Search Results for: devices

How to Use ASUS VPN Fusion: Assign Devices and Multiple VPNs

Dave · Oct 26, 2026 ·

ASUS VPN Fusion lets supported AsusWRT routers run VPN client profiles and decide which connected devices use each VPN connection. You can send the entire network through one VPN, use separate VPN profiles for selected devices, or leave certain devices on the regular ISP connection.

This guide covers how to use ASUS VPN Fusion to assign devices to specific VPN connections, manage multiple VPN profiles simultaneously, and choose which devices use a VPN or connect directly through your ISP. These features work with supported VPN providers and protocols, including WireGuard and OpenVPN.

Open VPN Fusion

Connect your computer or phone to your ASUS FlashRouter’s WiFi or LAN.
Open http://www.asusrouter.com or the router’s LAN IP (often 192.168.50.1) and log in. See How to Access Your AsusWRT FlashRouter Settings.
Go to VPN > VPN Fusion. Add and configure at least one working VPN client profile before assigning devices.

VPN Fusion displays your saved VPN profiles and the Add Profile option.

Method 1: Apply One VPN to All Devices

Use this option when you want the selected VPN profile to be your router’s default connection.

In VPN Fusion, open the VPN profile that should provide the default internet route.
Enable Apply to all devices (or Default Connection in firmware that uses that label).
Click Apply all settings, then enable the VPN profile.
Connect a test device to the router and check its IP. If you use per-device overrides, verify those rules separately.

ASUS VPN Fusion Apply to all devices setting and device count — Enable Apply to all devices to use the selected VPN as the default connection.

Method 2: Send Only Selected Devices Through a VPN

In VPN Fusion, turn off Apply to all devices for a profile when you do not want that VPN used network-wide.
Open the profile’s Device area using the pencil/edit icon or the firmware’s device-assignment control.
Select the intended devices (for example, a TV and streaming box), confirm with OK, then click Apply all settings.
Enable the VPN profile and verify the selected devices’ public IPs.
For devices that should use the normal ISP internet, leave them on the Internet Connection route or explicitly set the Internet/bypass rule available in your firmware. Remove any conflicting VPN assignments.

Important: A device being connected to ASUS WiFi does not guarantee that it is assigned to the desired VPN. Check the assigned profile and the actual public IP.

How Multiple VPN Connections Work

On supported models, VPN Fusion can keep several VPN connections active and route different devices through different providers at the same time. For example:

TVNordVPN — WireGuard

LaptopProton VPN — OpenVPN

Streaming deviceSurfshark — OpenVPN

Work computerRegular ISP connection

You may be able to run one WireGuard profile and multiple OpenVPN profiles concurrently, but connection limits and supported combinations vary by ASUS router model and firmware. Adding many saved OpenVPN profiles is not the same as having all of them connected at once.

Create separate profiles with clear names, such as Nord-US-WG, Proton-US-OVPN, and Surfshark-UK-OVPN.
Enable only the profiles you need and confirm each shows connected.
Assign each client device to the appropriate active profile; avoid applying conflicting default routes.
Verify each device’s observed IP and server country. If one tunnel fails, test it individually with the other profiles temporarily disabled.

ASUS reference: How VPN Fusion handles multiple tunnels and devices.

Confirm a Device Is Actually Using the VPN

In VPN Fusion, confirm the target profile’s connection status is active.
Check the device’s assignment in the ASUS VPN Fusion interface.
On that same device, visit IPLeak.net or another public-IP checker.
Compare the reported public IP and location with the VPN server assigned to that device.
If the device still shows your ISP IP, test with its own VPN app and iCloud Private Relay / Private DNS / browser proxy disabled. Use Device Settings That Can Interfere With Your Router VPN.

Quick isolation test

Turn off VPN Fusion routing for a test device and confirm ISP internet works.
Turn on just one known-working VPN profile for that device.
Recheck public IP. If it now works, reintroduce other profiles/assignments individually.

Want a Separate WiFi Network With or Without VPN?

Rather than selecting devices one at a time, supported ASUS routers offer Guest Network Pro or Network > VPN Network features that can associate a WiFi SSID with VPN routing. See ASUS Guest WiFi With or Without VPN: Setup Guide.

On routers with only the traditional Guest Network feature, available VPN-by-SSID behavior may differ; do not assume the standard guest SSID bypasses a network-wide VPN default.

Upgrade your ASUS router

Explore the Latest WiFi 7 ASUS FlashRouters

Looking for a newer ASUS router? Browse WiFi 7 models available from FlashRouters and compare features to find the right fit for your home or office. VPN Fusion and other features vary by router model and firmware.

Shop ASUS WiFi 7 Routers →

NordVPN Setup for AsusWRT: Token, WireGuard & OpenVPN

TeamFlashRouters · Oct 15, 2025 ·

Set up NordVPN on an ASUS router using AsusWRT VPN Fusion. Supported ASUS firmware offers three different VPN types: NordVPN (access-token integration), WireGuard (downloadable .conf file), and OpenVPN (manual service credentials plus an .ovpn file). Choose the method that matches your needs and your router’s available options.

All configuration is completed directly through your ASUS router’s administration interface using VPN Fusion. Before starting, make sure your router is connected to the internet, your firmware supports VPN Fusion, and you have an active NordVPN subscription.

Which NordVPN Option Should You Choose?

1. NordVPN

NordVPN access token and a country/region dropdown. The built-in ASUS/NordVPN integration is the simplest approach if you only need a country, not an exact server file.

Follow token setup →

2. WireGuard

Import a NordVPN .conf configuration file for a server selected in Nord Account. Useful when you want a downloaded profile for a particular server.

Follow WireGuard setup →

3. OpenVPN

Import a NordVPN .ovpn server file and enter your separate manual service username and password. Also used for NordVPN Dedicated IP.

Follow OpenVPN setup →

Option 1: NordVPN Dropdown — Token-Based NordLynx

Select the NordVPN type inside VPN Fusion. This is the integrated token-based setup and offers a country/region selection, rather than a manually imported server file.

In Nord Account, open NordVPN Access Tokens and complete email/account verification if requested.
Generate an access token, choose an expiry period if NordVPN offers that setting, and copy the token immediately (it may only be displayed once).
On your ASUS router, open VPN > VPN Fusion > Add profile.
Set VPN Type to NordVPN. Name the profile, select your preferred Region, and paste the token.
Choose Apply to all devices if you want it as the default route, or assign only selected devices (see the VPN Fusion guide below).
Click Apply and Enable / Apply all settings, as shown in your firmware, and verify the profile connects.

ASUS VPN Fusion NordVPN VPN type with Region and Token fields — Keep: existing ASUS NordVPN region/token form (remove any private token before publishing).

Need a specific server? Use the separate WireGuard file method below or the OpenVPN configuration-file method. Do not expect the token-based country dropdown to accept a .conf or .ovpn file.

Option 2: WireGuard Dropdown — Import a NordVPN .conf File

NordVPN now provides downloadable WireGuard configuration files through its manual server recommendation page. This is different from the built-in NordVPN token option in VPN Fusion.

Sign in to Nord Account and open NordVPN Server Recommendation.
Choose your preferred country and server; use the available filters if you need to narrow the list. Select a currently available server.
Choose Get setup configuration, select WireGuard from the protocol menu, and click Download config. Save the downloaded .conf file.
In your ASUS router settings open VPN > VPN Fusion > Add profile, then set VPN Type to WireGuard (not NordVPN).
Use the ASUS Import configuration / file-import control to select the NordVPN .conf file. Confirm the imported parameters and save the profile.
Choose the target devices or enable the default/all-devices route. Click Apply and Enable, then check the VPN status and your public IP.

NordVPN’s official instructions: How to download WireGuard and OpenVPN configuration files.

Option 3: OpenVPN Dropdown — Credentials + .ovpn File

OpenVPN requires two separate items: the configuration file for your desired server and NordVPN’s manual service credentials. Your normal Nord Account email/password is not the correct credential pair for this method.

Open NordVPN Manual Service Credentials and copy the service username and service password after any required verification.
Open NordVPN OpenVPN Configuration Files and choose a server/location. Download its UDP .ovpn file, or TCP .ovpn if UDP does not work on your network.
On ASUS, go to VPN > VPN Fusion > Add profile and set VPN Type to OpenVPN.
Enter a connection name, Import .ovpn file, and paste the NordVPN manual service username and password in the corresponding fields.
Choose devices or Apply to all devices, then click Apply and Enable. Confirm VPN Fusion shows a successful connection.

ASUS VPN Fusion OpenVPN VPN type with OVPN import and username password fields — Keep: existing ASUS OpenVPN profile form. New screenshots should use a larger clean capture if available.

Server selection: The location is controlled by the server named in the imported .ovpn file. To switch locations, import another server file or use a separate OpenVPN profile.

NordVPN Dedicated IP — OpenVPN Only

If you have purchased and activated the NordVPN Dedicated IP add-on, use your specific Dedicated IP OpenVPN configuration file. Do not select the ordinary NordVPN token integration or a regular shared server.

In your Nord Account, open the Dedicated IP details and download the assigned server’s OpenVPN UDP or TCP configuration file, following NordVPN Dedicated IP manual configuration instructions.
Open NordVPN Manual Service Credentials and copy the manual username and password.
In ASUS VPN Fusion > Add profile, choose OpenVPN.
Import the Dedicated IP .ovpn file, enter manual service credentials, save, enable, and verify the public IP matches your assigned Dedicated IP.

Assign Devices, Verify the VPN, and Troubleshoot

One VPN for everyone, or different VPNs for different devices?

VPN Fusion lets you use a VPN profile as the default connection for all devices or assign specific client devices to different profiles. Some supported ASUS models can maintain one WireGuard tunnel alongside multiple OpenVPN profiles, but the number of simultaneous tunnels is model/firmware dependent; creating multiple profiles does not mean all can be active simultaneously.

For step-by-step device assignments, default routing, profile conflicts, and bypassing the VPN, see How to Use ASUS VPN Fusion and Assign Devices to VPN Profiles. For a dedicated WiFi network with VPN or ISP routing, see ASUS Guest Network VPN / No-VPN Setup.

Verify the IP of the actual device

Confirm your chosen profile shows Connected in VPN Fusion.
Join the ASUS WiFi or LAN using a device that is actually assigned to that VPN profile.
Open NordVPN IP Address Check and compare the public IP/location with the intended server or Dedicated IP.
If the device shows an ISP IP, first check Apply to all devices and the per-device assignments in VPN Fusion.
Disconnect a NordVPN app, Apple iCloud Private Relay, browser VPN/proxy, or other device-level network service during testing. Follow Router VPN Shows Wrong IP? Check Device Settings.

If VPN Fusion will not connect

Temporarily disable the failing profile and confirm the ASUS router works using its normal ISP internet connection.
For NordVPN type, check that the access token is valid and hasn’t expired; regenerate if needed.
For WireGuard, import a fresh .conf from the Nord server recommendation page and make sure the profile is enabled.
For OpenVPN, double-check manual service credentials (not website credentials) and try a different server file or TCP instead of UDP.
Check that device-assignment rules point to the intended active profile, then retest with one clean device.

Upgrade your ASUS router

Explore the Latest WiFi 7 ASUS FlashRouters

Shop ASUS WiFi 7 Routers →

Select devices for VPN on Roqos

Dave · Dec 16, 2021 ·

Select specific devices that you want to pass through the Roqos Core’s VPN tunnel. This is a great solution in instances of streaming services blocking incoming VPN connections or other VPN related service interruptions.

1. Click the navigation menu and select VPN > VPN Out.

2. Select Included Devices.

3. In the Select devices for your VPN Out connection dropdown select Include selected devices and check the devices you want to connect to VPN. Click Save.

Now these devices will be connected to the VPN tunnel. All other devices will bypass the VPN tunnel and use your ISP’s IP Address.

Device Settings That Can Interfere With Your Router VPN

Dave · Oct 6, 2026 ·

If your router VPN is connected and working on other devices but one phone, tablet, computer, or streaming device shows the wrong IP address, wrong location, cannot access certain websites, or behaves differently, check the affected device before changing the router.

VPN applications, privacy features, custom DNS settings, antivirus software, firewalls, browser settings, and corporate security software can all change how traffic is handled directly on a device.

This guide applies to all FlashRouter types and VPN providers.

Start Here: Is the Problem the Router or One Device?

Before changing your router VPN configuration, compare the affected device with another device connected to the same FlashRouter.

If several devices show the correct VPN IP and location while only one device does not, the router VPN is already demonstrating that it can route traffic through the VPN.

Focus troubleshooting on the affected device.

If every device connected to the FlashRouter has the same VPN problem, continue with router-level VPN troubleshooting instead.

Privacy Hero users should also check the Privacy Hero dashboard. If the VPN itself displays Failed, Disconnected, Connecting, or a timeout error, troubleshoot that connection before changing device settings.

Disconnect VPN Applications Running on the Device

Do not run a VPN application directly on the device while troubleshooting a VPN running on your router.

This includes applications from NordVPN, ExpressVPN, Surfshark, Proton VPN, IPVanish, Private Internet Access, Mullvad, corporate VPN providers, and other VPN services.

If both the router VPN and device VPN are active, the device VPN can take control of that device’s traffic after it passes through the router.

This can cause:

An unexpected public IP address.
An unexpected VPN location.
Websites or applications not loading.
Streaming region problems.
DNS problems.
Slow or unstable connections.
One device behaving differently from other devices on the same router.

Disconnect the VPN application completely before testing the router VPN.

Closing the VPN app window may not disconnect the VPN. Confirm in the application or device network settings that the device-level VPN is actually disconnected.

iPhone and iPad: Check Private Relay and Limit IP Address Tracking

Apple devices include privacy features that can change how supported internet traffic is handled and make router VPN testing more difficult.

Limit IP Address Tracking

To temporarily disable Limit IP Address Tracking for your FlashRouter WiFi network:

Open Settings.
Select Wi-Fi.
Tap the information button next to the FlashRouter WiFi network.
Find Limit IP Address Tracking.
Turn it Off.
Disconnect from WiFi and reconnect.
Test the connection again.

This setting is configured per WiFi network, so make sure you are changing it for the FlashRouter network being tested.

iCloud Private Relay

iCloud Private Relay can also alter IP address visibility for supported traffic.

For troubleshooting:

Open Settings.
Tap your Apple Account/name.
Select iCloud.
Select Private Relay.
Temporarily turn Private Relay Off.
Reconnect to the FlashRouter.
Test the IP address and connection again.

These settings can be restored after testing.

Android: Check Private DNS and Always-On VPN

Android devices can have DNS and VPN settings that operate independently of the router.

Private DNS

Android Private DNS can send DNS requests to a selected DNS provider instead of relying solely on the DNS configuration supplied by the router.

If you are troubleshooting DNS, website access, streaming, filtering, or location behavior:

Open Settings.
Select Network & internet.
Select Private DNS.
Temporarily select Off.
Save the setting.
Reconnect to the FlashRouter WiFi.
Test again.

Android menus vary by manufacturer and Android version. Search the device Settings for Private DNS if necessary.

Always-On VPN

An Android VPN application can be configured to automatically reconnect even after you believe the VPN has been disconnected.

Open Settings.
Select Network & internet.
Select VPN.
Select the configured VPN.
Disable Always-on VPN while testing.
Check whether Block connections without VPN is enabled and temporarily disable it if necessary for testing.

Then reconnect to the FlashRouter and test the router VPN again.

Check Antivirus, Firewall, Browser, and Work Security Settings

If the problem affects a computer or only occurs in one browser, check for software that modifies network traffic directly on the device.

Antivirus and Internet Security Software

Security applications may include network features such as:

Web Protection.
Safe Browsing or Secure Web.
Network Protection.
DNS Protection.
HTTPS scanning.
Tracking protection.
Built-in VPN services.
Firewall controls.

Temporarily disable the relevant network protection feature and test again. You do not normally need to disable the entire antivirus product.

Third-Party Firewalls

A third-party firewall can block applications, DNS requests, VPN-related traffic, or specific network interfaces.

Temporarily disable the firewall and test the connection. If the problem disappears, re-enable the firewall and review its network rules.

Browser VPN, Proxy, and Secure DNS

Browsers and browser extensions can also use their own:

VPN services.
Proxy connections.
Secure DNS or DNS-over-HTTPS.
Privacy or filtering extensions.
Location-changing extensions.

If the problem occurs only in one browser, test another browser without extensions or custom networking settings.

Work and Corporate Devices

Company-managed computers and mobile devices may use corporate VPN clients, DNS filtering, web filtering, endpoint security, device-management profiles, or zero-trust networking software.

These systems may intentionally override the local router’s network behavior.

If a personal device works correctly on the same FlashRouter while a company-managed device does not, the company security configuration may be responsible.

Run a Clean Router VPN Test

For the cleanest test, temporarily remove device-level networking variables and let the FlashRouter VPN handle the connection.

FlashRouter VPN: On
Device VPN: Off
iCloud Private Relay: Off while testing
Limit IP Address Tracking: Off while testing
Android Private DNS/custom DNS: Off while testing
Always-On VPN: Off while testing
Third-party network filtering: Off while testing

Then:

Disconnect the affected device from WiFi.
Reconnect it to the FlashRouter.
Open a fresh private/incognito browser window.
Check the device’s public IP address and location.
Compare the result with another device connected to the same FlashRouter.

If the second device shows the correct VPN IP but the affected device does not, continue troubleshooting settings or software on the affected device.

If all devices show the same incorrect IP address or all devices fail to use the VPN, continue with router-level VPN troubleshooting.

Privacy Hero VPN Connected but Device Still Shows the Wrong IP?

Privacy Hero provides device-level VPN controls. Make sure the affected device is actually assigned to use the VPN.

Open app.privacyhero.com.
Open the Devices section.
Select the affected device.
Confirm VPN protection is enabled for that device.
Disconnect any VPN application running directly on the device.
Test the public IP address again.

If other Privacy Hero devices show the correct VPN IP and only one device remains incorrect, continue with the device-level checks above.

Related FlashRouters Guides

Privacy Hero Creating User Profiles and Adding Devices to Profiles

TeamFlashRouters · Apr 3, 2023 ·

Your Privacy Hero router uses Cloud Based router management which means you can access the router settings from anywhere on any device that has an internet connection. You can follow these steps while connected to your phone, other Wi-Fi network, or the Privacy Hero network.

The Privacy Hero router allows for User Profile creation. Doing so allows you to group different user’s devices together to customize the following rules:

Internet access scheduler (Bedtime settings)
Internet Safe Search
Youtube Safe Search
Block Adult Content

This makes the Privacy Hero a great router option for families and internet addicts.

1. From any device that has a browser such as a computer, smartphone, or tablet visit app.privacyhero.com

2. Enter your Privacy Hero account email and password. Click Login.

If you have not created your Privacy Hero account yet please follow these instructions.

3. Click the Profiles symbol.

4. Click Create New Profile.

5. Set the Profile Name, select the Profile Icon, and click Save.

6. Click the name of the User Profile.

7. Select Devices.

8. Select Manage Devices.

9. If you have not already connected your devices to the Privacy Hero network via wireless or ethernet you can do so now. Refresh the page after connecting a new device and it will appear in the list where you can select Move to “Profile Name” to move the device to the appropriate profile. By default new devices are in the Shared profile.

If your devices were already connected to the Privacy Hero network and you are having issues identifying them I would recommend the following steps:

Click the Devices icon.
Select the device in question.
Click Nerd and note down the IP Address of the device.
Go to the network settings of your device where it will display the local IP Address and match that to the IP Address noted in Privacy Hero.

This is how you can identify a device that is not properly named.

10. Now that your devices are assigned you can set the Bedtime Settings (Internet Scheduler) and Safe Surf settings for your new Profile.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

ASUS Guest WiFi With or Without VPN: Setup Guide

Dave · Oct 26, 2026 ·

On supported ASUS routers, you can create a separate WiFi network (SSID) that routes connected devices through a VPN profile, while another network uses the regular ISP connection. This is useful for streaming TVs, guests, work devices, and family members who need different VPN behavior.

The available controls depend on your ASUS model and firmware. Newer routers may call the feature Guest Network Pro or simply Network; older routers may only have Guest Network, which does not offer the same VPN-by-SSID options.

What You Need Before Starting

Connect to your ASUS router and open http://www.asusrouter.com or its LAN IP. For login details, see AsusWRT Router Access Guide.
For a VPN WiFi network, first set up and verify at least one connected VPN profile under VPN > VPN Fusion. Choose a supported VPN provider from the AsusWRT VPN Setup Guides, then review How to Use ASUS VPN Fusion: Assign Devices and Multiple VPNs for routing options.
Look for Guest Network Pro, Network, or VPN Network in your ASUS firmware. If you only see the traditional Guest Network screen, read the legacy note below before proceeding.

Create a Dedicated WiFi Network That Uses the VPN

Preferred route for supported ASUS models: create a VPN Network SSID so all devices joining that SSID use the chosen VPN without individual device assignments.

Open Guest Network Pro > VPN Network, or the equivalent Network > Add Network > VPN Network menu in newer firmware.
Choose a recognizable WiFi name such as Home-VPN and a strong WiFi password.
Select the configured, connected VPN Fusion client/profile and enable VPN routing for that network.
Review any options for local-network access, guest isolation, and bands, then click Apply.
Connect a test device to the new Home-VPN WiFi SSID and check its public IP.

ASUS official walkthrough: Guest Network Pro / VPN Network Setup.

Alternative: Assign a VPN to an Existing Guest Network Pro SSID

In Guest Network Pro / Network, open the existing Guest Network profile.
Select the VPN tab, enable VPN routing, and choose your existing VPN Fusion client.
Click Apply, reconnect a device to the guest SSID, and verify the VPN IP.

ASUS also documents this path: Assign a VPN to Guest Network Pro.

Create a Separate WiFi Network Without a VPN

Use a guest/secondary network routed through the regular ISP internet connection for devices that should not use the VPN.

