How to setup OpenVPN on OpenWrt

This guide was created by a community member and reviewed by us. Firmware and router interfaces may change over time, so some steps may differ depending on your device or version.

Prerequisites:

Make sure your OpenWrt version is 25.12 or newer.

Open the OpenWrt LuCI web interface and log in to your router.
In LuCI, go to System -> Software.
Click the "Update lists" button and wait for the package lists to update.
After the update is complete, use the "Filter" field to search for and install the following packages:
- openvpn-openssl
- luci-app-openvpn
Once the installation is finished, refresh the LuCI web interface page.
Log in to your Xeovo dashboard and download the OpenVPN configuration file for your preferred country. Select the Linux configuration.
In LuCI, navigate to VPN -> OpenVPN.
Under "OVPN configuration file upload", enter an instance name (for example, xeovo) and import the configuration file you downloaded from Xeovo.
After importing the configuration, open the newly created instance for editing.
Make the following changes to the configuration file:
- Remove the following lines:
```
      up /etc/openvpn/update-resolv-conf
      down /etc/openvpn/update-resolv-conf
```
- Locate the line:
```
      auth-user-pass
```
  and change it to:
```
      auth-user-pass /etc/openvpn/<instance-name>.auth
```
  Example:
```
      auth-user-pass /etc/openvpn/xeovo.auth
```
- At the bottom of the editor, add your Xeovo account credentials:
  - First line: Xeovo username
  - Second line: Xeovo password
Click "Save" to save the edited configuration.
Navigate to Network -> Interfaces.
Click the "Add new interface" button and enter the following configuration:
- Name – Give it any name, for example, xeovo
- Protocol – Unmanaged
- Device – tun0
  
  Click "Create", then "Save & Apply" to save the interface.

Add a Firewall Zone

Navigate to Network -> Firewall.
Click the "Add" button and enter the following configuration:
- Name – Give it any name, for example, xeovo
- Input – Reject
- Output – Accept
- Forward – Reject
- Masquerading – Enabled
- MSS Clamping – Enabled
- Covered Networks – Select the VPN tunnel interface you created earlier
- Allow forward to destination zones – Unspecified
- Allow forward from source zones – lan
Click "Save & Apply" to apply the firewall settings.
After applying the firewall configuration, reboot your OpenWrt router to ensure all network and firewall changes are properly initialized.

Your OpenVPN connection is now configured and active on your OpenWrt router.

To verify that the VPN connection is working correctly, visit:

https://doesmyvpn.work