[HOWTO] Set Up OpenVPN Server on ASUS Wireless Router [RT-AC68U]
HTML-код
- Опубликовано: 16 окт 2024
- ►SUBSCRIBE: www.youtube.co...
►INSTAGRAM: / behfor
►SUPPORT My Channel: / behfor
►My Amazon picks (my affiliate links): www.amazon.com...
#ASUS #VPN #OPENVPN #SERVER #ASUSWRT
Wireless Router used in this video:
►ASUS RT-AC68U: amzn.to/2DKiEV7
Disclosures:
This video description contains affiliate links which means as an Amazon Associate I earn from qualifying purchases (at no extra cost to buyer). This will help my channel, so thank you if you decide to use my links!
#CommissionsEarned
Related Videos:
►OpenVPN Server behind NAT or Firewall
• OpenVPN Server behind ...
Disclaimer:
Please do not make any changes to your network, Wi-Fi or Internet connection based on the information in this video. I do not accept any responsibility or liability for any loss or damage of whatever nature (direct, indirect, consequential, or other) which may arise as a result of your use of the information in this video. This video is for educational purposes only.
![WIREGUARD VPN Server Configuration on Asus Routers [Client VPN]](http://i.ytimg.com/vi/rSvHQw0KwvM/mqdefault.jpg)
![WIREGUARD VPN Server Configuration on Asus Routers [Client VPN]](/img/tr.png)
![5 Reasons why I prefer ASUSWRT-Merlin to ASUSWRT Firmware [RT-AC68U]](http://i.ytimg.com/vi/XykUML3T2VA/mqdefault.jpg)
![[4K] Watch SpaceX Catch A Starship Rocket From Space!!! #IFT5](http://i.ytimg.com/vi/pIKI7y3DTXk/mqdefault.jpg)
One of the best explanations ever! Amazing, loved the visual aids so much!
Thanks :-) I'm very happy you liked this video!
Good explanation. Not to slow, and not to quick.
Thanks! Glad you liked it :-)
One of the best video I watch so far to set up VPN 👍🏻 earned a sub
Thanks so much! I'm very happy you liked this video :-)
This is the clearest video I have seen. I will try this I have this Router . Thank you I will post back with my results.
Thanks so much and good luck :-)
Yes, totally agree.
Looking to get an asus router because I had heard the VPN server setup is easy to setup. You just proved it and made me feel more confident in my decision to switch to asus. Thank you sir
You're very welcome! Glad this was useful for you 👍
This is one of the best and only tutorial explaining clear instructions ...thank you ..
I have question.
I have a paid subscription to ExpressVPN so In place openvpn can I setup expressvpn on this router and be able to access my router from outside my network ?
Thanks. If your goal is to remotely connect to the router, you don't need ExpressVPN or any other paid VPN service. You can just follow the video and setup your own VPN server for that purpose for free :-)
Hi @behfor got my ASUS ac68u thanks for recommending.
I just found out that my ISP is on a private WAN and provide Internet to customer via a root ap router in such cases I believe setting up open vpn in my router does not work.
Any solution you can recommend ?
I appreciate this. It reminded me that Spectrum blocks UDP 1194 and required that I change the server port to TCP 443.
You're welcome! I've had the same experience here and there. That's a good thing that it is possible to change the port number on the server.
Thanks so much your videos are really well explained and informative. I enjoyed watching it.
You bet! I'm glad you found it useful :-)
Excelent explanation. You didn't miss any details.
Is the speed good enough? Did you do any iperf test against a machine in the network you are connecting to?
Thanks for you video.
This answered my question!
I work remotely from home and I travel outside the US often (because I can so why not?) Wanted to use a VPN with the traffic going through my home address.
That's good! Glad this helped you! Good luck :-)
Behfor I’m catching up on a lot of your videos. So Open vpn is free? I downloaded stuff from time to time. Is this my way to go?
Great video, one of the most useful and clear I've found on RUclips. Still, I do not see much benefit in using Asus router as VPN Server and the PC as client: that will not hide my IP when browsing the web and will not change my location
This is because the purpose of doing what the video describes is different. The idea here is to able to access your home network eg. NAS from outside in a more secure fashion than simply exposing your NAS directly to the internet. What you are looking for is to put your router as VPN client and not server, which will give you the results you described.
