Firmware Release for OpenVPN WAN

What version of the OpenVPN client does this WAN license install? Specifically, I’m wondering if it supports Data Channel Offload as stated here:

The client does not need to use DCO to connect to a server that uses DCO. With only one side doing DCO, there is already a performance benefit. However, it is best if both sides use it. The following clients can use DCO on the client side, although it will have to be enabled separately in the client.

Clients with DCO capability:

I am having this same issue currently. I have an OpenVPN Access Server that it is setup to connect to. Our Cradlepoints properly share their client network with the server, but this Peplink absolutely refuses to route traffic to the client network no matter the combinations I’ve tried. Configurations are no different.

I will be back on-site tomorrow to investigate further, but currently devices on the client network can reach the server, but the server cannot reach the client network, only the tunnel network. Firmware on the Peplink is upgraded.

please share tracert and provide your existing defined static routes.

Hello,
I still don’t understand whether and why I need the license mentioned, because nicobar’s question was unfortunately not answered. Are the instructions from the second post “Quick Start Guide” still up to date? Could someone please clarify this? Thank you.

[I am new and setting up an Peplink router for the first time.]

As nicobar wrote, I can add a OpenVPN server under the “Advanced” tab and connect to it (“Status” tab → OpenVPN: connected). But I can’t get it to use the VPN server’s DNS. It always stays with the ISP’s DNS server (resulting in a DNS Leak), or no connection is established (no PING).
Could someone please provide a general explanation of this?

@Severin_K ,

OpenVPN under the Advanced option are use for “Site to Site OpenVPN”

. Can you let us know which DNS server are you referring ?

1 Like

Ah, I didn’t realize that! Maybe I should have read the entire manual.:grin: Thank you for your reply! Then this feature isn’t for me (at the moment).

I would like to connect to a rented OpenVPN server (Proton) and use its DNS. Instead, with my above configuration (referred to by you as site-to-site OpenVPN), I can only use my provider’s Domain Name System.

So what do I need?
I use a B One with the 8.5.2 build5862 Firmware.

Is there any way to view the Linux kernel version installed for OpenVPN. Particularly interested in the OpenVPN DCO feature (as Peplink seems to be dragging its feet on WireGuard implementation). See OpenVPN DCO Added to Linux Kernel for Built-In Speed and Security.

Do any Peplink engineers have any insight into support for the DCO feature on OVPN?

I don’t want to be a nuisance, but even after reading the current B One manual carefully, I couldn’t find any meaningful information. It talks about Site-to-Site VPN (as do you), which, as I understand it (and according to all descriptions), means connecting two or more ‘company’ networks. However, I need a “Client-to-Site” connection, so to speak. Unfortunately, it is not clear how to set this up. Or is there a communication problem here because the terminology is not being used correctly? If I am making a mistake here, I would like to apologize in advance.

So, a simple question to start with: Do I need a OpenVPN license to set up a Client-to-Site connection to, for example, Proton VPN?
As I wrote in post #24, I can add a VPN profile under “Advanced OpenVPN New Profile”, which also connects (Connection: WAN 1). However, I don’t get an extra OpenVPN WAN and the VPN provider’s DNS server is NOT used.

I read somewhere that the license is required to use an outbound policy for better control (and security?).
Or is it not possible to create a new OpenVPN WAN without a license? I want all network traffic to run through it. It would be even better to be able to create rules specifying which network traffic should use the tunnel and which should not.

Perhaps these questions have already been answered somewhere here, but unfortunately I can’t find the answers.
Thank you again.

@Severin_K - the license you need is the LIC-OPN-WAN and it has a one-time cost of $20.

Hope this helps!

2 Likes

I successfully run OpenVPN with the license mentioned by AskTim…… LIC-OPN-WAN

Works well on our Max BR1 Pro 5G. We use Outbound Policies and virtual LANs (vLAN) to route traffic from various devises to different WANs. In our case we route all general internet usage through the OpenVPN WAN, television and telephone (WiFi calling) through a non-VPN WANs.

Using vLANs seems to be the most robust way to segregate and manage device routing.

Be sure your VPN service offers downloadable OpenVPN configuration files for your Pepwave. We use NordVPN, they are robust and offer many server location options. We have also used StrongVPN successfully.

3 Likes

I have one last question:
The OpenVPN setting under the tab “Advanced OpenVPN” remains Off?


This is how mine looks.