Vraag


Acties:
  • 0 Henk 'm!

  • J-roenn
  • Registratie: December 2005
  • Laatst online: 07:32
Mijn vraag
Ik probeer van mijn RT-AC66U een VPN client te maken zodat devices die hiermee verbinden automatisch gebruik maken van VPN. De instelling lijkt geslaagd (ik zie het blauwe vinkje en hij geeft bij de VPN "Connected" aan) maar devices die verbinding maken met de router gebruiken niet de VPN.

Relevante software en hardware die ik gebruik
een ASUS RT-AC66U
Surfshark VPN

Wat ik al gevonden of geprobeerd heb

Allereerst natuurlijk de handleiding op https://support.surfshark...-running-AsusWRT-firmware gevolgd.

Ik heb de nieuwste firmware gedownload, support gehad van Surfshark, die adviseerde me om ook nog handmatig de DNS in te stellen, dat gaf echter geen oplossing, vervolgens heb ik de credentials bij Surfshark nog een keer gewijzigd, ook dat hielp niet.

ik zag in de logfiles wel enkele foutmeldingen voorbij komen, misschien kan iemand aan de hand hiervan zien wat er mis gaat ?

Edit1
Ik zag zojuist dat de tijdzone niet goed stond, die heb ik nu wel op Amsterdam gezet, helaas was dat niet de oplossing.