Under Guest Network Pro / Network, add a normal Guest Network or other suitable network profile (not the VPN Network preset).
Set a clear name such as Home-ISP and secure it with a strong password.
In that network profile’s VPN tab, leave the VPN assignment disabled or choose the Internet/ISP path if your firmware offers it.
Check your VPN Fusion default connection and device policies. If a VPN is set to Apply to all devices, simply turning off the Guest Network’s VPN toggle may not guarantee an ISP bypass on every firmware. Configure an explicit ISP/bypass route where supported.
Save, join the Home-ISP network with a test device, and confirm the public IP matches the ISP connection.

Confirm Each WiFi Network Uses the Intended Internet Route

Connect a phone or laptop to the VPN WiFi SSID. Disable any VPN app or iCloud Private Relay on the device for this test.
Visit WhatIsMyIPAddress.com and note the public IP and location. This should reflect your selected VPN endpoint.
Disconnect and join the ISP WiFi SSID. Repeat the IP check; it should now show the ISP’s public internet route.
If both SSIDs show the same IP, review the VPN Fusion default profile, guest-network VPN assignment, and any device-specific rules.

Common Issues and What to Check

I only see “Guest Network,” not “Guest Network Pro” or “VPN Network”

Your router may use older firmware or lack this feature. Traditional Guest Network creates a separate WiFi SSID, but the VPN routing option may not exist. Use VPN Fusion device assignments as an alternative rather than assuming the guest network automatically bypasses or uses the VPN.

Every network still uses the VPN

Check whether Apply to all devices is enabled in VPN Fusion. If it is, verify that the guest profile actually overrides the default route on your firmware. You may need an explicit per-network or per-device ISP rule.

A phone reports the wrong IP although the guest VPN profile is correct

Temporarily disable device-level VPN apps, iCloud Private Relay / Limit IP Address Tracking, browser proxy, or Private DNS settings, then reconnect. See Device Settings That Interfere With Router VPN.

Guest devices cannot reach local printers or other LAN devices

Check the guest network’s intranet access / network isolation settings. Changing isolation affects LAN access, not necessarily VPN selection. Keep guests isolated unless LAN access is actually needed.

Upgrade your ASUS router

Explore the Latest WiFi 7 ASUS FlashRouters

Shop ASUS WiFi 7 Routers →

Roqos VPN Connected, but my device IP is unchanged

TeamFlashRouters · Mar 8, 2022 ·

If your VPN Out page in your Roqos settings is reporting that you are Connected to your VPN provider but your IP Address and location have not changed when you visit What is my IP address? follow the below checklist.

Double check that your device is connected to the Roqos network

Since the Roqos UI is being accessed securely via the cloud you can change the settings while your device is not connected to the Roqos network. This would result in your IP Address not updating when you connect to VPN.

Make sure that you are connected to your Roqos WiFi network or from an ethernet port on the back of the Roqos directly to your device and not another network.

Assign Devices To Connect To VPN in the Roqos

By default there are no devices assigned to the VPN tunnel. To assign devices to the Roqos’ VPN connection.

1. Login to your Roqos UI.

2. Select the VPN tab on the left hand menu and select VPN Out.

3. Click Included Devices. From this page you can choose if all devices should connect to VPN or only certain devices.

4. From the dropdown select Include all devices if you want every device that connects to the Roqos to connect to VPN or if you only want specific devices to connect to VPN while others bypass the VPN connection select Include selected devices from the dropdown and then toggle the sliders for the devices you want connected to VPN. Click Save.

Turn off VPN device applications

Connecting to VPN via a device application or browser extension at the same time while connecting via your Roqos is not recommended. Doubling up on VPN connections can cause issues with speeds and stability.

When you are connected to the Roqos VPN network at home you should leave all VPN applications and extensions disconnected and unopened.

Parental Controls on Roqos

Dave · Dec 16, 2021 ·

The Roqos Core includes a suite of user access settings which can be used as Parental Controls.
You can create individual user profiles and assign specific devices. Using these profiles you can restrict access, block certain content, or even monitor internet usage if you choose to do so.

Create User Profiles

Using the navigation pane on the left of the screen, select USERS.
Select the ADD USER button at the top of the menu.
Create a name to identify the user. You may also add a photo or picture to associate with this user however this is optional.
Select the SAVE button at the bottom of the menu.

Assign Devices

Once you have created a user, you must assign one or more devices to the user.
Using the navigation pane on the left of the screen, select USERS. Choose a user from the list.
You are now in the USER/GROUP PROFILE menu.

Select DEVICES.
Select ADD DEVICE.

The ADD DEVICES menu lists all devices which are currently or previously connected to the Roqos. You cannot assign a device to a user unless it has been connected to the Roqos.
Use the check box to select one or more devices and then select the SAVE button to assign the device to the user.

A device can only be assigned to one user. Access restrictions you place on a user such as scheduled internet access or content restriction will apply to all devices assigned to that user regardless of who in your home is actually using the device at that time.

Turn Off Internet Access

Using the navigation pane on the left of the screen, select USERS. Choose a user from the list
You are now in the USER/GROUP PROFILE menu
Use the PAUSE button next to the user’s name to halt all internet access to the devices assigned to this user. Conversely, you can restore internet access by pushing the PLAY button here as well.

Schedule Internet Access

Using the navigation pane on the left of the screen, select USERS. Choose a user from the list.
You are now in the USER/GROUP PROFILE menu.
Select SCHEDULE PAUSES. You can create multiple schedules for each user to pause their internet access on a daily recurring basis for every day of the week.

Enable Content Filters

Using the navigation pane on the left of the screen, select USERS. Choose a user from the list.
You are now in the USER/GROUP PROFILE menu.
Select FILTER. Use existing category and content filters provided by Roqos and customize with your own blocked and allowed site lists.
Select SAVE.

Monitor Internet Usage

Using the navigation pane on the left of the screen, select USERS. Choose a user from the list.
You are now in the USER/GROUP PROFILE menu.
Select USAGE HISTORY. Access usage data for all devices assigned to this user. This includes websites visited and activity times.

Please note that in order to collect device information, you must enable this functionality on your Roqos. It is disabled by default.

Using the navigation pane on the left of the screen, select ADVANCED SETTINGS.
Select MISCELLANEOUS.
Activate the COLLECT USER INTERNET USAGE and COLLECT DEVICE DATA USAGE options.

TROUBLESHOOTING

Still having issues? Visit our Troubleshooting section to diagnose common problems here.

Troubleshoot Here

Sales FAQs

admin · Jan 29, 2019 ·

Sales FAQs

Can My Router Be Preconfigured With My VPN Information?

Plug and Play VPN Support

Yes you can!

To receive a plug and play with VPN device, you will need to provide our team with the credentials from your VPN provider subscription.

IMPORTANT NOTE: This is not required but recommended for users who wish to have the simplest, most seamless experience when the FlashRouter arrives. You can always change the password when the device arrives if you wish as well.

To have your router VPN preconfigured:

Check the “Connect To VPN For Me” box under VPN – Preconfiguration on the Product Page during check out.
Select your VPN provider. If you don’t see your VPN listed select “Other” and you will see an additional field to input who your provider is.
You’ll receive an email after purchase with detailed instructions. If you have any questions our team is happy to help!

Please note: If you do give a server location, we will automatically start the device with the closest/optimal server for the location we are shipping the device by default. A location has to be added to the initial configuration for plug and play encryption security to occur on the device.

Privacy Hero 2 Only:

While our team isn’t able to pre-configure the Privacy Hero 2 VPN Router before shipping it out since you’ll have to make a Privacy Hero user account and register your router, we can assist you with the VPN set up process once you receive the router and create your Privacy Hero user account via 1-on-1 remote session, email, or live chat on our site.

You can also use our step-by-step Privacy Hero VPN Router Setup Guide to complete the process.

Can I Use My Dedicated IP Address With A FlashRouter?

Dedicated IP Addresses from NordVPN, SurfShark, & TorGuard are supported on almost all of our FlashRouter options.

Check out our Dedicated IP Addresses Blog Post for more details!

Can I Use A FlashRouter With My Current Mesh System?

Yes!

You will be able to connect the FlashRouter of your choosing to your current mesh router via ethernet port as shown below:

ISP Modem/Router —- FlashRouter (VPN) —- Main Mesh Router (VPN from FlashRouter)

This setup will allow you to keep your mesh network with added VPN protection, as well as add the FlashRouter wireless network for your devices.

You can disable the wifi on the FlashRouter also if you only wanted to use the mesh network for wifi.

Can You Flash My Router and Connect me to VPN?

At FlashRouters, we offer expert router flashing and VPN configuration services through our Flash My Router plans. Whether your router needs custom firmware flashing or just a VPN configuration, we ensure it’s set up for maximum security, privacy, and streaming performance with your chosen VPN provider.

The appointment will take place via remote software. During the appointment, our team will also answer any questions you may have about using the VPN on the router. Flashing is done out of the East Coast of the United States – we will do our best to accommodate your time zone difference if you are located in another part of the United States or another country.

👉 Explore our Flash My Router plans:
🔗 Flash My Router Plans

🔹 How It Works

✅ Flashing vs. Configuration: Some routers require custom firmware (flashing) to enable VPN, while others can be configured without flashing.
✅ Fully Optimized: Our team ensures your router is ready to securely connect to your VPN, block ISP tracking, and enhance your streaming experience.
✅ Remote Assistance Available: Get expert help setting up your VPN connection remotely if needed.

Flashing vs. Configuration: Router Compatibility

At FlashRouters, we handle VPN setup differently based on your router brand and model. Some routers require flashing custom firmware (like DD-WRT or AsusWRT-Merlin), while others can be configured without flashing.

🛠 Router Setup Types by Brand

🔹 Flashing Required (Custom Firmware Installation)

These routers require firmware flashing (DD-WRT or AsusWRT-Merlin) to enable VPN compatibility.

Asus – Flashed with AsusWRT-Merlin or updated to the latest AsusWRT build. Some models only require configuration.
Linksys – Flashed with DD-WRT firmware.
Netgear – Flashed with DD-WRT firmware.

🔹 Configuration Only (No Flashing Required)

These routers have built-in VPN support and only require proper setup.

TP-Link – Configured without flashing.
GL.iNet – Configured without flashing.
Cudy – Configured without flashing.

📌 Other brands are not supported at this time. If you have a different router, we recommend checking out our pre-flashed router options.

✅ Supported VPN Providers

We work with a wide range of VPN providers, including:

NordVPN
ExpressVPN
Surfshark
CyberGhost
IPVanish
Private Internet Access (PIA)
VyprVPN
ProtonVPN
PureVPN
Windscribe
IVPN
Mullvad
StrongVPN
AzireVPN
AstrillVPN
HotspotShield VPN

(If your provider isn’t listed, reach out – we may still be able to support it!)

🔗 Get Started Today!

👉 Explore our Flash My Router plans:
🔗 Flash My Router Plans

🔹 Need help selecting the right option? Contact our support team! We’re happy to assist.

How Can I Add The 1 Year NordVPN Service From My FlashRouters.com Order To My Current NordVPN Account?

You can easily combine the free 1 year of NordVPN included with your FlashRouter purchase once you receive the NordVPN Activation Code Email from FlashRouters.com. The email is typically received within 24 hours of order completion and will contain a link as well as an activation code.

This code can be entered at nordvpn.com/activate with the email address associated with your current NordVPN account to add the 1 year of free service to your existing service.

