OpenVPN client has stopped working

danield · December 18, 2023, 12:30am

Hi,

I was wondering if anyone had any ideas why my openvpn client won’t work? I had it working fine back to my connection at home then it stopped. I’ve just tried with nordvpn, thst also fails…

Here’s the logs. There’s some “file not found” errors in it.

“Mon Dec 18 00:26:22 2023 daemon.notice netifd: ovpnclient (26094): * Rule ‘process_mark’\nMon Dec 18 00:26:22 2023 daemon.notice netifd: ovpnclient (26094): * Rule ‘wan_in_conn_mark’\nMon Dec 18 00:26:22 2023 daemon.notice netifd: ovpnclient (26094): * Rule ‘lan_in_conn_mark_restore’\nMon Dec 18 00:26:22 2023 daemon.notice netifd: ovpnclient (26094): * Rule ‘out_conn_mark_restore’\nMon Dec 18 00:26:22 2023 daemon.notice netifd: ovpnclient (26094): * Zone ‘lan’\nMon Dec 18 00:26:22 2023 daemon.notice netifd: ovpnclient (26094): * Zone ‘wan’\nMon Dec 18 00:26:22 2023 daemon.notice netifd: ovpnclient (26094): * Zone ‘guest’\nMon Dec 18 00:26:22 2023 daemon.notice netifd: ovpnclient (26094): * Zone ‘ovpnclient’\nMon Dec 18 00:26:22 2023 daemon.notice netifd: ovpnclient (26094): * Set tcp_ecn to off\nMon Dec 18 00:26:22 2023 daemon.notice netifd: ovpnclient (26094): * Set tcp_syncookies to on\nMon Dec 18 00:26:22 2023 daemon.notice netifd: ovpnclient (26094): * Set tcp_window_scaling to on\nMon Dec 18 00:26:22 2023 daemon.notice netifd: ovpnclient (26094): * Running script ‘/etc/firewall.nat6’\nMon Dec 18 00:26:22 2023 daemon.notice netifd: ovpnclient (26094): * Running script ‘/etc/firewall.swap_wan_in_conn_mark.sh’\nMon Dec 18 00:26:22 2023 daemon.notice netifd: ovpnclient (26094): * Running script ‘/var/etc/gls2s.include’\nMon Dec 18 00:26:22 2023 daemon.notice netifd: ovpnclient (26094): ! Skipping due to path error: No such file or directory\nMon Dec 18 00:26:22 2023 daemon.notice netifd: ovpnclient (26094): * Running script ‘/usr/bin/gl_block.sh’\nMon Dec 18 00:26:22 2023 daemon.notice netifd: ovpnclient (26094): * Running script ‘/etc/firewall.vpn_server_policy.sh’\nMon Dec 18 00:26:23 2023 daemon.notice netifd: ovpnclient (26094): Failed to parse json data: unexpected character\nMon Dec 18 00:26:23 2023 daemon.notice netifd: ovpnclient (26094): uci: Entry not found\nMon Dec 18 00:26:23 2023 daemon.notice netifd: ovpnclient (26094): cat: can’t open ‘/tmp/run/ovpn_resolved_ip’: No such file or directory\n”

GL-AXT1800
Model
GL Technologies, Inc. AXT1800
Architecture
ARMv7 Processor rev 4 (v7l)
Openwrt Version
OpenWrt 21.02-SNAPSHOT r16399+159-c67509efd7
Kernel Version
4.4.60

I’ve tried factory reset, for some reason that didn’t work. Also I use the Block Non-VPN traffic option. Has that caused this?

admon · December 18, 2023, 5:34am

Hi,

looks like an OVPN issue for me. What kind of config do you use? When you enable „Block WAN“ it’s normal that no internet will work when the VPN drops - so first step would to disable this to understand if the VPN causes the problem or the internet at whole.

danield · December 18, 2023, 8:37am

Hi,

The VPN just won’t connect. It used to, using exactly the same config file.

I’ve also just signed up for a Nordvpn account to try that and the error is the same (the above logs are from when trying to connect to Nordvpn).

