Question

Hello,

I have this situation. I want the vpn client to be able to connect to 2 different IP addresses but not simultaneously. Only if the first one is unreachable. In the normal version of the vpn package downloaded from the official openwrt repository it works very well on other routers (not from teltonika). However in RUT955, as the next option "remote" RUT955 adds in the configuration file, it doesn't connect to the second address as the first one is unreachable. Is it possible to compile a package in which you can add more than one "remote" option? Thank you

Answer 1

Hello,

which VPN package?

OpenVPN, IPsec, L2TP any other?

Comments

Hello,

Sorry I didn't write about it. Of course openvpn package

Answer 2

Hi,

you can add them via SSH.

Just edit /etc/config/openvpn file:

config openvpn 'client_ok'
        option persist_key '1'
        option port '1194'
        option _role 'client'
        option dev 'tun_c_ok'
        option verb '5'
        option nobind '1'
        option proto 'udp'
        option client '1'
        option enable '1'
        option _auth 'tls'
        option cipher 'BF-CBC'
        option _tls_cipher 'all'
        list remote 'xx.xx.xx.xx'
        list remote 'yy.yy.yy.yy'
        list remote 'zz.zz.zz.zz'
        option resolv_retry 'infinite'
        option auth 'sha1'
        option _tls_auth 'none'

Comments

Thank you very much for your answer. This works very well. The error I did was put in the file like this:

      option remote 'xx.xx.xx.xx'
      option remote 'yy.yy.yy.yy'
      option remote 'zz.zz.zz.zz'

Instead of as you wrote:

        list remote 'xx.xx.xx.xx'
        list remote 'yy.yy.yy.yy'
        list remote 'zz.zz.zz.zz'

It is strange that with the usual version of openwrt on other router it works:

      option remote 'xx.xx.xx.xx'
      option remote 'yy.yy.yy.yy'
      option remote 'zz.zz.zz.zz'