OpenVPN client, not sure how to solve this...

[Ancaster]

One modem>DlinkDIR655(stock)>RT-N66U(VPN).... how?

Edit: Now that Xmas is over, I have some time to do this.
So I'd like to give my iPads and AppleTV 24/7 U.S. VPN access via the N66; a server, 2 wireless printers, and other wired computers and laptops will also be connected to the N66.
On the stock DIR655, I'll have one nettop and 3 smartphones connected to it.
The nettop will occasionally run VPN services based in various countries on demand via it's computer VPN app.

What settings do I use on each router so everything can see the server and printers connected to the N66? Possible?

 

[Ancaster]

Will I suffer performance anywhere if I connect the N66 (VPN router 192.168.2.1) to my Dlink655 (nonVPN 192.168.1.1)?

The Dlink is an extra router I have.

 

[CaptainSTX]

Will I suffer performance anywhere if I connect the N66 (VPN router 192.168.1.2) to my Dlink655 (nonVPN 192.168.1.1)?

The Dlink is an extra router I have.

What you want is a dual gateway for assigning a device either a local connection to your ISP or a VPN connection through your VPN service provider requires a dual gateway. The only one that I am aware of is a dual gateway customized Tomato version offered by Sabai Technology. The on Asus model it runs on is the RT-N16. It also runs on Linksys E2000, E3000 & E4200. I run it on an E3000 and it works well for me. Local or VPN connection is determined by the devices MAC address with the default unknown devices being local ISP.

Running your connection through a VPN will result in a slow down. Pick the nearest VPN server to your physical location that is in the USA.

If you don't want to purchase a router that will support a dual gateway then you need to run dual networks.

Hook your DLINK 655 directly to your modem. Then assign your Asus a static IP that is in the subnet of your DLINK and put this IP in the DMZ (You may not need to do this, but I find it helps me to have my VPN router in the DMZ.)

Set it up the Asus as an AP with its own SSID on a different subnet than the Dlink and allow it to assign DHCP addresses. Run an Ethernet connection from a LAN port on your Dlink to the WAN port on the Assus.

Then devices that need VPN connect to the Assus and other devices connect to the Dlink. Use MAC filtering if you want to allow only certain devices to connect to a particular network.

 

[Ancaster]

Thanks! I wonder if a stable custom Tomato FW exists for N66?
I'm aware of VPN slowdown but how about hardware configuration slowdown by using the 2 routers?

 

[CaptainSTX]

Thanks! I wonder if a stable custom Tomato FW exists for N66?
I'm aware of VPN slowdown but how about hardware configuration slowdown by using the 2 routers?

It seems like it would have some impact. Run 30 -50 Speedtests using the N66 and the VPN over a few days. Be sure to include lots of tests in the time slots you will be streaming. Compute your average speed.

Hook up the N66 behind the Dlink and repeat the tests. See how much if anything you lose.

It may not make any difference in the quality of your streaming. I have a 5 Mbps internet connection. When I use my VPN I have to connect to a server 1200 miles distant. This drops my download speed to 3.5 Mbps. I have no problems streaming video on my Roku or a PC.

 

[Ancaster]

Hook your DLINK 655 directly to your modem. Then assign your Asus a static IP that is in the subnet of your DLINK and put this IP in the DMZ (You may not need to do this, but I find it helps me to have my VPN router in the DMZ.)

Set it up the Asus as an AP with its own SSID on a different subnet than the Dlink and allow it to assign DHCP addresses. Run an Ethernet connection from a LAN port on your Dlink to the WAN port on the Assus.

Then devices that need VPN connect to the Assus and other devices connect to the Dlink. Use MAC filtering if you want to allow only certain devices to connect to a particular network.

Does the method you describe above allow shares? For instance, if my server is connected to the R66, will a computer on the dlink see it?

I think I need a little bit more help configuring this...

What about THIS method?

 

[Ancaster]

Bump.
Should I do CaptainSTX or the link I provided to enable everything to see the server and wireless printers connected to the N66?

 

[CaptainSTX]

Dual Router Setup

I skimmed through the thread you sent me and it is basically the same setup I suggested.

Because you are connecting a LAN port on your primary network to the WAN port on your VPN connected router your primary network looks at the traffic coming from devices connected to the second router as WAN traffic and therefore not part of your network and normally will not be able to share resources on your LAN.

It is possible to make resources on your LAN available to computers connecting from the WAN, but depending on how you do this, the upload and download speeds for sharing may be limited by the speed of your internet connection. My VPN provider gives me a static IP so if your VPN supplier does the same you at least avoid the complication of adding a DDNS provider to your networking mix.

The least expensive and most straight forward way is to manually switch to your VPN network when you want the benefits it offers and connect directly to your local ISP on your other network when maximum speed is more important.

A second option is store the files you want to share in the cloud and enable cloud printing so anyone on either of your networks can access files and print.

But the most simplest solution is still to purchase a router with software that will let you run a dual gateway. They are available starting at $129.95.

 

[Ancaster]

Thanks CaptainSTX.
Stupid question, could the nettop be wired to the dlink (network1) but wireless to the N66 (network2) when I need to print or transfer files to N66 devices?

Your method makes logical sense but I'm confused by the instructions:

Hook your DLINK 655 directly to your modem. Then assign your Asus a static IP that is in the subnet of your DLINK and put this IP in the DMZ (You may not need to do this, but I find it helps me to have my VPN router in the DMZ.)

Set it up the Asus as an AP with its own SSID on a different subnet than the Dlink and allow it to assign DHCP addresses. Run an Ethernet connection from a LAN port on your Dlink to the WAN port on the Assus.

Then devices that need VPN connect to the Assus and other devices connect to the Dlink. Use MAC filtering if you want to allow only certain devices to connect to a particular network.

Can you provide numerical examples?
I'm not sure what you mean by assigning a static IP in the subnet of the dlink, then setup the Asus with its own SSID on a different subnet.

 

[CaptainSTX]

Thanks CaptainSTX.
Stupid question, could the nettop be wired to the dlink (network1) but wireless to the N66 (network2) when I need to print or transfer files to N66 devices?

Your method makes logical sense but I'm confused by the instructions:



Can you provide numerical examples?
I'm not sure what you mean by assigning a static IP in the subnet of the dlink, then setup the Asus with its own SSID on a different subnet.

You can connect to run network using WiFi and another using Ethernet but being connected to both at the same time will cause a multitude of problems. I'm not saying it can't be done, but my advice is disconnect from one network before connecting to another.

HERE IS MY NETWORK SETUP:

Using the software/ firmware on each individual router or AP the LAN IP was set as follows: (If you use automatic on the APs you will have trouble finding the APs to make changes.)

TP-LINK Router 192.168.1.1
Sabai E3000 AP VPN 192.168.1.5
54G DD-WRT AP VPN 2 192.168.1.8
ASUS N66U AP 192.168.1.10

The above four devices DHCP ranges are set as follows:

DEVICE DHCP Range
TP-LINK R860 Router 192.168.1.100 192.168.1.125
Sabai E3000 VPN + Local AP 192.168.199.100 192.168.199.119
54G DD-WRT VPN AP 192.168.1.175 192.168.1.179
ASUS N66U AP (automatic IPs assigned by router

The two APs point at 192.168.1.1 as the gateway. (This is the LAN IP if the router.)

Subnet on all devices 255.255.255.0

Hope this helps.


PS: If anyone want to know why I run two VPNs my wife is Swedish and likes to log into Swedish networks in Swedish. The other VPN gives my a secure US presence.