Table of Contents
VPN overview
- The term VPN stands for Virtual private network.
- Like a DMZ a VPN is a security concept, it is not a protocol (like SSH) or a certain software package
- There are multiple software packages available to set up a VPN between two or more hosts
- they all use the Server <-> Client concept and usually are incompatible with one another!
| | If your hardware has some sort of Cryptographic Hardware Acceleration you should make sure it is supported by your OS (OpenWrt) and enabled. |
| | Migration and merger wanted: We already have a couple of articles about VPN on OpenWrt: http://wiki.openwrt.org/?do=search&id=vpn you can start from scratch or migrate them |
IPsec-based VPN Solutions
→Internet Protocol Security, Openswan, strongSwan, configure strongSwan with UCI
- vpn.ipsec.basics Some basics, considerations and prerequisites for IPsec VPN
- vpn.ipsec.firewall Firewall and zones in IPsec VPN
- vpn.ipsec.site2site Setup a site to site IPsec VPN
- vpn.ipsec.certificates IPsec VPN with certificates
- vpn.ipsec.overlappingsubnets IPsec VPN with overlapping subnets
- vpn.ipsec.roadwarrior OpenWrt as IPsec gateway for road warriors
- vpn.ipsec.roadwarriorcertificates Road warrior setup with certificates
OpenVPN-based VPN Solutions
Articles we have:
- vpn.openvpn (recommended) & vpn.howto
Articles we want instead:
- vpn.server.openvpn.tun describes a TUN-based (routed tunnel, Layer3) solution
- vpn.server.openvpn.tap describes a TAP-based (bridged tunnel, Layer2) solution
- vpn.client.openvpn.tun Howto install and setup an OpenVPN Client on OpenWrt with Luci
- vpn.client.openvpn.tap Howto install and setup an OpenVPN Client on OpenWrt and share the VPN connection transparently with the router clients
Once you set up a VPN server on your OpenWrt router, you (and the other participants) will need to each install and configure a VPN client (compatible with the VPN server) on each of your host machines. For HowTos regarding that, you should visit the Wiki/Forum of your OS!
PPTP-based VPN Solutions
- vpn.client.pptp Howto install and setup a VPN client compatible with PPTP servers
- vpn.nat.pptp VPN NAT traversal (VPN Pass Through) for single/multiple LAN client(s) connecting to PPTP Servers on the WAN
Other VPN solutions
- vpn.client.vpnc
vpnc= A VPN client compatible with Cisco's EasyVPN equipment
VPN and mesh
External Documentation
- See our forum: Howto: IPSec and OpenVPN
- A whole load of OpenVPN-related articles can be found on the Project Homepage of OpenVPN:
- You can alway RTFM: http://www.openvpn.net/index.php/open-source/documentation/manuals.html or STFW: http://www.google.com/search?q=vpn&hl=en
- You do not need to read all of them, to get a VPN solution going. But for security reasons sooner or later you should make sure that all participant comprehend how your VPN works.
doc/howto/vpn.overview.txt · Last modified: 2012/05/16 21:15 by dadada