Hey. Thanks for your great tutorials. I have a problem mixing this with mwan3 setup. I want all the clients connected to the router have their internet through openvpn. I would appreciate if you could help me with that.
I have been watching many of your tutorials. You have been extremely helpful. I am wanting to set up my VPN where only certain IP addresses on my network go through the VPN but my gaming PCs and Consoles do not. Could you create a tutorial for that sort of situation?
I loaded the vpn into openwrt, then I uploaded the script, added my further script for password, then it returned "Insufficient permissions to read UCI configuration" at the top of the page. So I'm dead in the water and I can't find a solution.
Hello, your tutorials are great! Can you please tell me whhat would happend if interface tun0 is down for any reason? Is connection to internet is open or not? I'd like to disable this connection if VPN is down.
I am using openwrt on a BT homehub router and speed test is maxing out the CPU. I think it's because I am using cipher AES-256. Do you know which cipher would be least cpu intensive?
Hi. Where did you get your .ovpn files? I have .ovpn files from ExpressVPN but when I try uploading that file to luci, it doesn’t reflect in the vpn list :/
I build my own OpenVPN server and get the ovpn file. You can search for the tutorial on how to setup OpenVPN server (with OpenWRT or Ubuntu) on the channel as well. If the ovpn is not recognized by OpenVPN, maybe you can try to edit the sample configuration file and copy and paste your value to that file.
Hi, I didn't use a VPN provider. I purchase a VPS (Virtual Machine) from Vultr, Digital Ocean, etc and setup the VPN server there. With the access the the whole server, I can setup both OpenVPN, Wireguard VPN and other VPN protocol at the same time. This is also to ensure that no one can see my traffic, even the VPN provider. Currently I use Vultr, if you want to give a try, you can sign up using this link (affiliate ): www.vultr.com/?ref=6880855 Here is the tutorial video: ruclips.net/video/luLRpFMdLrE/видео.htmlsi=HbMVOa9wGEJUfSbB
Hi. How can add private ket password in gui? I can connect in command mode after enter private key password , user and password but when modem reboot must run command again.
hello great tutorial, I have a network HDD with OpenWRT, it has only 1 NIC, i was able to install Open-VPN and confirm the connection, however I could not configure the firewall rules properly. Do you have any tips for this, or if its easier I am trying to route Transmission torrent through the VPN
7:05 Is the interface must always set to 'Ethernet Adapter "tun0"', regardless of whether the router is connected to the modem via wifi or cable ? Thank you.
Hi, may I know at what time in the video the error appear. You need to reboot the router after enable the OpenVPN configuration file (before create the interface tun0).
hi thank you for this tutorial , my openwrt router is now connected to my vpn , my problem is how can i access my LAN network ex. PC , CCTV Device IP over OpenVPN connection.
Hi! Did you check for DNS leaks? I get a new IP address but multiple DNS servers. I can't get down to just one from my VPN provider w/o modifying /etc/config/dhcp, as suggested on the OpenWRT forum. Perhaps something has changed in more recent versions of OpenWRT, but if you have a fix other than the mod I mentioned I'd appreciate reading about it. Thank you!
Hi, in this case I would suggest that you try to edit the configuration file with CLI (command line interface) using nano/vi editor. Else, try winscp on Windows and edit the file with a GUI.
Thank you for your tutorial. Unfortunately I've faced with a problem related to *.ovpn file. When I go to OpenVpn page there is no field where I could upload my file -(. I use OpenWRT 17.01.7 release and openvpn-openssl 2.4.4-4 I tried to install openconnect client but it is not supported in my release -(
Hi, maybe you are using the snapshot firmware? Try to update it to the latest version and try again. Else, post the error message on the FB group Van Tech Corner & Friends and we will try to solve it.
hello my friend i follow steps in video and tun0 gives massage ethernet device is not present by the way i using openwrt-21.02.1 raspberry pi 2...I need your help thanks
Hi, you need to first start the OVPN instance before the tun0 interface show up. If the OVPN instace is not running at all, it is something you need to troubleshoot.
i'm new to OpenWRT .. i have small doubt about which is ur client and server device .. if router as server what is your end-device .. can u plz let me know the detail plz
Hi, in this video the OpenVPN server is running OpenWRT as well. You can setup an OpenVPN server easily with Ubuntu or CentOS and there are a lot of script which can get this done in just few minutes. You can check out the video "Setup OpenVPN server" in my channel.
