DD-WRT v24SP2-MULTI - Atheros - How to setup OpenVPN for WLAN virtual interface

confusednewbie
confusednewbie used Ask the Experts™
on
Hello, I have an Atheros chip Buffalo brand router running DD-WRT. I have setup 2 wifi signals (the regular and a virtual interface). I have also configured the router to use OpenVPN using StrongVPN as the provider.

Now, how do I get devices connected to the virtual or the regular wifi interface to be routed thru the VPN, while the other wifi signal to be router thru my regular ISP.

I have attached some pictures of the wifi and the OpenVPN setup with identifying information removed. Thanks for the help, this problem has been bugging me for weeks now.
wifi-setup.jpg
OpenVPNsetup.jpg
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Distinguished Expert 2017

Commented:
You would need to VLAN the wifi, then you would need to update the iptables manually to reroute the WIFI IP range via a different path.

note that you should take care to establish a non-vpn route in the event it drops.

Author

Commented:
thanks, coyld you provide a step by step on how to do this on the dd-wrt interface? like what sections and examples of what to input?
Distinguished Expert 2017

Commented:
I am not sure you can achieve the setup you want using the dd-wrt interface.

Policy based routing is a ...

The distinction you are setting
wired connection go out the internet VLAN1
wifi1 connected go out the internet VLAN1
wifi2 connected send all via OpenVPN VLAN2


you may have to use an ssh client to connect to buffalo and use/setup the iptables rules to route........


Ref article VLAN setup dd-wrt example.
http://www.experts-exchange.com/Hardware/Networking_Hardware/Routers/A_10851-DD-WRT-separate-LAN-from-WLAN-on-WRT160NL-linksys-router.html
Ensure you’re charging the right price for your IT

Do you wonder if your IT business is truly profitable or if you should raise your prices? Learn how to calculate your overhead burden using our free interactive tool and use it to determine the right price for your IT services. Start calculating Now!

Author

Commented:
thanks. I tried that and waa always stuck in how to allow openvpn in just vlan2. any commands available? that is the main part I have been stuck with (after following the guide here http://www.dd-wrt.com/wiki/index.php/Separate_LAN_and_WLAN)
Distinguished Expert 2017
Commented:
That is the difficult part you have to use iptables SNAT on the way out to match the IP range from the VLAN2 wifi and alter the source IP such that the response will flow back through the VPN rather than sent via the Internet on the other side.

The dd-wrt version on your setup is likely customized by Buffalo.

Have you configured the VLAN of the second wifi and tagged
use
iptables -t nat -L
iptables -t filter -L


When you define the openVPN site to site. you lest the IPs in the policy based routing section that will have the WIFI2 LAN/tagged sent out to 0.0.0.0 via the tunnel.
A discussion that deals with iptables and inter vlan rules.

http://www.dd-wrt.com/phpBB2/viewtopic.php?p=431294

your need deals with inter-location routing

Author

Commented:
Excellent answer, this pointed me on the right direction. Thanks.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial