OpenWRT - Configure OpenVPN Client

[@DavidDavisL]

Still a helpful walkthrough after 4 years, thank you!

[@mtolm]

Thanks man, a moment with setting the new interface tun0 with setting to wan and to unmanaged helps to solve an issue and now it works fine! Thank you

[@bkchris93]

you are a legend thank you!

[@sdtaheri]

Hey. Thanks for your great tutorials. I have a problem mixing this with mwan3 setup. I want all the clients connected to the router have their internet through openvpn. I would appreciate if you could help me with that.

[@clacks78]

Thankyou, great tutorial!

[@crosstheredlineagain]

Strange, i do not have the bottom two options "Templated based config" and "OVPN config file upload" Just a dropdown field with Add button

[@ΝικόλαοςΠαπαλέξης]

Hi,is there a video on how to set wan interface as default over vpn in pbr?

[@PT-xt6pv]

Could you please explain how can I quickly switch the VPN on/off when it is installed this way?

[@vanessav5115]

Thank you for video!

[@usetheheadphones]

Is there a solution for low internet speed?

[@khteoh2001]

7:05 Is the interface must always set to 'Ethernet Adapter "tun0"', regardless of whether the router is connected to the modem via wifi or cable ? Thank you.

[@VanTechCorner]

Yes, this is the tunnel interface (which only up when the VPN instace is running) and it should always be tun0 if there is only 1 VPN instace running.

[@vladislavzaikin9865]

very useful guide thanks broo!!!🙂🙂🙂🙂

[@VanTechCorner]

Happy to help!

[@amintajrishi]

how we can do a slective device routin in openwrt?! for example i dont want my ps4 (192.168.1.10) go through vpn and i want to go directly to wan

[@VanTechCorner]

I don't think you can do this. Either use another router/ switch for your PS4 or setup the OpenVPN client on your end devices instead of the router.

[@frigginjiggy]

You need this: docs.openwrt.melmac.net/vpn-policy-routing/

[@amintajrishi]

@@frigginjiggy yes , I Figured it out 👍🏻

[@frigginjiggy]

@@amintajrishi Glad you got it worked out. Did you check for DNS leaks? That's a big problem for both OpenWRT and DD-WRT when using OpenVPN.

[@amintajrishi]

@@frigginjiggy yep i Checked it for dnsleaks and its ok! Anyway im using shadowsocks since then in openwrt! Its much much faster than anykind of vpn !

[@chrisng5864]

Hi this does not seem to work for v21.02 for the tunneling part, there is an issue accessing the internet wirelessly but no issue with lan connection

[@chrisng5864]

also on the openvpn software, there is the error message of insufficient permissions to read UCI configurations

[@naeem6988]

Hello sir can I provide internet to client with vpn server like openvpn and wiregured plz tell me

[@nonec5246]

I loaded the vpn into openwrt, then I uploaded the script, added my further script for password, then it returned "Insufficient permissions to read UCI configuration" at the top of the page. So I'm dead in the water and I can't find a solution.

[@varunaeeriyaulla]

Can I add a VPN connection for a specific VLAN like guest network

[@gurupandit]

thanks i found solution from you

[@alimirolyaee7543]

excellent

[@Muriz26]

How do you get the certification on PFsense?

[@mng519]

I'm not able to add the new interface device. Says "Error: Network device is not present"

[@VanTechCorner]

Hi, may I know at what time in the video the error appear. You need to reboot the router after enable the OpenVPN configuration file (before create the interface tun0).

[@drastikzgaming3148]

Why my interface dont have option etherrnet adapter for ovpn please help me

[@VanTechCorner]

Hi, you need to first start the OVPN instance before the tun0 interface show up. If the OVPN instace is not running at all, it is something you need to troubleshoot.

[@marcinkw.858]

Hello, your tutorials are great! Can you please tell me whhat would happend if interface tun0 is down for any reason? Is connection to internet is open or not? I'd like to disable this connection if VPN is down.

[@adrien1076]

does the connection of the vpn apply to other devices as well using this method?

[@dice_]

Hi. Where did you get your .ovpn files? I have .ovpn files from ExpressVPN but when I try uploading that file to luci, it doesn’t reflect in the vpn list :/

[@VanTechCorner]

I build my own OpenVPN server and get the ovpn file. You can search for the tutorial on how to setup OpenVPN server (with OpenWRT or Ubuntu) on the channel as well. If the ovpn is not recognized by OpenVPN, maybe you can try to edit the sample configuration file and copy and paste your value to that file.

[@davidallen5783]

I have been watching many of your tutorials. You have been extremely helpful. I am wanting to set up my VPN where only certain IP addresses on my network go through the VPN but my gaming PCs and Consoles do not. Could you create a tutorial for that sort of situation?

[@VanTechCorner]

Hey, you can do this with mwan3 custom routing, or simply set the "allow routed IP" with Wireguard VPN. I will make a video that soon!

[@cescoraimi6496]

Sorry, can you tell me witch VPN provider u used? NordVPN, Cyberghost or what?? Thanks

[@VanTechCorner]

Hi, I didn't use a VPN provider. I purchase a VPS (Virtual Machine) from Vultr, Digital Ocean, etc and setup the VPN server there. With the access the the whole server, I can setup both OpenVPN, Wireguard VPN and other VPN protocol at the same time. This is also to ensure that no one can see my traffic, even the VPN provider. Currently I use Vultr, if you want to give a try, you can sign up using this link (affiliate ): www.vultr.com/?ref=6880855 Here is the tutorial video: kzbin.info/www/bejne/oqavg6N8gsl_qKcsi=HbMVOa9wGEJUfSbB

[@enricocirne]

Hei, great video, but where do i get the Vpn configuration file?

[@mdeeen]

from your own VPN provider

[@chuc2rk]

Bác ơi! Bác có xài openvn cùng mwan3 không vậy.

[@VanTechCorner]

Mình không dùng mwan3 và openvpn chung với nhau, vì khi quay openvpn bằng router throughput của nó thất thấp. nếu cộng thêm mwan nữa thì không biết nó tới đâu.

[@arashmahban4663]

Hi. How can add private ket password in gui? I can connect in command mode after enter private key password , user and password but when modem reboot must run command again.

[@muhammadfakhrullah8461]

cant help me? my problem "insufficient permissions to read UCI configuration" in edit openvpn and cant connect.

[@VanTechCorner]

Hi, in this case I would suggest that you try to edit the configuration file with CLI (command line interface) using nano/vi editor. Else, try winscp on Windows and edit the file with a GUI.

[@VADLIKE]

how to fix Insufficient permissions to read UCI configuration.

[@hiyoshi177]

Thanks man.

[@VanTechCorner]

No problem!

[@benedictcaparas5468]

hi thank you for this tutorial , my openwrt router is now connected to my vpn , my problem is how can i access my LAN network ex. PC , CCTV Device IP over OpenVPN connection.

[@VanTechCorner]

Hey, you need to configure site to site VPN. There is a guide on Openwrt document (with script).

[@_Sakai_Izumi]

Thank u very much bro

[@VanTechCorner]

You're welcome!

[@iamzul4145]

Nice tutorial and clean presentation. Hopefully you can help me in installing Openwrt in my Mi Router 4C to run Openvpn in my Mi Router 4C.

[@VanTechCorner]

Hi, I have answered your question on the group.

[@mdeeen]

Hi, this router, what's is the maximum speed with OpenVPN, because OpenVPN take much processing...

[@VanTechCorner]

Hi, this router is not good for OpenVPN. As I can remember, it is only 10 Mbps

[@VanTechCorner]

If you can, try Wireguard which has a better performance and uses less resouces.

[@flesz_]

I am using openwrt on a BT homehub router and speed test is maxing out the CPU. I think it's because I am using cipher AES-256. Do you know which cipher would be least cpu intensive?

[@diyer1190]

after upload file no need to fill in user and password？

[@VanTechCorner]

It depends whether your VPN provider require username and password or not. See this link to know where you can add the username & pass - openwrt.org/docs/guide-user/services/vpn/openvpn/client-luci

[@diyer1190]

@@VanTechCorner thanks good vids

[@diyer1190]

@@VanTechCorner Finally I upload .ovpn but it says"No page is registered at '/admin/vpn/openvpn/upload'. If this url belongs to an extension, make sure it is properly installed. If the extension was recently installed, try removing the /tmp/luci-indexcache file"

[@zandatsu07]

i don't have tun0 what should i do? i have eth0 wan etc...

[@VanTechCorner]

Do you mean during interface creation there is no tun0? If yes, it means your OpenVPN client was not properly setup or it is not running. What is the status of the instance?

[@zandatsu07]

@@VanTechCorner I fixed it,i didn't start OpenVPN that's why there is no tun0 appearing in my instance

[@VanTechCorner]

Well done!

[@Marsh187]

@@VanTechCorner I have the same problem and I can't fix it. How do i start OpenVPN manually?

[@gonzo1979tor]

at the stage of creating a new interface on the interface tab absent ehthernet adapter tun0, service openvpn working.

[@nemerdacillo7801]

Hi, I Followed everything and I can See that VPN is connected. But there still no internet when I browse.

[@VanTechCorner]

Did you set the tun0 to WAN zone?

[@nemerdacillo7801]

@@VanTechCorner Yes I Did. Can I have your Email so that I can send screenshots if it's ok. thanks!

[@nemerdacillo7801]

​@@VanTechCorner also base on the interface there is no Packets on RX of tun0

[@VanTechCorner]

If there is no RX, maybe your OpenVPN instace is not running. Can you provide the screenshot of the OpenVPN instace and your interface setting. You can upload the screenshot to pictr.com/upload and give me the link. I will check it.

[@krisztiansimon7030]

@@VanTechCorner Hello I tried this method but the problem is same. VPN is connected but no internet in the client. what was the solution?

[@Mj-vh3ih]

So if a have openwrt on my router and i buy a vpn will the vpn work automatically?

[@VanTechCorner]

Nope, you will need to upload the OpenVPN configuration to the router and configure OpenVPN there.

[@alexcool8980]

Thank you for your tutorial. Unfortunately I've faced with a problem related to *.ovpn file. When I go to OpenVpn page there is no field where I could upload my file -(. I use OpenWRT 17.01.7 release and openvpn-openssl 2.4.4-4 I tried to install openconnect client but it is not supported in my release -(

[@VanTechCorner]

Hi, maybe you are using the snapshot firmware? Try to update it to the latest version and try again. Else, post the error message on the FB group Van Tech Corner & Friends and we will try to solve it.

[@engmfikry]

hello my friend i follow steps in video and tun0 gives massage ethernet device is not present by the way i using openwrt-21.02.1 raspberry pi 2...I need your help thanks

[@chaysaccsauceda866]

can you please make a video on how to set up a veth-pair?

[@VanTechCorner]

Hi, could you provide more information? I din't get what "veth-pair" mean. Do you mean the virtual Ethernet inteface which are shown up during interface creation?

[@chaysaccsauceda866]

@@VanTechCorner forum.openwrt.org/t/sqm-flow-offloading-vlan-tagging-and-gaming/25113/9

[@VanTechCorner]

Sure, I will take a look on this. Btw, is this your topic or just a reference?

[@sajanlohana3848]

But dear I am using Mi gigabit router it has no openwrt (openvpn) it only supports l2pt and pptp server

[@VanTechCorner]

Hi, you can search on Google for "Your xiaomi model + openwrt" and most likely there will be a guide to install the OpenWRT firmware on the router. Once this is done, you can follow this video to configure OpenWRT. If you need to learn more about OpenWRT, here is my playlist which will help you get started. kzbin.info/aero/PL58__w3t_eTbcBQ9oJ8jXCxPtBiac59vC

[@carloscarrizales3077]

hello great tutorial, I have a network HDD with OpenWRT, it has only 1 NIC, i was able to install Open-VPN and confirm the connection, however I could not configure the firewall rules properly. Do you have any tips for this, or if its easier I am trying to route Transmission torrent through the VPN

[@HungBui-sq1hb]

Bạn có thể hướng dẫn chỉ chạy openvpn trên 1 wifi, các interface khác vẫn chạy bình thường.

[@antojoeis4142]

i'm new to OpenWRT .. i have small doubt about which is ur client and server device .. if router as server what is your end-device .. can u plz let me know the detail plz

[@VanTechCorner]

Hi, in this video the OpenVPN server is running OpenWRT as well. You can setup an OpenVPN server easily with Ubuntu or CentOS and there are a lot of script which can get this done in just few minutes. You can check out the video "Setup OpenVPN server" in my channel.

[@vnetpost]

thanks

[@manzeemamat145]

Why my vpn instances running but no hv tun0 in the interface?

[@jordanwiliams6056]

My openvpn has a username and password. Where do I add this too??

[@VanTechCorner]

Hi, did find a way to configure this?

[@frigginjiggy]

I can get the VPN working fine but there are DNS leaks. From what I've been reading, DNS leaks are a big issue with both OpenWRT and DD-WRT running OpenVPN.

[@VanTechCorner]

Hello, how do you know that there is DNS leaks? Did you follow the guide to perform the check at dnsleaktest.com?

[@frigginjiggy]

@@VanTechCorner yes, plus my VPN provider also has a page that will detect leaks. I got it worked out. On windows, any time you make a dns change, it's best to release and renew your leases. At the command prompt, issue two commands: ipconfig /release ipconfig /renew I forgot to do that. OOPS!

[@marcobarreto5429]

You might need to disable IPV6. Go to Network -> Interfaces -> TUN0 -> edit -> Advanced Settings (tab) , uncheck "Use built IPv6-management" Hope this helps.

