I am using a dual router setup with a primary ISP router and a secondary OpenWrt VPN router. Although the internet works well on the secondary router most of the time, the connection drops on VPN router sometimes while still active on ISP router. The configuration settings are as follows. Please let me know if I need to change anything in the configuration to fix the random internet drop of the VPN router.
I am using my ISP router with the following settings:
IP: 192.168.0.1
Subnet: 255.255.255.0
DHCP Enabled
DHCP Server Starting IP address: 192.168.0.50
IP Pool Count: 50
I added Archer C7 as second router to my primary ISP router with the following settings:
On your VPN router LAN settings please configure the following:
Although the internet and VPN works okay on VPN router most of the time, the internet drops sometime on the VPN router. Could you please share if I have missed any configuration step?
The details you have provided so far won't help, though -- DHCP settings are almost certainly not the issue.
The logs may have clues, and of course the rest of the configuration will be necessary.
Please copy the output of the following commands and post it here using the "Preformatted text </> " button:
Remember to redact passwords, MAC addresses and any public IP addresses you may have:
Also include, as a separate section, the output of (try to find the time that the issue occurred and give us a snippet in the time immediately before and after the issue begins):
You can prevent it by pinging the openvpn server ip address from the client every 2 minutes. You can do this via cronjob on the openwrt router. This will basically do the same thing as the keepalive openvpn option.
Thank you, I added the keepalive script to NordVPN UDP config file. However, the same thing happened. Here is the log. Anything else should I try? Thank you!
The keepalive option must be supported by server, e.g. your vpn provider, but you can have a script with pinging the openvpn server through the internal encrypted channel to keep the connection alive. I would add this script to the cronjob.
The setup worked well until this weekend. I am facing the same challenge where the NordVPN connection on the OpenWrt router frequently drops while the ISP's connection is working well.
I did the setup again but nothing changed. Here are the last few lines of the log.
Mon Feb 13 07:46:28 2023 daemon.info hostapd: wlan0: STA d0:3c:1f:03:ba:ec IEEE 802.11: authenticated
Mon Feb 13 07:46:28 2023 daemon.info hostapd: wlan0: STA d0:3c:1f:03:ba:ec IEEE 802.11: associated (aid 1)
Mon Feb 13 07:46:28 2023 daemon.notice hostapd: wlan0: STA-OPMODE-SMPS-MODE-CHAN GED off
Mon Feb 13 07:46:28 2023 daemon.notice hostapd: wlan0: AP-STA-CONNECTED d0:3c:1f :03:ba:ec
Mon Feb 13 07:46:28 2023 daemon.info hostapd: wlan0: STA d0:3c:1f:03:ba:ec WPA: pairwise key handshake completed (RSN)
Mon Feb 13 07:46:28 2023 daemon.info dnsmasq-dhcp[2861]: DHCPREQUEST(br-lan) 192 .
Mon Feb 13 07:46:28 2023 daemon.info dnsmasq-dhcp[2861]: DHCPACK(br-lan) 192.168
Mon Feb 13 07:46:52 2023 daemon.err uhttpd[1809]: luci: accepted login on / for root from 192.168.1.178
Mon Feb 13 07:49:48 2023 daemon.info hostapd: wlan1: STA f8:89:d2:e7:68:f7 IEEE 802.11: authenticated
Mon Feb 13 07:49:48 2023 daemon.info hostapd: wlan1: STA f8:89:d2:e7:68:f7 IEEE 802.11: associated (aid 2)
Mon Feb 13 07:49:49 2023 daemon.notice hostapd: wlan1: AP-STA-CONNECTED f8:89:d2
Mon Feb 13 07:49:49 2023 daemon.info hostapd: wlan1: STA f8:89:d2:e7:68:f7 WPA: pairwise key handshake completed (RSN)
Mon Feb 13 07:49:49 2023 daemon.info dnsmasq-dhcp[2861]: DHCPREQUEST(br-lan) 192 .
Mon Feb 13 07:49:49 2023 daemon.info dnsmasq-dhcp[2861]: DHCPACK(br-lan) 192.168
Mon Feb 13 07:49:53 2023 daemon.warn dnsmasq[2861]: Maximum number of concurrent DNS queries reached (max: 150)
Mon Feb 13 07:49:59 2023 daemon.warn dnsmasq[2861]: Maximum number of concurrent DNS queries reached (max: 150)
Mon Feb 13 07:50:05 2023 daemon.warn dnsmasq[2861]: Maximum number of concurrent DNS queries reached (max: 150)
Mon Feb 13 07:50:11 2023 daemon.warn dnsmasq[2861]: Maximum number of concurrent DNS queries reached (max: 150)
Mon Feb 13 07:50:12 2023 daemon.info hostapd: wlan0: STA 2e:0d:d0:a8:18:2c IEEE 802.11: authenticated
Mon Feb 13 07:50:12 2023 daemon.info hostapd: wlan0: STA 2e:0d:d0:a8:18:2c IEEE 802.11: associated (aid 2)
Mon Feb 13 07:50:12 2023 daemon.notice hostapd: wlan1: Prune association for 2e:
Mon Feb 13 07:50:12 2023 daemon.notice hostapd: wlan1: AP-STA-DISCONNECTED 2e:0d
Mon Feb 13 07:50:13 2023 daemon.notice hostapd: wlan0: AP-STA-CONNECTED 2e:0d:d0
Mon Feb 13 07:50:13 2023 daemon.info hostapd: wlan0: STA 2e:0d:d0:a8:18:2c WPA: pairwise key handshake completed (RSN)
Mon Feb 13 07:50:25 2023 daemon.warn dnsmasq[2861]: Maximum number of concurrent DNS queries reached (max: 150)
Mon Feb 13 07:50:42 2023 daemon.info hostapd: wlan1: STA 2e:0d:d0:a8:18:2c IEEE 802.11: deauthenticated due to inactivity (timer DEAUTH/REMOVE)
Mon Feb 13 07:51:58 2023 authpriv.info dropbear[9468]: Child connection from 192 .168.1.103:50447
Mon Feb 13 07:52:02 2023 authpriv.notice dropbear[9468]: Password auth succeeded for 'root' from 192.168.1.103:50447