A VPN client is a terminal device or software used to establish a secure connection between a user and a VPN server.
What is VPN?
VPN (Virtual Private Network) helps you access internet resources remotely, securely, and privately with tunneling technology. The VPN encrypts your personal information and hides your IP address from the public when you use the internet. To the users of the VPN, it will look like the computers were directly connected to each other.
Common Network Topology:
Here we take WR2100 as a demonstration.
Step 1: Open a web browser and go to http://cudy.net or http://192.168.10.1.
For details, please refer to How to log into the web interface of Cudy Router?
Step 2: Click on General Settings->VPN and enable VPN.
Default Rule: Allow all devices or Ban all devices to use VPN.
To specify the device, click on System Status-> Devices->VPN to enable or disable it.
Site-to-Site: Allow the devices in two sites to communicate with each other.
VPN Policy:
Disable: No additional setting.
VPN kill switch: Turn off the Internet connectivity when the VPN connection is lost.
Domain: Specify which domains go through the VPN and which don't
Remote Subnet: Specify what subnets go through the VPN and which don't
Step 3: In the Protocol list, select the one you need and enter the VPN information provided by your VPN provider.
• PPTP VPN
Enter the VPN server address (for example, 113.92.73.163) and the VPN Username and password provided by your VPN provider.
• L2TP VPN
Enter the VPN server address (for example 113.92.73.163), VPN username and password, and pre-shared key provided by your VPN provider.
If your VPN provider also provides you the tunnel IP which binds with the account, you can enable the Use custom tunnel IP option.
• OpenVPN
Click on Browser to import the configuration file provided by your VPN provider.
• WireGuard VPN
Click on Browser to import the configuration file provided by your VPN provider.
The Interface and Peer will synchronize automatically from your VPN Provider's CONF File.
• ZeroTier Slave
Type in the ZeroTier Network ID and Gateway provided by the ZeroTier Master. The Gateway can be found on VPN Status part.
Related Article: How to remote connect Cudy Router via Zerotier?-Cudy Home
198 comments
Hello,
I am experiencing a problem with WireGuard Site-to-Site on my Cudy P5 that appears to be very similar to other cases reported on your support website.
My setup is:
Cudy P5 with 5G SIM (Lowi) Firmware: 2.4.27 (latest available) Cudy LAN: 192.168.10.0/24 Cudy LAN IP: 192.168.10.1 ASUS TUF-AX5400 running Asuswrt-Merlin/Gnuton ASUS LAN: 192.168.50.0/24 ASUS LAN IP: 192.168.50.1The ASUS is configured as the WireGuard server and the Cudy P5 as the WireGuard client.
On the Cudy:
WireGuard Client: enabled Site-to-Site: enabled Default rule: Allow all devices VPN policy: Remote Subnet Remote subnet: 192.168.50.0/24 WireGuard tunnel IP: 10.6.0.2 Endpoint port: 51820The problem is asymmetric:
1. From a device connected to the Cudy LAN (192.168.10.x), I can access devices on the ASUS LAN (192.168.50.x) correctly.
192.168.10.1 does not respond. Devices behind the Cudy, for example 192.168.10.121, do not respond.2. From the ASUS LAN, I can ping 10.6.0.2 and even access the Cudy web interface through 10.6.0.2.
3. However, from the ASUS LAN I cannot access the Cudy LAN:
4. Therefore, the WireGuard tunnel itself is working, but traffic arriving through WireGuard is apparently not being forwarded from the VPN interface to the Cudy LAN.
I have already upgraded the P5 from firmware 2.4.25 to the latest 2.4.27, but the behaviour is exactly the same.
I have also found previous Cudy support cases describing what appears to be the same asymmetric Site-to-Site behaviour, where the remote LAN can access the VPN server LAN but the reverse direction does not work.
Could you please confirm:
1. Is this a known limitation or bug in the P5 WireGuard Site-to-Site implementation?
2. Has the problem reported in the previous support cases been fixed in firmware 2.4.27?
3. If it is not fixed, is there a recommended configuration to allow traffic from the WireGuard tunnel (10.6.0.0/…) to be forwarded to the P5 LAN (192.168.10.0/24)?
4. Is there a way to enable the required forwarding/NAT manually, or is this something that requires a firmware update?
5. If possible, could you provide the exact configuration required to make the connection fully bidirectional?
I would be happy to provide screenshots or configuration details if needed.
Thank you.
Mám CUDY R700 a vypadává mi připojení do Internetu. Běží několik hodin (různě) a pak dojde k přerušení spojení. Zařízení je nutné restartovat, aby se opět rozběhlo. Zkoušel jsem i VPN tunel pomocí IPSEC a OpenVPN proti zařízení ARCHER VX1800v VPN. Nedaří se mi VPN zprovoznit.
@Уважаемый А,
Какой протокол использует этот VPN? Вы можете проверить, поддерживает ли ваш маршрутизатор этот протокол VPN.
“А как настроить Amnesia VPN на роутере WR3000?”
А как настроить Amnesia VPN на роутере WR3000?
@Уважаемый Никита,
Извините, в настоящее время у нас нет планов это делать.
“Пожалуйста добавьте поддержку amneziaWG на роутерах Cudy wr3000, это один из немногих сервисов продолжающих работать в России, будем очень благодарны!”