FlashRouters Support Portal

Prioritizing Privacy

Search Results for: class of ip address

Wireless Repeater Setup

· ·

If you need to extend your wireless and wired connection capabilities, you can setup a FlashRouter as a Wireless Repeater. In Wireless Repeater mode the FlashRouter connects to your main router via WiFi and then creates a completely separate network segment for you. This new “repeater” network then transmits your internet signal via FlashRouter LAN ports for wired internet access while also creating a new Wireless Extender network that will expand your wireless network range throughout your home or office just like a mesh network.

Preparing for Wireless Repeater Setup

Verify your wireless information

To connect your FlashRouter wirelessly to your existing wireless network you will need the Wireless Network Name (SSID) and Wireless Password of the existing wireless network that you will repeat. Verify and note this information.

We recommend using a 2.4GHz network to repeat as this network will have more range. Be sure to click Add under the 2.4GHz settings and not the 5GHz settings.

DD-WRT Router Setup for Wireless Repeater

Disable Firewall

Navigate to Security > Firewall

Wireless Repeater Setup on DD-WRT FlashRouter - Disable SPI Firewall
  1. Set SPI Firewall to Disable.
  2. Click Save.

Enter Wireless settings

Navigate to Wireless > Basic Settings

Select Add in the Virtual Interface area.

Wireless Repeater Setup on DD-WRT FlashRouter - Add Virtual Interface

In the Wireless Physical Interface settings for the 2.4GHz network set the Wireless Mode to Repeater.

FlashRouters with a Broadcom chipset will have Repeater as an option in the dropdown but FlashRouters with an Atheroes chipset will not. Select Client or Client (Routed) if Repeater is not listed for your FlashRouter.

Change the Wireless Network Name (SSID) to match exactly with the Wireless Network Name of the network that you will repeat.

Wireless Repeater Setup on DD-WRT FlashRouter - Set Wireless Mode to Repeater

In the Virtual Interfaces settings change the Wireless Network Name (SSID) to FlashRouter24 or any other unique SSID.

Wireless Repeater Setup on DD-WRT FlashRouter - Set SSID for Repeated Band

CLICK SAVE

Enter Wireless Security settings

Navigate to Wireless > Wireless Security

Wireless Repeater Setup on DD-WRT FlashRouter - Set Wireless Password
  1. Duplicate the wireless security settings that are set for the other bands for the newly created virtual interface.
  2. Change the WPA Shared Key to match exactly with the Wireless Password of the network that you will repeat.
  3. Click Apply Settings.

Verify the Internet Connection

In the top right hand corner of the DD-WRT you should see the WAN IP change from 0.0.0.0 to an actual IP Address. Once this changes navigate to any website to test your Internet connection.

Wireless Repeater Setup on DD-WRT FlashRouter - Verify WAN Connection

Back up your settings

Navigate to the Administration > Backup page.

  1. Click the Backup button.
  2. A file named nvrambak.bin will be saved to your computer.
  3. You can load nvrambak.bin to restore your settings in the event of a reset.

TROUBLESHOOTING

Still having issues? Visit our Troubleshooting section to diagnose common problems here.

Troubleshoot Here

How do I read my Wireless status?

· ·

The wireless status page is very helpful in diagnosing where a wireless issue stems from. Make sure the settings displayed on this page match the actual settings you have set in the DD-WRT Wireless settings. Review our recommended wireless settings for your FlashRouter if you are not getting accurate readouts.

Navigate to Status > Wireless

Interface

Select from the wireless interface that you want to view the readouts for.

MAC Address

Used to identify the wireless interface.

Chipset

Displays the wireless hardware that your FlashRouter uses.

Radio

Should always be set to Radio is On unless you have intentionally disabled the wireless on the FlashRouter. If this is displaying Radio is Off for certain wireless interfaces we recommend adjusting the Wireless Channel on the Wireless > Basic Settings page.

Mode

This should read as AP unless you are using an Advanced Wireless setup such as a Repeater, Client, or Repeater Bridge.

Network

Displays the wireless network mode that you have set for a specific wireless interface.

SSID

Displays the wireless network name that you have set for a specific wireless interface.

Channel

Displays the channel that you have set for a specific wireless interface. If this reads as Unknown it is best to select a new wireless channel or reboot the FlashRouter and check again.

TX Power

Displays the wireless transmit power that you have set for a specific wireless interface. If this reads as Unknown it is best reboot the FlashRouter and check again.

Rate

Displays an approximation of the max wireless speed available on a wireless band.

ACK Timing

Displays the ACK Timing that you have set for a specific wireless interface. If this reads as Unknown it is best reboot the FlashRouter and check again.

Encryption

Should always read as Enabled, WPA2 Personal.

Received (RX)

If this appears as 0% and there are no errors then it means that no devices have connected to the wireless interface yet. If this appears as 0% and the errors match the amount of OK packets you will need to adjust the wireless settings on the Wireless > Basic Settings page.

Transmitted (TX)

If this appears as 0% you will need to adjust the wireless settings on the Wireless > Basic Settings page.

What do the lights on my Roqos Core mean?

· ·

  1. White (looks blueish white on Teal colored Roqos Cores): System startup
  2. Solid Red: System is up, but there is no internet connection. Roqos Core cannot detect a network link either.
  3. Flashing Red: System is up and there is an ethernet cable connected to Internet port, however Roqos Core is unable to reach the internet. Usually happens with bad ethernet cable, or cable modem/ISP modem not giving IP address to Roqos Core due to ISP provisioning issues, or some other type of network setting blocking Roqos Core’s access to the internet. First thing to try in this scenario is to reboot the ISP router/modem upstream of Roqos Core.
  4. Flashing Blue: Roqos Core is up and connected to the internet, but it is not yet activated. Brand new Roqos Cores, or Roqos Cores that are factory reset will show this behavior when they are ready to be activated again.
  5. Blue (deep blue color, different from #1): Roqos Core is up and activated, everything is normal.