It was good 2 years ago, it's fantastic now.
VPN Fusion, is better than sliced bread!
You can do so much more now.
Can you tell I just bought a new router?
VPN Fusion, has impressed me, it solved the biggest problem with VPNs, having to constantly fiddle with changing the servers, or needing to disconnect for different activities on devices.
I don't need to change my whole house to a German server just because my desktop is running a torrent.
Wow.. this is awesome. This will make it possible to access my NAS outside my LAN
Great! I'm glad this video was useful for you ☺
I found it. "How to stay safe on Public Wi-Fi? - (Using VPN)." You might want to add that video to your "Virtual Private Network" playlist. Thank you for all of your help.
I'm glad you found it. I'll add it to the playlist, thanks :-)
10/10 Excellent!
Thanks! Glad you liked it 🙂
دستت درد نکنه. کار ما رو راه انداختی!
Great tutorial but I was wondering .. making my router a VPN server will only allow me a "secure" access to my home network from some external place or will it give some security to my data if I establish a connection from my own local network? Like from home, is it worth making this connection? (to surf internet)
Anyway I really enjoyed it .. +1 sub
The supposed security increase of a VPN is that traffic is encrypted, so people on the local network cannot skim information.
The VPN makes it so the data is only decrypted and released to the Internet from a safe gateway
If you are on your home network a VPN doesn't work as you are in a trusted network already
God tier infovideo. Thanks!
The latest version of OpenVPN (3) does not support "Interface Type" of "TAP". They only support "TUN".
"OpenVPN GUI" (which is shown in the video) supports both "TUN" and "TAP". This interface type is helpful if you want to access servers on your local network from remote but don't want to setup static paths. The regular "OpenVPN" client, which only supports "TUN", recommends that you setup static paths instead of using "TUN".
Great explanations. Clear instruction. Thanks for the video.
You're very welcome! I'm glad you liked it :-) Thanks
You seem very knowledgeable about this subject. If you could answer a question for me; I set this up, but the server chose a different subset than my inside network (I use 192.168, and it picked 10.0.x.x). Can I just change it in the advanced options?
More; Since my router gateway isn’t the same as the 10.0 the router assigned the vpn, will that limit my ability to get onto the internet?
That is expected behavior, the VPN subnet is routed to your Inside network, So you should be able to connect to your inside network as well as the Internet through the VPN tunnel.
Everything is routed so that shouldn't limit your internet connection, just make sure you have selected the "Internet and local network" in the general page. Thanks
Hi, great presentation. I have 3 questions: 1. If my Internet provider provides me with an static IP, do I have to put this IP numbers somewhere during installation and 2. How is the stability of the system, because I am abroad mostly and do not have the possibility to update and reset the Router often? 3. When I enter my local network, it will "provide" me then with my static IP, when I go to the internet out, so I can use IPTV, Netflix, HBO etc... as being at home on my couch and, I can do in my home network as being home on my couch with my laptop printing, see other users in my network?
Thank you very much for this! Really awesome explanation.
Glad it was helpful! Thanks :-)
Great explanation! Love it!
Thanks so much for your comment! I am very happy you liked it :-)
Dope video, gunna try it at home wish me luck!
Thanks so much for helping me out upfront, I used your video a couple of years ago and it works fine for me. Now with my new travelrouter with a buildin openpn client I cannot access my own network althoug the settings are right? Do you have a suggestion.
Quality Videos Keep it up.
Thanks, will do!
Yes this video is old but still have questions. Why set up a VPN on a router? Now if you already say have NORDVPN. Would you still do it? Is one better then the other? Now say you have NORDVPN on your pc. Can you still run a VPN on your router?
This is an amazing video man, but I have a question tho, does this method work on other asus products
Hi there! Can we go to the internet through our router or only use the local network LAN!? i mean it works as a NAT as well???
Behfor - fantastic explanation, thank you - I should have checked the client config hours ago :face_palm:
Glad it helped! :-)
After spending many hours trying to get an OpenVPN server to work on a DD-WRT flashed router, I returned it and got this working instantly with your instructions on an Asus router. Great video. Can I also setup a typical client VPN (ie NordVPN) on the router without screwing this up or would there be conflicts?
