How to setup openvpn client on openvrt router firmware (asus rt-n16)?

Question

openvpn

There is a desire to configure vpn on the router.
Firmware openwrt barrier breaker 14.07
Configured according to instructions wiki.openwrt.org/doc/howto/vpn.openvpn#installation
Didn't work. Slightly tweaked the /etc/config/openvpn config, according to the server settings (mullvad.net) - but it still doesn't work. In addition, despite the fact that the tunnel is not created (?), the Internet is available through the router, the IP is mine, so apparently the firewall does not work
According to the link - configs
cat /etc/config/network
cat /etc/config /firewall
cat /etc/config/openvpn
If someone tells me where to dig, I will be grateful. Well, or suddenly someone has already set up and has experience ...
sprunge.us/TiZQ

Answer 1

Using the RT-N16 router (openwrt) as an openvpn client:
1. Used the firmware openwrt-brcm47xx-mips74k-asus-rt-n16-squashfs.trx
Connection via ssh via putty is supposed.
2. Install openvpn: opkg update && opkg install openvpn-openssl
3. Install the web interface luci who needs it opkg update && opkg install luci(for some reason it was either not installed or did not work)
4. Copy the keys (cert.crt, cert.key, ca.crt to the /etc/openvpn/ folder keys ) and config on the router to the folder /etc/openvpn
config /etc/openvpn/client.conf (where хх.хх.хх.хх is the ip of the openvpn server):

client
dev tun
proto udp
remote хх.хх.хх.хх 1194
persist-key
persist-tun
comp-lzo
resolv-retry infinite
nobind
ca /etc/openvpn/keys/ca.crt
cert /etc/openvpn/keys/cert.crt
key /etc/openvpn/keys/cert.key
remote-cert-tls server
verb 1
mute 3
log /var/openvpn.log

4. Run openvpn /etc/init.d/openvpn start
5. View the log and errors: cat /var/openvpn.log
6. After these manipulations, pings should go from the router to the remote network.
7. Configure the interfaces (via the web it looks like this):
Network -> Interfaces -> Add
Name of new interface: VPN
Protocol of new interface: Unmanaged
Cover of the following interface: tun0
Submit.
8. Add a VPN zone with the tun0 interface to the Firewall and allow access from it to the LAN, allow access from the LAN to the VPN.
Nuances:
there are several ways to copy sert files:
1. copying via sftp, installing it opkg update && opkg install openssh-sftp-server(previously it is desirable to change the port in dropbear to something other than 22, for example 222),
2. copying through the buffer and pasting into vi,
3. Having raised the web server on the local computer, and pick it up via wget.
4. ...