Search the Community

Hi everyone, i have just signed up for three days to test and cant seem to connect to my router through the merlin openvpn client settings page. it says connected but in vpn status it just says connecting and never does? cant find any specific info for airvpn router setup guides either..

Dear @all, my Asus Router RT-AC88U - flashed with current Merlin Beta-Firmware 380.67_alpha2 - is configured to run as AirVPN OpenVPN-Client. ccording to the following AirVPN HowTo: https://airvpn.org/asuswrt/ After importing AirVPN's *.ovpn config-file, I modified the following OpenVPN client-parameters in the advanced settings section (my suggestion to everyone):Accept DNS Configuration (AirVPN -> Disabled): Should be "Strict" (recommended) or alternatively to "Exclusive"Redirect Internet traffic (AirVPN -> No): Should be set to "all", to be sure, that every traffic will be forwarded through the VPN-tunnelI added "mute-replay-warnings" to the custom configuration field. So, now AirVPN-client connection is up and vpn connection via the router is running successfully. In addition to that, I'd like to use the OpenVPN-server of the above mentioned router, to enable secure remote access to my home network (NAS, Samba-Shares, Printers etc.) - from the road (when I'm not at home) - using my mobile phone or my Laptop. So I startet with the configuration of OpenVPN-server 1. Sample for Advanced Config: see attached image After saving the configuration, I startet the router's export and imported the generated *.ovpn-file to my client devices OpenVPN-installation. Then I configured an open port using the "remote port forwarding"-feature of AirVPN's client-backend, in order to enable TCP/UDP-Traffic to my local OpenVPN-Server port (e.g. 1149) using a predifined ddns-alias (like XXXXX.airdns.org). So for example Airvpn port 50000 directs to local port 1149 (TCP + UDP). Unfortunaltely I got now stuck with building up any connection from the clients. The DNS-resolution of AirVPN works correctly (client receives correct OpenVPN-Server IP), but the OpenVPN-Client (version 1.1.1 build 212 - 64-bit on iPhone)) ends with connection_timeout. iPhone's OpenVPN-client Log-File (anonymized): 2017-06-11 02:07:16 ----- OpenVPN Start ----- OpenVPN core 3.1.2 ios arm64 64-bit built on Dec 5 2016 12:50:25 2017-06-11 02:07:16 Frame=512/2048/512 mssfix-ctrl=1250 2017-06-11 02:07:16 UNUSED OPTIONS 2017-06-11 02:07:16 EVENT: RESOLVE 2017-06-11 02:07:16 Contacting 46.165.XXX.XXX:YYYYY via TCP 2017-06-11 02:07:16 EVENT: WAIT 2017-06-11 02:07:16 SetTunnelSocket returned 1 2017-06-11 02:07:16 Transport Error: TCP connect error on 'XXXXXX.airdns.org:YYYYY' (46.165.XXX.XXX:YYYYY): Connection refused 2017-06-11 02:07:16 Client terminated, restarting in 2000 ms... 2017-06-11 02:07:17 NET Internet:ReachableViaWWAN/WR t------ 2017-06-11 02:07:18 EVENT: RECONNECTING 2017-06-11 02:07:18 Contacting 46.165.XXX.XXX:YYYYY via TCP 2017-06-11 02:07:18 EVENT: WAIT 2017-06-11 02:07:18 SetTunnelSocket returned 1 2017-06-11 02:07:19 Transport Error: TCP connect error on 'XXXXXX.airdns.org:YYYYY' (46.165.XXX.XXX:YYYYY): Connection refused 2017-06-11 02:07:19 Client terminated, restarting in 2000 ms... Is there anything more I need to configure on the router or the client? Maybe a firewall forwarding problem (if this could be the problem, what do I need to do)? Since I do not have to forward to a specific client in my home lan (that is running a OpenVPN-server), but the main router itself is the OpenVPN server, I didn't find a suitable configuration example, yet. I would be very grateful for tips or helping hints.

Hello, I was curious what would happen if I used AirVPN with ASUS Merlin router and have Eddie installed on a windows 10 workstation at the same time. Obv trying to avoid IP leaking. Would using AirVPN on an ASUS router with Merlin be just as reliable as the Eddie software? Eddie has been rocksolid and as far as I know has never had a leak, the network lock works great.. But I would really love to switch things up and get a new router with AirVPN installed on it. I have concerns that the killswitch or lock on the router is not as realiable as Eddies custom client. On the ASUS router, if I use the .ovpn file from AirVPN and also configure the killswitch policy rules to only let out VPN connections would that be just as reliable as the Eddie client? Is it possible to install the client on the PC along with AIR on the router? That way most of my devices will use the router vpn and a couple workstations can use the Eddie client and connect to the VPN router, kinda like a double killswitch. Im just looking for ideas or any feedback. Which would you guys trust more... the killswitch on router or network lock on eddie? Thank you!

Hi Guys Im using the Asus ac68u router, flashed with Merlinwrt. Using the openvpn profile on the router, I can only get a maximum of about 5.5mbps on my 100mbps fibre connection. I have tried various server, ranging from best latency to speed speed (as per the Eddie recommendations), and cannot for the life of me get better speeds. Can anyone please assist? Thanks a lot.

