OpenVPN dd-wrt

PLEASE READ THROUGH THIS WHOLE ARTICLE! YOU RISK BREAKING YOUR ROUTER WHEN USING A CUSTOM FIRMWARE! PROCEED CAREFULLY AND MAKE SURE YOUR ROUTER IS COMPATIBLE! PLEASE READ THROUGH THIS WHOLE ARTICLE! YOU RISK BREAKING YOUR ROUTER WHEN USING A CUSTOM FIRMWARE! PROCEED CAREFULLY AND MAKE SURE YOUR ROUTER IS COMPATIBLE!

REQUIREMENTS

These instructions are ONLY for people who already have a dd-wrt compatible router flashed with the latest version.

In this tutorial, a DIR-825 rev. B2 was used. Firmware: DD-WRT v24-sp2 (05/27/13) std.

If you're having issues with OpenVPN, please try the PPTP method.

Links

• dd-wrt website
• Full list of Supported Devices
• Searchable Router Database
• Firmware Installation Instructions
• [ ]
• [ ]
• [ ]

Setup Instructions

1. Connect and Log into your router by going to http://192.168.1.1/ or http://192.168.0.1/
2. Click on the Administration tab and then on Commands.
3. Copy the whole content of the ddwrt_btguard.txt file in the Command Shell.
ZIP with both .txt files
4. Type in your username and password.
Both username and password are case sensitive.
If UDP doesn't work, please type tcp instead of udp.
5. Click on Save Startup.