So yes, it is an ovpn issue, but not with the VPN endpoint or the config - because in this instance I didn’t create it

admon · December 18, 2023, 8:52am

As I wrote before: Do you know that it’s not an connection error with the internet in general?
Maybe some problems with DNS for example?

Where are you located?

danield · December 18, 2023, 9:06am

Internet works fine when I’m not trying to comment to a VPN. When I enable a VPN, it never connects and connectivity drops. Disable the VPN, connectivity resumes instantly.

I’m in the UK. I’m currently using the router, just without a VPN enabled. Router works fine, except for ovpn stuff.

admon · December 18, 2023, 9:24am

Did you try to delete all OpenVPN profiles and import a new one?
Could you try to connect again and post the log here?

Please enclose the log with the code block so it’s more readable:

You can create it by using ``` in front and end.

alzhao · December 18, 2023, 9:45am

Do you have further logs?

The log you posted does not show the reason openvpn is not connected. The “file not found” errors does not affect the connection.

What is the vpn service provider?
If you don’t mind you can send one ovpn for me to try. Maybe the server is not just not available.

danield · December 18, 2023, 2:02pm

Hi, this is NordVPN London. I’m away from the router at the moment but I’ll post later with more logs.

danield · December 18, 2023, 8:09pm

Okay I have proper logs now

Mon Dec 18 20:01:05 2023 daemon.notice netifd: Interface 'ovpnclient' is setting up now
Mon Dec 18 20:01:05 2023 daemon.warn ovpnclient[17797]: DEPRECATED OPTION: --cipher set to 'AES-256-CBC' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM). Future OpenVPN version will ignore --cipher for cipher negotiations. Add 'AES-256-CBC' to --data-ciphers or change --cipher 'AES-256-CBC' to --data-ciphers-fallback 'AES-256-CBC' to silence this warning.
Mon Dec 18 20:01:05 2023 daemon.notice ovpnclient[17797]: OpenVPN 2.5.3 arm-openwrt-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD]
Mon Dec 18 20:01:05 2023 daemon.notice ovpnclient[17797]: library versions: OpenSSL 1.1.1l  24 Aug 2021, LZO 2.10
Mon Dec 18 20:01:05 2023 daemon.warn ovpnclient[17797]: WARNING: --ping should normally be used with --ping-restart or --ping-exit
Mon Dec 18 20:01:05 2023 daemon.warn ovpnclient[17797]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Mon Dec 18 20:01:05 2023 daemon.notice ovpnclient[17797]: NOTE: --fast-io is disabled since we are not using UDP
Mon Dec 18 20:01:05 2023 daemon.notice ovpnclient[17797]: Outgoing Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
Mon Dec 18 20:01:05 2023 daemon.notice ovpnclient[17797]: Incoming Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
Mon Dec 18 20:01:05 2023 daemon.notice ovpnclient[17797]: TCP/UDP: Preserving recently used remote address: [AF_INET]31.132.5.19:443
Mon Dec 18 20:01:05 2023 daemon.notice ovpnclient[17797]: Socket Buffers: R=[87380->87380] S=[16384->16384]
Mon Dec 18 20:01:05 2023 daemon.notice ovpnclient[17797]: Attempting to establish TCP connection with [AF_INET]31.132.5.19:443 [nonblock]
Mon Dec 18 20:01:05 2023 daemon.notice ovpnclient[17797]: TCP connection established with [AF_INET]31.132.5.19:443
Mon Dec 18 20:01:05 2023 daemon.notice ovpnclient[17797]: TCP_CLIENT link local: (not bound)
