Search the Community

I've searched and tried everything and I can't get anything to work. Here's my setup. I have the Verizon Fios Actiontec router with a Asus RT-N16 as a secondary router with Tomato installed. The Asus is on a different subnet than the Actiontec and the Asus connects to AirVPN. I run everything through the second router which connects to AirVPN. I tried setting up forwarding the ports on AirVPN to have my Plex server visible through the VPN, but nothing. Most of the setups I see with Plex connect with the software client. Can someone point me in the right direction?

Hi, I'm new to the VPN scene and it seems I need some major help to get the most out of it. I also suspect that I'm slightly different from the majority of users here in that I'm using this for better gaming connectivity rather than security and privacy (basically, Playstation Network hates my non-vpn connection because it's NAT type 3, which is out of my control, so the VPN is to bypass that, which it has done). My connection is shared through my appartment complex and does dhcp assignment. No way to open ports on that end as management want to enable residents to just plug into the wall and go with no requirement to buy a router, so they won't slack on security. Admirable, but annoying for me. The setup: Linksys E4200 running DD-WRT v3.0-r27490 (07/06/15) mega, CAT-5 to the wall and the previously mentioned appartment complex-controlled fiber connection. 1 desktop pc connected by cable, one laptop and a playstation 4 as well as a phone on wi-fi. Speeds are the same wired or on wi-fi. My speed without connection to Air is in the 80-100 Mbps range, with Air (client or set up in the router, which is the end goal) 6-9 Mbps. I'm expecting a drop in speed, but this is a little extreme. Tried various combinations of servers and protocols, main two servers I've been switching between for testing have been Acubens (Sweden) and Aquilae (Germany), started with UDP on port 443, then TCP on the same port. Speeds were virtually identical, have cycled through both on port 80, 53 and 2018 as well. All setup done following the guide from AirVPN, no extra rules or setup done since I wouldn't have an idea where to start. I've seen suggestions in other threads to increase the buffer sizes for people using the Air client, is this possible in DD-WRT, and if so how would I do it? I've tried with and without QoS enabled, didn't seem to make a difference, but open to suggestions on tweaks there. UPnP is on, which seems to help with getting connected to Playstation Network, but have tried disabling it too. Any general suggestions to optimize for speed? The safety of firewall rules dropping connection if the cpn connection goes etc are nice, but I am willing to give them up for a fast, efficient way to connect to what I want to connect to. Because of the playstation, using the Air client and ICS isn't an option, I'm not moving the computer into the living room. So I really need to make it work on the router. I'm not sure what info people will need to be able to help me with this, but to start with, here's the latest opvenvpn log from the router. Anything else you need, just ask and I'll get it to you. lient: CONNECTED SUCCESS Local Address: 10.7.0.63 Remote Address: 10.7.0.63 Status VPN Client Stats TUN/TAP read bytes 37625622 TUN/TAP write bytes 63862092 TCP/UDP read bytes 67544747 TCP/UDP write bytes 40866705 Auth read bytes 63862604 pre-compress bytes 0 post-compress bytes 0 pre-decompress bytes 0 post-decompress bytes 0 LogClientlog: 19700101 01:00:18 I OpenVPN 2.3.7 mipsel-unknown-linux-gnu [sSL (OpenSSL)] [LZO] [EPOLL] [MH] [iPv6] built on Jul 6 2015 19700101 01:00:18 I library versions: OpenSSL 1.0.2c 12 Jun 2015 LZO 2.09 19700101 01:00:18 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:16 19700101 01:00:18 W NOTE: the current --script-security setting may allow this configuration to call user-defined scripts 19700101 01:00:18 W WARNING: file '/tmp/openvpncl/client.key' is group or others accessible 19700101 01:00:18 W WARNING: file '/tmp/openvpncl/ta.key' is group or others accessible 19700101 01:00:18 I Control Channel Authentication: using '/tmp/openvpncl/ta.key' as a OpenVPN static key file 19700101 01:00:18 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication 19700101 01:00:18 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication 19700101 01:00:18 Socket Buffers: R=[87380->131072] S=[16384->131072] 19700101 01:00:18 I Attempting to establish TCP connection with [AF_INET]62.102.148.131:80 [nonblock] 19700101 01:00:19 I TCP connection established with [AF_INET]62.102.148.131:80 19700101 01:00:19 I TCPv4_CLIENT link local: [undef] 19700101 01:00:19 I TCPv4_CLIENT link remote: [AF_INET]62.102.148.131:80 20150729 20:15:39 TLS: Initial packet from [AF_INET]62.102.148.131:80 sid=b7316a64 4cbb8a61 20150729 20:15:39 N TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity) 20150729 20:15:39 N TLS Error: TLS handshake failed 20150729 20:15:39 N Fatal TLS error (check_tls_errors_co) restarting 20150729 20:15:39 I SIGUSR1[soft tls-error] received process restarting 20150729 20:15:39 Restart pause 5 second(s) 20150729 20:15:44 W NOTE: the current --script-security setting may allow this configuration to call user-defined scripts 20150729 20:15:44 Socket Buffers: R=[87380->131072] S=[16384->131072] 20150729 20:15:44 I Attempting to establish TCP connection with [AF_INET]62.102.148.131:80 [nonblock] 20150729 20:15:45 I TCP connection established with [AF_INET]62.102.148.131:80 20150729 20:15:45 I TCPv4_CLIENT link local: [undef] 20150729 20:15:45 I TCPv4_CLIENT link remote: [AF_INET]62.102.148.131:80 20150729 20:15:45 TLS: Initial packet from [AF_INET]62.102.148.131:80 sid=49a2673c 32b3df6a 20150729 20:15:45 VERIFY OK: depth=1 C=IT ST=IT L=Perugia O=airvpn.org CN=airvpn.org CA emailAddress=info@airvpn.org 20150729 20:15:45 VERIFY OK: nsCertType=SERVER 20150729 20:15:45 NOTE: --mute triggered... 20150729 20:15:59 6 variation(s) on previous 3 message(s) suppressed by --mute 20150729 20:15:59 I [server] Peer Connection Initiated with [AF_INET]62.102.148.131:80 20150729 20:16:01 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1) 20150729 20:16:01 PUSH: Received control message: 'PUSH_REPLY redirect-gateway def1 bypass-dhcp dhcp-option DNS 10.7.0.1 comp-lzo no route-gateway 10.7.0.1 topology subnet ping 10 ping-restart 60 ifconfig 10.7.0.63 255.255.0.0' 20150729 20:16:01 OPTIONS IMPORT: timers and/or timeouts modified 20150729 20:16:01 NOTE: --mute triggered... 20150729 20:16:01 5 variation(s) on previous 3 message(s) suppressed by --mute 20150729 20:16:01 I TUN/TAP device tun1 opened 20150729 20:16:01 TUN/TAP TX queue length set to 100 20150729 20:16:01 I do_ifconfig tt->ipv6=1 tt->did_ifconfig_ipv6_setup=0 20150729 20:16:01 I /sbin/ifconfig tun1 10.7.0.63 netmask 255.255.0.0 mtu 1500 broadcast 10.7.255.255 20150729 20:16:01 /sbin/route add -net 62.102.148.131 netmask 255.255.255.255 gw 10.44.11.1 20150729 20:16:01 /sbin/route add -net 0.0.0.0 netmask 128.0.0.0 gw 10.7.0.1 20150729 20:16:02 /sbin/route add -net 128.0.0.0 netmask 128.0.0.0 gw 10.7.0.1 20150729 20:16:02 I Initialization Sequence Completed 20150729 21:15:59 TLS: soft reset sec=0 bytes=108182994/0 pkts=132933/0 20150729 21:15:59 VERIFY OK: depth=1 C=IT ST=IT L=Perugia O=airvpn.org CN=airvpn.org CA emailAddress=info@airvpn.org 20150729 21:16:00 VERIFY OK: nsCertType=SERVER 20150729 21:16:00 NOTE: --mute triggered... 20150729 21:16:13 1 variation(s) on previous 3 message(s) suppressed by --mute 20150729 21:16:13 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16 20150729 21:16:13 D MANAGEMENT: CMD 'state' 20150729 21:16:13 MANAGEMENT: Client disconnected 20150729 21:16:13 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16 20150729 21:16:13 D MANAGEMENT: CMD 'state' 20150729 21:16:13 MANAGEMENT: Client disconnected 20150729 21:16:13 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16 20150729 21:16:13 D MANAGEMENT: CMD 'state' 20150729 21:16:13 MANAGEMENT: Client disconnected 20150729 21:16:14 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16 20150729 21:16:14 D MANAGEMENT: CMD 'status 2' 20150729 21:16:14 MANAGEMENT: Client disconnected 20150729 21:16:14 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16 20150729 21:16:14 D MANAGEMENT: CMD 'log 500' 19700101 01:00:00 ca /tmp/openvpncl/ca.crt cert /tmp/openvpncl/client.crt key /tmp/openvpncl/client.key management 127.0.0.1 16 management-log-cache 100 verb 3 mute 3 syslog writepid /var/run/openvpncl.pid client resolv-retry infinite nobind persist-key persist-tun script-security 2 dev tun1 proto tcp-client cipher aes-256-cbc auth sha1 remote 62.102.148.131 80 comp-lzo yes tls-client tun-mtu 1500 mtu-disc yes ns-cert-type server tun-ipv6 tls-auth /tmp/openvpncl/ta.key 1 tls-cipher TLS-DHE-RSA-WITH-AES-128-CBC-SHA passtos

