Repeater bridge setup now need openvpn working

Post new topic   Reply to topic    DD-WRT Forum Forum Index -> Advanced Networking
Goto page 1, 2, 3, 4  Next
Author Message
loady
DD-WRT Novice


Joined: 22 Feb 2012
Posts: 39

PostPosted: Mon Oct 07, 2019 20:39    Post subject: Repeater bridge setup now need openvpn working Reply with quote
I setup DD-wrt on my Asus N66U as it supports openvpn in repeater mode whereas formerly I was using Asus Merlin and that doesn't. Everything is working fine and I am getting excellent speeds where before I couldn't pickup WiFi from the main router upstairs.

My iso is talktalk UK and I have their WiFi hub, I have been told I can't access Thier router remotely and I am wondering if this is going to stop the use of openvpn on the repeater or will openvpn manage to get me in by someway bypassing the need to be able to access the router remotely ?. When I was using openvpn on Asus Merlin it let you export a .opvn file which I would add to my openvpn client on phone or computer and I could access my Lan and was able to initiate wol to turn on my server.

Any advice appreciated.
Sponsor
loady
DD-WRT Novice


Joined: 22 Feb 2012
Posts: 39

PostPosted: Tue Oct 08, 2019 6:56    Post subject: Reply with quote
reading up on this, seems very complicated to get it working, is there not an option to set a key and then export a .ovpn file to use on the pc client ?
egc
DD-WRT Guru


Joined: 18 Mar 2014
Posts: 3952
Location: Netherlands

PostPosted: Tue Oct 08, 2019 7:43    Post subject: Reply with quote
The setup is not complicated, the generating of the keys is somewhat complicated but that has nothing to do with DDWRT.

For an OpenVPN setup guide see my signature at the bottom of this post.

Be ware repeater bridge is a kind of a hack I can not guarantee it will work (although I think/hope it will work), repeater (where the router has its own subnet) should work better.

_________________
Routers:Netgear R7800, Netgear R6400v1, Netgear R6400v2, Linksys EA6900 (XvortexCFE), Linksys E2000 (converted WRT320N), WRT54GS v1.
Install guide Linksys EA6900: http://www.dd-wrt.com/phpBB2/viewtopic.php?t=291230
OpenVPN Policy Based Routing guide: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=321686
Install guide R6400v2:http://forum.dd-wrt.com/phpBB2/viewtopic.php?t=316399
OpenVPN Server Setup:https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=318795
Install guide R7800: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=320614
loady
DD-WRT Novice


Joined: 22 Feb 2012
Posts: 39

PostPosted: Tue Oct 08, 2019 8:16    Post subject: Reply with quote
egc wrote:
The setup is not complicated, the generating of the keys is somewhat complicated but that has nothing to do with DDWRT.

For an OpenVPN setup guide see my signature at the bottom of this post.

Be ware repeater bridge is a kind of a hack I can not guarantee it will work (although I think/hope it will work), repeater (where the router has its own subnet) should work better.


I understood that repeater mode only extends the WiFi and not the Lan ports, whereas repeater bridge does both ?
egc
DD-WRT Guru


Joined: 18 Mar 2014
Posts: 3952
Location: Netherlands

PostPosted: Tue Oct 08, 2019 12:11    Post subject: Reply with quote
loady wrote:
egc wrote:
The setup is not complicated, the generating of the keys is somewhat complicated but that has nothing to do with DDWRT.

For an OpenVPN setup guide see my signature at the bottom of this post.

Beware repeater bridge is a kind of a hack I can not guarantee it will work (although I think/hope it will work), repeater (where the router has its own subnet) should work better.


I understood that repeater mode only extends the WiFi and not the Lan ports, whereas repeater bridge does both ?


No, repeater just uses your radio as its WAN interface so that you will have your own subnet and Repeater-Bridge extends your network in the sense that you have one subnet see: https://wiki.dd-wrt.com/wiki/index.php/Client_Bridged

Much of the confusion stems from the fact that Atheros based routers do not have repeater options (they use client options and if necessary just add a VAP)

So bridged means on the same subnet and is not the best option, but if you need one subnet i.e. for windows discovery or streaming then it is your only option.

I myself would pull a cable and if that is not feasible use powerline adapters to connect and then setup as this:
https://wiki.dd-wrt.com/wiki/index.php/Wireless_access_point

But of course that is the more costly option Sad

_________________
Routers:Netgear R7800, Netgear R6400v1, Netgear R6400v2, Linksys EA6900 (XvortexCFE), Linksys E2000 (converted WRT320N), WRT54GS v1.
Install guide Linksys EA6900: http://www.dd-wrt.com/phpBB2/viewtopic.php?t=291230
OpenVPN Policy Based Routing guide: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=321686
Install guide R6400v2:http://forum.dd-wrt.com/phpBB2/viewtopic.php?t=316399
OpenVPN Server Setup:https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=318795
Install guide R7800: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=320614
loady
DD-WRT Novice


Joined: 22 Feb 2012
Posts: 39

PostPosted: Tue Oct 08, 2019 18:02    Post subject: Reply with quote
egc wrote:
loady wrote:
egc wrote:
The setup is not complicated, the generating of the keys is somewhat complicated but that has nothing to do with DDWRT.

For an OpenVPN setup guide see my signature at the bottom of this post.

Beware repeater bridge is a kind of a hack I can not guarantee it will work (although I think/hope it will work), repeater (where the router has its own subnet) should work better.


I understood that repeater mode only extends the WiFi and not the Lan ports, whereas repeater bridge does both ?


No, repeater just uses your radio as its WAN interface so that you will have your own subnet and Repeater-Bridge extends your network in the sense that you have one subnet see: https://wiki.dd-wrt.com/wiki/index.php/Client_Bridged

Much of the confusion stems from the fact that Atheros based routers do not have repeater options (they use client options and if necessary just add a VAP)

So bridged means on the same subnet and is not the best option, but if you need one subnet i.e. for windows discovery or streaming then it is your only option.

I myself would pull a cable and if that is not feasible use powerline adapters to connect and then setup as this:
https://wiki.dd-wrt.com/wiki/index.php/Wireless_access_point

But of course that is the more costly option Sad


trust me, i am a cable man !, keep eyeing up my walls and skirting.

I thought of the powerline adaptors, for some reason i am skeptical of them and also i would be plugging it into a 4 gang strip, would that cause issues, currently i am getting really good speeds with the repeater bridge, if i got a cable up here it would negate the need for a bridge and i could revert the repeater back to a router and put merlin back on and have easy access and setup to openVPN again..the way merlin does openVPN is amazing, download a .opvn from the router and apply it to the client on your pc or whatever...why doesnt ddwrt implement this ?

Also i am reading your guide and i noted this..
Quote:
These notes are intended to setup a tunnelled (tun) OpenVPN server on DDWRT router, where the DDWRT router is in default gateway mode and attached to the internet.
For a discussion of bridged (tap) versus routed (tun) see: https://community.openvpn.net/openvpn/wiki/BridgingAndRouting.

My router is not in default gateway mode correct ? it is setup as repeater bridge ? so i should follow the afterlink ?

This really isnt my field, i dont have a lot of understanding of what i am doing when trying to follow these guides and i appreciate your help very much.
egc
DD-WRT Guru


Joined: 18 Mar 2014
Posts: 3952
Location: Netherlands

PostPosted: Tue Oct 08, 2019 18:30    Post subject: Reply with quote
DDWRT is chock-full of all kinds of stuff, and also needs to accomodate routers which are not so powerfull (nvram wise)
So the devs can not squeeze everything we want in the software.
That is why you are now using DDWRT and not other software.
Besides how dificult is it to copy an ovnp config file and the keys/certificates to your phone Smile

You can (probably) setup a tun (routed) setup as described in the guide for a repeater bridge.

You probably need another firewall rule as described in the section:
Quote:
OpenVPN server on a Wireless Access Point (WAP)


I have done a lot of different setups but never on a repeater bridge so I can not guarantee success (well thinking about it, I never can LoL ).

_________________
Routers:Netgear R7800, Netgear R6400v1, Netgear R6400v2, Linksys EA6900 (XvortexCFE), Linksys E2000 (converted WRT320N), WRT54GS v1.
Install guide Linksys EA6900: http://www.dd-wrt.com/phpBB2/viewtopic.php?t=291230
OpenVPN Policy Based Routing guide: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=321686
Install guide R6400v2:http://forum.dd-wrt.com/phpBB2/viewtopic.php?t=316399
OpenVPN Server Setup:https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=318795
Install guide R7800: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=320614
loady
DD-WRT Novice


Joined: 22 Feb 2012
Posts: 39

PostPosted: Tue Oct 08, 2019 18:59    Post subject: Reply with quote
I disagree, coming from an inexperienced person in this field, seems to be a lot of jargon and caveats, pitfalls, if, buts, where and whys reading through that guide, whereas with merlin, i could export the .opvn file and i dont need to know anything, it just worked everytime flawlessly..

I am now looking at these power lines, in your opinion, if i got the powerlines, could i revert the router back to AP mode and have it linked by cable and be able to get the wifi to the top of the house and also use the lan ports on the router ?..and be able to put merlin back on to setup openvpn the really easy way.
egc
DD-WRT Guru


Joined: 18 Mar 2014
Posts: 3952
Location: Netherlands

PostPosted: Tue Oct 08, 2019 19:42    Post subject: Reply with quote
Yes you can
_________________
Routers:Netgear R7800, Netgear R6400v1, Netgear R6400v2, Linksys EA6900 (XvortexCFE), Linksys E2000 (converted WRT320N), WRT54GS v1.
Install guide Linksys EA6900: http://www.dd-wrt.com/phpBB2/viewtopic.php?t=291230
OpenVPN Policy Based Routing guide: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=321686
Install guide R6400v2:http://forum.dd-wrt.com/phpBB2/viewtopic.php?t=316399
OpenVPN Server Setup:https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=318795
Install guide R7800: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=320614
loady
DD-WRT Novice


Joined: 22 Feb 2012
Posts: 39

PostPosted: Tue Oct 08, 2019 21:45    Post subject: Reply with quote
egc wrote:
Yes you can


im going ahead with the guide just so i know. Going good so far (i think), bit stuck here..

Quote:
Step- 8a Setting up the Firewall
A lot of guides have redundant firewall rules, in case of firewall rules less is more.
Actually you do not need any rules to make a connection, but if you want to have an outside/internet connection for your client when "Redirect Default Gateway" is enabled then you have to add the rule described below.



This certificate is for my use and i want to be able to access my network remotley, given my setup, ddwrt repeater bridge to isp router, how do i know if i have redirect default gateway enabled, im assuming i do.
egc
DD-WRT Guru


Joined: 18 Mar 2014
Posts: 3952
Location: Netherlands

PostPosted: Wed Oct 09, 2019 7:42    Post subject: Reply with quote
On a repeater bridge you do not have a WAN (because it is a bridge)

So you probably need this firewall rule only (described in the section I pointed to a few posts back):
Code:
iptables -t nat -I POSTROUTING -o br0 -j SNAT --to $(nvram get lan_ipaddr)

_________________
Routers:Netgear R7800, Netgear R6400v1, Netgear R6400v2, Linksys EA6900 (XvortexCFE), Linksys E2000 (converted WRT320N), WRT54GS v1.
Install guide Linksys EA6900: http://www.dd-wrt.com/phpBB2/viewtopic.php?t=291230
OpenVPN Policy Based Routing guide: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=321686
Install guide R6400v2:http://forum.dd-wrt.com/phpBB2/viewtopic.php?t=316399
OpenVPN Server Setup:https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=318795
Install guide R7800: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=320614
loady
DD-WRT Novice


Joined: 22 Feb 2012
Posts: 39

PostPosted: Wed Oct 09, 2019 14:22    Post subject: Reply with quote
egc wrote:
On a repeater bridge you do not have a WAN (because it is a bridge)

So you probably need this firewall rule only (described in the section I pointed to a few posts back):
Code:
iptables -t nat -I POSTROUTING -o br0 -j SNAT --to $(nvram get lan_ipaddr)


Is that in addition to or instead of this...

Quote:
iptables -t nat -A POSTROUTING -o $(nvram get wan_ifname) -j MASQUERADE


as per your guide.
egc
DD-WRT Guru


Joined: 18 Mar 2014
Posts: 3952
Location: Netherlands

PostPosted: Wed Oct 09, 2019 14:29    Post subject: Reply with quote
instead Smile
_________________
Routers:Netgear R7800, Netgear R6400v1, Netgear R6400v2, Linksys EA6900 (XvortexCFE), Linksys E2000 (converted WRT320N), WRT54GS v1.
Install guide Linksys EA6900: http://www.dd-wrt.com/phpBB2/viewtopic.php?t=291230
OpenVPN Policy Based Routing guide: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=321686
Install guide R6400v2:http://forum.dd-wrt.com/phpBB2/viewtopic.php?t=316399
OpenVPN Server Setup:https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=318795
Install guide R7800: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=320614
loady
DD-WRT Novice


Joined: 22 Feb 2012
Posts: 39

PostPosted: Wed Oct 09, 2019 16:05    Post subject: Reply with quote
egc wrote:
instead Smile


Does that also mean I do not need to read the advanced section on page 15 now Rolling Eyes .... I'm nearly there, your guide has been very smooth thus far
egc
DD-WRT Guru


Joined: 18 Mar 2014
Posts: 3952
Location: Netherlands

PostPosted: Wed Oct 09, 2019 16:46    Post subject: Reply with quote
loady wrote:
egc wrote:
instead Smile


Does that also mean I do not need to read the advanced section on page 15 now Rolling Eyes .... I'm nearly there, your guide has been very smooth thus far


Lazy eh Wink

But indeed you do not have to read it Smile

Be sure to enable Redirect default Gateway

_________________
Routers:Netgear R7800, Netgear R6400v1, Netgear R6400v2, Linksys EA6900 (XvortexCFE), Linksys E2000 (converted WRT320N), WRT54GS v1.
Install guide Linksys EA6900: http://www.dd-wrt.com/phpBB2/viewtopic.php?t=291230
OpenVPN Policy Based Routing guide: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=321686
Install guide R6400v2:http://forum.dd-wrt.com/phpBB2/viewtopic.php?t=316399
OpenVPN Server Setup:https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=318795
Install guide R7800: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=320614
Goto page 1, 2, 3, 4  Next Display posts from previous:    Page 1 of 4
Post new topic   Reply to topic    DD-WRT Forum Forum Index -> Advanced Networking All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You cannot download files in this forum