NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.

Forum Discussion

elCuculuz's avatar
elCuculuz
Apprentice
Apr 29, 2020
Solved

NightHawk XR500 and MullvadVPN

Hello!   I got myself a new XR500 today and cant seem to figure out how to setup the VPN on it using MullvadVPN provider. I went on mullvad site and generated a config file but I dont have any idea...
  • Netduma-Fraser's avatar
    Netduma-Fraser
    Apr 30, 2020
    Can you try this instead please:
    client
    dev tun
    proto udp
    remote-random
    remote 31.170.22.2 1196
    cipher AES-256-CBC
    resolv-retry infinite
    nobind
    persist-key
    persist-tun
    verb 3
    remote-cert-tls server
    ping 10
    ping-restart 60
    sndbuf 524288
    rcvbuf 524288
    fast-io
    auth-user-pass
    reneg-sec 0
    <ca>
    -----BEGIN CERTIFICATE-----
    MIIGIzCCBAugAwIBAgIJAK6BqXN9GHI0MA0GCSqGSIb3DQEBCwUAMIGfMQswCQYD
    VQQGEwJTRTERMA8GA1UECAwIR290YWxhbmQxEzARBgNVBAcMCkdvdGhlbmJ1cmcx
    FDASBgNVBAoMC0FtYWdpY29tIEFCMRAwDgYDVQQLDAdNdWxsdmFkMRswGQYDVQQD
    DBJNdWxsdmFkIFJvb3QgQ0EgdjIxIzAhBgkqhkiG9w0BCQEWFHNlY3VyaXR5QG11
    bGx2YWQubmV0MB4XDTE4MTEwMjExMTYxMVoXDTI4MTAzMDExMTYxMVowgZ8xCzAJ
    BgNVBAYTAlNFMREwDwYDVQQIDAhHb3RhbGFuZDETMBEGA1UEBwwKR290aGVuYnVy
    ZzEUMBIGA1UECgwLQW1hZ2ljb20gQUIxEDAOBgNVBAsMB011bGx2YWQxGzAZBgNV
    BAMMEk11bGx2YWQgUm9vdCBDQSB2MjEjMCEGCSqGSIb3DQEJARYUc2VjdXJpdHlA
    bXVsbHZhZC5uZXQwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCifDn7
    5E/Zdx1qsy31rMEzuvbTXqZVZp4bjWbmcyyXqvnayRUHHoovG+lzc+HDL3HJV+kj
    xKpCMkEVWwjY159lJbQbm8kkYntBBREdzRRjjJpTb6haf/NXeOtQJ9aVlCc4dM66
    bEmyAoXkzXVZTQJ8h2FE55KVxHi5Sdy4XC5zm0wPa4DPDokNp1qm3A9Xicq3Hsfl
    LbMZRCAGuI+Jek6caHqiKjTHtujn6Gfxv2WsZ7SjerUAk+mvBo2sfKmB7octxG7y
    AOFFg7YsWL0AxddBWqgq5R/1WDJ9d1Cwun9WGRRQ1TLvzF1yABUerjjKrk89RCzY
    ISwsKcgJPscaDqZgO6RIruY/xjuTtrnZSv+FXs+Woxf87P+QgQd76LC0MstTnys+
    AfTMuMPOLy9fMfEzs3LP0Nz6v5yjhX8ff7+3UUI3IcMxCvyxdTPClY5IvFdW7CCm
    mLNzakmx5GCItBWg/EIg1K1SG0jU9F8vlNZUqLKz42hWy/xB5C4QYQQ9ILdu4ara
    PnrXnmd1D1QKVwKQ1DpWhNbpBDfE776/4xXD/tGM5O0TImp1NXul8wYsDi8g+e0p
    xNgY3Pahnj1yfG75Yw82spZanUH0QSNoMVMWnmV2hXGsWqypRq0pH8mPeLzeKa82
    gzsAZsouRD1k8wFlYA4z9HQFxqfcntTqXuwQcQIDAQABo2AwXjAdBgNVHQ4EFgQU
    faEyaBpGNzsqttiSMETq+X/GJ0YwHwYDVR0jBBgwFoAUfaEyaBpGNzsqttiSMETq
    +X/GJ0YwCwYDVR0PBAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQEL
    BQADggIBADH5izxu4V8Javal8EA4DxZxIHUsWCg5cuopB28PsyJYpyKipsBoI8+R
    XqbtrLLue4WQfNPZHLXlKi+A3GTrLdlnenYzXVipPd+n3vRZyofaB3Jtb03nirVW
    Ga8FG21Xy/f4rPqwcW54lxrnnh0SA0hwuZ+b2yAWESBXPxrzVQdTWCqoFI6/aRnN
    8RyZn0LqRYoW7WDtKpLmfyvshBmmu4PCYSh/SYiFHgR9fsWzVcxdySDsmX8wXowu
    Ffp8V9sFhD4TsebAaplaICOuLUgj+Yin5QzgB0F9Ci3Zh6oWwl64SL/OxxQLpzMW
    zr0lrWsQrS3PgC4+6JC4IpTXX5eUqfSvHPtbRKK0yLnd9hYgvZUBvvZvUFR/3/fW
    +mpBHbZJBu9+/1uux46M4rJ2FeaJUf9PhYCPuUj63yu0Grn0DreVKK1SkD5V6qXN
    0TmoxYyguhfsIPCpI1VsdaSWuNjJ+a/HIlKIU8vKp5iN/+6ZTPAg9Q7s3Ji+vfx/
    AhFtQyTpIYNszVzNZyobvkiMUlK+eUKGlHVQp73y6MmGIlbBbyzpEoedNU4uFu57
    mw4fYGHqYZmYqFaiNQv4tVrGkg6p+Ypyu1zOfIHF7eqlAOu/SyRTvZkt9VtSVEOV
    H7nDIGdrCC9U/g1Lqk8Td00Oj8xesyKzsG214Xd8m7/7GmJ7nXe5
    -----END CERTIFICATE-----
    </ca>
    tls-cipher TLS-DHE-RSA-WITH-AES-256-GCM-SHA384:TLS-DHE-RSA-WITH-AES-256-CBC-SHA

    Try m as the password if it doesn't work otherwise.
elCuculuz's avatar
elCuculuz
Apprentice
Apr 30, 2020
Netduma-Fraser wrote:
Could you provide the error log on the Hybrid VPN page from when it doesn't connect please, that might provide more of a clue as to why it isn't working.

 

I just had a look at the log section and it is empty not a single line of code 

 

information page shows 

 

This is when I enter to config file to advanced section.

 

ProviderN/A
Username4653212572406
CountryN/A
CityN/A
ProtocolN/A
Status        FAILED    


And this is when I tried to use my firends HMA VPN , now it shows some logs but connection still fail.

https://ibb.co/DKL4mrR

 

Netduma-Fraser's avatar
Netduma-Fraser
NetDuma Partner
Apr 30, 2020
Can you try this instead please:
client
dev tun
proto udp
remote-random
remote 31.170.22.2 1196
cipher AES-256-CBC
resolv-retry infinite
nobind
persist-key
persist-tun
verb 3
remote-cert-tls server
ping 10
ping-restart 60
sndbuf 524288
rcvbuf 524288
fast-io
auth-user-pass
reneg-sec 0
<ca>
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
</ca>
tls-cipher TLS-DHE-RSA-WITH-AES-256-GCM-SHA384:TLS-DHE-RSA-WITH-AES-256-CBC-SHA

Try m as the password if it doesn't work otherwise.
  • elCuculuz's avatar
    elCuculuz
    Apprentice
    Apr 30, 2020


    omg thank you so much !!

