Cannot get OpenVPN server to work

I'm very frustrated. I've been using Linux Mint for years and I'm very satisfied, but it's true that if you're not an expert in Linux and find yourself having to do something complicated using commands, you can consider yourself screwed. I'm starting to understand those who are terrified of Linux and its command line.

I bought a TP-Link Archer C7 version, V2 and I installed OpenWRT and then OpenVPN. So far so good and the router works fine but I can't get the OpenVPN server to work at all. Hours and hours for nothing. I've looked at a lot of pages but I'm lost. I wonder if someone familiar with OpenVPN on OpenWRT could take me by the hand and guide me step by step.

I don't understand why there couldn't be a default, automatic, simple, configuration that could be modified as needed.

I am a little confused and do not understand well interfaces , devices, etc. I understand that in the "interfaces" tab I have to configure an interface with a device and in the OpenVPN tab is where all the VPN parameters have to be configured. Yes? Can someone who has a similar setup guide me?

Specific information:

Router TP-Link Archer C7 v2
Architecture Qualcomm Atheros QCA9558 ver 1 rev 0
Firmware Version OpenWrt 23.05.5 / LuCI openwrt-23.05 b

openvpn-openssl 2.5.8-5 ~176.51 KiB Open source VPN solution using OpenSSL
openvpn-easy-rsa 3.0.8-4 ~28.02 KiB CLI utility to build and manage a PKI CA.
luci-app-openvpn

There is a guide in the wiki for setting up OpenVPN server.

1 Like

OpenVPN creates and configures its tunnel device directly as the OpenVPN process starts up. It is not necessary to separately create an interface or device in OpenWrt. You will need to add the device name (usually tun0) to a firewall zone.

OpenVPN creates a lot of log entries so if something is misconfigured the System Log will usually explain why it failed to bring up the server.

The options for OpenVPN are numerous but basically the same across all operating systems. The best place to look for documentation is the OpenVPN site but make sure you are in the "community" section as the main part of the site is only about their paid service.

Yes, thanks, I had already seen that page and tried to follow it but it is way over my head and I get lost.

Consider using WireGuard instead, it is much faster and easier to setup.

See the road Warrior configuration:
https://openwrt.org/docs/guide-user/services/vpn/wireguard/road-warrior