mmajchrzycki / lantronix-openvpn

Enabling OpenVPN connection on Lantronix E210 routers

As the process is not well documented by Lantronix or anywhere in the web, here is the step by step guide on how to setup OpenVPN connection between two routers.

Generate Public Key Infrastructure with EasyRSA:

Help: https://community.openvpn.net/openvpn/wiki/EasyRSA3-OpenVPN-Howto

1. Get the easy-rsa tool

   cd
   git clone https://github.com/OpenVPN/easy-rsa.git
   cd easy-rsa/easyrsa3/
   cp vars.example vars

2. Edit vars file, especially set

   EASYRSA_DN "org"

   And assign values to:

   • EASYRSA_REQ_COUNTRY
   • EASYRSA_REQ_PROVINCE
   • EASYRSA_REQ_CITY
   • EASYRSA_REQ_ORG
   • EASYRSA_REQ_EMAIL

   ---

   NOTE

   DON'T LEAVE ANY OF THE FIELDS EMPTY!!!

   ---

3. Init PKI

   ./easyrsa init-pki

4. Generate Diffie-Hellman parameters

   ./easyrsa gen-dh

5. Create CA (Certificate Authority)

   ./easyrsa build-ca

   You have to set some password. That password will be required on the next steps.

6. Build certificate and key for server

   ./easyrsa build-server-full <SERVER_NAME> nopass

7. Build certificate for client

   ./easyrsa build-client-full <CLIENT_NAME> nopass

8. After all, you should get a files structure like

   

Setup OpenVPN server

1. Login to router and go to Services -> VPN -> OpenVPN

   

   

2. Create a new OpenVPN instance, choose a name and select Server configuration for a routed multi-client VPN

   

3. After creating, switch to advanced configuration

   

4. On the Networking tab add

   • dev and set to tun0

   

5. On the Cryptography

   • select tls_server
   • add ca and upload proper file
   • add dh and upload proper file
   • add cert and upload proper file
   • add key and upload proper file (see PKI files structure above)

   

6. Go back to Overview and enable the server

   

   Enable server (1), Save & Apply (2) and Start the server (3).

   

7. If everything went fine, you should get the server Started and Uptime timer should count the time

   

8. Open UDP port 1194 on the firewall

   Go to Firewall

   

   Go to Traffic Rules

   

   In the Open ports on router section, enter port number 1194, protocol UDP and choose a name (or left default) and click Add:

   

   Then select Save & Apply on the bottom.

Setup OpenVPN client

1. Login to router and go to Services -> VPN -> OpenVPN

   

   

2. Create a new OpenVPN instance, choose a name and select Client configuration for a routed multi-client VPN and click Add

   

3. After creating, switch to advanced configuration:

   

4. On the Networking tab add

   • dev and set to tun0

   

5. On the VPN tab

   • enable client
   • enable pull (will be visible after enabling client)
   • add remote and enter VPN Server IP address and port 1194

   

6. On the Cryptography tab

   • add ca and upload proper file
   • add dh and upload proper file
   • add cert and upload proper file
   • add key and upload proper file (see PKI files structure above)

   

7. Click Save and go back to Overview, then Enable and Start service.

   

Troubleshooting

If something is not working (whether on server or client) you can add to VPN instance verb paramter with value 11. After stopping and starting server in Status -> System Log you shoulkd get more detailed inofrmation about the problem with OpenVPN instance.