ExpressVPN Setup on Roqos

· ·

Preparing for ExpressVPN Setup

Obtain your ExpressVPN login information

If you are not already an ExpressVPN user Sign Up Now.

1. Visit ExpressVPN’s website login page.

ExpressVPN login page

2. Successfully log in with your account information. Select More.

ExpressVPN account page

3. Select Manual Configuration and copy the Username and Password that are displayed on the right hand side of the screen.

ExpressVPN Manual Configuration
ExpressVPN username and password

Connecting to ExpressVPN in the Roqos Core

Access the Roqos Core UI

1. Login to the Roqos Core web app in a browser on any computer or smart device.

2. Click VPN from the navigation menu and then click VPN OUT.

Roqos VPN Out

3. Click the Connect to box.

Roqos VPN Connect to

4. In the Connect dropdown choose 3rd Party VPN Providers and for the VPN Provider dropdown choose ExpressVPN.

Roqos ExpressVPN select provider

Enter your ExpressVPN information

In the Username and Password field enter the ExpressVPN OpenVPN Username and Password that you obtained.

ExpressVPN on FlashRouters Privacy App Setup - OpenVPN Specific Username and Password
Roqos VPN ExpressVPN enter username and password

Select an ExpressVPN server

Click the Server dropdown and type in or scroll to your preferred server location.

Roqos VPN ExpressVPN select server

Click the Save button.

Roqos VPN Save Settings

Connect to ExpressVPN

Once you click Save you will be returned to the VPN OUT menu.

Click the Connect button to start your ExpressVPN connection. Please be patient as the router connects your entire network through VPN.

Roqos VPN Connect

Assign devices to connect to VPN

By default there are no devices assigned to the VPN tunnel. Click Included Devices. From this page you can choose if all devices should connect to ExpressVPN or only certain devices.

Roqos VPN Included Devices

From the dropdown select Include all devices if you want every device that connects to the Roqos to connect to ExpressVPN. Then click Save.

Roqos VPN Include All Devices

If you only want specific devices to connect to ExpressVPN while others bypass the VPN connection select Include selected devices from the dropdown and then toggle the sliders for the devices you want connected to VPN. Click Save.

Roqos VPN Include Selected devices

Verify a successful ExpressVPN connection

Make sure you are connected to the Roqos network via WiFi or ethernet connection on your device.

Visit ExpressVPN’s IP Check to verify your new IP Address and virtual location.

You should see Connected at the top of the page underneath ExpressVPN.

Connect to a different ExpressVPN server

To change your server click Disconnect on the VPN OUT page then return to the Connect To section to select a new server from the Server dropdown and click Save. Now click Connect once again on the VPN Out page.

Disconnect from ExpressVPN

To disconnect from ExpressVPN click the Disconnect button.

TROUBLESHOOTING

Still having issues? Visit the FR Privacy App Troubleshooting section.

Troubleshoot Here

Select devices for VPN on Roqos

· ·

Select specific devices that you want to pass through the Roqos Core’s VPN tunnel. This is a great solution in instances of streaming services blocking incoming VPN connections or other VPN related service interruptions.

Login to Roqos Core UI web app in a browser on any computer or smart device.

1. Click the navigation menu and select VPN  > VPN Out.

Roqos VPN - VPN Out

2. Select Included Devices.

Roqos VPN - Included Devices

3. In the Select devices for your VPN Out connection dropdown select Include selected devices and check the devices you want to connect to VPN. Click Save.

Roqos VPN - Include selected devices

Now these devices will be connected to the VPN tunnel. All other devices will bypass the VPN tunnel and use your ISP’s IP Address.

NordVPN Setup for AsusWRT: Token, WireGuard & OpenVPN

· ·

Set up NordVPN on an ASUS router using AsusWRT VPN Fusion. Supported ASUS firmware offers three different VPN types: NordVPN (access-token integration), WireGuard (downloadable .conf file), and OpenVPN (manual service credentials plus an .ovpn file). Choose the method that matches your needs and your router’s available options.

All configuration is completed directly through your ASUS router’s administration interface using VPN Fusion. Before starting, make sure your router is connected to the internet, your firmware supports VPN Fusion, and you have an active NordVPN subscription.

Which NordVPN Option Should You Choose?

1. NordVPN

NordVPN access token and a country/region dropdown. The built-in ASUS/NordVPN integration is the simplest approach if you only need a country, not an exact server file.

Follow token setup →

2. WireGuard

Import a NordVPN .conf configuration file for a server selected in Nord Account. Useful when you want a downloaded profile for a particular server.

Follow WireGuard setup →

3. OpenVPN

Import a NordVPN .ovpn server file and enter your separate manual service username and password. Also used for NordVPN Dedicated IP.

Follow OpenVPN setup →

Option 1: NordVPN Dropdown — Token-Based NordLynx

Select the NordVPN type inside VPN Fusion. This is the integrated token-based setup and offers a country/region selection, rather than a manually imported server file.

  1. In Nord Account, open NordVPN Access Tokens and complete email/account verification if requested.
  2. Generate an access token, choose an expiry period if NordVPN offers that setting, and copy the token immediately (it may only be displayed once).
  3. On your ASUS router, open VPN > VPN Fusion > Add profile.
  4. Set VPN Type to NordVPN. Name the profile, select your preferred Region, and paste the token.
  5. Choose Apply to all devices if you want it as the default route, or assign only selected devices (see the VPN Fusion guide below).
  6. Click Apply and Enable / Apply all settings, as shown in your firmware, and verify the profile connects.
ASUS VPN Fusion NordVPN VPN type with Region and Token fields
Keep: existing ASUS NordVPN region/token form (remove any private token before publishing).

Need a specific server? Use the separate WireGuard file method below or the OpenVPN configuration-file method. Do not expect the token-based country dropdown to accept a .conf or .ovpn file.

Option 2: WireGuard Dropdown — Import a NordVPN .conf File

NordVPN now provides downloadable WireGuard configuration files through its manual server recommendation page. This is different from the built-in NordVPN token option in VPN Fusion.

  1. Sign in to Nord Account and open NordVPN Server Recommendation.
  2. Choose your preferred country and server; use the available filters if you need to narrow the list. Select a currently available server.
  3. Choose Get setup configuration, select WireGuard from the protocol menu, and click Download config. Save the downloaded .conf file.
  4. In your ASUS router settings open VPN > VPN Fusion > Add profile, then set VPN Type to WireGuard (not NordVPN).
  5. Use the ASUS Import configuration / file-import control to select the NordVPN .conf file. Confirm the imported parameters and save the profile.
  6. Choose the target devices or enable the default/all-devices route. Click Apply and Enable, then check the VPN status and your public IP.


NordVPN’s official instructions: How to download WireGuard and OpenVPN configuration files.

Option 3: OpenVPN Dropdown — Credentials + .ovpn File

OpenVPN requires two separate items: the configuration file for your desired server and NordVPN’s manual service credentials. Your normal Nord Account email/password is not the correct credential pair for this method.

  1. Open NordVPN Manual Service Credentials and copy the service username and service password after any required verification.
  2. Open NordVPN OpenVPN Configuration Files and choose a server/location. Download its UDP .ovpn file, or TCP .ovpn if UDP does not work on your network.
  3. On ASUS, go to VPN > VPN Fusion > Add profile and set VPN Type to OpenVPN.
  4. Enter a connection name, Import .ovpn file, and paste the NordVPN manual service username and password in the corresponding fields.
  5. Choose devices or Apply to all devices, then click Apply and Enable. Confirm VPN Fusion shows a successful connection.
ASUS VPN Fusion OpenVPN VPN type with OVPN import and username password fields
Keep: existing ASUS OpenVPN profile form. New screenshots should use a larger clean capture if available.

Server selection: The location is controlled by the server named in the imported .ovpn file. To switch locations, import another server file or use a separate OpenVPN profile.

NordVPN Dedicated IP — OpenVPN Only

If you have purchased and activated the NordVPN Dedicated IP add-on, use your specific Dedicated IP OpenVPN configuration file. Do not select the ordinary NordVPN token integration or a regular shared server.

  1. In your Nord Account, open the Dedicated IP details and download the assigned server’s OpenVPN UDP or TCP configuration file, following NordVPN Dedicated IP manual configuration instructions.
  2. Open NordVPN Manual Service Credentials and copy the manual username and password.
  3. In ASUS VPN Fusion > Add profile, choose OpenVPN.
  4. Import the Dedicated IP .ovpn file, enter manual service credentials, save, enable, and verify the public IP matches your assigned Dedicated IP.

Assign Devices, Verify the VPN, and Troubleshoot

One VPN for everyone, or different VPNs for different devices?

VPN Fusion lets you use a VPN profile as the default connection for all devices or assign specific client devices to different profiles. Some supported ASUS models can maintain one WireGuard tunnel alongside multiple OpenVPN profiles, but the number of simultaneous tunnels is model/firmware dependent; creating multiple profiles does not mean all can be active simultaneously.

For step-by-step device assignments, default routing, profile conflicts, and bypassing the VPN, see How to Use ASUS VPN Fusion and Assign Devices to VPN Profiles. For a dedicated WiFi network with VPN or ISP routing, see ASUS Guest Network VPN / No-VPN Setup.

Verify the IP of the actual device

  1. Confirm your chosen profile shows Connected in VPN Fusion.
  2. Join the ASUS WiFi or LAN using a device that is actually assigned to that VPN profile.
  3. Open NordVPN IP Address Check and compare the public IP/location with the intended server or Dedicated IP.
  4. If the device shows an ISP IP, first check Apply to all devices and the per-device assignments in VPN Fusion.
  5. Disconnect a NordVPN app, Apple iCloud Private Relay, browser VPN/proxy, or other device-level network service during testing. Follow Router VPN Shows Wrong IP? Check Device Settings.

If VPN Fusion will not connect

  1. Temporarily disable the failing profile and confirm the ASUS router works using its normal ISP internet connection.
  2. For NordVPN type, check that the access token is valid and hasn’t expired; regenerate if needed.
  3. For WireGuard, import a fresh .conf from the Nord server recommendation page and make sure the profile is enabled.
  4. For OpenVPN, double-check manual service credentials (not website credentials) and try a different server file or TCP instead of UDP.
  5. Check that device-assignment rules point to the intended active profile, then retest with one clean device.

NordVPN Routers & Offers

Shop NordVPN-Ready FlashRouters

Compare ASUS and Privacy Hero router options and choose the hardware that fits your VPN and network requirements.

Browse NordVPN Routers →

NordVPN Partner Offer

Need NordVPN service? See the current FlashRouters NordVPN promotional offer. Subscription pricing and terms are shown on the offer page.

See NordVPN Offer →

Related AsusWRT Guides

Upgrade your ASUS router

Explore the Latest WiFi 7 ASUS FlashRouters

Looking for a newer ASUS router? Browse WiFi 7 models available from FlashRouters and compare features to find the right fit for your home or office. VPN Fusion and other features vary by router model and firmware.

Shop ASUS WiFi 7 Routers →

Privacy Hero Streaming Relocation

· ·

Your Privacy Hero router uses Cloud Based router management which means you can access the router settings from anywhere on any device that has an internet connection. You can follow these steps while connected to your phone, other Wi-Fi network, or the Privacy Hero network.