Privacy Hero 2 Only:

You can easily combine the free 1 year of NordVPN included with the Privacy Hero 2 VPN Router during the router activation process.

After activating the router, you’ll receive a NordVPN activation code within your privacy hero account dashboard. This code can be entered at nordvpn.com/activate with the email address associated with your current NordVPN account to add the 1 year of free service to your existing service.

What Are the Differences Between New, Recertified, And Open Box FlashRouters?

New

Direct from manufacturer, in new box.
Custom flashed on demand at time of the order.
30 Day Satisfaction Guarantee / 1 Year Warranty.

Recertified (RM)

Direct from manufacturer/reseller, may be reboxed.
Custom flashed on demand at time of the order.
Specialists tested to guarantee same functionality as NEW routers.
30 Day Satisfaction Guarantee / 1 Year Warranty.

Open Box

Limited quantity, discount items reboxed that may have cosmetic imperfections.
Same testing and functionality level and New and RM.
30 Day Satisfaction Guarantee / No Warranty.

Will a FlashRouter Work With My Internet Service Provider?

US Customers (Single Router Solution):

Almost all Internet Service Providers(ISPs) require a modem in place to establish a connection to their service, however a modem by itself doesn’t provide the wifi connectivity needed in the home or office. A FlashRouter can connect directly to all known modems provided by major ISPs to create a wireless network so long as there is an Ethernet port on the modem to connect to the FlashRouter Internet port.

US Customers (Dual Router Solution):

Yes, FlashRouters are compatible with your ISP in what is called a Dual Router Set Up.

For this type of setup, you would use your current router or modem router to connect to your local ISP while using a FlashRouter to connect to your VPN. This is recommended as you will not overhaul your network with a new router, and you will be able to use your selected VPN service on the devices you wish to use it with.

This set up would result in the creation of two networks, which can be seen as the “Local Network” and the “FlashRouter Network”. All devices connected to the FlashRouter Network will go through the VPN service.

For any device you would prefer to use without a VPN, you can connect to the local network. The chain of devices would be connected from LAN ton your modem or modem/router to WAN on the FlashRouter, with your current router connected to the FlashRouter via Ethernet cable.

International Customers (Single Router Solution):

Almost all Internet Service Providers (ISPs) require a modem in place to establish a connection to their service, however a modem by itself doesn’t provide the wifi connectivity needed in the home or office. A FlashRouter can connect directly to all known modems provided by major ISPs to create a wireless network so long as there is an Ethernet port on the modem to connect to the FlashRouter Internet port.

International Customers (Dual Router Solution):

ISPs should all be compatible. Some providers require VLAN tagging/VID settings when wiring directly from modem to FlashRouter.

What Stock Firmware Features Will I Lose If I Flash My Router

Open Source firmware like DD-WRT or Assu Merlin has many features equivalent to what stock firmware has, in addition to adding new features to a router. However, some features are lost from the stock firmware when a router is flashed.

These are typically features that are put into the stock firmware by the manufacturers themselves. Things like the Linksys App and the NetGear Genie are examples of what would not be available or compatible on the router after flashing.

Most routers also have a WPS button. By default, the WPS button’s functionality is disabled when a router is flashed as it can be vulnerable and a security risk. It can be re-enabled by following this guide but we do not recommend it.

Does a FlashRouter or Service Plan Purchase Include a VPN Subscription?

A subscription to a VPN does not come with a FlashRouter or Service plan. If you are planning to use a VPN, you would need to sign up for one separately, directly from a provider.

Need assistance in finding a VPN Provider? Please visit our recent VPN Provider Best Seller List.

Plug and Play VPN Support

Unlike other VPN Router providers, FlashRouters is proud to offer free VPN service integration with any purchase.

To receive a plug and play with VPN device, you will need to provide our team with the credentials from your VPN provider subscription.

IMPORTANT NOTE: This is not required but recommended for users who wish to have the simplest, most seamless experience when the FlashRouter arrives. You can always change the password when the device arrives if you wish as well.

To have your router VPN pre-configured:

Select Yes from the “Want Your Router Preconfigured?” on the Payment Page during checkout.
Select your VPN provider. If you don’t see your VPN listed select “Other” and you will see an additional field to input who your provider is.
Enter your your VPN username and password
For ExpressVPN Firmware Routers there will be an additional box for your activation code.

Please note: If you do not enter a server location request in “Order Comments”, we will automatically start the device with the closest/optimal server for the location we are shipping the device by default. A location has to be added to the initial configuration for plug and play encryption security to occur on the device.

Can I Use A FlashRouter To Work From Home?

Yes! A large number of our customers use their FlashRouters to “work from home” no matter where your travels take you. Check out our Working Remotely Blog Post for more details.

What is the Difference Between Business VPNs and VPN Services?

Location: VPN Services offer many server locations to encrypt your traffic through. They are located in several countries worldwide for creating a private VPN tunnel for your online activities. A business VPN connects to specific central servers for data or directly to your office, creating a direct tunnel for accessing sensitive work documents and information.

Logging: Most VPN services offer log-free connections for total anonymity and security when connected (it is important to check out their terms of service and privacy policy for full details). A business VPN is monitored and maintained by employers such as corporations, hospitals or universities.

Protection: VPN services secure your family’s personal data while using computers, SmartTVs and various Internet of Things devices. Business VPNs protect the data of the company while you are tunneling into work.

Are There VPN Service Providers That Offer VPN for Business?

There are in fact several trusted VPN providers that have services specially tailored for business use. NordVPN Teams and VyprVPN for Business offer a full suite of solutions like user management tools, dedicated IPs, personal product managers, global server access, business pricing, and more.

These solutions allow you to quickly deploy a safe and secure corporate network without building and maintaining your own servers. If you are a small business looking to quickly secure remote workers as they shift to work from home, and you do not have an in-house IT expert, then you should consider NordVPN Teams or VyprVPN for Business.

Even better, when choosing a business VPN provider like NordVPN or VyprVPN, employees can use routers with direct NordVPN and VyprVPN integration already included through the FR Privacy App. Meaning that a full network kill switch, routing by device, automatic connections, and more are all included as features with your business VPN connection.

Can I use a VPN on a FlashRouter With My Work/Corporate VPN?

Many of our customers have found that they can connect to both their corporate and personal VPN, however due to the variables beyond our control, we cannot guarantee this for every unique situation.

Using two VPNs at once can lead to unpredictable results. Bouncing your network traffic to multiple servers before finally arriving at it’s intended destination can sometimes introduce speed and connection issues.

Please consider that some employers and agencies are more vigilant regarding third party VPN use than others. There are tools readily available that detect the use of VPN services.

While these tools cannot decrypt and view your network traffic, they can tell your employer that you are potentially using a VPN, which can be against company policy.

If your corporate and personal VPN do not work together, then you can always set the computer using your work VPN to bypass the FlashRouter’s VPN tunnel by accessing the router admin panel for your device.

This way, your computer would only use the work VPN. Keep in mind however, your location would appear as your actual location to your work.

Every FlashRouter also comes with a 30 Day Satisfaction Guarantee.

If in the event you determine the FlashRouter is not working out for you, you can return the device within the first 30 Days. A $25 restocking fee does apply.

Can I Use a FlashRouter to Connect to a Dedicated Business VPN Network?

Of course! If you have an OpenVPN server running on a local machine or hosted on a cloud provider like Amazon Web Services (AWS), FlashRouters can create a custom router client configuration to connect the entire router and all connected devices to your OpenVPN server. Instead of employees connecting device-by-device, a router-based VPN connection allows for always-on secure VPN tunneling.

Our service team is here to work with you to test and ensure compatibility before purchasing. Interested in a router based custom client VPN solution for your remote workers? Please do not hesitate to contact us.

And, if you’re looking for a specific router, take a look at some of our most popular options!

How can I Reset the Password for My FlashRouters.com Customer Account?

To reset your password, you’ll want to click the “Account” icon in the upper right hand corner on our main website (Flashrouters.com). Once clicked, a menu will open where you can enter your login information, or select the “Forgot Password” button to trigger a reset email.

If you’re still having issues accessing your FlashRouters.com customer account after attempting a password reset, please reach out to us at support@flashrouters.com for further assistance.

What Payment Methods does FlashRouters Accept?

We accept Apple Pay, Google Pay, and all major cred/debit card providers on our payment method options page during checkout.

If you’d like to complete a purchase using PayPal as a payment method, please contact our team at support@flashrouters.com to request an invoice.

Can I Make Change/Update/Cancel My Order?

We strive to process and ship all orders within one business day. If you wish to make changes or cancellations, please contact us within 24 hours of placing your order at support@flashrouters.com with your order number and the changes you’d like to make.

While we will do our best to accommodate your request, please note that we cannot guarantee changes or cancellations.

Please note that if you need to update the shipping address, the order will require reapproval through our fraud prevention system with the new address.

Trouble Checking Out

Some customers have found that trying the methods below have helped solve any checkout errors they may have encountered:

⚡️Clearing cache
⚡️Refreshing web page
⚡️Switching web browsers
⚡️Using an incognito/private window
⚡️Confirming all billing information is accurate
⚡️Disable VPN if one is enabled
⚡️Disable Ad & Script Blockers if enabled
⚡️If you’re using a mobile device, switching to a computer or laptop would be ideal.

ExpressVPN Setup on Roqos

Dave · Dec 16, 2021 ·

Preparing for ExpressVPN Setup

Obtain your ExpressVPN login information

If you are not already an ExpressVPN user Sign Up Now.

1. Visit ExpressVPN’s website login page.

2. Successfully log in with your account information. Select More.

3. Select Manual Configuration and copy the Username and Password that are displayed on the right hand side of the screen.

Connecting to ExpressVPN in the Roqos Core

Access the Roqos Core UI

1. Login to the Roqos Core web app in a browser on any computer or smart device.

2. Click VPN from the navigation menu and then click VPN OUT.

3. Click the Connect to box.

4. In the Connect dropdown choose 3rd Party VPN Providers and for the VPN Provider dropdown choose ExpressVPN.

Enter your ExpressVPN information

In the Username and Password field enter the ExpressVPN OpenVPN Username and Password that you obtained.

ExpressVPN on FlashRouters Privacy App Setup - OpenVPN Specific Username and Password

Roqos VPN ExpressVPN enter username and password

Select an ExpressVPN server

Click the Server dropdown and type in or scroll to your preferred server location.

Click the Save button.

Connect to ExpressVPN

Once you click Save you will be returned to the VPN OUT menu.

Click the Connect button to start your ExpressVPN connection. Please be patient as the router connects your entire network through VPN.

Assign devices to connect to VPN

By default there are no devices assigned to the VPN tunnel. Click Included Devices. From this page you can choose if all devices should connect to ExpressVPN or only certain devices.

From the dropdown select Include all devices if you want every device that connects to the Roqos to connect to ExpressVPN. Then click Save.

If you only want specific devices to connect to ExpressVPN while others bypass the VPN connection select Include selected devices from the dropdown and then toggle the sliders for the devices you want connected to VPN. Click Save.

Verify a successful ExpressVPN connection

Make sure you are connected to the Roqos network via WiFi or ethernet connection on your device.

