Search Results for: connections bet

My 5.0GHz network is not showing up

TeamFlashRouters · May 2, 2019 ·

Verify the device supports 5GHz

5.0GHz networks are not compatible with all devices so first make sure that you device’s wireless adapter supports 5GHz wireless frequencies.

If you are not sure, find out if your device support 5 GHz via Google search or by looking in the wireless hardware details in the device’s network settings. If you see Wireless a/b/g/n support then you have a compatible device. If you are missing the Wireless a then this means there is no 5 GHz support.

Enter the recommended wireless settings

Our team has tested the wireless functionality for each FlashRouter that we offer and shared our recommended wireless settings in our Wifi Setup area. Replicate the settings for your FlashRouter model found on that page.

Lower the wireless channel

Some devices do support 5.0GHz connections but not the higher channels that DD-WRT firmware offers.

Navigate to Wireless > Basic Settings

Lower the wireless channel setting for the 5.0GHz band that is not showing. Based on our tests the most broadly compatible channels are 36, 48 and 161.

CLICK APPLY SETTINGS

Refresh your device's network adapter

The easiest way to accomplish this is by rebooting your device as the settings to reset your adapter may vary on all types of internet connected devices.

Review wireless Status

Navigate to Status > Wireless

The readouts on this page can help tell if there are errors with the FlashRouter’s wireless. View our article on how to read the Wireless Status page for more information.

Wireless Client Bridge Setup

TeamFlashRouters · Apr 22, 2019 ·

If you need to extend your wired connection capabilities and you are not able to wire directly into your main router, you can setup a FlashRouter as a Wireless Client Bridge. In Wireless Client Bridge mode the FlashRouter connects to your main router via WiFi, and then transmits your internet signal via the FlashRouter LAN ports for wired internet access anywhere in your home or office.

Preparing for Wireless Client Bridge Setup

Verify your wireless information

In order to setup your FlashRouter as a Wireless Client Bridge, you will need the exact SSID and password of your existing wireless network. Make sure you have this information before proceeding.

We recommend using a 2.4GHz network to repeat as this network will have more range.

Locate the Local IP Address of the existing wireless network

Locate the Local IP Address of the existing router that the FlashRouter will be bridged to.

DD-WRT Router Setup for Wireless Client Bridge

Disable Firewall

Navigate to Security > Firewall

Set SPI Firewall to Disable.
Uncheck all boxes except for Filter Multicast.
Click Save.

Disable DNSmasq

Navigate to Services > Services

Set DNSmasq to Disable.
Click Save.

Enter Wireless settings

Navigate to Wireless > Basic Settings

Wireless Client Bridge Setup on FlashRouter DD-WRT - Set Wireless Mode to Client Bridge

In the Wireless Physical Interface settings for the 2.4GHz network set the Wireless Mode to Client Bridge.
Change the Wireless Network Name (SSID) to match exactly with the Wireless Network Name of the network that you will bridge to.
Click Save.

Enter Wireless Security settings

Navigate to Wireless > Wireless Security

Wireless Client Bridge Setup on FlashRouter DD-WRT - Set Wireless Password

Change the WPA Shared Key to match exactly with the Wireless Password of the network that you will bridge to.
Click Save.

Change the FlashRouter's Local IP Address

Navigate to Setup > Basic Setup

Set the Local IP Address to a different address on the same subnet as the existing network that you noted early. (example: if the existing network is 192.168.1.1 then set the Local IP Address to 192.168.1.2)
Set the Gateway to the Local IP Address of the existing network. (example: 192.168.1.1)
Set the Local DNS to the Local IP Address of the existing network. (example: 192.168.1.1)
Click Apply Settings.

Reboot your FlashRouter

Power off the FlashRouter for 30 seconds and then power it back on. When it boots back up you will be able to access the FlashRouter’s settings at the new Local IP Address that you set. Your existing network and the FlashRouter’s network will now be bridged wirelessly.

Your FlashRouter is now providing wired connection access to your main router network. Wireless connections to the FlashRouter are disabled in this setup.

Back up your settings

Navigate to Administration > Backup

Click the Backup button.
A file named nvrambak.bin will be saved to your computer.
You can load nvrambak.bin to restore your settings in the event of a reset.

TROUBLESHOOTING

Still having issues? Visit our Troubleshooting section to diagnose common problems here.

Troubleshoot Here

Privacy Hero Disable Wi-Fi

TeamFlashRouters · Feb 8, 2023 ·

Your Privacy Hero router uses Cloud Based router management which means you can access the router settings from anywhere on any device that has an internet connection. You can follow these steps while connected to your phone, other Wi-Fi network, or the Privacy Hero network.

Use these steps to disable your Privacy Hero Wi-Fi so only ethernet connections are active. This is not a required step just a preference.

1. From any device that has a browser such as a computer, smartphone, or tablet visit app.privacyhero.com

2. Enter your Privacy Hero account email and password. Click Login.

If you have not created your Privacy Hero account yet please follow these instructions.

3. Click the Wi-Fi symbol.

4. Set the toggle switches to the off position for the Wi-Fi bands you want to disable.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

Flint/Slate GL.iNet ExpressVPN OpenVPN Setup

TeamFlashRouters · May 29, 2023 ·

Preparing for ExpressVPN GL.iNet Setup

Obtain your ExpressVPN OpenVPN Information

If you are not already an ExpressVPN user Sign Up Now.

1. Log in to your account on the ExpressVPN website.

2. Successfully log in with your account information. Select More.

3. Select Manual Configuration and copy the Username and Password that are displayed on the right hand side of the screen.

4. Click the Server Location(s) that you want to connect to. This will download a .ovpn file to your computer that we will use later on. There is no need to open the file. For this example I have selected New York but feel free to select any server listed there or multiple servers.

GL.iNet Router Setup for ExpressVPN

Login to GL.iNet firmware settings in a browser on any computer or smart device connected to the GL.iNet FlashRouter’s network. For more instructions on how to access the firmware settings view our guide here.

1. Navigate to the VPN tab and select OpenVPN Client.

2. Click New Group.

3. Enter ExpressVPN and click the check mark.

4. Select the .ovpn file(s) you downloaded earlier and upload them here.

5. Enter in the ExpressVPN username and password that you obtained earlier. Do NOT enter your ExpressVPN account email and password login. Click Apply.

6. Select VPN Dashboard.

7. Set the Enable toggle to On to begin the ExpressVPN connection.

Verify a successful ExpressVPN connection

You should now see information appear in the Server Address, Server Listen Port, Traffic Statistics, and Client Virtual IP areas.
Visit ExpressVPN’s IP Check to verify your new IP address and virtual location.

In some cases you may notice that the location is not showing the same location as the server you have input in your router settings; this is because geo tracking tools are often tricked by VPN connections. As long as you see an IP address that is not the same as your normal Internet IP address then you are indeed connected to ExpressVPN.

How to change the ExpressVPN server

Download a new .ovpn file location as detailed above.
In the ExpressVPN Group on the OpenVPN Client area click Upload Configuration File and select the new .ovpn file.
Click VPN Dashboard and then click the Configuration File area and select the new location that you added.
Click Apply.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

Surfshark Manual OpenVPN Setup

TeamFlashRouters · Apr 24, 2019 ·

Preparing for Manual Surfshark Setup

Obtain your Surfshark OpenVPN information

If you are not already an Surfshark user Sign Up Now.

1. Log in to your account on the Surfshark website.

2. Successfully log in with your account information and Navigate to the Manual Connection Guide. Here you will find the OpenVPN Specific Username and Password required for manual configuration.

FlashRouters Privacy App - SurfShark OpenVPN Specific Username and Password

Surfshark Server Addresses

View a full list of Surfshark servers.

United States

Atlanta:
us-atl.prod.surfshark.com
Buffalo:
us-buf.prod.surfshark.com
Chicago:
us-chi.prod.surfshark.com
Dallas:
us-dal.prod.surfshark.com
Las Vegas:
us-las.prod.surfshark.com
Los Angeles:
us-lax.prod.surfshark.com
Miami:
us-mia.prod.surfshark.com
New York City:
us-nyc.prod.surfshark.com
Phoenix:
us-phx.prod.surfshark.com
San Fransisco:
us-sfo.prod.surfshark.com
Seattle:
us-sea.prod.surfshark.com

DD-WRT Router Setup for Surfshark

Navigate to Services > VPN

Enter Surfshark settings

OpenVPN Client

Start OpenVPN Client

If you wish to disable your VPN connection simply set this to Disable at any time and click Apply Settings.

Server IP/Name

Copy and paste the server you would like to connect to from the server list above. Be sure there are no extra spaces or characters.

If you wish to change Surfshark connection locations, THIS IS THE ONLY FIELD YOU NEED TO CHANGE.

Port

1194

Tunnel Device

TUN

Tunnel Protocol

UDP

Encryption cipher

None

Hash Algorithm

SHA512

Userpass Authentication

Enable

Username

Enter your OpenVPN specific Username.

Password

Enter your OpenVPN specific Password.

Advanced Options

Enable

TLS Cipher

None

LZO Compression

Disabled

NAT

Enable

Firewall Protection

Enable

TLS Auth Key

-----BEGIN OpenVPN Static key V1-----
b02cb1d7c6fee5d4f89b8de72b51a8d0
c7b282631d6fc19be1df6ebae9e2779e
6d9f097058a31c97f57f0c35526a44ae
09a01d1284b50b954d9246725a1ead1f
f224a102ed9ab3da0152a15525643b2e
ee226c37041dc55539d475183b889a10
e18bb94f079a4a49888da566b9978346
0ece01daaf93548beea6c827d9674897
e7279ff1a19cb092659e8c1860fbad0d
b4ad0ad5732f1af4655dbd66214e552f
04ed8fd0104e1d4bf99c249ac229ce16
9d9ba22068c6c0ab742424760911d463
6aafb4b85f0c952a9ce4275bc821391a
a65fcd0d2394f006e3fba0fd34c4bc4a
b260f4b45dec3285875589c97d3087c9
134d3a3aa2f904512e85aa2dc2202498
-----END OpenVPN Static key V1-----

Additional Config

remote-cert-tls server
remote-random
nobind
tun-mtu 1500
tun-mtu-extra 32
mssfix 1450
persist-key
persist-tun
ping-timer-rem
reneg-sec 0
cipher AES-256-GCM
log /tmp/vpn.log

Policy Based Routing

This field can be used for split VPN and Dual Gateway routing.

