Difference between revisions of "OpenVPN dd-wrt"

From BTGuard Wiki

Revision as of 15:11, 18 November 2014

PLEASE READ THROUGH THIS WHOLE ARTICLE!
You risk breaking your router when using a custom firmware!
Proceed carefully and make sure your router is compatible!

INFORMATION & REQUIREMENTS

These instructions are ONLY for users who already have a dd-wrt compatible router flashed with the latest version of the firmware. If you haven't flashed your router, please check the links on the right. Make sure your router is supported and read through the dd-wrt instructions to flash your device.

Router used for this tutorial: D-Link DIR-825 rev. B2 was used,Firmware: DD-WRT v24-sp2 (05/27/13) std build 21676.

If you're having issues with OpenVPN, please try the PPTP method.

Check List

Router must support OpenVPN. (big, mega or some std builds of the firmware)
Check both Model and Revision of your router to get the correct firmware.
Router must be configured to connect to the internet. (connected to modem through WAN port)
Firewall on modem must be off.
Time & Date & Time Zone on the router must be set correctly. (Setup > Basic Setup > Time Settings)

WARNING!
Only big, mega and some std builds of dd-wrt support OpenVPN.
mini and micro builds will not work with OpenVPN!

Links for dd-wrt

Setup Instructions Method 1

Setup Instructions Method 2

1. Connect to http://192.168.1.1/
2. Click on Administration > Commands.
3. Copy the whole content of the ddwrt_btguard.txt file in the Command Shell. ZIP with both .txt files

ddwrt_btguard.txt (Click below to select all)

#!/bin/sh USERNAME="replace with your username" PASSWORD="replace with your password" PROTOCOL="udp" REMOTE_SERVERS="remote vpn.btguard.com 1194" #### DO NOT CHANGE below this line #### CA_CRT='-----BEGIN CERTIFICATE----- MIIDcjCCAtugAwIBAgIJAPKjuBleHokmMA0GCSqGSIb3DQEBBQUAMIGDMQswCQYD VQQGEwJERTEVMBMGA1UECBMMSGVzc2UtTmFzc2F1MRIwEAYDVQQHEwlGcmFua2Z1 cnQxEDAOBgNVBAoTB0JUR3VhcmQxEzARBgNVBAMTCkJUR3VhcmQgQ0ExIjAgBgkq hkiG9w0BCQEWE3N1cHBvcnRAYnRndWFyZC5jb20wHhcNMTAwODA3MDc0NTA5WhcN MjAwODA0MDc0NTA5WjCBgzELMAkGA1UEBhMCREUxFTATBgNVBAgTDEhlc3NlLU5h c3NhdTESMBAGA1UEBxMJRnJhbmtmdXJ0MRAwDgYDVQQKEwdCVEd1YXJkMRMwEQYD VQQDEwpCVEd1YXJkIENBMSIwIAYJKoZIhvcNAQkBFhNzdXBwb3J0QGJ0Z3VhcmQu Y29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC4cBR6VLQICqdpTsjosIQ5 9elQZSRNQFaxWW3MeRC1xpJqjkbLJ9B9IO/Q/UyOa4a3qYHg8rI43wIF/RR6bwNX 3sZ5w6TrdVBk0DFZq6lDQ8/4Kpg1dKbdAgJjvtxiyrHWFtB0jYVGTlxwBSPflc2J RZDMAVVj83gQh8ODJeGjnwIDAQABo4HrMIHoMB0GA1UdDgQWBBQCj1U+EICMz8hF ++KZ8Ld1vR0sqTCBuAYDVR0jBIGwMIGtgBQCj1U+EICMz8hF++KZ8Ld1vR0sqaGB iaSBhjCBgzELMAkGA1UEBhMCREUxFTATBgNVBAgTDEhlc3NlLU5hc3NhdTESMBAG A1UEBxMJRnJhbmtmdXJ0MRAwDgYDVQQKEwdCVEd1YXJkMRMwEQYDVQQDEwpCVEd1 YXJkIENBMSIwIAYJKoZIhvcNAQkBFhNzdXBwb3J0QGJ0Z3VhcmQuY29tggkA8qO4 GV4eiSYwDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQUFAAOBgQAgVeYTxvAonucE qWloEvzCCUWs8bS/HJ6M85WzG7FPNAXx2QbWwN3EMwKxtGc7QF8f+APoMukzsvd2 vuI+1n0YwtD12cWMM9PLV2FhA2B+ajzssBTgvrbtX/SzKt0//lzrBp5Gyo6T/vO5 9KRb6DVfVWfB76+DLpTf9f3SLTgzKw== -----END CERTIFICATE-----' OPVPNENABLE=`nvram get openvpncl_enable | awk '$1 == "0" {print $1}'` if [ "$OPVPNENABLE" != 0 ] then nvram set openvpncl_enable=0 nvram commit fi sleep 30 mkdir /tmp/btguard; cd /tmp/btguard echo -e "$USERNAME\n$PASSWORD" > userpass.conf echo "$CA_CRT" > ca.crt echo "#!/bin/sh" > route-up.sh; echo -e "#!/bin/sh\nsleep 2" > route-down.sh echo "#!/bin/sh iptables -I FORWARD -i br0 -o tun0 -j ACCEPT iptables -I FORWARD -i tun0 -o br0 -j ACCEPT iptables -I INPUT -i tun0 -j REJECT iptables -t nat -A POSTROUTING -o tun0 -j MASQUERADE" > /tmp/.rc_firewall chmod 644 ca.crt; chmod 600 userpass.conf; chmod 700 route-up.sh route-down.sh chmod 700 /tmp/.rc_firewall sleep 30 echo "client dev tun proto $PROTOCOL script-security 2 hand-window 60 verb 3 mute 5 mtu-disc yes resolv-retry infinite nobind persist-key persist-tun keepalive 20 120 reneg-sec 0 log btguard.log ca ca.crt mute-replay-warnings daemon auth-user-pass userpass.conf $REMOTE_SERVERS" > openvpn.conf ln -s /tmp/btguard/btguard.log /tmp/btguard.log (killall openvpn; openvpn --config /tmp/btguard/openvpn.conf --route-up /tmp/btguard/route-up.sh --down-pre /tmp/btguard/route-down.sh) & exit 0

