NordVPN configuration

Technical Support for Routers
1

Hello,

I just bought the GL-MT300A. I’ve installed it, tried it without VPN and it’s working perfectly.

I then wanted to setup my NordVPN on it. I downloaded the config.zip file from the NordVPN website using this link <span style=“box-sizing: border-box;”>https://nordvpn.com/api/files/zip</span>

I dropped the zip file on in the upload ovpn section of the admin UI entered my NordVPN username and password when prompted.

I finally connected through VPN by ticking enable and force vpn (status = connected). My problem is that once I am connected, internet is no longer available…

Did I miss a step?

Thanks for your help,

Mo

 

 

2

can you give a screenshot of the openvpn UI?

If possible give the syslog. You can get the log from Luci or using “logread” after ssh to the box.

3

Thanks for your reply, here are the logs and the screenshot:

Sat Mar 11 10:37:25 2017 daemon.notice openvpn[5368]: TCPv4_CLIENT link local: [undef]
Sat Mar 11 10:37:25 2017 daemon.notice openvpn[5368]: TCPv4_CLIENT link remote: [AF_INET]185.94.189.172:443
Sat Mar 11 10:37:25 2017 daemon.notice openvpn[5368]: TLS: Initial packet from [AF_INET]185.94.189.172:443, sid=32984ad4 269cfcf1
Sat Mar 11 10:37:25 2017 daemon.warn openvpn[5368]: WARNING: this configuration may cache passwords in memory – use the auth-nocache option to prevent this
Sat Mar 11 10:37:25 2017 daemon.notice openvpn[5368]: VERIFY OK: depth=1, C=PA, ST=PA, L=Panama, O=NordVPN, OU=NordVPN, CN=fr15.nordvpn.com, name=NordVPN, emailAddress=cert@nordvpn.com
Sat Mar 11 10:37:25 2017 daemon.notice openvpn[5368]: Validating certificate key usage
Sat Mar 11 10:37:25 2017 daemon.notice openvpn[5368]: ++ Certificate has key usage 00a0, expects 00a0
Sat Mar 11 10:37:25 2017 daemon.notice openvpn[5368]: VERIFY KU OK
Sat Mar 11 10:37:25 2017 daemon.notice openvpn[5368]: Validating certificate extended key usage
Sat Mar 11 10:37:25 2017 daemon.notice openvpn[5368]: ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Sat Mar 11 10:37:25 2017 daemon.notice openvpn[5368]: VERIFY EKU OK
Sat Mar 11 10:37:25 2017 daemon.notice openvpn[5368]: VERIFY OK: depth=0, C=PA, ST=PA, L=Panama, O=NordVPN, OU=NordVPN, CN=fr15.nordvpn.com, name=NordVPN, emailAddress=cert@nordvpn.com
Sat Mar 11 10:37:25 2017 daemon.notice openvpn[5368]: Data Channel Encrypt: Cipher ‘AES-256-CBC’ initialized with 256 bit key
Sat Mar 11 10:37:25 2017 daemon.notice openvpn[5368]: Data Channel Encrypt: Using 512 bit message hash ‘SHA512’ for HMAC authentication
Sat Mar 11 10:37:25 2017 daemon.notice openvpn[5368]: Data Channel Decrypt: Cipher ‘AES-256-CBC’ initialized with 256 bit key
Sat Mar 11 10:37:25 2017 daemon.notice openvpn[5368]: Data Channel Decrypt: Using 512 bit message hash ‘SHA512’ for HMAC authentication
Sat Mar 11 10:37:25 2017 daemon.notice openvpn[5368]: Control Channel: TLSv1.2, cipher TLSv1/SSLv3 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Sat Mar 11 10:37:25 2017 daemon.notice openvpn[5368]: [fr15.nordvpn.com] Peer Connection Initiated with [AF_INET]185.94.189.172:443
Sat Mar 11 10:37:27 2017 daemon.notice openvpn[5368]: SENT CONTROL [fr15.nordvpn.com]: ‘PUSH_REQUEST’ (status=1)