Use these steps change your location for popular streaming services allowing you to access to regionally restricted content. Privacy Hero uses DNS routing to change your location which is a great way around VPN streaming blocks.

1. From any device that has a browser such as a computer, smartphone, or tablet visit app.privacyhero.com

App.PrivacyHero.com

2. Enter your Privacy Hero account email and password. Click Login.

Privacy Hero Access Settings

3. Click the Streaming symbol.

Privacy Hero Streaming

4. Set the Streaming Relocation toggle to On.

Privacy Hero enable Streaming Relocation

5. Click the flag of the country you would like the listed streaming service to use.

Privacy Hero select Region

This streaming relocation feature will not change your IP address in the way that a VPN does. This is why it is not able to be blocked in the same way that a VPN connection can be.

The listed services on the streaming relocation page will not be connected to VPN even if the Privacy Hero has an active VPN connection. These services are set to bypass the router’s VPN tunnel to avoid streaming blocks.

Toggling the streaming relocation feature On will also relocate many other streaming services automatically. They will be automatically optimized for the best connection with no manual selection needed for:
ABC
Adult Swim
All 4
Apple TV Channels
BBC
Britbox
CBC Gem
CBS Sports
Crackle
DirecTV Stream
DSTV Now
Filmrise
Freeform
Freevee
Frndly TV
F1 TV
FX Now
ITV
MGM+
Molotov.TV
My 5
NBC
NBC Sports
Now E
Now TV
Pandora
Paramount+
PBS
Peacock
Philo
Pluto TV
Showmax
Sling
SonyLIV
S Sports Plus
Starz
Stirr
TBS
Tennis Channel
The CW
Tubi
TVPlayer
Vudu
Xumo
Zattoo

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

StrongVPN WireGuard Setup

· ·

DD-WRT Router Setup for StrongVPN WireGuard

StrongVPN Wireguard DD-WRT setup is now officially supported by FlashRouters. Follow the steps below to gather all the required information to complete your Wireguard router setup.

Navigate to Security > Firewall

Set SPI Firewall to Disable.

Wireless Client Bridge Setup on FlashRouter DD-WRT - Disable Firewall

Click Save at the bottom of the page.

Select your actual time zone for you physical location from the dropdown and enter 1.pool.ntp.org in the Server IP/Name dropdown.

WireGuard for StrongVPN DD-WRT set Time Zone

Click Apply Settings at the bottom of the page.

Preparing for StrongVPN WireGuard Setup

Obtain your StrongVPN WireGuard Information

If you are not already a StrongVPN user Sign Up Now.

1. Log in to your account on the StrongVPN website.

WireGuard for StrongVPN account login

2. Select Router icon as the Platform

Select Router for StrongVPN WireGuard Platform

3. Select the Advanced Options dropdown and then check Exclude LAN Traffic and set any value between 52000 and 60000 in the Custom Port field.

WireGuard for StrongVPN set Custom Port

4. Select the Server Location from the dropdown that you would like to connect to.

Select the StrongVPN Wireguard server location

5. Select the Generate at the bottom of the page.

6. Click the DD-WRT installer script box to copy.

DD-WRT installer script WireGuard for StrongVPN

Enter StrongVPN WireGuard Script

Navigate to Administration > Commands

Paste the StrongVPN Script that was copied in the empty Commands Shell.

WireGuard for StrongVPN install script

Delete the very last line sleep 8 && reboot.

Click Save Custom (or Save Custom Script may appear depending on your firmware build, they are the same thing)

Copy the line below and paste into the empty Commands Shell.

WireGuard for StrongVPN script 2
sh /tmp/.rc_custom

Click Run Commands.

Wait two minutes and then power the FlashRouter off and back on. Reconnect to the FlashRouter’s network when it has booted back up.

Verify a successful StrongVPN WireGuard connection

Navigate to Setup > Tunnels

  1. You should now see that page filled in with WireGuard info.
  2. Visit StrongVPN’s IP Check to verify your new IP address and virtual location.

Back up your settings

Navigate to Administration > Backup

  1. Click the Backup button.
  2. A file named nvrambak.bin will be saved to your computer.
  3. You can load nvrambak.bin to restore your settings in the event of a reset.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

NordVPN Setup on Roqos

· ·

Preparing for NordVPN Setup

Obtain your NordVPN manual Username and Password

If you are not already a NordVPN user Sign Up Now.

1. Log in to your account on the NordVPN website.

NordVPN login

2. Click NordVPN on the left hand side and then click Setup NordVPN manually.

NordVPN setup manually

3. Enter in the verification code that was sent to your email.

NordVPN verify code

4. Copy and paste your NordVPN manual username and password to a secure location. This is the username and password you will enter into the router settings to connect to NordVPN.

NordVPN credentials

Connecting to NordVPN in the Roqos Core

Access the Roqos Core UI

1. Login to the Roqos Core web app in a browser on any computer or smart device.

2. Click VPN from the navigation menu and then click VPN OUT.

Roqos VPN Out

3. Click the Connect to box.

Roqos NordVPN Connect to

4. In the Connect dropdown choose 3rd Party VPN Providers and for the VPN Provider dropdown choose NordVPN.

Roqos NordVPN select provider

Enter your NordVPN information

In the Username and Password field enter the NordVPN OpenVPN Username and Password that you obtained.

NordVPN credentials
Roqos NordVPN enter username and password

Select a NordVPN server

Navigate to NordVPN server recommendation page. Click Recommended server and select the country you want to connect to and note the server number that appears.

Click the Location dropdown and type in or scroll to the preferred server country.

Roqos NordVPN Select Location

Click the Server dropdown and type in or scroll to the server number that was recommended. Select the UDP version of the server.

Roqos NordVPN select server number

Click the Save button.

Roqos NordVPN Save Settings

Connect to NordVPN

Once you click Save you will be returned to the VPN OUT menu.

