FlashRouters Support Portal

Prioritizing Privacy

Search Results for: best vpn express routers

How do I connect a Wireless Extender to my FlashRouter network?

· ·

The settings of your FlashRouter do not need to change to connect an extender to the FlashRouter’s network. Simply access the settings of the extender device and enter the FlashRouter’s wireless network name and the correct wireless password.

The extender will then connect via wireless to the FlashRouter and add wireless range to your network.

To use a DD-WRT router as an extender follow our Advanced Wireless Setup Guides.

It is also easy to setup a Mesh system like Orbi or Velop and send your entire Mesh network through the FlashRouter VPN Network, for a VPN connected Mesh Network.

Simply connect from an open LAN port on your FlashRouter to the WAN port on your Mesh base station and then use your Mesh smart apps to complete the setup from there.

Options: Why are certain devices not appearing in the device list?

· ·

Important Update: DD-WRT Privacy App Discontinued

The FlashRouter Privacy App has been discontinued and is no longer compatible with new versions of DD-WRT firmware. If you are using DD-WRT, you can still set up OpenVPN or WireGuard manually with the latest DD-WRT builds. Our team is available to assist anyone with an active service plan during this transition.

For the easiest and most secure VPN setup experience, we highly recommend our Privacy Hero 2 solution. It’s designed to make home network security simple and comes with exclusive features, including pre-configured VPN and streaming capabilities.

If you need assistance or want to explore Privacy Hero 2, don’t hesitate to reach out!

Follow these steps if your device is not appearing in the device list on the Options page.

  1. Connect your device to the FlashRouter’s network if the device is not appearing in the device list.
  2. Click the Update button above the Device List when connecting new devices to the FlashRouter. Closing the browser entirely and opening a new incognito browser is helpful as well.
  3. Name the device if the Device Name is showing a ‘?’
  4. Setting a Static IP Address for the device within the FlashRouter’s DD-WRT settings will make it appear if the above does not help.

Options: Why are my action selections changing back to default?

· ·

Important Update: DD-WRT Privacy App Discontinued

The FlashRouter Privacy App has been discontinued and is no longer compatible with new versions of DD-WRT firmware. If you are using DD-WRT, you can still set up OpenVPN or WireGuard manually with the latest DD-WRT builds. Our team is available to assist anyone with an active service plan during this transition.

For the easiest and most secure VPN setup experience, we highly recommend our Privacy Hero 2 solution. It’s designed to make home network security simple and comes with exclusive features, including pre-configured VPN and streaming capabilities.

If you need assistance or want to explore Privacy Hero 2, don’t hesitate to reach out!

  1. We recommend using the FlashRouters Privacy App with Google Chrome or Mozilla Firefox. Alternate browsers such as Internet Explorer could cause the FlashRouters Privacy App to not fully load.
  2. Use a fresh Incognito or Private browsing window to make changes.
  3. Make sure you are pressing Apply at the bottom of the page after making any changes.
  4. Rebooting the FlashRouter will refresh the Privacy App and may help if actions are changing back to default.
  5. Restoring the FlashRouters Privacy App to default settings can also help.

How do I navigate to Options and Simple Setup in the FlashRouters Privacy App?

· ·

Important Update: DD-WRT Privacy App Discontinued

The FlashRouter Privacy App has been discontinued and is no longer compatible with new versions of DD-WRT firmware. If you are using DD-WRT, you can still set up OpenVPN or WireGuard manually with the latest DD-WRT builds. Our team is available to assist anyone with an active service plan during this transition.

For the easiest and most secure VPN setup experience, we highly recommend our Privacy Hero 2 solution. It’s designed to make home network security simple and comes with exclusive features, including pre-configured VPN and streaming capabilities.

If you need assistance or want to explore Privacy Hero 2, don’t hesitate to reach out!

Navigate to the Simple Setup and Options pages within the FlashRouters Privacy App to access additional features.

FlashRouters DD-WRT Privacy App - Options Page Access

Click on the FlashRouters Privacy App logo to display the pages available in the FlashRouters Privacy App.

Options: Why do I see a message about disabling shortcut forwarding engine?

· ·

Important Update: DD-WRT Privacy App Discontinued

The FlashRouter Privacy App has been discontinued and is no longer compatible with new versions of DD-WRT firmware. If you are using DD-WRT, you can still set up OpenVPN or WireGuard manually with the latest DD-WRT builds. Our team is available to assist anyone with an active service plan during this transition.

For the easiest and most secure VPN setup experience, we highly recommend our Privacy Hero 2 solution. It’s designed to make home network security simple and comes with exclusive features, including pre-configured VPN and streaming capabilities.

If you need assistance or want to explore Privacy Hero 2, don’t hesitate to reach out!

FlashRouters DD-WRT Privacy App - Disable Shortcut Forwarding

Disable Shortcut Forwarding Engine to use the Policy Based Routing for the FlashRouters Privacy App.

