APPENDIX B - EXAMPLE USE CASE (VPN) SETUP DETAILS
1.
VPN
Server
(Ground
Side)
A.
Install
OpenWRT
on
the
router
(1) Download OpenWRT 19.07.4 from the below link: http://downloads.openwrt.org/releases
/19.07.4/targets/ar71xx/generic/openwrt-19.07.4-ar71xx-generic-gl-ar750s-squashfs-
sysupgrade.bin
(2) Perform upgrade
– Connect your computer to any of the LAN ports on the router.
– Set the IP address of the computer to 192.168.1.2, mask 255.255.255.0, gateway
192.168.1.1
– Hold RESET button on the router and plug in the power supply.
– Keep holding until the WiFi LED flashe
s 5
times, then release the button.
– Navigate to 192.168.1.1 and upload the OpenWRT image.
– The router will reboot automatically.
B.
Configure
the
router
(1) Set the router LAN IP to 192.168.1.1 if it isn’t already. Set the DHCP server start address
to 80 and limit to 40.
(2) Temporarily connect the router to the internet (via WAN port or use a mobile hotspot on the
mobile phone) and open an SSH session.
(3) Execute the following commands to install required packages:
# opkg update
# opkg install kmod-usb-core kmod-usb2 usb-modeswitch libusb-1.0 kmod-usb-net-cdc-ether
openvpn-openssl openvpn-easy-rsa luci-app-openvpn luci-app-ddns
(4) Set the WAN IP address to 192.168.8.100, netmask 255.255.255.0, gateway 192.168.8.1.
Use custom DNS 8.8.8.8.
(5) Connect the USB modem and reboot router.
(6) Open WAN interface settings, go to Physical Settings and elect “eth1” from the drop-down
list. Save & Apply.
(7) Delete WAN6 interface from Network -> Interfaces.
(8) Navigate to 192.168.8.1 and enable DMZ on the 192.168.8.100 IP address. Ensure the modem
has established connection to the internet.
(9) Configur
e D
ynamic DNS settings according to your selected provider. You might need to install
additional packages for some providers. Verify the IP address is updated in your user panel.
(10) Execute the following commands on the router (this will take a while to generate):
# cd /etc/easy-rsa/
# easyrsa gen-dh
# easyrsa build-ca nopass (enter smallsatcom as CA when prompted)
# easyrsa build-server-full server nopass
# easyrsa build-client-full smallsatcom nopass
Page 4
6
1
8
Feb 2021
© Honeywell International Inc. Do not copy without express permission of Honeywell.
SYSTEM DESCRIPTION, INSTALLATION, AND MAINTENANCE MANUAL
SMALL SATCOM
