i buyed an archer c60, and i was seeking VPN, and *nope* Thats how i get here, with my 2 years nordvpn subscription, one dream, and copy and paste codes, thanks for the tutorial man
Thanks for this video. Guides are great, but walking through and explaining has me setting up OpenWRT VPNs like a madman. I even figured out through trial and log errors how to get my FreshTomato router to connect as a client.
Thank you for the comment. I has been struggling with the command line and the guide for sometime before I have it work. Therefore, I just want to share how I get it done with the most basic instructions so that everybody can follow and have some fun time with OpenWRT. Glad to hear that the video helps you. There are still other OpenWRT tutorials, feel free to check it out. (hint - try Wireguard VPN, the performance is better and the CPU usage is lesser)
When I try to import the "client.ovpn" file into the OpenVPN app it says ... Failed to import profile - Selected file has incorrect profile configuration --- ERROR MESSAGE tls_crypt_v2_client_key_parse_error
I have found that when using mwan3 and openvpn server I can't connect to my vpn server is there any solution for this? I think using an interface to it might work, not sure Thanks in advance
I fixed it adding this to /etc/config/network and assigning firewall as to lan zone config interface 'vpn0' option ifname 'tun0' option proto 'static' option ipaddr '192.168.8.1' option netmask '255.255.255.0'
@@VanTechCorner Yes, enable/disable server is easy to do, but enable/disable client?? In log also no information about connecting clients. It's necessary to install something else??
Hey, this is OpenVPN running on OpenWRT, an operating system for routers.For better OpenVPN performance and management, with or without GUI, I would suggest installing it on Ubuntu / CentOS. There are alot of scripts for auto-openvpn-installation available on the internet, or you can try openvpn.net (commercial) or SoftEtherVPN. To enable & disable client, you can check the "Key management" section of this document openwrt.org/docs/guide-user/services/vpn/openvpn/extras. Good luck!
i have already OPENVPN server now, when i use mobile to connect my router I can login but i did not have internet. please tell me how can i have brower in web
Thanks for all those OpenWRT videos! They are very helpful. Please keep up with this content it's much appreciated. I have a question though. My case is that my ISP provides me with both internet and IPTV. When I plug the LAN cable coming from my ISP into the WAN port of the router, then bridge port 1 from the LAN side with the WAN - port 1 is now in bridged mode and I can plug my set top box and have IPTV (I guess it's using Multicast). My question is there a way I can setup the VPN server with a TAP interface and bridge the WAN side with that TAP interface (I don't know if I make myself clear) - my goal is to be able to take my set top box in case I'm traveling, connect it to a OPENWRT VPN client and watch IPTV when I'm not home. IPTV works on layer 2 - no routing. I will be very grateful if you post a video explaining how to do this. Once again great work!
Hi there, thanks for the feedback. However, I am having problem understand your setup. So basically you are having a GPON connection from your ISP and the device is on bridge mode for internet. Now you want be able to remotely watch IPTV, is that correct?
That's correct. I'm having a GPON device which is connected to the WAN port of my OpenWrt router through a LAN cable. There from a bridged port 1 from the LAN ports of my router to the WAN port and I connect to that port 1 my set top box. That way the port is bridged and it acts as if I was connected a switch in between the GPON and the router. Plugging the set top box in the switch will also work. That's how I found that IPTV works on layer 2 - there's no routing. I guess the ISP is providing the IPTV on layer 2 through another VLAN. I want somehow to setup the VPN Server to work with a TAP interface as if the clients of the VPN server are connected to a switch in between the GPON and the router. I hope I explained my goal better this time. Thanks for your time! I appreciate it!
@@VanTechCorner I talked to the customer service of my ISP and I found out that the answer is both - IPTV runs in a different VLAN and uses multicast in that VLAN. So when the set top box is connected to the switch in between the GPON and the router the STB gets an IP address by its MAC address from the "IPTV VLAN". Also I did some research of how people accomplish my goal and I found out that they use EOIP (using Mikrotik devices). From what I read this way the establish connect two switches (layer 2 devices) over the internet as if they are connected with a LAN cable. If you persue this topic in one of your future videos I'll be very grateful. I found some info on the internet but I'm not that confident in networking. Thanks!