     

    This worked and now it is connected ! if I plan on changing a server what do I need to look out for to make it work again just copy the conf above the sert ?

     

  • Netduma-Fraser's avatar
    Netduma-Fraser
    NetDuma Partner
    Apr 30, 2020
    Great to hear that! If you want another server download the files as usual and then look for the remote line with the IP like this one remote 31.170.22.2 1196 and then just replace this line in this config with the line from the new config. Don't change anything else.
  • elCuculuz's avatar
    elCuculuz
    Apprentice
    Apr 30, 2020

    just one more question about the vpn and router . 

     

    I applied on the  VPN traffic (Do not VPN these services ) but  looking at my IP nothing has changed ? 

     

    how do I make sure or how to test that the vpn is tunneling my connection .

     

     

     

    Disregard this question , it took a few minutes and is displayng now the spoofed ip.

    Netduma-Fraser wrote:
    Great to hear that! If you want another server download the files as usual and then look for the remote line with the IP like this one remote 31.170.22.2 1196 and then just replace this line in this config with the line from the new config. Don't change anything else.

     

  • elCuculuz's avatar
    elCuculuz
    Apprentice
    May 01, 2020
    Can you help me a bit regarding the IPs , I downloaded many config files to use diffrent servers with the router to see what has the best ping/connection/speed but I cant seem to find the IP to swap ``like this one 31.170.22.2 1196`` the config file does not have , it says only this in the downloaded file (remote-cert-tls server).
     

     

     
     
  • Netduma-Fraser's avatar
    Netduma-Fraser
    NetDuma Partner
    May 01, 2020
    Post the contents of the file and I can have a look.
  • elCuculuz's avatar
    elCuculuz
    Apprentice
    May 01, 2020

    Thank you for helping me , here are the contents of them .

     

    FINLAND

     

    client
    dev tun
    resolv-retry infinite
    nobind
    persist-key
    persist-tun
    verb 3
    remote-cert-tls server
    ping 10
    ping-restart 60
    sndbuf 524288
    rcvbuf 524288
    cipher AES-256-CBC
    tls-cipher TLS-DHE-RSA-WITH-AES-256-GCM-SHA384:TLS-DHE-RSA-WITH-AES-256-CBC-SHA
    proto udp
    auth-user-pass mullvad_userpass.txt
    ca mullvad_ca.crt
    service mullvadopenvpn
    block-outside-dns
    remote-random
    remote fi-hel-001.mullvad.net 1196
    remote fi-hel-005.mullvad.net 1196
    remote fi-hel-002.mullvad.net 1196
    remote fi-hel-004.mullvad.net 1196
    remote fi-hel-003.mullvad.net 1196
    remote fi-hel-007.mullvad.net 1196
    remote fi-hel-006.mullvad.net 1196

     

    FRANCE

     

    client
    dev tun
    resolv-retry infinite
    nobind
    persist-key
    persist-tun
    verb 3
    remote-cert-tls server
    ping 10
    ping-restart 60
    sndbuf 524288
    rcvbuf 524288
    cipher AES-256-CBC
    tls-cipher TLS-DHE-RSA-WITH-AES-256-GCM-SHA384:TLS-DHE-RSA-WITH-AES-256-CBC-SHA
    proto udp
    auth-user-pass mullvad_userpass.txt
    ca mullvad_ca.crt
    service mullvadopenvpn
    block-outside-dns
    remote-random
    remote de-fra-101.mullvad.net 1301
    remote de-fra-103.mullvad.net 1301
    remote de-fra-006.mullvad.net 1301
    remote de-fra-007.mullvad.net 1301
    remote de-fra-003.mullvad.net 1301
    remote de-fra-008.mullvad.net 1301
    remote de-fra-014.mullvad.net 1301
    remote de-fra-009.mullvad.net 1301
    remote de-fra-010.mullvad.net 1301
    remote de-fra-005.mullvad.net 1301
    remote de-fra-011.mullvad.net 1301
    remote de-fra-004.mullvad.net 1301
    remote de-fra-012.mullvad.net 1301
    remote de-fra-102.mullvad.net 1301
    remote de-fra-001.mullvad.net 1301
    remote de-fra-013.mullvad.net 1301
    remote de-fra-015.mullvad.net 1301
    remote de-fra-002.mullvad.net 1301

