The following directions are a simplified set of directions for setting up a TPE-R1300 router with our segregated VPN guest SSID configuration. These have been vetted thoroughly and were last vetted against a TPE-R1300 router with libreCMC 6.2 and a PenguinVPN 2.0 Wireguard subscription. The resulting configuration when applied will have a libreCMC access point and a guestVPN access point. Devices/systems connected to the libreCMC access point and devices/systems connected to the LAN port (or via a switch) do not have their traffic passed through the VPN. The systems connecting to the guestVPN access point obviously will have their traffic passed through the VPN. These directions are designed for users with a PenguinVPN 2.0 Wireguard subscription.
These directions work for both OEM and non-OEM releases of libreCMC 6.x.
Please make sure that you are starting from a clean slate: System > Backup / Flash Firmware and click the Perform reset button.
If you want to utilize the non-OEM release of libreCMC 6.x download it and flash it now.
For the TPE-R1300 for instance that would be this image (note you may need to change the 6.2 in the URL to that latest release):
https://librecmc.org/librecmc/downloads/snapshots/v6.2/targets/ath79/gen...
If you want to use GPG to verify the images are authentic we have directions on that here (this applies to the non-OEM images only).
Download the configuration for the segregated VPN guest network configuration.
Note: If you want to verify the contents of the tar.gz file are not corrupt the sha512 hash is (the command is: sha512sum segregated-vpn-guest-network-configuration-for-librecmc-6x.tar.gz):
f3f933ed489d537134b729314ee96ae4660b81e7f0b60591f188d2a375a9a9f76d0c3391597e5660ac8bfbe3b0a9c474f0f75625c75c66a580213841894d8a46
Set a static IP of the computer you are using to 192.168.1.2 and 24 for the netmask
Plug the power cable into a wall socket USB power adapter or USB port on your computer
Hold down the reset button on the TPE-R1300 and while doing so plug the other end of the power cable into TPE-R1300 power port
Upload the librecmc-ath79-generic-thinkpenguin_tpe-r1300-squashfs-sysupgrade.bin and wait for the router to reboot
Connect an ethernet cable to the LAN port and the other end to the PC's ethernet port
From the network applet (usually in the lower right or upper right of the screen) on your computer connect to the ethernet and disconnect from the wifi
Once an ethernet connection is established open a web browser and enter https://192.168.10.1/ in the address bar, then hit enter
Login (there is no password by default, we suggest setting one, you will also need to click the advanced button in Firefox, and add an exception to access the login page)
You may need to set a static IP that doesn't conflict with your upstream router, 192.168.10.1 is the default and shouldn't conflict with most upstream routers/modems
If you need to set a static IP go to Network > Interfaces
Click the Edit button for the LAN network
In the IPv4 address box change the IP from 1921.68.10.1 to something else, example 192.168.3.1
Click the Save button
Click the Svae & Apply button
When warned about connectivity change click the Apply and keep settings button
Give the router a minute or two to reboot
Use your network applet in the top or lower right corner to disconnect and reconnect your ethernet connection if you've changed the routers IP
Back in the web browser open a new tab and go to the new router IP (if you needed to change it) https://192.168.3.1/
You will need to click the Advanced... button and then the Accept the risk and continue button again if you changed your routers IP address
Log back into the router
Plug in an ethernet cable between the WAN port and an upstream modem or router with internet access
The following packages need to be installed for users who are not using the OEM libreCMC images for the TPE-R1300 router.
Go to System > Software
Click the Update lists... button and then the Dismiss button
In the Filter box enter luci-app-https-dns-proxy and then click the Install... button for it, then the Install button to confirm you want to install this package, then the Dismiss button
In the Filter box enter luci-proto-wireguard and then click the Install... button for it, then the Install button to confirm you want to install this package, then the Dismiss button
Go to System > Reboot and click the Perform reboot button
Give the router 1-2 minutes to reboot
Log back into the router
Go to System > Backup / Flash Firmware
Click the Upload archive... button and locate the default archive configuration for the segregated VPN network configuration, then click the Upload button, then click the Continue button
Give the router 1-2 minutes to reboot
Log back into the router
Go to Network > Interfaces
Click the Edit button for WGINTERFACE
Locate your PenguinVPN 2.0 Wireguard Configuration (this may have been email'd to you or you may have received it on a piece of paper with the router itself)
Copy the Private Key into the Private Key box
Copy the Public Key into the Public Key box
Copy the Addresses (example: 10.150.233.202/32) into the IP Addresses box, click the + arrow, and x arrow to delete any empty IP boxes
Click the Peers tab
Click the Edit button in the Peers tab
Copy the Public Key into the Public Key box
Copy the Private Key into the Private Key box
Copy the Preshared Key into the Preshared Key box
Click the Save button
Click the Save button (different save button, but save button again)
Click the Save & Apply button
You can now disconnect from the ethernet using your network applet icon in the lower or upper left corner of the screen
Use the network applet to connect to the guestVPN network, the default password is librecmc
You can now verify that you are connected through the VPN by opening a web browser and going to https://www.infosniper.net/ and hitting enter
You should see that your accessing the internet through another city/state/country
If you connect to the libreCMC access point you will be connected to the internet directly through your upstream internet provider
If you disconnect from the wifi and reconnect through the ethernet connection you will be directly connected through your upstream internet provider
Please note: A guest VPN user can access the router login page at https://192.168.3.1 when all is said and done even though they can't communicate with other systems/devices on the LAN