Thanks for your detailed and easy tutorial video. Just one or two (maybe noobish) generic VPN question. This OpenVPN Server has different IP Pool than my OpenWRT wired clients (connected to LAN ports). In your case OpenVPN has 192.168.8.0/24 and the wired clients maybe have 192.168.1.0/24. Can I access over VPN still my wired LAN-Clients in different subnet? (Or do I have to configure a route in Windows? And does the OpenWRT allow it?) Can I actually configure the same subnet? e.g. I put my local DHCP to 100-119 and my OpenVPN 120-129? Would it work? Thank you very much in advance for your answer. Best greetings!
Hi, thanks for the feedback. LAN devices from client side and service side are able to communicate with each other by setting up a plain routing. You can have a look at the "Site-to-Site" section on this link openwrt.org/docs/guide-user/services/vpn/openvpn/extra. By saying LAN, it is about the static IP address show in your Network - Interfaces - LAN. (Server side LAN and client side LAN should be in 2 different subnet, for example 192.168.1.0/24 and 192.168.2.0/24. 192.168.8.0/24 is just the IP address of the VPN tunnel and it should also be different with both LANs' subnet). Hope this help and anything, just update here.
Thank you for your guide. I was able to install the openvpn server and get the clients to connect to it, the clients connected can access the router but can't see the LAN computers.
Hi, you will need to setup site-to-site OpenVPN in order for devices from both LAN to see each other. There is already a video on the channel which will help you with this.
Điều này rất bình thường, với những router chỉ có 1 core và xung nhịp tầm thấp có thể lên tới 2 hoặc 3 tiếng đó bạn. Trong video mình dùng x86 PC, 2 cores, 4 thread 1.8Ghz và cũng tốn khoảng 1 phút mới xong.
This part is for static public IP address. If you are using dynamic domain name, you can skip these lines and go to the last one, to input the domain name. For exmaple, I have a dynamic domain name which is example.ddns.net, just need to enter this line OVPN_SERV="${NET_ADDR}" like this OVPN_SERV="example.ddns.net"
@@VanTechCorner thank you for this , for one more problem ? ( root@OpenWrt:~# easyrsa init-pki rm: can't remove '/etc/easy-rsa/pki': I/O error Easy-RSA error: Removal of PKI dir failed. Check/correct errors above) what can i do ?
I have no idea, it is something with the device or the IO itself. You can try to backup the configuration and re-install/reset OpenWRT or try to look at the error on Google/OpenWRT forum. If it is possible, I would suggest using Wireguard VPN since it uses less processor power and provides high performance/throughput. There is also guide for Wireguard server and client setup on the channel.
hello sir i have a one question of vpn server. can i purchase static ip address for make own vpn server in openwrt ? and any other option without purchasing static ip address
In order to setup an OpenVPN server, you don't really need OpenWrt. Ubuntu and other Linux distro work fine. See this video for how to th-cam.com/video/luLRpFMdLrE/w-d-xo.html - With static public IP address, the remote (server) IP address is the static IP that you got - With dynamic public IP address, you need to configure DDNS (dynamic DNS) in order to connect to your server
em không thể kết nối được về server và khi e xem log thì nó xuất hiện rất nhiều dòng như thế này: Mon Oct 24 15:40:14 2022 daemon.err openvpn(server)[4528]: Options error: In [CMD-LINE]:1: Error opening configuration file: /etc/openvpn/server.conf Em mong a giúp đỡ ạ. Thiết bị của em là CR6608 chạy openwrt 22.03 rc6
I couldn't get it to work with OpenWRT latest edition(21.02.3) on Linksys WRT3200ACM router. Can you please update your video for latest version of the firmware?
normally when u create an interface and firewall for vpn it should show up in luci, Now nothing about the VPN shows up in my Luci- web interface, although everything works fine. Would be great if you can answer fast!
