DD-WRT v24SP2-MULTI - Atheros - How to setup OpenVPN for WLAN virtual interface

Hello, I have an Atheros chip Buffalo brand router running DD-WRT. I have setup 2 wifi signals (the regular and a virtual interface). I have also configured the router to use OpenVPN using StrongVPN as the provider.

Now, how do I get devices connected to the virtual or the regular wifi interface to be routed thru the VPN, while the other wifi signal to be router thru my regular ISP.

I have attached some pictures of the wifi and the OpenVPN setup with identifying information removed. Thanks for the help, this problem has been bugging me for weeks now.
wifi-setup.jpg
OpenVPNsetup.jpg
confusednewbieAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

arnoldCommented:
You would need to VLAN the wifi, then you would need to update the iptables manually to reroute the WIFI IP range via a different path.

note that you should take care to establish a non-vpn route in the event it drops.
0
confusednewbieAuthor Commented:
thanks, coyld you provide a step by step on how to do this on the dd-wrt interface? like what sections and examples of what to input?
0
arnoldCommented:
I am not sure you can achieve the setup you want using the dd-wrt interface.

Policy based routing is a ...

The distinction you are setting
wired connection go out the internet VLAN1
wifi1 connected go out the internet VLAN1
wifi2 connected send all via OpenVPN VLAN2


you may have to use an ssh client to connect to buffalo and use/setup the iptables rules to route........


Ref article VLAN setup dd-wrt example.
http://www.experts-exchange.com/Hardware/Networking_Hardware/Routers/A_10851-DD-WRT-separate-LAN-from-WLAN-on-WRT160NL-linksys-router.html
0
Big Business Goals? Which KPIs Will Help You

The most successful MSPs rely on metrics – known as key performance indicators (KPIs) – for making informed decisions that help their businesses thrive, rather than just survive. This eBook provides an overview of the most important KPIs used by top MSPs.

confusednewbieAuthor Commented:
thanks. I tried that and waa always stuck in how to allow openvpn in just vlan2. any commands available? that is the main part I have been stuck with (after following the guide here http://www.dd-wrt.com/wiki/index.php/Separate_LAN_and_WLAN)
0
arnoldCommented:
That is the difficult part you have to use iptables SNAT on the way out to match the IP range from the VLAN2 wifi and alter the source IP such that the response will flow back through the VPN rather than sent via the Internet on the other side.

The dd-wrt version on your setup is likely customized by Buffalo.

Have you configured the VLAN of the second wifi and tagged
use
iptables -t nat -L
iptables -t filter -L


When you define the openVPN site to site. you lest the IPs in the policy based routing section that will have the WIFI2 LAN/tagged sent out to 0.0.0.0 via the tunnel.
A discussion that deals with iptables and inter vlan rules.

http://www.dd-wrt.com/phpBB2/viewtopic.php?p=431294

your need deals with inter-location routing
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
confusednewbieAuthor Commented:
Excellent answer, this pointed me on the right direction. Thanks.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Networking

From novice to tech pro — start learning today.