CA Cert

CLICK APPLY SETTINGS

Leave all settings not mentioned above as their default setting.

Verify a successful Surfshark connection

Navigate to Status > OpenVPN

You should now see a CONNECTED SUCCESS message.
Visit WhatIsMyIPAddress to verify your new IP address, virtual location, and status as Protected at the top of the page.

Back up your settings

Navigate to Administration > Backup

Click the Backup button.
A file named nvrambak.bin will be saved to your computer.
You can load nvrambak.bin to restore your settings in the event of a reset.

How to change the Surfshark server

Visit the Surfshark Manual setup page and scroll down to Section 3.
Copy and paste one of the server IP Address into the Server IP/Name field.
Click Apply Settings.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

Windscribe Manual OpenVPN Setup

TeamFlashRouters · Apr 25, 2019 ·

Preparing for Manual Windscribe Setup

Verify your Windscribe login information

If you are not already an Windscribe user Sign Up Now.

1. Log in to your account on the Windscribe website.

2. Click on the Download link at the top of the page.

3. Scroll down to the Config Generators section and Click on the OpenVPN link.

Windscribe Website - Generate OpenVPN Configuration Files

4. Click on Get Credentials and copy the Username and Password. This information will be used later on in the configuration.

Windscribe Website OpenVPN Specific Username and Password

Windscribe Server Addresses

United States

US East:
us-east.windscribe.com
US West:
us-west.windscribe.com
US Windflix:
wf-us.windscribe.com

Canada

Canada:
ca.windscribe.com
Canada West:
ca-west.windscribe.com

Additional Servers

Australia:
au.windscribe.com
Austria:
at.windscribe.com
Belgium:
be.windscribe.com
Brazil:
br.windscribe.com
Bulgaria:
bg.windscribe.com
Czech Republic:
cz.windscribe.com
Denmark:
dk.windscribe.com
Egypt:
eg.windscribe.com
Finland:
fi.windscribe.com
France:
fr.windscribe.com
Germany:
de.windscribe.com
Hong Kong:
hk.windscribe.com
Hungary:
hu.windscribe.com
India:
in.windscribe.com
Ireland:
ie.windscribe.com
Italy:
it.windscribe.com
Japan:
jp.windscribe.com
Latvia:
lv.windscribe.com
Luxemburg:
lu.windscribe.com
Malaysia:
my.windscribe.com
Mexico:
mx.windscribe.com
Netherlands:
nl.windscribe.com
Norway:
no.windscribe.com
Poland:
pl.windscribe.com
Romania:
ro.windscribe.com
Russia:
ru.windscribe.com
Singapore:
ch.windscribe.com
South Africa:
za.windscribe.com
South Korea:
kr.windscribe.com
Spain:
es.windscribe.com
Sweden:
se.windscribe.com
Switzerland:
ch.windscribe.com
Taiwan:
tw.windscribe.com
Turkey:
tr.windscribe.com
Ukraine:
ua.windscribe.com
United Kingdom:
uk.windscribe.com

DD-WRT Router Setup for Windscribe

Navigate to Services > VPN

Enter Windscribe settings

OpenVPN Client

Start OpenVPN Client

If you wish to disable your VPN connection simply set this to Disable at any time and click Apply Settings.

Server IP/Name

Copy and Paste the server you would like to connect to from the server list above. Be sure there are no extra spaces or characters.

If you wish to change Windscribe connection locations, THIS IS THE ONLY FIELD YOU NEED TO CHANGE.

Port

443

Tunnel Device

TUN

Tunnel Protocol

UDP

Encryption cipher

AES-256-CBC

Hash Algorithm

SHA512

User Pass Authentication

Enable

Username

Enter your OpenVPN specific Username.

Password

Enter your OpenVPN specific Password.

Advanced Options

Enable

TLS Cipher

None

LZO Compression

Adaptive

NAT

Enable

Firewall Protection

Enable

TLS Auth Key

-----BEGIN OpenVPN Static key V1-----
5801926a57ac2ce27e3dfd1dd6ef8204
2d82bd4f3f0021296f57734f6f1ea714
a6623845541c4b0c3dea0a050fe6746c
b66dfab14cda27e5ae09d7c155aa554f
399fa4a863f0e8c1af787e5c602a801d
3a2ec41e395a978d56729457fe6102d7
d9e9119aa83643210b33c678f9d4109e
3154ac9c759e490cb309b319cf708cae
83ddadc3060a7a26564d1a24411cd552
fe6620ea16b755697a4fc5e6e9d0cfc0
c5c4a1874685429046a424c026db672e
4c2c492898052ba59128d46200b40f88
0027a8b6610a4d559bdc9346d33a0a6b
08e75c7fd43192b162bfd0aef0c716b3
1584827693f676f9a5047123466f0654
eade34972586b31c6ce7e395f4b478cb
-----END OpenVPN Static key V1-----

Additional Config

tun-mtu-extra 32
mssfix 1450
persist-key
persist-tun

Policy Based Routing

This field can be used for split VPN and Dual Gateway routing.

CA Cert

CLICK APPLY SETTINGS

Leave all settings not mentioned above as their default setting.

Verify a successful VPN connection

Navigate to Status > OpenVPN

You should now see a CONNECTED SUCCESS message.
Visit WhatIsMyIPAddress to verify your new IP address, virtual location, and status as Protected at the top of the page.

Back up your settings

Navigate to Administration > Backup

Click the Backup button.
A file named nvrambak.bin will be saved to your computer.
You can load nvrambak.bin to restore your settings in the event of a reset.

How to change the Windscribe server

Copy and paste the server IP Address from the server list above into the Server IP/Name field.
Click Apply Settings.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

Select devices for VPN on Roqos

Dave · Dec 16, 2021 ·

Select specific devices that you want to pass through the Roqos Core’s VPN tunnel. This is a great solution in instances of streaming services blocking incoming VPN connections or other VPN related service interruptions.

1. Click the navigation menu and select VPN > VPN Out.

2. Select Included Devices.

3. In the Select devices for your VPN Out connection dropdown select Include selected devices and check the devices you want to connect to VPN. Click Save.

Now these devices will be connected to the VPN tunnel. All other devices will bypass the VPN tunnel and use your ISP’s IP Address.

Flint/Slate GL.iNet PureVPN WireGuard Setup

TeamFlashRouters · May 30, 2023 ·

Preparing for PureVPN GL.iNet Setup

Obtain PureVPN WireGuard file

If you are not already an PureVPN user Sign Up Now.

1. Log in to your account on the PureVPN website.

2. Select Manual Configuration.

3. Select the Server Location you want to connect to and then click Download.

4. In the Select Protocol dropdown choose WireGuard.

5. In the Select Device dropdown choose DD-WRT. Then click Generate Configuration. This will save a .conf file to your computer.

GL.iNet Router Setup for PureVPN

1. Navigate to the VPN tab and select WireGuard Client.

2. Click New Group.

3. Enter PureVPN and click the check mark.

4. Select the .conf file you downloaded earlier and upload it here.

5. Click Apply.

6. Select VPN Dashboard.

7. Set the Enable toggle to On to begin the PureVPN connection.

Verify a successful PureVPN connection

You should now see information appear in the Server Address, Server Listen Port, Traffic Statistics, and Client Virtual IP areas.
Visit PureVPN’s IP Check to verify your new IP address and virtual location.

How to change the PureVPN server

Replicate the steps above with a new location.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

NordVPN Cudy OpenVPN Setup

TeamFlashRouters · Feb 29, 2024 ·

Preparing for NordVPN Cudy Setup

Obtain your NordVPN manual Username and Password

If you are not already an NordVPN user Sign Up Now.

1. Log in to your account on the NordVPN website.

2. Click NordVPN on the left hand side and then click Setup NordVPN manually.

3. Enter in the verification code that was sent to your email.

4. Copy and paste your NordVPN manual username and password to a secure location. This is the username and password you will enter into the router settings to connect to NordVPN.

Download your NordVPN .ovpn file

1. There are two options for obtaining the .ovpn file. The first and recommended is to navigate to NordVPN’s server recommendation page. Click Recommended Server to display the fastest server based on your actual location. You can adjust the country if you don’t want to connect to the recommended country.

Then click Show Available Protocols. Click Download Config next to OpenVPN UDP. This will download the .ovpn file to your computer for this server. Do not open this file.

The second method to obtain a server is for connecting to a specific server number that you know you want to use. This applies to NordVPN Dedicated IP servers if you are signed up for that service. Go to NordVPN’s .ovpn file page. Then search for the server number that you want to use and click Download UDP.

Cudy Router Setup for NordVPN

Login to Cudy firmware settings in a browser on any computer or smart device connected to the Cudy FlashRouter’s network.

1. Click General Settings.

2. Click VPN.

3. Toggle the Enable switch to On.

4. Select OpenVPN Client from the Protocol dropdown.

5. Click Browse and select the .ovpn file you downloaded earlier. You should see the server file name listed next to Current Config File after doing so.

6. Enter your NordVPN username and password that you obtained earlier in the Username and Password. Note that these are different from your NordVPN email login and password.

Cudy NordVPN enter username and password

7. Click Save & Apply at the bottom of the page.

Verify a successful NordVPN connection

You should now see a CONNECTED message.
Visit NordVPN’s IP Check to verify your new IP address and virtual location.

How to change the NordVPN server

Follow the steps at the top of the page to obtain a new .ovpn file.
Then proceed with the settings same as initial setup.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

ExpressVPN Cudy OpenVPN Setup

TeamFlashRouters · Feb 29, 2024 ·

Preparing for ExpressVPN Cudy Setup

Obtain your ExpressVPN OpenVPN Information

If you are not already an ExpressVPN user Sign Up Now.

1. Log in to your account on the ExpressVPN website.

2. Successfully log in with your account information. Select More.

3. Select Manual Configuration and copy the Username and Password that are displayed on the right hand side of the screen.

