Does anyone have IPVanish VPN working on a recent Verson

[keithweiland]

Hi All,

I recently installed OPNSense and have it working well for my network but I would like to get IPVanish working from the router.

I have set it up as follows but it is not working.

In System>Trust>Authorities I have created a new CA and the IPVanish CA into Certificate Data

In VPN>OpenVPN>Clients [Legacy]

Name>IPVanish

Server Mode>Peer to Peer ( SSL/TLS )

Protocal>UDP

Device Mode>TUN

Interface>WAN

Remote Server>Host>ams-a01.ipvanish.com Port>443

Retry DNS resolution>Selected

User name/pass> My IP Vanish Credentials

TLS Authentication> Disabled (I have also tried Enabled Authentication Only but I do not have a TLS Key to use so this is auto generated by OPNSense)

Peer Certificate> The certificate I added at the beginning

Client Certificate> None (Username and Password required)

Encryption algorithm (deprecated)> AES-256-CBC (256 bit key,128 bit block)

Auth Digest Algorithm>Sha256 (256-bit)

Don't Pull Routes>Selected

Don't Add/Remove routes> Selected

Advanced>fast-io;tun-mtu 1500;persist-key;persist-tun;persist-remote-ip;verb 3;auth SHA256;tls-cipher TLS-DHE-RSA-WITH-AES-256-CBC-SHA:TLS-DHE-DSS-WITH-AES-256-CBC-SHA:TLS-RSA-WITH-AES-256-CBC-SHA (I got this from another post but this was from 2017 so may not be accurate anymore, I have tried with and without this data)

Verbosity>3 (recommended)

All other setting blank or not selected.

I have also tried using the new Instances option with similar settings but that fails too.

Any help would be greatly appreciated

[DEC670airp414user]

https://support.ipvanish.com/hc/en-us/articles/115002080733-DD-WRT-v3-Router-Setup

it would be a started openvpn setup like the above

have you tried using 256gcm?

[keithweiland]

https://support.ipvanish.com/hc/en-us/articles/115002080733-DD-WRT-v3-Router-Setup

it would be a started openvpn setup like the above

have you tried using 256gcm?

Thanks,

No I did not try 256GCM but I did raise a support call with IPVanish and they basically said they don't support OPNSense so could not help so I cancelled my auto Renewal which is in a couple of months and subscribed to Surfshark instead as they had a Guide for OPNSense. It is a little out of date but I managed to get it working. Glad I did because for me Surfshark is much faster, I basically get my full internet speed whereas with IPVanish I was getting about 1/3 to 1/2 the speed.