FlashRouters Support Portal

Prioritizing Privacy

Search Results for: each side

How to Use ASUS VPN Fusion: Assign Devices and Multiple VPNs

· ·

ASUS VPN Fusion lets supported AsusWRT routers run VPN client profiles and decide which connected devices use each VPN connection. You can send the entire network through one VPN, use separate VPN profiles for selected devices, or leave certain devices on the regular ISP connection.

This guide covers how to use ASUS VPN Fusion to assign devices to specific VPN connections, manage multiple VPN profiles simultaneously, and choose which devices use a VPN or connect directly through your ISP. These features work with supported VPN providers and protocols, including WireGuard and OpenVPN.

Open VPN Fusion

  1. Connect your computer or phone to your ASUS FlashRouter’s WiFi or LAN.
  2. Open http://www.asusrouter.com or the router’s LAN IP (often 192.168.50.1) and log in. See How to Access Your AsusWRT FlashRouter Settings.
  3. Go to VPN > VPN Fusion. Add and configure at least one working VPN client profile before assigning devices.
ASUS VPN Fusion page with Add Profile and Internet Connection
VPN Fusion displays your saved VPN profiles and the Add Profile option.

Method 1: Apply One VPN to All Devices

Use this option when you want the selected VPN profile to be your router’s default connection.

  1. In VPN Fusion, open the VPN profile that should provide the default internet route.
  2. Enable Apply to all devices (or Default Connection in firmware that uses that label).
  3. Click Apply all settings, then enable the VPN profile.
  4. Connect a test device to the router and check its IP. If you use per-device overrides, verify those rules separately.
ASUS VPN Fusion Apply to all devices setting and device count
Enable Apply to all devices to use the selected VPN as the default connection.

Method 2: Send Only Selected Devices Through a VPN

  1. In VPN Fusion, turn off Apply to all devices for a profile when you do not want that VPN used network-wide.
  2. Open the profile’s Device area using the pencil/edit icon or the firmware’s device-assignment control.
  3. Select the intended devices (for example, a TV and streaming box), confirm with OK, then click Apply all settings.
  4. Enable the VPN profile and verify the selected devices’ public IPs.
  5. For devices that should use the normal ISP internet, leave them on the Internet Connection route or explicitly set the Internet/bypass rule available in your firmware. Remove any conflicting VPN assignments.

Important: A device being connected to ASUS WiFi does not guarantee that it is assigned to the desired VPN. Check the assigned profile and the actual public IP.

How Multiple VPN Connections Work

On supported models, VPN Fusion can keep several VPN connections active and route different devices through different providers at the same time. For example:

TVNordVPN — WireGuard
LaptopProton VPN — OpenVPN
Streaming deviceSurfshark — OpenVPN
Work computerRegular ISP connection

You may be able to run one WireGuard profile and multiple OpenVPN profiles concurrently, but connection limits and supported combinations vary by ASUS router model and firmware. Adding many saved OpenVPN profiles is not the same as having all of them connected at once.

  1. Create separate profiles with clear names, such as Nord-US-WG, Proton-US-OVPN, and Surfshark-UK-OVPN.
  2. Enable only the profiles you need and confirm each shows connected.
  3. Assign each client device to the appropriate active profile; avoid applying conflicting default routes.
  4. Verify each device’s observed IP and server country. If one tunnel fails, test it individually with the other profiles temporarily disabled.

ASUS reference: How VPN Fusion handles multiple tunnels and devices.

Confirm a Device Is Actually Using the VPN

  1. In VPN Fusion, confirm the target profile’s connection status is active.
  2. Check the device’s assignment in the ASUS VPN Fusion interface.
  3. On that same device, visit IPLeak.net or another public-IP checker.
  4. Compare the reported public IP and location with the VPN server assigned to that device.
  5. If the device still shows your ISP IP, test with its own VPN app and iCloud Private Relay / Private DNS / browser proxy disabled. Use Device Settings That Can Interfere With Your Router VPN.