4. Type in your username and password.
Both username and password are case sensitive. Make sure not to add/forget Capital Letters.
If UDP doesn't work, please type tcp instead of udp.
5. Click on Save Startup.

6. Copy the whole content of the ddwrt_firewall.txt file in the Command Shell.
7. Click on Save Firewall

ddwrt_firewall.txt (Click below to select all)

iptables -I FORWARD -i br0 -o tun0 -j ACCEPT
iptables -I FORWARD -i tun0 -o br0 -j ACCEPT
iptables -I INPUT -i tun0 -j REJECT
iptables -t nat -A POSTROUTING -o tun0 -j MASQUERADE

8. Now click on the Management tab, go to the bottom of the page and click on Reboot Router.

Setup Complete!

The router will reboot and it will take a couple minutes to finish setting everything up.

Setup Instructions Method 2

1. Connect to http://192.168.1.1/
2. Click on Services > VPN.
3. Enable OpenVPN Clientand fill in the following:

Server IP/Name: vpn.btguard.com
Port: 1194
Tunnel Device: TUN
Tunnel Protocol: UDP (switch to TCP if UDP doesn't work)
Encryption Cipher: Blowfish CBC
Hash Algorithm: SHA1 Leave nsCertType verification unchecked.
Advanced Options: Enable
TLS Cipher: None
LZO Compression: Disabled
NAT: Enable
Firewall Protection: Disable
Tunnel MTU setting: 1500
Tunnel UDP MSS-Fix: Disable
Additional Config:
auth-user-pass /tmp/openvpncl/user.conf
persist-key
persist-tun
CA Cert:
(Click below to select all)
-----BEGIN CERTIFICATE----- MIIDcjCCAtugAwIBAgIJAPKjuBleHokmMA0GCSqGSIb3DQEBBQUAMIGDMQswCQYD VQQGEwJERTEVMBMGA1UECBMMSGVzc2UtTmFzc2F1MRIwEAYDVQQHEwlGcmFua2Z1 cnQxEDAOBgNVBAoTB0JUR3VhcmQxEzARBgNVBAMTCkJUR3VhcmQgQ0ExIjAgBgkq hkiG9w0BCQEWE3N1cHBvcnRAYnRndWFyZC5jb20wHhcNMTAwODA3MDc0NTA5WhcN MjAwODA0MDc0NTA5WjCBgzELMAkGA1UEBhMCREUxFTATBgNVBAgTDEhlc3NlLU5h c3NhdTESMBAGA1UEBxMJRnJhbmtmdXJ0MRAwDgYDVQQKEwdCVEd1YXJkMRMwEQYD VQQDEwpCVEd1YXJkIENBMSIwIAYJKoZIhvcNAQkBFhNzdXBwb3J0QGJ0Z3VhcmQu Y29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC4cBR6VLQICqdpTsjosIQ5 9elQZSRNQFaxWW3MeRC1xpJqjkbLJ9B9IO/Q/UyOa4a3qYHg8rI43wIF/RR6bwNX 3sZ5w6TrdVBk0DFZq6lDQ8/4Kpg1dKbdAgJjvtxiyrHWFtB0jYVGTlxwBSPflc2J RZDMAVVj83gQh8ODJeGjnwIDAQABo4HrMIHoMB0GA1UdDgQWBBQCj1U+EICMz8hF ++KZ8Ld1vR0sqTCBuAYDVR0jBIGwMIGtgBQCj1U+EICMz8hF++KZ8Ld1vR0sqaGB iaSBhjCBgzELMAkGA1UEBhMCREUxFTATBgNVBAgTDEhlc3NlLU5hc3NhdTESMBAG A1UEBxMJRnJhbmtmdXJ0MRAwDgYDVQQKEwdCVEd1YXJkMRMwEQYDVQQDEwpCVEd1 YXJkIENBMSIwIAYJKoZIhvcNAQkBFhNzdXBwb3J0QGJ0Z3VhcmQuY29tggkA8qO4 GV4eiSYwDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQUFAAOBgQAgVeYTxvAonucE qWloEvzCCUWs8bS/HJ6M85WzG7FPNAXx2QbWwN3EMwKxtGc7QF8f+APoMukzsvd2 vuI+1n0YwtD12cWMM9PLV2FhA2B+ajzssBTgvrbtX/SzKt0//lzrBp5Gyo6T/vO5 9KRb6DVfVWfB76+DLpTf9f3SLTgzKw== -----END CERTIFICATE-----'

4. Hit Save.

5. Click on Administration > Commands.
6. Copy the following in the Commands window.
echo "Username Password" > /tmp/openvpncl/user.conf Replace Username and Password with yours.
Both username and password are case sensitive. Make sure not to add/forget Capital Letters.

7. Click on Save Startup.

8. Now click on the Management tab, go to the bottom of the page and click on Reboot Router.
The router will reboot and it will take a couple minutes to finish setting everything up.
9. Click on Status > OpenVPN to check if you're connected.

Retrieved from "https://wiki.btguard.com/index.php?title=OpenVPN_dd-wrt&oldid=2225"

