Hello,
I already have OpenVPN up and running on my Archer C7 v.2 router with OpenWRT flashed onto it. I have it connected to a subscription with PIA. Everything is working just fine.
Now, what I want to do is set up a VPN server so that I can have anywhere from 3 to 5 concurrent VPN client connections to my LAN so that some friends of mine and I can play games that are hosted as dedicated servers on my home computer.
I was reading the following guide on how to set up a server...
https://wiki.openwrt.org/doc/howto/openvpn-streamlined-server-setup#tab__help
He begins by listing all of the encryption and certificate prerequisites to set up OpenVPN. I already have, and am using, a strong (4096) encryption certificate provided by PIA.
My question is as follows: Do all of the requirements he puts forth still apply to what I'm trying to do, or are some of them unnecessary in view of the fact that I already have the VPN up and running?
I know that some of them are server and client specific, but I'm a real newbie, so I don't know which steps I can skip or if some of the certs can be chained off the cert I already have.
Any advice would be appreciated.
Here's my PIA Client entry for reference...
config openvpn 'pia_client'
option dev 'tun'
option nobind '1'
option verb '3'
option fast_io '1'
option persist_tun '1'
option persist_key '1'
option keepalive '10 120'
option client '1'
option auth_user_pass '/etc/openvpn/userpass.txt'
option remote 'us-california.privateinternetaccess.com'
option proto 'udp'
option resolv_retry 'infinite'
option tls_client '1'
option auth_nocache '1'
option ca '/etc/config/ca.rsa.4096.crt'
option reneg_sec '0'
option remote_cert_tls 'server'
option crl_verify '/etc/config/crl.rsa.4096.pem'
option enabled '1'
option comp_lzo 'yes'
option port '1197'
option auth 'SHA256'
option cipher 'AES-256-CBC'
And my network file...
config interface 'loopback'
option ifname 'lo'
option proto 'static'
option ipaddr '127.0.0.1'
option netmask '255.0.0.0'
config globals 'globals'
option ula_prefix 'fd82:83f8:2929::/48'
config interface 'lan'
option ifname 'eth1'
option force_link '1'
option type 'bridge'
option proto 'static'
option netmask '255.255.255.0'
option ip6assign '60'
option ipaddr '192.168.7.1'
config interface 'wan'
option ifname 'eth0'
option proto 'dhcp'
config interface 'wan6'
option ifname 'eth0'
option proto 'dhcpv6'
config switch
option name 'switch0'
option reset '1'
option enable_vlan '1'
config switch_vlan
option device 'switch0'
option vlan '1'
option ports '0 2 3 4 5'
config switch_vlan
option device 'switch0'
option vlan '2'
option ports '1 6'
config interface 'PIA_VPN'
option proto 'none'
option ifname 'tun0'
Let me know if you need any more info.
