Untangle as VPN Server with DD-WRT v24 VPN [Archive]

elkabong33

12-10-2007, 07:18 PM

Hello Everybody,

Untangle seem to be a great product and I am at present trying to get my head around the OpenVPN side of things and need your help.

I have installed Untangle today and trying to test OpenVPN with my buffalo WHR-HP-G54 router running the DD-WRT v24 VPN (OpenVPN client) Firmware from www.dd-wrt.com.

The firmware has a section for a VPN Client where I would just copy and paste the certificate information. However, I think I have to use the VPN client instead of VPN site as the router is not another Untangle Server. Is this correct?

Please see the attached and advise how best to proceed to get my VPN going between the Buffalo router and the Untangle Server.

Thanks in Advance

elkabong33

12-11-2007, 12:54 PM

Hello Everybody,

Untangle seem to be a great product and I am at present trying to get my head around the OpenVPN side of things and need your help.

I have installed Untangle today and trying to test OpenVPN with my buffalo WHR-HP-G54 router running the DD-WRT v24 VPN (OpenVPN client) Firmware from www.dd-wrt.com.

The firmware has a section for a VPN Client where I would just copy and paste the certificate information. However, I think I have to use the VPN client instead of VPN site as the router is not another Untangle Server. Is this correct?

Please see the attached and advise how best to proceed to get my VPN going between the Buffalo router and the Untangle Server.

Thanks in Advance

Has anyone manage to get a Site to Site VPN going with Untangle and a router with dd-wrt vpn firmware?

I forgot to mention that my Untangle server is in a Datacentre and the router with dd-wrt is at home.

gotkimchi

12-11-2007, 03:29 PM

Yup, looks like you will need to configure the DD-WRT as a VPN client. When you download the VPN client config files, it does provide you with the certs and the key. Just input those on your DD-WRT, and it should work. I haven't tried it, but from looking at the DD-WRT and the Untangle VPN client config files, everything matches.

Silver Bullet

12-11-2007, 03:57 PM

I'm upset, my dd-wrt doesn't have an openvpn client :mad:

I'm with gotkimchi, looks like it will work as a client.

gotkimchi

12-11-2007, 04:37 PM

Hmmmm.... Maybe it doesnt work. I can see that the DD-WRT can tunnel to the Untangle, however, if you are hanging off the DD-WRT, you will not go through the tunnel. In order to make it work, I bet you have to configure it as a site to site VPN or somehow force a route to the tunnel.

gotkimchi

12-11-2007, 04:40 PM

In the meantime, you can install the VPN client to your end device instead of the DD-WRT.

Silver Bullet

12-11-2007, 08:33 PM

Can you find the client config in the dd-wrt and see what settings it is trying to use?

elkabong33

12-12-2007, 03:41 PM

Yup, looks like you will need to configure the DD-WRT as a VPN client. When you download the VPN client config files, it does provide you with the certs and the key. Just input those on your DD-WRT, and it should work. I haven't tried it, but from looking at the DD-WRT and the Untangle VPN client config files, everything matches.

Yup DD-WRT is configured as the VPN Client. I have copied and pasted the certificates into the routers OpenVPN interface. Now the router does connect to the Untangle Server and I am able to ping the IP Address that has been assigned to the router by the Untangle Server from my Laptop. However I cannot get out of the VPN or even connect to the Untangle Server's internal IP via the VPN.

Any ideas?

Silver Bullet

12-12-2007, 10:17 PM

Did you export internal host and dns?

Did you create firewall rules to allow said traffic?

elkabong33

12-12-2007, 11:00 PM

Did you export internal host and dns?

Did you create firewall rules to allow said traffic?

Yes, the internal hosts and dns have been exported. I am only using the router and the OpenVPN modules.

Untangle support was able to connect and browse to the internal IP of the box so I believe the problem is the DD-WRT firmware.

Silver Bullet

12-13-2007, 06:21 AM

You may need to setup static routes on the dd-wrt then?

elkabong33

12-13-2007, 06:50 AM

You may need to setup static routes on the dd-wrt then?

Yep, I did try creating static routes as well and they don't seem to work. The Untangle client works fine on my Windows Laptop but no joy with the dd-wrt firmware. I created a VPN client fort he guys over at DD-WRT and they are in the process of looking into it as well.

Elkabong33