Navigate to Setup > Basic Setup

FlashRouters DD-WRT Privacy App - Disable Shortcut Forwarding in DD-WRT Admin settings
  1. Set Shortcut Forwarding Engine to Disable.
  2. Click Apply Settings.

DNS Setup for DD-WRT FlashRouters

· ·

The Domain Name System (DNS) is the phonebook of the Internet. DNS resolves website domain names (www.website.com) to IP Addresses so you don’t have to remember the IP Address of every site you visit.

We setup each FlashRouter with Google DNS (8.8.8.8 , 8.8.4.4) and/or OpenDNS (208.67.220.220 , 208.67.222.222) to prevent your ISP DNS from leaking when connected to the FlashRouter.

By using a trusted DNS server like those listed below, or from your trusted VPN service provider, you can prevent ISP’S from compiling your browsing data and selling it to third parties without your consent.

Recommended DNS servers

GoogleDNS

Primary DNS: 8.8.8.8

Secondary DNS: 8.8.4.4

OpenDNS

Primary DNS: 208.67.220.220

Secondary DNS: 208.67.222.222

Cloudfare

Primary DNS: 1.1.1.1

Secondary DNS: 1.0.0.1

Level 3

Primary DNS: 209.244.0.3

Secondary DNS: 209.244.0.4

How to change the DNS on your FlashRouter

We preset each FlashRouter with GoogleDNS and OpenDNS so there is no need to change the DNS servers unless you have reset the FlashRouter or want to use different DNS servers.

Navigate to Setup > Basic Setup

DNS Setup on DD-WRT FlashRouters
  1. Scroll down to Network Address Server Settings (DHCP).
  2. Enter in any combination of valid DNS servers into Statict DNS fields 1, 2, and 3.
  3. Click Apply Settings at the bottom of the page.
  4. Power cycle your FlashRouter off and back on.

DNS Leak Test

We recommend checking to see if your DNS is leaking when using VPN.

Why can’t I access the FlashRouters Privacy App?

· ·

Important Update: DD-WRT Privacy App Discontinued

The FlashRouter Privacy App has been discontinued and is no longer compatible with new versions of DD-WRT firmware. If you are using DD-WRT, you can still set up OpenVPN or WireGuard manually with the latest DD-WRT builds. Our team is available to assist anyone with an active service plan during this transition.

For the easiest and most secure VPN setup experience, we highly recommend our Privacy Hero 2 solution. It’s designed to make home network security simple and comes with exclusive features, including pre-configured VPN and streaming capabilities.

If you need assistance or want to explore Privacy Hero 2, don’t hesitate to reach out!

Reinstall the FlashRouters Privacy App

Navigate to Administration > Commands

  1. Delete all characters that appear in the Commands shell so it is entirely blank.
  2. Under Startup click the Edit button once. This will populate the Commands shell with the FlashRouters Privacy App script.
  3. Click Run Commands once.
  4. You will then see an Installation Successful message.
  5. Navigate back to Status > MyPage to access the FlashRouters Privacy App.
Administration Commands page with details on how to reinstall FlashRouters Privacy App

Please Reboot Your FlashRouter

If you have been redirected to this page while trying to access the FlashRouters Privacy App it means your FlashRouter was booted up before it was connected to the Internet causing the Privacy App to not load.

  1. Power off your FlashRouter for 10 seconds and then power it back on.
  2. If you see this page once again after doing step 1 follow our Internet Setup guide.

Wireless Guest Network Setup – Bridged (Advanced)

· ·

If you would like to prevent visitors from connecting to your main WiFi network then you can create a Bridged Guest Network that will prevent access to the main router. This setup also allows you to create different rules for different WiFi SSID’s in your home ranging from QoS controls, access restrictions, VPN network segmentation, and more.

Preparing for Wireless Guest Network Setup

If you have a Dual-band or Tri-Band router you can setup a WiFi Guest Network, creating a separate VLAN (virtual local area network) for your visitors, or in order to segment your VPN networks on any band you like. We recommend using the 2.4GHz network for your DD-WRT Guest Wireless Network so it is compatible with the most possible WiFi devices. Setting up a guest network for visitors in your home allows you to keep them off of your main WiFi network.

We recommend performing this setup while connected to the FlashRouter via ethernet cable. If your computer does not have an ethernet port and you must proceed via wireless connection to the FlashRouter pay attention to the wireless connection as you may need to rejoin the FlashRouter’s network after making changes.

DD-WRT Router Setup for Wireless Guest Network

Enter Wireless settings

Navigate to Wireless > Basic Settings

Bridged Wireless Guest Network Setup on DD-WRT FlashRouter – Setting SSID for Guest Network
  1. Under the 2.4GHz or 5GHz Interface click the Add button.
  2. In the Wireless Network Name (SSID) field enter the unique network name of the guest network.
  3. Click Save.

