Configure via LuCI on OpenWRT

If the default client_up.sh and client_down.sh won't work on your OpenWRT router, and you couldn't figure out why, use LuCI to configure instead.

1. Clear the content of client_up.sh and client_down.sh so that they won't change route table any more. Remove /etc/hotplug.d/iface/30-shadowvpn if it exists. Then start ShadowVPN.

2. Add a new interface named tun, select tun0.

   

3. Disable Use default gateway of wan.

   

4. Add a new zone called tun. Add interface tun to tun zone. And update forward rules: lan => tun, tun => wan.

   

5. Add two static routes

   

   If your wan is pppoe, you only need to specify the interface wan in the first rule. If your wan is static IP or DHCP, you also have to specify gateway IP.

6. (Optional) Add chnroutes script. Save it to /etc/shadowvpn/chnroutes.sh. Then

    chmod +x /etc/shadowvpn/chnroutes.sh
   

   Create /etc/hotplug.d/iface/35-chnroutes

    #!/bin/sh
    [ ifup = "$ACTION" ] && {
      [ wan = "$INTERFACE" ] && {
         /etc/shadowvpn/chnroutes.sh
      }
    }
   

7. Save and apply. Then:

    /etc/init.d/network restart
   

To disable ShadowVPN, go to step 5 and change default route 0.0.0.0 from tun to wan.