Hey folks,
I am an extreme noob when it comes to openvpn, so go easy 😃 I'm pretty well-rounded with OpenWRT, rasbian (Rasp PI's), and ubuntu. I have a router with OpenWRT installed, and two raspberry PI's. One PI has OSMC installed (Kodi distro), and the other PI a headdless version of Jessie. I setup headless Jessie vpn using this script,
http://www.pivpn.io/.
1. I can connect the PI running Kodi to the pivpn, and see traffic moving across TUN1. Here is the client config:
client
dev tun
proto udp
remote 192.168.2.20 1194
resolv-retry infinite
nobind
persist-key
persist-tun
key-direction 1
remote-cert-tls server
tls-version-min 1.2
verify-x509-name server name
cipher AES-256-CBC
auth SHA256
comp-lzo
verb 1
<ca>
2. I cannot connect as a client from my openwrt router, and get out to to the internet. Here is the OpenWRT Client:
root@OpenWrt:/etc/config/ovpns# cat openwrt2.ovpn
client
dev tun
proto udp
remote 192.168.2.20 1194
resolv-retry infinite
nobind
persist-key
persist-tun
key-direction 1
remote-cert-tls server
tls-version-min 1.2
verify-x509-name server name
cipher AES-256-CBC
auth SHA256
comp-lzo
verb 1
<ca>
PIVPN server.conf:
dev tun
proto udp
port 1194
ca /etc/openvpn/easy-rsa/keys/ca.crt
cert /etc/openvpn/easy-rsa/keys/server.crt
key /etc/openvpn/easy-rsa/keys/server.key
dh /etc/openvpn/easy-rsa/keys/dh2048.pem
server 10.8.0.0 255.255.255.0
# server and remote endpoints
ifconfig 10.8.0.1 10.8.0.2
# Add route to Client routing table for the OpenVPN Server
push "route 10.8.0.1 255.255.255.255"
# Add route to Client routing table for the OPenVPN Subnet
push "route 10.8.0.0 255.255.255.0"
# your local subnet
push "route 192.168.2.0 255.255.255.0"
# Set your primary domain name server address for clients
push "dhcp-option DNS 67.231.25.10"
push "dhcp-option DNS 71.7.190.10"
push "dhcp-option DNS 69.70.160.28"
# Override the Client default gateway by using 0.0.0.0/1 and
# 128.0.0.0/1 rather than 0.0.0.0/0. This has the benefit of
# overriding but not wiping out the original default gateway.
push "redirect-gateway def1"
client-to-client
duplicate-cn
keepalive 10 120
tls-version-min 1.2
tls-auth /etc/openvpn/easy-rsa/keys/ta.key 0
cipher AES-256-CBC
auth SHA256
comp-lzo
user nobody
group nogroup
persist-key
persist-tun
#crl-verify /etc/openvpn/crl.pem
status /var/log/openvpn-status.log 20
log /var/log/openvpn.log
verb 1
# This configuration file was originally written by Lauren Orsini at ReadWrite.
Is it safe enough to VPN fron the kodi PI to the VPNPI that I have setup to protect me from snoopers if I stream torrents and such, or does the VPN traffic have to pass through my OpenWRT router first to encypt my traffic? The DNS's I am using in the server config are DNS servers originating in Canada.