4. Click the Server Location that you want to connect to. This will download a .ovpn file to your computer that we will use later on. There is no need to open the file. For this example I have selected New York but feel free to select any server listed there.

Cudy Router Setup for ExpressVPN

Login to Cudy firmware settings in a browser on any computer or smart device connected to the Cudy FlashRouter’s network.

1. Click General Settings.

2. Click VPN.

3. Toggle the Enable switch to On.

4. Select OpenVPN Client from the Protocol dropdown.

5. Click Browse and select the .ovpn file you downloaded earlier. You should see the server file name listed next to Current Config File after doing so.

6. Enter your ExpressVPN username and password that you obtained earlier in the Username and Password. Note that these are different from your ExpressVPN email login and password.

Cudy ExpressVPN enter username and password

7. Click Save & Apply at the bottom of the page.

Verify a successful ExpressVPN connection

You should now see a CONNECTED message.
Visit ExpressVPN’s IP Check to verify your new IP address and virtual location.

How to change the ExpressVPN server

Follow the steps at the top of the page to obtain a new .ovpn file.
Then proceed with the settings same as initial setup.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

IPVanish Cudy OpenVPN Setup

TeamFlashRouters · Feb 29, 2024 ·

Preparing for IPVanish Cudy Setup

Download your IPVanish .ovpn file

If you are not already an IPVanish user Sign Up Now.

1. Log in to your account on the IPVanish website.

2. Successfully log in with your account information then go to IPVanish .ovpn file page.

3. Click on the .ovpn file for the server location you want to use to dowloand the .ovpn file. Do not open this file.

Cudy Router Setup for IPVanish

Login to Cudy firmware settings in a browser on any computer or smart device connected to the Cudy FlashRouter’s network.

1. Click General Settings.

2. Click VPN.

3. Toggle the Enable switch to On.

4. Select OpenVPN Client from the Protocol dropdown.

5. Click Browse and select the .ovpn file you downloaded earlier. You should see the server file name listed next to Current Config File after doing so.

6. Enter your IPVanish account login email and password that you obtained earlier in the Username and Password.

Cudy IPVanish enter username and password

7. Click Save & Apply at the bottom of the page.

Verify a successful IPVanish connection

You should now see a CONNECTED message.
Visit IPVanish’s IP Check to verify your new IP address and virtual location.

How to change the IPVanish server

Follow the steps at the top of the page to obtain a new .ovpn file.
Then proceed with the settings same as initial setup.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

PrivateInternetAccess (PIA) Cudy OpenVPN Setup

TeamFlashRouters · Feb 29, 2024 ·

Preparing for PIA Cudy Setup

Download your PIA .ovpn file

If you are not already a PIA user Sign Up Now.

1. Log in to your account on the PIA website.

2. Successfully log in with your account information then go to PIA’s OpenVPN Config Generator.

3. On the OpenVPN Configuration Generator select the following:

OpenVPN Version: OpenVPN 2.4 or newer

Select Platform: Linux

Select Region: Choose the server location you’d like to connect to

Select Port: Typically we recommend UDP/1198 RSA-2048 AES-128-CBC SHA1 for best speeds but feel free to select the one you want to use.

4. Click Generate to download the .ovpn file. Do not open this file once it is downloaded.

Cudy Router Setup for PIA

Login to Cudy firmware settings in a browser on any computer or smart device connected to the Cudy FlashRouter’s network.

1. Click General Settings.

2. Click VPN.

3. Toggle the Enable switch to On.

4. Select OpenVPN Client from the Protocol dropdown.

5. Click Browse and select the .ovpn file you downloaded earlier. You should see the server file name listed next to Current Config File after doing so.

6. Enter your PIA account login username and password in the Username and Password.

7. Click Save & Apply at the bottom of the page.

Verify a successful PIA connection

You should now see a CONNECTED message.
Visit PIA’s IP Check to verify your new IP address and virtual location.

How to change the PIA server

Follow the steps at the top of the page to obtain a new .ovpn file.
Then proceed with the settings same as initial setup.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

ProtonVPN Merlin WireGuard Setup

TeamFlashRouters · Mar 30, 2023 ·

Preparing for ProtonVPN Merlin Setup

Download your ProtonVPN .conf file

If you are not already an ProtonVPN user Sign Up Now.

1. Log in to your account on the ProtonVPN website.

2. Click Downloads.

3. Scroll down to WireGuard configuration and name the device FlashRouter.

4. Select Router as the platform.

5. Select the VPN options that best fit your needs. We typically use the settings as seen in the screenshot here if you are unsure.

6. Next select the server that you would like to connect to and click Create. At the top of the page you’ll see ProtonVPN’s recommended server which we recommend using unless you need to connect to a specific location.

If you need a specific server location find it in the list and click Create.

7. After clicking Create a new window will appear. Click Download to download the .conf file to your computer.

Merlin Router Setup for ProtonVPN

Login to Asus Merlin firmware settings in a browser on any computer or smart device connected to the Merlin FlashRouter’s network.

1. Navigate to the VPN tab.

2. Navigate to the VPN Client tab.

3. Select WireGuard as the VPN Protocol.

4. Click Choose file and select the .conf file you downloaded earlier. Then click Upload.

5. In the Description field enter in the name you’d like to use for this WireGuard Client profile. We typically advise entering in the location here. Our example server was in US-NY#61 so I have entered in ProtonVPN NY-61.

6. Set Enable WireGuard to Yes.

7. Click Apply at the bottom of the page and you should then see a Connected message appear.

8. By default no devices are assigned to the new active WireGuard connection profile. Click the VPN Director tab to assign specific devices to the new WireGuard profile. Your IP will not be changed on your devices yet.

9. On the VPN Director page click the + symbol next to Add new rule.

10. Select the new WireGuard profile in the Interface dropdown.

11. In the Local IP field enter in 192.168.50.0/24 if you want ALL devices connected to the FlashRouter’s network to use the WireGuard VPN connection. Click OK.

If you only want certain devices to connect to the WireGuard Client profile you have setting up instead of all the devices connected to the FlashRouter’s network please complete the instructions on our VPN Director guide.

12. Then click Apply at the bottom of the page.

Verify a successful ProtonVPN connection

Visit ProtonVPN’s IP Check from a private/incognito browsing window to verify your new IP address and virtual location.

How to change the ProtonVPN server

Follow the steps at the top of the page to obtain a new .conf file.
Then proceed with the settings same as initial setup.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

IPVanish Manual OpenVPN Setup

TeamFlashRouters · Apr 5, 2019 ·

Preparing for Manual IPVanish Setup

Verify your IPVanish login information

If you are not already an IPVanish user Sign Up Now.

Log in to your account on the IPVanish website.

IPVanish Server Addresses

View a full list of IPVanish servers.

America

Ashburn:
iad-a01.ipvanish.com
through
iad-a78.ipvanish.com

Atlanta:
atl-a01.ipvanish.com
through
atl-a88.ipvanish.com

Boston:
bos-c01.ipvanish.com
through
bos-c27.ipvanish.com

Chicago:
chi-a01.ipvanish.com
through
chi-a58.ivpanish.com

Cleveland:
cle-c01.ipvanish.com
through
cle-c20.ipvanish.com

Dallas:
dal-a01.ipvanish.com
through
dal-a79.ipvanish.com

Denver:
den-c01.ipvanish.com
through
den-c13.ipvanish.com

Jackson:
jan-c01.ipvanish.com
through
jan-c15.ipvanish.com

Las Vegas:
las-c11.ipvanish.com
through
las-c20.ipvanish.com

Los Angeles:
lax-a01.ipvanish.com
through
lax-a60.ipvanish.com

Miami:
mia-a01.ipvanish.com
through
mia-a34.ipvanish.com

Milwaukee:
mke-c01.ipvanish.com
through
mke-c19.ipvanish.com

New York:
nyc-a01.ipvanish.com
through
nyc-a51.ipvanish.com

Phoenix:
phx-a01.ipvanish.com
through
phx-a24.ipvanish.com

Salt Lake City:
slc-c01.ipvanish.com
through
slc-c12.ipvanish.com

San Jose:
sjc-a01.ipvanish.com
through
sjc-a27.ipvanish.com

Seattle:
sea-a01-ipvanish.com
through
sea-a41.ipvanish.com

St. Louis:
stl-c01.ipvanish.com
through
stl-c18.ipvanish.com

United Kingdom

London:
lon-a01.ipvanish.com
through
lon-a69.ipvanish.com

lon-c01.ipvanish.com
through
lon-c58.ipvanish.com

Manchester:
man-c01.ipvanish.com
through
man-c09.ipvanish.com

DD-WRT Router Setup for IPVanish

Navigate to Services > VPN

Enter IPVanish settings

OpenVPN Client

Start OpenVPN Client

If you wish to disable your VPN connection simply set this to Disable at any time and click Apply Settings.

Server IP/Name

Copy and paste the server you would like to connect to from the server list above. Be sure there are no extra spaces or characters.

If you wish to change IPVanish connection locations, THIS IS THE ONLY FIELD YOU NEED TO CHANGE.

Port

443

Tunnel Device

TUN

Tunnel Protocol

UDP

Encryption cipher

AES-256-CBC

Hash Algorithm

SHA256

User Pass Authentication

Enable

Username

Enter the Username you successfully logged in to your IPVanish account with.

Password

Enter the Password you successfully logged in to your IPVanish account with.

Advanced Options

Enable

TLS Cipher

None

LZO Compression

Adaptive

NAT

Enable

Firewall Protection

Enable

Additional Config

persist-key
persist-tun
persist-remote-ip
keysize 256

Policy Based Routing

This field can be used for split VPN and Dual Gateway routing.

CA Cert

CLICK APPLY SETTINGS

Leave all settings not mentioned above as their default setting.

Verify a successful IPVanish connection

Navigate to Status > OpenVPN

You should now see a CONNECTED SUCCESS message.
Visit IPVanish’s IP Check to verify your new IP address and virtual location.

Back up your settings

Navigate to Administration > Backup.

Click the Backup button.
A file named nvrambak.bin will be saved to your computer.
You can load nvrambak.bin to restore your settings in the event of a reset.

How to change the IPVanish server

Copy the new IPVanish server address from the above server list.
Paste the server into the Server IP/Name field.
Click Apply Settings.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

Connecting to OpenVPN on Asus Merlin Firmware

TeamFlashRouters · Sep 22, 2021 ·

To setup VPN on your Asuswrt Merlin router, you will need to first download an OpenVPN (.ovpn) file from your VPN service provider and load it onto your router.

Review your specific VPN service instructions below. Follow these instructions to locate and upload your OpenVPN file. Depending on the VPN service, there may be additional steps and configurations required to complete the setup.

Using Asuswrt Merlin’s VPN Director, your router can store up to five different VPN connections and switch between them at will.

ExpressVPN TP-Link OpenVPN Setup

TeamFlashRouters · Apr 8, 2024 ·

Preparing for ExpressVPN TP-Link Setup

Obtain your ExpressVPN OpenVPN Information

If you are not already an ExpressVPN user Sign Up Now.

1. Log in to your account on the ExpressVPN website.

2. Successfully log in with your account information. Select More.

3. Select Manual Configuration and copy the Username and Password that are displayed on the right hand side of the screen.

TP-Link Router Setup for ExpressVPN

1. Navigate to the Advanced tab.

2. Navigate to the VPN Client tab.

3. Check the Enable box next to VPN Client. Then click Save at the bottom of the page.

4. Click the Add button in the Server List area.

5. In the Description field enter in the name you’d like to use for this OpenVPN Client profile. We typically advise entering in the location or server number here. Our example server was in New York so I have entered in ExpressVPN New York.

Set the VPN Type to OpenVPN.

In the Username and Password fields paste in the ExpressVPN username and password we obtained earlier.

Click Browse and select the .ovpn file you downloaded earlier. Then click Save.

By default no devices will be assigned to the VPN Tunnel. With TP-Link firmware you must manually assign the devices that you want connected to the VPN tunnel. Proceed with the next steps to do so for all devices you want connected to VPN.

6. Click the Add button in the Device List area.

7. A list of devices connected to the FlashRouter’s network will appear. Check the devices that you want to connect to VPN. Then click OK.

TP-Link select devices to add to VPN tunnel

8. Now that the devices have been assigned to the VPN connection click the Enable toggle in the Server List area.

Verify a successful ExpressVPN connection

You should now see a CONNECTED message.
Visit ExpressVPN’s IP Check to verify your new IP address and virtual location.

How to change the ExpressVPN server

Follow the steps at the top of the page to obtain a new .ovpn file.
Then proceed with the settings same as initial setup.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

Surfshark Merlin WireGuard Setup

TeamFlashRouters · Mar 30, 2023 ·

Preparing for Surfshark Merlin Setup

Download your Surfshark .conf file

If you are not already a Surfshark user Sign Up Now.

1. Log in to your account on the Surfshark website.

2. Click VPN Manual Setup.

3. Select Router as the Setup Method.

4. Select WireGuard as the Protocol.

5. Select I don’t have a key pair.

6. Enter FlashRouter as the name of the connection and click Next.

7. Click Generate a new key pair.

8. Click Choose a location.

9. Select the server location you want to connect to. Unless you need a specific location we recommend using Surfshark’s recommended Fastest server. Click Download to download the .conf file for this Surfshark server location.

Merlin Router Setup for Surfshark

Login to Asus Merlin firmware settings in a browser on any computer or smart device connected to the Merlin FlashRouter’s network.

1. Navigate to the VPN tab.

2. Navigate to the VPN Client tab.

3. Select WireGuard as the VPN Protocol.

4. Click Choose file and select the .conf file you downloaded earlier. Then click Upload.

5. In the Description field enter in the name you’d like to use for this WireGuard Client profile. We typically advise entering in the location here. Our example server was in New York so I have entered in Surfshark New York.

6. Set Enable WireGuard to Yes.

7. Click Apply at the bottom of the page and you should then see a Connected message appear.

9. On the VPN Director page click the + symbol next to Add new rule.

10. Select the new WireGuard profile in the Interface dropdown.

11. In the Local IP field enter in 192.168.50.0/24 if you want ALL devices connected to the FlashRouter’s network to use the WireGuard VPN connection. Click OK.

12. Then click Apply at the bottom of the page.

Verify a successful Surfshark connection

Visit Surfshark’s IP Check from a private/incognito browsing window to verify your new IP address and virtual location.

How to change the Surfshark server

Follow the steps at the top of the page to obtain a new .conf file.
Then proceed with the settings same as initial setup.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

ExpressVPN Manual OpenVPN Setup

admin · Feb 19, 2019 ·

Preparing for Manual ExpressVPN Setup

Obtain your ExpressVPN OpenVPN Information

If you are not already an ExpressVPN user Sign Up Now.

1. Log in to your account on the ExpressVPN website.

2. Successfully log in with your account information. Select More.

3. Select Manual Configuration and copy the Username and Password that are displayed on the right hand side of the screen.

ExpressVPN Server Addresses

Americas

usa-atlanta-ca-version-2.expressnetw.com
usa-boston-ca-version-2.expressnetw.com
usa-chicago-ca-version-2.expressnetw.com
usa-dallas-ca-version-2.expressnetw.com
usa-dallas-2-ca-version-2.expressnetw.com
usa-denver-ca-version-2.expressnetw.com
usa-kansascity-ca-version-2.expressnetw.com
usa-losangeles-ca-version-2.expressnetw.com
usa-losangeles-1-ca-version-2.expressnetw.com
usa-losangeles-2-ca-version-2.expressnetw.com
usa-losangeles-3-ca-version-2.expressnetw.com
usa-los-angeles-4-ca-version-2.expressnetw.com
usa-miami-ca-version-2.expressnetw.com
usa-miami-2-ca-version-2.expressnetw.com
usa-minneapolis-ca-version-2.expressnetw.com
usa-newjersey-1-ca-version-2.expressnetw.com
usa-newjersey-3-ca-version-2.expressnetw.com
usa-newyork-ca-version-2.expressnetw.com
us-new-york-2-ca-version-2.expressnetw.com
usa-phoenix-ca-version-2.expressnetw.com
usa-saltlakecity-ca-version-2.expressnetw.com
usa-sanfrancisco-ca-version-2.expressnetw.com
usa-sanjose-ca-version-2.expressnetw.com
usa-seattle-ca-version-2.expressnetw.com
usa-tampa-1-ca-version-2.expressnetw.com
usa-virginia-ca-version-2.expressnetw.com
usa-washingtondc-ca-version-2.expressnetw.com
usa-washingtondc-2-ca-version-2.expressnetw.com
canada-montreal-ca-version-2.expressnetw.com
canada-toronto-ca-version-2.expressnetw.com
canada-toronto-2-ca-version-2.expressnetw.com
canada-vancouver-ca-version-2.expressnetw.com
mexico-ca-version-2.expressnetw.com
argentina-ca-version-2.expressnetw.com
brazil-ca-version-2.expressnetw.com
brazil-2-ca-version-2.expressnetw.com
chile-ca-version-2.expressnetw.com
colombia-ca-version-2.expressnetw.com
costarica-ca-version-2.expressnetw.com
ecuador-ca-version-2.expressnetw.com
guatemala-ca-version-2.expressnetw.com
panama-ca-version-2.expressnetw.com
peru-ca-version-2.expressnetw.com
uruguay-ca-version-2.expressnetw.com
venezuela-ca-version-2.expressnetw.com

Europe

uk-berkshire-ca-version-2.expressnetw.com
uk-berkshire-2-ca-version-2.expressnetw.com
uk-docklands-ca-version-2.expressnetw.com
uk-east-london-ca-version-2.expressnetw.com
uk-kent-ca-version-2.expressnetw.com
uk-london-ca-version-2.expressnetw.com
france-paris-1-ca-version-2.expressnetw.com
france-paris-2-ca-version-2.expressnetw.com
france-strasbourg-ca-version-2.expressnetw.com
germany-darmstadt-ca-version-2.expressnetw.com
germany-frankfurt-1-ca-version-2.expressnetw.com
germany-frankfurt-2-ca-version-2.expressnetw.com
germany-nuremberg-ca-version-2.expressnetw.com
italy-cosenza-ca-version-2.expressnetw.com
italy-milan-ca-version-2.expressnetw.com
netherlands-amsterdam-ca-version-2.expressnetw.com
netherlands-rotterdam-ca-version-2.expressnetw.com
netherlands-thehague-ca-version-2.expressnetw.com
spain-barcelona-ca-version-2.expressnetw.com
spain-ca-version-2.expressnetw.com
sweden-ca-version-2.expressnetw.com
sweden-2-ca-version-2.expressnetw.com
switzerland-ca-version-2.expressnetw.com
switzerland-2-ca-version-2.expressnetw.com
albania-ca-version-2.expressnetw.com
andorra-ca-version-2.expressnetw.com
armenia-ca-version-2.expressnetw.com
austria-ca-version-2.expressnetw.com
azerbaijan-ca-version-2.expressnetw.com
belarus-ca-version-2.expressnetw.com
belgium-ca-version-2.expressnetw.com
bosniaandherzegovina-ca-version-2.expressnetw.com
bulgaria-ca-version-2.expressnetw.com
croatia-ca-version-2.expressnetw.com
cyprus-ca-version-2.expressnetw.com
czechrepublic-ca-version-2.expressnetw.com
denmark-ca-version-2.expressnetw.com
estonia-ca-version-2.expressnetw.com
finland-ca-version-2.expressnetw.com
georgia-ca-version-2.expressnetw.com
greece-ca-version-2.expressnetw.com
hungary-ca-version-2.expressnetw.com
iceland-ca-version-2.expressnetw.com
ireland-ca-version-2.expressnetw.com
isleofman-ca-version-2.expressnetw.com
jersey-ca-version-2.expressnetw.com
latvia-ca-version-2.expressnetw.com
liechtenstein-ca-version-2.expressnetw.com
lithuania-ca-version-2.expressnetw.com
luxembourg-ca-version-2.expressnetw.com
macedonia-ca-version-2.expressnetw.com
malta-ca-version-2.expressnetw.com
moldova-ca-version-2.expressnetw.com
monaco-ca-version-2.expressnetw.com
montenegro-ca-version-2.expressnetw.com
norway-ca-version-2.expressnetw.com
poland-ca-version-2.expressnetw.com
portugal-ca-version-2.expressnetw.com
romania-ca-version-2.expressnetw.com
serbia-ca-version-2.expressnetw.com
slovakia-ca-version-2.expressnetw.com
slovenia-ca-version-2.expressnetw.com
ukraine-ca-version-2.expressnetw.com

