[GUIDE] OpenVPN Setup always stay online with location change every 24 hours roulette

glinet4life · 2019-09-11T21:28:58.142Z

Hi,
in this guide i will show you how to set up a vpn-connection with a automatically location change and good settings for your ovpn-file so the connection is stable and your router can handle the 24 hours disconnect from some openvpn providers. Also your router will check every minute for a stable internet connection and reconnect it. If my version won’t work, try the scripts below in the next post!

[HowTo]

Download the ovpn-file from your provider and edit it with a texteditor
Compare it with my ovpn-file an add missing lines, but don’t change commands if your vpn provider use other settings for one command → Don’t change such commands!

Here is my file!

remote uk-lon2.privatevpn.com 1194 udp
remote [youradress] [port] [type] #add how many locations you like, above is a example
remote-random
nobind
dev tun

Options

tun-ipv6
remote-cert-tls server
client
comp-lzo
persist-key
persist-tun
verb 3

Router

reneg-sec 0
auth-nocache
connection retry -1
route-delay
keepalive 3 10
resolv-retry infinite
auth-retry interact
ping-restart 0
ping-timer-rem
pull-filter ignore “auth-token”
log /etc/openvpn/openvpn.log

Crypto

cipher AES-128-GCM
auth SHA256
auth-user-pass

Cert

-----BEGIN CERTIFICATE-----
[Here is your ca code in it]
-----END CERTIFICATE-----

-----BEGIN OpenVPN Static key V1-----
[Here is your key code in it]
-----END OpenVPN Static key V1-----

key-direction 1

Remote-Random will chose every time there is a restart select a new location from your remote servers. So add “remote ”. Add how many you like!
Import the Settings to your router like you see it here and start the vpn:
GL.iNet setup with NordVPN | NordVPN support
Login in Luci and than go to: System->Software and search for nano and install it
Go into Terminal (Linux) and write:

ssh root@192.168.1.1

->hit enter and use your forris/luci passwort

Write this and hit enter:

nano /usr/bin/vpn_reconnect

Copy/Paste this script:

#!/bin/sh

# Check vpn-tunnel "tun0" and ping cz.nic if internet connection work
if  [ "$(ping -I tun0 -q -c 1 -W 1 193.17.47.1 | grep '100% packet loss' )" != "" ]; then
        logger -t VPN_Reconnect VPN-Tunnel "tun0" has got no internet connectionection -> restart it
        /etc/init.d/openvpn stop
        sleep 3
        /etc/init.d/openvpn start
else
        logger -t VPN_Reconnect VPN-Tunnel "tun0" is working with internet connection
fi

and then do Strg + o than Enter than Strg + x

Then:

chmod +x /usr/bin/vpn_reconnect

To set up a cronjob, use this first in terminal:

crontab -e

Write this code in it (Check every minute for vpn-connection)

*/1 * * * * /usr/bin/vpn_reconnect

Optional: Add this code for manual restart (My Example: Restart of vpn everyday at 3:30am)

30 3 * * * /etc/init.d/openvpn stop ; /etc/init.d/openvpn start

If you want you can add a second line to restart your router 1 time in the year Or more often, do what you want!

* * 1 1 * sleep 70 && touch /etc/banner && reboot

You can set your times by yourself, here you see the timetable:

*     *     *   *    *        command to be executed
-     -     -   -    -
|     |     |   |    |
|     |     |   |    +----- day of week (0 - 6) (Sunday=0)
|     |     |   +------- month (1 - 12)
|     |     +--------- day of        month (1 - 31)
|     +----------- hour (0 - 23)
+------------- min (0 - 59)

A few other commands, which may or may not be necessary to ensure that cron was running:

/etc/init.d/cron start

/etc/init.d/cron enable

/etc/init.d/cron restart

You can actually interact with cron through the web panel as well and check if the settings are saved > System > Scheduled tasks and check if the script is working in the system log: Status->System Log
With “Remote-Random” at stop & start of openvpn your router will choose a random remote server from your ovpn-file like you can see here too: HowToOpenVPNClient

→ With this two tutorials now your connection should be stable all the time and with location change and router restart like you want it. If not, check the post below! Don’t forget to enable openvpn on router restart and only allow vpn internet access like in the other script!

Have fun

glinet4life · 2019-09-13T10:38:55.034Z

Reconnect-Script for staying online every time!

If you don’t want to use a cronjob or the cronjob isn’t working with your vpn-provider, you can use that script to let your router listening and reconnect if necessary.
→ You can use the ovpn-file from the provider without tweaking (tweaking is recommended with this script too), your router will check if the connection is lost and reconnect automatically if there is no connection.