To be honest I don't understand your question. Basically we don't need LuCI to setup OpenVPN instance, just the CLI is good enough. I can only help and know what goes wrong when you follow my guide, if not you will need to provide what had been done with the configuration so I can help with.
@@VanTechCorner thank you for answering. I have followed exactly and the VPN works also. My question is: Why dont we have an interface for the tunnel device tun0 ? also I wonder how I can see the connections to my router in the router, since no IPs with 192.168.8.xxx show up. How can I see connection status? Also I dont really get what happened with firewall.... so we just set the tun0 to the lan firewall and edited the lan firewall a bit right? What would happen if I use luci to create an interface under network, name it "HomeVPN" connect it to tun0 device and set firewall to lan. ? For example in your video about setting up vpn client u create an interface at 6:50 th-cam.com/video/WRWZmcKejhg/w-d-xo.html why dont we do that here? can it be done?
To be honest I don't understand what setup you are trying to do with the router. My tutorial is based on the OpenWRT guide which demostrate the steps in order to have a working VPN server. If you follow it and there is certain problems, then I can know where it goes wrong and help you with that. However, if you have a different way of setup, it is something I can't help. You can always refer to the document and do further research. openwrt.org/docs/guide-user/services/vpn/openvpn/server At the same time, you can backup the configuration and just play around with the setting you have in mind, in the worst case you just need to restore the configuration or re-install the firmware. These are software changes and there will be no physical impact to the router so don't worry about that.
@@VanTechCorner Hey, I already said I followed EXACTLY the procedure of the tutorial that you have said. I explicitely mentioned my question on why we didnt create an interface for the tun0 device like we do in the tutorial of setting up a open vpn client. Isnt that simple question? Also I am wondering if its possible to somehow view active VPN connections in luci or elsewhere
Hey, do you mean setup OpenWRT router running on AWS and install OpenVPN server, or you just want to setup OpenVPN server with AWS lightsaild running Ubuntu/ Linux OS?
@@VanTechCorner Thanks for getting back! Sorry I was not very clear, I am fairly new to this. I am fairly certain the second option. I have a Linksys WRT3200 ACM router on which I just installed the OpenWRT firmware. I have an Ubuntu/Debian instance server (with UDP and SSH only, and the minimum: 512 MB RAM, 1 vCPU, 20 GB SSD) running on AWS Lightsail that I would like to use for my VPN server, if possible. If not, I can just cancel that service and move on to something equally as cheap, hopefully. Hopefully this is a little bit more clear. Please bear with me if it is not, I am in a networking class in college and trying to figure things out as I go. This video is very helpful. @2:54 How would the config params look for DNS and Domain if I were to add my Lightsail server? I understand you do not have all the particulars of my server, but a general idea would help.
Yup, by default it should be impossible for clients from 2 other end of the tunnel to communicate. You can take a look on the Site-to-Site configuration from the below link and see if it work. openwrt.org/docs/guide-user/services/vpn/openvpn/extra
thank you for the easy guide, it worked perfectly, but i have one problem that i can not reach other devices on my network through the ovpn i configured, (i am reaching my openwrt router through a lan port "port forward") , as i am using this openwrt as a switch. plus , i need set up a username and password for each client.
Hi, you need to configure Site-to-Site VPN with OpenVPN. In the video description, there is a link to the openwrt official guide. You can find the script for Site to Site there. I have a video but unfortunately it is for Wireguard VPN.
I got the error when trying to install VPN on my MI 4A global giga router: satisfy_dependencies_for: Cannot satisfy the following dependencies for openvpn-openssl: How can I install it now?
Thanks for this video. I've downloaded a openwrt firmware for my router. This openwrt firmware was compiled by other guys and intergrated with openvpn server fuctions which works fine with my router. But its cert/key/dh etc files were generated by the original firmware. I think that's not very safe. How can I generate my own cert/key/dh without reinstall the whole openvpn server?
We have script for the installation and it is very simple to do, just to copy-n-paste. The best way is to install OpenVPN server from the beginning follow this script openwrt.org/docs/guide-user/services/vpn/openvpn/server
Really nice guide. I got my OpenVPNserver up and running in short time. I have a question though. i would like to have username/password and if possible one time password (OTP) something like Google-authenticator. Could you help us to implement this, please?