Enter Wireless Security settings

Navigate to Wireless > Wireless Security

Bridged Wireless Guest Network Setup on DD-WRT FlashRouter – Setting Guest Network Wireless Password
  1. Duplicate the wireless security settings that are set for the other bands for the newly created virtual interface.
  2. Click Apply Settings.
  3. Reboot your router.

Create Bridge

Navigate to Setup > Networking

Bridged Wireless Guest Network Setup on DD-WRT FlashRouter – Create Bridge
  1. Under Create Bridge click Add. Name the newly created bridge br1.
  2. Click Apply Settings

Assign to Bridge

Bridged Wireless Guest Network Setup on DD-WRT FlashRouter – Assign Bridge
  1. Under Assign to Bridge select br1 from the Assignment dropdown. Select wl1.1 or ath1.1 depending on your router model.
  2. Click Apply Settings.

Depending on the router model and WiFi band you are using, the wireless interfaces will be labelled differently.

This setting can be labelled wl1.1, ath0.1, wl2.1, and so on. Make sure when you get up to the bridge assignment section that you are using the correct guest network Virtual Interface.

Network Configuration br1

Bridged Wireless Guest Network Setup on DD-WRT FlashRouter – Configure Bridge DNS Redirection
  1. Under Network Configuration br1 select Enable for Forced DNS Redirection.
  2. Set Optional DNS Target to 208.67.220.220
  3. Set IP Address to 192.168.12.1
  4. Set Subnet Mask to 255.255.255.0
  5. Click Apply Settings.

Multiple DHCP Server

Bridged Wireless Guest Network Setup on DD-WRT FlashRouter – Configure DHCP Server Settings
  1. Under Multiple DHCP Server click Add.
  2. Set the first dropdown to br1.
  3. Click Apply Settings.
  4. Reboot your router.

Firewall Rules

Navigate to Administration > Commands

  1. Copy the fire script from below and paste into the empty Commands shell
  2. Click Save Firewall.
  3. Wait one minute and then reboot your router.

iptables -I FORWARD -i br1 -o br0 -m state –state NEW -j DROP
iptables -I FORWARD -i br0 -o br1 -m state –state NEW -j DROP
iptables -I INPUT -i br1 -p tcp –dport telnet -j REJECT –reject-with tcp-reset
iptables -I INPUT -i br1 -p tcp –dport ssh -j REJECT –reject-with tcp-reset
iptables -I INPUT -i br1 -p tcp –dport www -j REJECT –reject-with tcp-reset
iptables -I INPUT -i br1 -p tcp –dport https -j REJECT –reject-with tcp-reset

You will now have a working Bridged Guest Network on the FlashRouter. By inputting the firewall rules, this will also prevent any guests on your network from gaining access to your router settings.

Back up your settings

Navigate to Administration > Backup

  1. Click the Backup button.
  2. A file named nvrambak.bin will be saved to your computer.
  3. You can load nvrambak.bin to restore your settings in the event of a reset.

TROUBLESHOOTING

Still having issues? Visit our Troubleshooting section to diagnose common problems here.

Troubleshoot Here

Wireless Guest Network Setup – Unbridged (Recommended)

· ·

If you would like to prevent visitors from connecting to your main WiFi network then you can create a separate Guest Network that will prevent access to the main router. This setup also allows you to create different rules for different WiFi SSID’s in your home ranging from QoS controls, access restrictions, VPN network segmentation, and more.

Preparing for Wireless Guest Network Setup

If you have a Dual-band or Tri-Band router you can setup a WiFi Guest Network, creating a separate VLAN (virtual local area network) for your visitors, or in order to segment your VPN networks on any band you like. We recommend using the 2.4GHz network for your DD-WRT Guest Wireless Network so it is compatible with the most possible WiFi devices. Setting up a guest network for visitors in your home allows you to keep them off of your main WiFi network.

We recommend performing this setup while connected to the FlashRouter via ethernet cable. If your computer does not have an ethernet port and you must proceed via wireless connection to the FlashRouter. Be sure to pay attention to the wireless connection as you may need to rejoin the FlashRouter’s network after making changes.

DD-WRT Router Setup for Wireless Guest Network

Enter Wireless settings

Navigate to Wireless > Basic Settings

FlashRouter DD-WRT Wireless Guest Network Settings Unbridged

Under the 2.4GHz or 5GHz Interface click the Add button.

Wireless Network Name (SSID)

Enter the a unique network name for the guest network.

Network Configuration

Unbridged

Force DNS Redirection

Enable

Optional DNS Target

208.67.220.220

IP Address

192.168.12.1

Subnet Mask

255.255.255.0

CLICK SAVE

Enter Wireless Security settings

Navigate to Wireless > Wireless Security

Wireless Guest Network Setup on DD-WRT FlashRouter Unbridged
  1. Duplicate the wireless security settings that are set for the other bands for the newly created virtual interface.
  2. Click Apply Settings.
  3. Reboot your router.

