Menu

Show posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

Show posts Menu

Messages - keithweiland

#1
Quote from: DEC670airp414user on April 20, 2024, 03:19:38 PM
https://support.ipvanish.com/hc/en-us/articles/115002080733-DD-WRT-v3-Router-Setup

it would be a started openvpn setup like the above

have you tried using 256gcm?

Thanks,

No I did not try 256GCM but I did raise a support call with IPVanish and they basically said they don't support OPNSense so could not help so I cancelled my auto Renewal which is in a couple of months and subscribed to Surfshark instead as they had a Guide for OPNSense. It is a little out of date but I managed to get it working. Glad I did because for me Surfshark is much faster, I basically get my full internet speed whereas with IPVanish I was getting about 1/3 to 1/2 the speed.
#2
Hi All,

I recently installed OPNSense and have it working well for my network but I would like to get IPVanish working from the router.

I have set it up as follows but it is not working.

In System>Trust>Authorities I have created a new CA and the IPVanish CA into Certificate Data

In VPN>OpenVPN>Clients [Legacy]

Name>IPVanish

Server Mode>Peer to Peer ( SSL/TLS )

Protocal>UDP

Device Mode>TUN

Interface>WAN

Remote Server>Host>ams-a01.ipvanish.com Port>443

Retry DNS resolution>Selected

User name/pass
> My IP Vanish Credentials

TLS Authentication> Disabled (I have also tried Enabled Authentication Only but I do not have a TLS Key to use so this is auto generated by OPNSense)

Peer Certificate> The certificate I added at the beginning

Client Certificate> None (Username and Password required)

Encryption algorithm (deprecated)> AES-256-CBC (256 bit key,128 bit block)

Auth Digest Algorithm>Sha256 (256-bit)

Don't Pull Routes>Selected

Don't Add/Remove routes> Selected

Advanced>fast-io;tun-mtu 1500;persist-key;persist-tun;persist-remote-ip;verb 3;auth SHA256;tls-cipher TLS-DHE-RSA-WITH-AES-256-CBC-SHA:TLS-DHE-DSS-WITH-AES-256-CBC-SHA:TLS-RSA-WITH-AES-256-CBC-SHA (I got this from another post but this was from 2017 so may not be accurate anymore, I have tried with and without this data)

Verbosity>3 (recommended)

All other setting blank or not selected.

I have also tried using the new Instances option with similar settings but that fails too.

Any help would be greatly appreciated