Hi All, I want to buy a new router because I am using now a Asus RT-AC66u with merlin and the VPN speeds are extremely slow I only get 10 procent of my ISP speed.. The ASUS RT-AC3200 seems to be really cool. But what do you guys think is the best Airvpn router? Thanks!

I recently bought an Asus router RT-AC68U to flash Tomato firmware as AirVPN offers a config generation for this. I had a few issues with that and noticed that Asus supports OpenVPN from scratch. I've tried it and it works flawless, no tomato is needed. Difficulty: Very low Time: 2 Minutes Prerequisite: - Asus Router (in my case it's a RT-AC68U but it should work for all asus routers that have OpenVPN support) Steps: 1. Browse to https://airvpn.org/generator/ and select 'Router or others' and choose a server you like. Tick on 'Direct, protocol UDP, port 443' and click on 'Generate'. Save this openvpn config file anywhere on your computer. 2. Open the asus router webinterface and click on 'VPN'. Click on 'Add profile', choose OpenVPN. Enter a description, leave username and password EMPTY. Click on 'Browse' and select the downloaded openvpn config file. Click on upload. Click on OK. That's it now you can click on connect. 3. Visit https://ipleak.net and check if it works. By default I have no dns leak. But in case you have you can setup the AirVPN DNS this way: 3b. Click on WAN tab. Turn DNS server off and enter either google's DNS 8.8.8.8 or AirVPN's DNS 10.4.0.1 or both as in the screenshot. That's it. Every client which is connected to the router now is secured by VPN.

[[introduction || Preparations]] After several months of waiting I finally present you How to connect to AirVPN with your Fritz!Box router (v2) Back in the time when AirVPN offered just one connection at a time many people were forced to use their routers to connect to AirVPN if they wanted all of their devices to use the benefits of a VPN connection. I wanted to use it as a central point for AirVPN access - all devices should use it. The only drawback: It doesn't have OpenVPN installed. There is a way to enable it with Freetz, a replacement firmware for nearly every Fritz!Box router available which enables you to install additional software (or remove AVM's official ones). As a result, I wrote a guide. Contrary to the first, this one won't make you read things you don't (want to) understand. Each step will be described in detail and you will be hinted at potential issues or other things worth to be mentioned. It will be more newbie-friendly - less giga-nerdy. This guide is for Fritz!Box routers with Fritz!OS 4 and older!Newer versions of Fritz!OS have got a feature called Packet Accelerator which collides with the conntrack iptables module. Forcing it to be included in newer kernels will cause your router to lose network connectivity or even reboot all the time (boot loop). A guide will be written shortly, but don't point the finger at me for messing up your device. You are choosing to make these changes! [software and tools you will need - preparations] VirtualBox. Freetz can be built with any Linux OS (I will think about whether to include a guide for this here) but if you want to avoid installing hundreds of more packages and configure them to work in the right way, use VirtualBox with the preconfigured... Freetz-Linux image. Do you know what router model you have? If not, login to your Fritz!Box configuration interface (for your convenience ) and look it up. Things like Fon and WLAN in the name are important here! There are models having the same number but are different versions. As soon as you know it navigate to AVM's FTP site and download a recovery image for your Fritz!Box model. If you don't want to do that or if you can't reach it, download ruKernelTool (click on the second link first for the credentials, then click on the first and enter the credentials), a toolbox for Fritz!Box routers with a large feature set. It's much more complicated so I recommend you to download the image instead. I also recommend you to use a SSH client for much easier access to the console. On Windows, use PuTTY for example.You've got everything? Good, let's begin! By the way, I strongly recommend you to use a LAN connection to do these steps. WiFi is just too unpredictable. Also, AVM's recovery tool won't allow any other interfaces to use for recovery. [[introduction || Preparations]]

