Management localhost 5001script-security 2Īnd finally, the firewall rules. # port must be 5001 for scripts embedded in firmware to work # crl-verify /tmp/openvpn/ca.crl# management parameter allows DD-WRT’s OpenVPN Status web page to access the server’s management port Key /tmp/openvpn/key.pem# Only use crl-verify if you are using the revoke list – otherwise leave it commented out This was a pain because the docs are out of date. Now you have all the key and cert files you need in on your Ubuntu box. // edit the “vars” file as in the post – really easy: just use your location, organization, email, etc.To keep things simple I did not use TLS auth. I used an Ubuntu box to create all the certificates so I’m not providing any Windows instructions for this section. Step 1: Self-sign certificates and create keys Telnet or ssh into your router and type: nvram show | grep size You need about 6000 bytes available in NVRAM. Before you start test how much NVRAM space is left (and used). You must have the free space to accommodate it. Here’s how: Step 0: Check your free memoryĪll the data from the Web GUI is permanently stored in memory. I have it working on my Linksys 1900AC (Nighthawk running Firmware: DD-WRT v3.0-r29147 std (02/23/16)). That can work with your iOS 10 devices with the OpenVPN Client from the App Store.

So… if you have DD-WRT installed on your router and want VPN access to your home network then you’ve got to choose another option. Sure, as a protocol it’s not secure and open to man-in-the-middle attacks so I get it.

Dd wrt v24 sp2 openvpn client