Visit ExpressVPN’s IP Check to verify your new IP Address and virtual location.

You should see Connected at the top of the page underneath ExpressVPN.

Connect to a different ExpressVPN server

To change your server click Disconnect on the VPN OUT page then return to the Connect To section to select a new server from the Server dropdown and click Save. Now click Connect once again on the VPN Out page.

Disconnect from ExpressVPN

To disconnect from ExpressVPN click the Disconnect button.

TROUBLESHOOTING

Still having issues? Visit the FR Privacy App Troubleshooting section.

Troubleshoot Here

NordVPN Setup on Roqos

TeamFlashRouters · Dec 24, 2021 ·

Preparing for NordVPN Setup

Obtain your NordVPN manual Username and Password

If you are not already a NordVPN user Sign Up Now.

1. Log in to your account on the NordVPN website.

2. Click NordVPN on the left hand side and then click Setup NordVPN manually.

3. Enter in the verification code that was sent to your email.

4. Copy and paste your NordVPN manual username and password to a secure location. This is the username and password you will enter into the router settings to connect to NordVPN.

Connecting to NordVPN in the Roqos Core

Access the Roqos Core UI

1. Login to the Roqos Core web app in a browser on any computer or smart device.

2. Click VPN from the navigation menu and then click VPN OUT.

3. Click the Connect to box.

4. In the Connect dropdown choose 3rd Party VPN Providers and for the VPN Provider dropdown choose NordVPN.

Enter your NordVPN information

In the Username and Password field enter the NordVPN OpenVPN Username and Password that you obtained.

Roqos NordVPN enter username and password

Select a NordVPN server

Navigate to NordVPN server recommendation page. Click Recommended server and select the country you want to connect to and note the server number that appears.

Click the Location dropdown and type in or scroll to the preferred server country.

Click the Server dropdown and type in or scroll to the server number that was recommended. Select the UDP version of the server.

Click the Save button.

Connect to NordVPN

Once you click Save you will be returned to the VPN OUT menu.

Click the Connect button to start your NordVPN connection. Please be patient as the router connects your entire network through VPN.

Assign devices to connect to VPN

By default there are no devices assigned to the VPN tunnel. Click Included Devices. From this page you can choose if all devices should connect to NordVPN or only certain devices.

From the dropdown select Include all devices if you want every device that connects to the Roqos to connect to NordVPN. Then click Save.

If you only want specific devices to connect to NordVPN while others bypass the VPN connection select Include selected devices from the dropdown and then toggle the sliders for the devices you want connected to VPN. Click Save.

Verify a successful NordVPN connection

Make sure you are connected to the Roqos network via WiFi or ethernet connection on your device.

Visit NordVPN’s website to verify your new IP Address and Protected Status at the top of the page.

You should see Connected at the top of the page underneath NordVPN.

Connect to a different NordVPN server

Disconnect from NordVPN

To disconnect from NordVPN click the Disconnect button.

TROUBLESHOOTING

Still having issues? Visit the FR Privacy App Troubleshooting section.

Troubleshoot Here

PrivateInternetAccess (PIA) Setup on Roqos

TeamFlashRouters · Dec 24, 2021 ·

Preparing for PIA Setup

Obtain your PIA login information

If you are not already an PIA user Sign Up Now.

1. Visit PIA’s website login page.

2. Successfully log in with your account information.

Connecting to PIA in the Roqos Core

Access the Roqos Core UI

1. Login to the Roqos Core web app in a browser on any computer or smart device.

2. Click VPN from the navigation menu and then click VPN OUT.

3. Click the Connect to box.

4. In the Connect dropdown choose 3rd Party VPN Providers and for the VPN Provider dropdown choose Private_Internet_Access.

Enter your PIA information

In the Username and Password field enter the PIA Username and Password that you logged in with.

Select a PIA server

Click the Server dropdown and type in or scroll to your preferred server location.

Click the Save button.

Connect to PIA

Once you click Save you will be returned to the VPN OUT menu.

Click the Connect button to start your PIA connection. Please be patient as the router connects your entire network through VPN.

Assign devices to connect to VPN

By default there are no devices assigned to the VPN tunnel. Click Included Devices. From this page you can choose if all devices should connect to PIA or only certain devices.

From the dropdown select Include all devices if you want every device that connects to the Roqos to connect to PIA. Then click Save.

If you only want specific devices to connect to PIA while others bypass the VPN connection select Include selected devices from the dropdown and then toggle the sliders for the devices you want connected to VPN. Click Save.

Verify a successful PIA connection

Make sure you are connected to the Roqos network via WiFi or ethernet connection on your device.

Visit PIA’s IP Check to verify your new IP Address and virtual location.

You should see Connected at the top of the page underneath Private_Internet_Access.

Connect to a different PIA server

Disconnect from PIA

To disconnect from PIA click the Disconnect button.

TROUBLESHOOTING

Still having issues? Visit the FR Privacy App Troubleshooting section.

Troubleshoot Here

ExpressVPN Setup for AsusWRT Firmware Routers

TeamFlashRouters · Apr 29, 2024 ·

You can connect to ExpressVPN on your AsusWRT router using OpenVPN.

Quick Options

OpenVPN: Download your preferred server .ovpn configuration file from the ExpressVPN website.

If you are not already a ExpressVPN user Sign Up Now.

EXPRESSVPN SETUP GUIDE FOR ASUSWRT

1. Log in to your account on the ExpressVPN website.

2. In the “Set up your devices” section, click More and select Manual Configuration from the menu options.

3. Copy the Username and Password that are displayed on the right

4. Download a server file from any of the available regions shown in the ExpressVPN Manual Configuration section (Americas, Europe, Asia Pacific, etc)

5. Log in to the Asus settings page by connecting to the Asus router’s WiFi (or wired LAN) on your computer. Then, enter 192.168.50.1 or asusrouter.com in the browser.

View our guide for more instructions on how to access AsusWRT firmware settings.

6. Navigate to the VPN tab and then click on the VPN Fusion tab, then click Add Profile

7. Fill in your NordVPN information then click Apply and Enable.

Connection Name: Choose a name for your ExpressVPN OpenVPN connection.
VPN Type: Select OpenVPN
Import .ovpn File: Upload the OpenVPN file that you downloaded.
Username and Password: Copy and paste your ExpressVPN manual service credentials from step 3.

8. You should now see the Profile say Connected, indicating that the NordVPN server is successfully connected to your router.

9. The VPN connection is automatically set to Apply to all devices.

If you only want certain devices to connect to the VPN, then turn off the VPN connection and switch off Apply to all devices.

Now click the pencil next to the Device section and select the devices (computer, phone, etc.) that you want to connect to VPN. Click OK and then click Apply all settings.

Connect your devices to the Asus router network and visit the ExpressVPN website, at the top it should display Your Status: Protected.
Visit ExpressVPN’s IP Check to verify your new IP address and virtual location.

🚫📱Do not run ExpressVPN apps on devices connected to your ExpressVPNrouter. Using the app at the same time as the router VPN may cause conflicts and connection issues.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

Why are some of my devices not connecting to the internet?

Dave · May 2, 2019 ·

Make sure you are not using any device VPN device application or proxy on devices that are connected to the FlashRouter’s network as this can cause a conflict. Make sure the FlashRouter’s VPN connection is the only active VPN connection in your network.
Check that static settings are not configured on your device.
Certain devices require port forwarding rules to be properly setup before full connectivity. This may apply to devices like VOIP or smart cameras. If this is the case you may need to contact the manufacturer for more specific information.
Check that the FR Privacy App feature for a device specific Kill Switch is not set for the device, and if kill switch is setup, then make sure the VPN connection is active.

Privacy Hero Bypass certain devices from VPN

TeamFlashRouters · Apr 3, 2023 ·

If you have certain devices in your network that you do NOT want connecting to VPN you can follow these steps to bypass these devices from the Privacy Hero’s VPN connection.

1. From any device that has a browser such as a computer, smartphone, or tablet visit app.privacyhero.com

2. Enter your Privacy Hero account email and password. Click Login.

If you have not created your Privacy Hero account yet please follow these instructions.

3. Click the Devices symbol.

4. Click the name of the Device you want to bypass from VPN.

5. Set the VPN toggle to Off. You can also do the same for Adblocking and Device Protection as needed.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

ProtonVPN Merlin WireGuard Setup

TeamFlashRouters · Mar 30, 2023 ·

Preparing for ProtonVPN Merlin Setup

Download your ProtonVPN .conf file

If you are not already an ProtonVPN user Sign Up Now.

1. Log in to your account on the ProtonVPN website.

2. Click Downloads.

3. Scroll down to WireGuard configuration and name the device FlashRouter.

4. Select Router as the platform.

5. Select the VPN options that best fit your needs. We typically use the settings as seen in the screenshot here if you are unsure.

6. Next select the server that you would like to connect to and click Create. At the top of the page you’ll see ProtonVPN’s recommended server which we recommend using unless you need to connect to a specific location.

If you need a specific server location find it in the list and click Create.

7. After clicking Create a new window will appear. Click Download to download the .conf file to your computer.

Merlin Router Setup for ProtonVPN

Login to Asus Merlin firmware settings in a browser on any computer or smart device connected to the Merlin FlashRouter’s network.

1. Navigate to the VPN tab.

2. Navigate to the VPN Client tab.

3. Select WireGuard as the VPN Protocol.

4. Click Choose file and select the .conf file you downloaded earlier. Then click Upload.

5. In the Description field enter in the name you’d like to use for this WireGuard Client profile. We typically advise entering in the location here. Our example server was in US-NY#61 so I have entered in ProtonVPN NY-61.

6. Set Enable WireGuard to Yes.

7. Click Apply at the bottom of the page and you should then see a Connected message appear.

8. By default no devices are assigned to the new active WireGuard connection profile. Click the VPN Director tab to assign specific devices to the new WireGuard profile. Your IP will not be changed on your devices yet.

9. On the VPN Director page click the + symbol next to Add new rule.

10. Select the new WireGuard profile in the Interface dropdown.

11. In the Local IP field enter in 192.168.50.0/24 if you want ALL devices connected to the FlashRouter’s network to use the WireGuard VPN connection. Click OK.

If you only want certain devices to connect to the WireGuard Client profile you have setting up instead of all the devices connected to the FlashRouter’s network please complete the instructions on our VPN Director guide.

12. Then click Apply at the bottom of the page.

Verify a successful ProtonVPN connection

Visit ProtonVPN’s IP Check from a private/incognito browsing window to verify your new IP address and virtual location.

In some cases you may notice that the location is not showing the same location as the server you have input in your router settings; this is because geo tracking tools are often tricked by VPN connections. As long as you see an IP address that is not the same as your normal Internet IP address then you are indeed connected to ProtonVPN.

How to change the ProtonVPN server

Follow the steps at the top of the page to obtain a new .conf file.
Then proceed with the settings same as initial setup.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

ExpressVPN TP-Link OpenVPN Setup

TeamFlashRouters · Apr 8, 2024 ·

Preparing for ExpressVPN TP-Link Setup

Obtain your ExpressVPN OpenVPN Information

If you are not already an ExpressVPN user Sign Up Now.

