L2TP Client: OpenWRT with Policy Based Routing: Difference between revisions

← Older edit

L2TP Client: OpenWRT with Policy Based Routing (view source)

Revision as of 15:11, 5 March 2024

8 bytes added , 5 March

no edit summary

David-AA

autoreview, editor, emailconfirmed, reviewer, upwizcampeditors

223

edits

Revision as of 14:13, 5 March 2024 (view source) David-AA (talk \| contribs) No edit summary ← Older edit		Latest revision as of 15:11, 5 March 2024 (view source) David-AA (talk \| contribs) No edit summary
(3 intermediate revisions by the same user not shown)
<br> :Click Save & Apply, then disconnect your WLAN connection and rejoin, or refresh IP address. <br>▼ ;<big>2. Set up WAN Connection</big> :This is depended on your WAN connection; however you will most likely need to connect to it wirelessly in Client mode :like myself, or create a DHCP client on eth0.2 (VLAN 2) interface which should default to untagging VLAN 2 on the WAN :interface. ;<big>5. Configure AAISP L2TP Connection.</big> :Interfaces, Add new interface, select L2TP, and enter your login details, and information as shown below. [[File:~~WRT004~~WRT00455.png\|680px]] :The metric and DNS weight aren’t particularly important here for simple policy routing; however, these will be :required later on. :Use default gateway also selected. [[File:WRT005.png\|680px]] <br> <br> ;<big>6. MWAN3 Package – Policy Based Routing Installation.</big> <br> ;<big>8a. Ports Forwards.</big> :Last thing to do is to configure Port forwards to your server, and your running services. In my case I am running a :LAMP :server on my network, and the same server hosts the DNS for my domain, and I am also running a Postfix/ Dovecot :server for :Mail. :I also run a small Docker cluster (IPVLAN 10.0.1.0/24) for playing with, and in this case I am forwarding TCP 1080 to :one of my containers running Apache on TCP 80. [[File:WRT012.png\|680px]] [[File:WRT015.png\|680px]] ▲<br> ;<big>8b. Firewall Configuration for Port Forwards</big> :I have been a little lazy with my firewalling, however providing there isn’t a port forward in place, then the ports :won’t be exposed.