Mình không dùng mwan3 và openvpn chung với nhau, vì khi quay openvpn bằng router throughput của nó thất thấp. nếu cộng thêm mwan nữa thì không biết nó tới đâu.
Hi, you can search on Google for "Your xiaomi model + openwrt" and most likely there will be a guide to install the OpenWRT firmware on the router. Once this is done, you can follow this video to configure OpenWRT. If you need to learn more about OpenWRT, here is my playlist which will help you get started. ruclips.net/p/PL58__w3t_eTbcBQ9oJ8jXCxPtBiac59vC
I can get the VPN working fine but there are DNS leaks. From what I've been reading, DNS leaks are a big issue with both OpenWRT and DD-WRT running OpenVPN.
@@VanTechCorner yes, plus my VPN provider also has a page that will detect leaks. I got it worked out. On windows, any time you make a dns change, it's best to release and renew your leases. At the command prompt, issue two commands: ipconfig /release ipconfig /renew I forgot to do that. OOPS!
You might need to disable IPV6. Go to Network -> Interfaces -> TUN0 -> edit -> Advanced Settings (tab) , uncheck "Use built IPv6-management" Hope this helps.
Hi, could you provide more information? I din't get what "veth-pair" mean. Do you mean the virtual Ethernet inteface which are shown up during interface creation?
If there is no RX, maybe your OpenVPN instace is not running. Can you provide the screenshot of the OpenVPN instace and your interface setting. You can upload the screenshot to pictr.com/upload and give me the link. I will check it.
@@VanTechCorner i want to install nft-qos in openwrt but system not letting me install the package it appreas kernel not supporting it,if i recall it shows "cannot satisfy dependecies blablablabla" what should i do? should i do --force-depends
Hey, you can do this by click "Edit" on your OVPN instance. Then, fill in the username & password under "auth-user-pass" section (the 2nd box). After that, your auth file will be saved with a random name in /etc/openvpn. Edit your OVPN file (1st box) with the full path to the location of your auth file. For example "auth-user-pass /etc/openvpn/NLMiramUDP443E3.auth". Example: openwrt.org/_media/docs/guide-user/services/vpn/openvpn/openwrt_openvpn_client_2_upload_openvpn_config_add_user_pass.png
@@VanTechCorner hi van , sorry, which way can i insert the before said username and password ...don't know how to insert the full path to the location , not even how to see it..can it be done via luci? thanks
It depends whether your VPN provider require username and password or not. See this link to know where you can add the username & pass - openwrt.org/docs/guide-user/services/vpn/openvpn/client-luci
@@VanTechCorner Finally I upload .ovpn but it says"No page is registered at '/admin/vpn/openvpn/upload'. If this url belongs to an extension, make sure it is properly installed. If the extension was recently installed, try removing the /tmp/luci-indexcache file"
Do you mean during interface creation there is no tun0? If yes, it means your OpenVPN client was not properly setup or it is not running. What is the status of the instance?
@@VanTechCorner no buddy, i already set up all the dependancies, however is does not work. I can grant you remote access to check my settings if u r willing to help. regards
You just need to create a new profile, put in the server IP, username and password and see if it work. Else, check the log and see what is other parameters required by your provider.
Hi, I am not sure if I can understand v2ray to make a video about that. Besides OpenVPN, there is a tutorial for site to site vpn with Wireguard, not sure if it could help.
Thanks man, a moment with setting the new interface tun0 with setting to wan and to unmanaged helps to solve an issue and now it works fine! Thank you
Hey. Thanks for your great tutorials. I have a problem mixing this with mwan3 setup. I want all the clients connected to the router have their internet through openvpn. I would appreciate if you could help me with that.
I have been watching many of your tutorials. You have been extremely helpful. I am wanting to set up my VPN where only certain IP addresses on my network go through the VPN but my gaming PCs and Consoles do not. Could you create a tutorial for that sort of situation?
Hey, you can do this with mwan3 custom routing, or simply set the "allow routed IP" with Wireguard VPN. I will make a video that soon!
Strange, i do not have the bottom two options "Templated based config" and "OVPN config file upload" Just a dropdown field with Add button
I loaded the vpn into openwrt, then I uploaded the script, added my further script for password, then it returned "Insufficient permissions to read UCI configuration" at the top of the page. So I'm dead in the water and I can't find a solution.
Could you please explain how can I quickly switch the VPN on/off when it is installed this way?
Hello sir can I provide internet to client with vpn server like openvpn and wiregured plz tell me
you are a legend thank you!
