openwrt vpn防火墙设置

本文介绍openwrt安装企业办公内网openvpn的技术文章。

由于公司云服务器除80、443端口外，其他端口均不提供公网IP访问，仅能通过内网IP进行访问，因此办公室路由器需配置OpenWRT的OpenVPN客户端以连接到云VPN网关。然而，在成功建立OpenVPN连接后，发现路由器可以正常访问，但办公电脑却无法通过VPN路由进行访问。经过检查，发现这是由于OpenWRT防火墙限制所致。为解决此问题，需对firewall进行相应配置，以确保办公电脑能够通过VPN通道进行访问。

1. Navigate to Network > Interface
2. Click on Add New Interface

Enter the details as below:

3. Name of the new interface: PureVPN

4. The protocol of the new interface: select Unmanaged from the drop-down menu

5. Cover the following interface: Custom Interface – tun0
   

6. Click Create interface.

Set Firewall Rule for VPN connection.

7. Navigate to Network > Firewall
8. Click Add.

Configure the firewall as below.

9. Name: Pure_fw
10. Input: reject
11. Output: accept
12. Forward: reject
13. Masquerading: Checked
14. MSS clamping: Checked
15. Covered networks: Select PureVPN
16. Select Allow forward from source zones
    lan: Checked
    wifi: Checked(if you have wifi interface configured)
17. Once that is done, click on Save.