Hey, you can do this, but I suggest doing it with normal linux first. Once you get it, and try to understand the Openwrt's OpenVPN script and do it own your own. openvpn.net/community-resources/rsa-key-management/
You can leave a comment here so other viewers can see. If it is a device specific case, please go to the channel page and raise a case on the "Support" link. I don't provide support via social account.
My external router ip address is 192.168.1.1 and my local router ip address is 192.168.1.1 when I go to 192.168.1.1 I can only access my local router. How is it possible to access external router using openvpn ?
Either you have to change your local or your remote router's LAN address. Just go to Network - Interfaces, edit the LAN interface and you will see the LAN IP there.
@@VanTechCorner Well, the same information could be provided in 1 sentence "copy&paste the commands in those boxes into your terminal.". The video would be less than 10 secs. I would have accepted had you added some background or explanation to that. But, no. And are we seriously discussing this?
i tried this but how can I create my own domain?Because I followed everything but it didnt work.......How to create a domain?can I just use my public ip address?i do have a free noip ddns domain but is there any additional command because that domain need a user and password to access...or can I just used that no ip domain using the last line OVPN_SERV="example.ddns.net" i cant make it to work, i have mwan3 installed, 223.130.20.1 is my LAN IP adress/VPN RoutErs IP address, and my noip domain is cybermind2.ddns.net....please provide me a detailed fix.
![กี่หมื่นฟ้า | Your Sky Series EP.1 [2/4]](http://i.ytimg.com/vi/qJbQs_nhjD4/mqdefault.jpg)
i buyed an archer c60, and i was seeking VPN, and *nope*
Thats how i get here, with my 2 years nordvpn subscription, one dream, and copy and paste codes, thanks for the tutorial man
Glad that it works. There is also the OpenVPN client tutorial on this channel.
Muchas gracias por esta gran aportación para todos aquellos que no somos muy avanzados en este tema.
Thanks for this video. Guides are great, but walking through and explaining has me setting up OpenWRT VPNs like a madman. I even figured out through trial and log errors how to get my FreshTomato router to connect as a client.
Thank you for the comment. I has been struggling with the command line and the guide for sometime before I have it work. Therefore, I just want to share how I get it done with the most basic instructions so that everybody can follow and have some fun time with OpenWRT. Glad to hear that the video helps you. There are still other OpenWRT tutorials, feel free to check it out. (hint - try Wireguard VPN, the performance is better and the CPU usage is lesser)
same, get error and don't know how to fix. "WARNING: Using --genkey --secret filename is DEPRECATED. Use --genkey secret filename instead."
I have tried multiple things, but this video helped a lot. Quick video with good explanation!
你的教程非常清晰，讲的也很好，顺便说一下，我也是win10，用的桌面背景也一样哈哈哈哈
哈哈，那么巧！
Thank you. This worked beautifully.
Thanks for the comment! Glad it helped!
Very nice video👍🏼👍🏼
Do you have an updated tutorial for 21.02 version?
Really Nice! The document is updated now can you make a fresh video on multi client setup ?
i find a little script to make user and password but i don't know how to use it pleas help me... thanks
GREAT tutorial - Thank you ... I have got so far as getting the server running - how do I connect my iPhone to my network remotely?
When I try to import the "client.ovpn" file into the OpenVPN app it says ... Failed to import profile - Selected file has incorrect profile configuration --- ERROR MESSAGE tls_crypt_v2_client_key_parse_error
anh ơi em làm xong nó báo Initialization Sequence Completed rồi nhưng ở openvpn trên ios không kết nối được là do đâu nhỉ
I have found that when using mwan3 and openvpn server I can't connect to my vpn server is there any solution for this? I think using an interface to it might work, not sure
Thanks in advance
I fixed it adding this to /etc/config/network and assigning firewall as to lan zone
config interface 'vpn0'
option ifname 'tun0'
option proto 'static'
option ipaddr '192.168.8.1'
option netmask '255.255.255.0'
Great. I have mentioned during the video that it is important to assign the interface to at least a firewall zone or you will have no internet access.
