FlashRouters Support Portal

Prioritizing Privacy

Search Results for: custom setup

What are some extra steps I can take to secure my network?

· ·

DD-WRT open source firmware removes many firmware vulnerabilities and backdoor access issues that may cause problems in stock firmware. DD-WRT is also updated more frequently than stock firmware, so be sure to always check with the FlashRouter support team to see which DD-WRT build we recommend for the highest level of security for your router at any time.

Aside from avoiding common issues and flaws with stock firmware, DD-WRT give you more control over the firmware settings and allows you to take some extra steps to really lock down your network security. In this article we highlight additional options for WiFi network security and also preventative measures for remote execution attacks.

Wireless MAC Filtering

Navigate to Wireless > MAC Filter

Access FlashRouters DD-WRT Admin Enable MAC Filtering
  1. Set Use Filter to Enable.
  2. Select either Prevent or Permit
    • Choose Prevent to add MAC addresses that you don’t want to join your network.
    • Choose Permit to add MAC addresses that you do want to join your network, automatically blocking all others.
  3. Select Edit MAC Filter List.
  4. Add the MAC Address of the wireless devices you want to prevent or permit. Be sure to use the xx:xx:xx:xx:xx:xx format. Hint: You can see a list of connected devices MAC Address by clicking Wireless Client MAC List.
  5. Click Save.
  6. Replicate the steps above for each wireless band.
  7. Click Apply Settings.

Disable Remote Access

Navigate to Services > Services

Access FlashRouters DD-WRT Admin Settings and Disable Remote Access
  1. Set SNMP to Disable – this setting disables Simple Network Management Protocol, which prevents software from polling your network for information about connected devices.
  2. Set SSHd to Disable – disabling the Secure Shell is a simple way to prevent root access and brute force attacks on your network.
  3. Set Telnet to Disable – Telnet is a less secure version of SSH to manage your local router network via command line.
  4. Click Apply Settings.

Navigate to Administration > Management

Access FlashRouters DD-WRT Admin Settings and Disable Remote Access 2
  1. Set Web GUI Management to Disable.
  2. Set SSH Management to Disable.
  3. Set Telnet Management to Disable.
  4. Set Allow Any Remote IP to Enable – Even though this setting is set to Enable there is no remote access because Web GUI Management is already set to Disable. 
  5. Click Apply Settings.

Router FAQs

· ·

Router FAQs

What is an IP Address?

An IP (Internet Protocol) Address is a numerical assignment for each device (cell phone, iPad, laptop computer, printer etc) inside a network that uses the Internet Protocol for communication. Internet Protocol is responsible for routing information packets across network boundaries. It is the main protocol establishing the Internet.

An IP address serves two predominant functions. First is to host or network interface identification. Second, it provides location addressing. To put it bluntly, an IP address tells wherever you are connecting, to whom you are visiting, and where you are located.

What is DNS?

DNS (Domain Name System) is a protocol within the TCP/IP protocol that uses a set of standards for how computers exchange data on the Internet and on many private networks.

The basic job of DNS is to convert a user-friendly domain name into an IP address that computers use to identify one another. Think of DNS like your cellphone contact list; you tap the name and the phone contacts to a phone number.

It is easier to remember flashrouters.com, rather than its IP address. Imagine if you had to remember all of the IP addresses of your favorite websites!

What is DNSMasq?

DNSMasq is a local DNS server that speeds up host-name searches from your computer/Internet connection after pressing enter.

Basically, DNSMasq gives the router some advanced enterprise functionality – caching DNS records locally so you have a faster browsing experience. Your computer only has to go to the router instead of repeatedly scouring the web for a commonly visited site.

What is Throughput and How Do I Improve it?

Throughput is the average rate of successful delivery of messages through a network. Simply put, throughput measures the speed of message delivery inside a network. If you think about it in relationship to networks and Internet connections, throughput defines the user experience. The key to a pleasing user experience is uninterrupted service and smooth data transfer.

In order to improve throughput,  you should get a router with more memory. If you notice that your network is running slowly due to congestion, you could probably benefit by upgrading your router to one with more memory. FlashMemory and RAM on a router add more room to prevent network congestion and improve throughput.

Most of FlashRouters‘ high-end units come with at least 8 MB of Flash memory and 64 MB of RAM which should be more than capable for providing for the average home users’ or small business will need in the future.

What is PPPoE?

PPPoE stands for Point-to-Point Protocol over Ethernet, a network protocol for encapsulating Point-to-Point Protocol (PPP) frames inside Ethernet frames. It is used mainly with DSL services where individual users connect to a DSL modem over Ethernet.

With PPPoE, users virtually “dial” from one machine to another over an Ethernet network, establish a point-to-point connection and then data packets are securely transported through the connection.

PPPoE offers an Internet service provider (ISP) an easier way to track exactly how much bandwidth you are using in case they want to charge for it in the future.

What is the Difference Between VPN Encryption and Wireless Network Security?

VPN Encryption: If you are connected to the VPN on your home network, then any data that flows over the Internet is entirely encrypted whether you are connected to the Internet either wired or wirelessly. This means that if your Local ISP was trying to see what you are browsing or downloading, they would not be able to see your data.

Wireless Network Security: If you leave your wireless network open or insecure, it does not matter whether Internet traffic is encrypted, because someone can directly see what you are doing on your network, or even worse, can go in and put a wireless password on your network, locking you out. They may also be able to access folders and files on your computer without your control.

Best thing to do is protect your wireless network with a WPA secured password along with your VPN connection.

Are FlashRouters Affected By the Shellshock Bug?

No.

According to our in-house testing and multiple DD-WRT community reports, we have found that the Shellshock vulnerability will not work on with DD-WRT or TomatoUSB installed router. The vulnerability is based on a shell called BASH (Bourne Again Shell) but DD-WRT & Tomato firmware use BusyBox which is confirmed to not have this issue.

Please be advised that if you are using Optware on your DD-WRT router there is a chance that implementation is BASH based. Only used trusted optware on your router.

Private Internet Access VPN Setup Guide for Privacy Hero

· ·

Your Privacy Hero router uses Cloud Based router management which means you can access the router settings from anywhere on any device that has an internet connection. You can follow these steps while connected to your phone, other Wi-Fi network, or the Privacy Hero network

Private Internet Access (PIA) Wireguard Setup for Privacy Hero (recommended)

1. From any device that has a browser such as a computer, smartphone, or tablet visit app.privacyhero.com.

App.PrivacyHero.com

2. Enter your Privacy Hero account email and password. Click Login.

Privacy Hero Access Settings

3. Click the VPN symbol.

Privacy Hero Setup VPN

4. Click the Change button and select Private Internet Access from the dropdown.

Privacy Hero Change VPN Providers

5. Enter your correct PIA account login username and password and click Save.

Privacy Hero select Private Internet Access
Privacy Hero Private Internet Access enter login

6. Click Save if you want to automatically connect to the ideal server location as recommended by Private Internet Access.

Or, connect to a specific server location click Advanced Options and then type in the PIA server name you would like to use. (All server names are noted below).

