PIA Setup Asus Merlin Firmware with Selective Routing
I have a QNAP TS-451 and the OpenVPN client sucks and doesn't stay connected for more than a few minutes. I also had other issues as well so I decided to approach the problem a different way. I bought an Asus RT-66U installed Merlin Firmware (378.55) latest as of this writing. I also wanted to use selective routing and direct only the QNAP NAS through the VPN. Here is how I setup
1. Ensure you have static IP address assigned to NAS box. I give credit where it's due and I used lweddin1 instructions as a foundation for success. However, if you download the OVPN config file it will import all the settings needed minus the certificate.
2. Copy the certificate below and paste into the Certificate Authority area. (show by lweddin1)
3. Enter your PIA user credentials and you should be able to connect.
The instructions above will direct every client on your LAN through the VPN. I only wanted my QNAP box which hosts my torrent client to use the VPN. I also noticed a slight slowdown in my connection by using the VPN. The angy wife theory applies.
4. Log back into your router and click the VPN button and OpenVPN client. Scroll down to 'Redirect Internet Traffic' and select 'Policy Rules'.
Enter a description. I put QNAP NAS and enter the ip address of that client. For destination enter 0.0.0.0. I checked 'Yes' in the box to 'Block routed clients if tunnel goes down'. I'd rather the wife not get another nastygram from our ISP.
5. Click apply and your done.
6. To verify it's working and you have a different external IP address on the QNAP putty (SSH) into the box. Open bash and type: curl -s icanhazip.com you should get a different IP address as your other clients on LAN. You can check those by by simply browsing to: https://www.whatismyip.com/
1. Ensure you have static IP address assigned to NAS box. I give credit where it's due and I used lweddin1 instructions as a foundation for success. However, if you download the OVPN config file it will import all the settings needed minus the certificate.
2. Copy the certificate below and paste into the Certificate Authority area. (show by lweddin1)
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
3. Enter your PIA user credentials and you should be able to connect.
The instructions above will direct every client on your LAN through the VPN. I only wanted my QNAP box which hosts my torrent client to use the VPN. I also noticed a slight slowdown in my connection by using the VPN. The angy wife theory applies.
4. Log back into your router and click the VPN button and OpenVPN client. Scroll down to 'Redirect Internet Traffic' and select 'Policy Rules'.
Enter a description. I put QNAP NAS and enter the ip address of that client. For destination enter 0.0.0.0. I checked 'Yes' in the box to 'Block routed clients if tunnel goes down'. I'd rather the wife not get another nastygram from our ISP.
5. Click apply and your done.
6. To verify it's working and you have a different external IP address on the QNAP putty (SSH) into the box. Open bash and type: curl -s icanhazip.com you should get a different IP address as your other clients on LAN. You can check those by by simply browsing to: https://www.whatismyip.com/
Comments
Where do you do this?:
"1. Ensure you have static IP address assigned to NAS box."
I do not see anything like "NAS box."
I'm just trying to do this on my RT-AC68U withe the current Merlin firmware 380.58. Under the routing rules, I see there is a new dropdown box Iface, which I assume means Interface, with a choice of WAN or VPN. Any idea what I should use? I am a bit of a novice at this stuff.
https://www.vpnuniversity.com/routers/how-to-setup-openvpn-asuswrt-merlin