System Description

VPN Client (Air Side)

A. Install OpenWRT on the router

FollowthesamedirectionsasfortheservertoinstallOpenWRT.

B. Configure the router

(1)SettherouterLANIPto192.168.1.2.DisabletheDHCPserver.

(2)DeleteWAN6interfacefromNetwork->Interfaces.

(3)Temporarilyconnecttheroutertotheinternet(viaWANportoruseamobilehotspotonthe

mobilephone)andopenanSSHsession.

(4)Executethefollowingcommandstoinstallrequiredpackages:

#opkgupdate

#opkginstallopenvpn-opensslluci-app-openvpn

(5)UsingtheLUCIWebUISelectVPN->OpenVPN.Thenentersmallsatcom_tapintheinstance

namebelow“T emplateBasedConfiguration”Select“Clientconfiguration foranethernet

bridgeVPN”fromthetemplatelistandclickAdd.ClickEditnexttothenewlyaddedinterface.

(6)(Somefields mightbemissing;thesecanbeaddedbygoingtothebottomofthepageand

selectingitfromthe“Additional-field" drop-downmenu.)Enterthefollowingconfiguration

•verb:3

•port:1194

•dev_type:tap

•nobind:[tick]

•comp_lzo:yes

•client:[tick]

•remote:[PublicipaddressorddnsaddressoftheVPNServer]

•ca:[clicktouploadandselectca.crtdownloadedfromserver]

•dh:[donotselectanyfile

•cert:[clicktouploadandselectsmallsatcom.crtdownloadedfromserver]

•key:[clicktouploadandselectsmallsatcom.keydownloadedfromserver]

•proto:udp

(7)ClickSave&Apply,thenBacktoOverview.

(8)Tickthe“Enabled”boxnexttothe“smallsatcom_tap”line.Save&ApplyandthenStartthe

VPNServer.

(9)OpenLANinterfacesettings,goto“PhysicalSettings”tabandadd“tap0”totheinterfacesfrom

drop-downlist.Save,thenSave&Apply.

(10)ReboottheroutertoApplyallchanges.

(11)Iftheserverisrunning,theclientshouldnowestablishaVPNconnection.Thiscanbe

confirmed byinspectingtheSystemLogandtheVPNServerroutershouldreplytoping.

(12)DisconnectthetemporaryinternetconnectionandselecteditnexttotheWANinterface

underNetwork->Interfaces.ChangeProtocoltoPPPoE.Enter“void”inbothusernameand

passwordsfieldsEnter“@Background”toServiceNamefield. Save,thenSave&Apply.

Page 48

18 Feb 2021

SYSTEM DESCRIPTION, INSTALLATION, AND MAINTENANCE MANUAL

SMALL SATCOM