1. Log in to your account on the ExpressVPN website.

2. Successfully log in with your account information. Select More.

3. Select Manual Configuration and copy the Username and Password that are displayed on the right hand side of the screen.

4. Click the Server Location that you want to connect to. This will download a .ovpn file to your computer that we will use later on. There is no need to open the file. For this example I have selected New York but feel free to select any server listed there.

TP-Link Router Setup for ExpressVPN

1. Navigate to the Advanced tab.

2. Navigate to the VPN Client tab.

3. Check the Enable box next to VPN Client. Then click Save at the bottom of the page.

4. Click the Add button in the Server List area.

5. In the Description field enter in the name you’d like to use for this OpenVPN Client profile. We typically advise entering in the location or server number here. Our example server was in New York so I have entered in ExpressVPN New York.

Set the VPN Type to OpenVPN.

In the Username and Password fields paste in the ExpressVPN username and password we obtained earlier.

Click Browse and select the .ovpn file you downloaded earlier. Then click Save.

By default no devices will be assigned to the VPN Tunnel. With TP-Link firmware you must manually assign the devices that you want connected to the VPN tunnel. Proceed with the next steps to do so for all devices you want connected to VPN.

6. Click the Add button in the Device List area.

7. A list of devices connected to the FlashRouter’s network will appear. Check the devices that you want to connect to VPN. Then click OK.

TP-Link select devices to add to VPN tunnel

8. Now that the devices have been assigned to the VPN connection click the Enable toggle in the Server List area.

Verify a successful ExpressVPN connection

You should now see a CONNECTED message.
Visit ExpressVPN’s IP Check to verify your new IP address and virtual location.

How to change the ExpressVPN server

Follow the steps at the top of the page to obtain a new .ovpn file.
Then proceed with the settings same as initial setup.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

Surfshark Merlin WireGuard Setup

TeamFlashRouters · Mar 30, 2023 ·

Preparing for Surfshark Merlin Setup

Download your Surfshark .conf file

If you are not already a Surfshark user Sign Up Now.

1. Log in to your account on the Surfshark website.

2. Click VPN Manual Setup.

3. Select Router as the Setup Method.

4. Select WireGuard as the Protocol.

5. Select I don’t have a key pair.

6. Enter FlashRouter as the name of the connection and click Next.

7. Click Generate a new key pair.

8. Click Choose a location.

9. Select the server location you want to connect to. Unless you need a specific location we recommend using Surfshark’s recommended Fastest server. Click Download to download the .conf file for this Surfshark server location.

Merlin Router Setup for Surfshark

Login to Asus Merlin firmware settings in a browser on any computer or smart device connected to the Merlin FlashRouter’s network.

1. Navigate to the VPN tab.

2. Navigate to the VPN Client tab.

3. Select WireGuard as the VPN Protocol.

4. Click Choose file and select the .conf file you downloaded earlier. Then click Upload.

5. In the Description field enter in the name you’d like to use for this WireGuard Client profile. We typically advise entering in the location here. Our example server was in New York so I have entered in Surfshark New York.

6. Set Enable WireGuard to Yes.

7. Click Apply at the bottom of the page and you should then see a Connected message appear.

9. On the VPN Director page click the + symbol next to Add new rule.

10. Select the new WireGuard profile in the Interface dropdown.

11. In the Local IP field enter in 192.168.50.0/24 if you want ALL devices connected to the FlashRouter’s network to use the WireGuard VPN connection. Click OK.

12. Then click Apply at the bottom of the page.

Verify a successful Surfshark connection

Visit Surfshark’s IP Check from a private/incognito browsing window to verify your new IP address and virtual location.

How to change the Surfshark server

Follow the steps at the top of the page to obtain a new .conf file.
Then proceed with the settings same as initial setup.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

NordVPN TP-Link OpenVPN Setup

TeamFlashRouters · Apr 16, 2024 ·

Preparing for NordVPN TP-Link Setup

Obtain your NordVPN manual Username and Password

If you are not already an NordVPN user Sign Up Now.

1. Log in to your account on the NordVPN website.

2. Click NordVPN on the left hand side and then click Setup NordVPN manually.

3. Enter in the verification code that was sent to your email.

4. Copy and paste your NordVPN manual username and password to a secure location. This is the username and password you will enter into the router settings to connect to NordVPN.

Download your NordVPN .ovpn file

1. There are two options for obtaining the .ovpn file. The first and recommended is to navigate to NordVPN’s server recommendation page. Click Recommended Server to display the fastest server based on your actual location. You can adjust the country if you don’t want to connect to the recommended country.

Then click Show Available Protocols. Click Download Config next to OpenVPN UDP. This will download the .ovpn file to your computer for this server. Do not open this file.

The second method to obtain a server is for connecting to a specific server number that you know you want to use. This applies to NordVPN Dedicated IP servers if you are signed up for that service. Go to NordVPN’s .ovpn file page. Then search for the server number that you want to use and click Download UDP.

TP-Link Router Setup for NordVPN

1. Navigate to the Advanced tab.

2. Navigate to the VPN Client tab.

3. Check the Enable box next to VPN Client. Then click Save at the bottom of the page.

4. Click the Add button in the Server List area.

Set the VPN Type to OpenVPN.

In the Username and Password fields paste in the NordVPN username and password we obtained earlier.

Click Browse and select the .ovpn file you downloaded earlier. Then click Save.

6. Click the Add button in the Device List area.

7. A list of devices connected to the FlashRouter’s network will appear. Check the devices that you want to connect to VPN. Then click OK.

8. Now that the devices have been assigned to the VPN connection click the Enable toggle in the Server List area.

Verify a successful NordVPN connection

You should now see a CONNECTED message.
Visit NordVPN’s IP Check to verify your new IP address and virtual location.

How to change the NordVPN server

Follow the steps at the top of the page to obtain a new .ovpn file.
Then proceed with the settings same as initial setup.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

PureVPN Merlin WireGuard Setup

TeamFlashRouters · Jul 20, 2023 ·

Preparing for PureVPN Merlin Setup

Download your PureVPN .conf file

If you are not already an PureVPN user Sign Up Now.

1. Log in to your account on the PureVPN website.

2. Select Manual Configuration.

3. Select the Server Location you want to connect to and then click Download.

4. In the Select Protocol dropdown choose WireGuard.

5. In the Select Device dropdown choose DD-WRT. Then click Generate Configuration. This will save a .conf file to your computer.

Merlin Router Setup for PureVPN

Login to Asus Merlin firmware settings in a browser on any computer or smart device connected to the Merlin FlashRouter’s network.

1. Navigate to the VPN tab.

2. Navigate to the VPN Client tab.

3. Select WireGuard as the VPN Protocol.

4. Click Choose file and select the .conf file you downloaded earlier. Then click Upload.

5. In the Description field enter in the name you’d like to use for this WireGuard Client profile. We typically advise entering in the location here.

6. Set Enable WireGuard to Yes.

7. Click Apply at the bottom of the page and you should then see a Connected message appear.

9. On the VPN Director page click the + symbol next to Add new rule.

10. Select the new WireGuard profile in the Interface dropdown.

11. In the Local IP field enter in 192.168.50.0/24 if you want ALL devices connected to the FlashRouter’s network to use the WireGuard VPN connection. Click OK.

12. Then click Apply at the bottom of the page.

Verify a successful PureVPN connection

Visit PureVPN’s IP Check to verify your new IP address and virtual location.

How to change the PureVPN server

Follow the steps at the top of the page to obtain a new .conf file.
Then proceed with the settings same as initial setup.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

Why is my DNS showing as 192.168.11.1 on my devices?

TeamFlashRouters · May 30, 2019 ·

When connected to a FlashRouter’s network the DNS settings of the devices will be reporting as 192.168.11.1. This means that the router is handling DNS internally through the servers you have set in the Setup > Basic Setup section of the router. If you did not set any custom DNS here, then you will using your ISP or VPN DNS servers automatically.

You can always customize the DNS servers in the router to your preferred servers and through DNSmasq the router will use 192.168.11.1 to route these servers to your connected devices.

In some instances disabling DNSMasq in the DD-WRT settings can help unblock previously blocked websites while connected to VPN. This will force devices to report the DNS servers set in the router directly as opposed to 192.168.11.1.

Disabling DNSMasq is not recommended unless FlashRouters specifically advises you but we have seen this work for certain VPN providers. To disable the DNSMasq do the following.

Navigate to Setup > Basic Setup

Uncheck Use DNSMasq for DHCP.
Uncheck Use DNSMasq for DNS.
Uncheck DHCP-Authoritative.
Click Save.

Navigate to Services > Services

Set DNSMasq to Disable.
Click Apply Settings.
Reboot router.

Privacy Hero VPN Kill Switch Troubleshooting: No Internet or WiFi

Dave · Oct 8, 2026 ·

If your Privacy Hero router suddenly loses internet access, devices report that WiFi has no internet, or devices will not stay connected after a VPN failure, the VPN Kill Switch may be blocking normal internet traffic.

The VPN Kill Switch is designed to prevent traffic from passing through Privacy Hero without VPN protection. If the VPN disconnects or fails while the Kill Switch is enabled, normal internet access is intentionally blocked.

Important: You can still access app.privacyhero.com to manage Privacy Hero, turn off the Kill Switch, or repair the VPN connection.

Privacy Hero is cloud-managed, so you do not need to be connected to the Privacy Hero WiFi to change these settings. You can also access the dashboard using cellular data, your main router’s WiFi, or another internet connection as long as Privacy Hero remains connected to the internet and Privacy Hero cloud.

Jump to a Section

Common Kill Switch Symptoms
Restore Internet Access
VPN Still Fails to Connect
Privacy Hero Appears Offline
Kill Switch, WiFi, or WAN Problem?
Frequently Asked Questions

Common Privacy Hero Kill Switch Symptoms

A failed VPN connection combined with an enabled Kill Switch can make the Privacy Hero network appear unavailable even though the router itself may still be functioning.

Common symptoms include:

Your device connects to Privacy Hero WiFi but websites and apps will not load.
Your phone, computer, television, or streaming device reports that WiFi has no internet.
A device refuses to remain connected because it detects that the WiFi network does not currently provide normal internet access.
Your phone automatically switches from Privacy Hero WiFi to cellular data or another saved WiFi network.
Your computer displays “No Internet” or “Connected without Internet.”
The VPN displays Failed, Disconnected, Connecting, or a timeout error.
Privacy Hero was working normally and suddenly stopped providing internet access.

If the Privacy Hero WiFi network itself is completely missing and cannot be detected by any device, that is different from normal Kill Switch behavior. Continue with WiFi or router connectivity troubleshooting instead.

Restore Internet Access

The fastest way to determine whether the Kill Switch is responsible is to temporarily disable it and test Privacy Hero without VPN.

Open app.privacyhero.com.
Sign in to your Privacy Hero account.
Open the VPN section.
Check the current VPN status.
If the VPN shows Failed or Disconnected, turn the VPN Kill Switch Off.
Turn the failed VPN connection off.
Connect a device to the Privacy Hero network.
Test normal internet access.

If internet access returns with the VPN and Kill Switch disabled, Privacy Hero’s basic internet connection is working and the problem is isolated to the VPN connection.

