Open VPN Broadband Router

PPR-NR-VPN
 Table of Contents
1. Installation Guide ................................................................................................................................................................................ 3
1.1. Hardware installation ................................................................................................................................................................... 3
1.2. Router Firmware Configuration ................................................................................................................................................... 4
2. Advanced User Guide ......................................................................................................................................................................... 6
2.1. Accessing the Web Interface ........................................................................................................................................................ 6
2.2. Saving Changes in the Web Interface .......................................................................................................................................... 6
2.3. Changing IP and Network Settings .............................................................................................................................................. 7
2.4. Changing Wireless Settings ......................................................................................................................................................... 8
2.5. Changing VPN Settings ............................................................................................................................................................... 9
2.5.1. Changing the VPN Port ........................................................................................................................................................ 9
2.6. Changing SSH Settings .............................................................................................................................................................. 10
2.6.1. Changing the SSH Port ....................................................................................................................................................... 10
2.7. Reseting to Factory Defaults ...................................................................................................................................................... 11
2.8. Using OpenVPN for remote connection ................................................................................................................................... 12
Installation Guide

1. Installation Guide
1.1. Hardware installation
Connect power and correct networks to the Router. Follow the steps below:

Connect the supplied power pack to the DC input on the

rear panel of the router.

Connect an Ethernet cable from the Packhouse Network to

the port labelled ‘Internet’ on the rear panel of the router

Connect an Ethernet cable from the Compac PC’s to one of

the ports labelled 1-4 on the rear panel of the router.

This could be one cable connecting from the router to all

the PC’s via an Ethernet switch, or each PC connected
directly to the router with a separate cable.
Installation Guide
1.2. Router Firmware Configuration
The router must be configured so the ‘Internet’ or ‘WAN’ port on the router and the Packhouse network share the same
IP address range.

You will need some assistance from the administrator of the pack house network.

The pack house network administrator will need to assign an IP address on their network for the Compac VPN Router,
and forward two ports to the router. The ports they need to forward are TCP port 5000 (for remote administration of
the router) and UDP port 5050 (for remote VPN access to the PC’s). If the Packhouse Network Administrator needs
you to change these default ports, see the ‘Changing the VPN and SSH ports’ section of the Advanced User Guide.

A letter explaining these requirements to the pack house network administrator is included at the end of this document.

Once you have this information, follow the steps below:

Open a web browser on a PC connected

to the LAN side of the router. Navigate to
‘http://10.155.155.1’.

You will be asked for a username and

password.

The username is ‘root’ and the password

is available from Compac

Go to the ‘Network’ tab, then to the

‘WAN-LAN’ page.
Installation Guide
Set the Connection Type to ‘Static IP’

Set the WAN IP Address, Netmask and

Default Gateway to the settings provided
by the Packhouse network administrator

Click on the ‘Save Changes’ button in the

bottom right of the screen.

Then click on the ‘Apply Changes’ button

At this point the installation should be

complete.

Please contact
[email protected], or call the
helpdesk, to make sure the PC’s can be
remotely accessed from Compac.
2. Advanced User Guide
2.1. Accessing the Web Interface
Open a web browser on a PC connected
to the LAN side of the router. Navigate to
‘http://10.155.155.1’.
You will be asked for a username and
password.
The username is ‘root’ and the password
is available from Compac
You will then be presented with the main
router information screen.

2.2. Saving Changes in the Web Interface

Every time you make changes to a setting on a Web Interface Screen, you need to save then apply your changes. To do so follow
the steps below:
First click on the ‘Save Changes’ button
in the lower right hand corner of the
screen.

Then click on the ‘Apply Changes’ button.

 2.3. Changing IP and Network Settings

To access the WAN and LAN IP Settings, click on the ‘Network’ tab, then the ‘WAN-LAN’ tab. In this screen you can change the following
settings:

WAN Configuration – Connection Type: Set to DHCP if the router

will be assigned an IP address from the Packhouse network. Set to
Static IP if you wish to manually configure the WAN IP address.

IP Settings: Set the WAN IP address, Subnet Mask and Default

Gateway in here if they are configured statically. Leave blank if the
WAN interface is configured automatically.

OpenDNS Service: This should be set to NO.

LAN Configuration: Enter the LAN IP Address, Subnet Mask and

Default Gateway here. This is the IP Address of the router and will be
used to calculate the range of IP addresses assigned to devices on the
LAN.

LAN DNS Servers: If you want PC’s connected to the LAN to use an
alternative DNS server, add it here.
 2.4. Changing Wireless Settings

To access the Wireless Network Settings, click on the ‘Network’ tab, and then the ‘Wireless’ tab. In this screen you can change the following
settings:

Wireless Interface: Changing this setting to disable will turn off the
wireless network.