Thankyou, great tutorial!
how we can do a slective device routin in openwrt?!
for example i dont want my ps4 (192.168.1.10) go through vpn and i want to go directly to wan
I don't think you can do this. Either use another router/ switch for your PS4 or setup the OpenVPN client on your end devices instead of the router.
You need this:
docs.openwrt.melmac.net/vpn-policy-routing/
@@frigginjiggy yes , I Figured it out 👍🏻
@@amintajrishi Glad you got it worked out. Did you check for DNS leaks? That's a big problem for both OpenWRT and DD-WRT when using OpenVPN.
@@frigginjiggy yep i Checked it for dnsleaks and its ok! Anyway im using shadowsocks since then in openwrt! Its much much faster than anykind of vpn !
Hello, your tutorials are great! Can you please tell me whhat would happend if interface tun0 is down for any reason? Is connection to internet is open or not? I'd like to disable this connection if VPN is down.
I am using openwrt on a BT homehub router and speed test is maxing out the CPU. I think it's because I am using cipher AES-256. Do you know which cipher would be least cpu intensive?
Hi,is there a video on how to set wan interface as default over vpn in pbr?
Hi. Where did you get your .ovpn files? I have .ovpn files from ExpressVPN but when I try uploading that file to luci, it doesn’t reflect in the vpn list :/
I build my own OpenVPN server and get the ovpn file. You can search for the tutorial on how to setup OpenVPN server (with OpenWRT or Ubuntu) on the channel as well. If the ovpn is not recognized by OpenVPN, maybe you can try to edit the sample configuration file and copy and paste your value to that file.
Sorry, can you tell me witch VPN provider u used? NordVPN, Cyberghost or what?? Thanks
Hi, I didn't use a VPN provider.
I purchase a VPS (Virtual Machine) from Vultr, Digital Ocean, etc and setup the VPN server there. With the access the the whole server, I can setup both OpenVPN, Wireguard VPN and other VPN protocol at the same time. This is also to ensure that no one can see my traffic, even the VPN provider.
Currently I use Vultr, if you want to give a try, you can sign up using this link (affiliate ): www.vultr.com/?ref=6880855
Here is the tutorial video: ruclips.net/video/luLRpFMdLrE/видео.htmlsi=HbMVOa9wGEJUfSbB
Can I add a VPN connection for a specific VLAN like guest network
Hi this does not seem to work for v21.02 for the tunneling part, there is an issue accessing the internet wirelessly but no issue with lan connection
also on the openvpn software, there is the error message of insufficient permissions to read UCI configurations
Thank you for video!
how to fix Insufficient permissions to read UCI configuration.
Hi. How can add private ket password in gui? I can connect in command mode after enter private key password , user and password but when modem reboot must run command again.
very useful guide thanks broo!!!🙂🙂🙂🙂
Happy to help!
hello great tutorial, I have a network HDD with OpenWRT, it has only 1 NIC, i was able to install Open-VPN and confirm the connection, however I could not configure the firewall rules properly. Do you have any tips for this, or if its easier I am trying to route Transmission torrent through the VPN
thanks i found solution from you
7:05 Is the interface must always set to 'Ethernet Adapter "tun0"', regardless of whether the router is connected to the modem via wifi or cable ? Thank you.
Yes, this is the tunnel interface (which only up when the VPN instace is running) and it should always be tun0 if there is only 1 VPN instace running.
does the connection of the vpn apply to other devices as well using this method?
I'm not able to add the new interface device. Says "Error: Network device is not present"
Hi, may I know at what time in the video the error appear. You need to reboot the router after enable the OpenVPN configuration file (before create the interface tun0).
thanks
Why my vpn instances running but no hv tun0 in the interface?
Nice tutorial and clean presentation. Hopefully you can help me in installing Openwrt in my Mi Router 4C to run Openvpn in my Mi Router 4C.
Hi, I have answered your question on the group.
hi thank you for this tutorial , my openwrt router is now connected to my vpn , my problem is how can i access my LAN network ex. PC , CCTV Device IP over OpenVPN connection.
Hey, you need to configure site to site VPN. There is a guide on Openwrt document (with script).
Bạn có thể hướng dẫn chỉ chạy openvpn trên 1 wifi, các interface khác vẫn chạy bình thường.
Hi! Did you check for DNS leaks? I get a new IP address but multiple DNS servers. I can't get down to just one from my VPN provider w/o modifying /etc/config/dhcp, as suggested on the OpenWRT forum. Perhaps something has changed in more recent versions of OpenWRT, but if you have a fix other than the mod I mentioned I'd appreciate reading about it. Thank you!
cant help me? my problem "insufficient permissions to read UCI configuration" in edit openvpn and cant connect.
