config interface 'loopback'
    option device 'lo'
    option proto 'static'
    option ipaddr '127.0.0.1'
    option netmask '255.0.0.0'

config globals 'globals'
    option ula_prefix 'fd2c:92af:da91::/48'

config device
    option name 'br-lan'
    option type 'bridge'
    list ports 'eth0'

config interface 'lan'
    option device 'br-lan'
    option proto 'static'
    option netmask '255.255.255.0'
    option ip6assign '60'
    option ifname ' tap0 tap-server'
    option ipaddr '192.168.8.1'

config interface 'VPN'
    option proto 'none'
    option auto '0'
    option device 'tun0'

config interface 'VPNS'
    option proto 'none'
    option auto '0'
    option device 'tun-server'

config interface 'TAP'
    option proto 'none'
    option auto '1'
    option device 'tap0'

config interface 'TAPS'
    option proto 'none'
    option auto '0'
    option device 'tap-server'

config interface 'wg0'
    option proto 'wireguard'
    option auto '0'
    list addresses ''

config interface 'wg1'
    option proto 'wireguard'
    option auto '0'
    list addresses ''

config interface 'wwan'
    option proto 'dhcp'
    option metric '2'

config interface 'wan2'
    option proto 'dhcp'
    option metric '20'
    option device 'wan2'

config interface 'wan1'
    option proto 'dhcp'
    option device ' '
    option metric '10'

config minfo1 'modeminfo1'
    option inter '0'
    option delay '5'
    option lb '0'
    option at '0'
    option nodhcp '0'
    option apn 'internet'
    option tzone '0'
    option log '0'
    option ppp '0'
    option auth '2'
    option lock '1'
    option mcc '260'
    option mnc '02'
    option passw 'internet'
    option pdptype 'IP'

  
Tue Dec 28 19:48:56 2021 : /dev/ttyUSB80 AT+CPMS="SM"
+CPMS: 0,25,0,25,0,25
OK
  
Tue Dec 28 19:48:57 2021 : /dev/ttyUSB80 AT+CMGL=4
OK
  
Tue Dec 28 19:49:02 2021 : /dev/ttyUSB80 AT+CPMS="SM"
+CPMS: 0,25,0,25,0,25
OK
  
Tue Dec 28 19:49:06 2021 : /dev/ttyUSB80 AT+COPS=3,2;+COPS?
+COPS: 2
OK
  
Tue Dec 28 19:49:32 2021 : /dev/ttyUSB80 AT+COPS=0
ERROR
  
Tue Dec 28 19:49:33 2021 : /dev/ttyUSB80 AT+CGACT=0,1
ERROR
  
Tue Dec 28 19:49:35 2021 : /dev/ttyUSB80 AT+CGDCONT=?
+CGDCONT: (0-29),"IP",,,0,(0,1,2,3,4),(0,1),(0-3),(0,1),(0,1),(0,1),(0,1),(0,1)
+CGDCONT: (0-29),"IPV6",,,0,(0,1,2,3,4),(0,1),(0-3),(0,1),(0,1),(0,1),(0,1),(0,1)
+CGDCONT: (0-29),"IPV4V6",,,0,(0,1,2,3,4),(0,1),(0-3),(0,1),(0,1),(0,1),(0,1),(0,1)
OK
  
Tue Dec 28 19:49:36 2021 : /dev/ttyUSB80 AT+CGDCONT?;+CFUN?
+CGDCONT: 0,"IP","internet","100.100.124.11",0,0,0,0,0,0,0,0,0,0
+CGDCONT: 1,"IPV4V6","internet","0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0",0,0,0,0,0,0,0,0,0,0
+CFUN: 1,0
OK
  
Tue Dec 28 19:49:38 2021 : /dev/ttyUSB80 AT+CGPIAF=1,0,0,0;+XDNS=1,1;+XDNS=1,2
OK
  
Tue Dec 28 19:49:39 2021 : /dev/ttyUSB80 AT+CGACT=1,1
ERROR
  
Tue Dec 28 19:49:41 2021 : /dev/ttyUSB80 AT+CEREG?;+CREG?
+CEREG: 0,0
+CREG: 0,2
OK
  
Tue Dec 28 19:49:43 2021 : /dev/ttyUSB80 AT+CPMS="SM"
+CPMS: 0,25,0,25,0,25
OK
  
Tue Dec 28 19:49:52 2021 : /dev/ttyUSB80 AT+COPS=3,2;+COPS?
+COPS: 2
OK

opkg update
opkg install openvpn-openssl

pobieramy pliki konfiguracyjne z serwera będzie to zip z 3 plikami albo 3 pliki tj z koncówka (.ovpn, .p12, .key)
umieszczamy bez katalogu w /etc/openvpn (na routerze przez winscp)

uci set openvpn.custom_config=openvpn
uci set openvpn.custom_config.enabled='1'
uci set openvpn.custom_config.config='/etc/openvpn/nazwa_pliku_z_koncówka.ovpn'
uci commit openvpn

uci set network.vpn=interface
uci set network.vpn.ifname=tap0
uci set network.vpn.proto=none
uci commit network

restart usług

/etc/init.d/network restart
/etc/init.d/firewall restart
/etc/init.d/openvpn enable
/etc/init.d/openvpn start

dodajemy interfajes tap0 do lanu

instalujemy pakiet ebtables


dodajemy do
Sieć>zapora_sieciowa>Własne reguły

iptables -A INPUT -i tap0 -j ACCEPT
iptables -A INPUT -i br-lan -j ACCEPT
iptables -A FORWARD -i br-lan -j ACCEPT

ebtables -F
ebtables -I FORWARD -i tap0 -p IPv4 --ip-protocol udp --ip-destination-port 67:68 -j DROP
ebtables -I FORWARD -o tap0 -p IPv4 --ip-protocol udp --ip-destination-port 67:68 -j DROP
ebtables -I INPUT -i tap0 -p IPv4 --ip-protocol udp --ip-destination-port 67:68 -j DROP
ebtables -I OUTPUT -o tap0 -p IPv4 --ip-protocol udp --ip-destination-port 67:68 -j DROP

doklejamy na końcu i zapisujemy w /etc/config/firewall

config rule
    option target 'ACCEPT'
    option src 'wan'
    option proto 'tcp'
    option dest_port '80'
    option name 'AllowWANWeb80'

config rule
    option target 'ACCEPT'
    option src 'wan'
    option proto 'tcp'
    option dest_port '443'
    option name 'AllowWANWeb443'

config rule
    option target 'ACCEPT'
    option src 'wan'
    option proto 'tcp'
    option dest_port '22'
    option name 'AllowWANWebSSH'

config include
    option path '/etc/firewall.user'


Do zaplanowanych zadań dodajemy i po zapisaniu restartujemy usługę cron

# Reboot at 4:30am every day
# Note: To avoid infinite reboot loop, wait 70 seconds
# and touch a file in /etc so clock will be set
# properly to 4:31 on reboot before cron starts.
30 4 * * * sleep 70 && touch /etc/banner && reboot



Na koniec wyłączamy wszytskie serwery dhcp na LAN-ie, adresy mają być przydzielane z ovpn TAP