GL-AR750S-EXT and OpenVPN on 3.212 version

Routers
5

Hi
I’ve done a total conf reset e firmware upgrade.
Now:

  1. I’ve about 20 GL-AR750S-EXT in production with 3.025 firmware. The only (initial) problem I have is that, for exclude “normal” traffic from VPN, a patch is required. But all works FINE: I regularly access to all client node and to SSH server services (VPN routed subnets).
    (scenario “1” of attached file)
  2. On one of this router I’ve updated firmware to 3.212 and OpenVPN don’t works for version incompatibiliry with server
    (scenario “2” of attached file)
  3. Adding “data-ciphers BF-CBC” parameter to ovpn conf, OpenVPN connects to server … but (by default) all traffic is through VPN
    (scenario “3” of attached file)
  4. Initially all works fine … but after some seconds I cannot access to nodes and to server services.
  5. Only restarting router or restarting firewall (from OpenWrt Luci interface) all come to work for some time …
  6. Use of patch is another topic … I hope to avoid it using VPN Policies …

In summary:
On this firmware version it seems OpenVPN is unstable …

Detailed Server and client conf: GL.inet configurations.txt.zip (1.6 KB)

Thanks