EDIT: Hello all In order to get an Internet connection i need to reset dns and ip settings everytime after being connected to AirVPN. Help and information about any of this is greatly appreciated. Thanks for reading. SOLVED using merlin user scripts.

Hello, I am using an Asus RT-AC87U with AirVPN. I have a couple of problems. I wish to forward multiple :80 ports to multiple addresses, but I believe that is not directly possible. I can create the IPTABLES rules, but I can only open port 80 to the VPN if I am correct? Is there a way I can open multiple :80 ports on multiple local IPs? It doesn't really matter if I need different or new hardware. Second, my Asus router seems very instable. The speeds are slow (around 1.5mbps where I can get 300mbps without VPN), but that isn't the real problem. Every week or so, the VPN client disables itself without further notice, and I can't enable it manually, it simply never starts. The logs state nothing. The only option I found so far is to fully reset the router and setup everything from stock again, until it breaks again. Am I maybe better of using a custom (server-grade) box or router running PfSense (or similar)? Also keeping my first quesion in mind.

Hi everyone, I had some difficulty setting up port forwarding with the Merlin WRT firmware on my ASUS routers and did not find a great guide online so figured I would write one up to hopefully help save someone a few hours of pain. 1. Download the Merlin WRT firmware from the website and just upload is as a regular file through the Administration -> Firmware Upgrade page. 2. Once done go to Administration -> System -> Persistent JFFS partition and make sure enable both options and restart. This is where the script will go. Restart the router. 3. Download Win-SCP to help you upload and edit files on the router. I found this to be the easiest way. 4. Log in to your router with WinSCP: - File protocol: SCP - Host name: Router IP (eg. 192.168.1.1) - User name/Password of your router – Login 5. Use the “..” folder all the way on the top to go all the way back where you will see “jffs” partition. Go to jffs -> scripts and then right click and create new file named “nat-start” without quotations. So /jffs/scripts/nat-start For whatever reason the first time I activated JFFS partition it was read only and did not allow me to create any new files so I followed the instructions here and used the commands through telnet to mount the partition and then restarted the router 6. Once the file is created, right click and goto properties and make sure Owner permission has check next to “X” making it executable. You can do this through telnet also using chmod command. 7. Use the following script below to setup port forwarding: #!/bin/sh iptables -I FORWARD -i br0 -o tun11 -j ACCEPT iptables -I FORWARD -i tun11 -o br0 -j ACCEPT iptables -I FORWARD -i br0 -o vlan1 -j DROP iptables -I INPUT -i tun11 -j REJECT iptables -t nat -A POSTROUTING -o tun11 -j MASQUERADE iptables -I FORWARD -i tun11 -p udp -d *IP of device requiring open port* --dport *Port* -j ACCEPT iptables -I FORWARD -i tun11 -p tcp -d *IP of device requiring open port* --dport *Port* -j ACCEPT iptables -t nat -I PREROUTING -i tun11 -p tcp --dport *Port* -j DNAT --to-destination *IP of device requiring open port* iptables -t nat -I PREROUTING -i tun11 -p udp --dport *Port* -j DNAT --to-destination *IP of device requiring open port* ~Obviously replace the stuff between * * with the right numbers and remove the *. 8. To check which tun and vlan you have telnet to your router and type in “ifconfig” and use this information to determine this. The 2nd paragraph can be copied for multiple ports. I have OSX so I used "Terminal.app" and typed "telnet 192.168.1.1" and then type in your admin/pass, then "ifconfig". 9. That’s it. Save it and restart your router. Make sure you obviously setup the correct ports on the AirVPN website. 10. You can check under your router page: System Log -> Port Forwarding to see the appropriate ports being forwarded. Also can check through the AirVPN website. Hope that helps. Let me know if something is unclear and I will modify it. Thanks and enjoy.

Hello, I currently am having a problem with my unraid server as I only want to route my torrent traffic through my VPN and kee pthe rest of my applications running through my regular network (Plex, Sickbeard, etc. etc.) The OpenVPN client uses an OVDB file I generate to connect to airvpn, I am assuming I am going to have to configure my torrent traffic using routing tables. I have no idea how to do this. Under the Option Extended Routing I have the following Options: None Bypass IP Address from Tunnel Route only Specific IP Addressses I'm assuming I have to do something here or edit my routing tables elsewhere. (possibly in my OVDB file?) My default gateway on my local network is 192.168.2.1 If anyone can provide any insight it'd be greatly appreciated

I have successfully followed the AirVPN instructions on setting up the Asus RT-N66U's (Merlin firmware) openvpn client. My concern now is protecting privacy in the event the VPN drops & traffic continues through the ISP. I would like to route all client traffic through the VPN & in the event it drops, no access to the internet is available to the clients. Does anyone know of a solution for this ? A workable solution exists for the for DD-WRT routers & I'm guessing similar one can be done for the RT-N66U as it runs a variant of DD-WRT (AsusWRT). I'm not technical enough to implement it so would appreciate any help. https://airvpn.org/index.php?option=com_kunena&func=view&catid=3&id=4287&Itemid=142#4287