Sat Mar 11 10:37:27 2017 daemon.notice openvpn[5368]: PUSH: Received control message: ‘PUSH_REPLY,redirect-gateway def1,sndbuf 524288,rcvbuf 524288,dhcp-option DNS 78.46.223.24,dhcp-option DNS 162.242.211.137,route-gateway 10.7.7.1,topology subnet,ping 60,ping-restart 180,ifconfig 10.7.7.93 255.255.255.0,peer-id 0’
Sat Mar 11 10:37:27 2017 daemon.notice openvpn[5368]: OPTIONS IMPORT: timers and/or timeouts modified
Sat Mar 11 10:37:27 2017 daemon.notice openvpn[5368]: OPTIONS IMPORT: --sndbuf/–rcvbuf options modified
Sat Mar 11 10:37:27 2017 daemon.notice openvpn[5368]: Socket Buffers: R=[341760->327680] S=[44800->327680]
Sat Mar 11 10:37:27 2017 daemon.notice openvpn[5368]: OPTIONS IMPORT: --ifconfig/up options modified
Sat Mar 11 10:37:27 2017 daemon.notice openvpn[5368]: OPTIONS IMPORT: route options modified
Sat Mar 11 10:37:27 2017 daemon.notice openvpn[5368]: OPTIONS IMPORT: route-related options modified
Sat Mar 11 10:37:27 2017 daemon.notice openvpn[5368]: OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Sat Mar 11 10:37:27 2017 daemon.notice openvpn[5368]: OPTIONS IMPORT: peer-id set
Sat Mar 11 10:37:27 2017 daemon.notice openvpn[5368]: OPTIONS IMPORT: adjusting link_mtu to 1639
Sat Mar 11 10:37:27 2017 daemon.notice netifd: Interface ‘VPN_client’ is enabled
Sat Mar 11 10:37:27 2017 daemon.notice netifd: Network device ‘tun0’ link is up
Sat Mar 11 10:37:27 2017 daemon.notice netifd: Interface ‘VPN_client’ has link connectivity
Sat Mar 11 10:37:27 2017 daemon.notice netifd: Interface ‘VPN_client’ is setting up now
Sat Mar 11 10:37:27 2017 daemon.notice openvpn[5368]: TUN/TAP device tun0 opened
Sat Mar 11 10:37:27 2017 daemon.notice openvpn[5368]: TUN/TAP TX queue length set to 100
Sat Mar 11 10:37:27 2017 daemon.notice openvpn[5368]: do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Sat Mar 11 10:37:27 2017 daemon.notice openvpn[5368]: /usr/sbin/ip link set dev tun0 up mtu 1500
Sat Mar 11 10:37:27 2017 daemon.notice openvpn[5368]: /usr/sbin/ip addr add dev tun0 10.7.7.93/24 broadcast 10.7.7.255
Sat Mar 11 10:37:27 2017 daemon.notice openvpn[5368]: /usr/sbin/ip route add 185.94.189.172/32 via 192.168.0.1
Sat Mar 11 10:37:27 2017 daemon.warn openvpn[5368]: ERROR: Linux route add command failed: external program exited with error status: 1
Sat Mar 11 10:37:27 2017 daemon.notice openvpn[5368]: /usr/sbin/ip route add 0.0.0.0/1 via 10.7.7.1
Sat Mar 11 10:37:27 2017 daemon.notice netifd: Interface ‘VPN_client’ is now up
Sat Mar 11 10:37:27 2017 daemon.notice openvpn[5368]: /usr/sbin/ip route add 128.0.0.0/1 via 10.7.7.1
Sat Mar 11 10:37:27 2017 daemon.notice openvpn[5368]: Initialization Sequence Completed
Sat Mar 11 10:37:28 2017 user.notice firewall: Reloading firewall due to ifup of VPN_client (tun0)
Sat Mar 11 10:38:00 2017 daemon.notice netifd: Network device ‘tun0’ link is down
Sat Mar 11 10:38:00 2017 daemon.notice netifd: Interface ‘VPN_client’ has link connectivity loss
Sat Mar 11 10:38:00 2017 daemon.notice netifd: Interface ‘VPN_client’ is now down
Sat Mar 11 10:38:00 2017 daemon.notice netifd: Interface ‘VPN_client’ is disabled
