Which VPN to use between two OpenWrt One routers

Installing and Using OpenWrt
1

I've got a pair of OpenWrt One routers that I'm using for connections to my ISP at two separate sites. I'd like to set up a VPN between them. I'm mostly familiar with OpenVPN so I thought I'd use that. But I can't find the kmod-tun package that's needed for it. So I thought I'd try WireGuard instead. However that requires a kmod-wireguard package that doesn't appear to be available either.

Can anybody suggest where I can get either of those packages. Or can anybody suggest an alternative VPN that I can use.

Thanks in advance for any clues,
Graham

2

What version of OpenWrt are you currently running?

ubus call system board

You'll need 3 packages

kmod-wireguard
luci-proto-wireguard
wireguard-tools

They are certainly available, but we'll need to figure out what's happening on your installation.

2 Likes
3

Thanks very much for replying.

Sorry, stupid of me not to mention that.

root@OpenWrt:~# ubus call system board
{
        "kernel": "6.6.63",
        "hostname": "OpenWrt",
        "system": "ARMv8 Processor rev 4",
        "model": "OpenWrt One",
        "board_name": "openwrt,one",
        "rootfs_type": "squashfs",
        "release": {
                "distribution": "OpenWrt",
                "version": "24.10.0-rc2",
                "revision": "r28161-ea17e958b9",
                "target": "mediatek/filogic",
                "description": "OpenWrt 24.10.0-rc2 r28161-ea17e958b9",
                "builddate": "1733226068"
        }
}
root@OpenWrt:~# opkg install openvpn-openssl
Unknown package 'openvpn-openssl'.
Collected errors:
 * pkg_hash_check_unresolved: cannot find dependency kmod-tun for openvpn-openssl
 * pkg_hash_fetch_best_installation_candidate: Packages for openvpn-openssl found, but incompatible with the architectures configured
 * opkg_install_cmd: Cannot install package openvpn-openssl.
root@OpenWrt:~# opkg install wireguard-tools
Unknown package 'wireguard-tools'.
Collected errors:
 * pkg_hash_check_unresolved: cannot find dependency kmod-wireguard for wireguard-tools
 * pkg_hash_fetch_best_installation_candidate: Packages for wireguard-tools found, but incompatible with the architectures configured
 * opkg_install_cmd: Cannot install package wireguard-tools.
root@OpenWrt:~#  cat /etc/opkg/distfeeds.conf
src/gz openwrt_core https://downloads.openwrt.org/releases/24.10.0-rc2/targets/mediatek/filogic/packages
src/gz openwrt_base https://downloads.openwrt.org/releases/24.10.0-rc2/packages/aarch64_cortex-a53/base
src/gz openwrt_luci https://downloads.openwrt.org/releases/24.10.0-rc2/packages/aarch64_cortex-a53/luci
src/gz community-packages https://downloads.openwrt.org/releases/24.10.0-rc2/packages/aarch64_cortex-a53/packages
root@OpenWrt:~#
4

Make sure you update the package list.

opkg update ; opkg install kmod-wireguard luci-proto-wireguard wireguard-tools

1 Like
5

Also, you should upgrade to 24.10.0 (now officially launched, no longer in RC) so that you're up to date.

2 Likes
6

The servers are having problems it seems, chances are it is better today so try again

I am working on some notes to setup WireGuard it also contains a paragraph about site-to-site setup.
Maybe they are helpful

My notes can be found at:

Make sure to download the notes because github only shows the first 5 pages, see the read.me

You need the WireGuard Server Setup guide

7

Thanks psherman. I have upgraded to 24.10.0. I did do an "opkg update" yesterday before my post and the two modules (kmod-tun and kmod-wireguard) were not available.

Thanks also egc. Today I did another update and suddenly they are available. I don't know if it was the upgrade to 24.10.0 or the servers being better today.

Anyway, I now have an openvpn connection working.

Thanks to you both for your help.
Graham