OpenVPN: RT6600ax to DS220+

[JJNorCal]

I'm trying to set up an RT6600ax to connect to my DS220+ to facilitate roku while I'm abroad. I have been using VPN Server on the NAS, using OpenVPN, for a long time without issues.

Ideally the RT would split the traffic, directing just one subnet or interface or SSID thru the tunnel. Is this possible?

I'm starting simple (I think), trying to get SRM/Network Center/Internet/VPN Settings/OpenVPN client to connect to my NAS.

This is what I'm seeing:

1. I can establish a tunnel with: laptop(Windows OpenVPN Client) -wifi-> RT6600ax -enet-> AirtelFiber ->internet-> DS220+
2. I cannot establish a tunnel with: RT6600ax(VPN Client) -enet-> AirtelFiber -internet-> DS220+ using same ovpn file as in #1

When I try to connect with #2, it just shows "connecting" for a long time, and I am unable to locate any logs even inside the RT's debug.dat, and I don't see any sign of a connect attempt in my NAS. The ovpn file was generated on my NAS.

Does anybody have experience with this?

Perhaps I should consider SRM's VPN Plus Server. Can it act as an OpenVPN client, or is there a way to configure it to route all internet traffic thru the tunnel (not just a remote subnet)?

I would be grateful for any advice.

 

[JJNorCal]

An update for the next victim after finally getting RT6600ax OpenVPN client to establish a tunnel to a DS220+ NAS.

I ran into four fundamental problems:

1. My AT&T BGW320-505 front ending my NAS was not port forwarding IPv6 packets. For now I forced IPv4 by changing proto tcp-client in the ovpn to proto tcp4-client.
2. The NAS generated verify-x509-name 'myddnsname.myds.me' name had to be changed to verify-x509-name "myddnsname.myds.me" name.
3. I had to put the RT6600ax in AP mode. There was no documented way to put the AirTel (India) modem in pass-thru, and I couldn't get the RT6600ax to work in AirTel DMZ.
4. Enabled the RT6600ax guest network, as it turns out the RT6600ax only offers DHCP on that network when running in AP mode.

Now I get a tunnel whenever I connect using the guest SSID. There is no tunnel when I connect using the main SSID.