/dev/ttyS0 recently analyzed D-Link's DIR-890L and found a security issue which opens up the possibility of executing any code with privileges of system, i.e. root. The worst thing about it is: The firmware version was designed to patch three different vulnerabilities in connection with HTTP and UPnP... .. which were, well, not really closed. If you are using a D-Link router orif you are planning on buying one,scroll to the bottom of the post and see if your model is listed there. If so, you should really think about your habits or your choices, respectively. From what I understood, this can only be exploited in a local network. The truth is: If D-Link doesn't seem to care about exploits in local networks - do you really think they care about what's coming from the internet? You should really abandon the D-Link ship.

Hi there, I just signed up for the airVPN service, it's working great on my laptop but... how do I set it up on my router to hide my IP address on my other computers since I have 2 more laptos! I have a lynksys router running Firmware: DD-WRT v24-sp2 PLEASE HELP ME! thank you

I would like to set up my router's firewall to deny all inbound and outbound traffic unless it is coming from or going to the airvpn servers. Is there a group of static IP addresses I can use to define this? Thank you.

I was wondering if anyone has built their own router or has anyone seen a tutorial on the net? I was curious I only get a max speed of maybe 7 mb on my asus n66u. I would like to increase my speed to as much as possible on openvpn for downloading and uploading. Thanks in Advance

Hi guys, I'm new to VPN and would like your advice before I buy something I shouldn't. I live in Europe and I got AirVPN mainly to access content from my native country and the US. Currently I can access both server locations using my laptop and I don't have any problems. Now, I want to expand my connectivity to any devices that uses Wi-fi in my place, for example Roku, Xbox and my Google Nexus. I understand I need to use a DD-WRT router for that. Now my questions: 1. I have a very bad modem/router, which I intend to replace. For me to get AirVPN in all my devices, do I need to by 2 routers? One for internet connection and one for the DDWRT? 2. Is Asus RT-N16 the best option for my DDWRT router? Anything cheaper you would recommend that would be easy to config for AirVPN? 3. What would be the best modem/router for my internet connection? I will be streaming netflix and other online TV. 4. I understand that once I set up a DDWRT router, I need to choose a Server Location, which most likely will be a US one. Now, what about when I want to switch to the Portuguese Server Location to see online TV, at anytime I want? 5. Last question, if I want to go back to my original IP address, how can I do it? thanks

Hello. I give up trying to setup a router with DD-WRT. Each time I turn it on I have to configure a new server because it can't connect to the one already set (TLS handshake failed, Certificate is not valid, unreachable address, I get something different each time). I followed the instructions in the site (https://airvpn.org/ddwrt/), downloaded configuration for various servers, but either it takes a long to get one that connects, or can't connect to any US server at all. I'm not blaming anyone here, it's just that it's frustrating. This is the error I'm getting this time> I've connected to this server successfully before. Is there something I'm forgetting to setup on the router so once I can connect to a server and I turn the router off, the settings stay in it and next time it reconnects automatically? Any help or guidance is very much appreciated. Thank you very much in advance.