Mon Dec 18 20:01:05 2023 daemon.notice ovpnclient[17797]: TCP_CLIENT link remote: [AF_INET]31.132.5.19:443
Mon Dec 18 20:01:05 2023 daemon.notice ovpnclient[17797]: TLS: Initial packet from [AF_INET]31.132.5.19:443, sid=05ed6b38 41eac427
Mon Dec 18 20:01:05 2023 daemon.notice ovpnclient[17797]: VERIFY OK: depth=2, C=PA, O=NordVPN, CN=NordVPN Root CA
Mon Dec 18 20:01:05 2023 daemon.notice ovpnclient[17797]: VERIFY OK: depth=1, O=NordVPN, CN=NordVPN CA8
Mon Dec 18 20:01:05 2023 daemon.notice ovpnclient[17797]: VERIFY KU OK
Mon Dec 18 20:01:05 2023 daemon.notice ovpnclient[17797]: Validating certificate extended key usage
Mon Dec 18 20:01:05 2023 daemon.notice ovpnclient[17797]: ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Mon Dec 18 20:01:05 2023 daemon.notice ovpnclient[17797]: VERIFY EKU OK
Mon Dec 18 20:01:05 2023 daemon.notice ovpnclient[17797]: VERIFY X509NAME OK: CN=uk1904.nordvpn.com
Mon Dec 18 20:01:05 2023 daemon.notice ovpnclient[17797]: VERIFY OK: depth=0, CN=uk1904.nordvpn.com
Mon Dec 18 20:01:06 2023 daemon.notice ovpnclient[17797]: Control Channel: TLSv1.3, cipher TLSv1.3 TLS_AES_256_GCM_SHA384, peer certificate: 4096 bit RSA, signature: RSA-SHA512
Mon Dec 18 20:01:06 2023 daemon.notice ovpnclient[17797]: [uk1904.nordvpn.com] Peer Connection Initiated with [AF_INET]31.132.5.19:443
Mon Dec 18 20:01:07 2023 daemon.notice ovpnclient[17797]: SENT CONTROL [uk1904.nordvpn.com]: 'PUSH_REQUEST' (status=1)
Mon Dec 18 20:01:07 2023 daemon.notice ovpnclient[17797]: AUTH: Received control message: AUTH_FAILED
Mon Dec 18 20:01:07 2023 daemon.notice ovpnclient[17797]: SIGTERM[soft,auth-failure] received, process exiting
Mon Dec 18 20:01:07 2023 daemon.notice netifd: ovpnclient (18115): Warning: Section @defaults[0] requires unavailable target extension FLOWOFFLOAD, disabling
Mon Dec 18 20:01:07 2023 daemon.notice netifd: ovpnclient (18115): Warning: Section @zone[1] (wan) cannot resolve device of network 'wan6'
Mon Dec 18 20:01:07 2023 daemon.notice netifd: ovpnclient (18115): Warning: Section @zone[2] (guest) cannot resolve device of network 'guest'
Mon Dec 18 20:01:07 2023 daemon.notice netifd: ovpnclient (18115): Warning: Option 'ovpnclient'.masq6 is unknown
Mon Dec 18 20:01:07 2023 daemon.notice netifd: ovpnclient (18115): Warning: Section 'ovpnclient' cannot resolve device of network 'ovpnclient'
Mon Dec 18 20:01:07 2023 daemon.notice netifd: ovpnclient (18115): Warning: Section 'wan_in_conn_mark' does not specify a protocol, assuming TCP+UDP
Mon Dec 18 20:01:07 2023 daemon.notice netifd: ovpnclient (18115): Warning: Section 'lan_in_conn_mark_restore' does not specify a protocol, assuming TCP+UDP
Mon Dec 18 20:01:07 2023 daemon.notice netifd: ovpnclient (18115): Warning: Section 'out_conn_mark_restore' does not specify a protocol, assuming TCP+UDP
Mon Dec 18 20:01:07 2023 daemon.notice netifd: ovpnclient (18115): Warning: Section 'block_dns' does not specify a protocol, assuming TCP+UDP
Mon Dec 18 20:01:07 2023 daemon.notice netifd: ovpnclient (18115): Warning: Section @defaults[0] requires unavailable target extension FLOWOFFLOAD, disabling
Mon Dec 18 20:01:07 2023 daemon.notice netifd: ovpnclient (18115): Warning: Section @zone[2] (guest) has no device, network, subnet or extra options
Mon Dec 18 20:01:07 2023 daemon.notice netifd: ovpnclient (18115): Warning: Section @zone[3] (ovpnclient) has no device, network, subnet or extra options
Mon Dec 18 20:01:07 2023 daemon.notice netifd: ovpnclient (18115):  * Clearing IPv4 filter table
Mon Dec 18 20:01:07 2023 daemon.notice netifd: ovpnclient (18115):  * Clearing IPv4 nat table
Mon Dec 18 20:01:07 2023 daemon.notice netifd: ovpnclient (18115):  * Clearing IPv4 mangle table
Mon Dec 18 20:01:07 2023 daemon.notice netifd: ovpnclient (18115):  * Clearing IPv4 raw table
Mon Dec 18 20:01:07 2023 daemon.notice netifd: ovpnclient (18115):  * Populating IPv4 filter table
Mon Dec 18 20:01:07 2023 daemon.notice netifd: ovpnclient (18115):    * Rule 'Allow-DHCP-Renew'
Mon Dec 18 20:01:07 2023 daemon.notice netifd: ovpnclient (18115):    * Rule 'Allow-IGMP'
Mon Dec 18 20:01:07 2023 daemon.notice netifd: ovpnclient (18115):    * Rule 'Allow-IPSec-ESP'
Mon Dec 18 20:01:07 2023 daemon.notice netifd: ovpnclient (18115):    * Rule 'Allow-ISAKMP'
Mon Dec 18 20:01:07 2023 daemon.notice netifd: ovpnclient (18115):    * Rule 'block_dns'
Mon Dec 18 20:01:07 2023 daemon.notice netifd: ovpnclient (18115):    * Rule 'Allow-DHCP'
Mon Dec 18 20:01:07 2023 daemon.notice netifd: ovpnclient (18115):    * Rule 'Allow-DNS'
Mon Dec 18 20:01:07 2023 daemon.notice netifd: ovpnclient (18115):    * Forward 'ovpnclient' -> 'wan'
Mon Dec 18 20:01:07 2023 daemon.notice netifd: ovpnclient (18115):    * Forward 'lan' -> 'ovpnclient'
Mon Dec 18 20:01:07 2023 daemon.notice netifd: ovpnclient (18115):    * Forward 'guest' -> 'ovpnclient'
Mon Dec 18 20:01:07 2023 daemon.notice netifd: ovpnclient (18115):    * Zone 'lan'
Mon Dec 18 20:01:07 2023 daemon.notice netifd: ovpnclient (18115):    * Zone 'wan'
Mon Dec 18 20:01:07 2023 daemon.notice netifd: ovpnclient (18115):    * Zone 'guest'
Mon Dec 18 20:01:07 2023 daemon.notice netifd: ovpnclient (18115):    * Zone 'ovpnclient'
Mon Dec 18 20:01:07 2023 daemon.notice netifd: ovpnclient (18115):  * Populating IPv4 nat table
Mon Dec 18 20:01:07 2023 daemon.notice netifd: ovpnclient (18115):    * Zone 'lan'
Mon Dec 18 20:01:07 2023 daemon.notice netifd: ovpnclient (18115):    * Zone 'wan'
Mon Dec 18 20:01:07 2023 daemon.notice netifd: ovpnclient (18115):    * Zone 'guest'
Mon Dec 18 20:01:07 2023 daemon.notice netifd: ovpnclient (18115):    * Zone 'ovpnclient'
Mon Dec 18 20:01:07 2023 daemon.notice netifd: ovpnclient (18115):  * Populating IPv4 mangle table
Mon Dec 18 20:01:07 2023 daemon.notice netifd: ovpnclient (18115):    * Rule 'process_mark'
Mon Dec 18 20:01:07 2023 daemon.notice netifd: ovpnclient (18115):    * Rule 'wan_in_conn_mark'
Mon Dec 18 20:01:07 2023 daemon.notice netifd: ovpnclient (18115):    * Rule 'lan_in_conn_mark_restore'
Mon Dec 18 20:01:07 2023 daemon.notice netifd: ovpnclient (18115):    * Rule 'out_conn_mark_restore'
Mon Dec 18 20:01:07 2023 daemon.notice netifd: ovpnclient (18115):    * Zone 'lan'
Mon Dec 18 20:01:07 2023 daemon.notice netifd: ovpnclient (18115):    * Zone 'wan'
Mon Dec 18 20:01:07 2023 daemon.notice netifd: ovpnclient (18115):    * Zone 'guest'
Mon Dec 18 20:01:07 2023 daemon.notice netifd: ovpnclient (18115):    * Zone 'ovpnclient'
Mon Dec 18 20:01:07 2023 daemon.notice netifd: ovpnclient (18115):  * Populating IPv4 raw table
Mon Dec 18 20:01:07 2023 daemon.notice netifd: ovpnclient (18115):    * Zone 'lan'
Mon Dec 18 20:01:07 2023 daemon.notice netifd: ovpnclient (18115):      - Using automatic conntrack helper attachment
Mon Dec 18 20:01:07 2023 daemon.notice netifd: ovpnclient (18115):    * Zone 'wan'
Mon Dec 18 20:01:07 2023 daemon.notice netifd: ovpnclient (18115):    * Zone 'guest'
Mon Dec 18 20:01:07 2023 daemon.notice netifd: ovpnclient (18115):      - Using automatic conntrack helper attachment
Mon Dec 18 20:01:07 2023 daemon.notice netifd: ovpnclient (18115):    * Zone 'ovpnclient'
Mon Dec 18 20:01:07 2023 daemon.notice netifd: ovpnclient (18115):  * Clearing IPv6 filter table
Mon Dec 18 20:01:08 2023 daemon.notice netifd: ovpnclient (18115):  * Clearing IPv6 nat table
Mon Dec 18 20:01:08 2023 daemon.notice netifd: ovpnclient (18115):  * Clearing IPv6 mangle table
Mon Dec 18 20:01:08 2023 daemon.notice netifd: ovpnclient (18115):  * Populating IPv6 filter table
Mon Dec 18 20:01:08 2023 daemon.notice netifd: ovpnclient (18115):    * Rule 'Allow-DHCPv6'
Mon Dec 18 20:01:08 2023 daemon.notice netifd: ovpnclient (18115):    * Rule 'Allow-MLD'
Mon Dec 18 20:01:08 2023 daemon.notice netifd: ovpnclient (18115):    * Rule 'Allow-ICMPv6-Input'
Mon Dec 18 20:01:08 2023 daemon.notice netifd: ovpnclient (18115):    * Rule 'Allow-ICMPv6-Forward'
Mon Dec 18 20:01:08 2023 daemon.notice netifd: ovpnclient (18115):    * Rule 'Allow-IPSec-ESP'
Mon Dec 18 20:01:08 2023 daemon.notice netifd: ovpnclient (18115):    * Rule 'Allow-ISAKMP'
Mon Dec 18 20:01:08 2023 daemon.notice netifd: ovpnclient (18115):    * Rule 'block_dns'
Mon Dec 18 20:01:08 2023 daemon.notice netifd: ovpnclient (18115):    * Rule 'Allow-DHCP'
Mon Dec 18 20:01:08 2023 daemon.notice netifd: ovpnclient (18115):    * Rule 'Allow-DNS'
Mon Dec 18 20:01:08 2023 daemon.notice netifd: ovpnclient (18115):    * Forward 'ovpnclient' -> 'wan'
Mon Dec 18 20:01:08 2023 daemon.notice netifd: ovpnclient (18115):    * Forward 'lan' -> 'ovpnclient'
Mon Dec 18 20:01:08 2023 daemon.notice netifd: ovpnclient (18115):    * Forward 'guest' -> 'ovpnclient'
Mon Dec 18 20:01:08 2023 daemon.notice netifd: ovpnclient (18115):    * Zone 'lan'
Mon Dec 18 20:01:08 2023 daemon.notice netifd: ovpnclient (18115):    * Zone 'wan'
Mon Dec 18 20:01:08 2023 daemon.notice netifd: ovpnclient (18115):    * Zone 'guest'
Mon Dec 18 20:01:08 2023 daemon.notice netifd: ovpnclient (18115):    * Zone 'ovpnclient'
Mon Dec 18 20:01:08 2023 daemon.notice netifd: ovpnclient (18115):  * Populating IPv6 nat table
Mon Dec 18 20:01:08 2023 daemon.notice netifd: ovpnclient (18115): Warning: fw3_ipt_rule_append(): Can't find target 'prerouting_lan_rule'
Mon Dec 18 20:01:08 2023 daemon.notice netifd: ovpnclient (18115): Warning: fw3_ipt_rule_append(): Can't find target 'postrouting_lan_rule'
Mon Dec 18 20:01:08 2023 daemon.notice netifd: ovpnclient (18115): Warning: fw3_ipt_rule_append(): Can't find target 'prerouting_wan_rule'
Mon Dec 18 20:01:08 2023 daemon.notice netifd: ovpnclient (18115): Warning: fw3_ipt_rule_append(): Can't find target 'postrouting_wan_rule'
Mon Dec 18 20:01:08 2023 daemon.notice netifd: ovpnclient (18115): Warning: fw3_ipt_rule_append(): Can't find target 'prerouting_guest_rule'
Mon Dec 18 20:01:08 2023 daemon.notice netifd: ovpnclient (18115): Warning: fw3_ipt_rule_append(): Can't find target 'postrouting_guest_rule'
