Upon launching the OpenVPN client, I consistently receive the below error msg.: Thu Dec 29 18:52:21 2022 WARNING: Compression for receiving enabled. Compression has been used in the past to break encryption. Sent packets are not compressed unless "allow-compression yes" is also set.Thu Dec 29 18:52:21 2022 DEPRECATED OPTION: --cipher set to 'AES-128-CBC' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM). Future OpenVPN version will ignore --cipher for cipher negotiations. Add 'AES-128-CBC' to --data-ciphers or change --cipher 'AES-128-CBC' to --data-ciphers-fallback 'AES-128-CBC' to silence this warning. Below is my configuration:Router Firmware Version: V1.0.13.128Router Model: NETGEAR Nighthawk RAX70 AX6600OpenVPN Version:v2.5.8DDNS Provider: NoIPOS: Win 11 (21H2) Not sure what is causing the issue.

filosad wrote:Upon launching the OpenVPN client, I consistently receive the below error msg.: Thu Dec 29 18:52:21 2022 WARNING: Compression for receiving enabled. Compression has been used in the past to break encryption. Sent packets are not compressed unless "allow-compression yes" is also set.Thu Dec 29 18:52:21 2022 DEPRECATED OPTION: --cipher set to 'AES-128-CBC' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM). Future OpenVPN version will ignore --cipher for cipher negotiations. Add 'AES-128-CBC' to --data-ciphers or change --cipher 'AES-128-CBC' to --data-ciphers-fallback 'AES-128-CBC' to silence this warning. Below is my configuration:Router Firmware Version: V1.0.13.128Router Model: NETGEAR Nighthawk RAX70 AX6600OpenVPN Version:v2.5.8DDNS Provider: NoIPOS: Win 11 (21H2) Not sure what is causing the issue.From what? What device do your have the OpenVPN client application installed on? Phone? Computer? Tablet? How is the device connected to the internet? What is the modem/gateway/ONT (optical network terminal) that is connected upstream of your RAX70?

Happy New Year !!! The answers to your questions are as follows: From what? What device do your have the OpenVPN client application installed on?OpenVPN is installed on a Win11 (22H2) notebook. Attempting to use this notebook from a remote location to connect to my internal hosts. How is the device connected to the internet?Connected notebook to hotspot on my phone so I would NOT be on the same network/subnet when attempting to test OpenVPN. What is the modem/gateway/ONT (optical network terminal) that is connected upstream of your RAX70?I am using a Verizon G1100 connected to the WAN port of the Netgear RAX70. I hope I was able to answer all of your questions.Thanks

filosad wrote:Happy New Year !!! The answers to your questions are as follows: From what? What device do your have the OpenVPN client application installed on?OpenVPN is installed on a Win11 (22H2) notebook. Attempting to use this notebook from a remote location to connect to my internal hosts. How is the device connected to the internet?Connected notebook to hotspot on my phone so I would NOT be on the same network/subnet when attempting to test OpenVPN. Good. What is the modem/gateway/ONT (optical network terminal) that is connected upstream of your RAX70?I am using a Verizon G1100 connected to the WAN port of the Netgear RAX70. I hope I was able to answer all of your questions.Thanks I found mixed information about your Verizon G1100. Does it connect to a coax cable or optical fiber to get internet access? It appears the Verizon G1100 is a combination device, Modem or ONT and Wi-Fi router. Please confirm the input type and if there are multiple Ethernet output ports? If it is a combination device, when you connect your RAX70 downstream you are cascading two routers on the same LAN. That configuration is problematic and will have to be connected. See here: https://kb.netgear.com/30186/What-is-double-NAT-and-why-is-it-bad Due to the capability of your RAX70, you would be better off to configure your Verizon G1100 into bridge mode. This configuration should disable the router and Wi-Fi functions and use the device as a modem/ONT to feed your RAX70.

f it is a combination device, when you connect your RAX70 downstream you are cascading two routers on the same LAN. That configuration is problematic and will have to be connected corrected . See here: https://kb.netgear.com/30186/What-is-double-NAT-and-why-is-it-bad

