Configuring the LRT2x4 router and VPN Clients using OpenVPN

OpenVPN is an application that implements Virtual Private Network (VPN) for creating secure point-to-point connections, which allow OpenVPN clients such as laptops, smartphones, and tablets to connect using two-factor authentication.  It supports SSL/TLS for key exchange as part of the authentication, in addition to username or password.  It also has the capability to support up to five (5) OpenVPN Tunnels.
 
QUICK TIP:  OpenVPN Tunnel can be either full or split.  The Full Tunnel forces all traffic to be forwarded to the OpenVPN Server, whereas a Split Tunnel allows an OpenVPN client to access Internet-bound resources via local Internet Service Provider (ISP).


The steps below will show you how OpenVPN works on a local setup with your Linksys Gigabit VPN Router.
 
IMPORTANT:  Make sure you have downloaded the OpenVPN Client.  Click here to get one.
 
i. Setting up OpenVPN
ii. Installing OpenVPN Client
iii. Verifying IP addresses
 
Setting up OpenVPN

 
Step 1:
Reset the router to its factory default settings.
 
Step 2:
Connect all devices as the topology below where PC1 is on the LAN side and PC2 is on the WAN side.

NOTE:  PC2 serves as an OpenVPN client that is trying to access PC1 in the LAN of LRT2x4.


 
User-added image
 
Step 3:
Access the router's web-based setup page.  To learn how, click here.
 
Step 4:
Click Configuration.

 
User-added image
 
Step 5:
Click Network.  Under the WAN SETTING section, click the configuration button of WAN1.

 
User-added image
 
Step 6:
Configure the WAN CONNECTION according to the following information.  Click Save.

 
User-added image
 
Step 7:
Click OpenVPN.

 
User-added image
 
Step 8:
Under OPENVPN SERVER STATUS of the Summary page, click the Config. button.

 
User-added image
 
Step 9:
Click the Enable OpenVPN Server checkbox. 

User-added image

Step 10:
Select Password + Certificate as the Authentication Type.  Enter your configuration settings.

 
User-added image
 
NOTE:  This option is only applicable if you selected Certificate or Password + Certificate as the authentication type.
  • Authentication Type – Select Password, Certificate or Password + Certificate.  When you change authentication type, all client configurations and current used certificates will be cleaned up.
  • Server IP Address – Enter a virtual IPv4 address for the server.  The default IP address is 172.31.0.0.
  • Subnet Mask - Enter the IPv4 subnet mask.
  • Protocol - Select either TCP or UDP protocol.
  • Port - Configure OpenVPN server listen port.  The the default value is 1194.
  • Encryption - Select encryption mode:  NULL, DES, 3DES, AES-128, AES-192 or AES-256
Step 11:
Scroll down to the Certificate Settings section, then enter the necessary information in the fields provided.  Click Save.
 
QUICK TIP:  Make sure the following fields are filled out:  Organization Name, Common Name, and Valid Through.

 
User-added image
 
NOTE:  This option is only applicable if you selected Certificate or Password + Certificate as authentication type.
  • Country Name (C)* - Select a country for server certificate.
  • State or Province Name (ST) - Enter the state or province name.
  • Locality Name (L) - Enter locality name.
  • Organization Name (O)* - Enter the organization name. 
  • Common Name (CN)* - Enter a common name for the certificate.
  • Email Address (E) - Enter an Email address.
  • Key Encryption Length* - Select either 1024 or 2048 for the key encryption length.
  • Valid Through* - Enter a date for when the certificate should expire.  The start date will be the date the certificate was created. 
Step 12:
Under OPENVPN CLIENT STATUS of the Summary page, click the Add button.

 
User-added image
 
Step 13:
Enter the necessary information in the fields provided.  Click Save.
 
QUICK TIP:  Make sure the following fields are filled:  OpenVPN Server, Username, Password, Common Name, and Valid Through.

 
User-added image
  • Authentication Type - Displays current authentication type.
  • Enable - Indicates whether this client is enabled or not.
  • OpenVPN Server – Enter OpenVPN server IPv4 address or DNS resolved name.  This is the Router’s WAN IP address or FQDN name.
 
NOTE:  The OpenVPN Server of LRT2x4 needs a virtual IPv4 address, which has a default 172.31.0.0 with subnet mask of 255.255.255.0.
 
  • Username – Enter a username for the OpenVPN client.  This option is only available if Password or Password + Certificate is selected under the authentication type.
  • Password – Enter a password for the OpenVPN client.  This option is only available if Password or Password + Certificate selected under the authentication type.
Step 14:
Under OPENVPN CLIENT STATUS section of the Summary page, click the Export or Email button.
 
User-added image
 
  • Export – Export the OpenVPN Client configuration file, you don’t need to do any configuration for the OpenVPN client.
User-added image
 
  • Email – The OpenVPN Client configuration file can be sent through Email.  Configure the Outgoing Mail Server to proceed.
 
 User-added image
 
For instance, use the Google SMTP server for sending the mail.  The Sender will be the email address of sender shown on the email.  The Mail Server would be the name of Google SMTP server.  Google SMTP server is with SSL Authentication type and 465 SMTP Port.  Username and Password are the sender’s login email account information.  Save the provided details.
 
User-added image
 
Once you’re finished configuring the MAIL SERVER, enter the client’s email address in the Recipient or Carbon Recipient field.  The email recipient can download the OVPN file from the email.
 
User-added image
 
To check if the email has been successfully sent, you can check it under Log > System Log > View System Log.
 
User-added image
 
If the mail has been successfully sent, you will see a message similar to the message below.
 
User-added image
 
Installing OpenVPN Client

Step 1:
Install the OpenVPN Client on PC2.  Click here to download the installer.
 
Step 2:
Go to Start > All Programs > OpenVPN > Shortcuts > OpenVPN configuration file directory.  Open the OpenVPN client configuration folder.

 
User-added image
 
Step 3:
Copy and paste the OpenVPN client configuration file in the folder.

 
User-added image
 
Step 4:
Make sure the IP addresses configuration is correct on PC2.

 
User-added image

Step 5:
Click the OpenVPN client icon then click Connect.  The OpenVPN client will auto connect to the OpenVPN server without extra settings.

 
User-added image
 
If all the configurations and connection are OK, the OpenVPN client will prompt for User Authentication.
 
Step 6:
Enter the account information provided from Step 13 above.  Click OK.
 
User-added image
 
If the username and password are correct, the OpenVPN will be established successfully.

Verifying IP addresses

Verify that PC2 got the Virtual IPv4 address.

 
Step 1:
Click the User-added image icon in the Charms bar.  Enter “command prompt” in the search field and then, click Command Prompt from the search results.

 
User-added image
 
Step 2:
Type “ipconfig” then press Enter.

 
User-added image
 
Step 3:
Make sure PC2 can PING the LAN gateway.  Type “ping 192.168.1.1” then press Enter.
 
User-added image
 
Once the local setup passes the testing, you can now plug the LRT2x4 into the modem and let OpenVPN client connect from the Internet.  
You may now also connect your laptops, smartphones and tablets to access the VPN connection.  To know how to configure OpenVPN on an iOS device, click here.  For Android™ devices, click here.

Was this support article useful?

Additional Support Questions?
Search Again