Let’s start:

If you are a new vpn-user, you can check my tutorial how to connect to your vpn provider with ovpn-file: HowToOpenVPNClient
Login in Luci and than go to: System->Software and search for nano and install it (if not working write “opkg install nano” before the third point in ssh)
Go into Terminal (Linux) and write:

ssh root@192.168.1.1

->hit enter and use your forris/luci passwort

Write this and hit enter:

nano /usr/bin/vpn_reconnect

Copy/Paste this script and change for your VPN-Connection:
“PublicVPN_Fr_Paris” in the script is the Name of my created VPN
(in Luci->Services->OpenVPN and the name of your created VPN you sould change in the script below)

#!/bin/sh

#wait for the openvpn to connect for the first time
sleep 120

while [ true ]; do

#check if openvpn is enabled, if not, go to next loop
vpn_enabled=$(uci get glconfig.openvpn.enable)
if [ "$vpn_enabled" != "1" ]; then
	echo "VPN not enabled, check 20 seconds later"
	sleep 20
	continue
fi

vpn_pid=$(pidof openvpn)
tun0_ifname=$(ifconfig tun0)

if [ -z "$tun0_ifname" ] && [ -z "$vpn_pid" ]; then
	echo "VPN enabled but not running, restarting it"
    /etc/init.d/startvpn restart
else
	echo "VPN is connected and connecting, check 20 seconds later"
fi

sleep 20

done

and then do Strg + o than Enter than Strg + x

Then:

chmod +x /usr/bin/vpn_reconnect

Then open the rc.local file:

nano /etc/rc.local

Add this to the end of the file just before exit:

/usr/bin/vpn_reconnect &

Do again Strg + o, Enter, Strg + x to save and quit again.

The script should run on boot now

Optional Alternative) Script with manual time to set how often the connection will be checked

This script should: a) keeps the connection up (restarts it) and b) at no point allows non-VPN traffic through IF that’s how you’ve set things up. Also you can set the time by yourself how often there will be a connnection check

Login in Luci and than go to: System->Software and search for nano and install it (if not working write “opkg install nano” before the third point in ssh)
Go into Terminal (Linux) and write:

ssh root@192.168.1.1

->hit enter and use your forris/luci passwort

Write this and hit enter:

nano /usr/bin/vpn_restart

Copy/Paste this script and edit this lines:
“PublicVPN_Fr_Paris” in the script is the Name of my created VPN
(in Luci->Services->OpenVPN and the name of your created VPN you sould change in the script below)

#!/bin/sh

# Should openvpn already be in operation? If not, nothing to do, exit.
enabled=$(uci get glconfig.openvpn.enable)
vpn_client=$(uci get network.ovpn)    # removed when startvpn stopped explicitly

if [ "$enabled" != "1" ] || [ "$vpn_client" != "interface" ]; then
exit 0
fi

# First hop should be to the internal VPN gateway (10.8.8.1) if VPN up.
# If we're going through VPN then all is well, do nothing.
first_hop=$(traceroute 8.8.8.8 2>&1 | head -2 | tail -1 | awk '{print $2}')

if [ "$first_hop" == "10.8.8.1" ]; then
logger -t VPN_restart VPN is fine.
exit 0
fi

killall openvpn 2>/dev/null
ovpn=$(uci get glconfig.openvpn.ovpn)
/usr/sbin/openvpn "$ovpn" &
(sleep 1; /etc/init.d/network reload) &

logger -t VPN_restart VPN was down and had to be restarted.

→ Hit “enter” and write ":wq

To set up a cronjob, write:

crontab -e

and entered:

*/5 * * * * /usr/bin/vpn_restart

which is the name and location of my script.

A few other commands, which may or may not be necessary, to ensure that cron was running:

/etc/init.d/cron start

/etc/init.d/cron enable

/etc/init.d/cron restart

PS:
You can actually interact with cron through the web panel as well: Advanced settings > System > Scheduled tasks.

As for the “-t” option, it just adds a “tag” to the log so that logs reference the tag as opposed to user.root or whatever the default is. (There is a main page out there but I can’t find it right now!)

glinet4life · 2019-09-13T10:39:53.659Z

Links:

Openvpn reconnect script Technical Support for Routers

Openvpn vpn should auto reconnect if it is broken. But in some situations, it will exit because of the server send an exit command. For example, if you IP is changed and the server doesn’t like it. Here is a VPN auto re-connection script. If someone has this problem please test. Name this file /usr/bin/vpn_reconnect, then enable execution chmod +x /usr/bin/vpn_reconnect Add it it at the end of /etc/rc.local, before exit /usr/bin/vpn_reconnect & Here is the file content #!/bin/sh #wait f…

How to write Script Technical Support for Routers

You will have to do this: nano /usr/bin/vpn_reconnect Paste the script and then do cntrl + o, cntrl + x Then: chmod +x /usr/bin/vpn_reconnect Then open the rc.local file: nano /etc/rc.local Add this to the end of the file just before exit: /usr/bin/vpn_reconnect & Do cntrl + o, cntrl + x to save and quit again. The script should run on boot now

OpenVPN Periodic Disconnection Technical Support for Routers

@Glitch Great contribution, I’m looking forward to testing these out! Just to make sure I’m getting it right, I’m making these modifications: Adding: keepalive 10 60 pull-filter ignore “auth-token” auth-retry interact Remove: ping 15 ping-restart 0 auth-nocache (although you said previously caused problems so should this stay?) Thanks again