OpenVPN client config arguments

Post new topic   Reply to topic    DD-WRT Forum Index -> Advanced Networking
Author Message
HNJAMeindersma
DD-WRT Novice


Joined: 10 May 2018
Posts: 7

PostPosted: Thu May 10, 2018 22:26    Post subject: OpenVPN client config arguments Reply with quote
I currently have a successful DD-WRT v3.0-r35898 std (05/07/18) OpenVPN client setup running with NordVPN as the provider on a simple D-link DIR-825. I am using the 'TLS Auth Key' and 'CA Cert' fields to paste in the certificates. And the 'User Pass Authentication' fields for login credentials.

The setup tutorial I used: https://nordvpn.com/tutorials/dd-wrt/openvpn-gui/

However, I would like to direct to a certificate file on a flashdrive connected to the router via the 'Additional Config' field. I've found this article describing various arguments/commands for the VPN client.

https://www.dd-wrt.com/wiki/index.php/VPN_%28the_easy_way%29_v24%2B

I am currently unable to get this to work with a combination of the following commands:

Code:
ca /jffs/nordvpn/2018-04-27.certificates/nl209_nordvpn_com_ca.crt
cert /jffs/nordvpn/2018-04-27.certificates/nl209_nordvpn_com_ca.crt
key /jffs/nordvpn/2018-04-27.certificates/nl209_nordvpn_com_tls.key


When I use the 'key' argument is says in the log that I "should use both". But then trying either key+ca or key+cert or all 3 will not work.

Would I be able to use this method, and if so what arguments do I need to use?


Last edited by HNJAMeindersma on Wed Jul 11, 2018 19:07; edited 1 time in total
Sponsor
HNJAMeindersma
DD-WRT Novice


Joined: 10 May 2018
Posts: 7

PostPosted: Sat May 12, 2018 16:40    Post subject: Reply with quote
eibgrad wrote:
Code:
cat /tmp/openvpncl/openvpn.conf


Just what I needed, thanks!
HNJAMeindersma
DD-WRT Novice


Joined: 10 May 2018
Posts: 7

PostPosted: Wed Jul 11, 2018 19:16    Post subject: Reply with quote
Oh btw, my solution was:

I mounted a USB flash drive as /jffs which contains all the certificate files specifically for NordVPN. Then in 'Additional Config' I put:

Code:
# Certificates
tls-auth /jffs/nordvpn/certificates/ab123_nordvpn_com_tls.key 1
ca /jffs/nordvpn/certificates/ab123_nordvpn_com_ca.crt

# Logging
log /jffs/logs/vpn.log

# Additional configuration
remote-cert-tls server
remote-random
nobind
tun-mtu 1500
tun-mtu-extra 32
mssfix 1450
persist-key
persist-tun
ping-timer-rem
reneg-sec 0


Notice the '1' behind tls-auth. This got me struggling for some time.

It is easiest this way for me keep a recent copy of the NordVPN certificate files, to easily switch the router to another server.

This setup could also work for other VPN providers, however the '# Additional configuration' may be different.
thomasashwin
DD-WRT Novice


Joined: 14 Aug 2017
Posts: 19

PostPosted: Fri Aug 03, 2018 6:17    Post subject: Reply with quote
Recently I have also faced the same problem & contacted with Wanos.co. They helped me to fix that issue in a short time period. According to me, it will better to take help from your network service provider.
Display posts from previous:    Page 1 of 1
Post new topic   Reply to topic    DD-WRT Forum Index -> Advanced Networking All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You cannot download files in this forum