Click the Connect button to start your NordVPN connection. Please be patient as the router connects your entire network through VPN.

Roqos VPN Connect

Assign devices to connect to VPN

By default there are no devices assigned to the VPN tunnel. Click Included Devices. From this page you can choose if all devices should connect to NordVPN or only certain devices.

Roqos NordVPN Included Devices

From the dropdown select Include all devices if you want every device that connects to the Roqos to connect to NordVPN. Then click Save.

Roqos VPN Include All Devices

If you only want specific devices to connect to NordVPN while others bypass the VPN connection select Include selected devices from the dropdown and then toggle the sliders for the devices you want connected to VPN. Click Save.

Roqos VPN Include Selected devices

Verify a successful NordVPN connection

Make sure you are connected to the Roqos network via WiFi or ethernet connection on your device.

Visit NordVPN’s website to verify your new IP Address and Protected Status at the top of the page.

You should see Connected at the top of the page underneath NordVPN.

Connect to a different NordVPN server

To change your server click Disconnect on the VPN OUT page then return to the Connect To section to select a new server from the Server dropdown and click Save. Now click Connect once again on the VPN Out page.

Disconnect from NordVPN

To disconnect from NordVPN click the Disconnect button.

TROUBLESHOOTING

Still having issues? Visit the FR Privacy App Troubleshooting section.

Troubleshoot Here

PrivateInternetAccess (PIA) Setup on Roqos

· ·

Preparing for PIA Setup

Obtain your PIA login information

If you are not already an PIA user Sign Up Now.

1. Visit PIA’s website login page.

PIA login

2. Successfully log in with your account information.

Connecting to PIA in the Roqos Core

Access the Roqos Core UI

1. Login to the Roqos Core web app in a browser on any computer or smart device.

2. Click VPN from the navigation menu and then click VPN OUT.

Roqos VPN Out

3. Click the Connect to box.

Roqos PIA Connect to

4. In the Connect dropdown choose 3rd Party VPN Providers and for the VPN Provider dropdown choose Private_Internet_Access.

Roqos PIA select provider

Enter your PIA information

In the Username and Password field enter the PIA Username and Password that you logged in with.

Roqos PIA enter username and password

Select a PIA server

Click the Server dropdown and type in or scroll to your preferred server location.

Roqos PIA server select

Click the Save button.

Roqos PIA Save Settings

Connect to PIA

Once you click Save you will be returned to the VPN OUT menu.

Click the Connect button to start your PIA connection. Please be patient as the router connects your entire network through VPN.

Roqos VPN Connect

Assign devices to connect to VPN

By default there are no devices assigned to the VPN tunnel. Click Included Devices. From this page you can choose if all devices should connect to PIA or only certain devices.

Roqos PIA Included Devices

From the dropdown select Include all devices if you want every device that connects to the Roqos to connect to PIA. Then click Save.

Roqos VPN Include All Devices

If you only want specific devices to connect to PIA while others bypass the VPN connection select Include selected devices from the dropdown and then toggle the sliders for the devices you want connected to VPN. Click Save.

Roqos VPN Include Selected devices

Verify a successful PIA connection

Make sure you are connected to the Roqos network via WiFi or ethernet connection on your device.

Visit PIA’s IP Check to verify your new IP Address and virtual location.

You should see Connected at the top of the page underneath Private_Internet_Access.

Connect to a different PIA server

To change your server click Disconnect on the VPN OUT page then return to the Connect To section to select a new server from the Server dropdown and click Save. Now click Connect once again on the VPN Out page.

Disconnect from PIA

To disconnect from PIA click the Disconnect button.

TROUBLESHOOTING

Still having issues? Visit the FR Privacy App Troubleshooting section.

Troubleshoot Here

DD-WRT Router Setup Guide

DD-WRT Router Setup Guide

Quick Start Guide for DD-WRT FlashRouters

Find setup guides, FAQs and troubleshooting tips for DD-WRT configured FlashRouters.

VIEW SUPPORTED ROUTER MODELS

AC1450, R6220, R6230, R6250, R6260, R6300 V1, R6300 V2, R6400 V1, R6400 V2, R6700 V1, R6700 V2, R6700 V3, R7000, R7000P, R7800, R8000, R9000, XR500

Asus Logo

RT-AC56U/R, RT-AC68U V1, RT-AC68U V2, RT-AC1900P, RT-AC87U, RT-AC3100, RT-AC5300

WRT1200AC, WRT1900AC V1, WRT1900AC V2, WRT1900ACS V1, WRT1900ACS V2, WRT32X, WRT3200ACM

Internet Setup

WiFi Setup

VPN Setup

DD-WRT Features

Search Support Articles

Troubleshooting

More Ways to Get Help

GET IN TOUCH

BUY SUPPORT
BROWSE FAQs

Privacy Hero Dashboard Not Updating or Showing Old Information

· ·

If the Privacy Hero dashboard is showing old information, a VPN status does not appear to update, settings you changed are not displaying correctly, or the dashboard behaves unexpectedly, your browser may be displaying cached Privacy Hero website data.

Before changing your router or VPN configuration again, open a fresh browser session and confirm that the dashboard is displaying the current information.

Start With a Private or Incognito Browser Window

The fastest test is to open the Privacy Hero dashboard in a new private or incognito browser window.

  1. Close any existing Privacy Hero dashboard tabs.
  2. Open a new private or incognito browser window.
  3. Visit app.privacyhero.com.
  4. Sign in to your Privacy Hero account.
  5. Check the router, VPN, device, or setting again.

If the correct information appears in the private browser window, the original browser session was likely displaying cached or stale website information.

Refresh the Privacy Hero Dashboard

If the dashboard has been open while you are changing VPN or router settings, refresh the page before assuming that a change failed.

  1. Refresh the Privacy Hero dashboard.
  2. Allow the page to finish loading.
  3. Return to the section you were changing.
  4. Check the current status again.

