GL-MT1300 openvpn config TLS handshake failed but config works on other devices

paulvin · 2022-09-15T03:49:44.357Z

I am trying to use my openvpn config on the Beryl router. The TCP connection gets established but TLS handshake keeps failing.
The router is on repeater mode using the hotel wifi. I tried using TCP port 80 and TCP port 443 but it still wont work using both the Beta 3.215 and Stable 3.211 firmware.

If i am correct the router is using openvpn version 2.5.2. I simulated the event by also installing openvpn 2.5.2 on my windows computer and TSL handshake also fails

I can confirm that the config works on a windows laptop (version 2.7.2 & 3.3.6) and an android phone on their native application connected to the Beryl router on repeater mode using the hotel wifi.

Can you help me out if there is a router/config setting that i need to change on the server/client side or a way to update the openvpn? I was hoping to connect to the vpn without installing openvpn on all my devices.

tlshandshakefailed1173×647 400 KB

doczenith1 · 2022-09-15T04:10:59.386Z

Make sure the router is using a DNS server that is not behind the VPN. The router will need to connect to the internet and set its clock before it can make the VPN connection.

paulvin · 2022-09-15T04:37:27.370Z

i have manually set the dns servers and the router does indeed connect to the internet except im not behind the vpn.

alzhao · 2022-09-15T10:33:46.563Z

paulvin:

i have manually set the dns servers and the router does indeed connect

Do you mean it works now or not?

paulvin · 2022-09-15T14:47:54.606Z

Unfortunately the vpn still doesnt connect.

alzhao · 2022-09-15T15:18:54.746Z

Can you where to get such a config or send me a working config directly?

paulvin · 2022-09-16T01:11:52.314Z

I got the config by running the bash script from here for ubuntu

GitHub

GitHub - Nyr/openvpn-install: OpenVPN road warrior installer for Ubuntu,...

OpenVPN road warrior installer for Ubuntu, Debian, AlmaLinux, Rocky Linux, CentOS and Fedora - GitHub - Nyr/openvpn-install: OpenVPN road warrior installer for Ubuntu, Debian, AlmaLinux, Rocky Linu...

I used the config on a VM instance on Google Cloud Compute which i have deleted yesterday.
The openvpn config works on the Beryl Router if i use a different internet connection.

Here is the config

client
dev tun
proto tcp
remote --ipaddress-- 443
resolv-retry infinite
nobind
persist-key
persist-tun
remote-cert-tls server
auth SHA512
cipher AES-256-CBC
ignore-unknown-option block-outside-dns
block-outside-dns
verb 3
-----certificates ommitted-------

I will make a new VM instance and send you the config directly but unfortunately im still a new user so I cant message you yet.

alzhao · 2022-09-16T03:43:47.902Z

paulvin:

The openvpn config works on the Beryl Router if i use a different internet connection.

This seems that a problem caused by the network. But need to check further.

Leo · 2022-09-21T03:07:18.029Z

Alzhao sent me your config, I just try it, it works well in GL-MT1300 with firmware 3.211.
Maybe the hotel can block the 2.5 protocol.
How about try WireGuard, which is more simple and faster than OpenVPN.

paulvin · 2022-09-21T03:42:58.811Z

Hi Leo
I have read that WireGuard uses UDP exclusively which is blocked on the hotel wifi thats why i use TCP on port 80 and 443.
I think I have to give this up and find another solution.
Thank you for the support.