openwrt vpn防火墙设置

本文介绍openwrt安装企业办公内网openvpn的技术文章。

因公司云服务器除了443端口外不提供公网IP访问，只能通过内网IP访问，所以办公室路由器openwrt 配置openvpn client连接公司云服务器vpn网关后才能访问，发现openvpn连接成功后，路由器能访问，但办公电脑无法走vpn路由，发现是防火墙限制，通过配置firewall,才能实现办公电脑走vpn通道。

1. Navigate to Network > Interface
2. Click on Add New Interface

Enter the details as below:

3. Name of the new interface: PureVPN

4. The protocol of the new interface: select Unmanaged from the drop-down menu

5. Cover the following interface: Custom Interface – tun0
   

6. Click Create interface.

Set Firewall Rule for VPN connection.

7. Navigate to Network > Firewall
8. Click Add.

Configure the firewall as below.

9. Name: Pure_fw
10. Input: reject
11. Output: accept
12. Forward: reject
13. Masquerading: Checked
14. MSS clamping: Checked
15. Covered networks: Select PureVPN
16. Select Allow forward from source zones
    lan: Checked
    wifi: Checked(if you have wifi interface configured)
17. Once that is done, click on Save.