NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
OpenVPN Connection Issue
Upon launching the OpenVPN client, I consistently receive the below error msg.: Thu Dec 29 18:52:21 2022 WARNING: Compression for receiving enabled. Compression has been used in the past to break...
filosad wrote:Upon launching the OpenVPN client, I consistently receive the below error msg.:
Thu Dec 29 18:52:21 2022 WARNING: Compression for receiving enabled. Compression has been used in the past to break encryption. Sent packets are not compressed unless "allow-compression yes" is also set.
Thu Dec 29 18:52:21 2022 DEPRECATED OPTION: --cipher set to 'AES-128-CBC' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM). Future OpenVPN version will ignore --cipher for cipher negotiations. Add 'AES-128-CBC' to --data-ciphers or change --cipher 'AES-128-CBC' to --data-ciphers-fallback 'AES-128-CBC' to silence this warning.
Below is my configuration:
Router Firmware Version: V1.0.13.128
Router Model: NETGEAR Nighthawk RAX70 AX6600
OpenVPN Version:v2.5.8
DDNS Provider: NoIPOS: Win 11 (21H2)
Not sure what is causing the issue.
From what? What device do your have the OpenVPN client application installed on?
Phone? Computer? Tablet? How is the device connected to the internet?
What is the modem/gateway/ONT (optical network terminal) that is connected upstream of your RAX70?
Happy New Year !!!
The answers to your questions are as follows:
From what? What device do your have the OpenVPN client application installed on?
OpenVPN is installed on a Win11 (22H2) notebook. Attempting to use this notebook from a remote location to connect to my internal hosts.
How is the device connected to the internet?
Connected notebook to hotspot on my phone so I would NOT be on the same network/subnet when attempting to test OpenVPN.
What is the modem/gateway/ONT (optical network terminal) that is connected upstream of your RAX70?
I am using a Verizon G1100 connected to the WAN port of the Netgear RAX70.
I hope I was able to answer all of your questions.
Thanks
filosad wrote:Happy New Year !!!
The answers to your questions are as follows:
From what? What device do your have the OpenVPN client application installed on?
OpenVPN is installed on a Win11 (22H2) notebook. Attempting to use this notebook from a remote location to connect to my internal hosts.
How is the device connected to the internet?
Connected notebook to hotspot on my phone so I would NOT be on the same network/subnet when attempting to test OpenVPN. Good.
What is the modem/gateway/ONT (optical network terminal) that is connected upstream of your RAX70?
I am using a Verizon G1100 connected to the WAN port of the Netgear RAX70.
I hope I was able to answer all of your questions.
Thanks
I found mixed information about your Verizon G1100. Does it connect to a coax cable or optical fiber to get internet access?
It appears the Verizon G1100 is a combination device, Modem or ONT and Wi-Fi router. Please confirm the input type and if there are multiple Ethernet output ports?
If it is a combination device, when you connect your RAX70 downstream you are cascading two routers on the same LAN. That configuration is problematic and will have to be connected. See here: https://kb.netgear.com/30186/What-is-double-NAT-and-why-is-it-bad
Due to the capability of your RAX70, you would be better off to configure your Verizon G1100 into bridge mode. This configuration should disable the router and Wi-Fi functions and use the device as a modem/ONT to feed your RAX70.
f it is a combination device, when you connect your RAX70 downstream you are cascading two routers on the same LAN. That configuration is problematic and will have to be
connectedcorrected . See here: https://kb.netgear.com/30186/What-is-double-NAT-and-why-is-it-badThank you for your quick response.
I found mixed information about your Verizon G1100. Does it connect to a coax cable or optical fiber to get internet access?
The Verizon ONT is connected via optical. There is a copper connection between the Verizon G1100 and the WAN port of the RAX70.
It appears the Verizon G1100 is a combination device, Modem or ONT and Wi-Fi router. Please confirm the input type and if there are multiple Ethernet output ports?
Your are correct in that the Verizon G1100 is a combination device Router/Access Point. I am using the Verizon G1100 in bridge mode.
If it is a combination device, when you connect your RAX70 downstream you are cascading two routers on the same LAN. That configuration is problematic and will have to be connected. See here: https://kb.netgear.com/30186/What-is-double-NAT-and-why-is-it-bad
My configuration is as follows:
1. Fiber connection from Verizon to the ONT.
2. Verizon ONT via copper connection to the WAN port of the Netgear RAX70
3. From the RAX70, use one (1) of the copper ports to connect to my network switch.
4. There is also a MOCA connection which I am using for my STB's.
Due to the capability of your RAX70, you would be better off to configure your Verizon G1100 into bridge mode. This configuration should disable the router and Wi-Fi functions and use the device as a modem/ONT to feed your RAX70.
Please let me know if I miss something.
Not all manufacturers have the same definition of bridge mode. You should check with Verizon support or their help forums for details on connecting a downstream router with their ONT in bridge mode.
Neither of the error messages your are receiving with your OpenVPN connection should prevent a connection. Do they?
If the error messages are bothering you, they contain good information that can be used to adjust your configuration files. The configuration files are text files and can be edited with Notepad or other text editors. Adjusting a configuration file for a computer is a different animal from adjusting a configuration file for a mobile device. Recommend you start with the computer first. If connected, close the connection and exit the OpenVPN client application before editing the configuration files.