GS v1.
Install guide R6400v2, R6700v3,XR300:https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=316399
Install guide R7800/XR500: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=320614
Forum Guide Lines (important read):https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=324087
missddwrt
DD-WRT Novice


Joined: 22 Aug 2024
Posts: 15

PostPosted: Fri Oct 18, 2024 16:55    Post subject: Reply with quote
ewo32 wrote:
@Monza I doubt its reasonable to expect a dev to invest the effort to find a fix, if the persons noting the absence of a fix are themselves unwilling to invest the effort to provide a config or log. As for "not impacting many people", you said elsewhere that this "impacts many people". Insightful to see the self contradiction ? Very Happy


I'm willing to put in as much effort as needed to fix this. @Monza I can't use wireguard. I need a TCP connection.

kernel-panic69 wrote:
It may not be anything in DD-WRT, whatsoever. It could be on Proton's end. But without verbose logging from the OpenVPN client, etc., there's only so much that can be surmised. Configuration details and the documentation from ProtonVPN may help come to a conclusion. Wouldn't be the first time that a vendor's instructions for DD-WRT were bunk.


r57956 and the previous versions work. ProtonVPN + OpenVPN connection is broken since r58070

OpenVPN verb 6 LOGS: https://pastebin.com/raw/eb2yLmGZ

Verb 7 or higher is not supported by this build. In the logs the VPN tried to connect to 2 different servers. Let me know if you guys need me to get more logs.


Last edited by missddwrt on Fri Oct 18, 2024 17:09; edited 1 time in total
kernel-panic69
DD-WRT Guru


Joined: 08 May 2018
Posts: 17101
Location: Texas, USA

PostPosted: Fri Oct 18, 2024 17:07    Post subject: Reply with quote
Pretty sure the troubleshooting section also mentions configuration screenshots, or implies that you share that information.
_________________
"Life is but a fleeting moment, a vapor that vanishes quickly; All is vanity"
Contribute To DD-WRT
Pogo - A minimal level of ability is expected and needed...
RSS feed for DD-WRT releases (2025)
RSS feed for DD-WRT releases (2024)
RSS feed for DD-WRT releases (2023)

----------------------
Linux User #377467 counter.li.org / linuxcounter.net
missddwrt
DD-WRT Novice


Joined: 22 Aug 2024
Posts: 15

PostPosted: Fri Oct 18, 2024 17:17    Post subject: Reply with quote
kernel-panic69 wrote:
Pretty sure the troubleshooting section also mentions configuration screenshots, or implies that you share that information.


Router/Version:linksys-wrt1900acsv2

Exactly this configuration is broken since r58070: https://protonvpn.com/support/vpn-router-ddwrt/.

I use the conf above with TCP on port 443 and killswitch enabled. That conf is broken as well
egc
DD-WRT Guru


Joined: 18 Mar 2014
Posts: 13879
Location: Netherlands

PostPosted: Fri Oct 18, 2024 17:34    Post subject: Reply with quote
Start with adding this to the OpenVPN Additional config:
Code:
disable-dco


Reboot the router and show
• From the CLI (telnet/Putty) view/send openvpn log: grep -i openvpn /var/log/messages
• From the CLI (telnet/Putty) view/send: cat /tmp/openvpncl/openvpn.conf
• Post pictures of OpenVPN Setup page and Status page (whole page)
• Post content of Additional Config on OpenVPN Setup page


P.S. are you using the free version of Proton?

P.P.S. For Proton see the OpenVPN client setup guide, you can simply import the settings file and then set username and password.

_________________
Routers:Netgear R7000, R6400v1, R6400v2, EA6900 (XvortexCFE), E2000, E1200v1, WRT54GS v1.
Install guide R6400v2, R6700v3,XR300:https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=316399
Install guide R7800/XR500: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=320614
Forum Guide Lines (important read):https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=324087
missddwrt
DD-WRT Novice


Joined: 22 Aug 2024
Posts: 15

PostPosted: Sat Oct 19, 2024 15:16    Post subject: Reply with quote
egc wrote:

P.S. are you using the free version of Proton?


Paid

egc wrote:

P.P.S. For Proton see the OpenVPN client setup guide, you can simply import the settings file and then set username and password.


I know. I use this exact conf: https://protonvpn.com/support/vpn-router-ddwrt/. I can pay BTC in advance to get me the debug logs, if you want to.

egc wrote:
Start with adding this to the OpenVPN Additional config:
Code:
disable-dco


Reboot the router and show
• From the CLI (telnet/Putty) view/send openvpn log: grep -i openvpn /var/log/messages
• From the CLI (telnet/Putty) view/send: cat /tmp/openvpncl/openvpn.conf
• Post pictures of OpenVPN Setup page and Status page (whole page)
• Post content of Additional Config on OpenVPN Setup page


I already struggle getting into the router. I can't enable telnet or ssh for some reason.

It's required to enable telnet or ssh in dd-wrt settings?



Screenshot from 2024-10-19 14-43-05.png
 Description:
 Filesize:  15.24 KB
 Viewed:  5405 Time(s)

Screenshot from 2024-10-19 14-43-05.png


egc
DD-WRT Guru


Joined: 18 Mar 2014
Posts: 13879
Location: Netherlands

PostPosted: Sat Oct 19, 2024 15:19    Post subject: Reply with quote
Telnet should be enabled by default you can enable SSH on the Services Tab
username is always: root
password is the password you use for the GUI

_________________
Routers:Netgear R7000, R6400v1, R6400v2, EA6900 (XvortexCFE), E2000, E1200v1, WRT54GS v1.
Install guide R6400v2, R6700v3,XR300:https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=316399
Install guide R7800/XR500: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=320614
Forum Guide Lines (important read):https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=324087
Goto page 1, 2  Next Display posts from previous:    Page 1 of 2
Post new topic   Reply to topic    DD-WRT Forum Index -> Advanced Networking All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You cannot download files in this forum