R7000 as VPN router behind Sky router: suitability?

Post new topic   Reply to topic    DD-WRT Forum Index -> Broadcom SoC based Hardware
Author Message
Dublin-bay-prawn
DD-WRT Novice


Joined: 21 Dec 2020
Posts: 6

PostPosted: Mon Dec 21, 2020 22:17    Post subject: R7000 as VPN router behind Sky router: suitability? Reply with quote
Since early 2016 I have had a Netgear R7000 AP1900 router running ExpressVPN with BT as ISP (I'm in the UK). All worked well.

A couple of months ago I transferred to Sky with a Sky Q box and router.

The Sky router will not install a VPN so I am considering utilising the spare R7000 with dd-wrt and ExpressVPN running behind the Sky router.

I have read quite a few posts here and am gaining in confidence to give it a go, but am just needing confirmation that I an not heading up a blind alley.

My 2016 R7000 is running Netgear f/w V1.0.11.110_10.2.100

1) A recent post is https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=325487&postdays=0&postorder=asc&highlight=r7000&start=15 where TectonicPlates suggested a route for two different R7000 firmware versions.

Should I flash with a 2017 firmware and upgrade, or flash a 2020 version?


2) Will the R7000/dd-wrt router operate as a VPN router behind the Sky router (I believe it should be on its own subnet to be independant from the Sky router)?


3) I would plan to install ExpressVPN as I have a subscription. Is this a reasonably good option?


4) Anything else that I should do/take into account?


thanks
Sponsor
egc
DD-WRT Guru


Joined: 18 Mar 2014
Posts: 12917
Location: Netherlands

PostPosted: Tue Dec 22, 2020 9:05    Post subject: Reply with quote
Newer builds of stock will not let you down grade, so follow the instructions in the thread you mentioned.

It is indeed easiest to set the R7000 on its own subnet i.e. connecting the WAN to the ISP router.

Running a VPN client on a WAP is not impossible but takes a lot of tweaking of clients

ExpressVPN is fine

_________________
Routers:Netgear R7000, R6400v1, R6400v2, EA6900 (XvortexCFE), E2000, E1200v1, WRT54GS v1.
Install guide R6400v2, R6700v3,XR300:https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=316399
Install guide R7800/XR500: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=320614
Forum Guide Lines (important read):https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=324087
Dublin-bay-prawn
DD-WRT Novice


Joined: 21 Dec 2020
Posts: 6

PostPosted: Tue Dec 22, 2020 16:25    Post subject: Reply with quote
Quote:
so follow the instructions in the thread you mentioned


OK, I have installed a 12-18-20 v3.0 r45036 dd-wrt firmware on the R7000. It seemed quite simple and it looks OK, I must have been scared half to death after reading the Peacock thread! Now next stage....

My Sky ER115 router is on 192.168.0.1 with wireless on ch6 for 2.4GHz and ch 36 for 5GHz.

As in the first thread, I am looking to connect my computers to the R7000 which has ExpressVPN installed and to connect to the internet through the Sky router

So, are the next stages

1)Get a PC connecting to the R7000 and connected to the internet through the Sky router,
2)Optimise settings for performance, security etc,
3)install ExpressVPN?

As I would be guessing otherwise, could someone add some detail to the above.
egc
DD-WRT Guru


Joined: 18 Mar 2014
Posts: 12917
Location: Netherlands

PostPosted: Tue Dec 22, 2020 16:39    Post subject: Reply with quote
After upgrading to DDWRT reset the router to defaults (very important)

From the CLI (command line interface) like putty or telnet:
Code:
nvram erase && reboot


In my signature at the bottom is an install guide for the R6400v2 although this is a different router a lot of things (like resetting to defaults) are the same.

After reset just connect WAN cable from the R7000 to LAN of your ISP router and it should work out of the box, of course you need to set Wireless etc.

