Thread: [Solution] OpenVPN on N900 using TUN with Tomato router (working config)
View Single Post
totalizator's Avatar
totalizator is offline totalizator
2012-02-16 , 13:17
Posts: 47 | Thanked: 118 times | Joined on Jan 2009 @ Krakow, POLAND
#1
This is just for reference as there is many threads on this topic but I had barely any success in configuring OpenVPN on N900 after studying them.

My original approach was to be able to surf the web via VPN server and to have access to my LAN computers at the same time. I've tried using TAP method first (to get a dynamic IP from the server) but it ended with a total failure. Still I can't understand why it was not working on N900. I've tried everything (working configs from other devices, new configs...). No go. Then as a last resort I've decided to try with TUN metod and surprisingly, it works flawlessly now - everything is routed via the VPN server and I can access the LAN devices (despite having different IP class number (B 10.x.x.x when the network is C 192.x.x.x). It works with both - WLAN and GPRS connection.

Here is my config (using previously generated static key):

Code:
remote yourserver.com 1194
ifconfig 10.8.0.2 10.8.0.1
dev tun
secret /opt/secret.key
proto udp
comp-lzo
redirect-gateway def1
persist-tun
persist-key
# Allow scripts to be run
script-security 2
ipchange /etc/openvpn/add_default_route.sh
verb 3
keepalive 10 120
To have it working with GPRS the /etc/openvpn/add_default_route.sh has to contain (first part as a single line, second part - already posted by user alphazo):

Code:
#!/bin/sh

#if gprs0 up and no flagged default route ; then create one
#use with ipchange /etc/openvpn/add_default_route.sh in openvpn conf
#after setting script-security 2
gprsroute=`route | grep gprs` ; defroute=`route | grep default | grep G` ; if [ -n "$gprsroute" -a -z "$defroute" ]; then nexthop=`ifconfig gprs0 | grep "inet addr" | cut -d : -f 3 | cut -d " " -f 1` ; route add -host $nexthop dev gprs0 ; route add default gw $nexthop ; fi
if [ -f /var/run/resolv.conf.gprs ];
then
  echo "nameserver 192.168.1.1" >> /var/run/resolv.conf.gprs
fi
if [ -f /var/run/resolv.conf.wlan0 ];
then
  echo "nameserver 192.168.1.1" >> /var/run/resolv.conf.wlan0
fi
The server is Linksys WRT-54GL with Tomato firmware with OpenVPN GUI configuration (it's straightforward). The additional options are (plus "Respond to DNS" ticked):

Code:
push "redirect-gateway def1"
script-security 2
verb 2
ping-timer-rem
I hope it will help someone.
 

The Following 4 Users Say Thank You to totalizator For This Useful Post: