OpenVPN on wireless bridge?

Hi,

As mentioned in Unable to connect to ZyXEL WSM20 after reset [SOLVED], I was trying to understand how to make all the traffic of the devices connected to a ZyXEL WSM20, configured as a wireless bridge, go through a VPN.

The question is: is it possible to setup OpenVPN in OpenWRT if the device is configured as a wireless bridge?

Background:
The ZyXEL WSM20 is configured as wireless bridge (under 23.05.2), it is working fine, and OpenVPN packages are installed. But I was not able to understand how to configure OpenVPN, although I tried to follow the guide here: https://openwrt.org/docs/guide-user/services/vpn/openvpn/client-luci. In doubt, I thought about asking directly to the VPN supplier AirVPN, and their answer was like: "it is impossible, because bridge mode must leave al traffic unaffected, all routing functions are disabled". And the suggestion was: "why not configure the OpenWRT device as a router?"
Now, I can understand the first answer, but I was wondering how I can have a device set up as a router, but working as a wireless bridge (taking internet connectivity from wifi network, and distributing to the LAN). But going step by step: 1) is it really impossible to setup OpenVPN in OpenWRT if the device is configured as a wireless bridge? 2) If wireless bridge is NOK for my purpose, how can I configure the device as a router taking internet connectivity from wifi network, and distributing to the LAN, and making traffic go through OpenVPN (using Luci)? Is that feasible?

Thank you in advance to all who can help me clarify

Since VPN tunnels are (usually) not bridges, traffic has to be routed into a VPN.

Most VPN setup instructions assume that lan->wan routing is already in place, so you should start there. The default configuration where one of the Ethernet ports is wan will work. If you reset the router to defaults and plug the wan port into your existing network, it will acquire a 192.168.3.X address and route the clients wired or wifi (which have 192.168.1.X IP) out to the Internet.

From there you can follow the instructions to set up OpenVPN as a "whole house" VPN client in a main router. Even though this is not the main router, it will still work.

2 Likes

Hi @mk24
Thank you for taking the time to answer.
If I understand well your proposal, you suggest changing from wireless bridge to router mode on the ZyXEL WSM20, then follow the guide mentioned above and set up OpenVPN (which I assume should work in that way).

The issue is that I do need a wireless bridge to cover the distance between the main router and the ZyXEL WSM20 (a several meter cable running through the house is not an option), therefore it will not be a viable solution.
Or perhaps it would be possible to set up the ZyXEL WSM20 as router (and run OpenVPN), but to "tell" the device that internet connectivity is coming from wifi instead of wan?

Thank you

PS: Since my networking and OpenWRT knowledge is very limited (to say the least), my question might appear nonsense, but my target would be to play with the ZyXEL WSM20 and to avoid messing up with the main router. Thank you for your understanding.