System Description

APPENDIXB-EXAMPLEUSECASE(VPN)SETUPDETAILS

VPN Server (Ground Side)

A. Install OpenWRT on the router

(1)DownloadOpenWRT19.07.4fromthebelowlink:http://downloads.openwrt.org/releases

/19.07.4/targets/ar71xx/generic/openwrt-19.07.4-ar71xx-generic-gl-ar750s-squashfs-

sysupgrade.bin

(2)Performupgrade

–ConnectyourcomputertoanyoftheLANportsontherouter.

–SettheIPaddressofthecomputerto192.168.1.2,mask255.255.255.0,gateway

192.168.1.1

–HoldRESETbuttonontherouterandpluginthepowersupply.

–KeepholdinguntiltheWiFiLEDflashes 5times,thenreleasethebutton.

–Navigateto192.168.1.1anduploadtheOpenWRTimage.

–Therouterwillrebootautomatically.

B. Configure the router

(1)SettherouterLANIPto192.168.1.1ifitisn’talready.SettheDHCPserverstartaddress

to80andlimitto40.

(2)Temporarilyconnecttheroutertotheinternet(viaWANportoruseamobilehotspotonthe

mobilephone)andopenanSSHsession.

(3)Executethefollowingcommandstoinstallrequiredpackages:

#opkgupdate

#opkginstallkmod-usb-corekmod-usb2usb-modeswitchlibusb-1.0kmod-usb-net-cdc-ether

openvpn-opensslopenvpn-easy-rsaluci-app-openvpnluci-app-ddns

(4)SettheWANIPaddressto192.168.8.100,netmask255.255.255.0,gateway192.168.8.1.

UsecustomDNS8.8.8.8.

(5)ConnecttheUSBmodemandrebootrouter.

(6)OpenWANinterfacesettings,gotoPhysicalSettingsandelect“eth1”fromthedrop-down

list.Save&Apply.

(7)DeleteWAN6interfacefromNetwork->Interfaces.

(8)Navigateto192.168.8.1andenableDMZonthe192.168.8.100IPaddress.Ensurethemodem

hasestablishedconnectiontotheinternet.

(9)Configure DynamicDNSsettingsaccordingtoyourselectedprovider.Youmightneedtoinstall

additionalpackagesforsomeproviders.VerifytheIPaddressisupdatedinyouruserpanel.

(10)Executethefollowingcommandsontherouter(thiswilltakeawhiletogenerate):

#cd/etc/easy-rsa/

#easyrsagen-dh

#easyrsabuild-canopass(entersmallsatcomasCAwhenprompted)

#easyrsabuild-server-fullservernopass

#easyrsabuild-client-fullsmallsatcomnopass

Page 46

18 Feb 2021

SYSTEM DESCRIPTION, INSTALLATION, AND MAINTENANCE MANUAL

SMALL SATCOM