The old VPN and 2nd router PBR question(maybe)?

Installing and Using OpenWrt Network and Wireless Configuration
1

OMG, so difficult for me to do what I want to do.

Hopefully what I want to do can be explained best in these two pictures.

I seem to have this working when connected to laptop, but I think I still need to use some sort of PBR.

Also, the DNS server’s IP address that I have put in for VPN does not match what dnsleaktest extended test’s IP address so I have no idea what I did wrong there.

If you are willing to help me, I am so grateful.

Please let me know what you need from the config. I can give you the openWRT backup without the username/password for surfshark vpn, but I have no idea if any other usernames/passwords are in the backup somewhere which I should not post here either.

The Windows10 laptop connection to openWRT maybe DHCP now, and not static as shown here.

Thank you.

OpenWRT_Diagrams
OpenWRT_Diagrams1299×1400 80.9 KB

2

If you can set a static IP address and gateway on your TV you can setup a DumbAP and point your TV's gateway to the dumbAP this way it will use the VPN client (use WireGuard much more performant and easier to setup)

That said you can certainly use your current setup, for remote administration from your laptop if it is connected to the ISP router just add this to your OpenWRT router and you can connect from the WAN side with SSH and for LuCi on http://192.168.2.X:8080 where X is the address of the OpenWRT router (set a static IP or better a static lease on the ISP router for your OpenWRT router)

afbeelding
afbeelding1026×304 41.3 KB

afbeelding
afbeelding1049×175 27.1 KB

etc/config/firewall

config redirect
	option dest 'wan'
	option target 'DNAT'
	option name 'Allow-remoteadmin'
	list proto 'tcp'
	option src 'wan'
	option src_dport '8080'
	option dest_port '80'
	option src_ip '192.168.0.0/16'

config rule
	option src 'wan'
	option name 'Allow-SSH'
	list src_ip '192.168.0.0/16'
	option dest_port '22'
	option target 'ACCEPT'