Good job, work fine! I have one question about something more managment ex. show connected clients or temporary disable client.. ??
Hi, you can find this by checking the application log. I have put it in the Pinned comment.
@@VanTechCorner Yes, enable/disable server is easy to do, but enable/disable client?? In log also no information about connecting clients.
It's necessary to install something else??
Hey, this is OpenVPN running on OpenWRT, an operating system for routers.For better OpenVPN performance and management, with or without GUI, I would suggest installing it on Ubuntu / CentOS. There are alot of scripts for auto-openvpn-installation available on the internet, or you can try openvpn.net (commercial) or SoftEtherVPN. To enable & disable client, you can check the "Key management" section of this document openwrt.org/docs/guide-user/services/vpn/openvpn/extras. Good luck!
Thanks for this video. How to add diffrent username & pass to each client/client2/client3 etc. ?
Great work!
Very helpful.
i have already OPENVPN server now, when i use mobile to connect my router I can login but i did not have internet. please tell me how can i have brower in web
Thanks for all those OpenWRT videos! They are very helpful. Please keep up with this content it's much appreciated. I have a question though. My case is that my ISP provides me with both internet and IPTV. When I plug the LAN cable coming from my ISP into the WAN port of the router, then bridge port 1 from the LAN side with the WAN - port 1 is now in bridged mode and I can plug my set top box and have IPTV (I guess it's using Multicast). My question is there a way I can setup the VPN server with a TAP interface and bridge the WAN side with that TAP interface (I don't know if I make myself clear) - my goal is to be able to take my set top box in case I'm traveling, connect it to a OPENWRT VPN client and watch IPTV when I'm not home. IPTV works on layer 2 - no routing. I will be very grateful if you post a video explaining how to do this.
Once again great work!
Hi there, thanks for the feedback. However, I am having problem understand your setup. So basically you are having a GPON connection from your ISP and the device is on bridge mode for internet. Now you want be able to remotely watch IPTV, is that correct?
That's correct. I'm having a GPON device which is connected to the WAN port of my OpenWrt router through a LAN cable. There from a bridged port 1 from the LAN ports of my router to the WAN port and I connect to that port 1 my set top box. That way the port is bridged and it acts as if I was connected a switch in between the GPON and the router. Plugging the set top box in the switch will also work. That's how I found that IPTV works on layer 2 - there's no routing. I guess the ISP is providing the IPTV on layer 2 through another VLAN. I want somehow to setup the VPN Server to work with a TAP interface as if the clients of the VPN server are connected to a switch in between the GPON and the router. I hope I explained my goal better this time.
Thanks for your time! I appreciate it!
You need to firstly find out how does IPTV from your IPS work. Is it running on VLAN, or it is using multicast then we can move on.
@@VanTechCorner I talked to the customer service of my ISP and I found out that the answer is both - IPTV runs in a different VLAN and uses multicast in that VLAN. So when the set top box is connected to the switch in between the GPON and the router the STB gets an IP address by its MAC address from the "IPTV VLAN". Also I did some research of how people accomplish my goal and I found out that they use EOIP (using Mikrotik devices). From what I read this way the establish connect two switches (layer 2 devices) over the internet as if they are connected with a LAN cable. If you persue this topic in one of your future videos I'll be very grateful. I found some info on the internet but I'm not that confident in networking. Thanks!
Well, interesting information. I will note it down and do more research about it. Thanks for sharing!
Thanks for your detailed and easy tutorial video. Just one or two (maybe noobish) generic VPN question. This OpenVPN Server has different IP Pool than my OpenWRT wired clients (connected to LAN ports). In your case OpenVPN has 192.168.8.0/24 and the wired clients maybe have 192.168.1.0/24.
Can I access over VPN still my wired LAN-Clients in different subnet? (Or do I have to configure a route in Windows? And does the OpenWRT allow it?)
Can I actually configure the same subnet? e.g. I put my local DHCP to 100-119 and my OpenVPN 120-129? Would it work?