Then click Save.

Privacy Hero Private Internet Access enter VPN location

North America

bahamas.privacy.network
ca-ontario.privacy.network
ca-toronto.privacy.network
ca-vancouver.privacy.network
ca-montreal.privacy.network
greenland.privacy.network
gt-guatemala-pf.privacy.network
mexico.privacy.network
panama.privacy.network
sanjose.privacy.network
us-alabama-pf.privacy.network
us-alaska-pf.privacy.network
us-arkansas-pf.privacy.network
us-atlanta.privacy.network
us-california.privacy.network
us-chicago.privacy.network
us-connecticut-pf.privacy.network
us-denver.privacy.network
us-florida.privacy.network
us-houston.privacy.network
us-idaho-pf.privacy.network
us-indiana-pf.privacy.network
us-iowa-pf.privacy.network
us-kansas-pf.privacy.network
us-kentucky-pf.privacy.network
us-lasvegas.privacy.network
us-louisiana-pf.privacy.network
us-maine-pf.privacy.network
us-massachusetts-pf.privacy.network
us-michigan-pf.privacy.network
us-minnesota-pf.privacy.network
us-mississippi-pf.privacy.network
us-missouri-pf.privacy.network
us-montana-pf.privacy.network
us-nebraska-pf.privacy.network
us-new-hampshire-pf.privacy.network
us-new-mexico-pf.privacy.network
us-newyorkcity.privacy.network
us-north-carolina-pf.privacy.network
us-north-dakota-pf.privacy.network
us-ohio-pf.privacy.network
us-oklahoma-pf.privacy.network
us-oregon-pf.privacy.network
us-pennsylvania-pf.privacy.network
us-rhode-island-pf.privacy.network
us-seattle.privacy.network
us-siliconvalley.privacy.network
us-south-carolina-pf.privacy.network
us-south-dakota-pf.privacy.network
us-texas.privacy.network
us-tennessee-pf.privacy.network
us-vermont-pf.privacy.network
us-virginia-pf.privacy.network
us-washingtondc.privacy.network
us-west-virginia-pf.privacy.network
us-wisconsin-pf.privacy.network
us-wyoming-pf.privacy.network
us3.privacy.network
us-baltimore.privacy.network
us-honolulu.privacy.network
us-newjersey.privacy.network
us-saltlakecity.privacy.network
us-streaming-2.privacy.network
us-streaming.privacy.network
us-wilmington.privacy.network

South America

ar.privacy.network
bo-bolivia-pf.privacy.network
bogota.privacy.network
br.privacy.network
ec-ecuador-pf.privacy.network
pe-peru-pf.privacy.network
santiago.privacy.network
uy-uruguay-pf.privacy.network
venezuela.privacy.network

Europe

al.privacy.network
ad.privacy.network
austria.privacy.network
brussels.privacy.network
ba.privacy.network
sofia.privacy.network
zagreb.privacy.network
czech.privacy.network
de-berlin.privacy.network
de-frankfurt.privacy.network
denmark.privacy.network
denmark-2.privacy.network
spain.privacy.network
es-valencia.privacy.network
ee.privacy.network
fi.privacy.network
fi-2.privacy.network
france.privacy.network
gr.privacy.network
hungary.privacy.network
italy.privacy.network
italy-2.privacy.network
is.privacy.network
ireland.privacy.network
man.privacy.network
lv.privacy.network
liechtenstein.privacy.network
lt.privacy.network
lu.privacy.network
malta.privacy.network
md.privacy.network
monaco.privacy.network
montenegro.privacy.network
nl-amsterdam.privacy.network
mk.privacy.network
no.privacy.network
poland.privacy.network
pt.privacy.network
ro.privacy.network
sweden.privacy.network
sweden-2.privacy.network
rs.privacy.network
sk.privacy.network
slovenia.privacy.network
swiss.privacy.network
tr.privacy.network
uk-london.privacy.network
uk-manchester.privacy.network
uk-southampton.privacy.network
uk-2.privacy.network
ua.privacy.network

Asia

ae.privacy.network
bangladesh.privacy.network
cambodia.privacy.network
china.privacy.network
cyprus.privacy.network
georgia.privacy.network
hk.privacy.network
in.privacy.network
israel.privacy.network
jakarta.privacy.network
japan.privacy.network
japan-2.privacy.network
kazakhstan.privacy.network
kr-south-korea-pf.privacy.network
kualalumpur.privacy.network
macau.privacy.network
mongolia.privacy.network
np-nepal-pf.privacy.network
philippines.privacy.network
qatar.privacy.network
saudiarabia.privacy.network
sg.privacy.network
srilanka.privacy.network
taiwan.privacy.network
vietnam.privacy.network
yerevan.privacy.network

Oceania

au-adelaide-pf.privacy.network
au-australia-so.privacy.network
au-brisbane-pf.privacy.network
aus-melbourne.privacy.network
aus-perth.privacy.network
au-sydney.privacy.network
nz.privacy.network

Africa

dz.privacy.network
egypt.privacy.network
morocco.privacy.network
nigeria.privacy.network
za.privacy.network

8. Your Privacy Hero settings should now show a Connected message, indicating you have successfully signed in to your PIA VPN server!

Private Internet Access (PIA) OpenVPN Setup for Privacy Hero

1. From any device that has a browser such as a computer, smartphone, or tablet visit app.privacyhero.com.

App.PrivacyHero.com

2. Enter your Privacy Hero account email and password. Click Login.

Privacy Hero Access Settings

3. Click the VPN symbol.

Privacy Hero Setup VPN

4. Click the Change button and select Custom from the dropdown and choose the OpenVPN option.

5. Enter your PIA Account login as the Username and Password.

6. Now log in to your PIA Account page.

7. Go to the Downloads section.

8. Scroll down to the bottom of the page, and go to OpenVPN Configuration Generator.

9. Choose OpenVPN 2.4 or newer and Linux.

10. From the Select Port section, choose UDP/1198 AES-128-CBC for a faster connection or choose UDP/1197 AES-256-CBC for stronger security as shown in the image below then Click Generate to download the server configuration file.

11. Drag and drop or click to Upload the server file into the Custom box on your Privacy Hero settings page then click Save.

12. Your Privacy Hero settings should now show a Connected message, indicating you have successfully signed in to your PIA VPN server!

Privacy Hero’s cloud based router settings access makes it so you can change settings while not connected to the Privacy Hero network. Visit the Private Internet Access IP Check to verify your VPN IP address. If it has not changed be sure to double check that you are indeed connected to the Privacy Hero network.

Keep in mind that the VPN connection will not change the location of the streaming services listed in the Streaming Relocation area of the Privacy Hero settings.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

Hotspot Shield Manual OpenVPN Setup

· ·

Preparing for Manual Hotspot Shield Setup

Obtain your Hotspot Shield OpenVPN Information

If you are not already a Hotspot Shield user Sign Up Now.