I know this is an old post now, but why would you be installing a vpn client on the router?
If you meant installing 2 different VPNs on a client machine, in theory there should be no issues, as long as you use a seperate port and make sure to only connect to 1 tunnel at any give time
@@bengrogan9710 Well the initial goal was a VPN tunnel between two remote networks, not just between two machines. That part went well once I went with a simple Asus router at the remote site which I could remotely VPN into from an OpenVPN client app on my laptop. This allows me to access any of the IP’s on the remote network. Then I was looking at using something like NordVPN on the remote network to mask the internet traffic, but this goal had potential to complicate my critical VPN tunnel so I didn’t pursue.
Good job, clear and easy, thanks!
Thank you so much! I'm glad you liked it :-)
Beautiful Tutorial Thank You !!
Glad you liked it, thanks 👍
Excellent review of the setup process and did change to 443 after issues with the default. Have found some public places, like the library, that still block as assume it is party of their security setup as even using their free wifi can't stream some data like stock quotes/charting. But that aside, one area skimmed over was VPN client. While you jumped out to download software, it wasn't apparent why and totally ignored the tab "VPN Client" as you worked with "VPN Server". Yes, you do download the external software, and in my case Tunnelblick for Mac as you went to the Windows version, but do you do anything with the "VPN Client" tab in the Asus VPN menu? If you created a MyVPN profile on the Server side, should you also create a parallel MyVPN on the client tab? Also, the video skips the export step on the server side as it generates the file that would be uploaded into Tunnelblick or whatever client software was installed. While I just updated my router firmware, hopefully it resolved an issue with the export file. Apparently OpenVPN changed their protocol and no longer supported a specific line of instruction that was in the client file generated on VPN Server export, generating an error message in Tunnelblick. the client file is text so easy enough to go in and edit out the conflicting instruction - but still it is a hassle which I hope the firmware update adjusted.
A few comments asked questions on International. First year was no problem and was nice watching/streaming content, like NFL games, that were blocked in that country. Next year ran into a connection issue and when home changed the IP address for the router. Apparently, the default 192.168.1.1 was also the system access IP for the provider and Swiss Telecom (the provider) would loop back with page telling me their current service performance was good with no problems. Haven't been back yet to test access after the change.
Have I understood correctly, if I use this I do not need a VPN subscription because I will have created my own VPN server? Are you only using this set up when connected via the open VPN app? Thanks for the videos, I like your quirky presentation.
That's correct, by getting a VPN subscription you are basically renting someone else's VPN server! This way though you have your own VPN server so it's going to be free and also you can connect to your local network pretty much from anywhere in the world! So in order to use the VPN tunnel you'll need to use the Open VPN software/APP on the client side to connect to the server , if the VPN software/APP is not connected then you not using the VPN tunnel! Thanks!
Thank you, I will give it a try.
Hi @behfor
By using expressvpn or any other vpn subscription , can we connect to our local network ?
Hi! When I try to run Open VPN server, I got a message, that I need to wait, while OpenVPN configure file will created.
But I go to logs, and see this line:
WARNING: Failed running command (--up/--down): external program exited with error status: 2
Maybe you can know, what I can to do with this? How to solve it?
Thanks for this Video. Does this work on the RT-AC68P router. This one I have, but not seeing all the areas you showed in the video.
Great video. I followed the steps you showed. VPN works fine. But I found out that the VPN clients were not able to access other PCs in my local network. Is there a way to make this happened? Thanks.
Thanks, if you can access everything else except that PC, maybe there is a firewall/Internet security on the PC which is blocking them?!
Hi, did I saw correctly that you have video tutorial for setting up two distant asus routers via VPN? Mine are rt-ac68u and 4G-AC68U with real IP , but so far I haven't manage to connect them, so I can have one LAN network no matter the location. Thanks!
Do you need to have a vpn account with a third party supplier like open vpn? Or are you just using there app to connect to your router?
OpenVPN is a VPN protocol that is used in this video and in this router to set up a VPN server. (You can also use the PPTP VPN protocol, which is not as secure and is not recommended). Now because we are using the OpenVPN protocol, the clients should also use the same protocol to connect, that's why we install the OpenVPN app/software on the clients. There is no need to have a VPN account with a 3rd party VPN provider because in this method you own your VPN server and can create your own accounts (usernames and passwords) for your clients. Thanks.
