Failing to connect OpenVPN to home router

I have a home router with openVPN on it. I can connect through the android openVPN app. However, using the MT300am it refuses to complete a connection with the below messages (stops here and just waits forever):

/usr/sbin/ip route add via
/usr/sbin/ip route add via
/usr/sbin/ip route add via
/usr/sbin/ip route add via
Initialization Sequence Complete

I can connect to a commercial server, so what is going on?

Not entirely sure what you are trying to do, since details are flaky…but you only need one instance of the VPN running - either on the device (eg. PC, phone) or on the router, not both.

I’m trying to set it up so the router will handle the VPN for any device connecting, and not require every device to have the software installed. My home router has Tomato installed, with OpenVPN running as a server. I’m using the MT300A as a travel router, and want to connect through it to my home network to access resources on the home network. The phone install was just to confirm I had the settings correct. I’m using a TLS 1024 bit key to connect, so I can have multiple devices in theory. Most of the time it’ll only be one at a time.

So the setup I want is:
MT300A (VPN Client) –> Hotel Wifi ==> Tomato Router (VPN Server) –> Home Network
|- Tablet and other devices

To be clear, what I’m mostly looking for is debug advice. If someone knows why it connects then stops at “Initialization sequence complete” that would be great. If not, where should I be looking for more information about what is going wrong?

can you use “ifconfig” to check the status of “tun0” interfaces?

If you can modify the server configures, try simpler settings.

I don’t have Tomato, but I have a Asus router working as a server.

ifconfig gives:

tap0 Link encap:Ethernet HWaddr 2E:10:07:B4:CE:98 inet6 addr: fe80::2c10:7ff:feb4:ce98%7700648/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:8 errors:0 dropped:0 overruns:0 frame:0 TX packets:7 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:100 RX bytes:746 (746.0 B) TX bytes:738 (738.0 B)
What are you thinking for "simpler settings"? Change the encryption? It works when I use OpenVPN from my (windows) laptop...

I also attached my current opvn configuration. Sorry, should have done that before.

Tried to simplify, changed over to the TUN just to see if it would help. Can’t switch to UDP, it doesn’t seem to reach my server.

server config:
# Automatically generated configuration
proto tcp-server
port 1194
dev tun21
cipher AES-128-CBC
comp-lzo yes
keepalive 15 60
verb 3
ca ca.crt
dh dh.pem
cert server.crt
key server.key
status-version 2
status status

Custom Configuration

Client config:
dev tun
;dev tap
proto tcp
remote 1194
resolv-retry infinite
ca “/etc/openvpn/cert/201707235040-ca.crt”
cert “/etc/openvpn/cert/201707235040-MobileRouter.crt”
key “/etc/openvpn/cert/201707235040-MobileRouter.key”
ns-cert-type server
;cipher AES-256-CBC
cipher AES-128-CBC
verb 4
;mute 20

The tun from ifconfig:
tun0 Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
inet addr: P-t-P: Mask:
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:100
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)

And finally, the routes that don’t seem to complete:

Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
default UG 20 0 0 wlan-sta UGH 0 0 0 tun0 * UH 0 0 0 tun0 * U 0 0 0 br-lan * U 20 0 0 wlan-sta * UH 20 0 0 wlan-sta

(The is the router I am on.)

I think the problem is using " ; " to comment out lines in configuration files.

This bug is fixed in newest firmware v2.261 and now you can upgrade online. Please don’t reserve settings and have a fresh start.

Actually, got it working. Sorry, I’m traveling and got it working only two days ago while actually on the road.


The trick seems to be with capitalizing things. I changed everything to lower case and it started working. I suspect it just needed to be the key, crt, etc. and the ovpn file was okay. But I’m still traveling and now depending on the router and don’t want to mess things up. The same for the firmware update – I’m a bit scared to change it when my internet depends on the system working.


Thank you for your advice! I appreciate you looking at things.

@jp316, good to hear that. Have a nice trip.