Ulmwind,
"Extracting the Michael" is long-hand for "Taking the Mick' which simply means playing a joke or having a laugh at someone's expense in idiomatic English. Sorry if this confused you.
Like you, I also prefer OpenVPN as it is the system I have used for years, is reasonably well documented and runs well on both my server and clients. However, when I tried to set up a profile to access Windscribe it would not allow me to enter the certificates so I then started to read about Wireguard. As it appeared to be a faster VPN solution I wanted to try it and that is how I got here.
My ideal would be to use OpenVPN but have the option to sign in to Windscribe via OpenVPN if I wanted to in lieu of my own VPN server.
WANs
When I first started with Openwrt I was living in a rental house with no phone line so no internet (we lost our house in a fire at Easter 2022). I organised two 4G boxes, one with "free" and the other with "SFR", two of our local telecom suppliers. SFR, because I was a long standing customer, it was offered at low cost BUT, the signal was appalling. The free telecom backs off the Orange network connections and was the best (strongest) signal option for our village. I set up and shared the two interfaces across both VPN and non VPN connections and this worked fine (although still a little slow and underpowered).
When fibre arrived earlier this year I dropped the 4G boxes, converted the free 4G interface to the WAN_FBX (Freebox) and now run of the fibre only. I have just never deleted the old interface. It is stopped and does not come up at boot so can be ignored.
I also decided to simplify the network so now, the Freebox delivers the internet to most devices and guests on a primary LAN 192.168.2.0/24. My Openwrt router sits behind the Freebox router on a static link (192.168.2.20) and delivers a secondary LAN 10.0.0.0/24. This secondary LAN is only used by specified devices that require a VPN plus my iMac that I manage the network from. The iMac can access either the primary or secondary LAN. Primary if I need speed and secondary if I need to access and manage the Openwrt router.
Although PBR ( vpn-policy-routing 0.3.4-8) is in use it too is now very simple. 10.0.0.41 to 10.0.0.200 are all directed to the OVPN_WAN_FREE which in turn uses the WAN_FBX. 10.0.0.40 (the iMac) is an independent listing so I can switch between the interface options to test the results without firing up the devices using the VPN.
Everything was working fine until I added the WindscribeVPN interface.
Right, so now you know the history of how I got here.
Tonight, I have stopped and disabled the WindscribeVPN and hard reset the router (the reboots were not working properly). I now have internet access again but although the OpenVPN client is up and running and PBR says its service is running, I cannot access the VPN from any of the devices on the 10.0.0.0 LAN. I am sure as you say it is a gateway issue but I am not confident with changing these settings.
Route Output
root@OpenWrt:~# route
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
default 192.168.2.1 0.0.0.0 UG 10 0 0 wan
default * 0.0.0.0 U 30 0 0 tun0
10.0.0.0 * 255.255.255.0 U 0 0 0 br-lan
77.68.100.23 192.168.2.1 255.255.255.255 UGH 0 0 0 wan
192.168.2.0 * 255.255.255.0 U 10 0 0 wan
ip r Output
root@OpenWrt:~# ip r
default via 192.168.2.1 dev wan proto static metric 10
default dev tun0 proto static scope link metric 30
10.0.0.0/24 dev br-lan proto kernel scope link src 10.0.0.1
77.68.100.23 via 192.168.2.1 dev wan
192.168.2.0/24 dev wan proto static scope link metric 10
Under normal running circumstances the WAN firewall would only have the WAN and OpenVPN interfaces attached.
Finally, the point about upgrading! I bought a ready built box to avoid having to flash the router and have never tried to upgrade but I will give it a go. I will read the documentation and hopefully it will all be fine.
Geoff
