Hi All,
I recently installed OPNSense and have it working well for my network but I would like to get IPVanish working from the router.
I have set it up as follows but it is not working.
In System>Trust>Authorities I have created a new CA and the IPVanish CA into Certificate Data
In VPN>OpenVPN>Clients [Legacy]
Name>IPVanish
Server Mode>Peer to Peer ( SSL/TLS )
Protocal>UDP
Device Mode>TUN
Interface>WAN
Remote Server>Host>ams-a01.ipvanish.com Port>443
Retry DNS resolution>Selected
User name/pass> My IP Vanish Credentials
TLS Authentication> Disabled (I have also tried Enabled Authentication Only but I do not have a TLS Key to use so this is auto generated by OPNSense)
Peer Certificate> The certificate I added at the beginning
Client Certificate> None (Username and Password required)
Encryption algorithm (deprecated)> AES-256-CBC (256 bit key,128 bit block)
Auth Digest Algorithm>Sha256 (256-bit)
Don't Pull Routes>Selected
Don't Add/Remove routes> Selected
Advanced>fast-io;tun-mtu 1500;persist-key;persist-tun;persist-remote-ip;verb 3;auth SHA256;tls-cipher TLS-DHE-RSA-WITH-AES-256-CBC-SHA:TLS-DHE-DSS-WITH-AES-256-CBC-SHA:TLS-RSA-WITH-AES-256-CBC-SHA (I got this from another post but this was from 2017 so may not be accurate anymore, I have tried with and without this data)
Verbosity>3 (recommended)
All other setting blank or not selected.
I have also tried using the new Instances option with similar settings but that fails too.
Any help would be greatly appreciated
https://support.ipvanish.com/hc/en-us/articles/115002080733-DD-WRT-v3-Router-Setup
it would be a started openvpn setup like the above
have you tried using 256gcm?
Quote from: DEC670airp414user on April 20, 2024, 03:19:38 PM
https://support.ipvanish.com/hc/en-us/articles/115002080733-DD-WRT-v3-Router-Setup
it would be a started openvpn setup like the above
have you tried using 256gcm?
Thanks,
No I did not try 256GCM but I did raise a support call with IPVanish and they basically said they don't support OPNSense so could not help so I cancelled my auto Renewal which is in a couple of months and subscribed to Surfshark instead as they had a Guide for OPNSense. It is a little out of date but I managed to get it working. Glad I did because for me Surfshark is much faster, I basically get my full internet speed whereas with IPVanish I was getting about 1/3 to 1/2 the speed.