NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.

Forum Discussion

Bas-C's avatar
Bas-C
Aspirant
Dec 26, 2022

OPENVPN can't connect to R7800

Dear Community,

 

I have been running a openVPN connection with my netgear R7800 successfully for a long time but now that my Nighthawk has been updated to 1.0.2.92 I can't seem to get openVPN to work. I was using an older version of openvpn but also the 11.31.0.0/2.5.8 version can't connect.

 

I get the following messages in openvpn

 

Mon Dec 26 13:06:15 2022 WARNING: Compression for receiving enabled. Compression has been used in the past to break encryption. Sent packets are not compressed unless "allow-compression yes" is also set.
Mon Dec 26 13:06:15 2022 DEPRECATED OPTION: --cipher set to 'AES-128-CBC' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM). Future OpenVPN version will ignore --cipher for cipher negotiations. Add 'AES-128-CBC' to --data-ciphers or change --cipher 'AES-128-CBC' to --data-ciphers-fallback 'AES-128-CBC' to silence this warning.

I copied the config files I downloaded from my nighthawk

 

I hope somebody can answer my question quickly

5 Replies

  • Kitsap's avatar
    Kitsap
    Master
    Dec 26, 2022
    Bas-C wrote:

    Dear Community,

     

    I have been running a openVPN connection with my netgear R7800 successfully for a long time but now that my Nighthawk has been updated to 1.0.2.92 I can't seem to get openVPN to work. I was using an older version of openvpn but also the 11.31.0.0/2.5.8 version can't connect.

     

    I get the following messages in openvpn

     

    Mon Dec 26 13:06:15 2022 WARNING: Compression for receiving enabled. Compression has been used in the past to break encryption. Sent packets are not compressed unless "allow-compression yes" is also set.
    Mon Dec 26 13:06:15 2022 DEPRECATED OPTION: --cipher set to 'AES-128-CBC' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM). Future OpenVPN version will ignore --cipher for cipher negotiations. Add 'AES-128-CBC' to --data-ciphers or change --cipher 'AES-128-CBC' to --data-ciphers-fallback 'AES-128-CBC' to silence this warning.

    I copied the config files I downloaded from my nighthawk

     

    I hope somebody can answer my question quickly

    What type of client device are you using to try to connect to the router via OpenVPN?

     

    If you are trying to connect with a windows device, did your copy all four of the new configuration files to the correct directory?

     

    Did you make any changes to the VPN settings in the router after you downloaded the configuration files?

     

    If you are trying to connect with a mobile device, you have to import the profile in to the application after you copy the configuration files.

     

    Are you using a DDNS (Dynamic Domain Name Servier) service?  Which one?

     

     

     

     

    • Bas-C's avatar
      Bas-C
      Aspirant
      Jan 03, 2023
      Dear Kitsap,

      I'm trying to connect with Windows 11 device. After downloading config files I copy them to the OpenVPN folder, connect my laptop to external internet connection and try to connect but no bytes are being received.
      • Kitsap's avatar
        Kitsap
        Master
        Jan 03, 2023
        Bas-C wrote:
        Dear Kitsap,

        I'm trying to connect with Windows 11 device. After downloading config files I copy them to the OpenVPN folder, connect my laptop to external internet connection and try to connect but no bytes are being received.

        OpenVPN has gone through some updates recently.  On the configuration for the router, I found the TCP mode for service type worked better and also to allow access to all sites on the internet & Home Network.

         

        When you connect your Windows 11 device to the internet via an external connection, the IP address you are coming from can vary from time to time.  I recommend using a DDNS (Dynamic Domain Name Server) configuration on your router.  Netgear offers a free service, but you get what you pay for.  NoIP is the one I use and I have found it to be reliable.

         

        Any time you make a change to the VPN configuration on your router you have to generate a new set of configuration files and update your client device.  Some users forget to unzip the new configuration files.  Have also found it important to have only one set of configuration files in the client device configuration directory.

         

        Experience has also shown some Wi-Fi locations, restaurant, hotel, airport, etc. have their systems programmed to block VPN access.