Important: Disabling the Kill Switch allows normal non-VPN internet traffic through Privacy Hero. Leave it disabled only while troubleshooting if continuous VPN protection is required.

VPN Still Fails to Connect

Do not turn the Kill Switch back on until the VPN is connected and working.

If you are using NordVPN and the VPN shows Failed, Connecting, or a timeout error, continue with our dedicated Privacy Hero NordVPN Not Connecting or Showing Timeout Errors guide.

That guide covers:

Selecting a different NordVPN server.
Replacing a failed Auto Country connection with a specific NordVPN server.
Generating a new NordVPN NordLynx access token.
Verifying NordVPN OpenVPN manual service credentials.
Avoiding double-VPN conflicts while testing.

If you use another VPN provider, try another available VPN server or protocol and verify that your VPN account and credentials remain active.

Verify the VPN Before Re-Enabling the Kill Switch

Once the VPN reconnects:

Confirm Privacy Hero displays the VPN as Connected.
Connect a device to the Privacy Hero WiFi.
Make sure a separate VPN application is not connected directly on the testing device.
Check your public IP address.
Confirm the IP address and location reflect the VPN server you selected.
Test normal websites and applications.
Return to Privacy Hero and enable the VPN Kill Switch.

If you enable the Kill Switch while the VPN is still failing, normal internet access will be blocked again.

What If Privacy Hero Appears Offline?

If Privacy Hero shows Offline in the dashboard, the router may not currently be communicating with the Privacy Hero cloud.

Confirm Privacy Hero is powered on.
Confirm the Ethernet cable from your ISP gateway or primary router is connected to the Privacy Hero WAN/Internet port.
Confirm your ISP gateway or primary router has working internet access.
Restart Privacy Hero and allow it to finish booting.
Using another internet connection, open app.privacyhero.com.
Check whether Privacy Hero returns online.

If the router returns online, check the VPN and Kill Switch status before enabling the VPN again.

Privacy Hero Has a WAN IP but Devices Have No Internet

Privacy Hero can receive an IP address from your ISP gateway while the Kill Switch is still blocking normal internet traffic.

Before changing IP Passthrough, bridge mode, firewall settings, or other ISP gateway settings:

Check the VPN status.
Check whether the Kill Switch is enabled.
Disable the VPN and Kill Switch temporarily.
Test internet access again.

If internet access returns, troubleshoot the VPN connection rather than changing the ISP gateway configuration.

Kill Switch, WiFi, or WAN Problem?

WiFi Connects but There Is No Internet

If the VPN shows Failed or Disconnected and the Kill Switch is enabled, the Kill Switch is likely blocking normal internet traffic.

Device Will Not Stay Connected to Privacy Hero WiFi

Some devices automatically leave a WiFi network when they detect that it does not provide internet access. Use cellular data or another internet connection to access app.privacyhero.com and check the VPN and Kill Switch.

Privacy Hero WiFi Is Completely Missing

The Kill Switch does not normally cause the WiFi network itself to stop broadcasting. If no devices can detect the Privacy Hero WiFi network, troubleshoot the WiFi or router connection separately.

Privacy Hero Is Not Receiving a WAN IP Address

Check the Ethernet connection between Privacy Hero and your ISP gateway or primary router and confirm the upstream internet connection is working.

VPN Shows Connected but One Device Has the Wrong IP

If the VPN works correctly on other devices, the Kill Switch is probably not the issue. Check that device’s Privacy Hero VPN assignment and its own VPN, privacy, DNS, or security settings.

See Device Privacy, DNS, VPN, and Security Settings That Can Interfere With Your Router VPN.

Frequently Asked Questions

Why does Privacy Hero WiFi say no internet?

If the VPN has failed while the Kill Switch is enabled, normal internet traffic is intentionally blocked. Your device may therefore report that Privacy Hero WiFi has no internet.

Can I access Privacy Hero settings while the Kill Switch is blocking internet?

Yes. Open app.privacyhero.com. You can use the Privacy Hero network, cellular data, your main router’s WiFi, or another internet connection.

Do I have to be connected to Privacy Hero WiFi to change the settings?

No. Privacy Hero is cloud-managed and can be managed remotely while the router remains connected to the Privacy Hero cloud.

Why does my phone keep leaving the Privacy Hero WiFi?

Some phones automatically switch to cellular data or another saved WiFi network when the current WiFi connection does not provide normal internet access.

Should I turn the Kill Switch back on immediately?

Only after the VPN is connected and you have confirmed that your internet traffic is using the VPN.

Related Privacy Hero Guides

PrivateInternetAccess (PIA) TP-Link OpenVPN Setup

TeamFlashRouters · Apr 29, 2024 ·

Preparing for PIA TP-Link Setup

Download your PIA .ovpn file

If you are not already a PIA user Sign Up Now.

1. Log in to your account on the PIA website.

2. Successfully log in with your account information then go to PIA’s OpenVPN Config Generator.

3. On the OpenVPN Configuration Generator select the following:

OpenVPN Version: OpenVPN 2.4 or newer

Select Platform: Linux

Select Region: Choose the server location you’d like to connect to

Select Port: Typically we recommend UDP/1198 RSA-2048 AES-128-CBC SHA1 for best speeds but feel free to select the one you want to use.

4. Click Generate to download the .ovpn file. Do not open this file once it is downloaded.

TP-Link Router Setup for PIA

1. Navigate to the Advanced tab.

2. Navigate to the VPN Client tab.

3. Check the Enable box next to VPN Client. Then click Save at the bottom of the page.

4. Click the Add button in the Server List area.

5. In the Description field enter in the name you’d like to use for this OpenVPN Client profile. We typically advise entering in the location. Our example server was New York so I have entered in PIA New York.

Set the VPN Type to OpenVPN.

In the Username and Password fields paste in the PIA username and password you use to successfully login to your PIA website account.

Click Browse and select the .ovpn file you downloaded earlier. Then click Save.

6. Click the Add button in the Device List area.

7. A list of devices connected to the FlashRouter’s network will appear. Check the devices that you want to connect to VPN. Then click OK.

8. Now that the devices have been assigned to the VPN connection click the Enable toggle in the Server List area.

Verify a successful PIA connection

You should now see a CONNECTED message.
Visit PIA’s IP Check to verify your new IP address and virtual location.

How to change the PIA server

Follow the steps at the top of the page to obtain a new .ovpn file.
Then proceed with the settings same as initial setup.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

IPVanish TP-Link OpenVPN Setup

TeamFlashRouters · Apr 29, 2024 ·

Preparing for IPVanish TP-Link Setup

Download your IPVanish .ovpn file

If you are not already an IPVanish user Sign Up Now.

1. Log in to your account on the IPVanish website.

2. Successfully log in with your account information then go to IPVanish .ovpn file page.

3. Click on the .ovpn file for the server location you want to use to dowloand the .ovpn file. Do not open this file.

TP-Link Router Setup for IPVanish

1. Navigate to the Advanced tab.

2. Navigate to the VPN Client tab.

3. Check the Enable box next to VPN Client. Then click Save at the bottom of the page.

4. Click the Add button in the Server List area.

Set the VPN Type to OpenVPN.

In the Username and Password fields paste in the IPVanish email and password you use to successfully login to your IPVanish website account.

Click Browse and select the .ovpn file you downloaded earlier. Then click Save.

6. Click the Add button in the Device List area.

7. A list of devices connected to the FlashRouter’s network will appear. Check the devices that you want to connect to VPN. Then click OK.

8. Now that the devices have been assigned to the VPN connection click the Enable toggle in the Server List area.

Verify a successful IPVanish connection

You should now see a CONNECTED message.
Visit IPVanish’s IP Check to verify your new IP address and virtual location.

How to change the IPVanish server

Follow the steps at the top of the page to obtain a new .ovpn file.
Then proceed with the settings same as initial setup.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

Surfshark TP-Link WireGuard Setup

TeamFlashRouters · Apr 29, 2024 ·

Preparing for Surfshark TP-Link Setup

Download your Surfshark .conf file

If you are not already a Surfshark user Sign Up Now.

1. Log in to your account on the Surfshark website.

2. Click VPN Manual Setup.

3. Select Router as the Setup method.

4. Select WireGuard as the Protocol.

5. Select I don’t have a key pair.

6. Enter FlashRouter as the name of the connection and click Next.

7. Click Generate a new key pair.

8. Click Choose a location.

TP-Link Router Setup for Surfshark

1. Navigate to the Advanced tab.

2. Navigate to the VPN Client tab.

3. Check the Enable box next to VPN Client. Then click Save at the bottom of the page.

4. Click the Add button in the Server List area.

5. In the Description field enter in the name you’d like to use for this WireGuard Client profile. We typically advise entering in the location. Our example server was New York so I have entered in Surfshark New York.

Set the VPN Type to WireGuard.

Click Browse and select the .conf file you downloaded earlier. Then click Save.

6. Click the Add button in the Device List area.

7. A list of devices connected to the FlashRouter’s network will appear. Check the devices that you want to connect to VPN. Then click OK.

8. Now that the devices have been assigned to the VPN connection click the Enable toggle in the Server List area.

Verify a successful Surfshark connection

You should now see a CONNECTED message.
Visit Surfshark’s IP Check to verify your new IP address and virtual location.

How to change the Surfshark server

Follow the steps at the top of the page to obtain a new .conf file.
Then proceed with the settings same as initial setup.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

Surfshark TP-Link OpenVPN Setup

TeamFlashRouters · Apr 29, 2024 ·

Preparing for Surfshark TP-Link Setup

Download your Surfshark .ovpn file

If you are not already a Surfshark user Sign Up Now.

1. Log in to your account on the Surfshark website.

2. Click VPN Manual Setup.

3. Select Router as the Setup method.

4. Select OpenVPN as the Protocol.

5. Copy and paste your Surfshark manual username and password to a secure location. This is the username and password you will enter into the router settings to connect to Surfshark.

6. Click Location and select the server location you want to connect to. Unless you need a specific location we recommend using Surfshark’s recommended Fastest server. Click Download to download the UDP .ovpn file for this Surfshark server location.

TP-Link Router Setup for Surfshark

1. Navigate to the Advanced tab.

2. Navigate to the VPN Client tab.

3. Check the Enable box next to VPN Client. Then click Save at the bottom of the page.

4. Click the Add button in the Server List area.

Set the VPN Type to OpenVPN.

In the Username and Password fields paste in the Surfshark username and password we obtained earlier.

Click Browse and select the .ovpn file you downloaded earlier. Then click Save.

6. Click the Add button in the Device List area.

7. A list of devices connected to the FlashRouter’s network will appear. Check the devices that you want to connect to VPN. Then click OK.

8. Now that the devices have been assigned to the VPN connection click the Enable toggle in the Server List area.

Verify a successful Surfshark connection

You should now see a CONNECTED message.
Visit Surfshark’s IP Check to verify your new IP address and virtual location.

How to change the Surfshark server

Follow the steps at the top of the page to obtain a new .ovpn file.
Then proceed with the settings same as initial setup.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

ProtonVPN TP-Link WireGuard Setup

TeamFlashRouters · Apr 29, 2024 ·

Preparing for ProtonVPN TP-Link Setup

Download your ProtonVPN .conf file

If you are not already an ProtonVPN user Sign Up Now.

