http://wiki.dd-wrt.com/wiki/index.php?title=OpenVPN_-_Site-to-Site_Bridged_VPN_Between_Two_Routers&action=history&feed=atom OpenVPN - Site-to-Site Bridged VPN Between Two Routers - Revision history 2024-03-29T15:54:13Z Revision history for this page on the wiki MediaWiki 1.10.1 http://wiki.dd-wrt.com/wiki/index.php?title=OpenVPN_-_Site-to-Site_Bridged_VPN_Between_Two_Routers&diff=53898&oldid=prev Ian5142: Added Languages 2018-03-18T12:45:17Z <p>Added Languages</p> <table border='0' width='98%' cellpadding='0' cellspacing='4' style="background-color: white;"> <tr> <td colspan='2' width='50%' align='center' style="background-color: white;">←Older revision</td> <td colspan='2' width='50%' align='center' style="background-color: white;">Revision as of 12:45, 18 March 2018</td> </tr> <tr><td colspan="2" align="left"><strong>Line 1:</strong></td> <td colspan="2" align="left"><strong>Line 1:</strong></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">{{Languages|OpenVPN_-_Site-to-Site_Bridged_VPN_Between_Two_Routers}}</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">The following details the procedure for establishing a site-to-site bridged VPN between two Linksys WRT54GL routers. Other routers should work just as easily, but other routers have not been tested by the author. To understand more about bridged VPNs, you can read [http://openvpn.net/bridge.html Ethernet Bridging on www.openvpn.net].</td><td> </td><td style="background: #eee; font-size: smaller;">The following details the procedure for establishing a site-to-site bridged VPN between two Linksys WRT54GL routers. Other routers should work just as easily, but other routers have not been tested by the author. To understand more about bridged VPNs, you can read [http://openvpn.net/bridge.html Ethernet Bridging on www.openvpn.net].</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">Also, this document utilizes public key authentication rather than static key authentication. Static key authentication should work just as easily (possibly easier), but the author has not tried to establish a site-to-site VPN using static key authentication.&lt;br /&gt;&lt;br /&gt;</td><td> </td><td style="background: #eee; font-size: smaller;">Also, this document utilizes public key authentication rather than static key authentication. Static key authentication should work just as easily (possibly easier), but the author has not tried to establish a site-to-site VPN using static key authentication.&lt;br /&gt;&lt;br /&gt;</td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"></td><td colspan="2">&nbsp;</td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"></td><td colspan="2">&nbsp;</td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"></td><td colspan="2">&nbsp;</td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"></td><td colspan="2">&nbsp;</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">=== Install DD-WRT onto Your Routers===</td><td> </td><td style="background: #eee; font-size: smaller;">=== Install DD-WRT onto Your Routers===</td></tr> </table> Ian5142 http://wiki.dd-wrt.com/wiki/index.php?title=OpenVPN_-_Site-to-Site_Bridged_VPN_Between_Two_Routers&diff=53896&oldid=prev Ian5142: Only OpenVPN category. 2018-03-18T12:42:07Z <p>Only OpenVPN category.</p> <table border='0' width='98%' cellpadding='0' cellspacing='4' style="background-color: white;"> <tr> <td colspan='2' width='50%' align='center' style="background-color: white;">←Older revision</td> <td colspan='2' width='50%' align='center' style="background-color: white;">Revision as of 12:42, 18 March 2018</td> </tr> <tr><td colspan="2" align="left"><strong>Line 339:</strong></td> <td colspan="2" align="left"><strong>Line 339:</strong></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">[[Category:<del style="color: red; font-weight: bold; text-decoration: none;">Tunneling</del>]]</td><td>+</td><td style="background: #cfc; font-size: smaller;">[[Category:<ins style="color: red; font-weight: bold; text-decoration: none;">OpenVPN</ins>]]</td></tr> </table> Ian5142 http://wiki.dd-wrt.com/wiki/index.php?title=OpenVPN_-_Site-to-Site_Bridged_VPN_Between_Two_Routers&diff=53879&oldid=prev Ian5142: Removed VPN Category. 2018-03-18T12:22:56Z <p>Removed VPN Category.</p> <table border='0' width='98%' cellpadding='0' cellspacing='4' style="background-color: white;"> <tr> <td colspan='2' width='50%' align='center' style="background-color: white;">←Older revision</td> <td colspan='2' width='50%' align='center' style="background-color: white;">Revision as of 12:22, 18 March 2018</td> </tr> <tr><td colspan="2" align="left"><strong>Line 267:</strong></td> <td colspan="2" align="left"><strong>Line 267:</strong></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">For security reasons, you may want to disable the ProFTPD service after you finish, as it was only needed to transfer the configuration files to the router.