Enable DHCP for Guest Network

Navigate to Setup > Networking

Wireless Guest Network Setup on DD-WRT FlashRouter Unbridged Setting DHCP Server
  1. Scroll to the very bottom of the page and under DHCPD click Add.
  2. Select wl0.1 or ath1.1 depending on your router model.
  3. Click Apply Settings.
  4. Reboot your router.

Depending on the router model and WiFi band you are using, the wireless interfaces will be labelled differently.

This setting can be labelled wl1.1, ath0.1, wl2.1, and so on. Make sure when you get up to the bridge assignment section that you are using the correct guest network Virtual Interface.

Back up your settings

Navigate to Administration > Backup

  1. Click the Backup button.
  2. A file named nvrambak.bin will be saved to your computer.
  3. You can load nvrambak.bin to restore your settings in the event of a reset.

TROUBLESHOOTING

Still having issues? Visit our Troubleshooting section to diagnose common problems here.

Troubleshoot Here

ProtonVPN WireGuard Setup

· ·

Preparing for ProtonVPN WireGuard Setup

Verify your ProtonVPN login information

If you are not already a ProtonVPN user Sign Up Now.

Log in to your account on the ProtonVPN website.

ProtonVPN Account login

1. On the left hand side select Downloads.

ProtonVPN Downloads

2. Then select WireGuard Configuration.

ProtonVPN WireGuard Configuration

3. Enter the Device Name to assign the FlashRouter to identify it among your ProtonVPN connections.

ProtonVPN WireGuard Desired Name

4. Set the Device platform as Router.

ProtonVPN WireGuard select Router

5. Select the VPN Options that you would like to connect with.

ProtonVPN WireGuard VPN Options

6. ProtonVPN will recommend the ideal server for you to connect to based on your location. Click Create or scroll down and select the server you wish to connect to and click Create next to the server number.

ProtonVPN WireGuard select server
ProtonVPN WireGuard select servers

7. Click Download to download the .conf file of the server you selected.

ProtonVPN WireGuard download configuration

DD-WRT Router Setup for ProtonVPN WireGuard

Navigate to Setup > Tunnels 

ProtonVPN WireGuard DD-WRT Tunnels

Enter ProtonVPN WireGuard settings

1. Click Import Config and then select Choose file. Select the .conf file that was downloaded earlier.

ProtonVPN WireGuard Import Config and Choose File

2. All settings will be loaded into the DD-WRT firmware the only field that needs to be adjusted is setting Persistent Keepalive to 25.

ProtonVPN WireGuard Persistent Keep Alive

3. Click Apply Settings at the bottom of the page.

4. After 30 seconds or so refresh the page until you see the WireGuard Status on the page is populated as seen below.

ProtonVPN WireGuard Status

Verify a successful ProtonVPN connection

Navigate to Setup > Tunnels

  1. You should Endpoint, Latest handshake, and Transfer in the WireGuard status area.
  2. Visit whatismyipaddress.com to verify your status as using ProtonVPN.

Back up your settings

Navigate to Administration > Backup

  1. Click the Backup button.
  2. A file named nvrambak.bin will be saved to your computer.
  3. You can load nvrambak.bin to restore your settings in the event of a reset.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

Connect FlashRouter to Internet

· ·

All FlashRouters are compatible with all ISP service types such as fiber, cable, DSL, and satellite. As long as you have a modem, modem/router, or router capable of an ethernet connection your FlashRouter will have no problems connecting to the internet.

Internet Service Providers (ISP) include a modem or modem/router combo to connect your network devices to the internet. In some instances your ISP will provide a separate router as well as the modem. You can replace this router with a FlashRouter or use both in a dual router setup.

Single router setup

If you would like to replace your outdated router or avoid paying to rent a router from your ISP then you should use a FlashRouter as the only WiFi device in your network.

In a single router setup the FlashRouter will be wired directly to your modem via ethernet cable and will be the only router in the setup.

Connect to your ISP modem

Wire an ethernet cable from an open ethernet port on your modem to the WAN/internet port of the FlashRouter.

FlashRouters Single Router Setup

On Asus FlashRouters the WAN/internet port will be blue.

Asus Wifi Setup - back panel

On Linksys FlashRouters the WAN/internet port will be yellow.

Linksys Wifi Setup - back panel

On Netgear FlashRouters the WAN/internet port will be yellow.

Netgear Wifi Setup - back panel

Power cycle modem and router

Once you have properly connected an ethernet cable from your modem into the FlashRouter internet port you must power cycle your network devices to establish an internet connection.

  1. Power off your ISP modem and the FlashRouter.
  2. Power on the ISP modem and wait for it to fully boot up.
  3. Power on the FlashRouter.

