Prioritizing Privacy
Enter custom DNS servers in your Asus Merlin firmware to avoid using your ISP DNS, which will steal and collect your browsing data.
Login to Asus Merlin firmware settings in a browser on any computer or smart device.
1. Under Advanced Settings select LAN.
2. Click the DHCP Server tab.
3. In the DNS Server 1 and DNS Server 2 fields enter the DNS server that you wish to use.
4. Click Apply and then reboot the router and reconnect to the network.
Follow this article when you receive your new TP-Link FlashRouter to connect it to the Internet.
1. Connect the ethernet cable that came with the router from an open LAN ethernet port on your ISP modem or other router to the WAN port of the TP-Link.
2. Connect the power to the router and wait about 2 minutes for the router to fully boot up.
3. Connect your computer, phone, or tablet to the TP-Link router via wireless (FlashRouter24 / FlashRouter50) or via ethernet cable to one of the LAN ports on the router.
The FlashRouter WiFi password is printed on the sheet that came with the router and is set to Wireless#[First 5 characters of your router MAC]. The router MAC can be found on the bottom of your router if you cannot locate the sheet. For e.g. if your MAC is 1459C07E70A8 then your WiFi password is Wireless#1459C
Be sure to capitalize the W.
4. Once connected via wireless or ethernet on your device open your browser and go to tplinkwifi.net
5. Enter tp-link as the admin password to access the TP-Link firmware settings.
6. Verify that your TP-Link FlashRouter is reporting as Internet and WAN Connected.
Once you have OpenVPN connected on your Merlin FlashRouter you can enable the VPN Killswitch so that no internet traffic passes through your router that is not encrypted by the VPN tunnel.
Login to Asus Merlin firmware settings in a browser on any computer or smart device.
1. Under Advanced Settings select VPN.
2. Click the VPN Client tab.
3. Set Killswitch – Block routed clients if tunnel goes down to Yes.
4. Click Apply.
If you are not already an NordVPN user Sign Up Now.
Log in to your account on the NordVPN website.
For a NordVPN server recommendation visit their Recommend Server page.
Once you have selected the server you want to connect to, download the UDP .ovpn file containing the Server IP Address, TLS Auth Key, and CA Cert referenced below.
Open the .ovpn file that is downloaded to your computer with NotePad++ for Windows or TextEdit for Apple. You will only need the Server IP Address, TLS Auth Key, and CA Cert from this file. All NordVPN servers and .ovpn files have different IP Addresses, keys, and certificates.
Navigate to Services > VPN
Start OpenVPN Client
If you wish to disable your VPN connection simply set this to Disable at any time and click Apply Settings.
Server IP/Name
At the top of the .ovpn file you downloaded above, there is a line e.g.:
remote 206.226.72.27 1194
206.226.72.27 is your NordVPN server IP address. Enter the IP Address in this field.
Port
1194
Tunnel Device
TUN
Tunnel Protocol
UDP
Encryption cipher
AES-256-CBC
Hash Algorithm
SHA512
Userpass Authentication
Enable
Username
Enter the Username you successfully logged in to your NordVPN account with.
Password
Enter the Password you successfully logged in to your NordVPN account with.
Advanced Options
Enable
TLS Cipher
None
LZO Compression
Adaptive
NAT
Enable
Firewall Protection
Enable
TLS Auth Key
In the .ovpn file copy and paste all contents in between the <tls-auth> and </tls-auth> lines from your .ovpn file starting and ending with:
—–BEGIN OpenVPN Static key V1—–
…
—–END OpenVPN Static key V1—–
Additional Config
tun-mtu-extra 32
mssfix 1450
persist-key
persist-tun
Policy Based Routing
This field can be used for split VPN and Dual Gateway routing.
CA Cert
In the .ovpn file Copy and Paste all contents in between the <ca> and </ca> lines from your .ovpn file starting and ending with:
—–BEGIN CERTIFICATE—–
…
—–END CERTIFICATE—–
CLICK APPLY SETTINGS
Leave all settings not mentioned above as their default setting.
Navigate to Status > OpenVPN
In some cases you may notice that the location is not showing the same location as the server you have input in your router settings; this is because geo tracking tools are often tricked by VPN connections. As long as you see an IP address that is not the same as your normal Internet IP address then you are indeed connected to NordVPN.