Sat Mar 11 10:38:01 2017 daemon.notice openvpn[5862]: OpenVPN 2.3.10 mipsel-openwrt-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [MH] [IPv6]
Sat Mar 11 10:38:01 2017 daemon.notice openvpn[5862]: library versions: OpenSSL 1.0.2g 1 Mar 2016, LZO 2.08
Sat Mar 11 10:38:01 2017 daemon.warn openvpn[5863]: WARNING: --ping should normally be used with --ping-restart or --ping-exit
Sat Mar 11 10:38:01 2017 daemon.notice openvpn[5863]: NOTE: --fast-io is disabled since we are not using UDP
Sat Mar 11 10:38:01 2017 daemon.notice openvpn[5863]: Control Channel Authentication: tls-auth using INLINE static key file
Sat Mar 11 10:38:01 2017 daemon.notice openvpn[5863]: Outgoing Control Channel Authentication: Using 160 bit message hash ‘SHA1’ for HMAC authentication
Sat Mar 11 10:38:01 2017 daemon.notice openvpn[5863]: Incoming Control Channel Authentication: Using 160 bit message hash ‘SHA1’ for HMAC authentication
Sat Mar 11 10:38:01 2017 daemon.notice openvpn[5863]: Socket Buffers: R=[87380->87380] S=[16384->16384]
Sat Mar 11 10:38:01 2017 daemon.notice openvpn[5863]: Attempting to establish TCP connection with [AF_INET]94.247.28.98:443 [nonblock]
Sat Mar 11 10:38:02 2017 daemon.notice openvpn[5863]: TCP connection established with [AF_INET]94.247.28.98:443
Sat Mar 11 10:38:02 2017 daemon.notice openvpn[5863]: TCPv4_CLIENT link local: [undef]
Sat Mar 11 10:38:02 2017 daemon.notice openvpn[5863]: TCPv4_CLIENT link remote: [AF_INET]94.247.28.98:443
Sat Mar 11 10:38:02 2017 daemon.notice openvpn[5863]: TLS: Initial packet from [AF_INET]94.247.28.98:443, sid=de45b377 4aee3f08
Sat Mar 11 10:38:02 2017 daemon.warn openvpn[5863]: WARNING: this configuration may cache passwords in memory – use the auth-nocache option to prevent this
Sat Mar 11 10:38:02 2017 daemon.notice openvpn[5863]: VERIFY OK: depth=1, C=PA, ST=PA, L=Panama, O=NordVPN, OU=NordVPN, CN=fr9.nordvpn.com, name=NordVPN, emailAddress=cert@nordvpn.com
Sat Mar 11 10:38:02 2017 daemon.notice openvpn[5863]: Validating certificate key usage
Sat Mar 11 10:38:02 2017 daemon.notice openvpn[5863]: ++ Certificate has key usage 00a0, expects 00a0
Sat Mar 11 10:38:02 2017 daemon.notice openvpn[5863]: VERIFY KU OK
Sat Mar 11 10:38:02 2017 daemon.notice openvpn[5863]: Validating certificate extended key usage
Sat Mar 11 10:38:02 2017 daemon.notice openvpn[5863]: ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Sat Mar 11 10:38:02 2017 daemon.notice openvpn[5863]: VERIFY EKU OK
Sat Mar 11 10:38:02 2017 daemon.notice openvpn[5863]: VERIFY OK: depth=0, C=PA, ST=PA, L=Panama, O=NordVPN, OU=NordVPN, CN=fr9.nordvpn.com, name=NordVPN, emailAddress=cert@nordvpn.com
Sat Mar 11 10:38:02 2017 daemon.notice openvpn[5863]: Data Channel Encrypt: Cipher ‘AES-256-CBC’ initialized with 256 bit key
Sat Mar 11 10:38:02 2017 daemon.notice openvpn[5863]: Data Channel Encrypt: Using 160 bit message hash ‘SHA1’ for HMAC authentication
Sat Mar 11 10:38:02 2017 daemon.notice openvpn[5863]: Data Channel Decrypt: Cipher ‘AES-256-CBC’ initialized with 256 bit key
Sat Mar 11 10:38:02 2017 daemon.notice openvpn[5863]: Data Channel Decrypt: Using 160 bit message hash ‘SHA1’ for HMAC authentication