If the information still appears incorrect, sign out of Privacy Hero, close the browser tab, and sign back in through a fresh browser session.

Clear Cached Privacy Hero Site Data

If Privacy Hero works correctly in a private/incognito window but not in your normal browser window, clear the cached website data for Privacy Hero.

Browser menus vary, but look for settings related to:

  • Cached files and images.
  • Cookies and site data.
  • Website data.
  • Privacy and browsing data.

If your browser allows you to remove data for an individual website, clear the stored data for app.privacyhero.com rather than clearing your entire browser history.

Then reopen app.privacyhero.com, sign in again, and check the dashboard.

Try Another Browser or Device

If the dashboard still behaves unexpectedly, test it from another browser or device.

  1. Open app.privacyhero.com in another browser.
  2. Sign in using the same Privacy Hero account.
  3. Check whether the same router and settings appear correctly.

You can also test from another computer, phone, or tablet.

Privacy Hero is cloud-managed, so you do not need to be connected to the Privacy Hero WiFi to access the dashboard. You can use cellular data, another WiFi network, or another internet connection.

Disable Browser Extensions While Testing

Browser extensions can sometimes interfere with website login, scripts, or dashboard functions.

If the problem occurs only in one browser, temporarily test without extensions such as:

  • Ad blockers.
  • Privacy extensions.
  • Script blockers.
  • VPN or proxy extensions.
  • Security or filtering extensions.

A private/incognito window may disable some extensions automatically, depending on your browser configuration.

VPN Status Still Shows Failed or Connecting?

If a fresh browser session confirms that Privacy Hero is actually reporting the VPN as Failed, Connecting, Disconnected, or showing a timeout error, the problem is no longer just a browser display issue.

NordVPN users should continue with Privacy Hero NordVPN Not Connecting or Showing Timeout Errors.

No Internet After the VPN Failed?

If the dashboard confirms that the VPN has failed and your Privacy Hero network also has no internet access, check whether the VPN Kill Switch is enabled.

See Privacy Hero VPN Kill Switch: No Internet or WiFi Troubleshooting.

One Device Shows the Wrong VPN IP?

If Privacy Hero shows the VPN as connected and working but only one device shows an unexpected IP address or location, the browser cache is probably not the main issue.

Check the device for its own VPN application, Private Relay, Private DNS, browser Secure DNS, antivirus, firewall, or other network settings.

See Device Settings That Can Interfere With Your Router VPN.

Related Privacy Hero Guides

Privacy Hero VPN Kill Switch Setup

· ·

The Privacy Hero VPN Kill Switch prevents regular internet traffic from passing through your router if its VPN disconnects or fails to connect. This helps prevent devices from using your normal ISP connection without VPN protection.

Before enabling: Make sure your VPN is already Connected and that internet access works through the VPN. The Kill Switch is optional, but useful if you prefer internet access to stop rather than continue unprotected when the VPN goes down.

Privacy Hero is managed at app.privacyhero.com. You can make changes using a computer, phone, or tablet.

How to Enable the VPN Kill Switch

  1. Open app.privacyhero.com and sign in using your Privacy Hero account. If the router has not been activated yet, follow the Privacy Hero Activation and Setup guide first.
  2. Open the VPN section of your Privacy Hero settings.
  3. Confirm that your selected VPN provider is active and its connection status shows Connected. If the VPN is failing, fix the connection before proceeding.
  4. Find VPN Killswitch (VPN Kill Switch) and move its toggle to On (orange). The setting is enabled when its toggle is On.
  5. Keep a device connected to the Privacy Hero WiFi or LAN and confirm that ordinary websites work with the VPN connected.
Privacy Hero Security and Privacy VPN Killswitch toggle enabled, highlighted on the right side of the settings page
In Privacy Hero, the VPN Killswitch toggle is shown directly below the VPN provider setting.

Tip: To check the router’s VPN IP address, use a browser on a device connected to Privacy Hero, not on a phone using cellular data or another WiFi network. Disable any separate VPN app on the test device so you can verify the router VPN independently.

What Happens When the Kill Switch Is On?

VPN status Kill Switch Normal internet traffic
Connected On Allowed through the VPN
Disconnected or Failed On Blocked until the VPN reconnects or you turn the Kill Switch off
Disconnected or Failed Off May use the normal ISP connection without VPN protection

The Kill Switch does not turn off the WiFi network. Your device may stay connected to Privacy Hero WiFi but report No Internet when the VPN is unavailable. Some phones and computers may automatically switch to cellular data or another saved WiFi network.

Access Privacy Hero Even When the Kill Switch Is Blocking Internet

Important: Privacy Hero includes a built-in exception for its cloud management dashboard. If the VPN is down and the Kill Switch blocks normal internet traffic, you can still access app.privacyhero.com while connected to the Privacy Hero WiFi or LAN network, provided the router itself still has its upstream/cloud connection.

This means you can sign in, check the VPN status, change the server or protocol, or switch off the Kill Switch without first leaving the Privacy Hero network.

You can also access the cloud dashboard through another working WiFi connection or cellular data. If the router shows Offline in the dashboard, that indicates a separate WAN or cloud-connectivity problem rather than normal Kill Switch behavior.

How to Turn Off the Kill Switch or Restore Internet

If your VPN has stopped connecting and you need to restore ordinary internet access temporarily:

  1. Open app.privacyhero.com, including from the Privacy Hero network if the Kill Switch is blocking regular internet.
  2. Open VPN and check the current VPN status.
  3. Move VPN Killswitch to Off.
  4. If the VPN remains Failed or Disconnected, temporarily switch the VPN connection Off and test internet access using a device on the Privacy Hero network.
  5. Repair the VPN connection, confirm Connected, and verify that ordinary internet traffic works through the VPN before turning the Kill Switch back On.

