Mistermoonlight
Regular Contributor
My main purpose is to surf safely on public hotspots by using my router and tunelling the browsing through openvpn setup on my router (using "Direct clients to redirect Internet traffic" option).
I have setup openvpn server on my router using RMerlin firmware 270.24 following Rmerlin suggested openvpn tutorial on the web. I was able to configure the setup for a windows xp laptop openvpn client and the tunnelling is working correctly with the router when using the TCP protocol for openvpn server on the router.
But if i try to change to UDP protocol (everything else is not changed), it is not working at all. I can see an error message on openvpngui (xp laptop) that the packet on port 1194 for example is rejected. Openvpn is setup with firewall option set to "automatic". It is like that when the protocol is UDP, this firewall option does not setup a rule correctly so the packet on port 1194 is rejected by the router?
Any clue
I am also using static key (Extra HMAC authorization) to add more security (and not just tls alone), and i want to know if i can add password authorization on top of this (so if i setup the openvpn client on an office computer, a password would be asked also before allowing connection to my router)?
Thanks
I have setup openvpn server on my router using RMerlin firmware 270.24 following Rmerlin suggested openvpn tutorial on the web. I was able to configure the setup for a windows xp laptop openvpn client and the tunnelling is working correctly with the router when using the TCP protocol for openvpn server on the router.
But if i try to change to UDP protocol (everything else is not changed), it is not working at all. I can see an error message on openvpngui (xp laptop) that the packet on port 1194 for example is rejected. Openvpn is setup with firewall option set to "automatic". It is like that when the protocol is UDP, this firewall option does not setup a rule correctly so the packet on port 1194 is rejected by the router?
Any clue
I am also using static key (Extra HMAC authorization) to add more security (and not just tls alone), and i want to know if i can add password authorization on top of this (so if i setup the openvpn client on an office computer, a password would be asked also before allowing connection to my router)?
Thanks