_________________
Routers:Netgear R7000, R6400v1, R6400v2, EA6900 (XvortexCFE), E2000, E1200v1, WRT54GS v1.
Install guide R6400v2, R6700v3,XR300:https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=316399
Install guide R7800/XR500: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=320614
Forum Guide Lines (important read):https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=324087
Dublin-bay-prawn
DD-WRT Novice


Joined: 21 Dec 2020
Posts: 6

PostPosted: Tue Dec 22, 2020 17:59    Post subject: Reply with quote
Great egc thanks. I shall continue with it this evening...
Dublin-bay-prawn
DD-WRT Novice


Joined: 21 Dec 2020
Posts: 6

PostPosted: Mon Dec 28, 2020 11:25    Post subject: Reply with quote
Layout recap:

Primary Router: SkyER115 Superfast broadband-60Mb/s IP 192.168.0.1 Wireless 2.4GHz ch6, 5GHz ch36.

VPN Router: Netgear R7000 DD-WRT v3.0-r45036 12/18/20. IP 192.168.1.1 Wireless 2.4 ch11 NG-mixed, 5GHz ch auto AC/N-mixed.



The R7000 is all setup and running as per the above. Wired and wifi clients can login.

egc
Quote:
From the CLI (command line interface) like putty or telnet:
Code:
nvram erase && reboot


Couldn't manage from CLI (my limited ability) but did the "press reset button"

DD-WRT is as installed but for the above and DNS 1.1.1.1/1.0.0.1, and the installation of ExpressVPN/OpenVPN as per their vid. Speed unexpectedley dropped from high 60's to 35MB/s

1) Are above settings OK?

2) Is "Connection Type = Automatic Configuration - DHCP" the best setting for a VPN router to operate as intended? (I've seen others use PPTP/L2TP)
egc
DD-WRT Guru


Joined: 18 Mar 2014
Posts: 12917
Location: Netherlands

PostPosted: Mon Dec 28, 2020 16:11    Post subject: Reply with quote
35 Mb/s for an R7000 is unfortunately a normal speed for OpenVPN.
My R7800 which has a much faster CPU does about 85 Mb/s

You might look into using WireGuard which is a new VPN and is about 2-3 times faster.

Connection type automatic is the best way in your case to connect.

_________________
Routers:Netgear R7000, R6400v1, R6400v2, EA6900 (XvortexCFE), E2000, E1200v1, WRT54GS v1.
Install guide R6400v2, R6700v3,XR300:https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=316399
Install guide R7800/XR500: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=320614
Forum Guide Lines (important read):https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=324087


Last edited by egc on Tue Dec 29, 2020 11:44; edited 1 time in total
Dublin-bay-prawn
DD-WRT Novice


Joined: 21 Dec 2020
Posts: 6

PostPosted: Tue Dec 29, 2020 11:30    Post subject: Reply with quote
Quote:
You look into using WireGuard which is a new VPN and is about 2-3 times faster.


But it looks as though ExpressVPN is not supported on Wireguard. Crying or Very sad
blkt
DD-WRT Guru


Joined: 20 Jan 2019
Posts: 5700

PostPosted: Tue Dec 29, 2020 11:37    Post subject: Reply with quote
ExpressVPN refuses to implement and support WireGuard, so may want to consider the options.

Last edited by blkt on Tue Dec 29, 2020 11:42; edited 1 time in total
Dublin-bay-prawn
DD-WRT Novice


Joined: 21 Dec 2020
Posts: 6

PostPosted: Tue Dec 29, 2020 11:41    Post subject: Reply with quote
Quote:
You meant to say ExpressVPN refuses to implement and support WireGuard.


Oooh! Do they, that's naughty, they say such nice things about it as well!


Last edited by Dublin-bay-prawn on Tue Dec 29, 2020 11:42; edited 1 time in total
blkt
DD-WRT Guru


Joined: 20 Jan 2019
Posts: 5700

PostPosted: Tue Dec 29, 2020 11:42    Post subject: Reply with quote
Yes, it's as naughty as my post edit. See the alternatives such as Mullvad, for example.

This article did not age well. Security audit blah blah blah, that's all been done and history.

https://www.expressvpn.com/blog/expressvpn-wireguard-update/

https://duckduckgo.com/?q=expressvpn+lightway
Display posts from previous:    Page 1 of 1
Post new topic   Reply to topic    DD-WRT Forum Index -> Broadcom SoC based Hardware All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum