VPN - Hybrid VPN

Netduma Fraser · January 30, 2021

58 minutes ago, CyberPilgrim said:

Ok thank a lot bud even if I’ve set certain devices to udp and others to tcp. Like my Mac is in tcp streaming devices on udp

It doesn't matter which you use to connect to the VPN but it does matter how you add it

CyberPilgrim · January 30, 2021

Ok thanks man I’m ready to quit with NordVPN I’ve been at this for two days. It’s still not working.
how would you add it please?
theyvare confusing cos it says they don’t work with open vpn with Netgear but have instructions on how to set it up?

Netduma Fraser · January 30, 2021

Okay well just add the device and remove any entries you've made for it and select Do NOT VPN these services so just like this:

then reboot the device and check the IP. If that doesn't work enter the VPN IP into the DNS on the router and see if it works then please.

CyberPilgrim · January 30, 2021

Ok thanks man I will try this in morning I’ve spent two days in this already and I’ve gotta work tomorrow afternoon. Will blast it in morning. Sorry I was taking to tech support via NordVPN again still no joy. Will try your method next

cheers man

Netduma Fraser · January 30, 2021

35 minutes ago, CyberPilgrim said:

Ok thanks man I will try this in morning I’ve spent two days in this already and I’ve gotta work tomorrow afternoon. Will blast it in morning. Sorry I was taking to tech support via NordVPN again still no joy. Will try your method next

cheers man

No worries, I think it's more on us than them to be honest so engage with us primarily and we can figure it out.

CyberPilgrim · January 30, 2021

Ok bud makes sense as your the makers of my router

I tried via my phone and my ip is hidden so it is the router.
will try first thing gonna get up at 6 and try. Peace

CyberPilgrim · January 31, 2021

12 hours ago, Netduma Fraser said:

Okay well just add the device and remove any entries you've made for it and select Do NOT VPN these services so just like this:

then reboot the device and check the IP. If that doesn't work enter the VPN IP into the DNS on the router and see if it works then please.

Hi Fraser, you mastered the problem thanks so much man. At first I installed the open VPN on Mac. Allowed the firewall permissions etc then saw it was working. So I signed out of the app. Opened up Duma OS did your settings and I'm now protected on all devices via TCP. I'm confused how setting Do not VPN these services works? Oh well it works perfect now thank the maker

Netduma Fraser · January 31, 2021

3 hours ago, CyberPilgrim said:

Hi Fraser, you mastered the problem thanks so much man. At first I installed the open VPN on Mac. Allowed the firewall permissions etc then saw it was working. So I signed out of the app. Opened up Duma OS did your settings and I'm now protected on all devices via TCP. I'm confused how setting Do not VPN these services works? Oh well it works perfect now thank the maker

That's great to hear! There was likely a port we were missing!

CyberPilgrim · January 31, 2021

Thanks alot man :)

EmuMartin · January 31, 2021

Example for Hybrid VPN

Nobody could help me connecting to home Network via Hybrid VPN and two XR500 Routers.

Took about a week to test this out but finally it works !!

First of all:

If your provider or your own VPN Server works without password, manual of DumoOS explaines "leave it blank".

This doesnt work, Hybrid VPN will sent this error in your log file:

2021 us=562340 ERROR: username from Auth authfile '/tmp/lua_gv29JL' is empty

So most VPN Server igore user and password when it isnt set in Server options.

Use Hybrid VPN expert setup and fill in any Username and passwort !!

2nd Step copy your settings file into the advanced settings:

Should look like this:

client

dev tun

proto udp

remote your_ddns_name.ddns.net  12973

resolv-retry infinite

nobind

persist-key

persist-tun


<ca>

-----BEGIN CERTIFICATE-----
MIIDq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-----END CERTIFICATE-----

</ca>


<cert>

Certificate:
    
Data:
        Version: 3 (0x2)
        
Serial Number: 2 (0x2)
    
Signature Algorithm: sha256WithRSAEncryption
        
Issuer: C=TW, ST=TW, L=Taipei, O=netgear, OU=netgear, CN=netgear/name=changeme/[email protected]
        
Validity
            
Not Before: Jun 28 06:28:27 2019 GMT
            
Not After : Jun 23 06:28:27 2039 GMT
        
Subject: C=TW, ST=TW, L=Taipei, O=netgear, OU=netgear, CN=netgear/name=changeme/[email protected]
        
Subject Public Key Info:
            
Public Key Algorithm: rsaEncryption
                
Public-Key: (1024 bit)
                
Modulus:
                    
                    e6:0b:d5:1d:07:a3:1e:12:f7:7b:71:b9:1c:d0:53:
                    5a:b7:74:fc:d6:8a:df:33:b4:7d:fb:59:bc:93:49:
                    90:91:d8:76:3f:35:f7:f1:ea:ec:45:02:56:43:ba:
                    e6:0b:d5:1d:07:a3:1e:12:f7:7b:71:b9:1c:d0:53:
                    5a:b7:74:fc:d6:8a:df:33:b4:7d:fb:59:bc:93:49:
                    90:91:d8:76:3f:35:f7:f1:ea:ec:45:02:56:43:ba:
                    fc:16:19:d3:70:4c:7a:2e:55:9e:9b:70:14:1f:ed:
                    e6:0b:d5:1d:07:a3:1e:12:f7:7b:71:b9:1c:d0:53:
                    5a:b7:74:fc:d6:8a:df:33:b4:7d:fb:59:bc:93:49:
                    90:91:d8:76:3f:35:f7:f1:ea:ec:45:02:56:43:ba:
                    ee:c3:ad:32:9f:11:65:88:4d:4f:33:42:16:c5:9b:
                    6f:44:eb:cf:74:32:4d:e7:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:FALSE
            Netscape Comment: 
                Easy-RSA Generated Certificate
            X509v3 Subject Key Identifier: 
                5F:A8:77:91:d8:76:3f:35:f7:f1:ea:ec:4591:d8:76:3f:35:f7:f1:ea:ec:45:ED:8D:54
            X509v3 Authority Key Identifier: 
                keyid:FA:91:d8:76:3f:35:f7:f1:ea:ec:4591:d8:76:3f:35:f7:f1:ea:ec:455:22:CD:FD
                DirName:/C=TW/ST=TW/L=Taipei/O=netgear/OU=netgear/CN=netgear/name=changeme/[email protected]
                serial:EA:17:EA:17:EA:17:EA:17:EA:17