DEPRECATED. USE V2: https://airvpn.org/topic/14233-how-to-openvpn-on-fritzbox-routers/ -- In the following I will describe the steps necessary to connect to and route all traffic through AirVPN using modified firmwares for Fritz!Box routers by AVM. AVM is a manufacturer of quite popular (and expensive) routers in German-speaking countries. Unfortunately it has it's restrictions - especially on older models there is absolutely no VPN software preinstalled. So how do we solve this problem? The solution is called Freetz. Basically it's just a firmware modification kit with which you apply mods and packages to the original firmware. One of those packages is openvpn and this guide shows how to configure it to use with AirVPN. Be aware that VoIP won't work properly with AirVPN since you'd need to forward more than 32 ports to make it work without issues. 1. Read the FAQ. 2. Read Freetz for beginners. 3. Read this how-to for an overview of what expects you. All right? Let's go! -- BUILDING THE FILESYSTEM -- 1. Startup linux on VirtualBox. Checkout the recent freetz-trunk using svn checkout http://svn.freetz.org/trunk freetz-develThis is really important, because recent trunks contain OpenVPN v2.3 which fixes serious routing problems on the Fritz!Box. cd to freetz-devel after completion. 2. Build your minimal firmware and flash it. 3. If everything went fine make yourself familiar with the web interface. Then proceed. I) In Packages/Packages select OpenVPN with version (2.3.3), SSL library (OpenSSL), Enable Management Console, Optimize for size. II) In Packages/Unstable select Iptables 1.4.11.1 (binary only, unstable) and Iptables-CGI 1.1. The general Iptables kernel modules and Iptables shared libraries are automatically selected. For full fun consider selecting everything in Select kernel modules (IPv4), Select shared libraries (IPv4) and Select shared libraries (both IPv4 and IPv6). III) Now build your firmware and flash it. If everything worked fine proceed to the AirVPN config. -- OPENVPN CONFIGURATION -- Go to the config generator to generate your configuration files. Choose Router or other, then your preferred server. Check Advanced, your preferred connection mode and then Separate keys/certs from .ovpn file (not necessary, but this one will make it easier to setup the keys/certificates). Open every generated file with an editor like Notepad++. The config is only necessary to grab information you need, you are not going to upload it. Look into the .ovpn file and set up everything like this: Now you have to add the certificates. You can find the menu items I mention in the sidebar. Copy the whole content from 1) user.crt into the box at Box Cert. 2) ca.crt into the box at CA Cert. 3) user.key into the box at Private Key. 4) ta.key into the box at Static Key. Now start OpenVPN over the web interface. Your internet connection will drop but you will be able to connect to the Fritz!Box. -- 301: INTERNET MOVED PERMANENTLY -- Don't worry. iptables will help you to get the internet connection back. You just need to create one simple rule to nat all traffic to tun0. Now the Iptables-CGI comes into play. 1. Click on Iptables in the sidebar, check Automatic at "start type" and then press the start button. 2. Go to Editor in the sidebar. Check Add and pick from the drop-down menus: Chain: POSTROUTING Input-Interface: tun0 NAT: Normal Click on Submit. Go back to Iptables and press the restart button. Now check at Rules whether iptables-save has saved your rule. It should have been done so. This might look different for you: # Generated by iptables-save v1.4.11.1 on Tue Apr 15 23:43:28 2014 *nat :PREROUTING ACCEPT [75:4106] :POSTROUTING ACCEPT [27:4097] -t nat -o tun0 -j MASQUERADE :OUTPUT ACCEPT [10:3229] COMMIT # Completed on Tue Apr 15 23:43:28 2014 # Generated by iptables-save v1.4.11.1 on Tue Apr 15 23:43:28 2014 *filter :INPUT ACCEPT [461:31565] :FORWARD ACCEPT [45:2332] :OUTPUT ACCEPT [457:137328] COMMIT # Completed on Tue Apr 15 23:43:28 2014 You're done. The internet connection of ​all the devices in your network is routed through the tunnel. Tested on AVM Fritz!Box Fon WLAN 7141 with firmware 41.04.77, Freetz version: freetz-devel-11941

Hi AirVPN Forums, Love The Service!. Ok, Well this is my Enquiry, is there a way to Exclude an IP Address on the router, & put it outside the VPN Connection. for example, My laptop is 192.168.1.8 & Thats happily running within VPN. BUT i want 192.168.1.200 To be Outside of this zone & be able to access the internet with 0 VPN Connection.. So it will show the ISP's Provided IP Address.. Sorry if this question is somewhat vague & Badly Formatted. Thanks. Stan464. More INFO Router: Netgear WNR834B DD/FW: DD-WRT OpenVPN Build. GWIP: 192.168.1.1 ISPGW:192.168.0.1

I've been looking at pre-configured DD-WRT dual band routers on flashrouters[dot]com. They set up OpenVPN on a list of VPN services, but AirVPN isn't listed. They also offer to install/configure for other OpenVPN providers if there's a install manual provided by the VPN provider. Will there be any problem with sharing the install information to them? Is it against the rules to run connections from 2 computers through the router to your service?