HOW TO: iPredator.se VPN setup guide

[iPredVPNuser]

I have finally gotten this working after MONTHS of trying. So here is what you will need your settings set up as to get it working.

1) Login to the router
2) On the left under Advanced Settings click VPN Server
3) Click the OpenVPN Client Settings tab.
4) Enable the options as follows:

Basic Settings
Start with WAN: optional (mine is Yes)
Interface Type: TUN
Protocol: UDP
Server Address: pw.openvpn.ipredator.se
Port: 1194
Firewall: Automatic
Authorization Mode: TLS
Username/Password Authentication: Yes
Username: PUTYOURiPREDATORUSERNAMEHERE
Password: PUTYOURiPREDATORPASSWORDHERE
Username Auth. Only: No
Extra HMAC authorization: Bi-Directional
Create NAT on tunnel: Yes

Advanced Settings
Poll Interval: 0
Redirect Internet Traffic: Yes
Accept DNS Configuration: Strict
Encryption cipher: AES-256-CBC
Compression: Adaptive
TLS Renegotiation Time: 0
Connection Retry: 30
Verify Server Certificate: No

client
;dev tun11
proto udp
remote pw.openvpn.ipredator.se 1194
resolv-retry infinite
nobind
tls-client
ns-cert-type server
keepalive 10 30
cipher AES-256-CBC
tls-cipher TLSv1:!ADH:!SSLv2:!NULL:!EXPORT:!DES:!LOW:!MEDIUM: @STRENGTH
persist-key
persist-tun
comp-lzo
tun-mtu 1500
mssfix
passtos
verb 3

**NOTE**
After the verb 3 line, make sure that there are TWO blank lines (hit ENTER twice)
**Note**

5) Hit apply
6) Go to OpenVPN Keys tab
7) Select Client 1 in the Select OpenVPN instance to edit drop down menu
8) In the Static Key field paste this:

-----BEGIN OpenVPN Static key V1-----
03f7b2056b9dc67aa79c59852cb6b35a
a3a15c0ca685ca76890bbb169e298837
2bdc904116f5b66d8f7b3ea6a5ff05cb
fc4f4889d702d394710e48164b28094f
a0e1c7888d471da39918d747ca4bbc2f
285f676763b5b8bee9bc08e4b5a69315
d2ff6b9f4b38e6e2e8bcd05c8ac33c5c
56c4c44dbca35041b67e2374788f8977
7ad4ab8e06cd59e7164200dfbadb942a
351a4171ab212c23bee1920120f81205
efabaa5e34619f13adbe58b6c83536d3
0d34e6466feabdd0e63b39ad9bb1116b
37fafb95759ab9a15572842f70e7cba9
69700972a01b21229eba487745c091dd
5cd6d77bdc7a54a756ffe440789fd39e
97aa9abe2749732b7262f82e4097bee3
-----END OpenVPN Static key V1-----

9) In the Certificate Authority field paste this:

-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgIJAKee4ZMMpvhzMA0GCSqGSIb3DQEBBQUAMIG9MQswCQYD
VQQGEwJTRTESMBAGA1UECBMJQnJ5Z2dsYW5kMQ8wDQYDVQQHEwZPZWxkYWwxJDAi
BgNVBAoTG1JveWFsIFN3ZWRpc2ggQmVlciBTcXVhZHJvbjESMBAGA1UECxMJSW50
ZXJuZXR6MScwJQYDVQQDEx5Sb3lhbCBTd2VkaXNoIEJlZXIgU3F1YWRyb24gQ0Ex
JjAkBgkqhkiG9w0BCQEWF2hvc3RtYXN0ZXJAaXByZWRhdG9yLnNlMB4XDTEyMDgw
NDIxMTAyNVoXDTIyMDgwMjIxMTAyNVowgb0xCzAJBgNVBAYTAlNFMRIwEAYDVQQI
EwlCcnlnZ2xhbmQxDzANBgNVBAcTBk9lbGRhbDEkMCIGA1UEChMbUm95YWwgU3dl
ZGlzaCBCZWVyIFNxdWFkcm9uMRIwEAYDVQQLEwlJbnRlcm5ldHoxJzAlBgNVBAMT
HlJveWFsIFN3ZWRpc2ggQmVlciBTcXVhZHJvbiBDQTEmMCQGCSqGSIb3DQEJARYX
aG9zdG1hc3RlckBpcHJlZGF0b3Iuc2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQCp5M22fZtwtIh6Mu9IwC3N2tEFqyNTEP1YyXasjf+7VNISqSpFy+tf
DsHAkiE9Wbv8KFM9bOoVK1JjdDsetxArm/RNsUWm/SNyVbmY+5ezX/n95S7gQdMi
bA74/ID2+KsCXUY+HNNUQqFpyK67S09A6r0ZwPNUDbLgGnmCZRMDBPCHCbiK6e68
d75v6f/0nY4AyAAAyqwAELIAn6sy4rzoPbalxcO33eW0fUG/ir41qqo8BQrWKyEd
Q9gy8tGEqbLQ+B30bhIvBh10YtWq6fgFZJzWP6K8bBJGRvioFOyQHCaVH98UjwOm
/AqMTg7LwNrpRJGcKLHzUf3gNSHQGHfzAgMBAAGjggEmMIIBIjAdBgNVHQ4EFgQU
pRqJxaYdvv3XGEECUqj7DJJ8ptswgfIGA1UdIwSB6jCB54AUpRqJxaYdvv3XGEEC
Uqj7DJJ8ptuhgcOkgcAwgb0xCzAJBgNVBAYTAlNFMRIwEAYDVQQIEwlCcnlnZ2xh
bmQxDzANBgNVBAcTBk9lbGRhbDEkMCIGA1UEChMbUm95YWwgU3dlZGlzaCBCZWVy
IFNxdWFkcm9uMRIwEAYDVQQLEwlJbnRlcm5ldHoxJzAlBgNVBAMTHlJveWFsIFN3
ZWRpc2ggQmVlciBTcXVhZHJvbiBDQTEmMCQGCSqGSIb3DQEJARYXaG9zdG1hc3Rl
ckBpcHJlZGF0b3Iuc2WCCQCnnuGTDKb4czAMBgNVHRMEBTADAQH/MA0GCSqGSIb3
DQEBBQUAA4IBAQB8nxZJaTvMMoSG47jD2w31zt9o6nSx8XJKop/0rMMHKBe1QBUw
/n3clGwYxBW8mTnrXHhmJkwJzA0Vh525+dkF28E0I+DSigKUXEewIZtKjADYSxaG
M+4272enbJ86JeXUhN8oF9TT+LKgMBgtt9yX5o63Ek6QOKwovH5kemDOVJmwae9p
tXQEWfCPDFMc7VfSxS4BDBVinRWeMWZs+2AWeWu2CMsjcx7+B+kPbBCzfANanFDD
CZEQON4pEpfK2XErhOudKEJGCl7psH+9Ex//pqsUS43nVN/4sqydiwbi+wQuUI3P
BYtvqPnWdjIdf2ayAQQCWliAx9+P03vbef6y
-----END CERTIFICATE-----

10) Click Apply
11) Go back to the OpenVPN Client Settings page
12) Click the Service state switch to connect


And you should now be connected.

To check to make sure go to the following links:
WhatIsMyIP to check your IP address & go to DNSleaktest to make sure you are securely connected.

Hope this helps!

 

[geenidee]

Hey, Thx for this great post. I had to adapt it a little bit in order to get it working with my version of tomato. (usb vpn version 1.28 on wrt320n)

I was unable to use the 'use password option' so I added the following under
Aministration -> scripts:
echo <username> > /tmp/userpass.conf
echo <password> >> /tmp/userpass.conf
chmod 600 /tmp/userpass.conf

After restarting the router I added the following line in custom configuration:
auth-user-pass /tmp/userpass.conf

That worked for me

 

[Arp]

Unable to find the static key field in latest Merlin firmware. I don't have the OpenVPN keys tab neither. Any ideas?

 

[Arp]

Ah I reveresed to 374.34.2 and there it was

*edit*

Excellent. Instructions seem to work with this older firmware

 

[shpankey]

Any way to do this on the newer firmware w/o the keys options?

 

[john9527]

It's still there....click on the yellow text 'Content modification of keys and certificates'

 

[bugmenotplz]

Hmmm, pretty strange, it connects and WhatIsMyIP & DNSleaktest show the swedish ip, but https://ipleak.net/ shows the original ip. So it must be a setting somewhere that I miss, maybe someone has encountered this already ... Thanks for any advice.

 

[cosmoxl]

Hmmm, pretty strange, it connects and WhatIsMyIP & DNSleaktest show the swedish ip, but https://ipleak.net/ shows the original ip. So it must be a setting somewhere that I miss, maybe someone has encountered this already ... Thanks for any advice.

which section at ipleak.net is showing your real IP address?