Перейти к основному содержанию

Как настроить AdGuard VPN для Linux на роутере OpenWRT

Системные требования

Для работы AdGuard VPN для Linux, также известного как AdGuard VPN CLI, требуется не менее 22 МБ свободного места на встроенной памяти роутера или на внешнем USB-накопителе после установки необходимых пакетов.

1. Убедитесь, что на вашем роутере включён SSH​

Эта настройка обычно находится в веб-интерфейсе роутера.

Для OpenWrt:

  1. Войдите в веб-интерфейс. Как правило, он доступен через веб-браузер по адресу http://192.168.1.1.

  2. Перейдите в **Система → Администрирование.

  3. Убедитесь, что *SSH-доступ включён.

По умолчанию OpenWrt разрешает доступ по SSH к роутеру.

2. Определите IP-адрес вашего роутера​

IP-адрес по умолчанию для большинства роутеров — 192.168.1.1 или 192.168.0.1. Если вы изменили IP-адрес или не уверены, какой он, его можно найти, проверив конфигурацию IP-адреса на подключённом устройстве.

На Windows​

  1. Откройте командную строку:

    ipconfig

  2. Найдите Шлюз по умолчанию в активном сетевом подключении. Это IP-адрес вашего роутера.

На macOS и Linux​

  1. Откройте Терминал и выполните эту команду на Linux:

    ip route | grep default

    Или эту на Mac:

    route -n get default

  2. Найдите запись default. Рядом с ней находится IP-адрес вашего роутера.

3. Use an SSH client to connect to the router​

Most Linux and macOS systems come with an SSH client pre-installed. For Windows, you can use PowerShell, the built-in SSH client in Windows 10/11, or a third-party application like PuTTY.

Built-in SSH client (Linux, macOS, and Windows 10/11)​

  1. Open Terminal or PowerShell.

  2. Run the SSH command:

    ssh root@192.168.1.1

    Replace 192.168.1.1 with your router’s IP address.

  3. If this is your first time connecting to the router via SSH, you’ll see a message like:

    The authenticity of host '192.168.1.1 (192.168.1.1)' can't be established.
    ECDSA key fingerprint is SHA256: ...
    Are you sure you want to continue connecting? (Yes/No/[Fingerprint])

    Type Yes and press Enter.

  4. Enter the router’s password when prompted. The default password for OpenWrt is typically empty (just press Enter), but you should have set a password during the initial setup.

PuTTY (Windows)​

  1. Download and install PuTTY from the official website.

  2. Open PuTTY.

  3. In the Host Name (or IP address) field, enter your router’s IP address (e.g., 192.168.1.1).

  4. Ensure the Connection type is set to SSH.

  5. Click Open.

  6. When the Terminal window opens, log in. The default username is root and the default password is keenetic.

4. Basic SSH commands​

Once logged in, you can use various commands to interact with your router’s Linux-based operating system.

Update package lists (OpenWrt):

opkg update

Install required packages:

opkg install curl kmod-tun ca-certificates

Run the AdGuard VPN CLI installation script:

curl -fsSL https://raw.githubusercontent.com/AdguardTeam/AdGuardVPNCLI/master/scripts/release/install.sh | sh -s -- -v

5. Set up AdGuard VPN CLI​

  1. Log in to your account

    To use AdGuard VPN for Linux, you need an AdGuard account.

    You can sign up or log in on our website or in the Terminal.

    To sign up or log in, type:

    adguardvpn-cli login

    Note: If failed to link the binary to '/usr/local/bin’, use full file path to run all commands. For example, /opt/adguardvpn_cli/adguardvpn-cli login

  2. Connect to VPN

    Select a VPN server location that best suits your needs.

    In general, the closer the server is to you, the faster the connection.

    To view available locations, type:

    adguardvpn-cli list-locations

    To connect to a specific location, type:

    adguardvpn-cli connect -l LOCATION_NAME

    Replace LOCATION_NAME with the city, country, or ISO code of the location you want to connect to.

    For quick connect, type:

    adguardvpn-cli connect

    AdGuard VPN will choose the fastest available location and remember it for future quick connections.

  3. Adjust your settings

    Get a list of all available AdGuard VPN commands and customize the VPN client to your needs.

    To view all commands, type:

    adguardvpn-cli --help-all

    AdGuard VPN CLI will create a tun0 interface for VPN tunneling.

6. Set up firewall rules​

You can do it in the web interface or in the command line. Steps below describe setup via SSH command line.

  1. Add a new unmanaged interface via SSH

    ssh admin@router_ip
    uci set network.tun0='interface'
    uci set network.tun0.proto='none'
    uci set network.tun0.device='tun0'
    uci commit network
    /etc/init.d/network reload

  2. Add tun0 to WAN zone

    For traffic to go through VPN, add tun0 to WAN zone. The WAN interface which connects to the Internet will typically be in a zone named wan or something similar. Check your router's configuration files or firewall settings to find out which zone is associated with the WAN interface.

    To do so, list the existing firewall zones:

    uci show firewall

    This will show a config file with all zones listed. Look for a section like firewall.@zone[1] or similar where option name 'wan' is defined. The number [1] could be different depending on your configuration.

    Run this SSH command, replace zone[1] with correct ‘wan’ zone identified before:

    uci show firewall | grep "=zone"
    uci add_list firewall.@zone[1].network='tun0'
    uci commit firewall
    /etc/init.d/firewall reload

    If you want to disable all traffic that is not protected by VPN, run the following command. This way you won’t have an Internet connection at all if VPN disconnects. If you choose not to do this step, your real IP will be exposed if the VPN disconnects.

    uci del_list firewall.@zone[1].network='wan'
    uci del_list firewall.@zone[1].network='wan6'
    uci commit firewall
    /etc/init.d/firewall reload

    If you’ve changed your mind and want to allow direct traffic, run the following command:

    uci add_list firewall.@zone[1].network='wan'
    uci add_list firewall.@zone[1].network='wan6'
    uci commit firewall
    /etc/init.d/firewall reload

7. Set up automatic launch for AdGuard VPN CLI​

To automatically launch AdGuard VPN CLI after rebooting the router, create a file at …/etc/init.d/adguardvpn.

Paste this into the file:

#!/bin/sh /etc/rc.common
# Example script
# Copyright (C) 2007 OpenWrt.org
START=99
STOP=99
HOME=/root
start() {
        /opt/adguardvpn_cli/adguardvpn-cli connect
}

stop() {
        /opt/adguardvpn_cli/adguardvpn-cli disconnect

}

Run this to grant access to and enable auto-launch:

 chmod +x /etc/init.d/adguardvpn
 /etc/init.d/adguardvpn enable
Получите 3 Гб бесплатно
Установить
Скачивая программу, вы принимаете условия Лицензионного соглашения