Asus Router Problem Setting Up VPN Server (OpenVPN)

[KuroiRiku]

Hello, I've just received a new Router From Asus ( ASUS RT-AC86U ) and I'm planning to use the router VPN Server to set up an OpenVPN, I connected the router to the router that my ISP provide ( HUAWEI HG8245H ), the problem is when I tried to set up the VPN or DDNS there's this notice "The wireless router currently uses a private WAN IP address.

This router may be in the multiple-NAT environment and DDNS service cannot work in this environment."

 

The FAQ that the router provide says that I need to set up the VPN with port forwading, can anyone help me with setting this up? 

https://www.asus.com/support/FAQ/1033906

[jj9987]

EDIT: Scratch what I said in the first place, I didn't read properly first.

 

First, get rid of dual NAT. Dual-NAT can bring all kinds of issues, starting with latency and ending with packet loss/connectivity issues.

Why do you have two routers in the first place? If you want Asus to do OpenVPN and/or WiFi, you need to stop the Asus router from doing NAT and DHCP and set it up in Access Point mode. Then you need to configure port 1194 UDP or TCP (depending on which you set for the VPN) to be sent from the Huawei router to the Asus with port forwarding. This implies, that you have administrator access to the router.

[NelizMastr]

Yep, what @jj9987 says is correct. You should only have one router, and in this case, that should be the ISP provided one. Setup the Asus router as an access point and don't forget to set a static IP on the LAN ports so you can still manage it later. Connect it LAN-to-LAN when you're done. Don't connect the ISP router to the WAN port of the Asus. 

[KuroiRiku]

2 hours ago, jj9987 said:

EDIT: Scratch what I said in the first place, I didn't read properly first.

 

First, get rid of dual NAT. Dual-NAT can bring all kinds of issues, starting with latency and ending with packet loss/connectivity issues.

Why do you have two routers in the first place? If you want Asus to do OpenVPN and/or WiFi, you need to stop the Asus router from doing NAT and DHCP and set it up in Access Point mode. Then you need to configure port 1194 UDP or TCP (depending on which you set for the VPN) to be sent from the Huawei router to the Asus with port forwarding. This implies, that you have administrator access to the router.

The HUAWEI HG8245H also function as Modem where the Fiber Cable plugged in, The Asus router can't replace the HUAWEI as a Modem that's why I have to plug it in to the HUAWEI, I tried making the Asus router as Access Point then the WAN VPN settings are gone, I think it only works if the Asus is in Router Mode

same as this guy

https://www.snbforums.com/threads/can-i-setup-ac66u-to-be-vpn-server-while-in-access-point-mode.11893/

 

I need to use the VPN Server Setting from the Asus Router and also the DDNS that they provide

 

[Falconevo]

If you put the HUAWEI HG8245H in modem mode, it will allow the public IP to be present on the Asus router.  That will fix your double-nat issues and have the router in the correct configuration.

 

When the HG8245H is in modem mode it will act like a bridge and simply pass the external IP address directly to the Asus router.  This should allow you to configure the OpenVPN as you require it.

[jj9987]

2 hours ago, KuroiRiku said:

The HUAWEI HG8245H also function as Modem where the Fiber Cable plugged in, The Asus router can't replace the HUAWEI as a Modem that's why I have to plug it in to the HUAWEI, I tried making the Asus router as Access Point then the WAN VPN settings are gone, I think it only works if the Asus is in Router Mode

same as this guy

https://www.snbforums.com/threads/can-i-setup-ac66u-to-be-vpn-server-while-in-access-point-mode.11893/

 

I need to use the VPN Server Setting from the Asus Router and also the DDNS that they provide

First, it's a GPON, not a modem. Modem is used for DSL, DOCSIS and maybe some other connections.

 

If that's the case, you can risk going dual-NAT or just set up your own VPN on a computer (Raspberry Pi for example) and do port forwarding to that. There's plenty of tutorials out there. You can also set up DDNS on a Raspberry Pi.

[KuroiRiku]

12 hours ago, Falconevo said:

If you put the HUAWEI HG8245H in modem mode, it will allow the public IP to be present on the Asus router.  That will fix your double-nat issues and have the router in the correct configuration.

 

When the HG8245H is in modem mode it will act like a bridge and simply pass the external IP address directly to the Asus router.  This should allow you to configure the OpenVPN as you require it.

Yes I'm planning to try it as well, One Question Right now the HUAWEI HG8245H is Connected to Mikrotik Client for Server Access via PPTP, and we Connected the Router to switch hub so all the PC can Access Our Server PC Via Mikrotik Client, If I change the HUAWEI HG8245H to Modem Mode will the Mikrotik still work? 

[Falconevo]

9 hours ago, KuroiRiku said:

Yes I'm planning to try it as well, One Question Right now the HUAWEI HG8245H is Connected to Mikrotik Client for Server Access via PPTP, and we Connected the Router to switch hub so all the PC can Access Our Server PC Via Mikrotik Client, If I change the HUAWEI HG8245H to Modem Mode will the Mikrotik still work? 

The Mikrotik simply needs moving to the Asus, the config shouldn't change but you may need to set the internal IP range/subnet of the Asus the same as the previous Huawei router was set.

[KuroiRiku]

22 hours ago, Falconevo said:

The Mikrotik simply needs moving to the Asus, the config shouldn't change but you may need to set the internal IP range/subnet of the Asus the same as the previous Huawei router was set.

Big Thanks, I will try setting it up right away