Openwrt OpenConnect VPN 搭建设置教程

## 2022年1月4日更新如果luci没有界面可以去软件源手动下载安装流程如下图 ![流程图](https://gao4.top/wp-content/uploads/2022/01/851998809.png) ```Unknown package ’luci-app-ocserv*’. Collected errors: * opkg_install_cmd: Cannot install package luci-app-ocserv*. root@OpenWrt:# wget https://mirrors.cloud.tencent.com/lede/releases/18.06.9/packages/mipsel_24kc/luci/luci-app-ocserv_git-20.356.64372-1259bb1-1_all.ipk –2022-01-04 12:01:53– https://mirrors.cloud.tencent.com/lede/releases/18.06.9/packages/mipsel_24kc/luci/luci-app-ocserv_git-20.356.64372-1259bb1-1_all.ipk Resolving mirrors.cloud.tencent.com… 125.39.223.218, 42.63.50.204, 220.194.79.73, … Connecting to mirrors.cloud.tencent.com|125.39.223.218|:443… connected. HTTP request sent, awaiting response… 200 OK Length: 5314 (5.2K) [application/octet-stream] Saving to: ’luci-app-ocserv_git-20.356.64372-1259bb1-1_all.ipk’ luci-app-ocserv_git-20.356.64372-1259bb1 100%[================================================================================>] 5.19K –.-KB/s in 0.001s 2022-01-04 12:01:56 (4.28 MB/s) - ’luci-app-ocserv_git-20.356.64372-1259bb1-1_all.ipk’ saved [5314/5314] root@OpenWrt:# ls luci-app-ocserv_git-20.356.64372-1259bb1-1_all.ipk root@OpenWrt:~~# opkg install luci-app-ocserv_git-20.356.64372-1259bb1-1_all.ipk Installing luci-app-ocserv (git-20.356.64372-1259bb1-1) to root… Configuring luci-app-ocserv. root@OpenWrt:~~# reboot root@OpenWrt:~# ``` 怎么知道当前openwrt架构的软件源包去后台看看就好了 ![复制浏览器搜索](https://gao4.top/wp-content/uploads/2022/01/816834899.png)

序言

本来这个需求基本上可以说是可以用其他vpn来解决的，可我ody勒就是不走寻常路，局域网随便一台有docker的Linux服务器开一个vpn服务不香吗，非需要在openwrt上折腾，而这方面的资料很少，而且国内对openwrt的软件服务器支持很糟糕。没有开全局基本上都是GG。固件来源是Github云编译的固件

需求

openwrt软路由承担服务
安全访问局域网
Udp加速访问
全平台客户端

软件了解

OpenConnect是一个开源的应用程序最初是拿来做思科专有的Vpn客户端AnyConnect 的开源替代品

OpenConnect项目还提供与 AnyConnect 兼容的服务器**，ocserv**

安装Ocserv服务端

1
2
3
opkg update
opkg install ocserv luci-app-ocserv
reboot

第一步

OpenWRT - 网络 - 防火墙 - 自定义规则添加防火墙规则

1
2
3
iptables -t nat -I POSTROUTING -s 192.168.100.0/24 -j MASQUERADE
iptables -I FORWARD -i vpns+ -s 192.168.100.0/24 -j ACCEPT
iptables -I INPUT -i vpns+ -s 192.168.100.0/24 -j ACCEPT