{"id":2058,"date":"2013-10-03T22:01:16","date_gmt":"2013-10-03T20:01:16","guid":{"rendered":"http:\/\/blog.wenzlaff.de\/?p=2058"},"modified":"2021-11-22T17:16:01","modified_gmt":"2021-11-22T16:16:01","slug":"wie-wird-ein-openvpn-server-auf-openwrt-version-12-auf-eiem-tp-wr703n-router-eingerichtet","status":"publish","type":"post","link":"http:\/\/blog.wenzlaff.de\/?p=2058","title":{"rendered":"Wie wird ein OpenVPN Server auf OpenWrt (Version 12) auf eiem TP-WR703N Router eingerichtet?"},"content":{"rendered":"

Nach dieser Anleitung<\/a> vorgehen.
\nAuf einem lauff\u00e4higen OpenWrt mit USB-Stick zuerst OpenVpn<\/a> installieren:
\n
\nopkg update
\nopkg install openvpn
\n<\/code><\/p>\n

Und einen Static Key generieren.
\n
\nopenvpn --genkey --secret static.key
\n<\/code>
\nDieser Key muss auf allen Ger\u00e4ten, die im VPN Netz sind kopiert werden.
\nAlso den Key nach \/etc unter anderen Namen kopieren oder verschieben:
\n
\ncp static.key \/etc\/openvpn.key
\n<\/code><\/p>\n

Die \/etc\/config\/firewall<\/code> Datei um diese Eintr\u00e4ge am Ende erg\u00e4nzen, damit der Port 1194 durchgelassen wird:
\n
\nconfig 'rule'
\n option 'target' 'ACCEPT'
\n option 'src' 'wan'
\n option 'proto' 'tcp'
\n option 'dest_port' '22'
\n option '_name' 'ssh-wan'<\/p>\n

config 'rule'
\n option '_name' 'openvpn-udp'
\n option 'src' 'wan'
\n option 'target' 'ACCEPT'
\n option 'proto' 'udp'
\n option 'dest_port' '1194'
\n<\/code>
\nDie Datei \/etc\/firewall.rules<\/strong> neu anlegen mit folgenden Inhalt:
\n
\niptables -I OUTPUT -o tap+ -j ACCEPT
\niptables -I INPUT -i tap+ -j ACCEPT<\/p>\n

iptables -I FORWARD -o tap+ -j ACCEPT
\niptables -I FORWARD -i tap+ -j ACCEPT
\n<\/code>
\nFolgendes Start Script anlegen\/etc\/openvpnbridge<\/strong> mit folgenden Inhalt:
\n
\n#!\/bin\/sh<\/p>\n

#\/etc\/openvpnbridge
\n# OpenVPN Bridge Config File
\n# Creates TAP devices for use by OpenVPN and bridges them into OpenWRT Bridge
\n# Taken from http:\/\/openvpn.net\/bridge.html<\/p>\n

# Make sure module is loaded
\ninsmod tun<\/p>\n

# Define Bridge Interface
\n# Preexisting on OpenWRT
\nbr=\"br0\"<\/p>\n

# Define list of TAP interfaces to be bridged,
\n# for example tap=\"tap0 tap1 tap2\".
\ntap=\"tap0\"<\/p>\n

# Build tap devices
\nfor t in $tap; do
\n openvpn --mktun --dev $t
\ndone<\/p>\n

# Add TAP interfaces to OpenWRT bridge<\/p>\n

for t in $tap; do
\n brctl addif $br $t
\ndone<\/p>\n

#Configure bridged interfaces<\/p>\n

for t in $tap; do
\n ifconfig $t 0.0.0.0 promisc up
\ndone
\n<\/code><\/p>\n

Und diese Datei ausf\u00fchrbar machen mit:
\nchmod +x \/etc\/openvpnbridge<\/code><\/p>\n

Nun noch die VPN-Server Konfig Datei \/etc\/server.ovpn<\/strong> erstellen:
\n
\nport 1194
\nproto udp
\ndev tap
\nkeepalive 10 120
\nstatus openvpn-status.log
\nverb 3
\n# Pfad zum Static Key evl. noch dem Pfad anpassen
\nsecret \/etc\/openvpn.key
\n<\/code><\/p>\n

Restart des OpenWrt.<\/p>\n

Jetzt kann der Server gestartet werden mit:<\/p>\n

openvpn \/etc\/server.ovpn<\/code><\/p>\n

Wenn alles erfolgreich l\u00e4uft, wird solch eine Nachricht ausgegeben.
\n
\nroot@OpenWrt:\/etc# openvpn \/etc\/server.ovpn
\nThu Oct 3 19:55:59 2013 OpenVPN 2.2.2 mips-openwrt-linux [SSL] [LZO2] [EPOLL] built on Mar 14 2013
\nThu Oct 3 19:55:59 2013 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
\nThu Oct 3 19:55:59 2013 Static Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
\nThu Oct 3 19:55:59 2013 Static Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
\nThu Oct 3 19:55:59 2013 Static Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
\nThu Oct 3 19:55:59 2013 Static Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
\nThu Oct 3 19:55:59 2013 Socket Buffers: R=[163840->131072] S=[163840->131072]
\nThu Oct 3 19:55:59 2013 TUN\/TAP device tap0 opened
\nThu Oct 3 19:55:59 2013 TUN\/TAP TX queue length set to 100
\nThu Oct 3 19:55:59 2013 Data Channel MTU parms [ L:1576 D:1450 EF:44 EB:4 ET:32 EL:0 ]
\nThu Oct 3 19:55:59 2013 UDPv4 link local (bound): [undef]:1194
\nThu Oct 3 19:55:59 2013 UDPv4 link remote: [undef]
\nThu Oct 3 19:56:03 2013 Peer Connection Initiated with 192.168.X.XXX:XXXXX
\nThu Oct 3 19:56:04 2013 Initialization Sequence Completed
\n<\/code><\/p>\n","protected":false},"excerpt":{"rendered":"

Nach dieser Anleitung vorgehen. Auf einem lauff\u00e4higen OpenWrt mit USB-Stick zuerst OpenVpn installieren: opkg update opkg install openvpn Und einen Static Key generieren. openvpn –genkey –secret static.key Dieser Key muss auf allen Ger\u00e4ten, die im VPN Netz sind kopiert werden. Also den Key nach \/etc unter anderen Namen kopieren oder verschieben: cp static.key \/etc\/openvpn.key Die … <\/p>\n

\u201eWie wird ein OpenVPN Server auf OpenWrt (Version 12) auf eiem TP-WR703N Router eingerichtet?\u201c <\/span>weiterlesen<\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[808,695],"tags":[503,988,678,83,855,989,990],"class_list":["post-2058","post","type-post","status-publish","format-standard","hentry","category-linux-2","category-tp-wr703n","tag-install","tag-openvpn","tag-openwrt","tag-server","tag-tunnel","tag-vpn","tag-vpn-server"],"_links":{"self":[{"href":"http:\/\/blog.wenzlaff.de\/index.php?rest_route=\/wp\/v2\/posts\/2058","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/blog.wenzlaff.de\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/blog.wenzlaff.de\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/blog.wenzlaff.de\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"http:\/\/blog.wenzlaff.de\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2058"}],"version-history":[{"count":0,"href":"http:\/\/blog.wenzlaff.de\/index.php?rest_route=\/wp\/v2\/posts\/2058\/revisions"}],"wp:attachment":[{"href":"http:\/\/blog.wenzlaff.de\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2058"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/blog.wenzlaff.de\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2058"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/blog.wenzlaff.de\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2058"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}