6. Copy the whole content of the ddwrt_firewall.txt file in the Command Shell.
7. Click on Save Firewall

---

#!/bin/sh USERNAME="replace with your username" PASSWORD="replace with your password" PROTOCOL="udp" REMOTE_SERVERS=" remote vpn.btguard.com 1194 " #### DO NOT CHANGE below this line #### CA_CRT='-----BEGIN CERTIFICATE----- MIIDcjCCAtugAwIBAgIJAPKjuBleHokmMA0GCSqGSIb3DQEBBQUAMIGDMQswCQYD VQQGEwJERTEVMBMGA1UECBMMSGVzc2UtTmFzc2F1MRIwEAYDVQQHEwlGcmFua2Z1 cnQxEDAOBgNVBAoTB0JUR3VhcmQxEzARBgNVBAMTCkJUR3VhcmQgQ0ExIjAgBgkq hkiG9w0BCQEWE3N1cHBvcnRAYnRndWFyZC5jb20wHhcNMTAwODA3MDc0NTA5WhcN MjAwODA0MDc0NTA5WjCBgzELMAkGA1UEBhMCREUxFTATBgNVBAgTDEhlc3NlLU5h c3NhdTESMBAGA1UEBxMJRnJhbmtmdXJ0MRAwDgYDVQQKEwdCVEd1YXJkMRMwEQYD VQQDEwpCVEd1YXJkIENBMSIwIAYJKoZIhvcNAQkBFhNzdXBwb3J0QGJ0Z3VhcmQu Y29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC4cBR6VLQICqdpTsjosIQ5 9elQZSRNQFaxWW3MeRC1xpJqjkbLJ9B9IO/Q/UyOa4a3qYHg8rI43wIF/RR6bwNX 3sZ5w6TrdVBk0DFZq6lDQ8/4Kpg1dKbdAgJjvtxiyrHWFtB0jYVGTlxwBSPflc2J RZDMAVVj83gQh8ODJeGjnwIDAQABo4HrMIHoMB0GA1UdDgQWBBQCj1U+EICMz8hF ++KZ8Ld1vR0sqTCBuAYDVR0jBIGwMIGtgBQCj1U+EICMz8hF++KZ8Ld1vR0sqaGB iaSBhjCBgzELMAkGA1UEBhMCREUxFTATBgNVBAgTDEhlc3NlLU5hc3NhdTESMBAG A1UEBxMJRnJhbmtmdXJ0MRAwDgYDVQQKEwdCVEd1YXJkMRMwEQYDVQQDEwpCVEd1 YXJkIENBMSIwIAYJKoZIhvcNAQkBFhNzdXBwb3J0QGJ0Z3VhcmQuY29tggkA8qO4 GV4eiSYwDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQUFAAOBgQAgVeYTxvAonucE qWloEvzCCUWs8bS/HJ6M85WzG7FPNAXx2QbWwN3EMwKxtGc7QF8f+APoMukzsvd2 vuI+1n0YwtD12cWMM9PLV2FhA2B+ajzssBTgvrbtX/SzKt0//lzrBp5Gyo6T/vO5 9KRb6DVfVWfB76+DLpTf9f3SLTgzKw== -----END CERTIFICATE-----' OPVPNENABLE=`nvram get openvpncl_enable | awk '$1 == "0" {print $1}'` if [ "$OPVPNENABLE" != 0 ] then nvram set openvpncl_enable=0 nvram commit fi sleep 30 mkdir /tmp/btguard; cd /tmp/btguard echo -e "$USERNAME\n$PASSWORD" > userpass.conf echo "$CA_CRT" > ca.crt echo "#!/bin/sh" > route-up.sh; echo -e "#!/bin/sh\nsleep 2" > route-down.sh echo "#!/bin/sh iptables -I FORWARD -i br0 -o tun0 -j ACCEPT iptables -I FORWARD -i tun0 -o br0 -j ACCEPT iptables -I INPUT -i tun0 -j REJECT iptables -t nat -A POSTROUTING -o tun0 -j MASQUERADE" > /tmp/.rc_firewall chmod 644 ca.crt; chmod 600 userpass.conf; chmod 700 route-up.sh route-down.sh chmod 700 /tmp/.rc_firewall sleep 30 echo "client dev tun proto $PROTOCOL script-security 2 hand-window 60 verb 3 mute 5 mtu-disc yes resolv-retry infinite nobind persist-key persist-tun keepalive 20 120 reneg-sec 0 log btguard.log ca ca.crt mute-replay-warnings daemon auth-user-pass userpass.conf $REMOTE_SERVERS" > openvpn.conf ln -s /tmp/btguard/btguard.log /tmp/btguard.log (killall openvpn; openvpn --config /tmp/btguard/openvpn.conf --route-up /tmp/btguard/route-up.sh --down-pre /tmp/btguard/route-down.sh) & exit 0 </pre> <p><b>END</b><br /> <br /> </p> <ul> <li><b>ddwrt_firewall.txt</b> Full Content:<br /> </li> </ul> <p><b>START</b> </p> <pre dir="ltr" class="mw-code mw-css"> iptables -I FORWARD -i br0 -o tun0 -j ACCEPT iptables -I FORWARD -i tun0 -o br0 -j ACCEPT iptables -I INPUT -i tun0 -j REJECT iptables -t nat -A POSTROUTING -o tun0 -j MASQUERADE </pre> <p><b>END</b> <br /> </p> <hr /> </p> </div> </div> <div class="wrapper"> <div class="wrapleft"> <div class="left"> <p><span class="plainlinks"><a rel="nofollow" class="external text" href="http://wiki.btguard.com/images/d/d9/Openvpn_ddwrt_3.png"><img src="http://wiki.btguard.com/images/d/d9/Openvpn_ddwrt_3.png" alt="Openvpn_ddwrt_3.png" /></a></span> </p> </div> </div> <div class="right"> <p> 8. Your settings should look like this. <br /> <i>Please make sure your username and password are typed in correctly! Both are case sensitive.</i> <br /> 9. Now click on the <b>Management tab</b>, go to the bottom of the page and click on <b>Reboot Router</b>. <br /> <br /> Setup Complete! <br /> <br /> The router will reboot and it will take it a minute or two to finish setting everything up. <br /> </p> </div> </div> <!-- NewPP limit report CPU time usage: 0.032 seconds Real time usage: 0.029 seconds Preprocessor visited node count: 41/1000000 Preprocessor generated node count: 118/1000000 Post‐expand include size: 0/2097152 bytes Template argument size: 0/2097152 bytes Highest expansion depth: 2/40 Expensive parser function count: 0/100 --> </div><div class="printfooter"> Retrieved from "<a href="https://wiki.btguard.com/index.php?title=OpenVPN_dd-wrt&oldid=1279">https://wiki.btguard.com/index.php?title=OpenVPN_dd-wrt&oldid=1279</a>"</div> <div id='catlinks' class='catlinks catlinks-allhidden'></div> <!