R7000 OSX VPN not working

[mahimahi524]

Followed the instructions on: http://kb.netgear.com/25389/Enabling-VPN-service-on-a-Nighthawk-router-using-a-MAC-OS-computer

Only getting the yellow message "waiting for server response."

Here is the log from Tunnelblick:

2017-02-01 15:30:36 *Tunnelblick: Established communication with OpenVPN

2017-02-01 15:30:36 OpenVPN 2.3.12 x86_64-apple-darwin [SSL (OpenSSL)] [LZO] [PKCS11] [MH] [IPv6] built on Nov 17 2016

2017-02-01 15:30:36 library versions: OpenSSL 1.0.2j  26 Sep 2016, LZO 2.09

2017-02-01 15:30:36 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:1337

2017-02-01 15:30:36 Need hold release from management interface, waiting...

2017-02-01 15:30:36 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:1337

2017-02-01 15:30:36 MANAGEMENT: CMD 'pid'

2017-02-01 15:30:36 MANAGEMENT: CMD 'state on'

2017-02-01 15:30:36 MANAGEMENT: CMD 'state'

2017-02-01 15:30:36 MANAGEMENT: CMD 'bytecount 1'

2017-02-01 15:30:36 MANAGEMENT: CMD 'hold release'

2017-02-01 15:30:36 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.

2017-02-01 15:30:36 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts

2017-02-01 15:30:36 Socket Buffers: R=[196724->196724] S=[9216->9216]

2017-02-01 15:30:36 MANAGEMENT: >STATE:1485991836,RESOLVE,,,

2017-02-01 15:30:36 UDPv4 link local: [undef]

2017-02-01 15:30:36 UDPv4 link remote: [AF_INET]72.194.208.188:12974

2017-02-01 15:30:36 MANAGEMENT: >STATE:1485991836,WAIT,,,

2017-02-01 15:30:36 *Tunnelblick: openvpnstart starting OpenVPN

2017-02-01 15:31:36 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)

2017-02-01 15:31:36 TLS Error: TLS handshake failed

2017-02-01 15:31:36 SIGUSR1[soft,tls-error] received, process restarting

2017-02-01 15:31:36 MANAGEMENT: >STATE:1485991896,RECONNECTING,tls-error,,

2017-02-01 15:31:36 MANAGEMENT: CMD 'hold release'

2017-02-01 15:31:36 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.

2017-02-01 15:31:36 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts

2017-02-01 15:31:36 Socket Buffers: R=[196724->196724] S=[9216->9216]

2017-02-01 15:31:36 MANAGEMENT: >STATE:1485991896,RESOLVE,,,

2017-02-01 15:31:36 UDPv4 link local: [undef]

2017-02-01 15:31:36 UDPv4 link remote: [AF_INET]72.194.208.188:12974

2017-02-01 15:31:36 MANAGEMENT: >STATE:1485991896,WAIT,,,

2017-02-01 15:32:36 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)

2017-02-01 15:32:36 TLS Error: TLS handshake failed

2017-02-01 15:32:36 SIGUSR1[soft,tls-error] received, process restarting

2017-02-01 15:32:36 MANAGEMENT: >STATE:1485991956,RECONNECTING,tls-error,,

2017-02-01 15:32:36 MANAGEMENT: CMD 'hold release'

2017-02-01 15:32:36 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.

2017-02-01 15:32:36 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts

2017-02-01 15:32:36 Socket Buffers: R=[196724->196724] S=[9216->9216]

2017-02-01 15:32:36 MANAGEMENT: >STATE:1485991956,RESOLVE,,,

2017-02-01 15:32:36 UDPv4 link local: [undef]

2017-02-01 15:32:36 UDPv4 link remote: [AF_INET]72.194.208.188:12974

2017-02-01 15:32:36 MANAGEMENT: >STATE:1485991956,WAIT,,,

2017-02-01 15:33:36 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)

2017-02-01 15:33:36 TLS Error: TLS handshake failed

2017-02-01 15:33:36 SIGUSR1[soft,tls-error] received, process restarting

2017-02-01 15:33:36 MANAGEMENT: >STATE:1485992016,RECONNECTING,tls-error,,

2017-02-01 15:33:36 MANAGEMENT: CMD 'hold release'

2017-02-01 15:33:36 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.

