OpenWRT: routing lan client with static IP to custom VPN interface

OpenWRT: Routing LAN Client with Static IP to Custom VPN Interface

OpenWRT is a popular open-source firmware that can be installed on many routers to enhance their functionality. One of the powerful features of OpenWRT is the ability to route specific LAN clients to a custom VPN interface. This allows you to protect specific devices on your network with the added security and privacy of a VPN connection.

In this article, we will guide you through the process of routing a LAN client with a static IP to a custom VPN interface using OpenWRT. Please note that this guide assumes you have already installed OpenWRT on your router and have a working VPN connection set up.

Step 1: Determine the LAN Client's Static IP

To begin, you need to determine the static IP address of the LAN client that you want to route through the VPN interface. This can usually be found in the settings of the device or by checking your router's DHCP lease table.

Step 2: SSH into your OpenWRT Router

Next, you'll need to SSH into your OpenWRT router. You can do this by opening a terminal on your computer and typing:

Replace 192.168.1.1 with the IP address of your router. If prompted, enter your router's password to log in.

Step 3: Edit the Firewall Configuration

Once you are logged into your router via SSH, you need to edit the firewall configuration file. Type the following command to open the file in a text editor:

Scroll down to the section that starts with config zone and find the zone that corresponds to your LAN interface (e.g., lan). Within that zone, add the following line:

Save the file and exit the text editor.

Step 4: Edit the Network Configuration

Next, you need to edit the network configuration file. Type the following command to open the file in a text editor:

Find the section that starts with config interface 'vpnclient' and add the following lines:

Save the file and exit the text editor.

Step 5: Restart the Firewall and Network Services

After making the above changes, you need to restart the firewall and network services for the changes to take effect. Type the following commands:

Step 6: Configure the Static Route

Now it's time to configure the static route for the LAN client. Type the following command:

Replace [LAN_CLIENT_IP] with the static IP address of your LAN client and [VPN_GATEWAY_IP] with the IP address of your VPN gateway. This will route all traffic from the LAN client through the VPN interface.

Step 7: Test the Configuration

Finally, you should test the configuration to ensure everything is working correctly. Connect the LAN client to your network and verify that its traffic is being routed through the VPN interface. You can use online tools like WhatIsMyIP to check the public IP address of the client.

Congratulations! You have successfully routed a LAN client with a static IP to a custom VPN interface using OpenWRT. Now your chosen device will benefit from the added security and privacy of a VPN connection.

References