R6700v3 OpenVPN not working

[Holmis]

Can not get OpenVPN to work... I have followed the instructions below.

see attached log file... something about "TLS error: Unsupported protocol."??

log

Regards

Holmis

[Kitsap]

For test purposes, suggest you try the configuration as shown in the attached screen snip.  After you make the changes, you will have to generate your client configuration files again and transfer them to the client.

Make sure you are testing your connection from a client device that is not connected to the same network where your router is running the OpenVPN server.

What type of device are you running the client application on?  Android, Windows, ??

[abdsea]

The issue is due to server TLS level is 1.0 and it is considered insecure. OpenVPN client calls it insecure mode. 

Go to settings -> advanced settings ->  choose "Insecure" and then retry connection. We will not be able to do much without netgear providing a firmware update to switch OpenVPN server settings to use TLS 1.3 or above. 

Changing UI settings will not solve the problem as suggested by prior post.

[Holmis]

Thank for the answer, but is it in the OpenVPN client I need to change or in the router?

I cant find any "Insecure" setting in my client or do you recommend a version of the client?

I use OpenVPN GUI or is there another better OpenVPN client?

regards

Stefan Holmgren

[Holmis]

Ok... downloaded "OpenVPN Connect" and found the advanced setting...

but now I cant import the profile?!?...

[Kitsap]

---

@Holmis wrote:

Ok... downloaded "OpenVPN Connect" and found the advanced setting...

but now I cant import the profile?!?...

---

Repeat question: What type of device are you running the client application on? Android, Windows, ??

I cannot see an inserted image until a moderator approves it.  If you attach an image, I can see it as soon as it is posted.

[abdsea]

can you post your profile trying to import? please blank out your domain name or other private information. The option file contains error without looking if i have to guess 

proto option has some invalid characters or some information. Proto can only be TCP or UDP please check that. For most VPN configuration you need to have this set to UDP so can tolerate some errors.  

[Holmis]

Hi... the profile looks like this.. (client1.ovpn)

------------------------------------

client
dev tap
proto udp
dev-node NETGEAR-VPN
remote xxx.xxx.xxx.xxx 12974
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert client.crt
key client.key
cipher AES-128-CBC
comp-lzo
verb 5

-------------------------------

regards

Stefan

[abdsea]

hi Stefan,

your profile looks good, apologies for missing it earlier. TAP mode is not supported on OpenVPN 3, i missed the TAP message from your screenshot. Try using the 2.x client from the download page https://openvpn.net/client/client-connect-vpn-for-windows/ 

thanks

[abdsea]

or the community download https://openvpn.net/community-downloads/

[Holmis]

Thanks a lot for helping me, but with this version I'm back where I started, my first post...

hmm... maybe you can find something in the log file, attached it as a pdf... (I removed domain name)

[abdsea]

did you change the insecure mode, if the option available?

second, you could try adding this in a new line "tlsversion-min 1.0" in your profile based on this error message

"If your OpenVPN client is between v2.3.6 and v2.3.2 try adding tlsversion-min 1.0 to the client configuration to use TLS 1.0+ instead of TLS 1.0 only "

[Holmis]

yes added "tls-version-min 1.0" to my profile, but still same error...

maybe I need an older version of OpenVPN GUI??... installed OpenVPN-2.6.6-I001-amd64

Regards

Holmis

[Holmis]

Now its working... downloaded an older version of OpenVPN... openvpn-install-2.4.6-I602

Regards

Holmis

[abdsea]

Glad you found the right client version, it should be simpler but an arduous effort 😂🤣