Navigate to Administration > Backup
Static network settings set on a device from a previous connection will interfere with the FlashRouter’s network. Typically the FlashRouter’s network performs best when connected devices are set to automatically use the FlashRouter’s IP Address and DNS.
Make sure you are connected to the FlashRouter’s network via ethernet or WiFi. Keep in mind these instructions may vary based on your current software version.
1. Open the Window search box, and search “Network Status”
2. Select “Change adapter optons”
3. Right click on the WiFi and/or ethernet adapter and select Properties.
4. Highlight Internet Protocol Version 4 (TCP/IPv4) and click Properties.
5. Delete the values entered for IP address, Subnet mask, Default gateway, Preferred DNS server, and Alternate DNS server.
6. Select Obtain an IP address automatically and Obtain DNS server address automatically.
7. Click OK.
1. Open System Preferences, and select Network.
2. Select the adapter that is connected via ethernet or wireless. This will vary based on your current connection.
3. Select Advanced.
4. Select the TCP/IP tab.
5. Set Configure IPv4 to Automatically.
6. Select the DNS field and highlight any DNS servers you see there. If they can be removed you should click the minus symbol below.
7. Click OK.
8. Click Apply.
1. Open Settings 
2. Select WiFi, and select the blue icon next to your current connection.
3. Make sure Configure IP is set to Automatically.
1. From the top of the screen, swipe down to display settings.
2. Select WiFi.
3. Select your current network.
4. Select Advanced.
5. Make sure that IP settings is set to DHCP.
Set a custom WiFi network name and password for your devices to join the Merlin FlashRouter’s network.
Login to Asus Merlin firmware settings in a browser on any computer or smart device.
1. Under General select Network Map.
2. In the Network name (SSID) field enter the name you want your Asus WiFi to appear as. This can be the same or different for both 2.4GHz and 5GHz bands. We typically advise setting different names for each so you can connect your streaming devices to the 5GHz band as that is the faster WiFi band.
3. In the WPA-PSK key field enter the password you want to join your devices to the Merlin WiFi network. If your WiFi names are the same for 2.4GHz and 5GHz make sure they have the exact same wireless password set.
4. Click Apply and then rejoin the new wireless network.
By default ExpressVPN firmware bonds the 2.4GHz and 5GHz wireless networks to a single wireless network name. Your device will automatically choose which one will provide the best connection. You can separate these networks to have unique Wi-Fi names so you can control which network your devices will use.
1. Connect to the FlashRouter’s network via ethernet cable or wireless.
2. Open your web browser and enter expressvpnrouter.com or 192.168.132.1 in the URL.
3. Login with your ExpressVPN FlashRouter admin password.
4. Select Network Settings on the left hand side of the menu.
5. Select Wi-Fi Settings on the left hand side of the menu.
6. Click the toggle for Separate 2.4GHz and 5GHz Wi-Fi.
7. Separate Wi-Fi details for the 5GHz band will now display. You can change the name and password if you so choose or leave it with the default name and password with “-5GHz” added to the name. Click Save. Click Continue.
Follow this guide to change the Wi-Fi name and password on your TP-Link FlashRouter.
1. Connect your computer, phone, or tablet to the TP-Link router via wireless (FlashRouter24 / FlashRouter50) or via ethernet cable to one of the LAN ports on the router.
The FlashRouter WiFi password is printed on the sheet that came with the router and is set to Wireless#[First 5 characters of your router MAC]. The router MAC can be found on the bottom of your router if you cannot locate the sheet. For e.g. if your MAC is 1459C07E70A8 then your WiFi password is Wireless#1459C
Be sure to capitalize the W.
2. Once connected via wireless or ethernet on your device open your browser and go to the TP-Link firmware settings.
3. Enter tp-link as the admin password to access the TP-Link firmware settings.
4. Click Wireless.
5. Change the Network Name (SSID) and Password fields to what you want to use. The SSID should be unique and NOT a duplicate of an existing network. Click Save.
If you want both 2.4GHz and 5GHz networks to be bonded and have the same name click the Smart Connect checkbox.
6. Connect your devices to the new wireless network.
Router FAQsAn IP (Internet Protocol) Address is a numerical assignment for each device (cell phone, iPad, laptop computer, printer etc) inside a network that uses the Internet Protocol for communication. Internet Protocol is responsible for routing information packets across network boundaries. It is the main protocol establishing the Internet.
