[icq78354419]

I’m convinced to setup a vpn server in my home with openVPN built into my Linksys WRT54GL router with dd-wrt v24-sp2 firmware

I use BSNL’s Dataone DSL with dynamic IP.
Their router (RTR1) terminates the DSL line and WRT54GL (RTR2) is connected to the DSL router. DHCP is off on RTR1 and no one will connect to it except RTR2
I got DDNS updater in RTR2 to update dynamic IP to resolve the host name
I got 3 options here

Setup-1: Bridged
[list=]RTR1 is bridged and its LAN is fed to RTR2’s WAN. RTR2 dials internet through PPPoE and its WAN is picking up the public IP
RTR2 is set in gateway mode and DHCP is active on this
RTR2 LAN IP set to 192.168.54.1
RTR2 LAN IP is set as DMZ in RTR2 so that all the packets from RTR2 WAN will flow to RTR2 LAN[/list]

Setup-2: Routed
[list=]RTR1 connects to ISP through PPPoE and its LAN is fed to RTR2’s WAN
RTR1 LAN IP is 192.168.1.1
RTR2 WAN is set to static IP 192.168.1.2
RTR2 WAN IP set as DMZ in RTR1 so all the traffic is routed to RTR2
RTR2 is set in gateway mode and DHCP is active on this
RTR2 LAN IP set to 192.168.54.1
RTR2 LAN IP is set as DMZ in RTR2 so that all the packets from WAN will flow to LAN within RTR2[/list]

Setup-3: Switched
[list=]RTR1 connects to ISP through PPPoE and its LAN is fed to RTR2’s LAN
RTR1 LAN IP is 192.168.1.1
RTR2 WAN is disabled
RTR2 LAN IP set to 192.168.1.2
RTR2 is set in gateway mode and DHCP is active on this
RTR2 LAN IP set as DMZ in RTR1 so all the traffic is routed to RTR2
NAT or DMZ not specified in RTR2 coz WAN is disabled[/list]


I’ve enabled the VPN server in RTR2 as explained at
http://www.dd-wrt.com/wiki/index.php/VPN_%28the_easy_way%29_v24%2B

Copy pasted the ca.crt, server.crt, server.key and dh1024.pem and created the configuration parameters in RTR2 VPN configuration page
Added necessary iptables commands to firewall
Created the client certificates

But not getting the connection from client to server in any of the above 3 setups and I’m unable to find the problem

I’ve put off the SPI firewall in RTR2 and allowed UDP 1194 through windows firewall on client machines

I am able to reach RTR2 from outside LAN (using laptop and internet from my phone). SSH on port 22 of RTR2 is working. Why not port 1194?

Is port 1194 blocked on BSNL dataone? Should I switch to some other port like 443?
How to check if 1194 is blocked by my ISP? I dont know using a port scanner

VPN status is showing as Connected and Success on RTR2 status page. It is taking IP from the VPN subnet (192.168.66.1) in my case


Getting the following error when I try to connect from client outside LAN
(Error Msg-1)

[ndewan]

Rajesh,

Follow the direcions on this link.

http://www.serverwatch.com/tutorials/article.php/3892906/Setting-Up-OpenVPN-on-a-DD-WRT-Router-Part-1.htm

The steps outlined here work very well. Depending on the work that you have done, you 'might' have to reset to default settings and start afresh.

Starting with a clean slate would be my recommendation.

On the second page of the article above, there is a point (while setting up the firewall scripts and startup commands) where the code and the instructions are blended together. Watch out for that section.

If you go through this process, you will have a BRIDGED setup. Setting up a ROUTED configuration can be a little more challenging. I would suggest getting a BRIDGED config going first and then 'graduating' to a ROUTED config.

Keep us posted with the progress.