Asia Pacific

australia-brisbane-ca-version-2.expressnetw.com
australia-melbourne-ca-version-2.expressnetw.com
australia-perth-ca-version-2.expressnetw.com
australia-sydney-ca-version-2.expressnetw.com
australia-sydney-2-ca-version-2.expressnetw.com
australia-sydney-3-ca-version-2.expressnetw.com
hongkong-2-ca-version-2.expressnetw.com
hongkong4-ca-version-2.expressnetw.com
hongkong-1-ca-version-2.expressnetw.com
japan-tokyo-1-ca-version-2.expressnetw.com
japan-tokyo-2-ca-version-2.expressnetw.com
india-chennai-ca-version-2.expressnetw.com
india-mumbai-1-ca-version-2.expressnetw.com
singapore-cbd-ca-version-2.expressnetw.com
singapore-jurong-ca-version-2.expressnetw.com
southkorea-ca-version-2.expressnetw.com
southkorea2-ca-version-2.expressnetw.com
bangladesh-ca-version-2.expressnetw.com
bhutan-ca-version-2.expressnetw.com
brunei-ca-version-2.expressnetw.com
cambodia-ca-version-2.expressnetw.com
indonesia-ca-version-2.expressnetw.com
kazakhstan-ca-version-2.expressnetw.com
kyrgyzstan-ca-version-2.expressnetw.com
laos-ca-version-2.expressnetw.com
macau-ca-version-2.expressnetw.com
malaysia-ca-version-2.expressnetw.com
mongolia-ca-version-2.expressnetw.com
myanmar-ca-version-2.expressnetw.com
nepal-ca-version-2.expressnetw.com
newzealand-ca-version-2.expressnetw.com
pakistan-ca-version-2.expressnetw.com
ph-via-sing-ca-version-2.expressnetw.com
srilanka-ca-version-2.expressnetw.com
taiwan-3-ca-version-2.expressnetw.com
thailand-ca-version-2.expressnetw.com
vietnam-ca-version-2.expressnetw.com

Middle East and Africa

algeria-ca-version-2.expressnetw.com
israel-ca-version-2.expressnetw.com
kenya-ca-version-2.expressnetw.com
southafrica-ca-version-2.expressnetw.com

DD-WRT Router Setup for ExpressVPN

Navigate to Services > VPN

Enter ExpressVPN settings

OpenVPN Client

Start OpenVPN Client

If you wish to disable your VPN connection simply set this to Disable at any time and click Apply Settings.

Server IP/Name

Copy and paste the server you would like to connect to from the server list above. Be sure there are no extra spaces or characters.

If you wish to change ExpressVPN connection locations, THE ONLY SETTING YOU NEED TO CHANGE IS THE EXPRESSVPN SERVER ADDRESS.*

Port

1195

Tunnel Device

TUN

Tunnel Protocol

UDP

Encryption cipher

AES-256-CBC

Hash Algorithm

SHA512

User Pass Authentication

Enable

Username

Enter the Username you found in the Manual Config section.

Password

Enter the Password you found in the Manual Config section.

Advanced Options

Enable

TLS Cipher

None

LZO Compression

Adaptive

NAT

Enable

Firewall Protection

Enable

nsCertType verification

Checked

TLS Auth Key

-----BEGIN OpenVPN Static key V1-----
48d9999bd71095b10649c7cb471c1051
b1afdece597cea06909b99303a18c674
01597b12c04a787e98cdb619ee960d90
a0165529dc650f3a5c6fbe77c91c137d
cf55d863fcbe314df5f0b45dbe974d9b
de33ef5b4803c3985531c6c23ca6906d
6cd028efc8585d1b9e71003566bd7891
b9cc9212bcba510109922eed87f5c8e6
6d8e59cbd82575261f02777372b2cd4c
a5214c4a6513ff26dd568f574fd40d6c
d450fc788160ff68434ce2bf6afb00e7
10a3198538f14c4d45d84ab42637872e
778a6b35a124e700920879f1d003ba93
dccdb953cdf32bea03f365760b0ed800
2098d4ce20d045b45a83a8432cc73767
7aed27125592a7148d25c87fdbe0a3f6
-----END OpenVPN Static key V1-----

Additional Config

persist-key
persist-tun
fragment 1300
mssfix 1450
keysize 256

Policy Based Routing

This field can be used for split VPN and Dual Gateway routing.

CA Cert

Public Client Cert

Private Client Key

CLICK APPLY SETTINGS

Leave all settings not mentioned above as their default setting.

Verify a successful ExpressVPN connection

Navigate to Status > OpenVPN.

You should now see a CONNECTED SUCCESS message.
Visit ExpressVPN’s IP Check to verify your new IP address and virtual location.

Back up your settings

Navigate to Administration > Backup

Click the Backup button.
A file named nvrambak.bin will be saved to your computer.
You can load nvrambak.bin to restore your settings in the event of a reset.

How to change the ExpressVPN server

Copy the new ExpressVPN server address from the above server list.
Paste the server into the Server IP/Name field.
Click Apply Settings.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

NordVPN Manual OpenVPN Setup

TeamFlashRouters · Apr 8, 2019 ·

Preparing for Manual NordVPN Setup

Verify your NordVPN login information

If you are not already an NordVPN user Sign Up Now.

Log in to your account on the NordVPN website.

NordVPN Server Addresses

For a NordVPN server recommendation visit their Recommend Server page.

Once you have selected the server you want to connect to, download the UDP .ovpn file containing the Server IP Address, TLS Auth Key, and CA Cert referenced below.

Open the .ovpn file that is downloaded to your computer with NotePad++ for Windows or TextEdit for Apple. You will only need the Server IP Address, TLS Auth Key, and CA Cert from this file. All NordVPN servers and .ovpn files have different IP Addresses, keys, and certificates.

DD-WRT Router Setup for NordVPN

Navigate to Services > VPN

Enter NordVPN settings

OpenVPN Client

Start OpenVPN Client

If you wish to disable your VPN connection simply set this to Disable at any time and click Apply Settings.

Server IP/Name

At the top of the .ovpn file you downloaded above, there is a line e.g.:
remote 206.226.72.27 1194
206.226.72.27 is your NordVPN server IP address. Enter the IP Address in this field.

Port

1194

Tunnel Device

TUN

Tunnel Protocol

UDP

Encryption cipher

AES-256-CBC

Hash Algorithm

SHA512

Userpass Authentication

Enable

Username

Enter the Username you successfully logged in to your NordVPN account with.

Password

Enter the Password you successfully logged in to your NordVPN account with.

Advanced Options

Enable

TLS Cipher

None

LZO Compression

Adaptive

NAT

Enable

Firewall Protection

Enable

TLS Auth Key

In the .ovpn file copy and paste all contents in between the <tls-auth> and </tls-auth> lines from your .ovpn file starting and ending with:
—–BEGIN OpenVPN Static key V1—–
…
—–END OpenVPN Static key V1—–

Additional Config

tun-mtu-extra 32
mssfix 1450
persist-key
persist-tun

Policy Based Routing

This field can be used for split VPN and Dual Gateway routing.

CA Cert

In the .ovpn file Copy and Paste all contents in between the <ca> and </ca> lines from your .ovpn file starting and ending with:
—–BEGIN CERTIFICATE—–
…
—–END CERTIFICATE—–

CLICK APPLY SETTINGS

Leave all settings not mentioned above as their default setting.

Verify a successful NordVPN connection

Navigate to Status > OpenVPN

You should now see a CONNECTED SUCCESS message.
Visit NordVPN’s website to verify your new IP address, virtual location, and status as Protected at the top of the page.

Back up your settings

Navigate to Administration > Backup

Click the Backup button.
A file named nvrambak.bin will be saved to your computer.
You can load nvrambak.bin to restore your settings in the event of a reset.

How to change the NordVPN server

Download and open a new .ovpn file from NordVPN.
Copy and paste the server IP Address into the Server IP/Name field.
Copy and paste the TLS Auth Key into the TLS Auth Key field.
Copy and paste the CA Cert into the CA Cert field.
Click Apply Settings.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

NordVPN TP-Link OpenVPN Setup

TeamFlashRouters · Apr 16, 2024 ·

Preparing for NordVPN TP-Link Setup

Obtain your NordVPN manual Username and Password

If you are not already an NordVPN user Sign Up Now.

1. Log in to your account on the NordVPN website.

2. Click NordVPN on the left hand side and then click Setup NordVPN manually.

3. Enter in the verification code that was sent to your email.

4. Copy and paste your NordVPN manual username and password to a secure location. This is the username and password you will enter into the router settings to connect to NordVPN.

Download your NordVPN .ovpn file

Then click Show Available Protocols. Click Download Config next to OpenVPN UDP. This will download the .ovpn file to your computer for this server. Do not open this file.

TP-Link Router Setup for NordVPN

1. Navigate to the Advanced tab.

2. Navigate to the VPN Client tab.

3. Check the Enable box next to VPN Client. Then click Save at the bottom of the page.

4. Click the Add button in the Server List area.

Set the VPN Type to OpenVPN.

In the Username and Password fields paste in the NordVPN username and password we obtained earlier.

Click Browse and select the .ovpn file you downloaded earlier. Then click Save.

6. Click the Add button in the Device List area.

7. A list of devices connected to the FlashRouter’s network will appear. Check the devices that you want to connect to VPN. Then click OK.

8. Now that the devices have been assigned to the VPN connection click the Enable toggle in the Server List area.

Verify a successful NordVPN connection

You should now see a CONNECTED message.
Visit NordVPN’s IP Check to verify your new IP address and virtual location.

How to change the NordVPN server

Follow the steps at the top of the page to obtain a new .ovpn file.
Then proceed with the settings same as initial setup.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

PureVPN Merlin WireGuard Setup

TeamFlashRouters · Jul 20, 2023 ·

Preparing for PureVPN Merlin Setup

Download your PureVPN .conf file

If you are not already an PureVPN user Sign Up Now.