Security note: With the Kill Switch off, devices may access the internet without VPN protection if the VPN is disconnected. Re-enable it after testing if preventing non-VPN traffic is your goal.

VPN showing Failed? Privacy Hero includes a Reset option that removes all saved third-party VPN settings. With an active Privacy Premium subscription, the router reconnects using the built-in Privacy Hero VPN. With Privacy Core, it returns to your normal ISP connection without a router VPN.

Before using Reset, see our How to Reset a Failed VPN Connection on Privacy Hero guide.

For a complete diagnosis of WiFi connected but no internet, VPN failures, and router Offline status, follow the Privacy Hero VPN Kill Switch: No Internet or WiFi Troubleshooting guide.

Related Privacy Hero Guides

Wireless Guest Network Setup – Bridged (Advanced)

· ·

If you would like to prevent visitors from connecting to your main WiFi network then you can create a Bridged Guest Network that will prevent access to the main router. This setup also allows you to create different rules for different WiFi SSID’s in your home ranging from QoS controls, access restrictions, VPN network segmentation, and more.

Preparing for Wireless Guest Network Setup

If you have a Dual-band or Tri-Band router you can setup a WiFi Guest Network, creating a separate VLAN (virtual local area network) for your visitors, or in order to segment your VPN networks on any band you like. We recommend using the 2.4GHz network for your DD-WRT Guest Wireless Network so it is compatible with the most possible WiFi devices. Setting up a guest network for visitors in your home allows you to keep them off of your main WiFi network.

We recommend performing this setup while connected to the FlashRouter via ethernet cable. If your computer does not have an ethernet port and you must proceed via wireless connection to the FlashRouter pay attention to the wireless connection as you may need to rejoin the FlashRouter’s network after making changes.

DD-WRT Router Setup for Wireless Guest Network

Enter Wireless settings

Navigate to Wireless > Basic Settings

Bridged Wireless Guest Network Setup on DD-WRT FlashRouter – Setting SSID for Guest Network
  1. Under the 2.4GHz or 5GHz Interface click the Add button.
  2. In the Wireless Network Name (SSID) field enter the unique network name of the guest network.
  3. Click Save.

Enter Wireless Security settings

Navigate to Wireless > Wireless Security

Bridged Wireless Guest Network Setup on DD-WRT FlashRouter – Setting Guest Network Wireless Password
  1. Duplicate the wireless security settings that are set for the other bands for the newly created virtual interface.
  2. Click Apply Settings.
  3. Reboot your router.

Create Bridge

Navigate to Setup > Networking

Bridged Wireless Guest Network Setup on DD-WRT FlashRouter – Create Bridge
  1. Under Create Bridge click Add. Name the newly created bridge br1.
  2. Click Apply Settings

Assign to Bridge

Bridged Wireless Guest Network Setup on DD-WRT FlashRouter – Assign Bridge
  1. Under Assign to Bridge select br1 from the Assignment dropdown. Select wl1.1 or ath1.1 depending on your router model.
  2. Click Apply Settings.

Depending on the router model and WiFi band you are using, the wireless interfaces will be labelled differently.

This setting can be labelled wl1.1, ath0.1, wl2.1, and so on. Make sure when you get up to the bridge assignment section that you are using the correct guest network Virtual Interface.

Network Configuration br1

Bridged Wireless Guest Network Setup on DD-WRT FlashRouter – Configure Bridge DNS Redirection
  1. Under Network Configuration br1 select Enable for Forced DNS Redirection.
  2. Set Optional DNS Target to 208.67.220.220
  3. Set IP Address to 192.168.12.1
  4. Set Subnet Mask to 255.255.255.0
  5. Click Apply Settings.

Multiple DHCP Server

Bridged Wireless Guest Network Setup on DD-WRT FlashRouter – Configure DHCP Server Settings
  1. Under Multiple DHCP Server click Add.
  2. Set the first dropdown to br1.
  3. Click Apply Settings.
  4. Reboot your router.

Firewall Rules

Navigate to Administration > Commands

  1. Copy the fire script from below and paste into the empty Commands shell
  2. Click Save Firewall.
  3. Wait one minute and then reboot your router.

iptables -I FORWARD -i br1 -o br0 -m state –state NEW -j DROP
iptables -I FORWARD -i br0 -o br1 -m state –state NEW -j DROP
iptables -I INPUT -i br1 -p tcp –dport telnet -j REJECT –reject-with tcp-reset
iptables -I INPUT -i br1 -p tcp –dport ssh -j REJECT –reject-with tcp-reset
iptables -I INPUT -i br1 -p tcp –dport www -j REJECT –reject-with tcp-reset
iptables -I INPUT -i br1 -p tcp –dport https -j REJECT –reject-with tcp-reset

You will now have a working Bridged Guest Network on the FlashRouter. By inputting the firewall rules, this will also prevent any guests on your network from gaining access to your router settings.

Back up your settings

Navigate to Administration > Backup

  1. Click the Backup button.
  2. A file named nvrambak.bin will be saved to your computer.
  3. You can load nvrambak.bin to restore your settings in the event of a reset.

TROUBLESHOOTING

Still having issues? Visit our Troubleshooting section to diagnose common problems here.

Troubleshoot Here

Wireless Guest Network Setup – Unbridged (Recommended)

· ·

If you would like to prevent visitors from connecting to your main WiFi network then you can create a separate Guest Network that will prevent access to the main router. This setup also allows you to create different rules for different WiFi SSID’s in your home ranging from QoS controls, access restrictions, VPN network segmentation, and more.

Preparing for Wireless Guest Network Setup

If you have a Dual-band or Tri-Band router you can setup a WiFi Guest Network, creating a separate VLAN (virtual local area network) for your visitors, or in order to segment your VPN networks on any band you like. We recommend using the 2.4GHz network for your DD-WRT Guest Wireless Network so it is compatible with the most possible WiFi devices. Setting up a guest network for visitors in your home allows you to keep them off of your main WiFi network.

