OpenVPN import issue

dsg321 · 2022-10-31T06:57:49.531Z

I’ve connected the Beryl router (via cable) to an ISP’s router away from home. I want to install a VPN in the Beryl router. I use an OpenVPN setup, but not one of the officially supported VPNs from GL-INET. I tried importing the .ovpn profile but it didn’t work – and in fact the Beryl router’s WiFi stopped letting devices connect.

Are there instructions in how to make this work?

yuxin.zou · 2022-11-01T02:11:35.781Z

Which version of firmware is on your Beryl?
Some OpenVPN configuration parameters may not be supported. If you can, please provide a template of your configuration file (you can delete all IP and key values).

dsg321 · 2022-11-01T04:14:27.486Z

Firmware is 3.215 –

I’m not sure what you mean by template of configuration file.

alzhao · 2022-11-01T04:55:05.836Z

He is asking you to post the content of the ovpn to check.

dsg321 · 2022-11-01T05:15:24.414Z

Oh, I see. What are the IP and key values I should delete?

dsg321 · 2022-11-01T05:16:28.166Z

This is in the top lines:

Note: this config file contains inline private keys

and therefore should be kept confidential!

So my question is which parts should I remove?

Thanks…

dsg321 · 2022-11-01T06:36:33.380Z

Re client.ovpn: I’ve deleted the identification stuff and certificate information. Is this sufficient?
profile.zip (861 Bytes)

yuxin.zou · 2022-11-01T07:40:24.624Z

Yes.
Is this VPN configuration file provided by Sonic?
We had not tested this supplier before and it took some time for the developers to check.

alzhao · 2022-11-01T07:59:18.965Z

From the content, there is nothing special.

Does it import to the router successfully?
Does it connect? What is the error message?

If possbile, you can just pm working config to so that I can try.

dsg321 · 2022-11-01T22:06:14.394Z

Yes, it’s a profile they provide when I log into their VPN site.

dsg321 · 2022-11-01T23:36:32.838Z

It appears to import successfully but then, when I try to connect, I get this:

Blockquote VERIFY OK: depth=0, CN=OpenVPN Server
Control Channel: TLSv1.2, cipher TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, peer certificate: 2048 bit RSA, signature: RSA-SHA256
[OpenVPN Server] Peer Connection Initiated with [AF_INET]157.131.224.198:1194
AUTH: Received control message: AUTH_FAILED
SIGTERM[soft,auth-failure] received, process exiting
VPN client failed to connect. This may be because of wrong configuration, unsupported parameters or terminated by the server. Please choose another VPN profile or abort the connection.

The router wifi then stops working and I have to do a factory reset.

I’ll recheck username/pwd (though I’m sure they’re right).

dsg321 · 2022-11-02T00:28:10.908Z

Success – I was using the full email address as the logon, but turns out that it wasn’t necessary.

All set now; thank you for your assistance.