1. Log in to your account on the PureVPN website.

2. Select Manual Configuration.

3. Select the Server Location you want to connect to and then click Download.

4. In the Select Protocol dropdown choose WireGuard.

5. In the Select Device dropdown choose DD-WRT. Then click Generate Configuration. This will save a .conf file to your computer.

Merlin Router Setup for PureVPN

Login to Asus Merlin firmware settings in a browser on any computer or smart device connected to the Merlin FlashRouter’s network.

1. Navigate to the VPN tab.

2. Navigate to the VPN Client tab.

3. Select WireGuard as the VPN Protocol.

4. Click Choose file and select the .conf file you downloaded earlier. Then click Upload.

5. In the Description field enter in the name you’d like to use for this WireGuard Client profile. We typically advise entering in the location here.

6. Set Enable WireGuard to Yes.

7. Click Apply at the bottom of the page and you should then see a Connected message appear.

9. On the VPN Director page click the + symbol next to Add new rule.

10. Select the new WireGuard profile in the Interface dropdown.

11. In the Local IP field enter in 192.168.50.0/24 if you want ALL devices connected to the FlashRouter’s network to use the WireGuard VPN connection. Click OK.

12. Then click Apply at the bottom of the page.

Verify a successful PureVPN connection

Visit PureVPN’s IP Check to verify your new IP address and virtual location.

How to change the PureVPN server

Follow the steps at the top of the page to obtain a new .conf file.
Then proceed with the settings same as initial setup.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

NordVPN Setup for Privacy Hero

TeamFlashRouters · Apr 3, 2023 ·

Privacy Hero supports NordVPN using both NordLynx and OpenVPN.

NordLynx is recommended for most users. OpenVPN is also available and may be required for NordVPN Dedicated IP connections. Some Dedicated IP configurations require a private OpenVPN file imported as a Custom VPN.

Privacy Hero is cloud-managed, so you can complete the setup from any device with an internet connection. You do not need to be connected to Privacy Hero WiFi to change these settings.

NordVPN NordLynx Setup

NordLynx uses a NordVPN access token, not your regular NordVPN website email and password.

Open Privacy Hero and Select NordLynx

From a computer, smartphone, or tablet, open app.privacyhero.com.
Sign in with your Privacy Hero account email and password.
Open the VPN section.
Click Change and select NordVPN.
Choose NordLynx.

Generate Your NordVPN Access Token

In another browser tab, open NordVPN Access Tokens and sign in to your NordVPN account.
Complete any account or email verification requested by NordVPN.
Select Generate new token; choose Doesn’t expire if available, then copy the token.

Important: Treat your NordVPN token as a password. Do not share it publicly.

Connect Privacy Hero to NordVPN

Return to Privacy Hero, paste the token into the NordLynx token field, and click Save. The default country selection automatically chooses an available NordVPN server for that location.
Wait for the VPN status to show Connected.

NordVPN OpenVPN Setup

Use OpenVPN if you prefer the OpenVPN protocol or if your configuration requires it. OpenVPN requires NordVPN Manual Service Credentials, which are different from your website login email and password.

Select OpenVPN in Privacy Hero

Open app.privacyhero.com and sign in.
Open the VPN section.
Click Change and select NordVPN.
Select OpenVPN.

Get Your Manual Service Credentials

Open NordVPN Manual Service Credentials and sign in.
Complete NordVPN’s verification if prompted, then copy the current Service Username and Service Password.

Important: Do not enter your normal NordVPN website email and password into Privacy Hero’s OpenVPN fields.

Save Your OpenVPN Connection

Return to Privacy Hero and enter the manual service username and password in the OpenVPN credential fields. Click Save.
Confirm Privacy Hero shows the connection as Connected.

Choose a NordVPN Country or Specific Server

Privacy Hero can select a NordVPN server automatically, or you can choose a country or specify a server hostname.

Choose a Country

Open your NordVPN connection in Privacy Hero.
Open the Country dropdown.
Search for and select your preferred country.
Click Save. Privacy Hero will use an available NordVPN server for the selected country.

Use a Specific NordVPN Server

Open your NordVPN connection in Privacy Hero.
Open Advanced Options.
Enter the NordVPN server hostname, for example us12286.nordvpn.com.
Click Save.

Use NordVPN’s server recommendation tool if you need a hostname. NordVPN servers can be retired or taken offline for maintenance; if your specific server stops working, choose another server or return to country selection.

NordVPN Dedicated IP Setup

NordVPN Dedicated IP can require either the regular NordVPN OpenVPN connection or a private .ovpn file imported as a Custom VPN.

Method 1: OpenVPN Advanced Options

Try this first if your Dedicated IP works with the standard NordVPN OpenVPN setup.

Set up NordVPN → OpenVPN using your NordVPN Manual Service Credentials as described above.
Open Advanced Options.
Enter the Dedicated IP server hostname assigned to your account.
Click Save and check whether the VPN connects.
Verify that your public IP matches your assigned Dedicated IP.

If connected and the public IP matches, no additional configuration is needed.

Method 2: Custom VPN With a Private OpenVPN File

Some Dedicated IP servers require a private OpenVPN configuration file. If Method 1 does not connect, follow NordVPN’s Manual Dedicated IP Server Setup instructions.

Download Your Dedicated IP Configuration

Sign in to the NordVPN account associated with the Dedicated IP.
Locate your assigned Dedicated IP server using NordVPN’s manual setup instructions.
Download its OpenVPN UDP configuration file.
Save the .ovpn file to your computer or device.

Important: Use the private configuration file for your actual Dedicated IP, not a public NordVPN server file.

Upload the File as a Custom VPN

Open app.privacyhero.com and select VPN → Change.
Select Custom from the VPN provider dropdown, not NordVPN.
Upload your Dedicated IP UDP .ovpn file.
Enter your NordVPN Manual Service Username and Password.
Save the configuration, enable the VPN, and wait for Connected.
Verify the public IP matches your NordVPN Dedicated IP.

These are NordVPN’s separate manual service credentials, not your regular website login.

Verify Your NordVPN Connection

Connect your testing device to the Privacy Hero WiFi.
Disconnect any NordVPN or other VPN app running directly on that device.
Open a fresh private/incognito browser window.
Visit NordVPN What Is My IP.
Confirm the public IP and location match your selected NordVPN server (or assigned Dedicated IP).

Running a VPN application directly on the device at the same time as the router VPN can produce double-VPN conflicts and unexpected IP or location results.

Streaming Relocation and VPN Location

If Streaming Relocation is enabled for a supported service, that service may use the Streaming Relocation region instead of your VPN server region. See Privacy Hero Streaming Relocation.

NordVPN Not Connecting?

If the VPN displays Failed, Connecting, or a timeout error, check for:

A server undergoing maintenance or no longer available.
An expired, revoked, or outdated NordLynx access token.
Incorrect or changed OpenVPN Manual Service Credentials.
Recent account changes or an inactive NordVPN subscription.
A protocol-specific issue.
A Dedicated IP that requires a private .ovpn file and Custom provider selection.

Follow Privacy Hero NordVPN Not Connecting or Showing Timeout Errors for troubleshooting.

No Internet After NordVPN Disconnects?

If internet access stops when the VPN disconnects, the VPN Kill Switch may be blocking normal traffic as intended. See Privacy Hero VPN Kill Switch: No Internet or WiFi Troubleshooting.

VPN Connected, but One Device Shows the Wrong IP?

If other devices show the correct VPN IP, check the affected device’s VPN apps, Private Relay, Private DNS, antivirus, and browser settings. See Device Settings That Can Interfere With Your Router VPN.

Related Privacy Hero Guides

Router FAQs

admin · Jan 29, 2019 ·

Router FAQs

What is an IP Address?

An IP (Internet Protocol) Address is a numerical assignment for each device (cell phone, iPad, laptop computer, printer etc) inside a network that uses the Internet Protocol for communication. Internet Protocol is responsible for routing information packets across network boundaries. It is the main protocol establishing the Internet.

An IP address serves two predominant functions. First is to host or network interface identification. Second, it provides location addressing. To put it bluntly, an IP address tells wherever you are connecting, to whom you are visiting, and where you are located.

What is DNS?

DNS (Domain Name System) is a protocol within the TCP/IP protocol that uses a set of standards for how computers exchange data on the Internet and on many private networks.

The basic job of DNS is to convert a user-friendly domain name into an IP address that computers use to identify one another. Think of DNS like your cellphone contact list; you tap the name and the phone contacts to a phone number.

It is easier to remember flashrouters.com, rather than its IP address. Imagine if you had to remember all of the IP addresses of your favorite websites!

What is DNSMasq?

DNSMasq is a local DNS server that speeds up host-name searches from your computer/Internet connection after pressing enter.

Basically, DNSMasq gives the router some advanced enterprise functionality – caching DNS records locally so you have a faster browsing experience. Your computer only has to go to the router instead of repeatedly scouring the web for a commonly visited site.

What is Throughput and How Do I Improve it?

Throughput is the average rate of successful delivery of messages through a network. Simply put, throughput measures the speed of message delivery inside a network. If you think about it in relationship to networks and Internet connections, throughput defines the user experience. The key to a pleasing user experience is uninterrupted service and smooth data transfer.

In order to improve throughput, you should get a router with more memory. If you notice that your network is running slowly due to congestion, you could probably benefit by upgrading your router to one with more memory. FlashMemory and RAM on a router add more room to prevent network congestion and improve throughput.

Most of FlashRouters‘ high-end units come with at least 8 MB of Flash memory and 64 MB of RAM which should be more than capable for providing for the average home users’ or small business will need in the future.

What is PPPoE?

PPPoE stands for Point-to-Point Protocol over Ethernet, a network protocol for encapsulating Point-to-Point Protocol (PPP) frames inside Ethernet frames. It is used mainly with DSL services where individual users connect to a DSL modem over Ethernet.

With PPPoE, users virtually “dial” from one machine to another over an Ethernet network, establish a point-to-point connection and then data packets are securely transported through the connection.

PPPoE offers an Internet service provider (ISP) an easier way to track exactly how much bandwidth you are using in case they want to charge for it in the future.

What is the Difference Between VPN Encryption and Wireless Network Security?

VPN Encryption: If you are connected to the VPN on your home network, then any data that flows over the Internet is entirely encrypted whether you are connected to the Internet either wired or wirelessly. This means that if your Local ISP was trying to see what you are browsing or downloading, they would not be able to see your data.

Wireless Network Security: If you leave your wireless network open or insecure, it does not matter whether Internet traffic is encrypted, because someone can directly see what you are doing on your network, or even worse, can go in and put a wireless password on your network, locking you out. They may also be able to access folders and files on your computer without your control.

Best thing to do is protect your wireless network with a WPA secured password along with your VPN connection.

Are FlashRouters Affected By the Shellshock Bug?

No.

According to our in-house testing and multiple DD-WRT community reports, we have found that the Shellshock vulnerability will not work on with DD-WRT or TomatoUSB installed router. The vulnerability is based on a shell called BASH (Bourne Again Shell) but DD-WRT & Tomato firmware use BusyBox which is confirmed to not have this issue.

Please be advised that if you are using Optware on your DD-WRT router there is a chance that implementation is BASH based. Only used trusted optware on your router.

PrivateInternetAccess (PIA) TP-Link OpenVPN Setup

TeamFlashRouters · Apr 29, 2024 ·

Preparing for PIA TP-Link Setup

Download your PIA .ovpn file

If you are not already a PIA user Sign Up Now.

1. Log in to your account on the PIA website.

2. Successfully log in with your account information then go to PIA’s OpenVPN Config Generator.

3. On the OpenVPN Configuration Generator select the following:

OpenVPN Version: OpenVPN 2.4 or newer

Select Platform: Linux

Select Region: Choose the server location you’d like to connect to

Select Port: Typically we recommend UDP/1198 RSA-2048 AES-128-CBC SHA1 for best speeds but feel free to select the one you want to use.

4. Click Generate to download the .ovpn file. Do not open this file once it is downloaded.

TP-Link Router Setup for PIA

1. Navigate to the Advanced tab.

2. Navigate to the VPN Client tab.

3. Check the Enable box next to VPN Client. Then click Save at the bottom of the page.

4. Click the Add button in the Server List area.

5. In the Description field enter in the name you’d like to use for this OpenVPN Client profile. We typically advise entering in the location. Our example server was New York so I have entered in PIA New York.

Set the VPN Type to OpenVPN.

In the Username and Password fields paste in the PIA username and password you use to successfully login to your PIA website account.

Click Browse and select the .ovpn file you downloaded earlier. Then click Save.

6. Click the Add button in the Device List area.

7. A list of devices connected to the FlashRouter’s network will appear. Check the devices that you want to connect to VPN. Then click OK.

8. Now that the devices have been assigned to the VPN connection click the Enable toggle in the Server List area.

Verify a successful PIA connection

You should now see a CONNECTED message.
Visit PIA’s IP Check to verify your new IP address and virtual location.

How to change the PIA server

Follow the steps at the top of the page to obtain a new .ovpn file.
Then proceed with the settings same as initial setup.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

CyberGhost Manual OpenVPN Setup

TeamFlashRouters · Apr 9, 2019 ·

Preparing for Manual CyberGhost Setup

Obtain your CyberGhost OpenVPN Information

If you are not already a CyberGhost user Sign Up Now.

1. Log in to your account on the CyberGhost website.

2. Select My Devices.

3. Select Other and then Configure New Device.

CyberGhost Website OpenVPN Configuration Files Generator Cyberghost - Website Screen CyberGhost Website OpenVPN Configuration Files Generator

4. Set Protocol to OpenVPN. Select the Country you would like to connect to. Select the Server Group. Name the device in the Device Name field. Click Save Configuration.

CyberGhost Website OpenVPN Configuration Files Generator 3

5. Press View configuration.

CyberGhost Website OpenVPN Configuration Files Generator 2

6. Copy the Username, and Password that appear to a notepad, since you will need this information later in the setup process. Click Download Configuration.

CyberGhost Website OpenVPN Configuration Files Generator 1

Open the file that was downloaded with NotePad++ for Windows or TextEdit for Apple. You only need the ca.crt, client.crt, and client.key files. All CyberGhost servers have different keys and certificates.

DD-WRT Router Setup for CyberGhost

Navigate to Services > VPN

Enter CyberGhost settings

OpenVPN Client

Start OpenVPN Client

If you wish to disable your VPN connection simply set this to Disable at any time and click Apply Settings.

Server IP/Name

Copy and paste the server you selected in your account. Be sure there are no extra spaces or characters.

Port

443

Tunnel Device

TUN

Tunnel Protocol

UDP

Encryption cipher

AES-256-CBC

Hash Algorithm

SHA256

User Pass Authentication

Enable

Username

Enter the Username you obtained in your CyberGhost account.

Password

Enter the Password you obtained in your CyberGhost account.

Advanced Options

Enable

TLS Cipher

None

LZO Compression

Adaptive

NAT

Enable

Firewall Protection

Enable

Additional Config

tun-mtu 1500
fragment 1300
mssfix 1300

Policy Based Routing

This field can be used for split VPN and Dual Gateway routing.

CA Cert

—–BEGIN CERTIFICATE—–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==
—–END CERTIFICATE—–

Public Client Cert

Copy and paste all contents of the client.crt file starting and ending with:
—–BEGIN CERTIFICATE—–
…
—–END CERTIFICATE—–

Private Client Key

Copy and paste all contents of the client.key file starting and ending with:
—–BEGIN PRIVATE KEY—–
…
—–END PRIVATE KEY—–

CLICK APPLY SETTINGS

Leave all settings not mentioned above as their default setting.

Verify a successful CyberGhost connection

Navigate to Status > OpenVPN

You should now see a CONNECTED SUCCESS message.
Visit CyberGhost’s website to verify your new IP address and virtual location.

Back up your settings

Navigate to Administration > Backup

Click the Backup button.
A file named nvrambak.bin will be saved to your computer.
You can load nvrambak.bin to restore your settings in the event of a reset.

How to change the CyberGhost server

Follow the instructions for obtaining the OpenVPN information from above.
Enter the new Server Address in the Server IP/Name field.
Enter the new Username and Password.
Enter the new ca.crt, client.crt, and client.key
Click Apply Settings.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

AirVPN Manual OpenVPN Setup

TeamFlashRouters · Jun 11, 2019 ·

Preparing for Manual AirVPN Setup

Obtain your AirVPN OpenVPN Information

If you are not already a AirVPN user Sign Up Now.

1. Log in to your account on the AirVPN website.

AIRVPN OpenVPN Client Login for FlashRouter DD-WRT VPN Configuration

2. Click on the Client Area tab.

AIRVPN OpenVPN Client Area for FlashRouter DD-WRT VPN Configuration

3. Click on the Config Generator subtab.

AIRVPN OpenVPN Configuration Generator for FlashRouter DD-WRT VPN Configuration

4. Click on the Router icon under Choose your Operating System.

AIRVPN OpenVPN FlashRouter DD-WRT VPN Configuration

5. Select a Protocol under the Protocols section. We recommend UDP.

Select AIRVPN OpenVPN Encryption Protocol for FlashRouter DD-WRT VPN Configuration

6. Select one option under the Choose Servers section. AirVPN sorts these servers by Planet, Continent, Country, and Single servers. Choose whichever best suits your needs.

Sort AIRVPN OpenVPN Specific Certificates for FlashRouter DD-WRT VPN Configuration

7. Scroll down towards the bottom of the page and click on Generate.

Generate AIRVPN OpenVPN Specific Certificates for FlashRouter DD-WRT VPN Configuration

Open the file that was downloaded with NotePad++ for Windows or TextEdit for Apple. You will be copying the Server IP/Name, client.crt and client.key from this file.

Please note, all VPN servers have different keys and certificates. If you wish to change servers in the future, you will have to go through steps 1-7 again.

DD-WRT Router Setup for AirVPN

Navigate to Services > VPN

Enter AirVPN settings

OpenVPN Client

Start OpenVPN Client

If you wish to disable your VPN connection simply set this to Disable at any time and click Apply Settings.

Server IP/Name

Copy and paste the server you selected in your account. Be sure there are no extra spaces or characters.

Port

443

Tunnel Device

TUN

Tunnel Protocol

UDP or TCP

Encryption cipher

AES-256-CBC

Hash Algorithm

SHA1

User Pass Authentication

Disable

Advanced Options

Enable

TLS Cipher

None

LZO Compression

NAT

Enable

Firewall Protection

Enable

nsCertType verification

Checked

Policy Based Routing

This field can be used for split VPN and Dual Gateway routing.

TLS Auth Key

—–BEGIN OpenVPN Static key V1—–
7bb7a23a0f5f28d01e792df68f1764ab
f2688719288808bf58e8a2d4f9354ecf
132625dfb895fc3f6330ae1e868e4dfa
c164c0931593d7f9a7da9595cf353433
8896e1d0a987a0d19838944af8fea4e5
215a3a0c76f4c67d5a4aee6a53be66a4
c88b84f850030840fb30f8550ed8068f
35c1ef34ee8f40a0ea5862dfb6f8d3c5
7ab5e27ac2799cf93e8765ff63cd8cd8
6b391b813925cd373bb202796f64d16f
003d042ca828d1b07f18ba1d0cb0323d
df3ee9287e9e084e655699efb3cffa92
3626946fa372e7beee245e7a95b4c1d8
7d16cae685218d4b8afc019b22e41083
476ee9883fe666d236301e55b2062551
4d91c8a69467a758293994df1e6fa7ae
—–END OpenVPN Static key V1—–

CA Cert

—–BEGIN CERTIFICATE—–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—–END CERTIFICATE—–

Public Client Cert

Copy and paste all contents between <cert> and </cert> make sure to also include the following lines when copying and pasting:
—–BEGIN CERTIFICATE—–
…
—–END CERTIFICATE—–

Private Client Key

Copy and paste all contents between <key> and </key> make sure to also include the following lines when copying and pasting:
—–BEGIN PRIVATE KEY—–
…
—–END PRIVATE KEY—–

CLICK APPLY SETTINGS

Leave all settings not mentioned above as their default setting.

Verify a successful AirVPN connection

Navigate to Status > OpenVPN

You should now see a CONNECTED SUCCESS message.
Visit whatismyipaddress.com to verify your new IP address and virtual location.

Back up your settings

Navigate to Administration > Backup

Click the Backup button.
A file named nvrambak.bin will be saved to your computer.
You can load nvrambak.bin to restore your settings in the event of a reset.

How to change the AirVPN server

Follow the instructions for obtaining the OpenVPN information from above.
Enter the new Server Address in the Server IP/Name field.
Enter the new client.key and private.key
Click Apply Settings.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

IPVanish TP-Link OpenVPN Setup

TeamFlashRouters · Apr 29, 2024 ·

Preparing for IPVanish TP-Link Setup

Download your IPVanish .ovpn file

If you are not already an IPVanish user Sign Up Now.

1. Log in to your account on the IPVanish website.

2. Successfully log in with your account information then go to IPVanish .ovpn file page.

3. Click on the .ovpn file for the server location you want to use to dowloand the .ovpn file. Do not open this file.

TP-Link Router Setup for IPVanish

1. Navigate to the Advanced tab.

2. Navigate to the VPN Client tab.

3. Check the Enable box next to VPN Client. Then click Save at the bottom of the page.

4. Click the Add button in the Server List area.

Set the VPN Type to OpenVPN.

In the Username and Password fields paste in the IPVanish email and password you use to successfully login to your IPVanish website account.

Click Browse and select the .ovpn file you downloaded earlier. Then click Save.

6. Click the Add button in the Device List area.

7. A list of devices connected to the FlashRouter’s network will appear. Check the devices that you want to connect to VPN. Then click OK.

8. Now that the devices have been assigned to the VPN connection click the Enable toggle in the Server List area.

Verify a successful IPVanish connection

You should now see a CONNECTED message.
Visit IPVanish’s IP Check to verify your new IP address and virtual location.

How to change the IPVanish server

Follow the steps at the top of the page to obtain a new .ovpn file.
Then proceed with the settings same as initial setup.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

ExpressVPN Setup for Privacy Hero

TeamFlashRouters · Aug 14, 2025 ·

Privacy Hero supports ExpressVPN using OpenVPN. To connect, you need your ExpressVPN Manual Configuration username and password and an OpenVPN (.ovpn) configuration file for your preferred server location.

Important: In Privacy Hero, choose Custom as the VPN provider. Upload the ExpressVPN .ovpn file and enter your separate Manual Configuration credentials, not your regular ExpressVPN website login.

Privacy Hero is cloud-managed, so you can complete setup from any computer, smartphone, or tablet with an internet connection. You do not need to be connected to Privacy Hero WiFi while changing the settings.

Get Your ExpressVPN Manual Configuration Credentials

ExpressVPN provides separate credentials for manual OpenVPN connections. These are different from your normal ExpressVPN website email and password.

Open ExpressVPN Set Up Devices and sign in to your ExpressVPN account.
In the left navigation, select Set Up Devices.
Under Applications, expand Advanced setup and choose Manual Configuration.
Find your unique Username and Password under Manual Configuration. Keep this tab open so you can copy them into Privacy Hero.

Important: Do not use your regular ExpressVPN account password, and do not share your manual configuration credentials publicly.

Download Your ExpressVPN OpenVPN Server File

Each available ExpressVPN location has its own OpenVPN configuration file. The file determines the server location used by Privacy Hero.

On the same Manual Configuration page, locate the server regions, such as Americas, Europe, Asia Pacific, or Middle East & Africa.
Expand your preferred region and download the UDP .ovpn file for an available location. Save it to the device you are using to configure Privacy Hero.

Only locations offered on your ExpressVPN Manual Configuration page can be used for this setup. To change locations later, download the corresponding .ovpn file and upload it to Privacy Hero.

Add ExpressVPN to Privacy Hero as a Custom VPN

ExpressVPN uses Privacy Hero’s Custom VPN configuration rather than a dedicated ExpressVPN provider option.

Upload the OpenVPN File and Enter Credentials

Open app.privacyhero.com and sign in to your Privacy Hero account.
Open the VPN section.
Click Change beside the VPN provider and choose Custom.
Choose OpenVPN if prompted, then upload the UDP .ovpn file downloaded from ExpressVPN.
Copy the separate ExpressVPN Manual Configuration Username and Password into the corresponding Privacy Hero fields.

Privacy Hero Custom OpenVPN configuration showing file upload and manual username and password fields

Check the UDP Configuration and Connect

If Privacy Hero displays the OpenVPN configuration in an editor, confirm that the downloaded UDP configuration specifies proto udp. If the directive is missing, add proto udp at the beginning of the configuration. Do not add a conflicting second protocol directive.
Click Save to apply the configuration and establish the VPN connection.
Confirm Privacy Hero displays Connected for the Custom OpenVPN connection.

Privacy Hero Custom OpenVPN configuration editor with proto udp directive

Verify Your ExpressVPN Connection

After Privacy Hero reports Connected, check that devices on the Privacy Hero network are actually using the VPN.

Connect the testing device to the Privacy Hero WiFi or LAN network.
Disconnect the ExpressVPN app or any other VPN application running directly on that device.
Open a fresh private/incognito browser window.
Visit ExpressVPN What Is My IP.
Confirm the public IP address and approximate location correspond to the ExpressVPN server selected in your .ovpn file.

Important: You can manage Privacy Hero’s VPN settings from another network or cellular data. However, to verify the router’s VPN IP, the testing device must be connected to the Privacy Hero network. Running another VPN app on the device can produce double-VPN results.

Streaming Relocation and VPN Location

If Streaming Relocation is enabled for a supported streaming service, that service may use its Streaming Relocation region instead of the location defined in the ExpressVPN configuration file. See Privacy Hero Streaming Relocation.

ExpressVPN Not Connecting?

If Privacy Hero shows Failed, stays on Connecting, or displays a timeout error, try these checks:

Confirm your ExpressVPN subscription is active and you entered the separate Manual Configuration username and password.
Check that you selected Custom in Privacy Hero, rather than another VPN provider.
Download a fresh UDP .ovpn file for an available ExpressVPN server location and upload it again.
Check that the OpenVPN configuration uses proto udp without conflicting protocol directives.
Temporarily disable the VPN Kill Switch while testing whether normal internet access works without the VPN, then restore your preferred Kill Switch setting.
Try another ExpressVPN server location or reconnect the VPN.

No Internet After the VPN Disconnects?

The Privacy Hero VPN Kill Switch may intentionally block normal internet traffic when the VPN connection is unavailable. See Privacy Hero VPN Kill Switch: No Internet or WiFi Troubleshooting.

VPN Connected, but One Device Shows the Wrong IP?

If other devices show the correct VPN IP, check the affected device’s VPN apps, iCloud Private Relay, Private DNS, antivirus filtering, browser proxy/DNS settings, or other security software. See Device Settings That Can Interfere With Your Router VPN.

Related Privacy Hero Guides

Surfshark TP-Link WireGuard Setup

TeamFlashRouters · Apr 29, 2024 ·

Preparing for Surfshark TP-Link Setup

Download your Surfshark .conf file

If you are not already a Surfshark user Sign Up Now.

1. Log in to your account on the Surfshark website.

2. Click VPN Manual Setup.

3. Select Router as the Setup method.

4. Select WireGuard as the Protocol.

5. Select I don’t have a key pair.

6. Enter FlashRouter as the name of the connection and click Next.

7. Click Generate a new key pair.

8. Click Choose a location.

TP-Link Router Setup for Surfshark

1. Navigate to the Advanced tab.

2. Navigate to the VPN Client tab.

3. Check the Enable box next to VPN Client. Then click Save at the bottom of the page.

4. Click the Add button in the Server List area.

5. In the Description field enter in the name you’d like to use for this WireGuard Client profile. We typically advise entering in the location. Our example server was New York so I have entered in Surfshark New York.

Set the VPN Type to WireGuard.

Click Browse and select the .conf file you downloaded earlier. Then click Save.

6. Click the Add button in the Device List area.

7. A list of devices connected to the FlashRouter’s network will appear. Check the devices that you want to connect to VPN. Then click OK.

8. Now that the devices have been assigned to the VPN connection click the Enable toggle in the Server List area.

Verify a successful Surfshark connection

You should now see a CONNECTED message.
Visit Surfshark’s IP Check to verify your new IP address and virtual location.

How to change the Surfshark server

Follow the steps at the top of the page to obtain a new .conf file.
Then proceed with the settings same as initial setup.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

Surfshark TP-Link OpenVPN Setup

TeamFlashRouters · Apr 29, 2024 ·

Preparing for Surfshark TP-Link Setup

Download your Surfshark .ovpn file

If you are not already a Surfshark user Sign Up Now.

1. Log in to your account on the Surfshark website.

2. Click VPN Manual Setup.

3. Select Router as the Setup method.

4. Select OpenVPN as the Protocol.

5. Copy and paste your Surfshark manual username and password to a secure location. This is the username and password you will enter into the router settings to connect to Surfshark.

6. Click Location and select the server location you want to connect to. Unless you need a specific location we recommend using Surfshark’s recommended Fastest server. Click Download to download the UDP .ovpn file for this Surfshark server location.

TP-Link Router Setup for Surfshark

1. Navigate to the Advanced tab.

2. Navigate to the VPN Client tab.

3. Check the Enable box next to VPN Client. Then click Save at the bottom of the page.

4. Click the Add button in the Server List area.

Set the VPN Type to OpenVPN.

In the Username and Password fields paste in the Surfshark username and password we obtained earlier.

Click Browse and select the .ovpn file you downloaded earlier. Then click Save.

6. Click the Add button in the Device List area.

7. A list of devices connected to the FlashRouter’s network will appear. Check the devices that you want to connect to VPN. Then click OK.

8. Now that the devices have been assigned to the VPN connection click the Enable toggle in the Server List area.

Verify a successful Surfshark connection

You should now see a CONNECTED message.
Visit Surfshark’s IP Check to verify your new IP address and virtual location.

How to change the Surfshark server

Follow the steps at the top of the page to obtain a new .ovpn file.
Then proceed with the settings same as initial setup.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

« Previous Page