An IP address serves two predominant functions. First is to host or network interface identification. Second, it provides location addressing. To put it bluntly, an IP address tells wherever you are connecting, to whom you are visiting, and where you are located.
DNS (Domain Name System) is a protocol within the TCP/IP protocol that uses a set of standards for how computers exchange data on the Internet and on many private networks.
The basic job of DNS is to convert a user-friendly domain name into an IP address that computers use to identify one another. Think of DNS like your cellphone contact list; you tap the name and the phone contacts to a phone number.
It is easier to remember flashrouters.com, rather than its IP address. Imagine if you had to remember all of the IP addresses of your favorite websites!
DNSMasq is a local DNS server that speeds up host-name searches from your computer/Internet connection after pressing enter.
Basically, DNSMasq gives the router some advanced enterprise functionality – caching DNS records locally so you have a faster browsing experience. Your computer only has to go to the router instead of repeatedly scouring the web for a commonly visited site.
Throughput is the average rate of successful delivery of messages through a network. Simply put, throughput measures the speed of message delivery inside a network. If you think about it in relationship to networks and Internet connections, throughput defines the user experience. The key to a pleasing user experience is uninterrupted service and smooth data transfer.
In order to improve throughput, you should get a router with more memory. If you notice that your network is running slowly due to congestion, you could probably benefit by upgrading your router to one with more memory. FlashMemory and RAM on a router add more room to prevent network congestion and improve throughput.
Most of FlashRouters‘ high-end units come with at least 8 MB of Flash memory and 64 MB of RAM which should be more than capable for providing for the average home users’ or small business will need in the future.
PPPoE stands for Point-to-Point Protocol over Ethernet, a network protocol for encapsulating Point-to-Point Protocol (PPP) frames inside Ethernet frames. It is used mainly with DSL services where individual users connect to a DSL modem over Ethernet.
With PPPoE, users virtually “dial” from one machine to another over an Ethernet network, establish a point-to-point connection and then data packets are securely transported through the connection.
PPPoE offers an Internet service provider (ISP) an easier way to track exactly how much bandwidth you are using in case they want to charge for it in the future.
VPN Encryption: If you are connected to the VPN on your home network, then any data that flows over the Internet is entirely encrypted whether you are connected to the Internet either wired or wirelessly. This means that if your Local ISP was trying to see what you are browsing or downloading, they would not be able to see your data.
Wireless Network Security: If you leave your wireless network open or insecure, it does not matter whether Internet traffic is encrypted, because someone can directly see what you are doing on your network, or even worse, can go in and put a wireless password on your network, locking you out. They may also be able to access folders and files on your computer without your control.
Best thing to do is protect your wireless network with a WPA secured password along with your VPN connection.
No.
According to our in-house testing and multiple DD-WRT community reports, we have found that the Shellshock vulnerability will not work on with DD-WRT or TomatoUSB installed router. The vulnerability is based on a shell called BASH (Bourne Again Shell) but DD-WRT & Tomato firmware use BusyBox which is confirmed to not have this issue.
Please be advised that if you are using Optware on your DD-WRT router there is a chance that implementation is BASH based. Only used trusted optware on your router.
Follow this guide to change the Wireless channel on your TP-Link FlashRouter.
1. Connect your computer, phone, or tablet to the TP-Link router via wireless (FlashRouter24 / FlashRouter50) or via ethernet cable to one of the LAN ports on the router.
The FlashRouter WiFi password is printed on the sheet that came with the router and is set to Wireless#[First 5 characters of your router MAC]. The router MAC can be found on the bottom of your router if you cannot locate the sheet. For e.g. if your MAC is 1459C07E70A8 then your WiFi password is Wireless#1459C
Be sure to capitalize the W.
2. Once connected via wireless or ethernet on your device open your browser and go to the TP-Link firmware settings.
3. Enter tp-link as the admin password to access the TP-Link firmware settings.
4. Click Wireless.
5. Change the Channel setting to the number that you want to use. Click Save.
6. Connect your devices to the wireless network again as they may have been disconnected when making this change.
Your TP-Link router broadcasts a 2.4GHz and a 5GHz Wi-Fi network. These can be separated to allow you to assign your devices to the network that best suits them or merged into a single network so your devices automatically select the best band to use. Follow this guide to separate or merge your Wi-Fi bands.
