The following archive configuration sets up a libreCMC 6.x TPE-R1300 wireless router with two SSIDs. One is for tunneling wifi traffic through the Wireguard PenguinVPN 2.0 service. The 2nd SSID is for bypassing the VPN. Traffic going through the LAN port on the router also is passed through the Wireguard PenguinVPN 2.0 service.
This configuration is protected from the Tunnel Vision attack (rouge ISP undermining your VPN connection).
The below instructions have been vetted on TPE-R1300 with libreCMC 6.7, but should work with any libreCMC 6.x release.
0. Before you connect the router download the librecmc-bypass-backup-without-private-keys-min-config-files.tar.gz archived configuration and make a note where you have saved it
1. Connect router to power, wifi antennas, ethernt from lan port on router to pc, and from wan port on router to upstream router
2. Wait for a minute for router to boot up, then open browser and go to address: https://192.168.10.1/
3. Login (no password is setup by default, just hit login button) and go to System > Backup / Flash Firmware
4. Under Restore section click the Upload archive button ... then the browse button ... and locate the previously downloaded librecmc-bypass-backup-without-private-keys-min-config-files.tar.gz file and click the open button.
5. Click the button to confirm you want to restore this archive.
6. After the router reboots (takes ~1 minute or so) on your computer go to the network applet and disconnect from the network, then reconnect
7. You will be issued a new IP in the 192.168.3.x range and you will then need to open a browser and go to https://192.168.3.1 and login to the router at its new IP
8. There is now a password set, the default password is 'none' without the quotes, so enter it and login
9. Then go to Network > Interfaces
10. Click the Edit button for WGINTERFACE
11. Copy your info from the ovpn file / configuration email'd to you or included with your router
12. That is to say copy your private key to the private key box, the public key to the public key box, and the IP address to the IP addresses box
example of what should be in the IP address box (but make sure you pull it from the ovpn file/credentials sheet included with router): 10.10.14.134/32
13. Click the plus arrow for the IP Addresses box to make sure the IP gets included
14. Go to the Peers tab
15. Click the Edit button for Europe
16. Once again copy the private key, public key over to the appropriate boxes
17. Also copy over the preshared key this time
18. Click the save button
19. Click the 2nd save button
20. Click the Save & Apply button
21. Give the router a minute to apply the configuration, then from your computers network applet disconnect and reconnect to the network, to ensure you get a new DNS
22. Then open a new tab, you can use infosniper.net to verify your going through another country/VPN server