Help configuring OpenVPN + OpenWrt (routes)

Hey Guys, I need some help here.

I need to setup my OpenWrt to operate as a OpenVPN server (home network), so I can connect to my LAN devices while out of home.
My gateway to internet is my modem (

  • OpenWrt is on
  • The VPN server is on |
  • Port forward from modem to OpenWrt is OK

Before OpenWrt config, I setup the OpenVPN server on a Debian machine for testing and fine tuning. Everything was OK on Debian, and the only thing besides openvpn server configuration was iptables forwarding.

I imported the server.conf from Debian to OpenWrt, and changed port forwarding on my modem, the client successfully connected to OpenWrt, but traffic forwarding didnt worked. I cant ping/connect to internet or lan devices on I tried to forward traffic with iptables, but no success.

The server.conf:

push "route"
push "redirect-gateway def1"

dev tun

topology subnet


#client-config-dir /usr/syno/etc/packages/VPNCenter/openvpn/ccd

dh /etc/openvpn/server/keys/dh.pem
ca /etc/openvpn/server/keys/ca.crt
cert /etc/openvpn/server/keys/server.crt
key /etc/openvpn/server/keys/server.key

max-clients 5


verb 5
#log-append /var/log/openvpn/openvpn.log

keepalive 10 60
reneg-sec 0


port 1194
cipher AES-256-CBC
auth SHA512
proto udp4


iptables -t nat -A POSTROUTING -s -o br-lan -j MASQUERADE

You should configure ZONE FORWARDING in specific firewall section (see manual). You should create also specific zone for tun adapter. Please, remove your naive command starting with 'iptables'.