Setting up VPN server, two router set up

[gbhalla]

Hi, my ISP is Century Link and afaik they won't let know run a VPN server on one of their routers (even if I buy it). My plan is to set up a second router and run a VPN server on it and use it to access the remote camera feed (when I am away). I am unfortunately lost on how to do it. There are no instructions online or on youtube. I found the following link (this isn't quite what I need but perhaps is close).

Dual-router setup w/ a dedicated VPN Router: A step-by-step tutorial

Learn how to connect two routers WAN-to-LAN and have a dedicated VPN router and a non-VPN router. The perfect way to route certain devices outside the VPN.

www.vpnuniversity.com

I would be grateful if anyone can point me to some resource or instructions on how to set things up.

 

[SouthernYankee]

Make and model of both routers.

 

[gbhalla]

Thanks for the quick turnaround SouthernYankee. The first one (the CL one) will be either a Zyxlel 3000 or Zyxlel 4000. They also have this Greenwave C4000 ( some new router/modem). I am completely open to the second one ( the one that'll run the server). Which one should I chose?

Modems and equipment

Learn how to manage your CenturyLink internet connection with your gateway modem-router. Learn about settings and options for best performance with your internet equipment.

www.centurylink.com

 

[SouthernYankee]

The thing you are looking for is to put the Century link modem into bridge mode, by pass , pass thru mode This will turn the modem/router into a modem only. I would use an ASUS router for my second router as I know it supports OpenVPN. The ASUS router will also provided your WIFI.

look at

How do I use a different router with my DSL or Fiber service like CenturyLink?

Many ISPs like CenturyLink will either sell or rent you a modem/router combo box. It includes both a DSL or Fiber modem and a wireless router, all in one box. These little combo boxes are usually ...

support.metageek.com

 

[gbhalla]

Thanks again Southern Yankee. I am sorta tracking. Few questions:

1. What do I need to be careful of while ensuring static IP or DHCP reserve? Will that be on CL modem or the secondary modem?

2. Any tutorials that talk about end to end set up, for instance this one does not mention configuration files etc.? I will need those for the VPN access right?

 

[SouthernYankee]

I use the Asus service for ddns . This uses a name to get the correct up address. There are other DDNS service. You use a url that will return your current home Internet ip address.

When set up correctly the first router is a modem only. It will pass the internet ip address to the second router (Asus)

 

[gbhalla]

Thanks again. Sorry lost again, why do I need the service? So at a high level
1. Set up the first one as a modem
2. Configure the second one to act as a router and have a VPN server running

I understand those two pieces and your link was very helpful. Where do I need the DDNS service? Is that a setting I can enable on the first one (Acting as a modem)? Also I will still need the vpn config files right? I found this link SoutherYankee, does this get close to what you are saying?

 

[SouthernYankee]

The ddns is configured in the Asus router. If you do not have a paid for static IP address, your home IP address can change at any time. The ddns url keeps track of the IP address.

The first router is a modem. It has no smarts if set up correctly.

 

[gbhalla]

I see, thanks a lot. And I would still need to have some config files on any device that I am looking to use to tunnel in right? I think there are instructions to download and move the files?

 

[SouthernYankee]

The config file is created in the Asus router for openvpn. You will install the openvpn client on each device that is to connect to the home network.

The first thing you need to do is get a CenturyLink modem/router that supports bridge/pass thru mode. This is the critical first step.

 

[looney2ns]

VPN Primer for Noobs | IP Cam Talk
Randy : OpenVPN on a Asus router
How to Secure Your Network (Don't Get Hacked!) | IP Cam Talk