Astrill Setup Manual:How to configure OpenVPN on Tomato firmware flashed Routers: Difference between revisions

From Astrill Wiki
Jump to navigation Jump to search
No edit summary
 
(10 intermediate revisions by 2 users not shown)
Line 1: Line 1:
== STEP 1 ==
== STEP 1 - OpenVPN certificates ==


Login to Members section (https://members.astrill.com/). After that go to "VPN Services" (https://members.astrill.com/vpn-services.php) and then click on "OpenVPN certificates generation" section (https://members.astrill.com/openvpn-certificates.php).
Goto '''Members Area => TOOLS => OpenVPN certificates generation =>''' https://members.astrill.com/tools/openvpn-certificates


[[File:Tomato-openvpn-001.jpg]]
[[File:Tomato6464.png]]


== STEP 2 - Create new certificate ==


== STEP 2 ==
Under "Create new certificate" section, enter "TOMATO" for certificate description and Select "Standard" under type, then click on "Create certificate" button.


Under "Add new certificate" section, enter "TOMATO" for certificate description, then click on "Add to my certificates" button.
[[File:Tomato6161.png]]


[[File:Tomato-openvpn-002.jpg]]
== STEP 3 - Download certificate ==
 
 
== STEP 3 ==


After the certificate has been created, click on "Download" button to save the configuration file to your desktop
After the certificate has been created, click on "Download" button to save the configuration file to your desktop


[[File:Tomato-openvpn-003.jpg]]
[[File:Tomato6262.png]]
 


== STEP 4 ==
== STEP 4 - Select VPN Server ==


After you unpack the config file, pick a server you would like to be connected to, and then open the OVPN config file in your text editor.
After you unpack the config file, pick a server you would like to be connected to, and then open the OVPN config file in your text editor.
Line 27: Line 24:




== STEP 5 ==
== STEP 5 - Locate VPN server details ==


Here you will see IP address and Port for the server and certificate keys below.
Here you will see IP address and Port for the server and certificate keys below.
Line 34: Line 31:




== STEP 6 ==
== STEP 6 - Configure OpenVPN server on Tomato router ==


Open Tomato web admin, and then navigate to "VPN Tunneling > OpenVPN Client" section (http://192.168.1.1/vpn-client.asp).
Open Tomato web admin, and then navigate to "VPN Tunneling > OpenVPN Client" section (http://192.168.1.1/vpn-client.asp).
Line 42: Line 39:
For "Server Address" enter "199.48.229.87" or another IP address which you can find inside OVPN config files.  
For "Server Address" enter "199.48.229.87" or another IP address which you can find inside OVPN config files.  
For "Port" enter "8292",  
For "Port" enter "8292",  
The server port is the same for all servers.
The server port is the same for all servers. Set "Extra HMAC authorization (tls-auth)" to "Outgoing (1)".


[[File:Tomato-openvpn-006.jpg]]
[[File:Tomato-openvpn-006.jpg]]




== STEP 7 ==
== STEP 7 - Configure OpenVPN certificates on Tomato router ==


Click on "Keys" tab and copy/paste certificate keys from OVPN config file just like in the screenshot.
Click on "Keys" tab and copy/paste certificate keys from OVPN config file just like in the screenshot.


For "Certificate Authority" copy/paste between tags.
 
For "Client Certificate" copy/paste between tags.  
For '''"Static Key"''' copy text between '''<tls-auth>...</tls-auth>''' tags.
For "Client Key" copy/paste between tags.
 
For '''"Certificate Authority"''' copy text between '''<ca>...</ca>''' tags.
 
For '''"Client Certificate"''' copy text between '''<cert>...</cert>''' tags.
 
For '''"Client Key"''' copy text between '''<key>...</key>''' tags.
 
 
When you are done click on "Save" button below to save the settings you just entered.
When you are done click on "Save" button below to save the settings you just entered.


Line 59: Line 63:




== STEP 8 ==
== STEP 8 - Start OpenVPN on Tomato router ==


Click on "Status" tab, and then click on "Start Now" button to start Astrill OpenVPN connection.
Click on "Status" tab, and then click on "Start Now" button to start Astrill OpenVPN connection.
Line 66: Line 70:




== STEP 9 ==  
== STEP 9 - Check Status ==  


Once you are connected, the status will change and you will see general statistics table.
Once you are connected, the status will change and you will see general statistics table.
Line 73: Line 77:




== STEP 10 ==
== STEP 10 - Check IP address ==


After 10 seconds of clicking on "Start Now" button you can check your IP address on (https://www.astrill.com/check-ip.php).
After 10 seconds of clicking on "Start Now" button you can check your IP address on (https://www.astrill.com/what-is-my-ip).


If you run into any problems, please try the following:
If you run into any problems, please try the following:


1) Reload router defaults settings
1) Reload router defaults settings
2) Connect ADSL modem to WAN port to router
2) Connect ADSL modem to WAN port to router
3) Install Astrill on your router.
3) Install Astrill on your router.

Latest revision as of 20:45, 20 May 2018

STEP 1 - OpenVPN certificates

Goto Members Area => TOOLS => OpenVPN certificates generation => https://members.astrill.com/tools/openvpn-certificates

Tomato6464.png

STEP 2 - Create new certificate

Under "Create new certificate" section, enter "TOMATO" for certificate description and Select "Standard" under type, then click on "Create certificate" button.

Tomato6161.png

STEP 3 - Download certificate

After the certificate has been created, click on "Download" button to save the configuration file to your desktop

Tomato6262.png

STEP 4 - Select VPN Server

After you unpack the config file, pick a server you would like to be connected to, and then open the OVPN config file in your text editor.

Tomato-openvpn-004.jpg


STEP 5 - Locate VPN server details

Here you will see IP address and Port for the server and certificate keys below.

Tomato-openvpn-005.jpg


STEP 6 - Configure OpenVPN server on Tomato router

Open Tomato web admin, and then navigate to "VPN Tunneling > OpenVPN Client" section (http://192.168.1.1/vpn-client.asp).

Click on "Client 1" tab, then click on "Basic" tab to configure the server.

For "Server Address" enter "199.48.229.87" or another IP address which you can find inside OVPN config files. For "Port" enter "8292", The server port is the same for all servers. Set "Extra HMAC authorization (tls-auth)" to "Outgoing (1)".

Tomato-openvpn-006.jpg


STEP 7 - Configure OpenVPN certificates on Tomato router

Click on "Keys" tab and copy/paste certificate keys from OVPN config file just like in the screenshot.


For "Static Key" copy text between <tls-auth>...</tls-auth> tags.

For "Certificate Authority" copy text between <ca>...</ca> tags.

For "Client Certificate" copy text between <cert>...</cert> tags.

For "Client Key" copy text between <key>...</key> tags.


When you are done click on "Save" button below to save the settings you just entered.

Tomato-openvpn-007.jpg


STEP 8 - Start OpenVPN on Tomato router

Click on "Status" tab, and then click on "Start Now" button to start Astrill OpenVPN connection.

Tomato-openvpn-008.jpg


STEP 9 - Check Status

Once you are connected, the status will change and you will see general statistics table.

Tomato-openvpn-009.jpg


STEP 10 - Check IP address

After 10 seconds of clicking on "Start Now" button you can check your IP address on (https://www.astrill.com/what-is-my-ip).

If you run into any problems, please try the following:

1) Reload router defaults settings

2) Connect ADSL modem to WAN port to router

3) Install Astrill on your router.