Hi, in this case I would suggest that you try to edit the configuration file with CLI (command line interface) using nano/vi editor. Else, try winscp on Windows and edit the file with a GUI.
Thank you for your tutorial.
Unfortunately I've faced with a problem related to *.ovpn file.
When I go to OpenVpn page there is no field where I could upload my file -(.
I use OpenWRT 17.01.7 release and openvpn-openssl 2.4.4-4
I tried to install openconnect client but it is not supported in my release -(
Hi, maybe you are using the snapshot firmware? Try to update it to the latest version and try again. Else, post the error message on the FB group Van Tech Corner & Friends and we will try to solve it.
Thanks man.
No problem!
How do you get the certification on PFsense?
hello my friend i follow steps in video and tun0 gives massage ethernet device is not present by the way i using openwrt-21.02.1 raspberry pi 2...I need your help thanks
Thank u very much bro
You're welcome!
Why my interface dont have option etherrnet adapter for ovpn please help me
Hi, you need to first start the OVPN instance before the tun0 interface show up. If the OVPN instace is not running at all, it is something you need to troubleshoot.
Hei, great video, but where do i get the Vpn configuration file?
from your own VPN provider
i'm new to OpenWRT .. i have small doubt about which is ur client and server device .. if router as server what is your end-device .. can u plz let me know the detail plz
Hi, in this video the OpenVPN server is running OpenWRT as well. You can setup an OpenVPN server easily with Ubuntu or CentOS and there are a lot of script which can get this done in just few minutes. You can check out the video "Setup OpenVPN server" in my channel.
Bác ơi! Bác có xài openvn cùng mwan3 không vậy.
Mình không dùng mwan3 và openvpn chung với nhau, vì khi quay openvpn bằng router throughput của nó thất thấp. nếu cộng thêm mwan nữa thì không biết nó tới đâu.
But dear I am using Mi gigabit router it has no openwrt (openvpn) it only supports l2pt and pptp server
Hi, you can search on Google for "Your xiaomi model + openwrt" and most likely there will be a guide to install the OpenWRT firmware on the router. Once this is done, you can follow this video to configure OpenWRT. If you need to learn more about OpenWRT, here is my playlist which will help you get started. ruclips.net/p/PL58__w3t_eTbcBQ9oJ8jXCxPtBiac59vC
So if a have openwrt on my router and i buy a vpn will the vpn work automatically?
Nope, you will need to upload the OpenVPN configuration to the router and configure OpenVPN there.
Hi, this router, what's is the maximum speed with OpenVPN, because OpenVPN take much processing...
Hi, this router is not good for OpenVPN. As I can remember, it is only 10 Mbps
If you can, try Wireguard which has a better performance and uses less resouces.
thank you
You're welcome
I can get the VPN working fine but there are DNS leaks. From what I've been reading, DNS leaks are a big issue with both OpenWRT and DD-WRT running OpenVPN.
Hello, how do you know that there is DNS leaks? Did you follow the guide to perform the check at dnsleaktest.com?
@@VanTechCorner yes, plus my VPN provider also has a page that will detect leaks. I got it worked out. On windows, any time you make a dns change, it's best to release and renew your leases. At the command prompt, issue two commands:
ipconfig /release
ipconfig /renew
I forgot to do that. OOPS!
You might need to disable IPV6. Go to Network -> Interfaces -> TUN0 -> edit -> Advanced Settings (tab) , uncheck "Use built IPv6-management"
Hope this helps.
tnx
can you please make a video on how to set up a veth-pair?
Hi, could you provide more information? I din't get what "veth-pair" mean. Do you mean the virtual Ethernet inteface which are shown up during interface creation?
@@VanTechCorner forum.openwrt.org/t/sqm-flow-offloading-vlan-tagging-and-gaming/25113/9
Sure, I will take a look on this. Btw, is this your topic or just a reference?
Hi, I Followed everything and I can See that VPN is connected. But there still no internet when I browse.
Did you set the tun0 to WAN zone?
@@VanTechCorner Yes I Did. Can I have your Email so that I can send screenshots if it's ok. thanks!
@@VanTechCorner also base on the interface there is no Packets on RX of tun0
If there is no RX, maybe your OpenVPN instace is not running. Can you provide the screenshot of the OpenVPN instace and your interface setting. You can upload the screenshot to pictr.com/upload and give me the link. I will check it.
@@VanTechCorner Hello I tried this method but the problem is same. VPN is connected but no internet in the client.
what was the solution?
Hello can i request something? can you do Wireguard Client config tutorial next like this? your tutorial helps me a lot
Yes, soon there will be a Wireguard Client & Server tutorial. If you have any problem, I can assist you here (before the video is made).
@@VanTechCorner I'll wait for your tutorial it's ok for me i can wait
@@VanTechCorner i want to install nft-qos in openwrt but system not letting me install the package it appreas kernel not supporting it,if i recall it shows "cannot satisfy dependecies blablablabla" what should i do? should i do --force-depends
You need to update your openwrt software to a new version.
My openvpn has a username and password. Where do I add this too??
Hi, did find a way to configure this?
Very clear instruction! Thanks! My .ovpn file requires me to input username and password mannually. How should I do this in OpenWrt?
Hey, you can do this by click "Edit" on your OVPN instance. Then, fill in the username & password under "auth-user-pass" section (the 2nd box). After that, your auth file will be saved with a random name in /etc/openvpn. Edit your OVPN file (1st box) with the full path to the location of your auth file. For example "auth-user-pass /etc/openvpn/NLMiramUDP443E3.auth". Example: openwrt.org/_media/docs/guide-user/services/vpn/openvpn/openwrt_openvpn_client_2_upload_openvpn_config_add_user_pass.png
@@VanTechCorner hi van , sorry, which way can i insert the before said username and password ...don't know how to insert the full path to the location , not even how to see it..can it be done via luci? thanks
after upload file no need to fill in user and password？
It depends whether your VPN provider require username and password or not. See this link to know where you can add the username & pass - openwrt.org/docs/guide-user/services/vpn/openvpn/client-luci
@@VanTechCorner thanks good vids
@@VanTechCorner Finally I upload .ovpn but it says"No page is registered at '/admin/vpn/openvpn/upload'.
If this url belongs to an extension, make sure it is properly installed.
If the extension was recently installed, try removing the /tmp/luci-indexcache file"
where do I put the username and password?
i don't have tun0 what should i do? i have eth0 wan etc...
Do you mean during interface creation there is no tun0? If yes, it means your OpenVPN client was not properly setup or it is not running. What is the status of the instance?
@@VanTechCorner I fixed it,i didn't start OpenVPN that's why there is no tun0 appearing in my instance
Well done!
@@VanTechCorner I have the same problem and I can't fix it. How do i start OpenVPN manually?
at the stage of creating a new interface on the interface tab absent ehthernet adapter tun0, service openvpn working.
Thanks bro,
You doing its good keep going on.
Next shadowsock and shadowsockR
Sure. I will add it to my list and give it a hit. Thanks for the feedback bro!
@@VanTechCorner please make ssr video bro..
@@VanTechCorner Hello sir please make a openwrt shadowsocks configuration video please.
can u help me to setup openvpn on openWRT?
Hi, the guide is here and you can follow it so setup OpenVPN with LuCI. Is there any problem with the setup?
@@VanTechCorner no buddy, i already set up all the dependancies, however is does not work. I can grant you remote access to check my settings if u r willing to help. regards
Can you post the detail of problem on the FB group Van Tech Corner and Friends, we can see how to solve it. I am not provide remote support.
Bro can u configure sample account with upload username and pass. Thanks
Hi, are you using ovpn from any provider? They should have their own instruction on that.
@@VanTechCorner just type user and pass in the second text box? Or more step again?
You just need to create a new profile, put in the server IP, username and password and see if it work. Else, check the log and see what is other parameters required by your provider.
@@VanTechCorner ok sir, thanks. I am wait your content about installation shadowshock and shadowshocksR
which is your router??
The D-Link DIR-842. ruclips.net/video/fVRWbprCZW8/видео.html
@@VanTechCorner can you suggest a router with more flash memory and ram which supports openwrt...
Can I knowyour budget and the country you are living
@@VanTechCorner im from india...my budget is 5000INR which is about 70 dollar...
Do it work with nordvpn?
Let's me see if I can find an account xD
@@VanTechCorner thanks
Hey, I can't find an account to test but it should work. If you have any problem, just update and we will find a way to solve it.
@@VanTechCorner ok, thank u
v2ray please
Hi, I am not sure if I can understand v2ray to make a video about that. Besides OpenVPN, there is a tutorial for site to site vpn with Wireguard, not sure if it could help.