NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
Shovel-SR
Apr 16, 2023Aspirant
Orbi RBK353 (350 with 2 satellites) VPN Error on Android mobile
Hi all, I just switched from a nighthawk R6800 to an Orbi RBK353 mesh (RBK350 router and 2 satellites). I am really pleased with the Orbi generally, except for the VPN service. The router F/w...
- Apr 16, 2023
Hi CrimpOn,
Thanks for the response. Your config is exactly the same as mine where it matters (obviously different server addresses etc - I use a NoIP DDNS pointing back to my router).
I have found a solution this afternoon though. Where the issue is, I still can't say especially as some users with OpenVPNConnect are fine, and others aren't.
The solution was to install another VPN client software, called "OpenVPN for Android" written by Arne Schwabe, and available on Google Play. While this is not my preferred option, as I would rather use the official app, it has solved the problem. It appears therefore that there is a bug in OpenVPN Connect. Odd, as other users are having no issues, and I didn't on my R6800. It only started once I had switched to the Orbi. I suspect that the "bug" is a mismatch between the Orbi server settings and OpenVPN Connect.
Interestingly, in order to eliminate a very similar issues on Windows, I had to add a line to the end of my config file:
Remote-cert-tls server
Whatever the issues are, the solution for Android is to install and use OpenVPN for Android, and not the official OpenVPN app.
Cheers
Shovel-SR
Apr 17, 2023Aspirant
I cant see that. All the lines with CN=netgear/name=EasyRSA are the same
CrimpOn
Apr 17, 2023Guru - Experienced User
Shovel-SR wrote:
I cant see that. All the lines with CN=netgear/name=EasyRSA are the same
Two of the lines in mine have CN=netgear CA and one has CN=client
- Shovel-SRApr 17, 2023Aspirant
I missed that. I have made the change and still get the error, stating that CN=netgear/name=changeme !!
I can't see where that is coming from, unless it is embedded in the cert itself...
- Shovel-SRApr 17, 2023Aspirant
Then other OpenVPN app has an edit function that decodes the certs, and it definitely shows name=changeme, on both the CA and the Client certs.
I think that is the problem. The implementation of the server scripts is incorrect on the Orbi
- Shovel-SRApr 17, 2023Aspirant
CrimpOn Thanks for all your help and efforts to resolve this issue. I think I am going to stick with using the OpenVPN for Android app, as it works no matter what the CN name is.
I have marked my earlier post as the solution, so anyone else with the same issues can hopefully go down the same road, and at least have a working VPN