-- end content --> <div class="visualClear"></div> </div> </div></div> <div id="column-one"> <h2>Navigation menu</h2> <div id="p-cactions" class="portlet" role="navigation"> <h3>Views</h3> <div class="pBody"> <ul> <li id="ca-nstab-main" class="selected"><a href="/index.php/OpenVPN_dd-wrt" title="View the content page [c]" accesskey="c">Page</a></li> <li id="ca-talk" class="new"><a href="/index.php?title=Talk:OpenVPN_dd-wrt&action=edit&redlink=1" title="Discussion about the content page [t]" accesskey="t">Discussion</a></li> <li id="ca-viewsource"><a href="/index.php?title=OpenVPN_dd-wrt&action=edit&oldid=1279" title="This page is protected. You can view its source [e]" accesskey="e">View source</a></li> <li id="ca-history"><a href="/index.php?title=OpenVPN_dd-wrt&action=history" rel="archives" title="Past revisions of this page [h]" accesskey="h">History</a></li> </ul> </div> </div> <div class="portlet" id="p-personal" role="navigation"> <h3>Personal tools</h3> <div class="pBody"> <ul> <li id="pt-login"><a href="/index.php?title=Special:UserLogin&returnto=OpenVPN+dd-wrt&returntoquery=direction%3Dnext%26oldid%3D1276" title="You are encouraged to log in; however, it is not mandatory [o]" accesskey="o">Log in</a></li> </ul> </div> </div> <div class="portlet" id="p-logo" role="banner"> <a href="/index.php/Main_Page" style="background-image: url(https://wiki.btguard.com/uploads/wikilogo_140.jpg);" title="Visit the main page"></a> </div> <div class="generated-sidebar portlet" id="p-" role="navigation"> <h3></h3> <div class='pBody'> <ul> <li id="n-BTGuard.com"><a href="https://btguard.com/" rel="nofollow">BTGuard.com</a></li> <li id="n-Sign-Up"><a href="https://btguard.com/#join" rel="nofollow">Sign Up</a></li> <li id="n-Members"><a href="https://btguard.com/member" rel="nofollow">Members</a></li> <li id="n-Support"><a href="https://btguard.com/support/" rel="nofollow">Support</a></li> </ul> </div> </div> <div class="generated-sidebar portlet" id="p-navigation" role="navigation"> <h3>Navigation</h3> <div class='pBody'> <ul> <li id="n-mainpage-description"><a href="/index.php/Main_Page" title="Visit the main page [z]" accesskey="z">Main page</a></li> <li id="n-FAQ"><a href="https://btguard.com/support/index.php?/Knowledgebase/List" rel="nofollow">FAQ</a></li> <li id="n-News"><a href="https://btguard.com/support/index.php?/News/List" rel="nofollow">News</a></li> </ul> </div> </div> <div class="generated-sidebar portlet" id="p-Tutorials" role="navigation"> <h3>Tutorials</h3> <div class='pBody'> <ul> <li id="n-VPN"><a href="/index.php/Tutorial:VPN">VPN</a></li> <li id="n-Proxy"><a href="/index.php/Tutorial:Proxy">Proxy</a></li> <li id="n-Downloads"><a href="/index.php/Downloads">Downloads</a></li> </ul> </div> </div> <div id="p-search" class="portlet" role="search"> <h3><label for="searchInput">Search</label></h3> <div id="searchBody" class="pBody"> <form action="/index.php" id="searchform"> <input type='hidden' name="title" value="Special:Search"/> <input type="search" name="search" placeholder="Search" title="Search BTGuard Wiki [f]" accesskey="f" id="searchInput" /> <input type="submit" name="go" value="Go" title="Go to a page with this exact name if exists" id="searchGoButton" class="searchButton" />  <input type="submit" name="fulltext" value="Search" title="Search the pages for this text" id="mw-searchButton" class="searchButton" /> </form> </div> </div> <div class="portlet" id="p-tb" role="navigation"> <h3>Tools</h3> <div class="pBody"> <ul> <li id="t-whatlinkshere"><a href="/index.php/Special:WhatLinksHere/OpenVPN_dd-wrt" title="A list of all wiki pages that link here [j]" accesskey="j">What links here</a></li> <li id="t-recentchangeslinked"><a href="/index.php/Special:RecentChangesLinked/OpenVPN_dd-wrt" title="Recent changes in pages linked from this page [k]" accesskey="k">Related changes</a></li> <li id="t-specialpages"><a href="/index.php/Special:SpecialPages" title="A list of all special pages [q]" accesskey="q">Special pages</a></li> <li id="t-print"><a href="/index.php?title=OpenVPN_dd-wrt&direction=next&oldid=1276&printable=yes" rel="alternate" title="Printable version of this page [p]" accesskey="p">Printable version</a></li> <li id="t-permalink"><a href="/index.php?title=OpenVPN_dd-wrt&oldid=1279" title="Permanent link to this revision of the page">Permanent link</a></li> <li id="t-info"><a href="/index.php?title=OpenVPN_dd-wrt&action=info">Page information</a></li> </ul> </div> </div> </div><!-- end of the left (by default at least) column --> <div class="visualClear"></div> <div id="footer" role="contentinfo"> <div id="f-poweredbyico"> <a href="//www.mediawiki.org/"><img src="/skins/common/images/poweredby_mediawiki_88x31.png" alt="Powered by MediaWiki" width="88" height="31" /></a> </div> <ul id="f-list"> <li id="privacy"><a href="/index.php/BTGuard_Wiki:Privacy_policy" title="BTGuard Wiki:Privacy policy">Privacy policy</a></li> <li id="about"><a href="/index.php/BTGuard_Wiki:About" title="BTGuard Wiki:About">About BTGuard Wiki</a></li> <li id="disclaimer"><a href="/index.php/BTGuard_Wiki:General_disclaimer" title="BTGuard Wiki:General disclaimer">Disclaimers</a></li> </ul> </div> </div> <script>/*<![CDATA[*/window.jQuery && jQuery.ready();/*]]>*/</script><script>if(window.mw){ mw.loader.state({"site":"loading","user":"ready","user.groups":"ready"}); }</script> <script>if(window.mw){ mw.loader.load(["mediawiki.action.view.postEdit","mediawiki.user","mediawiki.hidpi","mediawiki.page.ready","mediawiki.searchSuggest"],null,true); }</script> <script src="https://wiki.btguard.com/load.php?debug=false&lang=en&modules=site&only=scripts&skin=monobook&*"></script> <script>if(window.mw){ mw.config.set({"wgBackendResponseTime":319}); }</script></body></html>