Anyone tried OpenVPN Client on Shield?

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
3 messages Options
Reply | Threaded
Open this post in threaded view
|

Anyone tried OpenVPN Client on Shield?

Wisiwyg
This post was updated on .
I'm considering trying OpenVPN Client out on the Shield, but wondered if anyone has already tried and confirmed what we've discussed in prior threads that given the overhead requirements of running Snort and OpenVPN on the Shield it would bog down badly.

Anyone tried this? I can run it on my router and get about 35 mbps throughput. Wondering if Shield could do better on the 125 mbps pipe.  TIA

edit: Also, I realize there's a How-To setup OpenVPN on Shield, but that is for Shield operating as the OpenVPN Server, not Client.  
Shield Pro v1, Chaos Calmer, FW 1.51 SP1, v8.3.2, Bridge Mode
Reply | Threaded
Open this post in threaded view
|

Re: Anyone tried OpenVPN Client on Shield?

Wisiwyg
This post was updated on .
I started working on this. I found a good tutorial (https://www.robertkehoe.com/2015/08/setup-openvpn-using-openwrt/) and have followed it. I am able to keep in sync until I reach:

Step 23.  From the main menu, goto: Network -> Interfaces -> LAN -> DHCP Server (below the “Common Configuration” section) -> Advanced Settings. In the “DHCP-Options” field enter the value: “6,209.222.18.222,209.222.18.218”.

In our implementation of LUCI, there is no "DHCP-Options" field in that menu. Every other option/action listed has been faithfully duplicated. Any suggestions? Anyone know enough about editing LUCI to enable that option on that menu?

I haven't attempted to run this yet as others on the network need connectivity for now. Since this is addressing DNS Leak, I'll probably try to turn it on in the next day or two to test to see if it works without the DNS Leak edits in place.

TIA
Shield Pro v1, Chaos Calmer, FW 1.51 SP1, v8.3.2, Bridge Mode
Reply | Threaded
Open this post in threaded view
|

Re: Anyone tried OpenVPN Client on Shield?

user8446
Administrator
Will this help? From the old packetinspector forum: http://itus.accessinnov.com/file/n25/How_To_Creating_OpenSSL_Certs_on_Shield.txt
Running in bridge mode, 1.51 SP1 fw