Dual router setup

If you would like to keep your existing WiFi network in place, and simply want to add in a VPN WiFi network with a FlashRouter then you can do so using a dual router setup. No settings in your existing network router need to change to add a FlashRouter in a dual router setup. Since we preset all FlashRouters to a unique Local IP Address, there won’t be a conflict with your existing router.

In a dual router setup the FlashRouter is wired to your existing router via ethernet cable and you will have two completely segmented WiFi networks available.

Connect to your existing router

Remember if your existing router is connecting to the internet without issue already, make sure to keep the ethernet cable between your modem and existing router internet port in place.

Now connect another ethernet cable from a LAN/numbered port on your existing router to the WAN/internet port of the FlashRouter.

Reference the images above to see your WAN/internet port color.

FlashRouters Dual Router Setup

Power cycle all network devices

Once you have properly connected an ethernet cable from your existing router into the FlashRouter internet port you must power cycle your network devices to establish an internet connection.

  1. Power off your ISP modem, existing router, and the FlashRouter.
  2. Power on the ISP modem and wait for it to fully boot up.
  3. Power on the existing router and wait for it to fully boot up.
  4. Power on the FlashRouter.

Verify a successful internet connection

Once the power cycling steps are complete and the FlashRouter is powered up, start connecting your internet capable devices via ethernet or WiFi. Visit any website and make sure the page fully loads.

If you want to check your internet IP address that is visible to websites and services that you visit over the internet check out WhatIsMyIPAddress.com.

TROUBLESHOOTING

Still having issues? Visit our Troubleshooting section to diagnose common problems here.

Troubleshoot Here

Mullvad WireGuard Setup

· ·

Preparing for Mullvad WireGuard Setup

Verify your Mullvad login information

If you are not already a Mullvad user Sign Up Now.

Log in to your account on the Mullvad website.

Mullvad Login

Select Manage ports and WireGuard Keys displayed on the account page.

Mullvad Manage ports and WireGuard Keys

DD-WRT Router Setup for Mullvad WireGuard

Navigate to Setup > Tunnels 

Enter Mullvad WireGuard settings

1. Click Add Tunnel.

2. Set Tunnel to Enable.

Setup - Tunnel - Enable Tunnel

3. Select Wireguard from the dropdown.

Setup - Tunnel - Select Wireguard

4. Click Add Peer.

Setup - Tunnel - Add Peer

5. Set Endpoint to Enable.

Setup - Tunnel - Enable Endpoint

6. Set Router Allowed IP’s via tunnel and Use Pre-shared Key to Disable.

Setup - Tunnel - Disable Preshare Key and Allow IP

7. Click Generate Key.

Setup - Tunnel - Generate Key

8. Set Advanced Settings to Enable.

Setup - Tunnel - Enable Advanced Settings

9. Copy the Local Private Key.

Setup - Tunnel - Copy Local Private Key

10. In a new tab (leave the DD-WRT settings opened), go to your Mullvad Account and click Manage Ports and WireGuard Keys.

Mullvad Account - Manage ports and Wireguard Keys

11. Click WireGuard configuration file.

Mullvad - Wireguard configuration file

12. Select Linux as your Platform.

Mullvad - Select Linux

13. Click Manage Keys.

Mullvad - Manage Keys

14. Paste the copied Local Private key to the Manage WireGuard Keys field and click Import Keys.

Mullvad - Import Key

15. Select your Country, City, and Server number that you want to connect to.

Mullvad - Select Location

16. Click Advanced Settings.

Mullvad - Advanced Settings

17. Set the Tunnel Traffic to Only IPv4.

Mullvad - Only IPv4

18. Click Download File.

Mullvad - Download Config

19. Open the config file that was downloaded to your computer with NotePad or Notepad++ for Windows or TextEdit for Mac.

20. In the downloaded config file under [Interface] enter the Address into the IP Addresses/Netmask(CIDR) field in the DD-WRT settings.

Config File - Copy IP Address
Setup - Tunnel - IP Address Netmask Note

Certain DD-WRT builds will show two separate fields here: IP Address and Subnet Mask. If that is the case set the IP Address field to the Address without the /32 added and set the Subnet Mask to 255.255.255.255

21. In the config file under [Peer] copy the PublicKey and paste it into the Peer Public Key field in the DD-WRT Settings.

Config File - Copy PublicKey
Setup - Tunnel - Paste Public Key

22. In the config file under [Peer] copy the Endpoint and paste it into the Endpoint Address field.

Config File - Endpoint
Setup - Tunnel - Endpoint Address

23. At the bottom of the page click Save and then click Apply Settings.

Enter Mullvad WireGuard Commands

Navigate to Administration > Commands

1. Copy and paste the text below and click Save Startup.

sleep 30
echo "Update route table on startup..."
WGSERVER=$(/usr/sbin/nvram get oet1_rem0)
WANGW=$(/usr/sbin/nvram get wan_gateway)
WANIF=$(/usr/sbin/nvram get wan_iface)
route add -host $WGSERVER gw $WANGW dev $WANIF
route del default
route add default dev oet1
ip route flush cache
mkdir -p /tmp/etc/config
ln -s /tmp/custom.sh /tmp/etc/config/wg-route-fix.wanup
echo "... Done route table update."

