RT-AX86U and OpenVPN

[kev2021]

Hi all,

Just looking into setting up OpenVPN and I saw online someone setting there openvpn to TAP in advanced settings and then having a option “Client address pool” whereby they coudl set a start Ip address and end Ip address for clients connection.

On my RT-AX86U, I don’t see that option on TAP, if I choose TUN, I see a option for VPN subnet/netmask and I can specify a subnet to use but not a actual IP address range.

I was going to effectively give my VPN clients a IP in the same address range as the lan where the router is so I could easily access everything but it seems only option is to specify the subnet and let it find a IP address but don’t want it to conflict with existing devices so I’m going to leave it as default for now in TUN and see if i can then connect to my local lan when I get on the VPN.

Last time you may recall, I tried but it didn’t work as my LAN in both locations where on same IP address range so for example, typing in my router IP gave me my local router but the one at the remote end.  However, this time, they will be on different IP ranges so that wont happen and maybe it will route through to my router on remote end :)

Also, I have an existing DDNS setup in both locations, for accessing something else, I presume I can use this DDNS address to connect the VPN as opposed to use ASUS DDNS as effectively it will just point to the IP of my router right? If not, I’ll get round it by finding out the IP manually from my DDNS and just enter that in the file to temporarily test it and then look into the DDNS part at a later date, at least I have a work around :)

Thanks

Kev

Share the knowledge

You need to login in order to vote

[UK Sentinel]

I must be loosing my mind – I thought you opted for the RT-AX86S ?

Share the knowledge

In a completely sane world, madness is the only freedom (J.G.Ballard).

You need to login in order to vote

[kev2021]

LOL sorry… gets confusion.

So scenario is this..

Parents have RT-AX86U – which I will setup VPN on so that I can access things to assist when I’m not there.

I’m getting the RT-AX86S – which I will also setup VPN on so I can access my place remotely from parents.

This will help assist when base station for VOIP wont register with provider etc – which has happened once since parents signed up.

So the plan is, I’ll be able to access either location from being at either location, if that makes sense?  The VPN will only be establish when needed so it wont be up 24/7 etc.

So I’ve setup VPN on parents router and hence didn’t see that option, which appeared to be on AC86 having read the thread so i guess its changed now? or perhaps they were running a different firmware on the router, i didn’t notice them mention anything.

Just thought I’d ask regarding it and see.

So essentially I’ll be able to create a VPN from

AX86U to AX86S

AX86S to AX86U

but only one will be active at any one time.

Thanks

Kev

Share the knowledge

You need to login in order to vote

[UK Sentinel]

Thanks for the clarity – Are you on the latest firmware as this may explain the TAP options missing ?

FYI:

• TUN is a virtual point-to-point IP link and you’ll have a possibility to control access rights on a client-specific basis.
• TAP is a virtual ethernet adapter, it works like a switch and makes it possible to logically merge several ethernet networks, as if they were a single ethernet subnet.

Share the knowledge

In a completely sane world, madness is the only freedom (J.G.Ballard).

You need to login in order to vote

[UK Sentinel]

As for the ‘Client address pool’ this should be under Interface Type (TAP)

Advanced Settings > Allocate from DHCP = No

Share the knowledge

In a completely sane world, madness is the only freedom (J.G.Ballard).

You need to login in order to vote

[kev2021]

Hi,

 

im on the August firmware on 86u, not setup the 86S yet, been busy making notes of settings on 86U so can setup the 86S the same and also been going through making a note of static devices info and then setting those to dhcp.

i’ve got 1 device showing on but router I need to track down as I’m not sure what it is. Bthub labelled it a smart phone but that it isn’t or a iPad so trying to work out what it is. Everything else has been updated.

i have 1 IP for Nest-E, the heat link I don’t *think* connects to WiFi, think it connect to the thermostat so that should be fine (I know parents nest thermostat learning talks to the link by threads, not sure bout Nest e but will try find it tomorrow.

 

thanks

kev

Share the knowledge

You need to login in order to vote

[UK Sentinel]

Enjoy

Share the knowledge

In a completely sane world, madness is the only freedom (J.G.Ballard).

Liked by:

You need to login in order to vote

[kev2021]

So far so good, not really seen much in way of difference between the 86S and 86U, I thought I may see some visual differences i.e. some options not present etc but nothing I’ve come across so far.

At present, with not all my devices connected as I don’t need them all on, I’m using 344mb of 512mb ram and CPU is low, less than 5%.

Hopefully this is about normal :)

Kev

Share the knowledge

You need to login in order to vote

[Grisu]

2,5 vs. 1GHz LAN
RAM 512 vs. of 1GB
USB2.0 vs. USB3.0

For most no noticeable difference.

Share the knowledge

You need to login in order to vote

[kev2021]

Thanks @grisu, yeah I knew about the ram and the port, i just thought maybe some menus/screens would have missing options :)

All good though, being the same is ideal a easier to apply changes to both :)

Kev

Share the knowledge

You need to login in order to vote

[kev2021]

Hi all,

Just to update, I managed to get OpenVPN to work on the 86S :)  I left the VPN IP as the default ones and I’m now able to access the router when connected from a different location :)

Just out of curiosity, when I enabled DDNS on the router, it came up with a really long string, how do I go about changing that and registering a more rememberable name?

Also, is there a site I can log into to check what the IP is associated with the asusddns?

Thanks

Kev

Share the knowledge

Liked by:

You need to login in order to vote

[kev2021]

One thing I just noticed, when I connect remotely via the VPN, I’m unable to access the Draytek modem, however I can when I’m on the lan, is it possible to access the modem via the vpn at all? Just curious if anyone has done this before.

Thanks

Kev

Share the knowledge

You need to login in order to vote

[UK Sentinel]

I have tried that in the past and alas could not gain access to remote Modem (or simular), VPN and routing tables do not allow I believe.

Share the knowledge

In a completely sane world, madness is the only freedom (J.G.Ballard).

You need to login in order to vote

[kev2021]

Thanks, no problem, just thought I’d ask incase it was possible :)

Kev

Share the knowledge

You need to login in order to vote

[Author]

Posts