We recommend performing this setup while connected to the FlashRouter via ethernet cable. If your computer does not have an ethernet port and you must proceed via wireless connection to the FlashRouter. Be sure to pay attention to the wireless connection as you may need to rejoin the FlashRouter’s network after making changes.

DD-WRT Router Setup for Wireless Guest Network

Enter Wireless settings

Navigate to Wireless > Basic Settings

FlashRouter DD-WRT Wireless Guest Network Settings Unbridged

Under the 2.4GHz or 5GHz Interface click the Add button.

Wireless Network Name (SSID)

Enter the a unique network name for the guest network.

Network Configuration

Unbridged

Force DNS Redirection

Enable

Optional DNS Target

208.67.220.220

IP Address

192.168.12.1

Subnet Mask

255.255.255.0

CLICK SAVE

Enter Wireless Security settings

Navigate to Wireless > Wireless Security

Wireless Guest Network Setup on DD-WRT FlashRouter Unbridged
  1. Duplicate the wireless security settings that are set for the other bands for the newly created virtual interface.
  2. Click Apply Settings.
  3. Reboot your router.

Enable DHCP for Guest Network

Navigate to Setup > Networking

Wireless Guest Network Setup on DD-WRT FlashRouter Unbridged Setting DHCP Server
  1. Scroll to the very bottom of the page and under DHCPD click Add.
  2. Select wl0.1 or ath1.1 depending on your router model.
  3. Click Apply Settings.
  4. Reboot your router.

Depending on the router model and WiFi band you are using, the wireless interfaces will be labelled differently.

This setting can be labelled wl1.1, ath0.1, wl2.1, and so on. Make sure when you get up to the bridge assignment section that you are using the correct guest network Virtual Interface.

Back up your settings

Navigate to Administration > Backup

  1. Click the Backup button.
  2. A file named nvrambak.bin will be saved to your computer.
  3. You can load nvrambak.bin to restore your settings in the event of a reset.

TROUBLESHOOTING

Still having issues? Visit our Troubleshooting section to diagnose common problems here.

Troubleshoot Here

ExpressVPN Setup for AsusWRT Firmware Routers

· ·

You can connect to ExpressVPN on your AsusWRT router using OpenVPN.

Quick Options

  • OpenVPN: Download your preferred server .ovpn configuration file from the ExpressVPN website.

:point_right: If you are not already a ExpressVPN user Sign Up Now.

EXPRESSVPN SETUP GUIDE FOR ASUSWRT

1. Log in to your account on the ExpressVPN website.

2. In the “Set up your devices” section, click More and select Manual Configuration from the menu options.

3. Copy the Username and Password that are displayed on the right

ExpressVPN Manual Service Credentials

4. Download a server file from any of the available regions shown in the ExpressVPN Manual Configuration section (Americas, Europe, Asia Pacific, etc)

ExpressVPN Download .ovpn file

5. Log in to the Asus settings page by connecting to the Asus router’s WiFi (or wired LAN) on your computer. Then, enter 192.168.50.1 or asusrouter.com in the browser.

View our guide for more instructions on how to access AsusWRT firmware settings.

6. Navigate to the VPN tab and then click on the VPN Fusion tab, then click Add Profile

Click the VPN Button
VPN Fusion Add Profile

7.  Fill in your NordVPN information then click Apply and Enable.

  • Connection Name: Choose a name for your ExpressVPN OpenVPN connection.
  • VPN Type: Select OpenVPN
  • Import .ovpn File: Upload the OpenVPN file that you downloaded.
  • Username and Password: Copy and paste your ExpressVPN manual service credentials from step 3.

8. You should now see the Profile say Connected, indicating that the NordVPN server is successfully connected to your router.

Asus ExpressVPN Connected

9. The VPN connection is automatically set to Apply to all devices.

If you only want certain devices to connect to the VPN, then turn off the VPN connection and switch off Apply to all devices.

Now click the pencil next to the Device section and select the devices (computer, phone, etc.) that you want to connect to VPN. Click OK and then click Apply all settings.

Apply VPN by Device
  1. Connect your devices to the Asus router network and visit the ExpressVPN website, at the top it should display Your Status: Protected.
  2. Visit ExpressVPN’s IP Check to verify your new IP address and virtual location.

🚫📱Do not run ExpressVPN apps on devices connected to your ExpressVPNrouter. Using the app at the same time as the router VPN may cause conflicts and connection issues.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

Why is my DNS showing as 192.168.11.1 on my devices?

· ·

When connected to a FlashRouter’s network the DNS settings of the devices will be reporting as 192.168.11.1. This means that the router is handling DNS internally through the servers you have set in the Setup > Basic Setup section of the router. If you did not set any custom DNS here, then you will using your ISP or VPN DNS servers automatically.

You can always customize the DNS servers in the router to your preferred servers and through DNSmasq the router will use 192.168.11.1 to route these servers to your connected devices.

In some instances disabling DNSMasq in the DD-WRT settings can help unblock previously blocked websites while connected to VPN. This will force devices to report the DNS servers set in the router directly as opposed to 192.168.11.1.

Disabling DNSMasq is not recommended unless FlashRouters specifically advises you but we have seen this work for certain VPN providers. To disable the DNSMasq do the following.

Navigate to Setup > Basic Setup

Disable DNSMaq Settings
  1. Uncheck Use DNSMasq for DHCP.
  2. Uncheck Use DNSMasq for DNS.
  3. Uncheck DHCP-Authoritative.
  4. Click Save.

Navigate to Services > Services

Disable DNSMaq Settings 2
  1. Set DNSMasq to Disable.
  2. Click Apply Settings.
  3. Reboot router.