Mon Dec 18 20:01:08 2023 daemon.notice netifd: ovpnclient (18115): Warning: fw3_ipt_rule_append(): Can't find target 'prerouting_ovpnclient_rule'
Mon Dec 18 20:01:08 2023 daemon.notice netifd: ovpnclient (18115): Warning: fw3_ipt_rule_append(): Can't find target 'postrouting_ovpnclient_rule'
Mon Dec 18 20:01:08 2023 daemon.notice netifd: ovpnclient (18115): Warning: fw3_ipt_rule_append(): Can't find target 'prerouting_rule'
Mon Dec 18 20:01:08 2023 daemon.notice netifd: ovpnclient (18115): Warning: fw3_ipt_rule_append(): Can't find target 'postrouting_rule'
Mon Dec 18 20:01:08 2023 daemon.notice netifd: ovpnclient (18115):    * Zone 'lan'
Mon Dec 18 20:01:08 2023 daemon.notice netifd: ovpnclient (18115):    * Zone 'wan'
Mon Dec 18 20:01:08 2023 daemon.notice netifd: ovpnclient (18115):    * Zone 'guest'
Mon Dec 18 20:01:08 2023 daemon.notice netifd: ovpnclient (18115):    * Zone 'ovpnclient'
Mon Dec 18 20:01:08 2023 daemon.notice netifd: ovpnclient (18115):  * Populating IPv6 mangle table
Mon Dec 18 20:01:08 2023 daemon.notice netifd: ovpnclient (18115):    * Rule 'process_mark'
Mon Dec 18 20:01:08 2023 daemon.notice netifd: ovpnclient (18115):    * Rule 'wan_in_conn_mark'
Mon Dec 18 20:01:08 2023 daemon.notice netifd: ovpnclient (18115):    * Rule 'lan_in_conn_mark_restore'
Mon Dec 18 20:01:08 2023 daemon.notice netifd: ovpnclient (18115):    * Rule 'out_conn_mark_restore'
Mon Dec 18 20:01:08 2023 daemon.notice netifd: ovpnclient (18115):    * Zone 'lan'
Mon Dec 18 20:01:08 2023 daemon.notice netifd: ovpnclient (18115):    * Zone 'wan'
Mon Dec 18 20:01:08 2023 daemon.notice netifd: ovpnclient (18115):    * Zone 'guest'
Mon Dec 18 20:01:08 2023 daemon.notice netifd: ovpnclient (18115):    * Zone 'ovpnclient'
Mon Dec 18 20:01:08 2023 daemon.notice netifd: ovpnclient (18115):  * Set tcp_ecn to off
Mon Dec 18 20:01:08 2023 daemon.notice netifd: ovpnclient (18115):  * Set tcp_syncookies to on
Mon Dec 18 20:01:08 2023 daemon.notice netifd: ovpnclient (18115):  * Set tcp_window_scaling to on
Mon Dec 18 20:01:08 2023 daemon.notice netifd: ovpnclient (18115):  * Running script '/etc/firewall.nat6'
Mon Dec 18 20:01:08 2023 daemon.notice netifd: ovpnclient (18115):  * Running script '/etc/firewall.swap_wan_in_conn_mark.sh'
Mon Dec 18 20:01:08 2023 daemon.notice netifd: ovpnclient (18115):  * Running script '/var/etc/gls2s.include'
Mon Dec 18 20:01:08 2023 daemon.notice netifd: ovpnclient (18115):    ! Skipping due to path error: No such file or directory
Mon Dec 18 20:01:08 2023 daemon.notice netifd: ovpnclient (18115):  * Running script '/usr/bin/gl_block.sh'
Mon Dec 18 20:01:08 2023 daemon.notice netifd: ovpnclient (18115):  * Running script '/etc/firewall.vpn_server_policy.sh'
Mon Dec 18 20:01:08 2023 daemon.notice netifd: ovpnclient (18115): Failed to parse json data: unexpected character
Mon Dec 18 20:01:08 2023 daemon.notice netifd: ovpnclient (18115): uci: Entry not found
Mon Dec 18 20:01:08 2023 user.notice root: openvpn process exit and try again 5 seconds later
Mon Dec 18 20:01:12 2023 daemon.notice netifd: Interface 'ovpnclient' is now down
Mon Dec 18 20:01:12 2023 user.notice mwan3[18407]: Execute ifdown event on interface ovpnclient (unknown)
Mon Dec 18 20:01:13 2023 user.notice firewall: Reloading firewall due to ifdown of ovpnclient ()