Quick isolation test

  1. Turn off VPN Fusion routing for a test device and confirm ISP internet works.
  2. Turn on just one known-working VPN profile for that device.
  3. Recheck public IP. If it now works, reintroduce other profiles/assignments individually.

Want a Separate WiFi Network With or Without VPN?

Rather than selecting devices one at a time, supported ASUS routers offer Guest Network Pro or Network > VPN Network features that can associate a WiFi SSID with VPN routing. See ASUS Guest WiFi With or Without VPN: Setup Guide.

On routers with only the traditional Guest Network feature, available VPN-by-SSID behavior may differ; do not assume the standard guest SSID bypasses a network-wide VPN default.

Related AsusWRT Guides

Upgrade your ASUS router

Explore the Latest WiFi 7 ASUS FlashRouters

Looking for a newer ASUS router? Browse WiFi 7 models available from FlashRouters and compare features to find the right fit for your home or office. VPN Fusion and other features vary by router model and firmware.

Shop ASUS WiFi 7 Routers →

DNS Setup for DD-WRT FlashRouters

· ·

The Domain Name System (DNS) is the phonebook of the Internet. DNS resolves website domain names (www.website.com) to IP Addresses so you don’t have to remember the IP Address of every site you visit.

We setup each FlashRouter with Google DNS (8.8.8.8 , 8.8.4.4) and/or OpenDNS (208.67.220.220 , 208.67.222.222) to prevent your ISP DNS from leaking when connected to the FlashRouter.

By using a trusted DNS server like those listed below, or from your trusted VPN service provider, you can prevent ISP’S from compiling your browsing data and selling it to third parties without your consent.

Recommended DNS servers

GoogleDNS

Primary DNS: 8.8.8.8

Secondary DNS: 8.8.4.4

OpenDNS

Primary DNS: 208.67.220.220

Secondary DNS: 208.67.222.222

Cloudfare

Primary DNS: 1.1.1.1

Secondary DNS: 1.0.0.1

Level 3

Primary DNS: 209.244.0.3

Secondary DNS: 209.244.0.4

How to change the DNS on your FlashRouter

We preset each FlashRouter with GoogleDNS and OpenDNS so there is no need to change the DNS servers unless you have reset the FlashRouter or want to use different DNS servers.

Navigate to Setup > Basic Setup

DNS Setup on DD-WRT FlashRouters
  1. Scroll down to Network Address Server Settings (DHCP).
  2. Enter in any combination of valid DNS servers into Statict DNS fields 1, 2, and 3.
  3. Click Apply Settings at the bottom of the page.
  4. Power cycle your FlashRouter off and back on.

DNS Leak Test

We recommend checking to see if your DNS is leaking when using VPN.

My 2.4GHz network is not showing up

· ·

If you ever have an issue with WiFi, you can always wire directly into the FlashRouter to verify and/or update your current WiFi settings.

Enter the recommended wireless settings

Our team has tested the wireless functionality for each FlashRouter that we offer and shared our recommended wireless settings in our Wifi Setup area. Replicate the settings for your FlashRouter model found on that page if the 2.4GHz is not showing.

Change the wireless channel

Navigate to Wireless > Basic Settings

Change the wireless channel setting for the 2.4GHz band that is not appearing. The most broadly compatible channels are 6 and 11.

CLICK APPLY SETTINGS

Refresh your device's network adapter

In rare instances the wireless adapter for your device may stop picking up WiFi networks and must be reset. This will be different for each device, that is why the best way to refresh your wireless adapter is to simply reboot any device in question and see if the adapter now picks up your WiFi networks.

Review wireless Status

Navigate to Status > Wireless

The readouts on this page can help tell if there are errors with the FlashRouter’s wireless. View our article on how to read the Wireless Status page for more information.

How do I set a Static IP for my device in DD-WRT?

· ·

It can be very useful to setup static local IP addresses for devices on your FlashRouter network. By assigning specific IP’s to specific devices you can better control and manage how your network and the internet interacts with each device.