[@elldee1297]

Hi! Did you check for DNS leaks? I get a new IP address but multiple DNS servers. I can't get down to just one from my VPN provider w/o modifying /etc/config/dhcp, as suggested on the OpenWRT forum. Perhaps something has changed in more recent versions of OpenWRT, but if you have a fix other than the mod I mentioned I'd appreciate reading about it. Thank you!

[@jithinsankar787]

which is your router??

[@VanTechCorner]

The D-Link DIR-842. kzbin.info/www/bejne/nIe1iJWmp6iNjZo

[@jithinsankar787]

@@VanTechCorner can you suggest a router with more flash memory and ram which supports openwrt...

[@VanTechCorner]

Can I knowyour budget and the country you are living

[@jithinsankar787]

@@VanTechCorner im from india...my budget is 5000INR which is about 70 dollar...

[@densk4969]

thank you

[@VanTechCorner]

You're welcome

[@asiatuning4251]

can u help me to setup openvpn on openWRT?

[@VanTechCorner]

Hi, the guide is here and you can follow it so setup OpenVPN with LuCI. Is there any problem with the setup?

[@asiatuning4251]

@@VanTechCorner no buddy, i already set up all the dependancies, however is does not work. I can grant you remote access to check my settings if u r willing to help. regards

[@VanTechCorner]

Can you post the detail of problem on the FB group Van Tech Corner and Friends, we can see how to solve it. I am not provide remote support.

[@AlexanderLindebring]

where do I put the username and password?

[@herospeedpk]

Do it work with nordvpn?

[@VanTechCorner]

Let's me see if I can find an account xD

[@herospeedpk]

@@VanTechCorner thanks

[@VanTechCorner]

Hey, I can't find an account to test but it should work. If you have any problem, just update and we will find a way to solve it.

[@herospeedpk]

@@VanTechCorner ok, thank u

[@muhamadmukhsin6200]

Bro can u configure sample account with upload username and pass. Thanks

[@VanTechCorner]

Hi, are you using ovpn from any provider? They should have their own instruction on that.

[@muhamadmukhsin6200]

@@VanTechCorner just type user and pass in the second text box? Or more step again?

[@VanTechCorner]

You just need to create a new profile, put in the server IP, username and password and see if it work. Else, check the log and see what is other parameters required by your provider.

[@muhamadmukhsin6200]

@@VanTechCorner ok sir, thanks. I am wait your content about installation shadowshock and shadowshocksR

[@filebomb]

tnx

[@zandatsu07]

Hello can i request something? can you do Wireguard Client config tutorial next like this? your tutorial helps me a lot

[@VanTechCorner]

Yes, soon there will be a Wireguard Client & Server tutorial. If you have any problem, I can assist you here (before the video is made).

[@zandatsu07]

@@VanTechCorner I'll wait for your tutorial it's ok for me i can wait

[@zandatsu07]

@@VanTechCorner i want to install nft-qos in openwrt but system not letting me install the package it appreas kernel not supporting it,if i recall it shows "cannot satisfy dependecies blablablabla" what should i do? should i do --force-depends

[@VanTechCorner]

You need to update your openwrt software to a new version.

[@paulchristine136]

Very clear instruction! Thanks! My .ovpn file requires me to input username and password mannually. How should I do this in OpenWrt?

[@VanTechCorner]

Hey, you can do this by click "Edit" on your OVPN instance. Then, fill in the username & password under "auth-user-pass" section (the 2nd box). After that, your auth file will be saved with a random name in /etc/openvpn. Edit your OVPN file (1st box) with the full path to the location of your auth file. For example "auth-user-pass /etc/openvpn/NLMiramUDP443E3.auth". Example: openwrt.org/_media/docs/guide-user/services/vpn/openvpn/openwrt_openvpn_client_2_upload_openvpn_config_add_user_pass.png

[@simonegiacomelli1065]

@@VanTechCorner hi van , sorry, which way can i insert the before said username and password ...don't know how to insert the full path to the location , not even how to see it..can it be done via luci? thanks

[@trihar1000]

Thanks bro, You doing its good keep going on. Next shadowsock and shadowsockR

[@VanTechCorner]

Sure. I will add it to my list and give it a hit. Thanks for the feedback bro!

[@knzamy]

@@VanTechCorner please make ssr video bro..

[@PROFITSIGN]

@@VanTechCorner Hello sir please make a openwrt shadowsocks configuration video please.

[@ombie1985]

v2ray please

[@VanTechCorner]

Hi, I am not sure if I can understand v2ray to make a video about that. Besides OpenVPN, there is a tutorial for site to site vpn with Wireguard, not sure if it could help.