Great video!
Thanks 😀👍
Thank you. That was very helpful.
You're very welcome, glad you liked it 😀👍
Hi, just a question. its not easier and better to get expressvpn on this router? cause Im thinking to buy it and install expressvpn. thanks
داداش برای ایران چه تنظیماتی رو باید انجام بدیم؟ همین ستینگ کار میکنه؟ udp و ۴۴۳ بسته نیست؟ امتحان کردین؟
خیر من جدیدا امتحان نکردم و نمیدونم، ولی برای اونجا میتونید وی پی ان v2ray ستاپ کنید. در کانال technolofun مراحل ساختش هست
@@Behfor خیلی گلی
ممنونم 🌹
Very well done sir.
Thank you so much! I'm glad you liked it :-)
Good video thanks. Based on this I made similar setup with my new AX86. Just one issue I can't access my USB drive while connected through VPN. Is there something that I'm missing? I added my shared drive to Files on ipad, but while on vpn it's just loading content and throwing error message content unavailable.
Nice and helpful video. How far this open vpn with ASUS server is safe and secure
Excuse me brother ..
May I request you tel me which vpn to use for my asus gt-axe11000 router ?and how to configure it ? Thanks
Since I setup express vpn on my rt-ac68u router my Asus app no longer works and I can't access Asus GUI website, any thoughts? The wifi works fine.
Great video, Thanks! - I was hoping you can identify why my network devices are not showing in File Manager, but when I "Manually Assigned IP around the DHCP list (Max Limit : 64)" for my NAS, it did show up, but when I added another system, neither showed up. Side Note: I did do all the recommended settings described by Microsoft, and ALL youtube videos; only when I was following you in this video and noticed the above option, that I was able to see my NAS... Please advise, Thanks!
I should be able to connect another Asus router to the one hosting the OpenVPN server right?
Thank you so much for this video. it is a very big help to me. do you perhaps know what to do if my router is behind cgnat?
Thanks a lot for the video
You're very welcome, glad you liked it 👍
Hello, I'm in the process of using these instructions to set up my ASUS router for OpenVPN, but I'm stuck at the point where I'm in the DDNS screen and the next step is to put in the Host Name. The video shows entering all *****'s. Where do I find the host name to put in this field???? Any help would be appreciated!
Hi thanks for the question. You should choose your own hostname, it'll be your own unique address. Thanks.
@@BehFun Thanks for the quick reply!!
Excellent. Thanks again.
Thanks! I'm glad you liked this video :-)
Hi after you connected to server using openvpn client do you share the same public ip now?
Because rightnow im using express vpn to play games with very low ping/ms bcos im working in overseas and when i connected i have different location the same as the server i selected from expressvpn.
Hi,
I have 3 computers to login VPN concurrently. That means I have to create 3 VPN servers? Or 3 VPN clients?
You'll need one VPN server and then in the server create 3 usernames and passwords for the 3 computers (VPN Clients). Thanks.
@@Behfor thanks for the clarification.
I was able to install and validate my ASUS VPN server with the aid of this video. Thanks. However, one question remains and that is using it to connect to a computer (or file system) on the local network. Please help me to understand how I can access a file in my home network via the VPN server when I am in a remote location. Many Thanks.
You need to look into a few different things.
A VPN simply allows you to access your home network when remote.
What you are looking for is more information on
Fileshares and Remote desktop
it's a great help this video is ! what about my isp ? i want to use the same isp
Hi there, great video. I have this configuration set up and it works well for the most part. My only issue is trying to control what IP address the VPN server allocates out. I'm finding sometimes I am getting IP conflicts when somebody logs on. I have my DHCP pool set from .20 to .100. But when I go to DHCP settings I get this warning "* In conflict with the VPN server settings:10.x.x.50-55" Is there I way to set the VPN settings to assign from .15 to .20
so, once this was done, i can only access internet from the vpn rdp machines and no longer from my client. how do i get around this?
Hi thank you for your videos. I have followed your steps and openvpn works. However I cannot access my NAS once I connected through the VPN. What settings am I missing?
You first need to establish where connectivity is failing.
