No monitoring/statistics for clients connected to ER605 OpenVPN server?
I have an ER605 (firmwware: 2.2.4 Build 20240119 Rel.44368) operating in standalone mode configured as an OpenVPN server. And clients that can successfully connect to it and use the VPN tunnel. (Some connect using the OpenVPN client on mobile devices, others with routers acting as clients, NOT a site-to-site configuration).
However, is there no way to see any statistics or information at all about connected clients? As far as I can tell, the ER605 standalone mode web interface doesn't seem to tell me anything about connected clients. I'd like to see what tunnels are established, from where, bytes in/out, and ideally even be able to drop a tunnel. Basically the info that it looks like the "OpenVPN Tunnel List" tab would show but that's always empty - as presumably that tab's not for clients connecting to the ER605 as the VPN server.
Is there really nothing that the ER605 displays about inbound tunnels or am I missing something? The system log really only shows DHCP requests from a relatively recent time frame.
Thanks
Hi all,
The reason has been that the ACL blocks the reading of the VPN stats.
To avoid such a problem, please examine if you have created an ACL in your router. If you have an ACL like blocking all service and all directions, please consider doing the following steps:
1. Create a new Service.
2. Create an ACL and place this at a higher priority than any other entries you have.
Thanks for posting in our business forum.
I have a question, what kind of statistics do you expect to view?
I checked a different system which is an open source software that cannot delete or view specific information.
To control a client, just delete its user config. That's a common way to do it.
If you have more for me, please upload the vendor name and their move with a screenshot. Will take a look and check if it is necessary to write in the request report. Thank you.
@Clive_A : thanks for that but I think you missed the fact that I'm running in Standalone mode. And consquently, even with clients connected, I'm not seeing any information about them anywhere.
Even with clients connected, the "OpenVPN Tunnel List" screen shows nothing:
Is that a bug perhaps?
Thanks.
@Clive_A I am happy to do a remote screen sharing to help debug this. Can you DM me so I can share contact info outside of the public forum?
---
In the meantime, my OpenVPN server setup is pretty straight forward:
That goes to a dedicated VLAN with nothing too special in the setup:
And a connection from the phone works fine and allocates an IP address in that CIDR block:
But notice: The assigned IP address is outside of my LAN IP address - OpenVPN is doing the DHCP, not the ER605 LAN configuration.
(Side note: other clients connect router-to-router -- using my mobile phone just for testing.)
And as mentined, the VPN tunnel works, but nothing is visible about it from the ER605.
And another interesting observation.... with a client connected (my phone for testing) if I go to the "OpenVPN Tunnel List" there is nothing.
But if I hit the "Refresh" button, then the green progress bar advances quite quickly to what looks like about half way across the screen and then hangs there for a few minutes. You can see that in this screenshot: it's progressed to about the "o" in "Remote IP".
That gives me a clue that it's trying something and perhaps timing out behind the scenes. Eventually the progress bar dissappears but it still says "Entry Count: 0".
I've had lots of client connect successfully and use the VPN but I've never seen anything displayed here in this table.