Sat Mar 11 10:38:02 2017 daemon.notice openvpn[5863]: Control Channel: TLSv1.2, cipher TLSv1/SSLv3 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Sat Mar 11 10:38:02 2017 daemon.notice openvpn[5863]: [fr9.nordvpn.com] Peer Connection Initiated with [AF_INET]94.247.28.98:443
Sat Mar 11 10:38:04 2017 daemon.notice openvpn[5863]: SENT CONTROL [fr9.nordvpn.com]: ‘PUSH_REQUEST’ (status=1)
Sat Mar 11 10:38:04 2017 daemon.notice openvpn[5863]: PUSH: Received control message: ‘PUSH_REPLY,redirect-gateway def1,sndbuf 524288,rcvbuf 524288,dhcp-option DNS 78.46.223.24,dhcp-option DNS 162.242.211.137,route-gateway 10.7.7.1,topology subnet,ping 60,ping-restart 180,ifconfig 10.7.7.200 255.255.255.0,peer-id 0’
Sat Mar 11 10:38:04 2017 daemon.notice openvpn[5863]: OPTIONS IMPORT: timers and/or timeouts modified
Sat Mar 11 10:38:04 2017 daemon.notice openvpn[5863]: OPTIONS IMPORT: --sndbuf/–rcvbuf options modified
Sat Mar 11 10:38:04 2017 daemon.notice openvpn[5863]: Socket Buffers: R=[341760->327680] S=[44800->327680]
Sat Mar 11 10:38:04 2017 daemon.notice openvpn[5863]: OPTIONS IMPORT: --ifconfig/up options modified
Sat Mar 11 10:38:04 2017 daemon.notice openvpn[5863]: OPTIONS IMPORT: route options modified
Sat Mar 11 10:38:04 2017 daemon.notice openvpn[5863]: OPTIONS IMPORT: route-related options modified
Sat Mar 11 10:38:04 2017 daemon.notice openvpn[5863]: OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Sat Mar 11 10:38:04 2017 daemon.notice openvpn[5863]: OPTIONS IMPORT: peer-id set
Sat Mar 11 10:38:04 2017 daemon.notice openvpn[5863]: OPTIONS IMPORT: adjusting link_mtu to 1595
Sat Mar 11 10:38:04 2017 daemon.notice openvpn[5863]: TUN/TAP device tun0 opened
Sat Mar 11 10:38:04 2017 daemon.notice openvpn[5863]: /usr/sbin/ip addr add dev tun0 10.7.7.200/24 broadcast 10.7.7.255
Sat Mar 11 10:38:04 2017 daemon.notice openvpn[5863]: /usr/sbin/ip route add 94.247.28.98/32 via 192.168.0.1
Sat Mar 11 10:38:04 2017 daemon.notice netifd: Interface ‘VPN_client’ is enabled
Sat Mar 11 10:38:04 2017 daemon.notice netifd: Network device ‘tun0’ link is up
Sat Mar 11 10:38:04 2017 daemon.notice netifd: Interface ‘VPN_client’ has link connectivity
Sat Mar 11 10:38:04 2017 daemon.notice netifd: Interface ‘VPN_client’ is setting up now
Sat Mar 11 10:38:04 2017 daemon.notice netifd: Interface ‘VPN_client’ is now up
Sat Mar 11 10:38:04 2017 daemon.notice openvpn[5863]: /usr/sbin/ip route add 0.0.0.0/1 via 10.7.7.1
Sat Mar 11 10:38:04 2017 daemon.notice openvpn[5863]: /usr/sbin/ip route add 128.0.0.0/1 via 10.7.7.1
Sat Mar 11 10:38:04 2017 daemon.notice openvpn[5863]: Initialization Sequence Completed
Sat Mar 11 10:38:05 2017 user.notice firewall: Reloading firewall due to ifup of VPN_client (tun0)
Sat Mar 11 10:38:09 2017 daemon.notice netifd: Network device ‘tun0’ link is down
Sat Mar 11 10:38:09 2017 daemon.notice netifd: Interface ‘VPN_client’ has link connectivity loss
Sat Mar 11 10:38:09 2017 daemon.notice netifd: Interface ‘VPN_client’ is now down
Sat Mar 11 10:38:09 2017 daemon.notice netifd: Interface ‘VPN_client’ is disabled
Sat Mar 11 10:44:20 2017 daemon.info hostapd: wlan0: STA 00:13:e8:1d:87:03 WPA: group key handshake completed (RSN)
Sat Mar 11 10:44:20 2017 daemon.info hostapd: wlan0: STA d0:e1:40:c5:b0:65 WPA: group key handshake completed (RSN)