Connect to the VPN
Open a command prompt
Ping the VPN gateway
Ping the IP of the NAS
Ping the Nas by name
My initial bet is that you will have no issues pinging the IP address directly, but not be resolving its name as you have not configured the VPN tunnel to use your router's internal DNS
Will this fix 'packet loss' in gaming? This is my current issue.
This router is Mega ultra epic
Oh, so it is same with normal VPN expect my router's IP address will be the VPN server?
But can it act like normal VPN that allow me to access any website that originally was blocked in my region?
And does it really secure? Since 3rd-party can still get my VPN's IP address with is my router's IP address?
Can't hide my IP ?
Hi! I have my router in Repeater Mode. Is it possible to get VPN on it with this mode?
Hi, unfortunately the VPN feature is not available in the repeater mode. It's only available in the router mode. Thanks.
Hi, thanks for the video. If I am using a normal 4g with this router, am I still able to use ddns?
Can you use Windows 10 integrated VPN client to connect to the server or you need specifically OpenVPN client to do so?
No you need the OpenVPN client software for that and cannot use the Win 10 VPN client! Thanks!
If I configure my own vpn server all traffic that i browse on my computer will pass though vpn? ou I need to install something on my pc? great video btw
well i answer myself..we need the open vpn software and use as the tutorial says.
Yeah as you said you will nedd to install OpenVPN software on you PC! Also when configuring the VPN server make sure to select the "Internet and local network" option for the "Client will use VPN to access" question! Thanks!
@@Behfor I didn't test it but can't you use the Windows built in VPN option instead of OpenVPN software ?
Behfor, followed video with my RT-AC68P. setup server, exported client.ovpn file, installed OpenVPN Connect on my Android phone, installed .ovpn file but got a "could not connect to server" message. I tried to open port 1194 on my ASUS but port check tool said "closed". Any suggestions? thanks.
Thanks a lot
i will try this in near feature
You're very welcome and good luck 👍
Hello, I am having a problem once I try to initiate the client. I get a warning that the NS-Cert-type is Deprecated. It says to use the remote-cert-Tls instead. It goes on to try to reconnect and says that it can not resolve the host address. Any suggestions? Does this have to do with the DDNS address being changed to 443??
Hi
I have created VPN Server on my NAS device. I have done it to access it mapped drives from my laptop amd also browse securely on my android mobile.
When setting up the android app there are 2 options, connect to:
Access server (connect to VPN Server)
OVPN Server (Connect with .OVPN file)
Firstly which option must you choose
For Option 1 it asks for username & Password. Is this the username & Password for my synology Disk Station manager where I set up the VPN Server?
For option 2 do I import the config file which I updated with my NAS IP Address?
Hi, you should select option 2 and then import the file you have already exported in the VPN configuration on your server. If the server has a Public IP address you should be good to go but if the server is behind a NAT device you'll need to modify the IP address and also do port forwarding on the NAT device. This video might give you a better idea since it's hard to explain: ruclips.net/video/g8YrptDDwVk/видео.html
Thanks!
@@Behfor my server is behind the router. Inhale used the ddns host name and done port forwarding.
Mr Beh4... I cannot find the video where you explain the Virtual Private Network tunnel that you refer to at the start of THIS video. Can you provide a link for me please?
If I'm traveling away from home on log into my router using VPN, will this only encrypt the traffic from my computer to my router, or will it also encrypt traffic if I surf on websites outsite my router ?
As said in the video, the VPN tunnel that establishes between your computer and your router would be encrypted, so if you choose "client will use VPN to access internet and local network" then even if you are in a different country and connected to your VPN server, everything would have to go through the tunnel and therefor gets encrypted all the way to your VPN server. That includes browsing a website. Thanks.
Two things you glossed over:
1. How to download the configuration to upload into OpenVPN on the Client
2. What login is used to connect? Where or how are users managed?
watch 2:03 and 2:42
what is the maximum speed for Openvpn build in server?
Helpful, thank you.
You're very welcome! Thanks for watching :-)
how can I understand what you're saying, when you have music playing in the back ground?
Hi I have the Asus RT-AC68U router, I followed your instructions and set my VPN but I don't want to have my vpn running 24/7. When I deactivate the vpn client I can't use the Internet. How can I run the Internet alone I deactivate my vpn client. I am using the stock firmware by the way. Thank you.