1. Connect your computer, phone, or tablet to the TP-Link router via wireless (FlashRouter24 / FlashRouter50) or via ethernet cable to one of the LAN ports on the router.
The FlashRouter WiFi password is printed on the sheet that came with the router and is set to Wireless#[First 5 characters of your router MAC]. The router MAC can be found on the bottom of your router if you cannot locate the sheet. For e.g. if your MAC is 1459C07E70A8 then your WiFi password is Wireless#1459C
Be sure to capitalize the W.
2. Once connected via wireless or ethernet on your device open your browser and go to the TP-Link firmware settings.
3. Enter tp-link as the admin password to access the TP-Link firmware settings.
4. Click Wireless.
5. Check the Smart Connect checkbox to merge the two Wi-Fi bands. Uncheck the Smart Connect checkbox to separate the two Wi-Fi bands. If you have the two Wi-Fi bands separated make sure the Network Name (SSID) fields have different names for 2.4GHz and 5GHz bands. Click Save.
6. Connect your devices to the new wireless network.
AC1450, R6220, R6230, R6250, R6260, R6300 V1, R6300 V2, R6400 V1, R6400 V2, R6700 V1, R6700 V2, R6700 V3, R7000, R7000P, R7800, R8000, R9000, XR500
RT-AC56U/R, RT-AC68U V1, RT-AC68U V2, RT-AC1900P, RT-AC87U, RT-AC3100, RT-AC5300
WRT1200AC, WRT1900AC V1, WRT1900AC V2, WRT1900ACS V1, WRT1900ACS V2, WRT32X, WRT3200ACM
Warranty and Returns FAQsAt FlashRouters, we are confident that every router sold will function as advertised. We open, inspect, upgrade, configure, and then test all FlashRouters before they get shipped out. That is why we guarantee you will receive a working unit and offer our own 1-Year Hardware Warranty included with all New and Refurbished routers purchased from the FlashRouters website.
If you would like to extend the warranty coverage period to 2 years, the option is available during the FlashRouters checkout process.
Since we are so certain you will be happy with your upgraded and super secure network, all routers purchased from FlashRouters.com also come with a 30-day satisfaction guarantee.
Please read the warranty and return section in detail before placing an order or requesting an RMA. Our goal is to make the return process as smooth and transparent as possible for all customers. If the router you purchased does not work out for your needs we still want you to be satisfied with your purchasing experience.
Automated Return Merchant Authorization (RMA) requests are available from within your customer account panel. If you are eligible for a return then your RMA request will be approved. If your RMA request is not valid then it will be denied and you must e-mail FlashRouters Support for any additional information or actions. RMAs are valid for 7 days from the day they are issued.
The following are the available options when submitting an RMA request. Continue reading for more information on all available RMA options and conditions.
Please note we can only provide prepaid labels for approved Hardware Warranty returns within the USA. Prepaid labels are not available for international customers. All return shipping for 30 Day Satisfaction refunds is paid for by the customer.
In the rare case you receive a faulty router, you can open a ticket to contact FlashRouter Support for an RMA or request an RMA in your customer account panel and we will work to rectify the situation immediately. If it is determined that the power supply you received was faulty, and not the router itself, our team will immediately ship you out a tested power supply at no additional cost.
Rest assured that we individually test and inspect every FlashRouter with great detail before shipment. BUT… if router gremlins (yes they do exist) snuck into your router during the shipping process and it no longer powers on, our team will supply you with a prepaid shipping label to return the unit back to our offices. As soon as we receive verified tracking on your return shipment we will ship out another thoroughly tested unit to you at no additional cost.
You must contact us within 7 days from when you received your FlashRouter to be eligible for a Hardware Guarantee prepaid shipping label from FlashRouters.
If you are not satisfied with the performance of your router after trying it out for up to 30 days, you can open a ticket to contact FlashRouter Support for an RMA or request an RMA in your customer account panel. Once the RMA is approved, you will then have the option to ship the unit back to FlashRouters.