Thank you very much in advance for your answer. Best greetings!
Hi, thanks for the feedback. LAN devices from client side and service side are able to communicate with each other by setting up a plain routing. You can have a look at the "Site-to-Site" section on this link openwrt.org/docs/guide-user/services/vpn/openvpn/extra. By saying LAN, it is about the static IP address show in your Network - Interfaces - LAN. (Server side LAN and client side LAN should be in 2 different subnet, for example 192.168.1.0/24 and 192.168.2.0/24. 192.168.8.0/24 is just the IP address of the VPN tunnel and it should also be different with both LANs' subnet). Hope this help and anything, just update here.
Sir, please make a tutorial install and configute L2TP server on openwrt
Thank you for your guide. I was able to install the openvpn server and get the clients to connect to it, the clients connected can access the router but can't see the LAN computers.
Hi, you will need to setup site-to-site OpenVPN in order for devices from both LAN to see each other. There is already a video on the channel which will help you with this.
Chào bạn, cho mình hỏi cái bước mã hoá ………….+…..+………….+…………. khoảng bao lâu nhỉ
Mình chạy hơn 1 tiếng đồng hồ mà nó chưa xong ko biết có lỗi gì ko nhỉ
Điều này rất bình thường, với những router chỉ có 1 core và xung nhịp tầm thấp có thể lên tới 2 hoặc 3 tiếng đó bạn. Trong video mình dùng x86 PC, 2 cores, 4 thread 1.8Ghz và cũng tốn khoảng 1 phút mới xong.
@@VanTechCorner tiện cho mình hỏi trên modem chính cần mở Port ko nhỉ
i have only dynamic ddns , witch must copy paste from here ( # Fetch WAN IP address -# Fetch FQDN from DDNS client) can you explain little more?
This part is for static public IP address. If you are using dynamic domain name, you can skip these lines and go to the last one, to input the domain name. For exmaple, I have a dynamic domain name which is example.ddns.net, just need to enter this line OVPN_SERV="${NET_ADDR}" like this OVPN_SERV="example.ddns.net"
@@VanTechCorner thank you for this , for one more problem ? ( root@OpenWrt:~# easyrsa init-pki
rm: can't remove '/etc/easy-rsa/pki': I/O error
Easy-RSA error:
Removal of PKI dir failed. Check/correct errors above) what can i do ?
I have no idea, it is something with the device or the IO itself. You can try to backup the configuration and re-install/reset OpenWRT or try to look at the error on Google/OpenWRT forum. If it is possible, I would suggest using Wireguard VPN since it uses less processor power and provides high performance/throughput. There is also guide for Wireguard server and client setup on the channel.
@@VanTechCorner thank you
No worry. I have been using OpenVPN or years and just get to know Wireguard recently. Hope it will help.
hello sir i have a one question of vpn server. can i purchase static ip address for make own vpn server in openwrt ? and any other option without purchasing static ip address
In order to setup an OpenVPN server, you don't really need OpenWrt. Ubuntu and other Linux distro work fine. See this video for how to th-cam.com/video/luLRpFMdLrE/w-d-xo.html
- With static public IP address, the remote (server) IP address is the static IP that you got
- With dynamic public IP address, you need to configure DDNS (dynamic DNS) in order to connect to your server
em không thể kết nối được về server và khi e xem log thì nó xuất hiện rất nhiều dòng như thế này:
Mon Oct 24 15:40:14 2022 daemon.err openvpn(server)[4528]: Options error: In [CMD-LINE]:1: Error opening configuration file: /etc/openvpn/server.conf
Em mong a giúp đỡ ạ.
Thiết bị của em là CR6608 chạy openwrt 22.03 rc6
I couldn't get it to work with OpenWRT latest edition(21.02.3) on Linksys WRT3200ACM router. Can you please update your video for latest version of the firmware?
Hi, the configuration is the same and I can get it working even with OpenWRT 22. You can see the docs in the video description, it should be updated.
