Re: D6400 VPN config fails with OpenVPN

steve-t · ‎2019-04-11

Hi, I've tried too many times (to mention) enabling VPN on my D6400.. I drop the Netgear generated windows zip (config files) onto my laptop. & populate in correct location (for OpenVPN). I jump onto another a public WiFi with my laptop but fail miserably with OpenVPN to connect. nb I've adjusted the config to use my assigned IP address (confirmed via a ping) + temp url ( I signed up for free host name (via hopto.org) + I upgraded to the latest firmware V1.0.0.86_1.0.86. Tried again... no joy.... nb initially with my attempts I get the ' no server certificate verification method' via the logs. However, when I add (in the config file) 'remote-cert-tls-server' .. I see via View Log 'Enter management Password:'?

I'm a little confused as to what password is referred to here(ie my laptop user or Netgear admin password etc?). And if valid where/how is this to be entered?

nb... Looking on my D6400 Netgear router (the log) I dont see any interaction.

I confess to losing the plot a little on this one... so looking for divine guidance, inspiration... or someone who has documented the next steps or best approach.

Appreciate any input

DexterJB · ‎2019-04-17

Hi @steve-t,

Welcome to the community!

Usually, the steps described here work for most. Let us know if the issue persists.

Dexter

steve-t · ‎2019-04-18

Hi Dexter,

Appreciate you taking time out to respond. I've been using these instructions verbatim with each attempt. I dont necessarily download (every time) the Windows config (Netgear zip file) nb. I assume it's constant. I did download (reinstall) when I change from UDP to TCP. My initial attempts were with the previous firmware version (last november). I thought I'd read somewhere (via the community blogs) some issue with OpenVPN & md5... which was why I pulled the latest firmware & tried reinstalling, but to no avail?

steve-t · ‎2019-04-22

Further to earlier response to Dexter, I searched further and found (via OpenVPN) I should run the following :

openssl rsa -in client.key -out client.key

This removed the request for the password!

I then attempt to connect but it just sits there? nb via Netgear router Log I see nothing. Here's the log from OpenVPN:-

===========================================

Mon Apr 22 22:23:35 2019 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Mon Apr 22 22:23:35 2019 Re-using SSL/TLS context
Mon Apr 22 22:23:35 2019 LZO compression initializing
Mon Apr 22 22:23:35 2019 Control Channel MTU parms [ L:1656 D:1210 EF:40 EB:0 ET:0 EL:3 ]
Mon Apr 22 22:23:35 2019 Data Channel MTU parms [ L:1656 D:1450 EF:124 EB:412 ET:32 EL:3 ]
Mon Apr 22 22:23:35 2019 Local Options String (VER=V4): 'V4,dev-type tap,link-mtu 1592,tun-mtu 1532,proto TCPv4_CLIENT,comp-lzo,cipher AES-128-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Mon Apr 22 22:23:35 2019 Expected Remote Options String (VER=V4): 'V4,dev-type tap,link-mtu 1592,tun-mtu 1532,proto TCPv4_SERVER,comp-lzo,cipher AES-128-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Mon Apr 22 22:23:35 2019 TCP/UDP: Preserving recently used remote address: [AF_INET]86.142.249.126:12974
Mon Apr 22 22:23:35 2019 Socket Buffers: R=[65536->65536] S=[64512->64512]
Mon Apr 22 22:23:35 2019 Attempting to establish TCP connection with [AF_INET]86.142.249.126:12974 [nonblock]
Mon Apr 22 22:23:35 2019 MANAGEMENT: >STATE:1555968215,TCP_CONNECT,,,,,,

=================================

Got the feeling I've been here before (last November) & gave up..

nb running OpenVPN on Windows 10 laptop... Thinking of trying with Apple Macbook, but no enthusiasm to dig myself an even bigger hole!

DexterJB · ‎2019-04-30

Hi @steve-t, I have sent you a message. Please check your inbox.

Dexter

jcheeseman757 · ‎2019-05-21

AC1

Hello, I am also having this issue, please could you advise?

steve-t · ‎2019-05-21

Hi,

Dexter arranged remote session for me with Netgear technician. Ran through normal procedure (encountered same error) then took full diagnostics etc. This has now been passed to Netgear engineers & wait for for an update or s/w fix. Meanwhile I can only suggest you hold off until Netgear engineers respond unless Dexter is able to provide further update.

Steve

Kheiry · ‎2019-06-21

Hi,

Any update on this? I have the same issue. Before updating the firmware, I was able to activate VPN and used OpenVPN. Once, updated to V1.0.0.86, there's no option to even set VPN. When I ran my OpenVPN client, it gave me the same error as above.

Cheers!

jcheeseman757 · ‎2019-06-21

Hi,

Have you tried restoring the firmware back to factory settings and see if the option is avaliable? I had this issue where the option to set VPN to on was missing but restoring it back to factory brought it back! Sometimes it updates the VPN certificate which can cause issues for the firmware. Make sure you backup the settings before you restore it back to factory otherwise you will need to set the whole router up again which is doable.

Hope this helps.

steve-t · ‎2019-06-21

Hi,

Netgear got back to me.. it appears VPN support dropped out in subsequent release. As an interim they've suggested I load release version1.0.0.78. Meanwhile they will update when they have the fix in the latest release. I have only just downloaded the release so unable to comment on success or otherwise, but hope to this weekend. Steve

steve-t · ‎2019-06-21

Hi,

Just a quick update on my success using OpenVPN and D6400 with v1.0.0.78.

I downloaded this release as recommended by Netgear support. And hey presto having switched to this version (+ the download to my laptop) restarted OpenVPN & straight in within a couple of minutes all up/running... it's taken several months, but now a happy bunny! Steve

Kheiry · ‎2019-06-21

Awesome! I shall try it later. Thank you so much for the update!