2. Copy and paste the text below and click Save Custom.

#!/bin/sh
sleep 5
echo "Update route table on wanup ..."
WGSERVER=$(/usr/sbin/nvram get oet1_rem0)
WANGW=$(/usr/sbin/nvram get wan_gateway)
WANIF=$(/usr/sbin/nvram get wan_iface)
route add -host $WGSERVER gw $WANGW dev $WANIF
route del default
route add default dev oet1
ip route flush cache
echo "... Done route table update."

3. Copy and paste the text below and click Save Firewall.

WANIF=$(/usr/sbin/nvram get wan_iface)
iptables -t nat -I POSTROUTING -o oet1 -j MASQUERADE
iptables -I FORWARD -i br0 -o $WANIF -m state –state NEW -j REJECT –reject-with icmp-host-prohibited
iptables -I FORWARD -i br0 -p tcp -o $WANIF -m state –state NEW -j REJECT –reject-with tcp-reset

Set Mullvad DNS servers

Navigate to Setup > Basic Setup

Set Static DNS 1 to 10.64.0.1

Set Static DNS 2 to 193.138.218.74

Setup - Basic Setup - Mullvad DNS

Click Apply Settings.

Reboot the FlashRouter

Navigate to Administration > Management

Scroll to the bottom of the page and click the red Reboot Router button. Wait for the FlashRouter to reboot and then reconnect.

Verify a successful Mullvad connection

Navigate to Setup > Tunnels

  1. You should see Endpoint, Latest handshake, and Transfer in the WireGuard status area.
  2. Visit Mullvad’s IP Check to verify your status as using Mullvad.

Back up your settings

Navigate to Administration > Backup

  1. Click the Backup button.
  2. A file named nvrambak.bin will be saved to your computer.
  3. You can load nvrambak.bin to restore your settings in the event of a reset.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

Why is my router not connecting to internet?

· ·

Router not connecting to the internet? Follow these simple steps!

  1. Make sure that you are not setting a WAN IP of 0.0.0.0 in the top right corner of your FlashRouter DD-WRT settings. If you do, then make sure your FlashRouter is wired correctly for Internet.
  2. Try power cycling your ISP modem, FlashRouter and any other router that may be in the setup. Power the modem back on first, wait for it to boot up fully, and then power the FlashRouter back on.
  3. Make sure you do not have Global Kill Switch enabled in the FlashRouters Privacy App and if you do make sure your VPN status is Connected.

How do I set a Static IP for my device in DD-WRT?

· ·

It can be very useful to setup static local IP addresses for devices on your FlashRouter network. By assigning specific IP’s to specific devices you can better control and manage how your network and the internet interacts with each device.

Once you setup a static IP you can set access restrictions, monitor and control bandwidth, as well as bypass a router VPN connection or setup a device specific Kill Switch. Without a static IP assignment you may lose device specific settings when the DHCP lease to the router expires.

Navigate to Services > Services

Set Static IP by Device MAC Address in FlashRouter DD-WRT Settings
  1. Under Static Leases click Add once.
  2. Fill in the newly appeared fields.
    • MAC Address: Enter the device’s MAC address which can be found on the device itself or on the Status > LAN page.
    • Hostame: Enter a name for the device. Make sure that there are no spaces.
    • IP Address: Enter the desired static IP Address of the device. It should be on the same subnet as the FlashRouter (192.168.11.x)
    • Client Lease Time: Leave this field blank.
  3. Click Apply Settings
  4. Repeat the steps above for each individual static IP address you would like to setup. If you click Add before clicking Apply Settings you will lose the configuration.

If a device has wireless and ethernet capabilities the MAC Addresses will be different for a wireless connection and an ethernet connection. Make sure to set a static IP for both MAC Addresses in this case.

IVPN WireGuard Setup

· ·

Preparing for IVPN WireGuard Setup

Verify your IVPN login information

If you are not already a IVPN user Sign Up Now.

Log in to your account on the IVPN website.

IVPN website login

DD-WRT Router Setup for IVPN WireGuard

Navigate to Setup > Tunnels 

Enter IVPN WireGuard settings

1. Click Add Tunnel.

2. Set Tunnel to Enable.

Setup - Tunnel - Enable Tunnel

3. Select Wireguard from the dropdown.

Setup - Tunnel - Select Wireguard

3. Set MTU to 1412.

IVPN Wireguard MTU setting

4. Click Generate Key.

Setup - Tunnel - Generate Key

9. Copy the Local Public Key.

IVPN Wireguard Local Public Key

10. In a new tab (leave the DD-WRT settings opened), go to your IVPN Account and click WireGuard and then click WireGuard Key Management.

IVPN Wireguard Key Management

11. Click Add New Key.

IVPN Wireguard Add New Key

12. Paste the copied Local Public key to the Public Key field and click Add Key.

IVPN Wireguard Paste Public Key

13.Copy the IP Address assigned to your public key and add it to the IP Addresses/Netmask(CIDR) field followed by a /32 subnet mask.

IVPN Wireguard copy IP Address
IVPN Wireguard paste IP Address

Certain DD-WRT builds will show two separate fields here: IP Address and Subnet Mask. If that is the case set the IP Address field to the Address without the /32 added and set the Subnet Mask to 255.255.255.255

14. Click Add Peer.

Setup - Tunnel - Add Peer

15. Set the Peer Tunnel IP to 0.0.0.0. Set Peer Tunnel DNS to 172.16.0.1

IVPN Wireguard Peer Tunnel IP and DNS

16. Set Endpoint to Enable.

IVPN Wireguard Enable Endpoint

17. Go to the IVPN Server Status page and copy the server name for the WireGuard server location you want to connect to.

IVPN Wireguard Endpoint server

Be sure to copy the WireGuard server address and not the OpenVPN server address.

18. Paste the server name you copied into the Endpoint Address field and set the Port to 2049.

IVPN Wireguard Endpoint Address

19. On the IVPN Server Status page copy the Public Key of the server location you entered. Paste the Public Key into the Peer Public Key field.

IVPN Wireguard copy server Public Key
IVPN Wireguard enter Peer Public Key

20. Leave Allowed IPs as 0.0.0.0/0. Set Router Allowed IP’s via tunnel to Enable. Set Persistent Keep Alive to 25.

IVPN Wireguard Peer settings

21. At the bottom of the page click Save and then click Apply Settings.

Set IVPN DNS servers

Navigate to Setup > Basic Setup

Set Static DNS 1 to 172.16.0.1

Set Static DNS 2 to 198.245.51.147

IVPN Wireguard Static DNS

Click Apply Settings.

Reboot the FlashRouter

Navigate to Administration > Management

Scroll to the bottom of the page and click the red Reboot Router button. Wait for the FlashRouter to reboot and then reconnect.

Verify a successful IVPN connection

Navigate to Setup > Tunnels

  1. You should Endpoint, Latest handshake, and Transfer in the WireGuard status area.
  2. Visit IVPN’s website to verify your status as using IVPN.

Back up your settings

Navigate to Administration > Backup

  1. Click the Backup button.
  2. A file named nvrambak.bin will be saved to your computer.
  3. You can load nvrambak.bin to restore your settings in the event of a reset.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

Why is my Time Zone set to Europe/Berlin?

· ·

Europe/Berlin is the default Time Zone setting for DD-WRT firmware.

To change this to your location’s actual Time Zone do the following.

Navigate to Setup > Basic Setup

Select your actual Time Zone from the dropdown field. Leave the Server IP/Name field blank.

CLICK APPLY SETTINGS

The network may reboot for a moment. Simply reconnect when it is back up.

Disabling the NTP Client setting will result in the VPN connection not working so we ask that you please leave it enabled at all times.

Windscribe WireGuard Setup

· ·

Preparing for Windscribe WireGuard Setup

Verify your Windscribe login information

If you are not already a Windscribe user Sign Up Now.

Log in to your account on the Windscribe website.

Windscribe Login

Go to the Windscribe WireGuard config generator page and select the Server location and Port you would like to use. Click Download Config.

Windscribe Wireguard select server location

Open the .conf file that is downloaded using Notepad in Windows or TextEdit in Mac.

DD-WRT Router Setup for Windscribe WireGuard

Navigate to Setup > Tunnels 

Enter Winscribe WireGuard settings

1. Click Add Tunnel.

2. Set Tunnel to Enable.

Setup - Tunnel - Enable Tunnel

3. Select Wireguard from the dropdown.

Setup - Tunnel - Select Wireguard

3. Set CVE-2019-14899 Mitigation to Enable. Set NAT via Tunnel to Enable. Set Local Port to 51820. Set MTU to 1420.

Windscribe Wireguard Basic Settings

4. Check Firewall inbound and Kill Switch.

Windscribe Wireguard enable Firewall and Kill Switch

5. Set Advanced Settings to Enable and copy the PrivateKey from the .conf file and paste it into the Local Private Key field.

Windscribe Wireguard conf file PrivateKey
Windscribe Wireguard Local Private Key

6. Click Add Peer.

Windscribe Wireguard Add Peer

7. Set Peer Tunnel IP to 0.0.0.0. Set Peer Tunnel DNS to the DNS found in the .conf file.

Windscribe Wireguard Peer Tunnel IP and DNS

8. Set Endpoint to Enable. Copy and Paste the Endpoint from the .conf file and paste it into the Endpoint Address field. Enter the same Port that appears next to the Endpoint.

