dzięki, ale to chyba początek mojej konfiguracji 
z poziomu openwrt jak na screenie wywołam tą komende to najwyrażniej łaczy sie z vpn'em.
root@OpenWrt:~# openvpn --config /etc/openvpn/alonweb.conf --ca /etc/openvpn/alo
nweb.crt
Mon Nov 16 18:42:06 2009 OpenVPN 2.1_rc18 mipsel-openwrt-linux [SSL] [LZO2] built on Aug 25 2009
Enter Auth Username:xxx
Enter Auth Password:
Mon Nov 16 18:42:14 2009 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Mon Nov 16 18:42:14 2009 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Mon Nov 16 18:42:14 2009 LZO compression initialized
Mon Nov 16 18:42:14 2009 Control Channel MTU parms [ L:1544 D:140 EF:40 EB:0 ET:0 EL:0 ]
Mon Nov 16 18:42:14 2009 Data Channel MTU parms [ L:1544 D:1450 EF:44 EB:135 ET:0 EL:0 AF:3/1 ]
Mon Nov 16 18:42:14 2009 Local Options hash (VER=V4): '69109d17'
Mon Nov 16 18:42:14 2009 Expected Remote Options hash (VER=V4): 'c0103fa8'
Mon Nov 16 18:42:14 2009 Attempting to establish TCP connection with 85.17.136.142:443 [nonblock]
Mon Nov 16 18:42:15 2009 TCP connection established with 85.17.136.142:443
Mon Nov 16 18:42:15 2009 Socket Buffers: R=[87380->131072] S=[16384->131072]
Mon Nov 16 18:42:15 2009 TCPv4_CLIENT link local: [undef]
Mon Nov 16 18:42:15 2009 TCPv4_CLIENT link remote: 85.17.136.142:443
Mon Nov 16 18:42:18 2009 TLS: Initial packet from 85.17.136.142:443, sid=cee247cc a05a82bf
Mon Nov 16 18:42:18 2009 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Mon Nov 16 18:42:22 2009 VERIFY OK: depth=1, /C=BY/ST=BY/L=Minsk/O=Lesavik/CN=Lesavik_CA/emailAddress=lesavik@alonweb.com
Mon Nov 16 18:42:22 2009 VERIFY OK: depth=0, /C=BY/ST=BY/L=Minsk/O=Lesavik/CN=server/emailAddress=lesavik@alonweb.com
Mon Nov 16 18:42:24 2009 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon Nov 16 18:42:24 2009 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Nov 16 18:42:24 2009 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon Nov 16 18:42:24 2009 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Nov 16 18:42:24 2009 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Mon Nov 16 18:42:24 2009 [server] Peer Connection Initiated with 85.17.136.142:443
Mon Nov 16 18:42:25 2009 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Mon Nov 16 18:42:25 2009 PUSH: Received control message: 'PUSH_REPLY,dhcp-option DNS 156.154.70.1,dhcp-option DNS 208.67.220.220,redirect-gateway,route 172.32.0.1,topology net30,ping 10,ping-restart 120,ifconfig 172.32.0.190 172.32.0.189'
Mon Nov 16 18:42:25 2009 OPTIONS IMPORT: timers and/or timeouts modified
Mon Nov 16 18:42:25 2009 OPTIONS IMPORT: --ifconfig/up options modified
Mon Nov 16 18:42:25 2009 OPTIONS IMPORT: route options modified
Mon Nov 16 18:42:25 2009 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Mon Nov 16 18:42:26 2009 TUN/TAP device tun0 opened
Mon Nov 16 18:42:26 2009 TUN/TAP TX queue length set to 100
Mon Nov 16 18:42:26 2009 /sbin/ifconfig tun0 172.32.0.190 pointopoint 172.32.0.189 mtu 1500
Mon Nov 16 18:42:26 2009 /sbin/route add -net 85.17.136.142 netmask 255.255.255.255 gw 192.168.0.1
Mon Nov 16 18:42:26 2009 /sbin/route add -net 172.32.0.1 netmask 255.255.255.255 gw 172.32.0.189
Mon Nov 16 18:42:26 2009 Initialization Sequence Completed
ale jak wychodze ze screen i odpalam elinks'a na ruterze to dalej pokazuje adress polski, czyli coś robie nie tak 
. Da się to jakoś rozwiązać ? Widze ze dodał jakieś smieszne routy, da się go teraz jakoś zamknać zeby je usunał ?
