Allow multiple VPN services at once? OpenVPN client, Wireguard Server

Hi, I’d like to know if its possible for my Spitz to be able to run multiple VPN services concurrently so I can have an outbound OpenVPN client connection established, and an inbound Wireguard server connection established.

When connecting my outbound OpenVPN client I’m attempting to start my Wireguard server but am prompted with “Warning: Conflicts! All other VPN services must be stopped first.”

I’ve read it might be possible by keeping the routing seperate.

If you turn on wireguard server and openvpn client at the same time on the router,

when wireguard client connect to this router, should the data goes to openvpn tunnel as well?

This is quite confusing so we do not allow this by design.

Technically you can do anything.

1 Like

The intent was to run a OVPN tunnel through a Wireguard tunnel to get around odd CGNAT issues, and increase security, so needed both services running on the Spitz. I’ve now set it up to run a Wireguard client, and OpenVPN server to accept incoming connections. Both services needed to be configured through the CLI, not the GL interface.

Packages I needed:

  • Wireguard: wireguard luci-proto-wireguard luci-app-wireguard
  • OVPN: openvpn-openssl openvpn-easy-rsa luci-app-openvpn

For wireguard I created the wg0 inface in /etc/config/network:
config interface ‘wg0’
option proto ‘wireguard’
option private_key ‘priv_key_here’
list addresses ‘192.168.0.2/24’

config wireguard_wg0
option public_key ‘server_pub_key_here’
option route_allowed_ips ‘1’
list allowed_ips ‘192.168.0.0/24’
option persistent_keepalive ‘25’
option description ‘WG’
option endpoint_host ‘xx.xx.xx.xx’
option endpoint_port ‘51820’

For OVPN Server I followed the OVPN Server setup guide on OpenWRT.org.

Quite straight forward once you’re in the CLI. Its a shame the GL interface doesn’t support both services being enabled at the same time as it would have saved me a lot of time.