Once you setup a static IP you can set access restrictions, monitor and control bandwidth, as well as bypass a router VPN connection or setup a device specific Kill Switch. Without a static IP assignment you may lose device specific settings when the DHCP lease to the router expires.

Navigate to Services > Services

Set Static IP by Device MAC Address in FlashRouter DD-WRT Settings
  1. Under Static Leases click Add once.
  2. Fill in the newly appeared fields.
    • MAC Address: Enter the device’s MAC address which can be found on the device itself or on the Status > LAN page.
    • Hostame: Enter a name for the device. Make sure that there are no spaces.
    • IP Address: Enter the desired static IP Address of the device. It should be on the same subnet as the FlashRouter (192.168.11.x)
    • Client Lease Time: Leave this field blank.
  3. Click Apply Settings
  4. Repeat the steps above for each individual static IP address you would like to setup. If you click Add before clicking Apply Settings you will lose the configuration.

If a device has wireless and ethernet capabilities the MAC Addresses will be different for a wireless connection and an ethernet connection. Make sure to set a static IP for both MAC Addresses in this case.

Which DD-WRT wireless extender setup should I be using?

· ·

FlashRouters supports four unique DD-WRT wireless extender setups – options similar to an open source Mesh network. Each different wireless extender configuration serves a different purpose. Read below to see which guide fits your configuration requirements!

Wireless Repeater

Why should I choose Wireless Repeater Setup?

  1. If you have a MiFi wireless only internet connection or other type of WiFi internet where there is no access to any ethernet port for a wired internet connection, then you can setup a wireless repeater network to both extend WiFi and add wired connection capabilities.
  2. If you have a large home or office area that requires additional WiFi coverage can use a wireless repeater setup to extend the existing network.
  3. If you want to create a separate VPN WiFi network in your home without placing the FlashRouter in the same room as your primary router you can use wireless repeater to establish a WiFi internet connection and then connect to VPN on your WiFi repeater network.
  4. If you want a wireless Dual Router setup option where you can have local ISP IP address through your main router WiFi network and your VPN IP address through your FlashRouter Wireless Repeater WiFi network, both available for you to connect at all times. Each network is on a unique subnet.

View the FlashRouter Wireless Repeater Setup Guide.

Wireless Repeater Bridge

Use Cases

Wireless Repeater Bridge Setup

  1. Anyone that needs all their devices connected to the same local network.
  2. Anyone with a MiFi internet connection that does not have an ethernet port and has no need for VPN.
  3. Anyone with a large wireless area that requires additional coverage.

Wireless Client Bridge

Use Cases

Wireless Client Bridge Setup

  1. Anyone with a MiFi internet connection that needs wired access.
  2. Anyone that needs additional wired ports instead of using a switch.
  3. Anyone with wired only devices in their home that are too far from your main router.

Wireless Access Point DHCP Forwarder

Use Cases

Wireless Access Point DHCP Forwarder Setup

  1. Anyone that needs their devices connected to the same local network and wants lossless LAN to LAN speeds via wireless and ethernet connection.
  2. Anyone that wants to use their main router to provide DHCP to their router instead of having an additional DHCP server.

How to Reset a Failed VPN Connection on Privacy Hero

· ·

If your Privacy Hero VPN connection shows Failed, you can use the new Reset button to clear the saved third-party VPN settings and return the router to its available default connection. This is useful when a VPN setup is stuck or you want to start again without manually removing the existing third-party VPN configuration.

Important: A VPN reset removes all saved third-party VPN settings from Privacy Hero. You will need to configure that provider again if you want to use it later. The connection Privacy Hero uses after resetting depends on your subscription plan.

When Should You Use the VPN Reset Button?

Use Reset when the current VPN connection is in a Failed state and you want to remove the third-party VPN setup and restore a working default connection. It is a more complete action than simply retrying the same VPN server.

  • Use it if the third-party VPN settings are no longer working and you want to start over.
  • Use it if you no longer want the saved third-party VPN configuration.
  • Do not use it if you need to preserve the existing VPN configuration. First try reconnecting or choosing a different VPN server or protocol.