otóz może zaczne od początku, co chce osiagnać. Moja konfiguracja to
internet <---> router_linksys <--(vpn)--> wl500gp (zOpenwrt) <----> PC
chciałem zrobić dwa scenariusze:
1. Jeżeli podłącze PC pod linksysa to chce normalny dostępn z IP polskim (to teraz tak działa 
)
2. Jeżeli podłącze pod router_linksys to chce adress z vpna.
ad2.
Tak zrobiłem jednak address został przydzielony od asusa z sieci lokalnej tego routera (int br-lan z tego co rozumie)
czy jakoś muszę podłaczyć port pod ten openvpn ? da sie to zautomatyzować ? czy mogę mieć inne sieci na routerze czy tylko dhcp przydziela te z interfasu br-lan ?
root@OpenWrt:~# ifconfig -a
br-lan Link encap:Ethernet HWaddr 00:17:31:DC:08:F7
inet addr:192.168.1.1 Bcast:192.168.1.255 Mask:255.255.255.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:2403 errors:0 dropped:0 overruns:0 frame:0
TX packets:3152 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:158846 (155.1 KiB) TX bytes:3821182 (3.6 MiB)
eth0 Link encap:Ethernet HWaddr 00:17:31:DC:08:F7
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:1473951 errors:0 dropped:0 overruns:0 frame:0
TX packets:1011159 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:1813389791 (1.6 GiB) TX bytes:431375568 (411.3 MiB)
Interrupt:4
eth0.0 Link encap:Ethernet HWaddr 00:17:31:DC:08:F7
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:2403 errors:0 dropped:0 overruns:0 frame:0
TX packets:3152 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:168458 (164.5 KiB) TX bytes:3833790 (3.6 MiB)
eth0.1 Link encap:Ethernet HWaddr 00:17:31:DC:08:F7
inet addr:192.168.0.2 Bcast:192.168.0.255 Mask:255.255.255.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:1471553 errors:0 dropped:0 overruns:0 frame:0
TX packets:1008013 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:1786690653 (1.6 GiB) TX bytes:422292171 (402.7 MiB)
eth1 Link encap:Ethernet HWaddr 40:10:18:00:00:2D
BROADCAST MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)
Interrupt:5
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:16891 errors:0 dropped:0 overruns:0 frame:0
TX packets:16891 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:2260706 (2.1 MiB) TX bytes:2260706 (2.1 MiB)
tun0 Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
inet addr:172.32.0.190 P-t-P:172.32.0.189 Mask:255.255.255.255
UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:100
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)
wlan0 Link encap:Ethernet HWaddr 00:17:31:DC:08:F7
BROADCAST MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)
dzięki za pomoc 
edit:
zrobiłem ten skrypt co tam cezary w FAQ wypisał:
root@OpenWrt:~# /etc/init.d/openvpn-startup start
Mon Nov 16 19:23:21 2009 TUN/TAP device tap0 opened
Mon Nov 16 19:23:21 2009 Persist state set to: ON
root@OpenWrt:~# cat /etc/init.d/openvpn-startup
#!/bin/sh /etc/rc.common
START=94
start() {
openvpn --mktun --dev tap0
brctl addif br-lan tap0
ifconfig tap0 0.0.0.0 promisc up
}
stop() {
ifconfig tap0 0.0.0.0 down
brctl delif br-lan tap0
openvpn --rmtun --dev tap0
}
jednak przy sprawdzaniu na stronie na PCecie podaczonym jak w pkt2. (czyli zgodnie z rysunkiem) dalej mam polskie ip jestem w kropce .. HELP...