> For the complete documentation index, see [llms.txt](https://docs.arkannis.net/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.arkannis.net/networking/openwrt/openwrt-set-up-openvpn.md).

# OpenWRT - Set up OpenVPN

#### Install Packages:

```bash
opkg update && opkg install luci-app-openvpn openvpn-easy-rsa openvpn-openssl
```

1. Get the `OpenVPN` configuration file (usually ending in `.ovpn`)
2. Navigate to `VPN` --> `OpenVPN`
3. Click `Browse` and selelect the `.ovpn` file
4. Click `Upload`
5. Click `Edit` 
6. In the bottom empty field, enter your credentials, each on new line.
7. Copy the auth-user-pass path in brackets (shown in red in the picture) and paste it next to the auth-user-pass option in the OVPN config. 
8. Press Save, and click on `VPN` -> `OpenVPN` in `OpenWRT` menu.
9. Press `Save & Apply`.
10. Navigate to `Networking` -> `Interfaces`.
11. Click the `Add new interface` button.
12. Name: OpenVPN
13. Click on `Interface` and write `tun0` in the textbox, and press enter. 
14. Click on Create interface button.
15. Make sure there is a checkmark on `Bring up on boot`
16. Click `Save`
17. Click on `Save & Apply` in the Interfaces screen 
18. Navigate to `Network` --> `Firewall`
19. Scroll to the bottom of the screen to the Zone section, and `Add` a new Zone. 
20. In the General Settings tab, set name to `OpenVPN_fw`, change `Input` to `reject`, `Output` to `accept`, `Forward` to `reject`.
21. Put check mark on both `Masquerading` and `MSS clamping`
22. Covered networks – select `OpenVPN`
23. In the `Allow forward from source section`, `lan`. 
24. Press `Save`
25. Press `Save & Apply` on `Firewall` - Zone settings
26. In the top menu, go to `VPN` -> `OpenVPN`. Set the `checkbox` `Enabled` for VPN connection you just created, and click `Save & Apply.`
27. After the `settings are saved`, click `Start` button next to the VPN connection. 

Done!