NordVPN GL-MT6000 issue

tommyilromano · February 18, 2024, 4:04pm

I am having issues getting NordVPN to work in client. I have looged into NordVPN through the openvpn client but it just wont connect. Please see log:

Sun Feb 18 16:37:20 2024 daemon.notice netifd: ovpnclient (8887): [!] Automatically including ‘/usr/share/nftables.d/chain-pre/dstnat/00-dhcp-no-flow_offloading.nft’
Sun Feb 18 16:37:20 2024 daemon.notice netifd: ovpnclient (8887): [!] Automatically including ‘/usr/share/nftables.d/chain-pre/forward_guest/01-forward_bypass_domain.nft’
Sun Feb 18 16:37:20 2024 daemon.notice netifd: ovpnclient (8887): [!] Automatically including ‘/usr/share/nftables.d/chain-pre/forward_lan/01-forward_bypass_domain.nft’
Sun Feb 18 16:37:20 2024 daemon.notice netifd: ovpnclient (8887): [!] Automatically including ‘/usr/share/nftables.d/chain-pre/mangle_output/01-process_mark.nft’
Sun Feb 18 16:37:20 2024 daemon.notice netifd: ovpnclient (8887): [!] Automatically including ‘/usr/share/nftables.d/chain-post/mangle_output/out_conn_mark_restore.nft’
Sun Feb 18 16:37:20 2024 daemon.notice netifd: ovpnclient (8887): uci: Entry not found
Sun Feb 18 16:37:20 2024 daemon.notice netifd: ovpnclient (8887): cat: can’t open ‘/tmp/run/ovpn_resolved_ip’: No such file or directory

Not sure what to do but I cant get on the internet at all when I have VPN switched on.

admon · February 18, 2024, 4:05pm

Did you use the right credentials?

They are not the ones you need for downloading the config. The OVPN credentials can be found in the NordVPN dashboard.

tommyilromano · February 18, 2024, 4:14pm

Im using these. They populated once I logged into NordVPN under OpenVPN Client.

admon · February 18, 2024, 4:20pm

Check if these are the right credentials for OVPN.

The log does not tell about any issue so far, maybe you need to post the whole log then.

tommyilromano · February 18, 2024, 4:21pm

Sun Feb 18 17:21:18 2024 daemon.warn ovpnclient[5398]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Sun Feb 18 17:21:18 2024 daemon.notice ovpnclient[5398]: NOTE: --fast-io is disabled since we are not using UDP
Sun Feb 18 17:21:18 2024 daemon.notice ovpnclient[5398]: Outgoing Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
Sun Feb 18 17:21:18 2024 daemon.notice ovpnclient[5398]: Incoming Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
Sun Feb 18 17:21:18 2024 daemon.notice ovpnclient[5398]: TCP/UDP: Preserving recently used remote address: [AF_INET]192.145.116.116:443
Sun Feb 18 17:21:18 2024 daemon.notice ovpnclient[5398]: Socket Buffers: R=[131072->131072] S=[16384->16384]
Sun Feb 18 17:21:18 2024 daemon.notice ovpnclient[5398]: Attempting to establish TCP connection with [AF_INET]192.145.116.116:443 [nonblock]
Sun Feb 18 17:21:18 2024 daemon.notice ovpnclient[5398]: TCP connection established with [AF_INET]192.145.116.116:443
Sun Feb 18 17:21:18 2024 daemon.notice ovpnclient[5398]: TCP_CLIENT link local: (not bound)
Sun Feb 18 17:21:18 2024 daemon.notice ovpnclient[5398]: TCP_CLIENT link remote: [AF_INET]192.145.116.116:443
Sun Feb 18 17:21:18 2024 daemon.notice ovpnclient[5398]: TLS: Initial packet from [AF_INET]192.145.116.116:443, sid=5717330c 7fd4ed37
Sun Feb 18 17:21:18 2024 daemon.warn ovpnclient[5398]: WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Sun Feb 18 17:21:19 2024 daemon.notice ovpnclient[5398]: VERIFY OK: depth=2, C=PA, O=NordVPN, CN=NordVPN Root CA
Sun Feb 18 17:21:19 2024 daemon.notice ovpnclient[5398]: VERIFY OK: depth=1, O=NordVPN, CN=NordVPN CA9
Sun Feb 18 17:21:19 2024 daemon.notice ovpnclient[5398]: VERIFY KU OK
Sun Feb 18 17:21:19 2024 daemon.notice ovpnclient[5398]: Validating certificate extended key usage
Sun Feb 18 17:21:19 2024 daemon.notice ovpnclient[5398]: ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Sun Feb 18 17:21:19 2024 daemon.notice ovpnclient[5398]: VERIFY EKU OK
Sun Feb 18 17:21:19 2024 daemon.notice ovpnclient[5398]: VERIFY X509NAME OK: CN=us8400.nordvpn.com
Sun Feb 18 17:21:19 2024 daemon.notice ovpnclient[5398]: VERIFY OK: depth=0, CN=us8400.nordvpn.com

tommyilromano · February 18, 2024, 4:24pm

Here is full log:

Sun Feb 18 17:23:37 2024 daemon.notice netifd: ovpnclient (8197): [!] Section safe_mode_guest (safe_mode_guest) is disabled, ignoring section
Sun Feb 18 17:23:37 2024 daemon.notice netifd: ovpnclient (8197): [!] Section safe_mode_mark (safe_mode_mark) is disabled, ignoring section
Sun Feb 18 17:23:37 2024 daemon.notice netifd: ovpnclient (8197): [!] Section safe_mode_mark_save (safe_mode_mark_save) option 'extra' is not supported by fw4
Sun Feb 18 17:23:37 2024 daemon.notice netifd: ovpnclient (8197): [!] Section safe_mode_mark_save (safe_mode_mark_save) is disabled, ignoring section
Sun Feb 18 17:23:37 2024 daemon.notice netifd: ovpnclient (8197): [!] Section safe_mode_mark_drop (safe_mode_mark_drop) is disabled, ignoring section
Sun Feb 18 17:23:37 2024 daemon.notice netifd: ovpnclient (8197): [!] Section @forwarding[0] is disabled, ignoring section
Sun Feb 18 17:23:37 2024 daemon.notice netifd: ovpnclient (8197): [!] Section @forwarding[1] is disabled, ignoring section
Sun Feb 18 17:23:37 2024 daemon.notice netifd: ovpnclient (8197): [!] Section ovpnclient2lan is disabled, ignoring section
Sun Feb 18 17:23:37 2024 daemon.notice netifd: ovpnclient (8197): [!] Section nat6 option 'reload' is not supported by fw4
Sun Feb 18 17:23:37 2024 daemon.notice netifd: ovpnclient (8197): [!] Section vpn_server_policy option 'reload' is not supported by fw4
Sun Feb 18 17:23:37 2024 daemon.notice netifd: ovpnclient (8197): [!] Section gls2s option 'reload' is not supported by fw4
Sun Feb 18 17:23:37 2024 daemon.notice netifd: ovpnclient (8197): [!] Section gls2s specifies unreachable path '/var/etc/gls2s.include', ignoring section
Sun Feb 18 17:23:37 2024 daemon.notice netifd: ovpnclient (8197): [!] Section glblock option 'reload' is not supported by fw4
Sun Feb 18 17:23:37 2024 daemon.notice netifd: ovpnclient (8197): [!] Automatically including '/usr/share/nftables.d/chain-pre/dstnat/00-dhcp-no-flow_offloading.nft'
Sun Feb 18 17:23:37 2024 daemon.notice netifd: ovpnclient (8197): [!] Automatically including '/usr/share/nftables.d/chain-pre/forward_guest/01-forward_bypass_domain.nft'
Sun Feb 18 17:23:37 2024 daemon.notice netifd: ovpnclient (8197): [!] Automatically including '/usr/share/nftables.d/chain-pre/forward_lan/01-forward_bypass_domain.nft'
Sun Feb 18 17:23:37 2024 daemon.notice netifd: ovpnclient (8197): [!] Automatically including '/usr/share/nftables.d/chain-pre/mangle_output/01-process_mark.nft'
Sun Feb 18 17:23:37 2024 daemon.notice netifd: ovpnclient (8197): [!] Automatically including '/usr/share/nftables.d/chain-post/mangle_output/out_conn_mark_restore.nft'
Sun Feb 18 17:23:37 2024 daemon.notice netifd: ovpnclient (8197): uci: Entry not found
Sun Feb 18 17:23:37 2024 daemon.notice netifd: ovpnclient (8197): cat: can't open '/tmp/run/ovpn_resolved_ip': No such file or directory

admon · February 18, 2024, 4:26pm

Does not show any issue so far.

Can you ping 1.1.1.1 or does the internet in whole does not work?
Will the GUI show that you are connected, or does it stay yellow?

Which country are you currently in?

tommyilromano · February 18, 2024, 4:30pm

ping 1.1.1.1 times out when I have VPN on.

I am in Italy trying to get my devices on a US VPN. Everything works fine until I turn VPN on.

admon · February 18, 2024, 4:31pm

Once again: Do you use the right credentials?

You can find your NordVPN service credentials (service username and password) in the Nord Account dashboard: https://my.nordaccount.com/login/

So just to make sure that more troubleshooting is needed: Did you enter the service credentials instead of the login ones?

tommyilromano · February 18, 2024, 4:35pm

Yes, I just logged into nord without issue used same login in router menu.

admon · February 18, 2024, 4:47pm

And exactly that seems to be wrong:

tommyilromano · February 18, 2024, 5:02pm

lol it worked. I feel like a dummy but thanks for your help!