Hi, I am getting this error:
Options error: Unrecognized option or missing or extra parameter(s) in Client.ovpn:1: ---BEGIN (2.5.1)
The error tells us there is something wrong with the ovpn file. Check it out.
how to check status vpn clinet..in gui
normally when u create an interface and firewall for vpn it should show up in luci, Now nothing about the VPN shows up in my Luci- web interface, although everything works fine. Would be great if you can answer fast!
To be honest I don't understand your question. Basically we don't need LuCI to setup OpenVPN instance, just the CLI is good enough. I can only help and know what goes wrong when you follow my guide, if not you will need to provide what had been done with the configuration so I can help with.
@@VanTechCorner thank you for answering. I have followed exactly and the VPN works also. My question is: Why dont we have an interface for the tunnel device tun0 ? also I wonder how I can see the connections to my router in the router, since no IPs with 192.168.8.xxx show up. How can I see connection status? Also I dont really get what happened with firewall.... so we just set the tun0 to the lan firewall and edited the lan firewall a bit right?
What would happen if I use luci to create an interface under network, name it "HomeVPN" connect it to tun0 device and set firewall to lan. ? For example in your video about setting up vpn client u create an interface at 6:50 th-cam.com/video/WRWZmcKejhg/w-d-xo.html why dont we do that here? can it be done?
@@VanTechCorner can u help ? Id appreciate it
To be honest I don't understand what setup you are trying to do with the router. My tutorial is based on the OpenWRT guide which demostrate the steps in order to have a working VPN server. If you follow it and there is certain problems, then I can know where it goes wrong and help you with that. However, if you have a different way of setup, it is something I can't help. You can always refer to the document and do further research. openwrt.org/docs/guide-user/services/vpn/openvpn/server
At the same time, you can backup the configuration and just play around with the setting you have in mind, in the worst case you just need to restore the configuration or re-install the firmware. These are software changes and there will be no physical impact to the router so don't worry about that.
@@VanTechCorner Hey, I already said I followed EXACTLY the procedure of the tutorial that you have said. I explicitely mentioned my question on why we didnt create an interface for the tun0 device like we do in the tutorial of setting up a open vpn client. Isnt that simple question? Also I am wondering if its possible to somehow view active VPN connections in luci or elsewhere
Keep it up bos! 😊👍
Thanks! I will!
can I use AWS lightsail for my server? If so, how do I go about doing that? Or, how do I obtain the OpenVPN server to plug in?
Hey, do you mean setup OpenWRT router running on AWS and install OpenVPN server, or you just want to setup OpenVPN server with AWS lightsaild running Ubuntu/ Linux OS?
@@VanTechCorner Thanks for getting back! Sorry I was not very clear, I am fairly new to this. I am fairly certain the second option. I have a Linksys WRT3200 ACM router on which I just installed the OpenWRT firmware. I have an Ubuntu/Debian instance server (with UDP and SSH only, and the minimum: 512 MB RAM, 1 vCPU, 20 GB SSD) running on AWS Lightsail that I would like to use for my VPN server, if possible. If not, I can just cancel that service and move on to something equally as cheap, hopefully. Hopefully this is a little bit more clear. Please bear with me if it is not, I am in a networking class in college and trying to figure things out as I go. This video is very helpful.
@2:54 How would the config params look for DNS and Domain if I were to add my Lightsail server? I understand you do not have all the particulars of my server, but a general idea would help.
Thank you for this. I followed this tutorial and when I can connect with vpn client, i can ping router but i cant ping any lan devices. Can you help?
Yup, by default it should be impossible for clients from 2 other end of the tunnel to communicate. You can take a look on the Site-to-Site configuration from the below link and see if it work. openwrt.org/docs/guide-user/services/vpn/openvpn/extra
thank you for the easy guide, it worked perfectly, but i have one problem that i can not reach other devices on my network through the ovpn i configured, (i am reaching my openwrt router through a lan port "port forward") , as i am using this openwrt as a switch.
plus , i need set up a username and password for each client.
Hi, you need to configure Site-to-Site VPN with OpenVPN. In the video description, there is a link to the openwrt official guide. You can find the script for Site to Site there. I have a video but unfortunately it is for Wireguard VPN.