2017-02-01 15:33:36 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts

2017-02-01 15:33:36 Socket Buffers: R=[196724->196724] S=[9216->9216]

2017-02-01 15:33:36 MANAGEMENT: >STATE:1485992016,RESOLVE,,,

2017-02-01 15:33:36 UDPv4 link local: [undef]

2017-02-01 15:33:36 UDPv4 link remote: [AF_INET]72.194.208.188:12974

2017-02-01 15:33:36 MANAGEMENT: >STATE:1485992016,WAIT,,,

2017-02-01 15:34:36 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)

2017-02-01 15:34:36 TLS Error: TLS handshake failed

2017-02-01 15:34:36 SIGUSR1[soft,tls-error] received, process restarting

2017-02-01 15:34:36 MANAGEMENT: >STATE:1485992076,RECONNECTING,tls-error,,

2017-02-01 15:34:36 MANAGEMENT: CMD 'hold release'

2017-02-01 15:34:36 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.

2017-02-01 15:34:36 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts

2017-02-01 15:34:36 Socket Buffers: R=[196724->196724] S=[9216->9216]

2017-02-01 15:34:36 MANAGEMENT: >STATE:1485992076,RESOLVE,,,

2017-02-01 15:34:36 UDPv4 link local: [undef]

2017-02-01 15:34:36 UDPv4 link remote: [AF_INET]72.194.208.188:12974

2017-02-01 15:34:36 MANAGEMENT: >STATE:1485992076,WAIT,,,

2017-02-01 15:35:36 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)

2017-02-01 15:35:36 TLS Error: TLS handshake failed

2017-02-01 15:35:36 SIGUSR1[soft,tls-error] received, process restarting

2017-02-01 15:35:36 MANAGEMENT: >STATE:1485992136,RECONNECTING,tls-error,,

2017-02-01 15:35:36 MANAGEMENT: CMD 'hold release'

2017-02-01 15:35:36 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.

2017-02-01 15:35:36 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts

2017-02-01 15:35:36 Socket Buffers: R=[196724->196724] S=[9216->9216]

2017-02-01 15:35:36 MANAGEMENT: >STATE:1485992136,RESOLVE,,,

2017-02-01 15:35:36 UDPv4 link local: [undef]

2017-02-01 15:35:36 UDPv4 link remote: [AF_INET]72.194.208.188:12974

2017-02-01 15:35:36 MANAGEMENT: >STATE:1485992136,WAIT,,,

[shaunpyle · Accepted solution]

I actually figured it out. AT&T didn't properly set my modem in bridged mode like I'd asked them to. So the modem was giving my router a 192.168.1.x IP. 

After they changed the modem settings and my router got a public IP, I'm working.

[JamesGL]

Hi mahimahi524,

1. What is the firmware version of the router? Make sure to update it.

2. Reset the router to factory default and reconfigure. Regenerate a new certificate after the reset.

[JamesGL]

Hi mahimahi524,

We’d greatly appreciate hearing your feedback letting us know if you need further assistance.

[shaunpyle]

I have an R7800 and the exact issue. I've reset router, reconfigured everything and VPN still does not work.

Firmware is 

V1.0.2.20

[JamesGL]

Hi shaunpyle,

Can you provide me the logs of your OpenVPN.

[shaunpyle · Accepted solution]

I actually figured it out. AT&T didn't properly set my modem in bridged mode like I'd asked them to. So the modem was giving my router a 192.168.1.x IP. 

After they changed the modem settings and my router got a public IP, I'm working.

[shaunpyle]

Once agian, no VPN. The only thing that's changed since I used it last is that I updated the fw on my router to: 1.0.2.28.  Nothing changed on my ISP but now I no longer have VPN. It fails on TLS handshake

[JamesGL]

Hi shaunpyle,

Reset the router and generate a new certificate.

[JamesGL]

Hi shaunpyle,

We’d greatly appreciate hearing your feedback letting us know if you need further assistance.

[shaunpyle]

I gave up on it. Trying to set up VPN with your router is a nightmare. 

I installed another server just to handle VPN to my home.