Thanks bro
You're very welcome!
Thanks for the information. I have it all configured and the clients all connect. I created 3 usernames and when I connect with the first client the connection status turns green and shows connected. However, when I connect with my next client with a different username my first connection will display disconnected as well as my second connection even though both connections are still active. What can be causing this?
Hi, glad to hear you could successfully configure the VPN server. If everything works fine and the problem is only that the UI is showing wrong connection status, there isn't much you could do about it. It could be probably a bug in the firmware. I personally have noticed some occasions that the UI was showing wrong connection status, which usually got fixed after sometime or when I refreshed the page. I would just make sure the latest firmware is installed, because usually bugs like this gets fixed in newer firmware, other than that there isn't much that can be done on your side. Thanks.
@@Behfor Ok. That's what I was thinking because the connections are working well. Just showing disconnected. Thanks again. 🙂
@@obster123 you're welcome 👍😀
The asus routers all have the same CA and default keys. I created new keys for mine and pasted in the server cert/key, CA cert and Diff Hellman params. All works but now when I export the open vpn config file to use on a client it no longer has the client key/cert info. So now I have to manual cut and paste those two in from the certs I made at home useing easy-rsa.
Check if your client configuration file has keys & certificate value. It should not have this line below.
--END CERTIFICATE--
paste client certificate data here
paste client key data here
resolv-retry infinite
nobind
How do you get the created client key info into the asus so it exports a fully functional open vpn config file? I don't see any area to paste a client cert/key for it to use as a output.
Thanks, worked!
what is the internet speed when you connect to the openvpn on asus router?
can you make a video to show how you can access your network from outside?
Thanks for your comment, I'll definitely keep that in mind and hopefully make a video about it soon. Thanks :-)
@@Behfor 1 year later still no promised vid :)
Nice tutorial! What are the download/upload speeds on the clients connected to the VPN server running on the router?
Thanks! There is no certain number, it depends on many factors such as the down/up speed of the VPN Server's internet connection and also the Client' internet connection. In my case my server's internet is 100Mbps down & 10Mbps up, so whenever I connect from the outside the client's download speed cannot go beyond 10 Mbps because that's the maximum upload speed of the VPN server! Hope this was helpful! Thanks!
does it support ipv6? my ipv4 is under CGNAT only ipv6 is static
Would this still work if my ISP has CGNAT?
Wow! And this is how it works without generating certificates?
what is the maximum throughput using this openVPN in this router ?
I haven't tested the speed myself but I think I read somewhere that it should be around 50mbps for the AC68U but not 100% sure.
@@Behfor other question I have is , if client from ( a coffee shop for example ) connect to the openVPN server , does the client get the public IP of openVPN server, using thus router? Thanks for answer in advanced
I did everything you did. and it still does not connect. I travel to china a lot so what this baisically does is i can connect from there to my router thats right? ad enable all the things i can do home when im in chine because this is my own vpn server?
in vpn client-what protocol mentioned tell me?
How do I set my Asus up to my vm router struggle getting connecting have surfshark vpn
Sadly I've never gotten this to work for me. In the log file only shows it attempting to connect to my dynamic dns, resolving to my public IP, then timing out every time. Not sure what could be the issue.
It most often is an issue where the port you are using is being blocked - either by ISP, Router's inbuilt firewall or the firewall rules of the default gateway your client is connected to.
Try the steps he mentioned for port 443 - no where will have HTTPS traffic blocked
@@bengrogan9710 ended up being an issue with the way ISP's do double nat or something along those lines. It's been a minute and have moved since.
Does this mean I can like be at friends house and openvpn remote desktop into my windows 10 pros on the lan?!
Yes, that's possible. Thanks!
Is it possible to bypass installing VNP , the kids tried to install VPN and play games. I would like to block it. Thanks,
Where does the hostname go in the openvpn client connection? You kinda rushed that last part
The hostname would be in the configuration file you export and you don't need to enter it in the openvpn client side. you only enter the username and password on the client side. Thanks.
If I am on 4g and connect openvpn, will the IP address of the cell phone change?
any way i can lower my ping when i use nordvpn on my asus router? I have 200 MB of download and 11 of upload and my ping is normally 7 or 10 and with nordvpn it is 90 and 100 the ping