Thank you for your quick response. I found mixed information about your Verizon G1100. Does it connect to a coax cable or optical fiber to get internet access?The Verizon ONT is connected via optical. There is a copper connection between the Verizon G1100 and the WAN port of the RAX70. It appears the Verizon G1100 is a combination device, Modem or ONT and Wi-Fi router. Please confirm the input type and if there are multiple Ethernet output ports?Your are correct in that the Verizon G1100 is a combination device Router/Access Point. I am using the Verizon G1100 in bridge mode. If it is a combination device, when you connect your RAX70 downstream you are cascading two routers on the same LAN. That configuration is problematic and will have to be connected. See here: https://kb.netgear.com/30186/What-is-double-NAT-and-why-is-it-badMy configuration is as follows:1. Fiber connection from Verizon to the ONT.2. Verizon ONT via copper connection to the WAN port of the Netgear RAX703. From the RAX70, use one (1) of the copper ports to connect to my network switch.4. There is also a MOCA connection which I am using for my STB's. Due to the capability of your RAX70, you would be better off to configure your Verizon G1100 into bridge mode. This configuration should disable the router and Wi-Fi functions and use the device as a modem/ONT to feed your RAX70. Please let me know if I miss something.

OpenVPN Connection Issue | NETGEAR Communities

13 Replies

Kitsap
Master
Dec 31, 2022
filosad wrote:
Upon launching the OpenVPN client, I consistently receive the below error msg.:

Thu Dec 29 18:52:21 2022 WARNING: Compression for receiving enabled. Compression has been used in the past to break encryption. Sent packets are not compressed unless "allow-compression yes" is also set.
Thu Dec 29 18:52:21 2022 DEPRECATED OPTION: --cipher set to 'AES-128-CBC' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM). Future OpenVPN version will ignore --cipher for cipher negotiations. Add 'AES-128-CBC' to --data-ciphers or change --cipher 'AES-128-CBC' to --data-ciphers-fallback 'AES-128-CBC' to silence this warning.

Below is my configuration:
Router Firmware Version: V1.0.13.128
Router Model: NETGEAR Nighthawk RAX70 AX6600
OpenVPN Version:v2.5.8
DDNS Provider: NoIP
OS: Win 11 (21H2)

Not sure what is causing the issue.
From what? What device do your have the OpenVPN client application installed on?

Phone? Computer? Tablet? How is the device connected to the internet?

What is the modem/gateway/ONT (optical network terminal) that is connected upstream of your RAX70?
- filosad
  Aspirant
  Jan 01, 2023
  Happy New Year !!!
  
  The answers to your questions are as follows:
  
  From what? What device do your have the OpenVPN client application installed on?
  OpenVPN is installed on a Win11 (22H2) notebook. Attempting to use this notebook from a remote location to connect to my internal hosts.
  
  How is the device connected to the internet?
  Connected notebook to hotspot on my phone so I would NOT be on the same network/subnet when attempting to test OpenVPN.
  
  What is the modem/gateway/ONT (optical network terminal) that is connected upstream of your RAX70?
  I am using a Verizon G1100 connected to the WAN port of the Netgear RAX70.
  
  I hope I was able to answer all of your questions.
  Thanks
  - Kitsap
    Master
    Jan 01, 2023
    filosad wrote:
    Happy New Year !!!
    
    The answers to your questions are as follows:
    
    From what? What device do your have the OpenVPN client application installed on?
    OpenVPN is installed on a Win11 (22H2) notebook. Attempting to use this notebook from a remote location to connect to my internal hosts.
    
    How is the device connected to the internet?
    Connected notebook to hotspot on my phone so I would NOT be on the same network/subnet when attempting to test OpenVPN. Good.
    
    What is the modem/gateway/ONT (optical network terminal) that is connected upstream of your RAX70?
    I am using a Verizon G1100 connected to the WAN port of the Netgear RAX70.
    
    I hope I was able to answer all of your questions.
    Thanks
    
    I found mixed information about your Verizon G1100. Does it connect to a coax cable or optical fiber to get internet access?
    
    It appears the Verizon G1100 is a combination device, Modem or ONT and Wi-Fi router. Please confirm the input type and if there are multiple Ethernet output ports?
    
    If it is a combination device, when you connect your RAX70 downstream you are cascading two routers on the same LAN. That configuration is problematic and will have to be connected. See here: https://kb.netgear.com/30186/What-is-double-NAT-and-why-is-it-bad
    
    Due to the capability of your RAX70, you would be better off to configure your Verizon G1100 into bridge mode. This configuration should disable the router and Wi-Fi functions and use the device as a modem/ONT to feed your RAX70.

Forum Discussion

OpenVPN Connection Issue