Under The Reign

OpenWrt, OpenVPN, One Router, Two Signals

The idea: Broadcast two wireless signals. One running an OpenVPN and the other running a local internet

Purpose: To watch Netflix, Hulu, etc., on media devices and have a server running that can be access from the internet (without VPN) or just to have access to the local internet. So, depending on which wireless network that is connected, you can either be running over a VPN or locally. For example, you can connect your media devices to the VPN SSID and run Netflix, Hulu, or just have a Secure Connection all the time.

Before attempting this, I looked around on the internet and didn’t find a walkthrough, so if there is one, please let me know. However, I did find lots of help that I picked up from different places. Some of them include:

https://forum.openwrt.org/viewtopic.php?id=39223

There were a few more, but can’t remember which ones now.

I’m using Attitude Adjustment 12.09 RC2 with OpenVPN 2.0 and OpenVPN 2.4

Here is what I did:

  1. Purchase OpenVPN service from a reputable company (ex. Witopia, StrongVPN, etc.)
  2. Install OpenVPN on the OpenWRT router, See “Installation” section here. (Don’t do anything else on this page)
  3. Install ip …yes, just two letters. It’s version 3.3.0-1 as of this writing.
  4. Add a new Wireless controller from the LuCi as normal (Network->Wifi).
    • SSID: <your ‘secure’ name>
    • Mode: Access Point
    • Attach the network it to the LAN network for now.
    • We’ll test it to make sure it works and that you have internet access in a few moments…
    • Add Wireless Security and any other wireless setting you desire
    • Save and Apply
    • Click ‘Enable’
  1. Add a new interface (Network->Interfaces->Add new interface)
    • Choose Name (ex. Slan) –If you change this name (Slan), make sure to change the other references to it below
    • Select ‘Static Address.’
    • Create bridge = unchecked
    • Cover the following interfaces = Choose newly created wireless Network
    • Submit
    • Choose IP address in another subnet, for example:
      • IPv4 address = 192.168.20.1
      • IPv4 netmask = 255.255.255.0
      • Leave Gateway blank
      • Custom DNS server = 192.168.20.1
      • Save and Apply
    • From Firewall Settings
      • Create new Zone = <your ‘secure’ lan name> (needs to be different than wlan above. I choose the name of the lan. ex. slan)
    • Click ‘Setup DHCP server’ and use default settings unless you need something special.
    • Save and Apply
  2. From LuCI, go to the Firewall section: Network->Firewall Section
    • Edit the LAN settings and add the newly created interface (slan) to the covered networks. There should be two now. LAN and SLAN. Wan should be checked under the Allow forward to destination zone.
    • Save and Apply.

Pages: 1 2 3