Sat Mar 11 10:48:39 2017 daemon.notice openvpn[9111]: OpenVPN 2.3.10 mipsel-openwrt-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [MH] [IPv6]
Sat Mar 11 10:48:39 2017 daemon.notice openvpn[9111]: library versions: OpenSSL 1.0.2g 1 Mar 2016, LZO 2.08
Sat Mar 11 10:48:39 2017 daemon.warn openvpn[9112]: WARNING: --ping should normally be used with --ping-restart or --ping-exit
Sat Mar 11 10:48:39 2017 daemon.notice openvpn[9112]: NOTE: --fast-io is disabled since we are not using UDP
Sat Mar 11 10:48:39 2017 daemon.notice openvpn[9112]: Control Channel Authentication: tls-auth using INLINE static key file
Sat Mar 11 10:48:39 2017 daemon.notice openvpn[9112]: Outgoing Control Channel Authentication: Using 160 bit message hash ‘SHA1’ for HMAC authentication
Sat Mar 11 10:48:39 2017 daemon.notice openvpn[9112]: Incoming Control Channel Authentication: Using 160 bit message hash ‘SHA1’ for HMAC authentication
Sat Mar 11 10:48:39 2017 daemon.notice openvpn[9112]: Socket Buffers: R=[87380->87380] S=[16384->16384]
Sat Mar 11 10:48:39 2017 daemon.notice openvpn[9112]: Attempting to establish TCP connection with [AF_INET]94.247.28.98:443 [nonblock]
Sat Mar 11 10:48:40 2017 daemon.notice openvpn[9112]: TCP connection established with [AF_INET]94.247.28.98:443
Sat Mar 11 10:48:40 2017 daemon.notice openvpn[9112]: TCPv4_CLIENT link local: [undef]
Sat Mar 11 10:48:40 2017 daemon.notice openvpn[9112]: TCPv4_CLIENT link remote: [AF_INET]94.247.28.98:443
Sat Mar 11 10:48:40 2017 daemon.notice openvpn[9112]: TLS: Initial packet from [AF_INET]94.247.28.98:443, sid=44d615da 05c14154
Sat Mar 11 10:48:40 2017 daemon.warn openvpn[9112]: WARNING: this configuration may cache passwords in memory – use the auth-nocache option to prevent this
Sat Mar 11 10:48:41 2017 daemon.notice openvpn[9112]: VERIFY OK: depth=1, C=PA, ST=PA, L=Panama, O=NordVPN, OU=NordVPN, CN=fr9.nordvpn.com, name=NordVPN, emailAddress=cert@nordvpn.com
Sat Mar 11 10:48:41 2017 daemon.notice openvpn[9112]: Validating certificate key usage
Sat Mar 11 10:48:41 2017 daemon.notice openvpn[9112]: ++ Certificate has key usage 00a0, expects 00a0
Sat Mar 11 10:48:41 2017 daemon.notice openvpn[9112]: VERIFY KU OK
Sat Mar 11 10:48:41 2017 daemon.notice openvpn[9112]: Validating certificate extended key usage
Sat Mar 11 10:48:41 2017 daemon.notice openvpn[9112]: ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Sat Mar 11 10:48:41 2017 daemon.notice openvpn[9112]: VERIFY EKU OK
Sat Mar 11 10:48:41 2017 daemon.notice openvpn[9112]: VERIFY OK: depth=0, C=PA, ST=PA, L=Panama, O=NordVPN, OU=NordVPN, CN=fr9.nordvpn.com, name=NordVPN, emailAddress=cert@nordvpn.com
Sat Mar 11 10:48:41 2017 daemon.notice openvpn[9112]: Data Channel Encrypt: Cipher ‘AES-256-CBC’ initialized with 256 bit key
Sat Mar 11 10:48:41 2017 daemon.notice openvpn[9112]: Data Channel Encrypt: Using 160 bit message hash ‘SHA1’ for HMAC authentication
Sat Mar 11 10:48:41 2017 daemon.notice openvpn[9112]: Data Channel Decrypt: Cipher ‘AES-256-CBC’ initialized with 256 bit key
Sat Mar 11 10:48:41 2017 daemon.notice openvpn[9112]: Data Channel Decrypt: Using 160 bit message hash ‘SHA1’ for HMAC authentication