1. Log in to your account on the Hotspot Shield website.

2. Click Hotspot Shield on the left side navigation.

Hotspot Shield - Website Admin

3. Under Choose your device click Router.

Hotspot Shield - Select Router

4. In the Set up your router section Select your desired virtual location and then click Download file.

Open the file that was downloaded with NotePad++ for Windows or TextEdit for Apple. You only need the <cert> and <key> from the .ovpn file. All Hotspot Shield servers have different keys and certificates.

Hotspot Shield - Download Configuration File

5. Copy the VPN Username, and Password that appear under Step 2 to a notepad, you will need this information later in the setup process.

Hotspot Shield - OpenVPN username and password

DD-WRT Router Setup for Hotspot Shield

Navigate to Services > VPN

Enter Hotspot Shield settings

OpenVPN Client

Start OpenVPN Client

If you wish to disable your VPN connection simply set this to Disable at any time and click Apply Settings.

Server IP/Name

At the top of the .ovpn file you downloaded above, there is a line e.g.:
remote universitycalendar.us 8041
universitycalendar.us is your Hotspot Shield server name. Enter the server name in this field.

Port

8041

Tunnel Device

TUN

Tunnel Protocol

UDP

Encryption cipher

AES-128-CBC

Hash Algorithm

SHA256

User Pass Authentication

Enable

Username

Enter the Username you obtained in your Hotspot Shield account.

Password

Enter the Password you obtained in your Hotspot Shield account.

Advanced Options

Enable

TLS Cipher

None

LZO Compression

No

NAT

Enable

Firewall Protection

Enable

Additional Config

resolv-retry infinite
remote-random
nobind
tun-mtu 1500
tun-mtu-extra 32
mssfix 1450
persist-key
persist-tun
ping 15
ping-restart 0
reneg-sec 0
remote-cert-tls server

Policy Based Routing

This field can be used for split VPN and Dual Gateway routing.

CA Cert

—–BEGIN CERTIFICATE—–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=
—–END CERTIFICATE—–
—–BEGIN CERTIFICATE—–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—–END CERTIFICATE—–

Public Client Cert

In the .ovpn file Copy and Paste all contents in between the <cert> and </cert> lines from your .ovpn file starting and ending with:
—–BEGIN CERTIFICATE—–
…
—–END CERTIFICATE—–

Private Client Key

In the .ovpn file Copy and Paste all contents in between the <key> and </key> lines from your .ovpn file starting and ending with:
—–BEGIN PRIVATE KEY—–
…
—–END PRIVATE KEY—–

CLICK APPLY SETTINGS

Leave all settings not mentioned above as their default setting.

Verify a successful Hotspot Shield connection

Navigate to Status > OpenVPN

  1. You should now see a CONNECTED SUCCESS message.
  2. Visit Hotspot Shield’s website to verify your new IP address and virtual location.

In some cases you may notice that the location is not showing the same location as the server you have input in your router settings; this is because geo tracking tools are often tricked by VPN connections. As long as you see an IP address that is not the same as your normal Internet IP address then you are indeed connected to Hotspot Shield.

Back up your settings

Navigate to Administration > Backup

  1. Click the Backup button.
  2. A file named nvrambak.bin will be saved to your computer.
  3. You can load nvrambak.bin to restore your settings in the event of a reset.

How to change the Hotspot Shield server

  1. Follow the instructions for obtaining the OpenVPN information from above.
  2. Enter the new Server Address in the Server IP/Name field.
  3. Enter the new Username and Password.
  4. Enter the new Public Client Cert and Private Client Key.
  5. Click Apply Settings.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

Access FlashRouter DD-WRT firmware settings

· ·

You must be connected to the FlashRouter network via ethernet or WiFi connection on your device in order to be able to access the FlashRouter’s firmware settings.

Why do I need to access my FlashRouter's settings?

It is important to understand how to access your router if you want to:
  • Change WiFi or admin passwords
  • Switch VPN server locations
  • Attempt custom setups
  • Troubleshoot your network

Connect your device to the FlashRouter network

We recommend using a computer, tablet, or phone to access your FlashRouter firmware settings. You can connect your device to the FlashRouter via Ethernet Cable or Wireless connection.

Please note, you will NOT be able access the firmware settings unless you connect your device to the FlashRouter Network.

via Ethernet

Connect an Ethernet cable to your device’s Ethernet port.

Access FlashRouters DD-WRT Admin Settings via Ethernet Connection 1

Connect the other end of that Ethernet cable to a FlashRouter LAN/numbered port.

Access FlashRouters DD-WRT Admin Settings via Ethernet Connection 2

Be sure NOT to connect your device to the WAN/internet port of the FlashRouter. Please use the LAN/numbered ports to connect your devices.

via Wireless

Navigate to the available wireless networks in your device network settings and join any of the available FlashRouter networks – FlashRouter24, FlashRouter50, or FlashRouter80 (if you have a tri-band router).

Access the FlashRouter settings

We recommend using a Google Chrome or Mozilla Firefox incognito/private browsing window to access the FlashRouter firmware settings. You can access the main DD-WRT firmware GUI or you can go directly into the FlashRouters Privacy App settings to manage your basic router settings and VPN connection settings right away.

Please note, after accessing the FlashRouter Settings at the Local IP Address, you will be prompted to enter an admin username and password. You can find this information in the subsections below.

DD-WRT - Firmware GUI

Local IP Address: 192.168.11.1

Username: flashrouter

Password: ddwrt

Keep in mind that if you enable HTTPS and disable HTTP access you will need to add https:// in front of the Local IP Address to access your FlashRouter’s firmware settings.

If your router has been reset for any reason then you can access the router at a local IP address of 192.168.1.1.

Please note you will be required to set the administration username and password as well as your WiFi and VPN network settings after a reset.

TROUBLESHOOTING

Still having issues? Visit our Troubleshooting section to diagnose common problems here.

Troubleshoot Here

Mullvad WireGuard Setup

· ·

Preparing for Mullvad WireGuard Setup

Verify your Mullvad login information

If you are not already a Mullvad user Sign Up Now.

Log in to your account on the Mullvad website.

Mullvad Login

Select Manage ports and WireGuard Keys displayed on the account page.

Mullvad Manage ports and WireGuard Keys

DD-WRT Router Setup for Mullvad WireGuard

Navigate to Setup > Tunnels 

Enter Mullvad WireGuard settings

1. Click Add Tunnel.

2. Set Tunnel to Enable.

Setup - Tunnel - Enable Tunnel

3. Select Wireguard from the dropdown.

Setup - Tunnel - Select Wireguard

4. Click Add Peer.

Setup - Tunnel - Add Peer

5. Set Endpoint to Enable.

Setup - Tunnel - Enable Endpoint

6. Set Router Allowed IP’s via tunnel and Use Pre-shared Key to Disable.

Setup - Tunnel - Disable Preshare Key and Allow IP

7. Click Generate Key.

Setup - Tunnel - Generate Key

8. Set Advanced Settings to Enable.

Setup - Tunnel - Enable Advanced Settings

9. Copy the Local Private Key.

Setup - Tunnel - Copy Local Private Key

10. In a new tab (leave the DD-WRT settings opened), go to your Mullvad Account and click Manage Ports and WireGuard Keys.

Mullvad Account - Manage ports and Wireguard Keys

11. Click WireGuard configuration file.

Mullvad - Wireguard configuration file

12. Select Linux as your Platform.

Mullvad - Select Linux

13. Click Manage Keys.

Mullvad - Manage Keys

14. Paste the copied Local Private key to the Manage WireGuard Keys field and click Import Keys.

Mullvad - Import Key

15. Select your Country, City, and Server number that you want to connect to.

Mullvad - Select Location

16. Click Advanced Settings.

Mullvad - Advanced Settings

17. Set the Tunnel Traffic to Only IPv4.

Mullvad - Only IPv4

18. Click Download File.

Mullvad - Download Config

19. Open the config file that was downloaded to your computer with NotePad or Notepad++ for Windows or TextEdit for Mac.

20. In the downloaded config file under [Interface] enter the Address into the IP Addresses/Netmask(CIDR) field in the DD-WRT settings.

Config File - Copy IP Address
Setup - Tunnel - IP Address Netmask Note

Certain DD-WRT builds will show two separate fields here: IP Address and Subnet Mask. If that is the case set the IP Address field to the Address without the /32 added and set the Subnet Mask to 255.255.255.255

21. In the config file under [Peer] copy the PublicKey and paste it into the Peer Public Key field in the DD-WRT Settings.

Config File - Copy PublicKey
Setup - Tunnel - Paste Public Key

22. In the config file under [Peer] copy the Endpoint and paste it into the Endpoint Address field.

Config File - Endpoint
Setup - Tunnel - Endpoint Address

23. At the bottom of the page click Save and then click Apply Settings.

Enter Mullvad WireGuard Commands

Navigate to Administration > Commands

1. Copy and paste the text below and click Save Startup.

sleep 30
echo "Update route table on startup..."
WGSERVER=$(/usr/sbin/nvram get oet1_rem0)
WANGW=$(/usr/sbin/nvram get wan_gateway)
WANIF=$(/usr/sbin/nvram get wan_iface)
route add -host $WGSERVER gw $WANGW dev $WANIF
route del default
route add default dev oet1
ip route flush cache
mkdir -p /tmp/etc/config
ln -s /tmp/custom.sh /tmp/etc/config/wg-route-fix.wanup
echo "... Done route table update."

2. Copy and paste the text below and click Save Custom.

#!/bin/sh
sleep 5
echo "Update route table on wanup ..."
WGSERVER=$(/usr/sbin/nvram get oet1_rem0)
WANGW=$(/usr/sbin/nvram get wan_gateway)
WANIF=$(/usr/sbin/nvram get wan_iface)
route add -host $WGSERVER gw $WANGW dev $WANIF
route del default
route add default dev oet1
ip route flush cache
echo "... Done route table update."

3. Copy and paste the text below and click Save Firewall.

WANIF=$(/usr/sbin/nvram get wan_iface)
iptables -t nat -I POSTROUTING -o oet1 -j MASQUERADE
iptables -I FORWARD -i br0 -o $WANIF -m state –state NEW -j REJECT –reject-with icmp-host-prohibited
iptables -I FORWARD -i br0 -p tcp -o $WANIF -m state –state NEW -j REJECT –reject-with tcp-reset

Set Mullvad DNS servers

Navigate to Setup > Basic Setup

Set Static DNS 1 to 10.64.0.1

Set Static DNS 2 to 193.138.218.74

Setup - Basic Setup - Mullvad DNS

Click Apply Settings.

Reboot the FlashRouter

Navigate to Administration > Management

Scroll to the bottom of the page and click the red Reboot Router button. Wait for the FlashRouter to reboot and then reconnect.

Verify a successful Mullvad connection

Navigate to Setup > Tunnels

  1. You should see Endpoint, Latest handshake, and Transfer in the WireGuard status area.
  2. Visit Mullvad’s IP Check to verify your status as using Mullvad.

Back up your settings

Navigate to Administration > Backup

  1. Click the Backup button.
  2. A file named nvrambak.bin will be saved to your computer.
  3. You can load nvrambak.bin to restore your settings in the event of a reset.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

Change WiFi name and password on Asus

· ·

Set a custom WiFi network name and password for your devices to join the Asus FlashRouter’s network.

View our guide for more instructions on how to access AsusWRT firmware settings.

1. Under General select Network Map.

Merlin Wifi change name and pass

2. In the Network name (SSID) field enter the name you want your Asus WiFi to appear as. This can be the same or different for both 2.4GHz and 5GHz bands. We typically advise setting different names for each so you can connect your streaming devices to the 5GHz band as that is the faster WiFi band.

3. In the WPA-PSK key field enter the password you want to join your devices to the Asus WiFi network. If your WiFi names are the same for 2.4GHz and 5GHz make sure they have the exact same wireless password set.

4. Click Apply and then rejoin the new wireless network.

ExpressVPN Router App Support

· ·

ExpressVPN Router App Setup Guides

Asus RT-AC68U, RT-AC87U, RT-AC56R, RT-AC56S, RT-AC56U

How to set up the ExpressVPN router app for Asus RT-AC68U, RT-AC87U, RT-AC56R, RT-AC56S, and RT-AC56U

ExpressVPN router app with MediaStreamer

How to use MediaStreamer on the ExpressVPN router app

Linksys EA6200

How to configure the ExpressVPN router app for Linksys EA6200

Linksys WRT1200AC

How to configure the ExpressVPN router app for Linksys WRT1200AC

Linksys WRT1900AC(S or V2)

How to configure the ExpressVPN router app for Linksys WRT1900AC(S)

Linksys WRT3200ACM

How to configure the ExpressVPN router app for Linksys WRT3200ACM

Netgear R6300v2, Netgear R6700v3, Netgear Nighthawk R7000, and Netgear Nighthawk R7000P

How to set up the ExpressVPN router app for Netgear R6300v2, Netgear R6700v3, Netgear Nighthawk R7000, and Netgear Nighthawk R7000P

Set up ExpressVPN app on existing Linksys router

Set up the ExpressVPN app for router on your existing Linksys router

ExpressVPN Router App Troubleshooting

Bridge devices to your network via an ExpressVPN router

How to bridge devices to your wireless network via an ExpressVPN router

ExpressVPN router app FAQs

ExpressVPN router app FAQs

ExpressVPN router app setting changes

Additional ExpressVPN router app setting changes

Finding the default passwords for the ExpressVPN router app

Finding the default passwords for the ExpressVPN Router App

Identify which Linksys router you have

How to identify which Linksys router you have

NOT connected to the ExpressVPN router correctly

Seeing the “NOT connected to the ExpressVPN router correctly” page

Reflash Linksys router back to factory image

How to reflash your Linksys router back to factory image

Reset your ExpressVPN router to the original firmware

How to reset your ExpressVPN routers to the original firmware

Set up remote access for your router

How to use port forwarding to remotely access your router

Share a USB drive over your router’s network

How to share a USB drive over your router’s network

Upgrade the ExpressVPN router firmware

How to upgrade the ExpressVPN router firmware

Untangle Support

· ·

Support for Untangle Router NG Firewall features is provided by the Untangle Support team and not the FlashRouter support team.

We recommend reviewing these excellent resources that Untangle has created to get you setup as desired.

To contact Untangle directly you can email them at support@untangle.com and their team would be happy to assist you with getting setup to use their NG Firewall settings such as Web Monitor, Captive Portal, Intrusion Prevention, and many other features supported by the Untangle firmware running on your FlashRouter.

Roqos Core Internet Setup and Activation

· ·

Follow this article when you receive your new Roqos Core router to create your Roqos account, connect your Roqos to the Internet, and customize your network so it is ready to use.

Create your Roqos account

1. From any device that has a browser such as a computer, smartphone, or tablet visit login.roqos.com

Roqos Login URL

2. Select Create Account.

Roqos Create Account

3. Enter the Email address and password you want to set for your Roqos account. This will be your login to the Roqos settings moving forward. Click Next.

Roqos Enter Email

4. Enter the name and phone number you want associated with your Roqos. Click Next.

Roqos Enter Name and Number

5. Enter the address where your Roqos is located. This section may require a CAPTCHA to be completed to authenticate you are human. Click Create Account.

Roqos Enter Address

6. You have now created your Roqos account. In a new tab proceed to open the email from Roqos and click the Activate account button.

Roqos email activation

Activate your Roqos Internet

1. From the Account created page click Next to begin the Internet Setup of the Roqos.

Roqos Account Created

2. Select the Roqos model Teal RC10-P. Click Next.

Roqos Model

3. Connect the ethernet cable that came with your Roqos from the port labeled INTERNET on the back of your Roqos to an open ethernet port on your ISP Modem or other router in your network.

Roqos Wiring

4. Then connect the power adapter that came with the Roqos to the back of the Roqos. Wait for the light on the Roqos to begin blinking blue. Once your see the blinking blue lights on the Roqos click Next.

Roqos Power On

If your Roqos lights does not begin blinking blue after a long while please see the steps in this article and contact us.

5. Enter in the Roqos serial number found on the bottom of the device exactly as it appears there. Click Next.

Roqos Activation Code

Setup your Roqos Network

1. Enter in a name that you would like to call the Roqos. This is just the Roqo’s device name and it is not the WiFi network name. Click Next.

Roqos Device Name

2. Select the Time Zone of your actual location from the dropdown. Click Next.

Roqos Time Zone

3. Set the WiFi name and password for the Roqos. The WiFi name should be unique and not a duplicate of an existing wireless network. This will be the name that appears in your wireless devices available network list and the password to join the devices to the network. Click Next.

Roqos Set WiFi Name and Password

4. Select the custom alert settings as you best see fit using the toggle switches. We typically recommend having the first two toggles selected for Email Alerts and Consolidate Security Alerts. Click Next.

Begin connecting your devices to the Roqos network

You are now done setting up your Roqos to connect to the Internet and can begin joining your wireless devices to the Roqos network and exploring the Roqos Core Features.

Roqos Setup Done

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

DNS Setup for Asus Merlin

· ·

Enter custom DNS servers in your Asus Merlin firmware to avoid using your ISP DNS, which will steal and collect your browsing data.

Login to Asus Merlin firmware settings in a browser on any computer or smart device.

1. Under Advanced Settings select LAN.

2. Click the DHCP Server tab.

3. In the DNS Server 1 and DNS Server 2 fields enter the DNS server that you wish to use.

Merlin DNS Setup

4. Click Apply and then reboot the router and reconnect to the network.

Change WiFi name and password on Merlin

· ·

Set a custom WiFi network name and password for your devices to join the Merlin FlashRouter’s network.

Login to Asus Merlin firmware settings in a browser on any computer or smart device.

1. Under General select Network Map.

Merlin Wifi change name and pass

2. In the Network name (SSID) field enter the name you want your Asus WiFi to appear as. This can be the same or different for both 2.4GHz and 5GHz bands. We typically advise setting different names for each so you can connect your streaming devices to the 5GHz band as that is the faster WiFi band.

3. In the WPA-PSK key field enter the password you want to join your devices to the Merlin WiFi network. If your WiFi names are the same for 2.4GHz and 5GHz make sure they have the exact same wireless password set.

4. Click Apply and then rejoin the new wireless network.

Why is my DNS showing as 192.168.11.1 on my devices?

· ·

When connected to a FlashRouter’s network the DNS settings of the devices will be reporting as 192.168.11.1. This means that the router is handling DNS internally through the servers you have set in the Setup > Basic Setup section of the router. If you did not set any custom DNS here, then you will using your ISP or VPN DNS servers automatically.

You can always customize the DNS servers in the router to your preferred servers and through DNSmasq the router will use 192.168.11.1 to route these servers to your connected devices.

In some instances disabling DNSMasq in the DD-WRT settings can help unblock previously blocked websites while connected to VPN. This will force devices to report the DNS servers set in the router directly as opposed to 192.168.11.1.

Disabling DNSMasq is not recommended unless FlashRouters specifically advises you but we have seen this work for certain VPN providers. To disable the DNSMasq do the following.

Navigate to Setup > Basic Setup

Disable DNSMaq Settings
  1. Uncheck Use DNSMasq for DHCP.
  2. Uncheck Use DNSMasq for DNS.
  3. Uncheck DHCP-Authoritative.
  4. Click Save.

Navigate to Services > Services

Disable DNSMaq Settings 2
  1. Set DNSMasq to Disable.
  2. Click Apply Settings.
  3. Reboot router.

Netgear R6700V3 Nighthawk DD-WRT WiFi Settings

· ·

Recommended DD-WRT WiFi settings for the Netgear R6700V3 are based on extensive testing by FlashRouters. Please note that optimal settings may vary depending on external factors such as home size, interference, and the types of WiFi devices you are connecting in your network.

Screenshots below provide a visual display of recommended WiFi and encryption settings exactly as they appear in the Netgear R6700V3 with DD-WRT firmware.

Navigate to the Wireless > Basic Settings to view or edit WiFi network settings.

2.4 GHz - Wireless-N

View R6700V3 DD-WRT FlashRouter 2.4GHz Settings

5.0 GHz - Wireless-AC

View R6700V3 DD-WRT FlashRouter 5GHz Settings

Additional DD-WRT WiFi Information

Intimidated by all the available WiFi settings? The DD-WRT website provides extensive information about all of the available configuration options in the firmware. Learn about everything from Wireless channels to channel widths and more in the Basic Wireless Settings – DD-WRT Wiki.

R6700V3 DD-WRT Wireless Security

The preset R6700V3 FlashRouter WiFi password is Wireless#[First 5 characters of your router MAC]. The router MAC can be found on the bottom of your router. For e.g. if your MAC is 1459C07E70A8 then your WiFi password is Wireless#1459C

Navigate to the Wireless > Wireless Security to view or edit WiFi passwords.

View R6700V3 DD-WRT FlashRouter WiFi Security Settings

TROUBLESHOOTING

Trouble with your Netgear R6700V3 WiFi? Visit the Wireless troubleshooting section.

Troubleshoot Here

Setting up a Guest WiFi Network on Roqos

· ·

Create a Guest WiFi network on your Roqos to segment certain devices from the main network and set custom content filters as you see fit. Note that this is only for 2.4GHz wireless.

Login to Roqos Core UI web app in a browser on any computer or smart device.

1. Click the navigation menu and select Basic Settings > WiFi Settings.

Roqos Basic Settings - WiFi Settings

2. Click Guest WiFi.

Roqos WiFi Settings - Guest Wifi

3. Toggle the Enable slider and set the Network Name and Guest WiFi Password. Click Save.

Roqos WiFi Settings - Guest Wifi name and password

4. Optional: If you wish to set specific Content Filters for the Guest Network and set the Filters that you see fit.

Number test

· ·

  1. Visit ExpressVPN’s website login page
    ExpressVPN on FlashRouters Privacy App Setup - Sign Into ExpressVPN Dashboard
  2. Successfully log in with your account information. Select Setup on More Devices.
    ExpressVPN on FlashRouters Privacy App Setup - Setup On More Devices
  3. Select Manual Config and copy the Username and Password that are displayed on the right hand side of the screen.
    ExpressVPN on FlashRouters Privacy App Setup - OpenVPN Specific Username and Password

ExpressVPN Manual OpenVPN Setup

· ·

Preparing for Manual ExpressVPN Setup

Obtain your ExpressVPN OpenVPN Information

If you are not already an ExpressVPN user Sign Up Now.

1. Log in to your account on the ExpressVPN website.

ExpressVPN login page

2. Successfully log in with your account information. Select More.

3. Select Manual Configuration and copy the Username and Password that are displayed on the right hand side of the screen.

ExpressVPN Manual Configuration
ExpressVPN username and password

ExpressVPN Server Addresses

Americas

usa-atlanta-ca-version-2.expressnetw.com
usa-boston-ca-version-2.expressnetw.com
usa-chicago-ca-version-2.expressnetw.com
usa-dallas-ca-version-2.expressnetw.com
usa-dallas-2-ca-version-2.expressnetw.com
usa-denver-ca-version-2.expressnetw.com
usa-kansascity-ca-version-2.expressnetw.com
usa-losangeles-ca-version-2.expressnetw.com
usa-losangeles-1-ca-version-2.expressnetw.com
usa-losangeles-2-ca-version-2.expressnetw.com
usa-losangeles-3-ca-version-2.expressnetw.com
usa-los-angeles-4-ca-version-2.expressnetw.com
usa-miami-ca-version-2.expressnetw.com
usa-miami-2-ca-version-2.expressnetw.com
usa-minneapolis-ca-version-2.expressnetw.com
usa-newjersey-1-ca-version-2.expressnetw.com
usa-newjersey-3-ca-version-2.expressnetw.com
usa-newyork-ca-version-2.expressnetw.com
us-new-york-2-ca-version-2.expressnetw.com
usa-phoenix-ca-version-2.expressnetw.com
usa-saltlakecity-ca-version-2.expressnetw.com
usa-sanfrancisco-ca-version-2.expressnetw.com
usa-sanjose-ca-version-2.expressnetw.com
usa-seattle-ca-version-2.expressnetw.com
usa-tampa-1-ca-version-2.expressnetw.com
usa-virginia-ca-version-2.expressnetw.com
usa-washingtondc-ca-version-2.expressnetw.com
usa-washingtondc-2-ca-version-2.expressnetw.com
canada-montreal-ca-version-2.expressnetw.com
canada-toronto-ca-version-2.expressnetw.com
canada-toronto-2-ca-version-2.expressnetw.com
canada-vancouver-ca-version-2.expressnetw.com
mexico-ca-version-2.expressnetw.com
argentina-ca-version-2.expressnetw.com
brazil-ca-version-2.expressnetw.com
brazil-2-ca-version-2.expressnetw.com
chile-ca-version-2.expressnetw.com
colombia-ca-version-2.expressnetw.com
costarica-ca-version-2.expressnetw.com
ecuador-ca-version-2.expressnetw.com
guatemala-ca-version-2.expressnetw.com
panama-ca-version-2.expressnetw.com
peru-ca-version-2.expressnetw.com
uruguay-ca-version-2.expressnetw.com
venezuela-ca-version-2.expressnetw.com

Europe

uk-berkshire-ca-version-2.expressnetw.com
uk-berkshire-2-ca-version-2.expressnetw.com
uk-docklands-ca-version-2.expressnetw.com
uk-east-london-ca-version-2.expressnetw.com
uk-kent-ca-version-2.expressnetw.com
uk-london-ca-version-2.expressnetw.com
france-paris-1-ca-version-2.expressnetw.com
france-paris-2-ca-version-2.expressnetw.com
france-strasbourg-ca-version-2.expressnetw.com
germany-darmstadt-ca-version-2.expressnetw.com
germany-frankfurt-1-ca-version-2.expressnetw.com
germany-frankfurt-2-ca-version-2.expressnetw.com
germany-nuremberg-ca-version-2.expressnetw.com
italy-cosenza-ca-version-2.expressnetw.com
italy-milan-ca-version-2.expressnetw.com
netherlands-amsterdam-ca-version-2.expressnetw.com
netherlands-rotterdam-ca-version-2.expressnetw.com
netherlands-thehague-ca-version-2.expressnetw.com
spain-barcelona-ca-version-2.expressnetw.com
spain-ca-version-2.expressnetw.com
sweden-ca-version-2.expressnetw.com
sweden-2-ca-version-2.expressnetw.com
switzerland-ca-version-2.expressnetw.com
switzerland-2-ca-version-2.expressnetw.com
albania-ca-version-2.expressnetw.com
andorra-ca-version-2.expressnetw.com
armenia-ca-version-2.expressnetw.com
austria-ca-version-2.expressnetw.com
azerbaijan-ca-version-2.expressnetw.com
belarus-ca-version-2.expressnetw.com
belgium-ca-version-2.expressnetw.com
bosniaandherzegovina-ca-version-2.expressnetw.com
bulgaria-ca-version-2.expressnetw.com
croatia-ca-version-2.expressnetw.com
cyprus-ca-version-2.expressnetw.com
czechrepublic-ca-version-2.expressnetw.com
denmark-ca-version-2.expressnetw.com
estonia-ca-version-2.expressnetw.com
finland-ca-version-2.expressnetw.com
georgia-ca-version-2.expressnetw.com
greece-ca-version-2.expressnetw.com
hungary-ca-version-2.expressnetw.com
iceland-ca-version-2.expressnetw.com
ireland-ca-version-2.expressnetw.com
isleofman-ca-version-2.expressnetw.com
jersey-ca-version-2.expressnetw.com
latvia-ca-version-2.expressnetw.com
liechtenstein-ca-version-2.expressnetw.com
lithuania-ca-version-2.expressnetw.com
luxembourg-ca-version-2.expressnetw.com
macedonia-ca-version-2.expressnetw.com
malta-ca-version-2.expressnetw.com
moldova-ca-version-2.expressnetw.com
monaco-ca-version-2.expressnetw.com
montenegro-ca-version-2.expressnetw.com
norway-ca-version-2.expressnetw.com
poland-ca-version-2.expressnetw.com
portugal-ca-version-2.expressnetw.com
romania-ca-version-2.expressnetw.com
serbia-ca-version-2.expressnetw.com
slovakia-ca-version-2.expressnetw.com
slovenia-ca-version-2.expressnetw.com
ukraine-ca-version-2.expressnetw.com

Asia Pacific

australia-brisbane-ca-version-2.expressnetw.com
australia-melbourne-ca-version-2.expressnetw.com
australia-perth-ca-version-2.expressnetw.com
australia-sydney-ca-version-2.expressnetw.com
australia-sydney-2-ca-version-2.expressnetw.com
australia-sydney-3-ca-version-2.expressnetw.com
hongkong-2-ca-version-2.expressnetw.com
hongkong4-ca-version-2.expressnetw.com
hongkong-1-ca-version-2.expressnetw.com
japan-tokyo-1-ca-version-2.expressnetw.com
japan-tokyo-2-ca-version-2.expressnetw.com
india-chennai-ca-version-2.expressnetw.com
india-mumbai-1-ca-version-2.expressnetw.com
singapore-cbd-ca-version-2.expressnetw.com
singapore-jurong-ca-version-2.expressnetw.com
southkorea-ca-version-2.expressnetw.com
southkorea2-ca-version-2.expressnetw.com
bangladesh-ca-version-2.expressnetw.com
bhutan-ca-version-2.expressnetw.com
brunei-ca-version-2.expressnetw.com
cambodia-ca-version-2.expressnetw.com
indonesia-ca-version-2.expressnetw.com
kazakhstan-ca-version-2.expressnetw.com
kyrgyzstan-ca-version-2.expressnetw.com
laos-ca-version-2.expressnetw.com
macau-ca-version-2.expressnetw.com
malaysia-ca-version-2.expressnetw.com
mongolia-ca-version-2.expressnetw.com
myanmar-ca-version-2.expressnetw.com
nepal-ca-version-2.expressnetw.com
newzealand-ca-version-2.expressnetw.com
pakistan-ca-version-2.expressnetw.com
ph-via-sing-ca-version-2.expressnetw.com
srilanka-ca-version-2.expressnetw.com
taiwan-3-ca-version-2.expressnetw.com
thailand-ca-version-2.expressnetw.com
vietnam-ca-version-2.expressnetw.com

Middle East and Africa

algeria-ca-version-2.expressnetw.com
israel-ca-version-2.expressnetw.com
kenya-ca-version-2.expressnetw.com
southafrica-ca-version-2.expressnetw.com

DD-WRT Router Setup for ExpressVPN

Navigate to Services > VPN

Enter ExpressVPN settings

OpenVPN Client

Start OpenVPN Client

If you wish to disable your VPN connection simply set this to Disable at any time and click Apply Settings.

Server IP/Name

Copy and paste the server you would like to connect to from the server list above. Be sure there are no extra spaces or characters.

If you wish to change ExpressVPN connection locations, THE ONLY SETTING YOU NEED TO CHANGE IS THE EXPRESSVPN SERVER ADDRESS.*

Port

1195

Tunnel Device

TUN

Tunnel Protocol

UDP

Encryption cipher

AES-256-CBC

Hash Algorithm

SHA512

User Pass Authentication

Enable

Username

Enter the Username you found in the Manual Config section.

Password

Enter the Password you found in the Manual Config section.

Advanced Options

Enable

TLS Cipher

None

LZO Compression

Adaptive

NAT

Enable

Firewall Protection

Enable

nsCertType verification

Checked

TLS Auth Key

-----BEGIN OpenVPN Static key V1-----
48d9999bd71095b10649c7cb471c1051
b1afdece597cea06909b99303a18c674
01597b12c04a787e98cdb619ee960d90
a0165529dc650f3a5c6fbe77c91c137d
cf55d863fcbe314df5f0b45dbe974d9b
de33ef5b4803c3985531c6c23ca6906d
6cd028efc8585d1b9e71003566bd7891
b9cc9212bcba510109922eed87f5c8e6
6d8e59cbd82575261f02777372b2cd4c
a5214c4a6513ff26dd568f574fd40d6c
d450fc788160ff68434ce2bf6afb00e7
10a3198538f14c4d45d84ab42637872e
778a6b35a124e700920879f1d003ba93
dccdb953cdf32bea03f365760b0ed800
2098d4ce20d045b45a83a8432cc73767
7aed27125592a7148d25c87fdbe0a3f6
-----END OpenVPN Static key V1-----

Additional Config

persist-key
persist-tun
fragment 1300
mssfix 1450
keysize 256

Policy Based Routing

This field can be used for split VPN and Dual Gateway routing.

CA Cert

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Client Cert

-----BEGIN CERTIFICATE-----
MIIDTjCCAregAwIBAgIDKzZvMA0GCSqGSIb3DQEBCwUAMIGFMQswCQYDVQQGEwJV
UzELMAkGA1UECBMCQ0ExFTATBgNVBAcTDFNhbkZyYW5jaXNjbzEVMBMGA1UEChMM
Rm9ydC1GdW5zdG9uMRgwFgYDVQQDEw9Gb3J0LUZ1bnN0b24gQ0ExITAfBgkqhkiG
9w0BCQEWEm1lQG15aG9zdC5teWRvbWFpbjAgFw0xNjExMDMwMzA2MThaGA8yMDY2
MTEwMzAzMDYxOFowgYoxCzAJBgNVBAYTAlZHMQwwCgYDVQQIDANCVkkxEzARBgNV
BAoMCkV4cHJlc3NWUE4xEzARBgNVBAsMCkV4cHJlc3NWUE4xHDAaBgNVBAMME2V4
cHJlc3N2cG5fY3VzdG9tZXIxJTAjBgkqhkiG9w0BCQEWFnN1cHBvcnRAZXhwcmVz
c3Zwbi5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrOYt/KOi2
uMDGev3pXg8j1SO4J/4EVWDF7vJcKr2jrZlqD/zuAFx2W1YWvwumPO6PKH4PU962
1aNdiumaUkv/RplCfznnnxqobhJuTE2oA+rS1bOq+9OhHwF9jgNXNVk+XX4d0toS
T5uGE6Z3OdmPBur8o5AlCf78PDSAwpFOw5HrgLqOEU4hTweC1/czX2VsvsHv22HR
I6JMZgP8gGQii/p9iukqfaJvGdPciL5p1QRBUQIi8P8pNvEp1pVIpxYj7/LOUqb2
DxFvgmp2v1IQ0Yu88SWsFk84+xAYHzfkLyS31Sqj5uLRBnJqx3fIlOihQ50GI72f
wPMwo+OippvVAgMBAAGjPzA9MAwGA1UdEwEB/wQCMAAwDgYDVR0PAQH/BAQDAgSw
MB0GA1UdDgQWBBSkBM1TCX9kBgFsv2RmOzudMXa9njANBgkqhkiG9w0BAQsFAAOB
gQA+2e4b+33zFmA+1ZQ46kWkfiB+fEeDyMwMLeYYyDS2d8mZhNZKdOw7dy4Ifz9V
qzp4aKuQ6j61c6k1UaQQL0tskqWVzslSFvs9NZyUAJLLdGUc5TT2MiLwiXQwd4Uv
H6bGeePdhvB4+ZbW7VMD7TE8hZhjhAL4F6yAP1EQvg3LDA==
-----END CERTIFICATE-----

Private Client Key

-----BEGIN RSA PRIVATE KEY-----
MIIEpAIBAAKCAQEAqzmLfyjotrjAxnr96V4PI9UjuCf+BFVgxe7yXCq9o62Zag/8
7gBcdltWFr8Lpjzujyh+D1PettWjXYrpmlJL/0aZQn85558aqG4SbkxNqAPq0tWz
qvvToR8BfY4DVzVZPl1+HdLaEk+bhhOmdznZjwbq/KOQJQn+/Dw0gMKRTsOR64C6
jhFOIU8Hgtf3M19lbL7B79th0SOiTGYD/IBkIov6fYrpKn2ibxnT3Ii+adUEQVEC
IvD/KTbxKdaVSKcWI+/yzlKm9g8Rb4Jqdr9SENGLvPElrBZPOPsQGB835C8kt9Uq
o+bi0QZyasd3yJTooUOdBiO9n8DzMKPjoqab1QIDAQABAoIBAHgsekC0SKi+AOcN
OZqJ3pxqophE0V7fQX2KWGXhxZnUZMFxGTc936deMYzjZ1y0lUa6x8cgOUcfqHol
3hDmw9oWBckLHGv5Wi9umdb6DOLoZO62+FQATSdfaJ9jheq2Ub2YxsRN0apaXzB6
KDKz0oM0+sZ4Udn9Kw6DfuIELRIWwEx4w0v3gKW7YLC4Jkc4AwLkPK03xEA/qImf
kCmaMPLhrgVQt+IFfP8bXzL7CCC04rNU/IS8pyjex+iUolnQZlbXntF7Bm4V2mz0
827ZVqrgAb/hEQRlsTW3rRkVh+rrdoUE7BCZRTFmRCbLoShjN6XuSf4sAus8ch4U
EN12gN0CgYEA4o/tSvij1iPaXLmt4KOEuxqmSGB8MLKhFde8lBbNdrDgxiIH9bH7
khKx15XRTX0qLDbs8b2/UJygZG0Aa1kIBqZTXTgeMAuxPRTesALJPdqQ/ROnbJcd
FkI7gllrAG8VB0fH4wTRsRd0vWEB6YlCdE107u6LEsLAHxOj9Q5819cCgYEAwXjx
9RkQ2qITBx5Ewib8YsltA0n3cmRomPicLlsnKV5DfvyCLpFIsZ1h3f9dUpfxRLwz
p8wcoLiq9cCoOGdu1udw/yBTqmhaXWhUK/g77f9Ze2ZB1OEhuyKLYJ1vW/h/Z/a1
aPCMxZqsDTPCePsuO8Cez5gqs8LjM3W7EyzRxDMCgYEAvhHrDFt975fSiLoJgo0M
PIAGAnBXn+8sLwv3m/FpW+rWF8LTFK/Fku12H5wDpNOdvswxijkauIE+GiJMGMLv
dcyx4WHECaC1h73reJRNykOEIZ0Md5BrCZJ1JEzp9Mo8RQhWTEFtvfkkqgApP4g0
pSeaMx0StaGG1kt+4IbP+68CgYBrZdQKlquAck/Vt7u7eyDHRcE5/ilaWtqlb/xi
zz7h++3D5C/v4b5UumTFcyg+3RGVclPKZcfOgDSGzzeSd/hTW46iUTOgeOUQzQVM
kzPRXdoyYgVRQtgSpY5xR3O1vjAbahwx8LZ0SvQPMBhYSDbV/Isr+fBacWjl/Aip
EEwxeQKBgQDdrAEnVlOFoCLw4sUjsPoxkLjhTAgI7CYk5NNxX67Rnj0tp+Y49+sG
Uhl5sCGfMKkLShiON5P2oxZa+B0aPtQjsdnsFPa1uaZkK4c++SS6AetzYRpVDLmL
p7/1CulE0z3O0sBekpwiuaqLJ9ZccC81g4+2j8j6c50rIAct3hxIxw==
-----END RSA PRIVATE KEY-----

CLICK APPLY SETTINGS

Leave all settings not mentioned above as their default setting.

Verify a successful ExpressVPN connection

Navigate to Status > OpenVPN.

  1. You should now see a CONNECTED SUCCESS message.
  2. Visit ExpressVPN’s IP Check to verify your new IP address and virtual location.

In some cases you may notice that the location is not showing the same location as the server you have input in your router settings; this is because geo tracking tools are often tricked by VPN connections. As long as you see an IP address that is not the same as your normal Internet IP address then you are indeed connected to ExpressVPN.

Back up your settings

Navigate to Administration > Backup

  1. Click the Backup button.
  2. A file named nvrambak.bin will be saved to your computer.
  3. You can load nvrambak.bin to restore your settings in the event of a reset.

How to change the ExpressVPN server

  1. Copy the new ExpressVPN server address from the above server list.
  2. Paste the server into the Server IP/Name field.
  3. Click Apply Settings.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

Linksys WRT3200ACM DD-WRT WiFi Settings

· ·

Recommended DD-WRT WiFi settings for the Linksys WRT3200ACM are based on extensive testing by FlashRouters. Please note that optimal settings may vary depending on external factors such as home size, interference, and the types of WiFi devices you are connecting in your network.

Screenshots below provide a visual display of recommended WiFi and encryption settings exactly as they appear in the Linksys WRT3200ACM with DD-WRT firmware.

Navigate to the Wireless > Basic Settings to view or edit WiFi network settings.

5.0 GHz - Wireless-AC

View WRT3200ACM DD-WRT FlashRouter 5GHz #1 Settings

2.4 GHz - Wireless-N

View WRT3200ACM DD-WRT FlashRouter 2.4GHz Settings

Additional DD-WRT WiFi Information

Intimidated by all the available WiFi settings? The DD-WRT website provides extensive information about all of the available configuration options in the firmware. Learn about everything from Wireless channels to channel widths and more in the Basic Wireless Settings – DD-WRT Wiki.

WRT3200ACM DD-WRT Wireless Security

The preset WRT3200ACM FlashRouter WiFi password is Wireless#[First 5 characters of your router MAC]. The router MAC can be found on the bottom of your router. For e.g. if your MAC is 1459C07E70A8 then your WiFi password is Wireless#1459C

Navigate to the Wireless > Wireless Security to view or edit WiFi passwords.

TROUBLESHOOTING

Trouble with your Linksys WRT3200ACM WiFi? Visit the Wireless troubleshooting section.

Troubleshoot Here