openvpn-for-router

Enabling VPN on router using openvpn configuraition

I was trying to enable openvpn on my router using operwrt firmware. I ran into few roadblockers so decided to document it here for reference.

Step # 1 - Flash router with openwrt official image.

• go to URL - https://openwrt.org/toh/start

• You will see the list of images available. Select and download the correct image based on your router model.

• Go to Luci GUI of your router and flash the image on your router.

Step # 2 - Enable openvpn in the router.

Connect to the router using SSH and execute below commands -

• opkg update
• opkg install openvpn-openssl luci-app-openvpn
• openvpn –version

Once openvpn is installed, then VPN tab will be show in the home screen of the Luci router interface.

Step # 3 - Download openvpn configuration from your vpn provider and upload to Router

• Your VPN provider will provide the openvpn configuration file. Download the file. Along with openvpn config file, you will also get the username and password required for authentication.

• Upload the openvpn config file here from Luci GUI

Step # 4 - Copy credentials from vpn provider. Link auth credential file location to openvpn.

• Copy the username and password as obtained from your vpn vendor to auth.txt file in new lines.
• Copy the file to /etc/openvpn/custom/auth.txt in router using ssh.
• Update the file access in the openvpn configuration file - auth-user-pass /etc/openvpn/custom/auth.txt /etc/openvpn/custom/auth.txt

Step # 5 - Change access mode on the custom auth file.

• change access mode of the auth file to be accessed by openvpn chmod <> /etc/openvpn/custom/auth.txt

Step # 6 - Create VPN Interface.

• Create new VPN interface from Luci GUI. Network -> Interfaces.

Step # 7 - Set the Firewall rule.

• Set new firewall rule from Luci GUI. Network -> Firewall

Step # 8 - Assosciate Firewall rule to VPN Interface.

• Map the firewall rule as created in last step to the VPN interface.

Step # 9 - Complete setup and Start VPN conncetion.

• Connection is now complete.
• Go to VPN->OpenVPN and start the openvpn configured VPN service.