NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
NCoastJack
Jul 25, 2025Guide
RBR850 OpenVPN After Factory Reset
I've had my setup of an RBR850 & 2 RBS750 satellites for a few years now. Have mostly worked great. I also have OpenVPN using DDNS working just fine so I could occasionally connect from my iPhone to ...
- Jul 30, 2025
Thanks for your participation in this thread. So, I did some review this morning and finally got it to work.
I ended up turning off UPNP (since I have a couple of port forwards set) and, turned off DMZ for a particular IP address.And poof - it started working. Surprising to me, because neither of the VPN UDP ports were included in any of the above - unless the DMZ caused the conflict?
I'm pretty sure I turned UPNP off and tested it previously - but, maybe I didn't give it enough time. Who knows. Happy its working now though and I'm making notes & a backup for future reference.
CrimpOn
Jul 29, 2025Guru - Experienced User
It is annoying that Netgear provides no diagnostic information on the router for OpenVPN.
I connected from an Android phone just now and found that the log file on the OpenVPN Connect client includes a LOT of steps:
[Jul 29, 2025, 14:02:11] EVENT: CANCELLED
[Jul 29, 2025, 14:02:11] EVENT: DISCONNECTED
[Jul 29, 2025, 14:02:11] Tunnel bytes per CPU second: 0
[Jul 29, 2025, 14:02:11] ----- OpenVPN Stop -----
[Jul 29, 2025, 14:02:11] EVENT: CORE_THREAD_DONE
[Jul 29, 2025, 14:03:57] ----- OpenVPN Start -----
[Jul 29, 2025, 14:03:57] EVENT: CORE_THREAD_ACTIVE
[Jul 29, 2025, 14:03:57] OpenVPN core 3.11.1(3.git::fbda4753:RelWithDebInfo) android arm64 64-bit PT_PROXY
[Jul 29, 2025, 14:03:57] Frame=512/2112/512 mssfix-ctrl=1250
[Jul 29, 2025, 14:03:57] NOTE: This configuration contains options that were not used:
[Jul 29, 2025, 14:03:57] Unsupported option (ignored)
[Jul 29, 2025, 14:03:57] 0 [resolv-retry] [infinite]
[Jul 29, 2025, 14:03:57] 1 [persist-key]
[Jul 29, 2025, 14:03:57] 2 [persist-tun]
[Jul 29, 2025, 14:03:57] EVENT: RESOLVE
[Jul 29, 2025, 14:03:57] Contacting 172.249.112.236:12973 via UDP
[Jul 29, 2025, 14:03:57] EVENT: WAIT
[Jul 29, 2025, 14:03:57] Connecting to [bednarhouse.mynetgear.com]:12973 (172.249.112.236) via UDP
[Jul 29, 2025, 14:03:57] EVENT: CONNECTING
[Jul 29, 2025, 14:03:57] Tunnel Options:V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-128-CBC,auth SHA1,keysize 128,key-method 2,tls-client
[Jul 29, 2025, 14:03:57] Creds: UsernameEmpty/PasswordEmpty
[Jul 29, 2025, 14:03:57] Sending Peer Info:
IV_VER=3.11.1
IV_PLAT=android
IV_NCP=2
IV_TCPNL=1
IV_PROTO=8094
IV_MTU=1600
IV_CIPHERS=AES-128-CBC:AES-192-CBC:AES-256-CBC:AES-128-GCM:AES-192-GCM:AES-256-GCM:CHACHA20-POLY1305
IV_LZO=1
IV_AUTO_SESS=1
IV_GUI_VER=net.openvpn.connect.android_3.7.1-10568
IV_SSO=webauth,crtext
[Jul 29, 2025, 14:03:57] SSL Handshake: peer certificate: CN=server, 1024 bit RSA, cipher: ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 Kx=ECDH Au=RSA Enc=AESGCM(256) Mac=AEAD
[Jul 29, 2025, 14:03:57] Session is ACTIVE
[Jul 29, 2025, 14:03:57] Sending PUSH_REQUEST to server...
[Jul 29, 2025, 14:03:57] EVENT: GET_CONFIG
[Jul 29, 2025, 14:03:57] OPTIONS:
0 [dhcp-option] [DNS] [192.168.1.1]
1 [route-gateway] [192.168.2.1]
2 [topology] [subnet]
3 [ping] [10]
4 [ping-restart] [120]
5 [redirect-gateway] [def1]
6 [ifconfig] [192.168.2.2] [255.255.255.0]
7 [peer-id] [0]
8 [cipher] [AES-256-GCM]
9 [block-ipv6]
10 [block-ipv4]
[Jul 29, 2025, 14:03:57] PROTOCOL OPTIONS:
key-derivation: OpenVPN PRF
compress: LZO
data channel: cipher AES-256-GCM, peer-id 0
[Jul 29, 2025, 14:03:57] EVENT: ASSIGN_IP
[Jul 29, 2025, 14:03:57] Connected via tun
[Jul 29, 2025, 14:03:57] LZO-ASYM init swap=0 asym=1
[Jul 29, 2025, 14:03:57] EVENT: CONNECTED info='xxxxxx.mynetgear.com:12973 (xxx.249.112.236) via /UDP on tun/192.168.2.2/ gw=[192.168.2.1/] mtu=(default)' trans=TO_CONNECTED
[Jul 29, 2025, 14:03:57] EVENT: COMPRESSION_ENABLED info='Asymmetric compression enabled. Server may send compressed data. This may be a potential security issue.' trans=TO_DISCONNECTED