Sat Mar 11 10:48:41 2017 daemon.notice openvpn[9112]: Control Channel: TLSv1.2, cipher TLSv1/SSLv3 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Sat Mar 11 10:48:41 2017 daemon.notice openvpn[9112]: [fr9.nordvpn.com] Peer Connection Initiated with [AF_INET]94.247.28.98:443
Sat Mar 11 10:48:43 2017 daemon.notice openvpn[9112]: SENT CONTROL [fr9.nordvpn.com]: ‘PUSH_REQUEST’ (status=1)
Sat Mar 11 10:48:43 2017 daemon.notice openvpn[9112]: PUSH: Received control message: ‘PUSH_REPLY,redirect-gateway def1,sndbuf 524288,rcvbuf 524288,dhcp-option DNS 78.46.223.24,dhcp-option DNS 162.242.211.137,route-gateway 10.7.7.1,topology subnet,ping 60,ping-restart 180,ifconfig 10.7.7.200 255.255.255.0,peer-id 0’
Sat Mar 11 10:48:43 2017 daemon.notice openvpn[9112]: OPTIONS IMPORT: timers and/or timeouts modified
Sat Mar 11 10:48:43 2017 daemon.notice openvpn[9112]: OPTIONS IMPORT: --sndbuf/–rcvbuf options modified
Sat Mar 11 10:48:43 2017 daemon.notice openvpn[9112]: Socket Buffers: R=[341760->327680] S=[44800->327680]
Sat Mar 11 10:48:43 2017 daemon.notice openvpn[9112]: OPTIONS IMPORT: --ifconfig/up options modified
Sat Mar 11 10:48:43 2017 daemon.notice openvpn[9112]: OPTIONS IMPORT: route options modified
Sat Mar 11 10:48:43 2017 daemon.notice openvpn[9112]: OPTIONS IMPORT: route-related options modified
Sat Mar 11 10:48:43 2017 daemon.notice openvpn[9112]: OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Sat Mar 11 10:48:43 2017 daemon.notice openvpn[9112]: OPTIONS IMPORT: peer-id set
Sat Mar 11 10:48:43 2017 daemon.notice openvpn[9112]: OPTIONS IMPORT: adjusting link_mtu to 1595
Sat Mar 11 10:48:43 2017 daemon.notice openvpn[9112]: TUN/TAP device tun0 opened
Sat Mar 11 10:48:43 2017 daemon.notice netifd: Interface ‘VPN_client’ is enabled
Sat Mar 11 10:48:43 2017 daemon.notice netifd: Network device ‘tun0’ link is up
Sat Mar 11 10:48:43 2017 daemon.notice netifd: Interface ‘VPN_client’ has link connectivity
Sat Mar 11 10:48:43 2017 daemon.notice netifd: Interface ‘VPN_client’ is setting up now
Sat Mar 11 10:48:43 2017 daemon.notice netifd: Interface ‘VPN_client’ is now up
Sat Mar 11 10:48:43 2017 daemon.warn openvpn[9112]: ERROR: Linux route add command failed: external program exited with error status: 1
Sat Mar 11 10:48:43 2017 daemon.notice openvpn[9112]: /usr/sbin/ip route add 0.0.0.0/1 via 10.7.7.1
Sat Mar 11 10:48:43 2017 daemon.notice openvpn[9112]: /usr/sbin/ip route add 128.0.0.0/1 via 10.7.7.1
Sat Mar 11 10:48:43 2017 daemon.notice openvpn[9112]: Initialization Sequence Completed
Sat Mar 11 10:48:43 2017 user.notice firewall: Reloading firewall due to ifup of VPN_client (tun0)
Sat Mar 11 10:54:20 2017 daemon.info hostapd: wlan0: STA 00:13:e8:1d:87:03 WPA: group key handshake completed (RSN)
Sat Mar 11 10:54:20 2017 daemon.info hostapd: wlan0: STA d0:e1:40:c5:b0:65 WPA: group key handshake completed (RSN)
Sat Mar 11 10:59:34 2017 daemon.notice netifd: Network device ‘tun0’ link is down
Sat Mar 11 10:59:34 2017 daemon.notice netifd: Interface ‘VPN_client’ has link connectivity loss
Sat Mar 11 10:59:34 2017 daemon.notice netifd: Interface ‘VPN_client’ is now down
Sat Mar 11 10:59:34 2017 daemon.notice netifd: Interface ‘VPN_client’ is disabled