@@ Line 37: / Line 37: @@
    <div style="padding-left:5px;border-left:black 1px solid">
     <p>
+__NOTOC__
 == Links for dd-wrt ==
 *[http://www.dd-wrt.com/ Main Website]
@@ Line 44: / Line 45: @@
 *[http://www.dd-wrt.com/site/support/router-database Router Database (Searchable)]
 *[http://www.dd-wrt.com/wiki/index.php/Installation Install Instructions: dd-wrt Firmware]
-<br/>
+<br/><br/>
     </p>
    </div>
@@ Line 64: / Line 66: @@
    <p>
 == Setup Instructions Method 1==
+[[Openvpn_dd-wrt#Setup Instructions Method 2|Setup Instructions Method 2]]<br/>
+<br/>
 . Connect to http://192.168.1.1/<br/>
 . Click on '''Administration > Commands'''. <br/>
@@ Line 151: / Line 155: @@
 . Type in your '''username''' and '''password'''. <br/>
-''Both username and password are case sensitive.'' <br/>
+''Both username and password are case sensitive. Make sure not to add/forget Capital Letters. '' <br/>
 ''If UDP doesn't work, please type tcp instead of udp.'' <br/>
 . Click on '''Save Startup'''. <br/>
@@ Line 178: / Line 182: @@
 </textarea>
 </html>
+<br/>
+. Now click on the '''Management tab''', go to the bottom of the page and click on '''Reboot Router'''.  <br/>
+ <br/>
+Setup Complete! <br/>
+ <br/>
+The router will reboot and it will take a couple minutes to finish setting everything up. <br/>
+  </p>
+ </div>
+</div>
+<div class="wrapper"><br/>
+----
+<br/></div>
+<div class="wrapper">
+ <div class="wrapleft">
+  <div class="left">
+<span class="plainlinks">[https://wiki.btguard.com/images/openvpn_ddwrt2_1.png https://wiki.btguard.com/images/openvpn_ddwrt2_1.png]</span>
+  </div>
+ </div>
+ <div class="right">
+  <p>
+== Setup Instructions Method 2==
+[[Openvpn_dd-wrt#Setup Instructions Method 2|Setup Instructions Method 2]]<br/>
+<br/>
+. Connect to http://192.168.1.1/<br/>
+. Click on '''Services > VPN'''. <br/>
+. Enable '''OpenVPN Client'''and fill in the following:<br/>
+<br/>
+Server IP/Name: '''vpn.btguard.com'''<br/>
+Port: '''1194'''<br/>
+Tunnel Device: '''TUN'''<br/>
+Tunnel Protocol: '''UDP''' ''(switch to TCP if UDP doesn't work)''<br/>
+Encryption Cipher: '''Blowfish CBC'''<br/>
+Hash Algorithm: '''SHA1'''
+Leave '''nsCertType verification''' unchecked. <br/>
+Advanced Options: '''Enable'''<br/>
+TLS Cipher: '''None'''<br/>
+LZO Compression: '''Disabled'''<br/>
+NAT: '''Enable'''<br/>
+Firewall Protection: '''Disable'''<br/>
+Tunnel MTU setting: '''1500'''<br/>
+Tunnel UDP MSS-Fix: '''Disable'''<br/>
+Additional Config:<br/>
+'''auth-user-pass /tmp/openvpncl/user.conf'''<br/>
+'''persist-key'''<br/>
+'''persist-tun'''<br/>
+CA Cert:<br/>
+''(Click below to select all)''<br/>
+<html>
+<textarea class="textarea" rows=6 cols=50  onclick="this.select()" readonly>
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----'
+</textarea>
+</html>
+<br/>
+. Hit Save. <br/>
+<br/>
+<br/>
    </p>
   </div>
 </div>
 <div class="wrapper">
   <div class="wrapleft">
    <div class="left">
-<span class="plainlinks">[https://wiki.btguard.com/images/d/d9/Openvpn_ddwrt_3.png https://wiki.btguard.com/images/d/d9/Openvpn_ddwrt_3.png]</span>
+<span class="plainlinks">[https://wiki.btguard.com/images/openvpn_ddwrt2_2.png https://wiki.btguard.com/images/openvpn_ddwrt2_2.png]</span>
    </div>
   </div>
   <div class="right">
    <p>
-. Your settings should look like this. <br/>
+. Click on '''Administration > Commands'''. <br/>
-''Please make sure your username and password are typed in correctly! Both are case sensitive.''  <br/>
+. Copy the following in the '''Commands''' window. <br/>
-. Now click on the '''Management tab''', go to the bottom of the page and click on '''Reboot Router'''.  <br/>
+<html>
- <br/>
+<textarea class="textarea" rows=6 cols=50  onclick="this.select()" readonly>
-Setup Complete! <br/>
+echo "Username
-  <br/>
+Password" > /tmp/openvpncl/user.conf
-The router will reboot and it will take it a minute or two to finish setting everything up. <br/>
+</textarea>
+</html>
+Replace '''Username''' and '''Password''' with yours.<br/>
+''Both username and password are case sensitive. Make sure not to add/forget Capital Letters. '' <br/>
+<br/>
+. Click on '''Save Startup'''. <br/>
+<br/>
+<br/>
+  </p>
+ </div>
+</div>
+<div class="wrapper">
+ <div class="wrapleft">
+  <div class="left">
+<span class="plainlinks">[https://wiki.btguard.com/images/openvpn_ddwrt2_3.png https://wiki.btguard.com/images/openvpn_ddwrt2_3.png]</span>
+  </div>
+ </div>
+ <div class="right">
+  <p>
+. Now click on the '''Management tab''', go to the bottom of the page and click on '''Reboot Router'''.  <br/>
+The router will reboot and it will take a couple minutes to finish setting everything up. <br/>
+. Click on '''Status > OpenVPN''' to check if you're connected. <br/>
+<br/>
+<br/>
    </p>
   </div>
 </div>

Difference between revisions of "OpenVPN dd-wrt"

Revision as of 15:11, 18 November 2014

INFORMATION & REQUIREMENTS

Links for dd-wrt

Setup Instructions Method 1

Setup Instructions Method 2

Navigation menu

Views

Personal tools

Navigation

Tutorials

Search

Tools