This is when connecting to uk1904.nordvpn.com.tcp

I have just tried this and it didn’t work. Thank you though.

Further suggestions welcomed thank you in advance!

admon · December 18, 2023, 8:20pm

Sounds like bad user/password/secret issue.

danield · December 18, 2023, 8:33pm

It’s the same username and password used to get the nordvpn logins, on the router interface itself, so I don’t think it’s that.

admon · December 18, 2023, 8:38pm

I can only tell you what the error shows
And the error tells us that the authentication did not work.

@hansome Is there something odd with NordVPN and the GL.iNet config downloader?

danield · December 19, 2023, 12:52am

I’m also getting the same error when going back to my Draytek at home. And I’ve double and triple checked that password. It worked fine, but now it doesn’t and I can’t remember what has changed since then. Both show the same Auth issue but it isn’t that (as far as I can tell).

bring.fringe18 · December 19, 2023, 2:01am

Nord VPN changed that back in the summer.

Off topic but they have a ‘reputation’ in the privacy ‘community’ (what isn’t a damn community these days?!). I won’t touch them:

hansome · December 19, 2023, 7:51am

That could be a network or Nordvpn server load issue.
But reported as “AUTH_FAILED” not precisely.
Please try to stop connecting and reconnect after a while. @danield

danield · December 19, 2023, 8:44am

It isn’t intermittent. This has persisted over the course of a month.

Understood, but Dropbox left their login form wide open in 2016 and yet I know people that run their businesses from there. Nowhere is safe really.

It isn’t an Auth issue because there is only one place to enter a username and password for nordvpn on the router. Plus as I mentioned above I get the same issue when connecting to my Draytek at home and I have triple checked the password. Plus, it all used to work fine but now doesn’t.

danield · December 19, 2023, 8:57am

In the interests of science I thought I’d reset the router and reproduce the issue. Here’s what I did:

Factory reset.
Set admin password.
Logged in, set up WiFi repeater mode and joined a WiFi network for Internet access.
Clicked VPN Dashboard, entered Nordvpn username and password, chose London from location, left it as UDP, then tried to connect to first London VPN endpoint.

No bueno, same error.

admon · December 19, 2023, 9:09am

Does the upstream WiFi blocks UDP OVPN maybe?

danield · December 19, 2023, 9:24am

No, it’s not that. I’ve just connected to the same WiFi upstream and configured my nordvpn app on my phone to use ovpn udp. Works fine.

hansome · December 19, 2023, 10:28am

Is it the same server? Nord app can switch server automatically.