4

Same problem… looking fwd to support

5

Hello, i think this is the part relevant to the vpn:

Sun Mar 12 19:09:51 2017 daemon.notice netifd: Interface ‘VPN_client’ has link connectivity
Sun Mar 12 19:09:51 2017 daemon.notice netifd: Interface ‘VPN_client’ is setting up now
Sun Mar 12 19:09:51 2017 daemon.notice netifd: Interface ‘VPN_client’ is now up
Sun Mar 12 19:09:51 2017 daemon.notice openvpn[3303]: /usr/sbin/ip route add 62.210.140.96/32 via 192.168.0.1
Sun Mar 12 19:09:51 2017 daemon.warn openvpn[3303]: ERROR: Linux route add command failed: external program exited with error status: 1
Sun Mar 12 19:09:51 2017 daemon.notice openvpn[3303]: /usr/sbin/ip route add 0.0.0.0/1 via 10.7.7.1
Sun Mar 12 19:09:51 2017 daemon.notice openvpn[3303]: /usr/sbin/ip route add 128.0.0.0/1 via 10.7.7.1
Sun Mar 12 19:09:51 2017 daemon.notice openvpn[3303]: Initialization Sequence Completed
Sun Mar 12 19:09:52 2017 user.notice firewall: Reloading firewall due to ifup of VPN_client (tun0)

6

Firmware version? If not v2.25 please upgrade.

I will have time to test on Tuesday.

7

Hi, we just have someone has working Nordvpn from this post. Is there anything you can find out there?

https://www.gl-inet.com/forums/topic/openvpn-client-ip-address/

 

8

I’m afraid it just worked with Nordvpn first time for me, I just followed the instructions and didn’t need to do any additional steps to get it working

9

Hello,

Thanks cfmts. I will try to do a factory reset of the router by pressing on the button on the router for 10 sec and try again, maybe something went wrong during the initial VPN setup. Did you use the opvn config files found here: OpenWrt CI setup with NordVPN | NordVPN support

Could it be coming from the modem? I live in the UK and im using a hub 3 virgin media router.

@Alzhao, my firmware is 2.25. Once i do the factory reset and run the vpn i will post the logs in case they are more useful.

Thanks for your help.

10

ERROR: Linux route add command failed: external program exited with error status: 1

2 error on 3 attempts.

11

I logged into my account, went to the ‘download area’ tab in my account and in the dd-wrt section took the link to download ‘.OVPN configuration files’

12

Hello,

I did a factory reset of the router, downloaded the opvn files using the method described by cfmts but it still doesnt work.

In the logs i still have the error message picked up by Passter:
Wed Mar 15 00:06:10 2017 daemon.warn openvpn[14405]: ERROR: Linux route add command failed: external program exited with error status: 1

What does it actually mean?

thanks

 

13

The vpn connection is established, but the new route is not always added. Try changing the mask on the internal interface to 255.255.255.0 or addressing the whole.

14

Hello,

Thanks for your answers. It turns out that my vpn isnt working because of my internet provider router (Virgin Media Super Hub 3) which does not allow passthrough.

It seems that one of the way to correct that is by setting up my virgin media is a modem and connecting a router to it. I’ve tried doing that with my GL-MT300A but i didnt have internet connection.

I will continue tomorrow and hope to find a solution.

Cheers

15

Hi Moimed, same setup and issue here. Have you found a solution?

16

My vpn is ipvanish - got that to work with virgin hub 3 by changing to public dns servers - hope this helps you

17

I would try from scratch, as Nord worked first time for me.

Glitch

18

Geoff-S, thanks for your reply.

  1. Where did you amend the DNS: in the Virgin hub or in the Gli router?

  2. which DNS did you use?

Thanks

19

On the GL router - as far as I know it isn’t possible to change DNS servers on the Virgin Hub - I have tried both the Google and opendns servers.

Only problem I have is low speed - but at least it does work !