Once we receive the return, our team inspects and refunds accordingly based on the original purchase price of your FlashRouter. Please note there is a $25 restocking fee and refunds do not include any initial shipping costs associated with your order. All restocking fees are returned as Store Credit. This means if you make another purchase at FlashRouters then your fee is refunded.
The item must also be fully functional and have no signs of cosmetic damage for you to receive the maximum refund. If you do not include the original boxing, or any router accessories you may also be charged an additional fee as indicated.
Ethernet Cable: $5
Power Source: $10
Antennas: $5 per antenna
Router Stand: $10
Box: $10
Cosmetic Damage: Up to $25
What is covered under the 30-Day Satisfaction Guarantee?
If the VPN speeds or WiFi network speeds are not what you had hoped, if the setup is too complicated, or you just decided on another solution; these are all covered under the 30-Day Satisfaction Guarantee.
We will not accept any returns of working routers after 30 days from the date you received your router. After 30 days, router returns/replacements will only be processed under the Hardware Warranty.
Can I get the restocking fee waived?
If you place a new order for a different FlashRouter unit before returning your initial purchase, then we will waive the restocking fee. Otherwise the $25 restocking fee will be applied to your customer account as a store credit. You can then use this $25 store credit on any future FlashRouter purchase.
Rewards Points refunds
If you return your FlashRouter under the 30 day satisfaction guarantee then you will lose any reward points received for your initial purchase.
A 1-year Hardware Warranty is included with the purchase of all New and Refurbished FlashRouters. If your router suffers hardware failure within 365 days from the date you received the unit then we will replace your router with another fully tested unit. You must pay for return shipping of the faulty unit back to our offices located in New Jersey, USA and our team will ship out your replacement at no additional cost.
You must contact the FlashRouter support team for an RMA number or request an RMA from your customer account panel before returning a router for warranty replacement. If you do not receive approval for a return then you will not be eligible for a replacement unit.
There are 2 options for receiving a Hardware Warranty replacement unit:
Option #1: Process another order for immediate shipping and as soon as we receive the returned device back in our offices we will issue you a refund for the initial purchase.
Option #2: Ship your faulty router back to our office, and as soon as we receive the unit our returns department will have a replacement unit shipped out to you at no extra cost.
How long do I have before my RMA expires?
RMA’s are good for 7 days from the date they are issued.
What if I upgraded to a 2 year Hardware Warranty at checkout?
All refund, replacement, RMA details, and options covered by the 1-year Warranty apply in the exact same manner for 2 year warranties over each respective warranty coverage period.
If for any reason the router you purchased is no longer in stock or discontinued then you have the option to replace your router with one of equal value or receive a refund. Hardware warranties are only eligible for refunds if we are unable to provide a replacement unit for you.
What should I do if my router is out of warranty coverage?
If your FlashRouter is out of the warranty coverage period, we are first and foremost apologetic for the passing of your router. Be sure to contact our sales team though and you can receive a special coupon as a return customer for a shiny new wireless networking centerpiece.
What is not covered with a FlashRouter Warranty?
Items that have been clearly damaged either by the customer or during the return process are not eligible for a full refund. This includes routers that have visible dents, scratches, or moving parts inside the router.
Can I upgrade to a 2 year warranty after my FlashRouter purchase?
2 year warranty upgrades are only available at the time of your FlashRouter purchase. Upgrades are not available once a FlashRouter order has been shipped.
Can I get a Warranty on my router if I purchased a “Flash My Router” plan from FlashRouters?
Routers that have been “flashed” and configured by our support specialists for anyone who has purchased a Flash My Router Plan are not eligible for warranty coverage from FlashRouters. Only routers purchased through the FlashRouters.com website are eligible for warranty replacements or refunds.
FlashRouters is proud to offer a free repair and upgrade service for anyone with an active Silver or Gold Service Plan subscription. Any and all shipment costs associated with FlashRouter repairs or upgrade requests are the burden of the customer and will not be paid for by FlashRouters. However, the repair and upgrade service itself is FREE.
If you do choose to ship your router back to our office for repair, then you should include a prepaid shipping label in your package back to your home or office, so our team can send the router back to you whether we are able to repair the unit or not. Router accessories like power supplies, ethernet cable, or antennas do not need to be included when shipping back a unit for repair.
If our team is not able to resurrect your router from a power failure, faulty firmware upgrade, or any other reason then we can return the faulty unit back to you using the return shipping label included with your return package. Alternatively, we can destroy the unit and refund the return shipping costs if that is your preference.
