OPENVPN Protocol

Sorry if in the wrong area. My first post.

I have ssh access to my Xiaomi AX3600.
Is possible to add OPENVPN protocol to the router’s VPN options???
I use NordVPN and they do not support PPTP and L2TP, the only protocols available on the router. Appreciate any help. Thanks!!

Yes, of course!

3 Likes

Thanks for the help!!

Save VPN client profile

umask go=
cat << "EOF" > ${OVPN_DIR}/${OVPN_ID}.conf
COPY_PASTE_CLIENT_PROFILE_HERE
EOF
-----> -ash: can't create /.conf: Read-only file system

You should run all the commands, especially those in the first step which define the OVPN_DIR and OVPN_ID variables.

2 Likes

Now I managed to enter all the commands. Before I had to end the session and I didn't restart from the beginning. :frowning:
I still haven't managed to make it work, but I'll keep trying.
thanks!!

Did you install Openwrt on it?

2 Likes

No. Oficial Chinese firmware (openwrt based) 1.0.79 whit ssh access.

I can't get it to work. :frowning:

I can insert all the commands without errors, including the data of commercial provider (user / password). Only this errors messages after restarting the firewall service:

/etc/init.d/firewall restart ------>

Warning: Section 'wan' cannot resolve device of network 'wan6'
Warning: Section 'ready_zone' cannot resolve device of network 'ready'
Warning: Section 'guest_8999' refers to not existing zone 'guest'
Warning: Section 'guest_8300' refers to not existing zone 'guest'
Warning: Section 'guest_7080' refers to not existing zone 'guest'
Warning: Section @zone [2] (ready) has no device, network, subnet or extra options

  • Flushing IPv4 filter table
  • Flushing IPv4 nat table
  • Flushing IPv4 mangle table
  • Flushing IPv6 filter table
  • Flushing IPv6 nat table
  • Flushing IPv6 mangle table
  • Flushing conntrack table ...
  • Populating IPv4 filter table
    • Rule 'Allow-DHCP-Renew'
    • Rule 'Allow-Ping'
    • Rule 'DHCP for ready'
    • Rule 'DHCP for ready'
    • Rule 'minet ready'
    • Rule 'minet ready'
    • Forward 'lan' -> 'wan'
    • 'Lan' zone
    • Zone 'wan'
    • Zone 'ready'
  • Populating IPv4 nat table
    • 'Lan' zone
    • Zone 'wan'
    • Zone 'ready'
  • Populating IPv4 mangle table
    • 'Lan' zone
    • Zone 'wan'
    • Zone 'ready'
  • Populating IPv6 filter table
    • Rule 'Allow-DHCPv6'
    • Rule 'Allow-ICMPv6-Input'
    • Rule 'Allow-ICMPv6-Forward'
    • Rule 'Forbidden_Wan_RA'
    • Rule 'DHCP for ready'
    • Rule 'DHCP for ready'
    • Rule 'minet ready'
    • Rule 'minet ready'
    • Forward 'lan' -> 'wan'
    • 'Lan' zone
    • Zone 'wan'
    • Zone 'ready'
  • Populating IPv6 nat table
    Warning: fw3_ipt_rule_append (): Can't find target 'prerouting_lan_rule'
    Warning: fw3_ipt_rule_append (): Can't find target 'postrouting_lan_rule'
    Warning: fw3_ipt_rule_append (): Can't find target 'prerouting_wan_rule'
    Warning: fw3_ipt_rule_append (): Can't find target 'postrouting_wan_rule'
    Warning: fw3_ipt_rule_append (): Can't find target 'prerouting_ready_rule'
    Warning: fw3_ipt_rule_append (): Can't find target 'postrouting_ready_rule'
    Warning: fw3_ipt_rule_append (): Can't find target 'prerouting_rule'
    Warning: fw3_ipt_rule_append (): Can't find target 'postrouting_rule'
    • 'Lan' zone
    • Zone 'wan'
    • Zone 'ready'
  • Populating IPv6 mangle table
    • 'Lan' zone
    • Zone 'wan'
    • Zone 'ready'
  • Set tcp_ecn to off
  • Set tcp_syncookies to on
  • Set tcp_window_scaling to on
  • Running script '/lib/firewall.sysapi.loader webinitrdr'
  • Running script '/lib/firewall.sysapi.loader dnsmiwifi'
  • Running script '/lib/firewall.sysapi.loader macfilter'
  • Running script '/lib/firewall.sysapi.loader ipv6_masq'
  • Running script '/lib/firewall.sysapi.loader set_tcpmss'
  • Running script '/lib/firewall.sysapi.loader miot'
  • Running script '/lib/firewall.sysapi.loader parentalctl'
  • Running script '/usr/share/miniupnpd/firewall.include'
  • Running script '/etc/firewall.d/qca-nss-ecm'

Back up a little and realize that installing a perfect OpenVPN configuration can't do anything on a machine without the OpenVPN executable. If this third party build doesn't include the openvpn command, it's not possible for it to work.

This forum is for support of official builds using the mainline source code or downloaded and installed from downloads.openwrt.org. Users of vendor firmware (third party build) should consult the vendor for support.

4 Likes

I understand.
Exactly for not knowing I asked initially if it was possible. I will sell this router and buy another one with decent firmware. Thanks anyway.

2 Likes

If your problem is solved, please consider marking this topic as [Solved]. See How to mark a topic as [Solved] for a short how-to.

This topic was automatically closed 10 days after the last reply. New replies are no longer allowed.