Windscribe Wireguard conf file Endpoint
Windscribe Wireguard paste Endpoint

9. Leave Allowed IPs as 0.0.0.0/0. Set Router Allowed IP’s via tunnel to Enable. Set Persistent Keep Alive to 25.

Windscribe Wireguard settings

10. Copy and Paste the PublicKey from the .conf file and paste it into the Peer Public Key field.

Windscribe Wireguard conf file PublicKey
Windscribe Wireguard Peer Public Key

11. Set Use Pre-shared Key to Enable. Copy and Paste the Presharedkey from the .conf file and paste it into the Pre-Shared Key field.

Windscribe Wireguard conf file PresharedKey
Windscribe Wireguard Pre-shared Key

12. Copy the Address from the .conf file and paste it into the IP Addresses/Netmask(CIDR) field.

Windscribe Wireguard IP Address
Windscribe Wireguard conf file Address

Certain DD-WRT builds will show two separate fields here: IP Address and Subnet Mask. If that is the case set the IP Address field to the Address without the /32 added and set the Subnet Mask to 255.255.255.255

21. At the bottom of the page click Save and then click Apply Settings.

Verify a successful Winscribe connection

Navigate to Setup > Tunnels

  1. You should Endpoint, Latest handshake, and Transfer in the WireGuard status area.
  2. Visit whatismyipaddress.com to verify your status as using Winscribe.

Back up your settings

Navigate to Administration > Backup

  1. Click the Backup button.
  2. A file named nvrambak.bin will be saved to your computer.
  3. You can load nvrambak.bin to restore your settings in the event of a reset.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

Wireless Repeater Setup

· ·

If you need to extend your wireless and wired connection capabilities, you can setup a FlashRouter as a Wireless Repeater. In Wireless Repeater mode the FlashRouter connects to your main router via WiFi and then creates a completely separate network segment for you. This new “repeater” network then transmits your internet signal via FlashRouter LAN ports for wired internet access while also creating a new Wireless Extender network that will expand your wireless network range throughout your home or office just like a mesh network.

Preparing for Wireless Repeater Setup

Verify your wireless information

To connect your FlashRouter wirelessly to your existing wireless network you will need the Wireless Network Name (SSID) and Wireless Password of the existing wireless network that you will repeat. Verify and note this information.

We recommend using a 2.4GHz network to repeat as this network will have more range. Be sure to click Add under the 2.4GHz settings and not the 5GHz settings.

DD-WRT Router Setup for Wireless Repeater

Disable Firewall

Navigate to Security > Firewall

Wireless Repeater Setup on DD-WRT FlashRouter - Disable SPI Firewall
  1. Set SPI Firewall to Disable.
  2. Click Save.

Enter Wireless settings

Navigate to Wireless > Basic Settings

Select Add in the Virtual Interface area.

Wireless Repeater Setup on DD-WRT FlashRouter - Add Virtual Interface

In the Wireless Physical Interface settings for the 2.4GHz network set the Wireless Mode to Repeater.

FlashRouters with a Broadcom chipset will have Repeater as an option in the dropdown but FlashRouters with an Atheroes chipset will not. Select Client or Client (Routed) if Repeater is not listed for your FlashRouter.

Change the Wireless Network Name (SSID) to match exactly with the Wireless Network Name of the network that you will repeat.

Wireless Repeater Setup on DD-WRT FlashRouter - Set Wireless Mode to Repeater

In the Virtual Interfaces settings change the Wireless Network Name (SSID) to FlashRouter24 or any other unique SSID.

Wireless Repeater Setup on DD-WRT FlashRouter - Set SSID for Repeated Band

CLICK SAVE

Enter Wireless Security settings

Navigate to Wireless > Wireless Security

Wireless Repeater Setup on DD-WRT FlashRouter - Set Wireless Password
  1. Duplicate the wireless security settings that are set for the other bands for the newly created virtual interface.
  2. Change the WPA Shared Key to match exactly with the Wireless Password of the network that you will repeat.
  3. Click Apply Settings.

Verify the Internet Connection

In the top right hand corner of the DD-WRT you should see the WAN IP change from 0.0.0.0 to an actual IP Address. Once this changes navigate to any website to test your Internet connection.

Wireless Repeater Setup on DD-WRT FlashRouter - Verify WAN Connection

Back up your settings

Navigate to the Administration > Backup page.

  1. Click the Backup button.
  2. A file named nvrambak.bin will be saved to your computer.
  3. You can load nvrambak.bin to restore your settings in the event of a reset.

TROUBLESHOOTING

Still having issues? Visit our Troubleshooting section to diagnose common problems here.

Troubleshoot Here