How many OpenVPN client configs does Merlin allow?

[Ian Macdonald]

Hello,

I am considering flashing Merlin onto my RT-AC88U, but one of the specific shortcomings I wish to overcome is the inability of the standard Asus firmware to store more than 5 OpenVPN client configs on the box.

I would like to be able to store and use at least 10 such configs. Is this possible with Merlin? I couldn't find the answer from reading the docs, or from looking at screenshots.

And can the VPN be brought up and down with a script initiated over an ssh session? One of the inconvenient things about the standard firmware is that everything has to be done using the web interface. It would be so much easier to run a script from another machine on the LAN to bring up my VPN of choice.

Thanks in advance for any help.

Cheers,

Ian

 

[ColinTaylor]

No, only 5 clients.

Yes it can be scripted (someone else asked about this recently).

 

[Ian Macdonald]

Thanks for the reply.

I gave it a week to see whether there would be other responses before taking the plunge, but I went ahead today and installed the Merlin firmware.

Very nice it is, too. I'm already using the DNS filter to assign my kids' devices alternative DNS servers.

A shame that only 5 OpenVPN client configs are possible, but perhaps that will change in the future.

In the meantime, I looked for how to bring the VPN client up and down at the command line, so that I can script it from another host, but couldn't find the relevant commands. Can you provide a pointer? You mentioned that someone else had recently asked about this, but I couldn't find that posting.

 

[ColinTaylor]

I can't find the post that I was thinking of but this one is similar.

Assuming you have setup your VPN configs how you want them I think that all you need to do is issue one of the following commands as appropriate (with the number changed for the client in question).


service start_vpnclient1
service restart_vpnclient2
service stop_vpnclient4

Let us know how you get on.

 

[unsynaps]

As others have said you need to do some creative scripting because of limited space in nvram.

 

[Ian Macdonald]

I can't find the post that I was thinking of but this one is similar.

Assuming you have setup your VPN configs how you want them I think that all you need to do is issue one of the following commands as appropriate (with the number changed for the client in question).


service start_vpnclient1
service restart_vpnclient2
service stop_vpnclient4

Let us know how you get on.

That's brilliant. Thank you very much.

With this knowledge, it was trivial to write a shell script for my laptop that allows me to bring up and pull down VPNs without ever going near the GUI. This has been on my wish list for a couple of years now.

I just needed to put my public ssh key on the router, and now the script can log onto the router without a password.

Thank you once again.