R8500 OpenVPN 3.4.0 not working

[baforer1954]

I updated the OpenVPN app on my iPhone to 3.4.0 and now I get an unsupported option error when I try to connect. It says something about a server only option. I looked at the configuration files but don’t see anything about server only option. Does anyone have a fix for this?

[baforer1954 · Accepted solution]

I received a DM from a NETGEAR representative and was told that the RAXE300 currently does not support OpenVPN 3.4.0. An update will be coming but there currently is no timetable for it. I was told that the RAXE500 and RS700 currently do work with OpenVPN 3.4.0

[schumaku]

Before fixing or changing anything, figure what might cause this error.

FMI List of supported/unsupported config directives for clients with OpenVPN core version 3.8 + 

[baforer1954]

The unsupported option is push.
In the ovpn file is the following
sndbuf 393216
rcvbuf 393216
push “sndbuf 393216”
push “rcvbuf 393216”

[schumaku]

Comment the push lines in the config file for the moment.

OpenVPN does as a quick fix the availability of older versions to install.

OpenVPN Connect app: "Connection Failed. Unknown/unsupported options present in configuration."

Either way, Netgear seems to have has some massive backlog updating the OpenVPN implementation on virtually all routers supporting OpenVPN, including the generated (suggested) config blocks on all devices following the OVPN 3.4 ff. requirements. @DarrenM (all Nighthawk), @DavidGo (all Orbi), and probably even @BH-C ref. the new RS700 ...

[baforer1954]

I removed the push lines and then I get TLS version too low error.

I can’t load an older version of the client as this is on an iPhone.

‘Thanks for your help but it looks like I need to wait and see if Netgear ever updates the firmware on an R8500 to fix this.

[FURRYe38]

Information about what NG products have reached End of Service life:

https://www.netgear.com/about/eos/

[baforer1954]

Well it looks like the R8500 won’t be getting an update.
That is too bad because I have been real happy with this router and it still meets my needs.

[FURRYe38]

Might try using the routers DMZ for any VPN configurations that might help avoid any router involvement as a last resort kind of check. 

[baforer1954]

Does anyone know if the RAXE300/AXE7800 firmware supports iOS OpenVPN 3.4.0 client?

[FURRYe38]

Might post about that here in this forum:

https://community.netgear.com/t5/Nighthawk-with-WiFi-6-AX-and/bd-p/en-home-routers-nighthawk-wifi-ax...

Check here as well:

https://www.netgear.com/search/?query=vpn&referrerPageUrl=https%3A%2F%2Fwww.netgear.com%2Fsupport%2F...

[baforer1954 · Accepted solution]

I received a DM from a NETGEAR representative and was told that the RAXE300 currently does not support OpenVPN 3.4.0. An update will be coming but there currently is no timetable for it. I was told that the RAXE500 and RS700 currently do work with OpenVPN 3.4.0

[baforer1954]

OpenVPN 3.4.1 addresses the unsupported option issue.