1. Log in to your account on the ProtonVPN website.

2. Click Downloads.

3. Scroll down to WireGuard configuration and name the device FlashRouter.

4. Select Router as the platform.

5. Select the VPN options that best fit your needs. We typically use the settings as seen in the screenshot here if you are unsure.

If you need a specific server location find it in the list and click Create.

7. After clicking Create a new window will appear. Click Download to download the .conf file to your computer.

TP-Link Router Setup for ProtonVPN

1. Navigate to the Advanced tab.

2. Navigate to the VPN Client tab.

3. Check the Enable box next to VPN Client. Then click Save at the bottom of the page.

4. Click the Add button in the Server List area.

Set the VPN Type to WireGuard.

Click Browse and select the .conf file you downloaded earlier. Then click Save.

6. Click the Add button in the Device List area.

7. A list of devices connected to the FlashRouter’s network will appear. Check the devices that you want to connect to VPN. Then click OK.

8. Now that the devices have been assigned to the VPN connection click the Enable toggle in the Server List area.

Verify a successful ProtonVPN connection

You should now see a CONNECTED message.
Visit ProtonVPN’s IP Check to verify your new IP address and virtual location.

How to change the ProtonVPN server

Follow the steps at the top of the page to obtain a new .conf file.
Then proceed with the settings same as initial setup.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

IPVanish AsusWRT OpenVPN Setup

TeamFlashRouters · Apr 29, 2024 ·

Preparing for IPVanish AsusWRT Setup

Download your IPVanish .ovpn file

If you are not already an IPVanish user Sign Up Now.

1. Log in to your account on the IPVanish website.

2. Successfully log in with your account information then go to IPVanish .ovpn file page.

3. Click on the .ovpn file for the server location you want to use to dowloand the .ovpn file. Do not open this file.

AsusWRT Router Setup for IPVanish

Login to AsusWRT firmware settings in a browser on any computer or smart device connected to the AsusWRT FlashRouter’s network.

1. Navigate to the VPN tab.

2. Navigate to the VPN Fusion tab.

3. Click Add profile.

4. In the Connection Name field enter in the name you’d like to use for this OpenVPN Client profile. We typically advise entering in the location or server number here. Our example server was in New York so I have entered in IPVanish New York.

5. In the VPN Type dropdown select OpenVPN.

6. Click Import .ovpn file and select the .ovpn file you downloaded earlier. Then click Upload.

7. In the Username and Password fields paste in the IPVanish email and password you use to successfully login to your IPVanish website account.

8. Click Apply and Enable at the bottom of the page.

If you only want certain devices to connect to the OpenVPN Client profile you are setting up instead of all the devices connected to the FlashRouter’s network click into the profile and disable Apply to all devices. Then click Devices and select the devices that you want to connect to VPN.

9. At the top of the page set the Service State toggle to ON to activate the VPN connection.

Verify a successful IPVanish connection

You should now see a CONNECTED message.
Visit IPVanish’s IP Check to verify your new IP address and virtual location.

How to change the IPVanish server

Follow the steps at the top of the page to obtain a new .ovpn file.
Then proceed with the settings same as initial setup.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

Surfshark AsusWRT WireGuard Setup

TeamFlashRouters · Apr 29, 2024 ·

Preparing for Surfshark AsusWRT Setup

Copy your Surfshark Private Key

If you are not already a Surfshark user Sign Up Now.

1. Log in to your account on the Surfshark website.

2. Click VPN Manual Setup.

3. Select Router as the Setup method.

4. Select WireGuard as the Protocol.

5. Select I don’t have a key pair.

6. Enter FlashRouter as the name of the connection and click Next.

7. Click Generate a new key pair.

8. A Public Key and Private Key will then appear. Use the copy box to copy the Private Key. You will not need the public key.

AsusWRT Router Setup for Surfshark

Login to AsusWRT firmware settings in a browser on any computer or smart device connected to the AsusWRT FlashRouter’s network.

1. Navigate to the VPN tab.

2. Navigate to the VPN Fusion tab.

3. Click Add profile.

4. In the Connection Name field enter in Surfshark.

5. In the VPN Type dropdown select Surfshark.

6. In the Region dropdown select the Surfshark location you want to connect to.

7. In the Private Key field paste in the Surfshark Private Key obtained earlier.

8. Click Apply and Enable at the bottom of the page.

If you only want certain devices to connect to the Surfshark profile you are setting up instead of all the devices connected to the FlashRouter’s network click into the profile and disable Apply to all devices. Then click Devices and select the devices that you want to connect to VPN.

9. At the top of the page set the Service State toggle to ON to activate the VPN connection.

Verify a successful Surfshark connection

You should now see a CONNECTED message.
Visit Surfshark’s IP Check to verify your new IP address and virtual location.

How to change the Surfshark server

Use the profile service state toggle to disconnect the currently connected location.
Then click into the Surfshark profile in the router’s settings.
Then adjust the Region dropdown to a new location.
Click Apply all settings.
Use the profile service state toggle to connect the new location.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

CyberGhost AsusWRT OpenVPN Setup

TeamFlashRouters · Apr 29, 2024 ·

Preparing for CyberGhost Setup

Obtain your CyberGhost OpenVPN information

If you are not already a CyberGhost user Sign Up Now.

1. Log in to your account on the CyberGhost website.

2. Select VPN.

3. Click Configure New Device.

4. Set Protocol to OpenVPN. Select the Country you would like to connect to. Select the Server Group. Name the device in the Device Name field. Click Save Configuration.

5. Press View configuration.

6. Copy the Username, and Password that appear to a notepad, since you will need this information later in the setup process. Click Download Configuration.

CyberGhost Website OpenVPN Configuration Files Generator 1

Open the folder that was downloaded. Then open the ca.crt the client.crt, and client.key files with NotePad++ for Windows or TextEdit for Apple. All CyberGhost servers have different keys and certificates.

AsusWRT Router Setup for CyberGhost

Login to AsusWRT firmware settings in a browser on any computer or smart device connected to the AsusWRT FlashRouter’s network.

1. Navigate to the VPN tab.

2. Navigate to the VPN Fusion tab.

3. Click Add profile.

5. In the VPN Type dropdown select OpenVPN.

6. Click Import .ovpn file and select the openvpn.ovpn file from the folder you downloaded earlier. Then click Upload.

7. In the Username and Password fields enter in the CyberGhost assigned username and password that you obtained earlier.

8. After uploading the openvpn.ovpn file you will get a message that says “Complete, Lack of Client Key!, Lack of Client Certificate, Lack of Certificate Authority”. For CyberGhost you need to enter in these details manually. Click Import the CA file or edit the .ovpn file manually and then click the edit icon next to Content modification of Keys and Certificate.

9. In the Certificate Authority field paste in the entire content of the ca.crt file.

—– BEGIN xxx —– / —– END xxx —– block (including those two lines).

10. In the Client Certificate field paste in the entire content of the client.crt file.

—– BEGIN xxx —– / —– END xxx —– block (including those two lines).

11. In the Client Key field paste in the entire content of the client.key file.

—– BEGIN xxx —– / —– END xxx —– block (including those two lines).

Then click OK.

8. Click Apply and Enable at the bottom of the page.

9. At the top of the page set the Service State toggle to ON to activate the VPN connection.

Verify a successful CyberGhost connection

You should now see a CONNECTED message.
Visit What is my IP Address from a private/incognito browser to verify your new IP address and virtual location.

How to change the CyberGhost server

Follow the steps at the top of the page to create a new CyberGhost location profile in your account.
Then proceed with the settings same as initial setup.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

Search Results for: devices

Open VPN Fusion

Method 1: Apply One VPN to All Devices

Method 2: Send Only Selected Devices Through a VPN

How Multiple VPN Connections Work

Confirm a Device Is Actually Using the VPN

Quick isolation test

Want a Separate WiFi Network With or Without VPN?

Related AsusWRT Guides

Explore the Latest WiFi 7 ASUS FlashRouters

Which NordVPN Option Should You Choose?

1. NordVPN

2. WireGuard

3. OpenVPN

Option 1: NordVPN Dropdown — Token-Based NordLynx

Option 2: WireGuard Dropdown — Import a NordVPN .conf File

Option 3: OpenVPN Dropdown — Credentials + .ovpn File

NordVPN Dedicated IP — OpenVPN Only

Assign Devices, Verify the VPN, and Troubleshoot

One VPN for everyone, or different VPNs for different devices?

Verify the IP of the actual device

If VPN Fusion will not connect

NordVPN Routers & Offers

Shop NordVPN-Ready FlashRouters

NordVPN Partner Offer

Related AsusWRT Guides

Explore the Latest WiFi 7 ASUS FlashRouters

Jump to a Section

Start Here: Is the Problem the Router or One Device?

Disconnect VPN Applications Running on the Device

iPhone and iPad: Check Private Relay and Limit IP Address Tracking

Limit IP Address Tracking

iCloud Private Relay

Android: Check Private DNS and Always-On VPN

Private DNS

Always-On VPN

Check Antivirus, Firewall, Browser, and Work Security Settings

Antivirus and Internet Security Software

Third-Party Firewalls

Browser VPN, Proxy, and Secure DNS

Work and Corporate Devices

Run a Clean Router VPN Test

Privacy Hero VPN Connected but Device Still Shows the Wrong IP?

Related FlashRouters Guides

What You Need Before Starting

Create a Dedicated WiFi Network That Uses the VPN

Alternative: Assign a VPN to an Existing Guest Network Pro SSID

Create a Separate WiFi Network Without a VPN

Confirm Each WiFi Network Uses the Intended Internet Route

Common Issues and What to Check

I only see “Guest Network,” not “Guest Network Pro” or “VPN Network”

Every network still uses the VPN

A phone reports the wrong IP although the guest VPN profile is correct

Guest devices cannot reach local printers or other LAN devices

Related AsusWRT Guides

Explore the Latest WiFi 7 ASUS FlashRouters

Double check that your device is connected to the Roqos network

Assign Devices To Connect To VPN in the Roqos

Turn off VPN device applications

Create User Profiles

Assign Devices

Turn Off Internet Access

Schedule Internet Access

Enable Content Filters

Monitor Internet Usage

Sales FAQs

Can My Router Be Preconfigured With My VPN Information?

IMPORTANT NOTE: This is not required but recommended for users who wish to have the simplest, most seamless experience when the FlashRouter arrives. You can always change the password when the device arrives if you wish as well.

Please note: If you do give a server location, we will automatically start the device with the closest/optimal server for the location we are shipping the device by default. A location has to be added to the initial configuration for plug and play encryption security to occur on the device.

Can I Use My Dedicated IP Address With A FlashRouter?

Can I Use A FlashRouter With My Current Mesh System?

Can You Flash My Router and Connect me to VPN?

🔹 How It Works

Flashing vs. Configuration: Router Compatibility

🛠 Router Setup Types by Brand

🔹 Flashing Required (Custom Firmware Installation)

🔹 Configuration Only (No Flashing Required)

✅ Supported VPN Providers

🔗 Get Started Today!

How Can I Add The 1 Year NordVPN Service From My FlashRouters.com Order To My Current NordVPN Account?