braian87b

These instructions should work for Streisand as well for others VPN providers (Streisand is a Software that automatically configures a VPS online server with OpenVPN and other VPN/Proxy Softwares in order to have a private VPN Server)

These instructions are for getting an OpenWrt Based Router working as OpenVPN Client (should work for LEDE, Gargoyle and another distributions). Computers connected to Lan Ports of the OpenWrt Router will navigate through the Internet connection of the OpenVPN Server (in this case the Streisand one previously set up) you need a working Router with OpenWrt based firmware flashed on it (LEDE or eko.one.pl could also work) steps works well on Chaos Calmer 15.05 or 15.05.1.

1. You need to telnet 192.168.1.1 (OpenWrt Router) and set up a password using passwd You can skip this if you already have a password and can connect using ssh.

braian87b

# This script allow to setup a working OpenWRT / LEDE router with two USB ports
# or a USB Hub with a PenDrive and a Floppy Disk USB Drive,
# it will automatically create a Floppy Disk image and copy all data to a directory too.
# Optionally (disabled because it takes ages) will erase all data and blank it and format it.
# Floppy Disk rip process takes about 50 seconds, erasing and formating idk but takes more than 3 minutes.

opkg update
# Needed to mount filesystems
opkg install block-mount

braian87b

Ver imagen: https://forum.lede-project.org/t/help-to-create-2-wifi-networks-in-the-same-router/3320/6
English instructions: https://gist.github.com/braian87b/2333a32577a221c8d62b5ce8b54a4d95

Si tu Router es el de la izquierda del grafico:

# Borras interfaces wifi que tengas:

uci del wireless.@wifi-iface[-1]
uci del wireless.@wifi-iface[-1]
uci del wireless.@wifi-iface[-1]

braian87b

Refer to image: https://forum.lede-project.org/t/help-to-create-2-wifi-networks-in-the-same-router/3320/6
Instrucciones en español: https://gist.github.com/braian87b/2333a32577a221c8d62b5ce8b54a4d95

# Delete existing wireless interfaces:

uci del wireless.@wifi-iface[-1]
uci del wireless.@wifi-iface[-1]
uci del wireless.@wifi-iface[-1]

# Important, to avoid conflicts with phisical WAN port (you will not be using it, if you want to use it too you had to use MWAN3)

braian87b

# ========================================================
# Setup a Dumb AP, Wired backbone for OpenWRT / LEDE
# ========================================================
# Set lan logical interface as bridge (to allow bridge multiple physical interfaces)
uci set network.lan.type='bridge'
# assign WAN physical interface to LAN (will be available as an additional LAN port now)
uci set network.lan.ifname="$(uci get network.lan.ifname) $(uci get network.wan.ifname)"
uci del network.wan.ifname
# Remove wan logical interface, since we will not need it.
uci del network.wan

braian87b

# ====================================================================================
# Steps for Main Router (must have connected internet on WAN port)
# ====================================================================================
# Set your network IP address configuration default is 192.168.1.0/24
uci set network.lan.ipaddr='192.168.1.1'

# Recommended, to identify on network and when logged on
uci set system.@system[0].hostname='MainRouter'
uci set network.lan.hostname="`uci get system.@system[0].hostname`"

braian87b

# This is done by luci (it just sets defaults and assigns an ID to each vlan entry)
uci set network.@switch[0].mirror_source_port='0'
uci set network.@switch[0].mirror_monitor_port='0'
uci set network.@switch_vlan[0].vid='1'
uci set network.@switch_vlan[1].vid='2'

# For tl-wr1043nd-v2:
# Switch, LAN (on tl-wr1043nd-v2 we must enable tagging on CPU port 0)
uci set network.@switch_vlan[0].ports='0t 1 2 3 4' # previously '0 1 2 3 4'
# Switch, WAN

braian87b

# Client Bridged / Client Mode / RelayD and IGMPProxy (It works)
# RelayD is to redirect packages and IGMP is for redirect IGMP packages
# Our network is 192.168.1.0/24

# Steps:
# Configure WAN as static
# We should edit our wan iface and put static IP
uci set network.wan='interface'
uci set network.wan.proto='static'
uci set network.wan.ipaddr='192.168.1.239' # Main Network IP

braian87b

In experience to get a proper working multiple wan configuration using mwan3 starting from scratch you should:

Important: this works well on OpenWRT 15.05.1, on newer versions there was some breaking changes, for example, the wan ifaces have ipv6 capability and now are named with letters ("wan, wanb... , wanc" instead of "wan, wan2... wan3" so wanb6 means 2nd wan ipv6.): https://github.com/openwrt/packages/blob/master/net/mwan3/files/etc/config/mwan3

The official documentation seems to be very detailed and up to date, I recommend reading those first: https://openwrt.org/docs/guide-user/network/wan/multiwan/mwan3 but I recommend to give a look at my config file below, since my approach for policyes is very nice.

First of all: Activate conntrack, docs says that is important and neccesary to get MWAN3 work properly, and it is needed to reboot:

braian87b

# My documentation:
#
# Important: this works well on OpenWRT 15.05.1, on newer versions there was some breaking changes, for example, the wan ifaces have ipv6 capability and now are named with letters ("wan, wanb... , wanc" instead of "wan, wan2... wan3" so wanb6 means 2nd wan ipv6.): https://github.com/openwrt/packages/blob/master/net/mwan3/files/etc/config/mwan3
#
# We have Interfaces, Members, Policyes y Rules:
#
# Interfaces: Allows to identify the wan interface, we just need to have it enabled`
# the others parameters are only to track if the interface it is up or down.
#
# Members: Can be defined in some metric and weight, both values will be important ambos when used in policyes.