What is an Open Box Router?
Open Box routers are fully functional units that have cosmetic flaws and are sold at heavy discounts. These units come with the same Support Plan options as New or RM units, which means you get the same support service with extremely discounted hardware.
Open Box routers are covered under the FlashRouter 30-Day Satisfaction Guarantee BUT come with no Hardware Warranty. We take every measure possible to ensure complete functionality and our team fully load tests these devices before shipment, but you should be very aware that you buy these discounted “open box” devices at your own risk without any Hardware Warranty.
What is the Open Box Router return policy?
Open Box Routers can only be returned within 30 days from the date you received your router. Returns will not be accepted on open box routers after 30-Day Satisfaction Guarantee window has expired. Please note that Open Box Router return shipping costs are not covered by FlashRouters and initial shipping costs are not included in any refunds.
All Accessories come with manufacturer warranties as listed on the respective product pages.
FlashRouters will accept returns for refund or replacement of accessories only within 30 days from the date you received your order. After 30 days you must contact the manufacturer for any warranty replacements.
Accessories must be returned with all original packaging and with no cosmetic damage to receive a full refund. A missing box or damage to an item will result in a restocking fee per our discretion.
The “Flash My Router” product offered by FlashRouters is a virtual service provided by the FlashRouters support team. This product includes a remote support session where our support team will flash your router and then complete your internet, WiFi, and VPN setup, and in certain cases support additional router features.
Once your remote support session is completed there are absolutely no refunds on “Flash My Router” purchases. In the case we are unable to successfully flash your router we will offer a full refund for your “Flash My Router” purchase. “Flash My Router” purchases are fully refundable if you decide you would no longer like to use the service after your purchase is completed.
All FlashRouter router purchases include a recurring FlashRouters Service Plan subscription. There are 3 levels of support to choose from as either a quarterly or yearly recurring billing plan.
If you choose to return your FlashRouter under the 30-Day Satisfaction Guarantee, then you are eligible for a full refund on any Service Plan purchased with your FlashRouter.
You may cancel your recurring billing at any time and you will not be charged again. Please note you will not be refunded for unused time from the initial billing/service period of your support plan subscription.
If you choose to cancel your 3 month FlashRouter support plan then you will retain support until the end of the 3 month period. If you choose to cancel your 1 year FlashRouter support plan then you will retain support until the end of the 1 year period. You will not lose time from your existing service plan if you cancel when a plan is active.
There is a 7-day grace period after Service Plan renewals have been charged, where you may request an immediate cancellation and full refund.
How do I Upgrade my Service Plan?
You can upgrade a Service Plan at any time during a billing cycle. You must e-mail or live chat our support team and request an upgrade. Our team will then issue you store credit for any unused time on your existing Service Plan, which will then be immediately applied to your new upgraded Service Plan purchase. Your recurring billing will then continue at the new Service Plan level. Your 3 months or 1 year of upgrade service will start again from the date of the upgrade purchase.
How do I switch from a Quarterly to a Yearly Service Plan?
If you would like to switch to a Yearly plan from a Quarterly plan of the same service level, then you must e-mail or live chat our support team and request an upgrade. Our team will then issue you store credit for any unused time on your existing Quarterly Service Plan, which will then be immediately applied to your new Yearly Service Plan purchase. Your recurring billing will then continue at the Yearly Service Plan level. Your 1 year of service will start again from the date of the upgrade purchase.
How do I Downgrade my Service Plan?
If you are subscribed a Service Plan, but would like to switch to a lower level Service Plan then you can request that our support team cancel your recurring billing at any time. As soon your existing Service Plan is expired you can make a new purchase for the new Service Plan of your choice.
How do I switch from a Yearly to a Quarterly Service Plan?
If you would like to change the billing cycle from yearly to quarterly, you may cancel your existing subscription plan and then once your year of service has expired, you may purchase a Quarterly Service Plan instead.
If you just purchased a FlashRouter, there is a 7-day grace period from when you receive your unit if you would like an immediate change from Yearly to a Quarterly Service Plan.
You may request a Service Plan subscription cancellation by e-mailing support@flashrouters.com or from within your customer account panel at any time. You will be notified of a successful cancellation and your payment method will not be billed again.
