VPN客户端是用于在用户和VPN服务器之间建立安全连接的终端设备或软件。
什么是 VPN？
VPN（虚拟专用网络）利用隧道技术帮助您远程、安全且私密地访问互联网资源。当您使用互联网时，VPN 会加密您的个人信息并向公众隐藏您的 IP 地址。对于 VPN 用户来说，这就像计算机直接相互连接一样。
常见网络拓扑：
这里我们以WR2100作为演示。
步骤 1：打开网络浏览器并转到http://cudy.net或http://192.168.10.1 。
详细信息请参阅如何登录Cudy路由器的Web界面？
第 2 步：点击常规设置-> VPN并启用VPN 。
默认规则：允许所有设备或禁止所有设备使用 VPN。
要指定设备，请单击系统状态->设备-> VPN来启用或禁用它。
站点到站点：允许两个站点中的设备相互通信。
VPN 政策：
禁用：无需其他设置。
VPN 终止开关：当 VPN 连接丢失时关闭互联网连接。
域：指定哪些域通过 VPN，哪些不通过
远程子网：指定哪些子网通过 VPN，哪些不通过
步骤3：在协议列表中，选择您需要的协议，然后输入您的VPN提供商提供的VPN信息。
• PPTP VPN
输入 VPN 服务器地址（例如，113.92.73.163）以及 VPN 提供商提供的 VPN 用户名和密码。
• L2TP VPN
输入 VPN 服务器地址（例如 113.92.73.163）、VPN 用户名和密码以及 VPN 提供商提供的预共享密钥。
如果您的 VPN 提供商还为您提供了与帐户绑定的隧道 IP，您可以启用使用自定义隧道 IP选项。
• OpenVPN
单击浏览器导入您的 VPN 提供商提供的配置文件。
• WireGuard VPN
单击浏览器导入您的 VPN 提供商提供的配置文件。
接口和对等点将自动从您的 VPN 提供商的CONF 文件同步。
• ZeroTier 从属
输入 ZeroTier Master 提供的ZeroTier 网络 ID和网关。网关可以在 VPN 状态部分找到。
138 条评论
@Dear Mike,
I see. I will forward your advice to our product manager for evaluating.
“AmneziaWG adds obfuscation techniques, such as modifying packet headers and appending random data, to disguise its traffic as other UDP protocols and blend in with normal internet traffic. In essence, AmneziaWG maintains WireGuard’s performance and security but adds a layer of stealth, making it suitable for use in regions with strict internet censorship.
They are opensource – https://github.com/amnezia-vpn
ps: on keenetic devices (but I prefer Cudy anyway ;) there is even a possibility to connect by AmneziaWG using Wireguard option in Keenetic (instuction is only in russian though – https://docs.amnezia.org/documentation/instructions/keenetic-os-awg/)
In other words – almost nothing works here (in Russia) except Amnezia (based on WG) and Shadowsocks. But both of them are not available on TR3000 device yet :("
Hello, I changed my approach, I’m using a raspberry pi as an ovpn server but cudy gives me this error:Wed Dec 3 00:36:41 2025 daemon.err openvpn(client)24639: Options error: unknown tls-version-min parameter: 1.3
Wed Dec 3 00:36:41 2025 daemon.warn openvpn(client)24639: Use —help for more information.
How to fix???
Yes, there is a huge difference. Wireguard is blocked in Russia (so it doesn’t work and nobody would use it) while AmneziaWG still works.
AmneziaWG adds obfuscation techniques, such as modifying packet headers and appending random data, to disguise its traffic as other UDP protocols and blend in with normal internet traffic. In essence, AmneziaWG maintains WireGuard’s performance and security but adds a layer of stealth, making it suitable for use in regions with strict internet censorship.
They are opensource – https://github.com/amnezia-vpn
ps: on keenetic devices (but I prefer Cudy anyway ;) there is even a possibility to connect by AmneziaWG using Wireguard option in Keenetic (instuction is only in russian though – https://docs.amnezia.org/documentation/instructions/keenetic-os-awg/)
In other words – almost nothing works here (in Russia) except Amnezia (based on WG) and Shadowsocks. But both of them are not available on TR3000 device yet :(
“@Dear Mike,
Is there any difference betweem AmneziaWG VPN and standard Wireguard VPN? Can you send us some introduction about AmneziaWG VPN?”
“I do support question about AmneziaWG VPN. Is there a possibility that you’ll add this protocol in future versions?”
@Dear Arturo,
OK. That is a good news.
“I add that from the lan2 network to the lan1 network the ping works regardless of the state of the site to site button”
I add that from the lan2 network to the lan1 network the ping works regardless of the state of the site to site button