</td><td> </td><td style="background: #eee; font-size: smaller;">For security reasons, you may want to disable the ProFTPD service after you finish, as it was only needed to transfer the configuration files to the router.</td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"></td><td colspan="2">&nbsp;</td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">[[Category:VPN]]</td><td colspan="2">&nbsp;</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">=== Blocking DHCP requests through the VPN ===</td><td> </td><td style="background: #eee; font-size: smaller;">=== Blocking DHCP requests through the VPN ===</td></tr> </table> Ian5142 http://wiki.dd-wrt.com/wiki/index.php?title=OpenVPN_-_Site-to-Site_Bridged_VPN_Between_Two_Routers&diff=53872&oldid=prev Ian5142: Added Categories. 2018-03-18T03:43:36Z <p>Added Categories.</p> <table border='0' width='98%' cellpadding='0' cellspacing='4' style="background-color: white;"> <tr> <td colspan='2' width='50%' align='center' style="background-color: white;">←Older revision</td> <td colspan='2' width='50%' align='center' style="background-color: white;">Revision as of 03:43, 18 March 2018</td> </tr> <tr><td colspan="2" align="left"><strong>Line 267:</strong></td> <td colspan="2" align="left"><strong>Line 267:</strong></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">For security reasons, you may want to disable the ProFTPD service after you finish, as it was only needed to transfer the configuration files to the router.</td><td> </td><td style="background: #eee; font-size: smaller;">For security reasons, you may want to disable the ProFTPD service after you finish, as it was only needed to transfer the configuration files to the router.</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">[[Category:VPN]]</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">=== Blocking DHCP requests through the VPN ===</td><td> </td><td style="background: #eee; font-size: smaller;">=== Blocking DHCP requests through the VPN ===</td></tr> </table> Ian5142 http://wiki.dd-wrt.com/wiki/index.php?title=OpenVPN_-_Site-to-Site_Bridged_VPN_Between_Two_Routers&diff=43701&oldid=prev Sash: /* Obtain a Linksys WRT54GL Router */ 2012-08-25T22:24:04Z <p><span class="autocomment">Obtain a Linksys WRT54GL Router</span></p> <table border='0' width='98%' cellpadding='0' cellspacing='4' style="background-color: white;"> <tr> <td colspan='2' width='50%' align='center' style="background-color: white;">←Older revision</td> <td colspan='2' width='50%' align='center' style="background-color: white;">Revision as of 22:24, 25 August 2012</td> </tr> <tr><td colspan="2" align="left"><strong>Line 5:</strong></td> <td colspan="2" align="left"><strong>Line 5:</strong></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;">=== Obtain a Linksys WRT54GL Router ===</del></td><td>+</td><td style="background: #cfc; font-size: smaller;">&#160;</td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;">The author has experienced flawless performance from the two Linksys WRT54GL routers he has used to establish a site-to-site VPN. Although other routers will likely work equally well, if you obtain Linksys WRT54GL routers to set up a site-to-site VPN, you can have a high level of confidence that you will be successful.</del></td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">=== Install DD-WRT onto Your Routers===</td><td> </td><td style="background: #eee; font-size: smaller;">=== Install DD-WRT onto Your Routers===</td></tr> </table> Sash http://wiki.dd-wrt.com/wiki/index.php?title=OpenVPN_-_Site-to-Site_Bridged_VPN_Between_Two_Routers&diff=43700&oldid=prev Sash: /* Procedure Summary */ 2012-08-25T22:23:48Z <p><span class="autocomment">Procedure Summary</span></p> <table border='0' width='98%' cellpadding='0' cellspacing='4' style="background-color: white;"> <tr> <td colspan='2' width='50%' align='center' style="background-color: white;">←Older revision</td> <td colspan='2' width='50%' align='center' style="background-color: white;">Revision as of 22:23, 25 August 2012</td> </tr> <tr><td colspan="2" align="left"><strong>Line 3:</strong></td> <td colspan="2" align="left"><strong>Line 3:</strong></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">Also, this document utilizes public key authentication rather than static key authentication. Static key authentication should work just as easily (possibly easier), but the author has not tried to establish a site-to-site VPN using static key authentication.&lt;br /&gt;&lt;br /&gt;</td><td> </td><td style="background: #eee; font-size: smaller;">Also, this document utilizes public key authentication rather than static key authentication. Static key authentication should work just as easily (possibly easier), but the author has not tried to establish a site-to-site VPN using static key authentication.&lt;br /&gt;&lt;br /&gt;</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;">=== Procedure Summary ===</del></td><td>+</td><td style="background: #cfc; font-size: smaller;">&#160;</td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;"># Obtain a Linksys WRT54GL router</del></td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;"># Install the OpenVPN version of DD-WRT on both routers. NOTE: Use v23 sp3 or greater if you want to connect multiple clients to one server simultaneously. Single client to server works fine with sp2.</del></td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;"># Generate the necessary keys for public key authentication</del></td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;"># Configure a router as the server</del></td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;"># Configure the other router as the client</del></td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;"># Test the VPN</del></td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">=== Obtain a Linksys WRT54GL Router ===</td><td> </td><td style="background: #eee; font-size: smaller;">=== Obtain a Linksys WRT54GL Router ===</td></tr> </table> Sash http://wiki.dd-wrt.com/wiki/index.php?title=OpenVPN_-_Site-to-Site_Bridged_VPN_Between_Two_Routers&diff=43698&oldid=prev Sash: /* Test the VPN */ 2012-08-25T22:20:16Z <p><span class="autocomment">Test the VPN</span></p> <table border='0' width='98%' cellpadding='0' cellspacing='4' style="background-color: white;"> <tr> <td colspan='2' width='50%' align='center' style="background-color: white;">←Older revision</td> <td colspan='2' width='50%' align='center' style="background-color: white;">Revision as of 22:20, 25 August 2012</td> </tr> <tr><td colspan="2" align="left"><strong>Line 344:</strong></td> <td colspan="2" align="left"><strong>Line 344:</strong></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">note 2: It appears in the forums that x86 and 2.6 builds do not work with this method, and require alternate methods (possibly easier) to enable ebtables.</td><td> </td><td style="background: #eee; font-size: smaller;">note 2: It appears in the forums that x86 and 2.6 builds do not work with this method, and require alternate methods (possibly easier) to enable ebtables.</td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"></td><td colspan="2">&nbsp;</td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">=== Test the VPN ===</td><td colspan="2">&nbsp;</td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">If all is well, and a VPN has been established between your two routers, you should be able to ping hosts behind either router.</td><td colspan="2">&nbsp;</td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"></td><td colspan="2">&nbsp;</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">[[Category:Tunneling]]</td><td> </td><td style="background: #eee; font-size: smaller;">[[Category:Tunneling]]</td></tr> </table> Sash http://wiki.dd-wrt.com/wiki/index.php?title=OpenVPN_-_Site-to-Site_Bridged_VPN_Between_Two_Routers&diff=43697&oldid=prev Sash: /* Caveats and Tips */ 2012-08-25T22:19:46Z <p><span class="autocomment">Caveats and Tips</span></p> <table border='0' width='98%' cellpadding='0' cellspacing='4' style="background-color: white;"> <tr> <td colspan='2' width='50%' align='center' style="background-color: white;">←Older revision</td> <td colspan='2' width='50%' align='center' style="background-color: white;">Revision as of 22:19, 25 August 2012</td> </tr> <tr><td colspan="2" align="left"><strong>Line 348:</strong></td> <td colspan="2" align="left"><strong>Line 348:</strong></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">If all is well, and a VPN has been established between your two routers, you should be able to ping hosts behind either router.</td><td> </td><td style="background: #eee; font-size: smaller;">If all is well, and a VPN has been established between your two routers, you should be able to ping hosts behind either router.