The Reset action addresses the VPN configuration. It does not repair a disconnected WAN cable, an ISP outage, or a router that cannot reach the Privacy Hero cloud.

How to Reset a Failed VPN Connection

  1. Open app.privacyhero.com in a browser and sign in to your Privacy Hero account.
  2. Select your Privacy Hero router, then open its VPN settings.
  3. Confirm the existing VPN connection is showing Failed.
  4. Find the new Reset button in the failed VPN connection area. Before clicking, be aware that this action will remove all third-party VPN settings saved on the router.
  5. Click Reset. If a confirmation message appears, review it before confirming. Allow the dashboard to apply the reset and update the VPN connection status.
  6. Check the resulting connection using the subscription comparison below, then verify internet access from a device connected to Privacy Hero.

Dashboard access during a Kill Switch block: Privacy Hero permits access to app.privacyhero.com over its WiFi or LAN even when the VPN Kill Switch blocks ordinary internet traffic, as long as the router maintains its upstream/cloud connection. You can also manage the router from cellular data or another working internet connection.

What Happens After Reset? Privacy Premium vs. Privacy Core

VPN Reset: Side-by-Side Plan Comparison
Privacy Premium Active subscription Privacy Core
Third-party VPN settingsRemoved Third-party VPN settingsRemoved
Connection after resetBuilt-in Privacy Hero VPN Connection after resetNormal ISP internet
VPN protection afterwardYes, when the built-in VPN is connected VPN protection afterwardNo router VPN is active

Privacy Core users: After resetting, your normal internet access is not VPN-protected by Privacy Hero. If you want a third-party VPN again, you must configure it again in Privacy Hero.

Privacy Premium users: Check that the built-in Privacy Hero VPN shows Connected before assuming your traffic is going through the VPN. A working upstream internet connection and active Premium subscription are still required.

What Information Does the Reset Remove?

The VPN Reset button clears the third-party VPN configuration stored in Privacy Hero. This means any saved third-party provider details will need to be entered or imported again before that provider can be used.

Depending on the provider and protocol you had configured, this may include the saved VPN provider selection, server details, credentials or tokens, and custom OpenVPN or WireGuard settings. Have your provider login or configuration materials available if you plan to set up that VPN again.

This is a VPN configuration reset, not a request to cancel your third-party VPN subscription. It should not be confused with a full router factory reset.

How to Verify Internet and VPN Status After Reset

  1. Refresh the Privacy Hero dashboard and reopen VPN.
  2. If you have Privacy Premium, verify that the built-in Privacy Hero VPN is selected and shows Connected.
  3. If you have Privacy Core, verify that the third-party VPN configuration is gone and ordinary internet access is available through your ISP connection.
  4. Connect a computer or phone to the Privacy Hero WiFi or LAN. To test the router by itself, turn off any VPN application running directly on that device.
  5. Load a regular website, then check your public IP address using ipleak.net. Premium should show a VPN IP if its built-in VPN is connected; Core will normally show your ISP public IP.

If you have Streaming Relocation enabled, some streaming services may use their separately selected location; that is not necessarily the same location shown by a general public IP check.

Reset Complete but Still No Internet?

  1. Check the VPN Kill Switch. If it is still enabled while there is no working VPN connection, it may block ordinary internet traffic. Review the Kill Switch setting before assuming the router has lost WiFi.
  2. Check the connection status. A router listed as Offline may have a WAN, ISP, or cloud-communication problem. The VPN reset cannot fix an upstream internet outage.
  3. Check the network wiring. Confirm your main router or ISP gateway has internet access and the cable is connected to the Privacy Hero WAN/Internet port.
  4. Check a device on Privacy Hero WiFi or LAN. Make sure you are testing the Privacy Hero network rather than another WiFi or cellular connection.
  5. Check your subscription. An active Privacy Premium subscription is required for the built-in Privacy Hero VPN fallback described above. Privacy Core returns to ordinary ISP internet access.

