Can't setup server on DDWRT router

unskilled

I have tried to understand this stuff for the past 2 weeks and everything I think i get somewhere, i go back to step 1.

I went into OpenVPN, enable server, start type is WAN up, and the default config is "Daemon" (not sure if thats what it needs to be?)

I entered in the CA, Public CA, Private Key, DH PEM.

under additional config, i have the following:

"push "route 192.168.20.1 255.255.255.0"
push "dhcp-option DNS 8.8.8.8"
server 10.8.0.1 255.255.255.0

dev tun0
proto udp
keepalive 10 120
dh /tmp/openvpn/dh.pem
ca /tmp/openvpn/ca.crt
cert /tmp/openvpn/cert.pem
key /tmp/openvpn/key.pem

# management parameter allows DD-WRT\s OpenVPN Status web page to access the server\s management port
# port must be 5001 for scripts embedded in firmware to work
management localhost 5001"

Is that correct? The "Push" Route 192.168.20.1 is my local IP Address. The dhcp-option, i just used googles 8.8.8.8 BUT i have no idea if thats correct or not? The Server 10.8.0.1 is just a made up number (i think i read thats what openvpn default it).

As for the hd, ca, cert, key...do i need to change any of those? When i had the server set up on my computer those were pointing to the folder on my computer. Now with this on the router, i am assuming that it is correct but i have no idea?

I didnt't change anything else on the router except for the firewall:

"#!/bin/sh
OVPN_SERVER="10.8.0.0/24"
OVPN_DEV="tun2"
OVPN_PROTO="udp"
OVPN_PORT="1194"

WAN_IF="$(ip route | awk '/^default/{print $NF}')"

# open the OpenVPN server port
iptables -I INPUT -i $WAN_IF -p $OVPN_PROTO --dport $OVPN_PORT -j ACCEPT

# allow OpenVPN clients to access the OpenVPN server
iptables -I INPUT -i $OVPN_DEV -m state --state NEW -j ACCEPT

# allow OpenVPN clients to access ALL other devices on the LAN
iptables -I FORWARD -i $OVPN_DEV -o -m state --state NEW -j ACCEPT

# nat OpenVPN clients over the local internet gateway
iptables -t nat -A POSTROUTING -s $OVPN_SERVER -o $WAN_IF -j MASQUERADE"

i didnt do anything with port forwarding, so i dont know if that needs to be done?

Anyways, when i look at the openvpn status, there is nothing under server, local address, remote address, etc.

What am i doing wrong? I appreciate your help!

TinCanTech

unskilled wrote"push "route 192.168.20.1 255.255.255.0"

This should be:

push "route 192.168.20.0 255.255.255.0"

But that will not change the problem you are having not being able to connect.
You need to learn how DD-WRT firewall works.

Open the UDP port 1194 to the internet (but I do not use DD-WRT so I cannot help)

unskilled

I appreciate you responding. This stuff is a bit confusing to me, i have spent a week on it now and feel like i dont know anything about it. I went to the port forwarding tab, selected UDP protocol, port from 1194, port to 1194, and left the IP address blank. This didnt seem to work either. I'm guessing i should atleast see something in the openVPN status even without a client connected?

TinCanTech

If your router has in interface (probably eth0) which connects to the internet directly then you do not need to forward ports. You do need to allow packets into the port via your firewall configuration, (The DD-WRT website should be more help for you with this)

unskilled

this website fixed the problem: http://www.stj.me/2016/02/17/openvpn-ddwrt.html