How To Setup VPN on OpenWrt

Install OpenVPN Packages

• Log in to your LuCI dashboard and head over to System > Software.
• Search and install the following packages: openvpn-openssl and luci-app-openvpn.
• Refresh your browser; a new Services > OpenVPN option will appear.

Upload configuration

• Navigate to Services > OpenVPN.
• In the Ovn configs upload section, name the config worldvpn, select your downloaded .ovpn configuration (which already includes the port 80 and TCP/UDP settings), and click Upload.

Configure Credentials

To allow the OpenVPN tunnel to authenticate automatically, we must reference a credential file.

• Access your OpenWrt CLI via SSH (or use file manager) and create a text file at /etc/openvpn/worldvpn.auth containing:

  your_username
  your_password

• Click Edit next to the newly created worldvpn instance in LuCI, find the auth-user-pass parameter and point it to: /etc/openvpn/worldvpn.auth. Click Save.

Firewall & Interfaces Mapping

• Go to Network > Interfaces. Click Add new interface..., set name as vpnwan, choose Unmanaged protocol, and select the interface tun0. Click Create interface.
• In the Firewall tab of the vpnwan interface, choose the wan zone. Click Save & Apply.
• Go back to Services > OpenVPN, tick Enabled and click Start on the WorldVPN client tunnel.

Install OpenConnect Packages

• Log in to your LuCI administration and navigate to System > Software.
• Search for and install openconnect and luci-proto-openconnect.
• Reboot your router to make sure new network interface options are loaded fully.

Create OpenConnect Interface

• Go to Network > Interfaces and click Add new interface....
• Set Name to worldvpn_oc, and select protocol OpenConnect.
• In the next step, enter the Server address (e.g. nl1.ocservvpn.com), your VPN Username, and your Password.
• Under Firewall Settings, select the wan zone. Click Save & Apply to start the OpenConnect connection.

Install L2TP Protocols

• Access your LuCI panel and go to System > Software.
• Search and install the L2TP package: xl2tpd and luci-proto-vpnc.
• Reboot the router.

Create L2TP Interface

• Navigate to Network > Interfaces, click Add new interface....
• Set name to worldvpn_l2tp and protocol to L2TP. Click Create interface.
• Enter the L2TP Server IP / Hostname, your VPN Username, and your Password. Set the Pre-shared Key to worldvpn.
• Under Firewall Settings, choose the wan zone. Click Save & Apply to start the tunnel.