</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">=== Caveats and Tips ===</td><td colspan="2">&nbsp;</td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">Make sure that your router has sufficient memory for the above. Usually, this means having &gt;4MB of flash memory. I bricked a Buffalo WBR-54G trying to fit the script into it.</td><td colspan="2">&nbsp;</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">The entire process is facilitated by having SSH or telnet access to the router's command prompt. It allows you to directly test the various options and incantations to see if they work.</td><td colspan="2">&nbsp;</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">[[Category:Tunneling]]</td><td> </td><td style="background: #eee; font-size: smaller;">[[Category:Tunneling]]</td></tr> </table> Sash http://wiki.dd-wrt.com/wiki/index.php?title=OpenVPN_-_Site-to-Site_Bridged_VPN_Between_Two_Routers&diff=40289&oldid=prev Lancethepants: /* Blocking DHCP requests through the VPN */ 2011-04-06T19:12:01Z <p><span class="autocomment">Blocking DHCP requests through the VPN</span></p> <table border='0' width='98%' cellpadding='0' cellspacing='4' style="background-color: white;"> <tr> <td colspan='2' width='50%' align='center' style="background-color: white;">←Older revision</td> <td colspan='2' width='50%' align='center' style="background-color: white;">Revision as of 19:12, 6 April 2011</td> </tr> <tr><td colspan="2" align="left"><strong>Line 343:</strong></td> <td colspan="2" align="left"><strong>Line 343:</strong></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">note 1: This has been tested using the wrt54gl. Some modification may be necessary depending on your router, as bootup sequences and timing differ. Mainly the sleep commands seem to be the key here, and may have to be adjusted to make things work. </td><td> </td><td style="background: #eee; font-size: smaller;">note 1: This has been tested using the wrt54gl. Some modification may be necessary depending on your router, as bootup sequences and timing differ. Mainly the sleep commands seem to be the key here, and may have to be adjusted to make things work. </td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">note 2: It appears in the forums that x86 and 2.6 builds do not work with this method, and <del style="color: red; font-weight: bold; text-decoration: none;">could </del>require alternate methods to enable ebtables.</td><td>+</td><td style="background: #cfc; font-size: smaller;">note 2: It appears in the forums that x86 and 2.6 builds do not work with this method, and require alternate methods <ins style="color: red; font-weight: bold; text-decoration: none;">(possibly easier) </ins>to enable ebtables.</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">=== Test the VPN ===</td><td> </td><td style="background: #eee; font-size: smaller;">=== Test the VPN ===</td></tr> </table> Lancethepants http://wiki.dd-wrt.com/wiki/index.php?title=OpenVPN_-_Site-to-Site_Bridged_VPN_Between_Two_Routers&diff=40288&oldid=prev Lancethepants: /* Blocking DHCP requests through the VPN */ 2011-04-06T19:11:13Z <p><span class="autocomment">Blocking DHCP requests through the VPN</span></p> <table border='0' width='98%' cellpadding='0' cellspacing='4' style="background-color: white;"> <tr> <td colspan='2' width='50%' align='center' style="background-color: white;">←Older revision</td> <td colspan='2' width='50%' align='center' style="background-color: white;">Revision as of 19:11, 6 April 2011</td> </tr> <tr><td colspan="2" align="left"><strong>Line 342:</strong></td> <td colspan="2" align="left"><strong>Line 342:</strong></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">note 1: This has been tested using the wrt54gl. Some modification may be necessary depending on your router, as bootup sequences and timing differ. Mainly the sleep commands seem to be the key here, and may have to be adjusted to make things work. </td><td> </td><td style="background: #eee; font-size: smaller;">note 1: This has been tested using the wrt54gl. Some modification may be necessary depending on your router, as bootup sequences and timing differ. Mainly the sleep commands seem to be the key here, and may have to be adjusted to make things work. </td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">note 2: It appears in the forums that x86 and 2.6 builds do not work with this method, and could require alternate methods to enable ebtables.</td><td> </td><td style="background: #eee; font-size: smaller;">note 2: It appears in the forums that x86 and 2.6 builds do not work with this method, and could require alternate methods to enable ebtables.</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> </table> Lancethepants