            
X509v3 Extended Key Usage: 
                TLS Web Client Authentication
            
X509v3 Key Usage: 
                Digital Signature
    
Signature Algorithm: sha256WithRSAEncryption
         e1:c4:a0:93:69:c8:9b:4b:ef:53:a5:16:63:89:70:a0:29:cb:
         4a:18:b1:ec:eb:e4:1e:48:26:34:80:f9:ce:00:db:30:08:d4:
         e1:c4:a0:93:69:c8:9b:4b:ef:53:a5:16:63:89:70:a0:29:cb:
         4a:18:b1:ec:eb:e4:1e:48:26:34:80:f9:ce:00:db:30:08:d4:
         e1:c4:a0:93:69:c8:9b:4b:ef:53:a5:16:63:89:70:a0:29:cb:
         4a:18:b1:ec:eb:e4:1e:48:26:34:80:f9:ce:00:db:30:08:d4:
         62:6b
-----BEGIN CERTIFICATE-----
YW5nZW1lMR8wHQYJKoZIhvcNAQkBFhBtYWlsQG5ldGdlYXIuY29tMB4XDTE5MDYy
ODA2MjgyN1oXDTM5MDYyMzA2MjgyN1owgZUxCzAJBgNVBAYTAlRXMQswCQYDVQQI
YW5nZW1lMR8wHQYJKoZIhvcNAQkBFhBtYWlsQG5ldGdlYXIuY29tMB4XDTE5MDYy
ODA2MjgyN1oXDTM5MDYyMzA2MjgyN1owgZUxCzAJBgNVBAYTAlRXMQswCQYDVQQI
YW5nZW1lMR8wHQYJKoZIhvcNAQkBFhBtYWlsQG5ldGdlYXIuY29tMB4XDTE5MDYy
ODA2MjgyN1oXDTM5MDYyMzA2MjgyN1owgZUxCzAJBgNVBAYTAlRXMQswCQYDVQQI
YW5nZW1lMR8wHQYJKoZIhvcNAQkBFhBtYWlsQG5ldGdlYXIuY29tMB4XDTE5MDYy
ODA2MjgyN1oXDTM5MDYyMzA2MjgyN1owgZUxCzAJBgNVBAYTAlRXMQswCQYDVQQI
YW5nZW1lMR8wHQYJKoZIhvcNAQkBFhBtYWlsQG5ldGdlYXIuY29tMB4XDTE5MDYy
ODA2MjgyN1oXDTM5MDYyMzA2MjgyN1owgZUxCzAJBgNVBAYTAlRXMQswCQYDVQQI
YW5nZW1lMR8wHQYJKoZIhvcNAQkBFhBtYWlsQG5ldGdlYXIuY29tMB4XDTE5MDYy
ODA2MjgyN1oXDTM5MDYyMzA2MjgyN1owgZUxCzAJBgNVBAYTAlRXMQswCQYDVQQI
YW5nZW1lMR8wHQYJKoZIhvcNAQkBFhBtYWlsQG5ldGdlYXIuY29tMB4XDTE5MDYy
ODA2MjgyN1oXDTM5MDYyMzA2MjgyN1owgZUxCzAJBgNVBAYTAlRXMQswCQYDVQQI
YW5nZW1lMR8wHQYJKoZIhvcNAQkBFhBtYWlsQG5ldGdlYXIuY29tMB4XDTE5MDYy
ODA2MjgyN1oXDTM5MDYyMzA2MjgyN1owgZUxCzAJBgNVBAYTAlRXMQswCQYDVQQI
YW5nZW1lMR8wHQYJKoZIhvcNAQkBFhBtYWlsQG5ldGdlYXIuY29tMB4XDTE5MDYy
ODA2MjgyN1oXDTM5MDYyMzA2MjgyN1owgZUxCzAJBgNVBAYTAlRXMQswCQYDVQQI
YW5nZW1lMR8wHQYJKoZIhvcNAQkBFhBtYWlsQG5ldGdlYXIuY29tMB4XDTE5MDYy
ODA2MjgyN1oXDTM5MDYyMzA2MjgyN1owgZUxCzAJBgNVBAYTAlRXMQswCQYDVQQI
YW5nZW1lMR8wHQYJKoZIhvcNAQkBFhBtYWlsQG5ldGdlYXIuY29tMB4XDTE5MDYy
ODA2MjgyN1oXDTM5MDYyMzA2MjgyN1owgZUxCzAJBgNVBAYTAlRXMQswCQYDVQQI
SMhiaw==
-----END CERTIFICATE-----

</cert>

<key>
-----BEGIN PRIVATE KEY-----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-----END PRIVATE KEY-----
</key>

cipher AES-128-CBC

comp-lzo

verb 5

This works even to connect two XR500 routers and i think all devices with DumaOS FW: 2.3.2.66

If using client setting from Netgear VPN server use the mobile config and check it looks like my example !

(you will have to adjust it )

Maybe an Admin can pin this description to the Top so its easier to find for other users !

Netduma Fraser · January 31, 2021

Thanks for the solution @EmuMartin! Glad you managed to get it figured out!

CyberPilgrim · January 31, 2021

Hi I defo used user name and password from my NORDVPN account page. They have a copy and paste option. It’s encrypted to a completely different code.
that works great for me.

Netduma Fraser · January 31, 2021

44 minutes ago, CyberPilgrim said:

Hi I defo used user name and password from my NORDVPN account page. They have a copy and paste option. It’s encrypted to a completely different code.
that works great for me.

The above is for using the VPN service config from from the settings to connect to another XR500.

CyberPilgrim · January 31, 2021

Ah fairone

Sign In

VPN - Hybrid VPN

Recommended Posts

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Create an account or sign in to comment

Create an account

Sign in