     

    NORWAY

     

    client
    dev tun
    resolv-retry infinite
    nobind
    persist-key
    persist-tun
    verb 3
    remote-cert-tls server
    ping 10
    ping-restart 60
    sndbuf 524288
    rcvbuf 524288
    cipher AES-256-CBC
    tls-cipher TLS-DHE-RSA-WITH-AES-256-GCM-SHA384:TLS-DHE-RSA-WITH-AES-256-CBC-SHA
    proto udp
    auth-user-pass mullvad_userpass.txt
    ca mullvad_ca.crt
    service mullvadopenvpn
    block-outside-dns
    remote-random
    remote no-osl-007.mullvad.net 1301
    remote no-osl-005.mullvad.net 1301
    remote no-osl-001.mullvad.net 1301
    remote no-osl-006.mullvad.net 1301
    remote no-osl-003.mullvad.net 1301
    remote no-osl-008.mullvad.net 1301
    remote no-osl-004.mullvad.net 1301
    remote no-osl-002.mullvad.net 1301

     

    London

     

    client
    dev tun
    resolv-retry infinite
    nobind
    persist-key
    persist-tun
    verb 3
    remote-cert-tls server
    ping 10
    ping-restart 60
    sndbuf 524288
    rcvbuf 524288
    cipher AES-256-CBC
    tls-cipher TLS-DHE-RSA-WITH-AES-256-GCM-SHA384:TLS-DHE-RSA-WITH-AES-256-CBC-SHA
    proto udp
    auth-user-pass mullvad_userpass.txt
    ca mullvad_ca.crt
    service mullvadopenvpn
    block-outside-dns
    remote-random
    remote gb-lon-014.mullvad.net 1196
    remote gb-lon-013.mullvad.net 1196
    remote gb-lon-009.mullvad.net 1196
    remote gb-lon-008.mullvad.net 1196
    remote gb-lon-002.mullvad.net 1196
    remote gb-lon-202.mullvad.net 1196
    remote gb-lon-010.mullvad.net 1196
    remote gb-lon-012.mullvad.net 1196
    remote gb-lon-007.mullvad.net 1196
    remote gb-lon-003.mullvad.net 1196
    remote gb-lon-004.mullvad.net 1196
    remote gb-lon-006.mullvad.net 1196
    remote gb-lon-201.mullvad.net 1196
    remote gb-lon-011.mullvad.net 1196
    remote gb-lon-001.mullvad.net 1196
    remote gb-lon-005.mullvad.net 1196

     

     

  • Netduma-Fraser's avatar
    Netduma-Fraser
    NetDuma Partner
    May 01, 2020
    You can take the remote lines that have .mullvad.net etc and copy the entire line and replace the remote ip line in the config I gave you to change the server.
  • elCuculuz's avatar
    elCuculuz
    Apprentice
    May 01, 2020

    A huge thanks again ,it worked , something that simple and i missed it .....

  • elCuculuz's avatar
    elCuculuz
    Apprentice
    May 01, 2020

    I did some tests here and it seems that my DNS is leaking and my dns requests are exposed using a browser .

    The IP is changed but I cant access geo blocked sites while using the routers hybridvpn, switching hybrid  off and using the vpn app on windows it comes back safe .

    is this reported and will this be fixed in the future .

     

  • Netduma-Fraser's avatar
    Netduma-Fraser
    NetDuma Partner
    May 02, 2020
    Yes it is something we're aware of, in Internet Setup use the DNS of the VPN and then it will work, not ideal but it works until we can do a fix.