Please note there are no refunds when cancelling your subscription. Cancellation means you will not be billed again for your Service Plan, there are no partial refunds for cancelled Service Plans.
If you are not already a AirVPN user Sign Up Now.
1. Log in to your account on the AirVPN website.
2. Click on the Client Area tab.
3. Click on the Config Generator subtab.
4. Click on the Router icon under Choose your Operating System.
5. Select a Protocol under the Protocols section. We recommend UDP.
6. Select one option under the Choose Servers section. AirVPN sorts these servers by Planet, Continent, Country, and Single servers. Choose whichever best suits your needs.
7. Scroll down towards the bottom of the page and click on Generate.
Open the file that was downloaded with NotePad++ for Windows or TextEdit for Apple. You will be copying the Server IP/Name, client.crt and client.key from this file.
Please note, all VPN servers have different keys and certificates. If you wish to change servers in the future, you will have to go through steps 1-7 again.
Navigate to Services > VPN
Start OpenVPN Client
If you wish to disable your VPN connection simply set this to Disable at any time and click Apply Settings.
Server IP/Name
Copy and paste the server you selected in your account. Be sure there are no extra spaces or characters.
Port
443
Tunnel Device
TUN
Tunnel Protocol
UDP or TCP
Encryption cipher
AES-256-CBC
Hash Algorithm
SHA1
User Pass Authentication
Disable
Advanced Options
Enable
TLS Cipher
None
LZO Compression
No
NAT
Enable
Firewall Protection
Enable
nsCertType verification
Checked
Policy Based Routing
This field can be used for split VPN and Dual Gateway routing.
TLS Auth Key
—–BEGIN OpenVPN Static key V1—–
7bb7a23a0f5f28d01e792df68f1764ab
f2688719288808bf58e8a2d4f9354ecf
132625dfb895fc3f6330ae1e868e4dfa
c164c0931593d7f9a7da9595cf353433
8896e1d0a987a0d19838944af8fea4e5
215a3a0c76f4c67d5a4aee6a53be66a4
c88b84f850030840fb30f8550ed8068f
35c1ef34ee8f40a0ea5862dfb6f8d3c5
7ab5e27ac2799cf93e8765ff63cd8cd8
6b391b813925cd373bb202796f64d16f
003d042ca828d1b07f18ba1d0cb0323d
df3ee9287e9e084e655699efb3cffa92
3626946fa372e7beee245e7a95b4c1d8
7d16cae685218d4b8afc019b22e41083
476ee9883fe666d236301e55b2062551
4d91c8a69467a758293994df1e6fa7ae
—–END OpenVPN Static key V1—–
CA Cert
—–BEGIN CERTIFICATE—–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—–END CERTIFICATE—–
Public Client Cert
Copy and paste all contents between <cert> and </cert> make sure to also include the following lines when copying and pasting:
—–BEGIN CERTIFICATE—–
…
—–END CERTIFICATE—–
Private Client Key
Copy and paste all contents between <key> and </key> make sure to also include the following lines when copying and pasting:
—–BEGIN PRIVATE KEY—–
…
—–END PRIVATE KEY—–
CLICK APPLY SETTINGS
Leave all settings not mentioned above as their default setting.
Navigate to Status > OpenVPN
In some cases you may notice that the location is not showing the same location as the server you have input in your router settings; this is because geo tracking tools are often tricked by VPN connections. As long as you see an IP address that is not the same as your normal Internet IP address then you are indeed connected to AirVPN.
Navigate to Administration > Backup
Change your Roqos’ WiFi Network Name and Password to anything you like. Make sure it is not a duplicate of an existing WiFi name.
Login to Roqos Core UI web app in a browser on any computer or smart device.
1. Click the navigation menu and select Basic Settings > WiFi Settings.
2. Click Main WiFi.
3. Click Settings.
4. Enter the new Network Name and Network Password. Click Save.
5. Reconnect your WiFi devices to the new network with the password you just set.
Create a Guest WiFi network on your Roqos to segment certain devices from the main network and set custom content filters as you see fit. Note that this is only for 2.4GHz wireless.
Login to Roqos Core UI web app in a browser on any computer or smart device.
1. Click the navigation menu and select Basic Settings > WiFi Settings.
2. Click Guest WiFi.
3. Toggle the Enable slider and set the Network Name and Guest WiFi Password. Click Save.
4. Optional: If you wish to set specific Content Filters for the Guest Network and set the Filters that you see fit.
If you are not already an ExpressVPN user Sign Up Now.
1. Log in to your account on the ExpressVPN website.
2. Successfully log in with your account information. Select More.
3. Select Manual Configuration and copy the Username and Password that are displayed on the right hand side of the screen.
4. Click the Server Location that you want to connect to. This will download a .ovpn file to your computer that we will use later on. There is no need to open the file. For this example I have selected New York but feel free to select any server listed there.
Login to AsusWRT firmware settings in a browser on any computer or smart device connected to the AsusWRT FlashRouter’s network.
1. Navigate to the VPN tab.
2. Navigate to the VPN Fusion tab.
3. Click Add profile.
4. In the Connection Name field enter in the name you’d like to use for this OpenVPN Client profile. We typically advise entering in the location or server number here. Our example server was in New York so I have entered in ExpressVPN New York.
5. In the VPN Type dropdown select OpenVPN.
6. Click Import .ovpn file and select the .ovpn file you downloaded earlier. Then click Upload.
7. Enter your ExpressVPN username and password that you obtained earlier in the Username and Password. Note that these are different from your ExpressVPN email login and password.
8. Click Apply and Enable at the bottom of the page.
If you only want certain devices to connect to the OpenVPN Client profile you are setting up instead of all the devices connected to the FlashRouter’s network click into the profile and disable Apply to all devices. Then click Devices and select the devices that you want to connect to VPN.
9. At the top of the page set the Service State toggle to ON to activate the VPN connection.
In some cases you may notice that the location is not showing the same location as the server you have input in your router settings; this is because geo tracking tools are often tricked by VPN connections. As long as you see an IP address that is not the same as your normal Internet IP address then you are indeed connected to ExpressVPN.
If you are not already a PIA user Sign Up Now.
1. Log in to your account on the PIA website.
2. Successfully log in with your account information then go to PIA’s OpenVPN Config Generator.
3. On the OpenVPN Configuration Generator select the following:
OpenVPN Version: OpenVPN 2.4 or newer
Select Platform: Linux
Select Region: Choose the server location you’d like to connect to
Select Port: Typically we recommend UDP/1198 RSA-2048 AES-128-CBC SHA1 for best speeds but feel free to select the one you want to use.
4. Click Generate to download the .ovpn file. Do not open this file once it is downloaded.
Login to AsusWRT firmware settings in a browser on any computer or smart device connected to the AsusWRT FlashRouter’s network.
1. Navigate to the VPN tab.
2. Navigate to the VPN Fusion tab.
3. Click Add profile.
4. In the Connection Name field enter in the name you’d like to use for this OpenVPN Client profile. We typically advise entering in the location or server number here. Our example server was in New York so I have entered in PIA New York.
5. In the VPN Type dropdown select OpenVPN.
6. Click Import .ovpn file and select the .ovpn file you downloaded earlier. Then click Upload.
7. In the Username and Password fields paste in the PIA username and password you use to successfully login to your PIA website account.
8. Click Apply and Enable at the bottom of the page.
If you only want certain devices to connect to the OpenVPN Client profile you are setting up instead of all the devices connected to the FlashRouter’s network click into the profile and disable Apply to all devices. Then click Devices and select the devices that you want to connect to VPN.
9. At the top of the page set the Service State toggle to ON to activate the VPN connection.
In some cases you may notice that the location is not showing the same location as the server you have input in your router settings; this is because geo tracking tools are often tricked by VPN connections. As long as you see an IP address that is not the same as your normal Internet IP address then you are indeed connected to PIA.
If you find that wireless devices are routinely disconnecting from the FlashRouter’s network we recommend that you do the following:
A Wireless Access Point is a setup that has the FlashRouter using an existing network’s DHCP instead of assigning its own. The FlashRouter’s WAN/Internet port should be not be connected to your modem or other router while performing this setup.
Locate the Local IP Address of the existing router that the FlashRouter will be bridged to.
Navigate to Security > Firewall
Navigate to Services > Services
Navigate to Setup > Basic Setup
Navigate to Setup > Advanced Routing
Navigate to the Administration > Backup page.
