Strange requirement for VPN activation

Question

Hi - I purchased Orbi mostly because of the VPN functionality. &nbsp;But right now I am not able to use it! &nbsp;I have a static IP address from my ISP, but it is required that I "Get dynamically from ISP". &nbsp;When I try to activate the VPN service, I get the message to use dynamic DNS service, or have a static IP address. Well - I have a static IP Address, I am just not able to put the settings on the router to "Static". &nbsp;Is there a workaround? &nbsp;I find this requirement very strange.... &nbsp;I have had other routers handling VPN that do not cause me&nbsp;these troubles...

mrmstn · Answer

I just was on the same position as you and just thought ... What .. the ... **bleep**. This restriction makes&nbsp;absolutely no sense.&nbsp;
This&nbsp;restriction should&nbsp;defentily be removed from the 'advanced' settings, given that advanced users should know about dynamic/static ips and dynamic dns
&nbsp;
For thouse&nbsp;who don't want to register for a silly ddns provider, here's a small codesnippet - just paste it in the browser web console (Developer Tools), this will overwrite the exiting check_openvpn function and lets you save the vpn settings (see line 5)
function check_openvpn(d) {
    var c = 0;
    var a = parseInt(d.vpn_port.value, 10);
    var b = parseInt(d.tun_vpn_port.value, 10);
    if (false) {
        if (old_endis_ddns != "1" &amp;&amp; (old_wan_assign == "0" || (old_wan_assign == "1" &amp;&amp; select_basic != "1")) &amp;&amp; !(pppoe_get_wan_assign == "1" &amp;&amp; info_get_wanproto == "pppoe")) {
            alert("Dynamic DNS service is suggested to be used alone with the VPN Service. Please make sure you will enable the Dynamic DNS service or use Static IP address for your Internet connection.");
            return false
        }
    }
    if (a &gt; 65534 || b &gt; 65534) {
        alert("The Service Port has to be less than or equal to 65534.");
        return false
    }
    if (d.enable_vpn.checked == true) {
        d.hidden_enable_vpn.value = 1
    } else {
        d.hidden_enable_vpn.value = 0
    }
    if (d.vpn_type[0].checked == true) {
        d.hidden_vpn_type.value = "udp"
    } else {
        if (d.vpn_type[1].checked == true) {
            d.hidden_vpn_type.value = "tcp"
        }
    }
    if (d.tun_vpn_type[0].checked == true) {
        d.hidden_tun_vpn_type.value = "udp"
    } else {
        if (d.tun_vpn_type[1].checked == true) {
            d.hidden_tun_vpn_type.value = "tcp"
        }
    }
    if (d.vpn_port.value == d.tun_vpn_port.value) {
        alert("Can't use the same port in TUN mode and TAP mode.");
        return false
    }
    d.hidden_vpn_port.value = d.vpn_port.value;
    d.hidden_tun_vpn_port.value = d.tun_vpn_port.value;
    if (d.vpn_access[0].checked == true) {
        d.hidden_vpn_access.value = "auto"
    } else {
        if (d.vpn_access[1].checked == true) {
            d.hidden_vpn_access.value = "all"
        } else {
            if (d.vpn_access[2].checked == true) {
                d.hidden_vpn_access.value = "home"
            }
        }
    }
    if ((d.enable_vpn.checked == true) &amp;&amp; ((check_all_port(a, d.hidden_vpn_type.value) == false) || (check_all_port(b, d.hidden_tun_vpn_type.value) == false))) {
        alert("The specified port(s) are being used by other configurations. Please check your configurations of USB Readyshare, Remote Management, Port forwarding, Port Triggering, UPnP Port Mapping table, RIP, and Internet connection type");
        return false
    }
    if (d.enable_vpn.checked == true &amp;&amp; backup_rsp == "") {
        d.hidden_backup_rspToPing.value = rspToPing_value
    }
    if ((d.hidden_vpn_type.value != type || d.hidden_vpn_port.value != port || d.hidden_vpn_access.value != access_mode || d.hidden_tun_vpn_type.value != tun_type || d.hidden_tun_vpn_port.value != tun_port) &amp;&amp; d.hidden_enable_vpn.value == 1) {
        alert("You have changed your VPN Service configurations, please follow the Step 2 and Step 3 to download and install the configuration files on each of your VPN client devices (overwrite existing configuration files).")
    }
    if (d.enable_vpn.checked == true &amp;&amp; select_basic == "0" &amp;&amp; ((internet_ppp_type == "0" &amp;&amp; wan_pppoe_demand == "1") || (internet_ppp_type == "1" &amp;&amp; wan_pptp_demand == "1") || (internet_ppp_type == "3" &amp;&amp; wan_mulpppoe_demand == "1") || (internet_ppp_type == "4" &amp;&amp; wan_l2tp_demand == "1"))) {
        if (confirm("If you enable the VPN service on your router, your router's Internet connection mode will change from Dial on Demand to Always On. This change is required for a VPN client to connect to your router. Do you want to continue?") == false) {
            return false
        }
    }
    if (d.enable_vpn.checked == true &amp;&amp; select_basic == "0" &amp;&amp; ((internet_ppp_type == "0" &amp;&amp; wan_pppoe_demand == "2") || (internet_ppp_type == "1" &amp;&amp; wan_pptp_demand == "2") || (internet_ppp_type == "3" &amp;&amp; wan_mulpppoe_demand == "2") || (internet_ppp_type == "4" &amp;&amp; wan_l2tp_demand == "2"))) {
        alert("If you enable the VPN service on your router, you need to change your router's Internet connection mode from Manually Connect to Always On in order for a VPN client to connect to your router. Go to the Internet Setup page to make this change.")
    }
    return true
}

ekhalil · Answer

Most ISPs require the WAN/Internet interface to run on dynamic DHCP, regardless if there will be a fixed address reserved to you.
I'd&nbsp;just sign-up for a free Netgear DDNS name regardless that you get a static address assigned on your Internet connection. This name will be used while generating your VPN config files.&nbsp;
&nbsp;

einarso · Answer

You are right - I guess that is what I have to do. &nbsp;Still a silly limitation in the Orbi system - especially as you say - most ISP expect to deliver IP information dynamically. &nbsp;My last router was a Cisco, and&nbsp;it did not have this silly restriction. &nbsp;There I could have the router to obtain IP dynamically, and then I just punched my static IP address into a field for the VPN settings.

mrmstn · Answer

I have to revert my latest answer, NETGEAR also added a check in the openvpn init.d script, which will prevent the openvpn server from starting without a ddns. heres what that check looks like:
        if [ "$($CONFIG get endis_ddns)" = "0" ] &amp;&amp; [ "$($CONFIG get wan_proto)" != "static" ] &amp;&amp; [ "$($CONFIG get wan_pppoe_wan_assign)" = "0" ]; then
                exit 1
        fi

I'm pretty sad that NETGEAR forces their customers to use their no-ip partner. This is a huge bumer for me
Good things is, if your a developer, you can "just" patch that check out of the firmware and flush it (... yeah, I'm not kidding - just because they had to add that check in a run script... )
The file is located under `package/dni/openvpn_dni/files/openvpn.init` and the check is on line 181
&nbsp;
This is so frustrating since I'm pretty happy with the Orbi

einarso · Answer

Does Netgear ever officially comment in the Forum? &nbsp;They should explain themselves regarding this issue.....

Forum Discussion

Strange requirement for VPN activation

8 Replies