Seitenhistorie

...

1. Log on to the server side router (192.168.22.1)
2. Select VPN from the left-hand menu and click on VPN Server tab and click on OpenVPN switch
   
   You can setup two VPN server configuration. We will now setup the Server 1 configuration
3. Flip Enable OpenVPN Server switch to ON position (will change to green)
   You are now in General settings section.
   
4. Tick the LAN only radio button
5. Add some user/password in the table below by entering username and password into text fields and click on the plus button
   
6. Then hit Apply, this will take some time
7. Select Advanced Settings option in VPN Details dropdown box
   
8. Set following parameters to:
   • Interface Type: TUN (routed networks)
   • Protocol: TCP (do not try UDP, will not work afterwards wit site2site modifications!)
   • Username/Password Authentication: Yes (for now, we will use simple authentication, reconfiguration for use of cert logins will be discussed in another article)
   • VPN Subnet/Netmask: is irrelevant, leave the default one (except when you're configuring more OpenVPN servers and/or clients, ensure each has it's own IP range!)
   • Advertise DNS to clients: No
   • Compression: Disable (enabling has for sure impact to router utilization and transfer speed – not tested yet)
9. At Manage Client-Specific Options select Yes – you will get additional input fields
   
10. Select Yes at the Allow Client <-> Client option
11. In the Custom Configuration enter following recommended parameter

    reneg-sec 432000

12. Hit the Apply button – will take some time.
    If everything is fine (no fatalities), you should get the General VPN Details page and the Enable OpenVPN Server should be in ON position and green.
    

13. Now, you have some new buttons available, hit the first Export button (Export OpenVPN configuration file) – one file named “client1.ovpn” will be downloaded

14. Open the file in text editor and check the first lines: for tun, tcp-client options and the correct DDNS name of the server-side router

    client
    dev tun
    proto tcp-client
    remote myprimarysite.asuscomm.com 1194

Configure client side router

1. Log on to the client-side router (192.168.33.1)
2. Select VPN from the left-hand menu and click on VPN Client tab and click on OpenVPN switch
   Image Added
3. Click on Choose File button on Import .ovpn file option, select the previously downloaded

...

1. “client1.

...

1. ovpn” file and hit Upload

...

2. Set Automatic start at boot time to Yes
3. Check the lines Interface Type, Protocol and Sever Address for correct values
   Image Added
4. Ensure the Username/Password Authentication is Yes
5. Enter the username and password set on the server-side router
6. Scroll down to Advanced Settings
   Image Added
7. Check that Verify Server certificate is set to No
8. The directives in Custom Configuration are imported from

...

1. “client1.

...

1. ovpn” file – don’t touch them
2. Hit Apply button – takes again some time
3. Flip the Service state switch to

...

1. ON If anything is fine (no fatalities), the Service state switch should be green with yellow Connected message

...

1. 
   Image Added

At this moment any network device should be able to ping/connect to any network device on the server-side network.
The basic setup for client2network setup or “dial-in” setup if finished, let’s go one step beyond and configure the “return direction”
Modify the connection to site2site setup
Configure server side router
Log on to the server-side router (192.168.22.1)
Select Administration from the left-hand menu and click on System tab
Enable the SSH access as shown:

...