RT-N14U - N300 - PADAVAN - PureVPN and DNSCrypt setup support

[jeeb]

Hi Guys,

So I have just joined your forum as most searches relating to Padavan, lead here for support questions. I hope you will be able to assist. If not, I would be much obliged to anyone who can point me in the right direction!

I have come from "Tomato" software, running on a linksys router, and wanted to upgrade the device, now I have purchased the above device and noticed Tomato was not supported. A bit of Googling later and I find Padavan software appears to work equally well.

I am still familiarising myself with the interface, but seem to have some problems with getting the VPN setup.

1) VPN Client - setup with OpenVPN, pointed to the server and the port, UDP, TUN with TLS encryption. Adaptive compression and HMAC check enabled.

a) when I do this on Tomato, I have four fields to fill in with certs, however, this only allows 2 - TA.key and CA.cert. - Dont I need to add in the Static Key and Client Certificates

b) When I run on Tomato, it allows me to check the VPN status and watch the byte counts, does such a feature exist in Padavan?

c) I could setup a killswitch, which in the event the VPN fell, the killswitch would prevent comms leaving the router until the connection is re-established, I havent found anywhere I can implement such a script here? (I think I found it under Customisation / Scripts, but this seems to take affect whenever the connection goes up or down, I just want it to take affect when its down though?

d) Tomato also used DNS-Crypt which I find invaluable for privacy, I have seen some complicated procedures for implementing it, and wondered if anyone could guide me further on this or advise if later firmware may already have this implemented?

Can anyone provide any guidance?

 

[jeeb]

In case anyone out there sees this in the future, I managed to answer my own questions:

1) VPN Client was setup successfully

a) "Dont I need to add in the Static Key and Client Certificates" - No, apparently you do in fact just need the "TA and CA key/cert".

b) Does such a feature exist in Padavan? - Yes it does, if you go to the Network Status, you can drop down from the list to VPN client to watch the current transfer speeds, also if you open the VPN Client page, when it is connected successfully, there is a little green "connected" icon appears next to the URL.

c) Killswitch - I eventually found this under "Customisation" - "Scripts"

d) DNSCrypt - was slightly more tricky to get setup, it has no page per say, you have to telnet on and install and configure it via the backend. You need to follow the steps here:
https://bitbucket.org/padavan/rt-n56u/wiki/EN/HowToConfigureEntware

NOTE: It kept failing for me, because once you create the partition, you may need to reboot the router, otherwise it doesnt see the /opt mount, which appears critical to having this work.

Then you need to follow this page in order to install DNS crypt:

https://github.com/Entware-ng/Entware-ng/wiki/Using-Dnscrypt-proxy

You can later on, reconfigure the DNS Crypt, IIRC, it was running "Sudo dnscrypt -reconfig (or -reconfigure)"

This is working flawlessly for me now.