November 17, 201411 yr I am currently running v6 beta 10a and have previously asked about accessing server over the internet and was told that the only real safe way would be to setup a VPN, i have done a lot of reading about it and now have an asus RTn16 router to which i have installed a mega build of DD-wrt that has OpenVPN installed, (ive still yet to find a beginners guide to work out how to set it up ). I noticed that there is a OpenVPN plugin, i am curious to know whether i need to use this in conjunction with the router or if it stands alone. The sole reason i want to have a VPN is that my server resides at my marital home and i need to access it from elsewhere so i can maintain it, the only other thing i might need to do is download files (films mainly) from it to here..so i m not really sure where its best to use the OpenVPN router or server ?...i would like to have the server switched off at night but be able to have it WOL, its connected directly to the DD-WRT router so this shouldnt be a problem unless i cant send WOL packets over the internet ?
November 17, 201411 yr Peter's open vpn plugin is really easy to setup and use. You just have to forward port udp 1194 to unRAID and copy the keys to the client. I use openvpn connect on my android phone and import the keys to it. I also used it to help setup my e3000 tomato router with openvpn on it. I have switched back to the plugin though. Router seemed slower. Didn't really run any tests to confirm.
November 17, 201411 yr That particular router has a fairly beefy CPU as routers go, so it would probably be better to use it. No, you can't really send Wake On Lan (notice the LAN instead of WAN part) packets directly over the internet, but it shouldn't be very hard to set up the router so it can send or recognize and forward the WOL message.
November 17, 201411 yr I have WOL over Internet working on my dd-wrt router , it's actually power on my server , I shutdown instead to sleep.
November 17, 201411 yr Author I have WOL over Internet working on my dd-wrt router , it's actually power on my server , I shutdown instead to sleep. I'd be interested to see how you have that setup. is it safe to say that I can follow a guide to setup on the openvpn website or do I need to find one specific for use on dd-wrt ?.. anyone know a good easy to follow one ?
November 17, 201411 yr I use a RT-N16 with Shibby's Tomato running Open VPN. Way back when I got my router I used DD-WRT. I never could get Open VPN to run correctly. This got me to move over to Tomato. On Tomato these are the basic steps: - Enable the USB port on the router - Using a thumb drive format it as FAT16. I will have to look at mine, FAT32 might work, I don't remember. - Share the thumb drive as SAMBA - Create a directory for your Open VPN certificate files. This eliminates storing them in NVRAM. You can run out of NVRAM otherwise. If you run out of NVRAM, the router will reboot and reset all of the setting to default, ie it will wipe out you configuration. - Go through the documented procedure and create your certificates. - Copy your certificates to the thumb drive, named appropriately - Create configure the OpenVPN server, point to the USB directory for the certificates. - Enable the server ---------------------------------------------- - Use a client certificate on your PC. I have never done this, as I just use my iPhone to connect to my home network. Save a copy of the firmware version you installed on the router on the thumb drive. Back up a copy of the router configuration and save it on the thumb drive This way you have a backup of the router firmware and config with the router. The QoS software work great in the Shibbys build. He uses Toastmans mods and config. ---------------------------------------------------------------------------------------------------------- DD-WRT has some good guides that can be easily modified if you decide to use a version of Tomato. http://www.dd-wrt.com/wiki/index.php/OpenVPN http://openvpn.net/index.php/open-source/documentation/howto.html#pki ---------------------------------------------------------------------------------------------------------- As far as using WOL, you can do it with no issue, I do it all the time. Basically, you use a unique port on the WAN side, do not use port 9 except for testing. When you forward it, you forward it to the LAN IP setup to broadcast. The WOL packet is then sent to all devices and the one with the correct MAC responds. There is a a command you have to put in the admin section so it runs when the router boots. You can also use this same methodology and save you U/D statistics to the thumb drive. This way you can see you statistics over time. Set hem to save every 15 minutes or hour and you want loose to much data if the router crashes and has to be power cycled. ---------------------------------------------------------------------------------------------------------- http://www.dd-wrt.com/wiki/index.php/WOL Remote Wake On LAN via Port Forwarding To remotely wake up a computer over the Internet using Wake On LAN- follow these instructions: 1 - Create a port forward rule on the Web Interface (Applications & Gaming -> Port Range Forward) to the chosen ip: wol | 9 | 9 | udp | 192.168.1.254 | x Here, 9 is the default, but you can use any port number so long as your client wake-up application can talk to a port other than 9. Most WOL services will use either UDP port 7 or 9. 192.168.1.254 is just an IP address in your LAN's subnet; it can be any IP, as long as it is not assigned to any device on your network. 2 - Add a static ARP entry by typing the following line into the Administration -> Commands section of the Web Interface and then saving with Save Startup. arp -i br0 -s 192.168.1.254 FF:FF:FF:FF:FF:FF Do not change the FF:FF:FF:FF:FF:FF MAC address; this is a special MAC address used when broadcasting. WOL magic packets are constructed using the MAC address of the target computer, but should be and almost always are sent via broadcast; the MAC address used here controls with how the packet is sent, not how it is formed. The 192.168.1.254 IP address should correspond with the IP address you used in the previous step. Again, this IP should be in your LAN's subnet, and you must not assign this IP address to any actual device on your network. Explanation/rationale for this setup: Normally, WOL magic packets are sent to a special broadcast IP--to the final .255 in a subnet or to 255.255.255.255. Since port-forwarding to these special dedicated broadcast IPs does not work, what we need to do is create our own broadcast IP by taking an unused IP and assigning it a broadcast MAC and then port-forward to that. As an optional alternative, instead of arp, you can use ip neigh (which does the exact same thing as arp). Support for ip neigh was removed from DD-WRT starting with build 17650, and arp is unavailable in DD-WRT builds older than 5672. ip neigh change 192.168.1.254 lladdr ff:ff:ff:ff:ff:ff nud permanent dev br0 ip neigh add 192.168.1.254 lladdr ff:ff:ff:ff:ff:ff nud permanent dev br0 3 - Reboot the router, or execute the startup commands manually. To wake your computer from the internet using the DD-WRT device DynDNS name (or if you know it, the public IP of the router), try one of the following services; Mestrona's online WOL. You need to forward port 9 udp in step one, to use this service. Wake-On-LAN Online. It works both on ports 7 and 9 and allows WOL by a single URL of the form: http://mobile.wakeonlan.me/?ip=HOSTNAME&mac=MACADDRESS. It also allows for scheduled wakeup over the internet. To use the WOL Magic Packet application from a second PC: Host Name: DynDNS name of your DD-WRT device. Subnet Mask: 255.255.255.255 MAC Address: WOL computer MAC address, not the DD-WRT MAC. Click the green Send button.
November 18, 201411 yr Author Wow... that sounds involved. I did read something about nvram getting filled but this can be overcome by turning off ttraff but I can't say I have seen that option. I like the idea that you have it run from a usb stick.. wonder if this can be done with dd-wrt. How does this guide fare. . http://www.howtogeek.com/64433/how-to-install-and-configure-openvpn-on-your-dd-wrt-router/ It's dated 2011.?
Archived
This topic is now archived and is closed to further replies.