I got the error when trying to install VPN on my MI 4A global giga router: satisfy_dependencies_for: Cannot satisfy the following dependencies for openvpn-openssl:
How can I install it now?
You need to update the OpenWRT firmware to the latest version.
bangalider error asbei savabik
I get ls: /*.ovpn: No such file or directory
Thanks for this video. I've downloaded a openwrt firmware for my router. This openwrt firmware was compiled by other guys and intergrated with openvpn server fuctions which works fine with my router. But its cert/key/dh etc files were generated by the original firmware. I think that's not very safe. How can I generate my own cert/key/dh without reinstall the whole openvpn server?
We have script for the installation and it is very simple to do, just to copy-n-paste. The best way is to install OpenVPN server from the beginning follow this script openwrt.org/docs/guide-user/services/vpn/openvpn/server
Really nice guide. I got my OpenVPNserver up and running in short time. I have a question though. i would like to have username/password and if possible one time password (OTP) something like Google-authenticator. Could you help us to implement this, please?
I'm looking for this username and password, apparently you haven't received an answer from him or anyone, but if you find suggestions then update us.
Thank you worked perfectly, help me to add more vpn clients after OPENVPN server setup.
Glad to hear that
how to create password for openvpn clients? thank you
Hey, you can do this, but I suggest doing it with normal linux first. Once you get it, and try to understand the Openwrt's OpenVPN script and do it own your own. openvpn.net/community-resources/rsa-key-management/
The doucoment page does not exit
Help me
Hi, they changed the URL. Please check out the document at openwrt.org/docs/guide-user/services/vpn/openvpn/server
I have some more problem to understand i alredy sent massage to your fb account
Please help me out
You can leave a comment here so other viewers can see. If it is a device specific case, please go to the channel page and raise a case on the "Support" link. I don't provide support via social account.
My external router ip address is 192.168.1.1 and my local router ip address is 192.168.1.1 when I go to 192.168.1.1 I can only access my local router. How is it possible to access external router using openvpn ?
Either you have to change your local or your remote router's LAN address. Just go to Network - Interfaces, edit the LAN interface and you will see the LAN IP there.
Did I get this right? This is a tutorial about copy&paste, right?
What do you expect when searching for this? Will the command run differently when I manually type in, instead of copy & paste?
@@VanTechCorner Well, the same information could be provided in 1 sentence "copy&paste the commands in those boxes into your terminal.". The video would be less than 10 secs.
I would have accepted had you added some background or explanation to that. But, no.
And are we seriously discussing this?
can you make video for openvpn by user&pass?
Có tài liệu hướng dẫn ko
I took up to 4 hours for me ;)
Lol, what is the router model?
@@VanTechCorner Netgear R6220
@@James-uw4it Wow, I had one R6220 take about 50 mins and the other 30.
@@VanTechCorner
Hostname OpenWrt
Model Netgear R6220
Architecture MediaTek MT7621 ver:1 eco:3
Firmware Version OpenWrt 19.07.4 r11208-ce6496d796 / LuCI openwrt-19.07 branch git-20.247.75781-0d0ab01
Yeah, in the video I am using an x86 computer running Openwrt that why it is faster. For a router that time is normal.
em làm như anh mà không được, huhu
um overly complicated.. . openwrt has a GUI built in with a SOFTWARE GUI installer and OPENVPN iS GUI!!
is my question too tough?
nothing workk by his instraction no such directory all the time
Hello, this instruction is from openwrt.org. Which directory you are talking about? or at what timestamp of the video you have this problem?
i tried this but how can I create my own domain?Because I followed everything but it didnt work.......How to create a domain?can I just use my public ip address?i do have a free noip ddns domain but is there any additional command because that domain need a user and password to access...or can I just used that no ip domain using the last line OVPN_SERV="example.ddns.net"
i cant make it to work, i have mwan3 installed, 223.130.20.1 is my LAN IP adress/VPN RoutErs IP address, and my noip domain is cybermind2.ddns.net....please provide me a detailed fix.