ESSID Broadcast: ‘Show’ will announce the wireless network to any

stations within range. ‘Hide’ means the stations will have to be given
the settings for this network manually.

ESSID: The name of the wireless network

Channel: Selects which wireless channel to use (1-14). Try not to have
two wireless networks close to each other using the same channels.

Encryption Type: Changes the security method used to encrypt

wireless communications. Default value is WPA – but could be
changed to WEP for compatibility with older devices.

WPA Mode: Set both WPA1 and WPA2 for compatibility with the
greatest number of devices.

WPA Algorithm: Should be set to RC4 (TKIP) for compatibility with

most devices.

WPA PSK: Type the wireless password you want to use into this box.
 2.5. Changing VPN Settings
2.5.1. Changing the VPN Port

To change the port the VPN server will listen for incoming connections on, follow the steps below:
Navigate to the ‘System’ tab, then to the ‘NVRAM’ tab.

Navigate down the list of variables until you find ‘vpn_port’. The
variables are listed in alphabetical order.

Click on the variable ‘vpn_port’ to edit the value.

Enter the new value for VPN port in the ‘Variable Value’ box. Click
the ‘Change’ button.

DEFAULT VALUE = 5050

Please inform [email protected] if you alter this value.

Save and Apply the changes.

 2.6. Changing SSH Settings
2.6.1. Changing the SSH Port

To change the port the SSH server will listen for remote incoming connections on, follow the steps below:

Navigate to the ‘System’ tab, then to the ‘NVRAM’ tab.

Navigate down the list of variables until you find ‘ssh_port’. The
variables are listed in alphabetical order.

Click on the variable ‘ssh_port’ to edit the value.

Enter the new value for SSH port in the ‘Variable Value’ box. Click the
‘Change’ button.

DEFAULT VALUE = 5000

Please inform [email protected] if you alter this value.
Save and Apply the changes.
 2.7. Reseting to Factory Defaults

The Router can be reset to Factory Default settings (this will include the default SSH port, default VPN port and key, and removing the password
on the Web Interface) by following these steps:

Hold down the ‘Reset’ button on the rear panel of the router for at
least 10 seconds, then release it.

The ‘Power’ LED on the front panel of the router will then begin
to flash. The router will reboot twice during this process. Once
the power button has begun flashing, you should leave the router
at least 2 minutes to complete the process.

The router has finished the reset process once the ‘DMZ’ LED
has gone out after the second reboot process is complete.
 2.8. Using OpenVPN for remote connection
Follow this procedure to connect to the router from a remote site.

You will need a copy of ‘OpenVPN Gui’ installed on your PC. If

you do not have this you download it from
http://openvpn.se/download.html .
You will need a copy of the openVPN config file and the (VPN-
xxxx.ovpn) and the openVPN key file (VPN-xxxx.vpnkey). These
are available on the compac network at
\\halserver2\service\Helpdesk\CSE_VPN_Routers or by e-mail
from [email protected]
Copy these files to ‘C:\Program Files\OpenVPN\config’ on your
local PC
Right click on the openVPN icon in the windows tray.

Select the router you wish to connect to and click ‘connect’. (If
you only have files for one router stored on your PC, you will see
‘connect’ in the first menu).

The PC screens on the openVPN icon will turn green if the

connection is successful. You will see an error dialog if there was
a problem.
 To : Packhouse IT Administrator

Re : Installation of VPN access to you Compac Machine

Hello,

As part of the installation of your Compac Sorting Machine, we would like to set up remote VPN access
to your Sizer and/or InVision computers. This enables much faster and more efficient service of the
machine.

We connect to our machines using OpenVPN, and have provided a modified Linksys router to act as
the VPN end-point.

To enable the VPN connection to function, could you please :

• Assign an IP address on your network for the use of the Compac VPN Router, and advise
our technician of this IP address, the Subnet Mask and Default Gateway for your network.

• Ensure the Compac VPN Router’s IP address can make outbound connections on port 80.
This is required to allow us to record your public IP address.

• Ensure that incoming connections to your public IP address on ports TCP 5000 and UDP
5050 will be forwarded to the Compac VPN Router’s IP address.
If these ports are already in use on your network, or are unsuitable for some other reason,
please advise our technician which ports would be suitable. We require one TCP and one
UDP port.

Any questions can be addressed to your Compac technician or [email protected]

Thank you for your assistance.

Kind Regards,

Compac Sorting Equipment