ChaosVPN:OpenWRTHowto

This is Howto for setting up an independent Box providing you with ChaosVPN

In five steps. Really.

0. Fulfil Requirements

• Buy Hardware http://www.amazon.de/dp/B004YIT2ZI or some equivalent
• You must have read the basic Howto precisely
• generate your keys, choose nodename and subnet and send pubkey to openvpn team

1. Get Started

• Open your Router and power on
• Connect wired or wireless (use information provided with your router)
• Go directly to your routers Webinterface (192.168.1.1 or 192.168.178.1) and search for sth like System -> Firmware Upgrade
• (There is no need to change any of the configuration)

2. Install OpenWRT

• Download http://downloads.openwrt.org/backfire/10.03.1/ar71xx/openwrt-ar71xx-wndr3800-squashfs-factory.img
• Upload the Image in your Webinterface
• Press Start
• DO NOT REBOOT, POWEROFF OR ELSE
• Wait until done (Power LED should not flash)

3. Start and Setup OpenWRT

• Reconnect Network between PC <-> Router

• telnet 192.168.1.1

• passwd #set a root password 

• REMEMBER IT
• Go to Webinterface at 192.168.1.1
• Connect the yellow port on your router to current infrastructure
• Go to Network -> Interfaces and activate WAN Connection with DHCP or your custom internet configuration
• Navigate to System -> Software and press Update Lists
• Press Available Software tab and select C
• Search for ChaosVPN and press install

(I did also install screen at this point)

4. Prepare for launch

• ssh root@192.168.1.1 # telnet won't work anymore

• edit the top part of

• /etc/tinc/chaosvpn.conf

$my_peerid = <nodename>
$my_vpn_ip = 172.31.<your Subnet>.[1-255]

• Copy over your keys to OpenWRT Box

 
# scp /etc/tinc/chaos/rsa_key.p* root@192.168.1.1:/etc/tinc/chaos
# rm /etc/tinc/chaos/rsa_key.p*

5. Lift off

• start chaosvpn

• /etc/init.de/chaosvpn start

...be prepared for 150 new route entries

... to be continued