code:
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
May  6 15:18:48 rc_service: httpd 354:notify_rc restart_vpncall
May  6 15:18:49 kernel: tun: Universal TUN/TAP device driver, 1.6
May  6 15:18:49 kernel: tun: (C) 1999-2004 Max Krasnyansky <maxk@qualcomm.com>
May  6 15:18:49 kernel: ADDRCONF(NETDEV_UP): tun15: link is not ready
May  6 15:18:49 kernel: device tun15 entered promiscuous mode
May  6 15:18:49 vpnclient5[1157]: OpenVPN 2.4.7 mipsel-unknown-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on Jun 26 2020
May  6 15:18:49 vpnclient5[1157]: library versions: OpenSSL 1.0.2u  20 Dec 2019, LZO 2.03
May  6 15:18:49 vpnclient5[1159]: WARNING: --ping should normally be used with --ping-restart or --ping-exit
May  6 15:18:49 vpnclient5[1159]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
May  6 15:18:49 vpnclient5[1159]: Outgoing Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
May  6 15:18:49 vpnclient5[1159]: Incoming Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
May  6 15:18:49 vpnclient5[1159]: TCP/UDP: Preserving recently used remote address: [AF_INET]81.19.209.55:1194
May  6 15:18:49 vpnclient5[1159]: Socket Buffers: R=[118784->118784] S=[118784->118784]
May  6 15:18:49 vpnclient5[1159]: UDP link local: (not bound)
May  6 15:18:49 vpnclient5[1159]: UDP link remote: [AF_INET]81.19.209.55:1194
May  6 15:18:49 vpnclient5[1159]: TLS: Initial packet from [AF_INET]81.19.209.55:1194, sid=2ca41694 98bea00a
May  6 15:18:49 vpnclient5[1159]: WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
May  6 15:18:49 vpnclient5[1159]: VERIFY OK: depth=2, C=VG, O=Surfshark, CN=Surfshark Root CA
May  6 15:18:49 vpnclient5[1159]: VERIFY OK: depth=1, C=VG, O=Surfshark, CN=Surfshark Intermediate CA
May  6 15:18:49 vpnclient5[1159]: VERIFY KU OK
May  6 15:18:49 vpnclient5[1159]: Validating certificate extended key usage
May  6 15:18:49 vpnclient5[1159]: ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
May  6 15:18:49 vpnclient5[1159]: VERIFY EKU OK
May  6 15:18:49 vpnclient5[1159]: VERIFY OK: depth=0, CN=nl-ams-v112.prod.surfshark.com
May  6 15:18:49 vpnclient5[1159]: WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1633', remote='link-mtu 1581'
May  6 15:18:49 vpnclient5[1159]: WARNING: 'cipher' is used inconsistently, local='cipher AES-256-CBC', remote='cipher AES-256-GCM'
May  6 15:18:49 vpnclient5[1159]: WARNING: 'auth' is used inconsistently, local='auth SHA512', remote='auth [null-digest]'
May  6 15:18:49 vpnclient5[1159]: Control Channel: TLSv1.2, cipher TLSv1/SSLv3 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
May  6 15:18:49 vpnclient5[1159]: [nl-ams-v112.prod.surfshark.com] Peer Connection Initiated with [AF_INET]81.19.209.55:1194
May  6 15:18:51 vpnclient5[1159]: SENT CONTROL [nl-ams-v112.prod.surfshark.com]: 'PUSH_REQUEST' (status=1)
May  6 15:18:51 vpnclient5[1159]: PUSH: Received control message: 'PUSH_REPLY,dhcp-option DNS 162.252.172.57,dhcp-option DNS 149.154.159.92,redirect-gateway def1,sndbuf 524288,rcvbuf 524288,explicit-exit-notify,block-outside-dns,route-gateway 10.8.8.1,topology subnet,ping 60,ping-restart 180,ifconfig 10.8.8.6 255.255.255.0,peer-id 1,cipher AES-256-GCM'
May  6 15:18:51 vpnclient5[1159]: Options error: Unrecognized option or missing or extra parameter(s) in [PUSH-OPTIONS]:7: block-outside-dns (2.4.7)
May  6 15:18:51 vpnclient5[1159]: OPTIONS IMPORT: timers and/or timeouts modified
May  6 15:18:51 vpnclient5[1159]: OPTIONS IMPORT: explicit notify parm(s) modified
May  6 15:18:51 vpnclient5[1159]: OPTIONS IMPORT: --sndbuf/--rcvbuf options modified
May  6 15:18:51 vpnclient5[1159]: Socket Buffers: R=[118784->237568] S=[118784->237568]
May  6 15:18:51 vpnclient5[1159]: OPTIONS IMPORT: --ifconfig/up options modified
May  6 15:18:51 vpnclient5[1159]: OPTIONS IMPORT: route options modified
May  6 15:18:51 vpnclient5[1159]: OPTIONS IMPORT: route-related options modified
May  6 15:18:51 vpnclient5[1159]: OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
May  6 15:18:51 vpnclient5[1159]: OPTIONS IMPORT: peer-id set
May  6 15:18:51 vpnclient5[1159]: OPTIONS IMPORT: adjusting link_mtu to 1656
May  6 15:18:51 vpnclient5[1159]: OPTIONS IMPORT: data channel crypto options modified
May  6 15:18:51 vpnclient5[1159]: Data Channel: using negotiated cipher 'AES-256-GCM'
May  6 15:18:51 vpnclient5[1159]: Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
May  6 15:18:51 vpnclient5[1159]: Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
May  6 15:18:51 vpnclient5[1159]: TUN/TAP device tun15 opened
May  6 15:18:51 vpnclient5[1159]: TUN/TAP TX queue length set to 100
May  6 15:18:51 vpnclient5[1159]: /sbin/ifconfig tun15 10.8.8.6 netmask 255.255.255.0 mtu 1500 broadcast 10.8.8.255
May  6 15:18:51 vpnclient5[1159]: /etc/openvpn/ovpn-up tun15 1500 1584 10.8.8.6 255.255.255.0 init
May  6 15:18:51 dnsmasq[351]: read /etc/hosts - 5 addresses
May  6 15:18:51 dnsmasq[351]: using nameserver 149.154.159.92#53
May  6 15:18:51 dnsmasq[351]: using nameserver 162.252.172.57#53
May  6 15:18:51 vpnclient5[1159]: Initialization Sequence Completed