For Kill Switch behavior and restoring internet, see Privacy Hero VPN Kill Switch: No Internet or WiFi Troubleshooting. To learn when to enable the feature, see Privacy Hero VPN Kill Switch Setup.

Related Privacy Hero Articles

Change VPN Protocols on ExpressVPN/Aircove firmware

· ·

Changing the VPN protocol your ExpressVPN FlashRouter is using can help with obtaining faster speeds while connected to VPN and connectivity issues in some regions of the world. A great advantage of using ExpressVPN firmware is the ability to use multiple protocols such as OpenVPN, IKEv2, and ExpressVPN’s own protocol Lightway.

1. Connect to the FlashRouter’s network via ethernet cable or wireless.

2. Open your web browser and enter expressvpnrouter.com or 192.168.132.1 in the URL.

ExpressVPNrouter.com
192.168.132.1

3. Login with your ExpressVPN FlashRouter admin password.

ExpressVPN Router admin login

4. Select VPN Options on the left hand side of the menu.

ExpressVPN VPN Options

5. Select VPN Preferences on the left hand side of the menu.

ExpressVPN VPN Preferences

6. Choose the VPN protocol that best suits your needs. We typically see the fastest speeds while using the Lightway – UDP or IKEv2 protocols. Click Save.

ExpressVPN Protocols

7. Click OK and then select Dashboard.

ExpressVPN Dashboard

8. Click Disconnect to turn the VPN connection off.

ExpressVPN Disconnect

9. Click Connect to turn the VPN connection back on so it is using the new Protocol you selected.

ExpressVPN Connect

Change Wireless Channels on ExpressVPN/Aircove firmware

· ·

Changing the wireless channel on your ExpressVPN FlashRouter can help with WiFi stability and allows you to use a wireless channel with less traffic in your local environment.

1. Connect to the FlashRouter’s network via ethernet cable or wireless.

2. Open your web browser and enter expressvpnrouter.com or 192.168.132.1 in the URL.

ExpressVPNrouter.com
192.168.132.1

3. Login with your ExpressVPN FlashRouter admin password.

ExpressVPN Router admin login

4. Select Network Settings on the left hand side of the menu.

ExpressVPN Network Settings

5. Select Wi-Fi Settings on the left hand side of the menu.

ExpressVPN WiFi Settings

6. Select Advanced Settings.

ExpressVPN WiFi Advanced Settings

7. Select the Channel Width and Main Channel you want your ExpressVPN FlashRouter to use. Note that higher 5GHz Wi-Fi channels will not be compatible with older devices. Click Save. Click Continue.

ExpressVPN WiFi Channels

Separate 2.4GHz and 5GHz Wi-Fi bands on ExpressVPN/Aircove firmware

· ·

By default ExpressVPN firmware bonds the 2.4GHz and 5GHz wireless networks to a single wireless network name. Your device will automatically choose which one will provide the best connection. You can separate these networks to have unique Wi-Fi names so you can control which network your devices will use.

1. Connect to the FlashRouter’s network via ethernet cable or wireless.

2. Open your web browser and enter expressvpnrouter.com or 192.168.132.1 in the URL.

ExpressVPNrouter.com
192.168.132.1

3. Login with your ExpressVPN FlashRouter admin password.

ExpressVPN Router admin login

4. Select Network Settings on the left hand side of the menu.

ExpressVPN Network Settings

5. Select Wi-Fi Settings on the left hand side of the menu.

ExpressVPN WiFi Settings

6. Click the toggle for Separate 2.4GHz and 5GHz Wi-Fi.

ExpressVPN Separate 2.4GHz and 5GHz

7. Separate Wi-Fi details for the 5GHz band will now display. You can change the name and password if you so choose or leave it with the default name and password with “-5GHz” added to the name. Click Save. Click Continue.

ExpressVPN 5GHz added

Set a Static IP for your connected devices on Roqos

· ·

By assigning specific Static IP addresses to your devices you can better manage your network and make sure they connect with the same Local IP Address each time they connect to your Roqos.

Login to Roqos Core UI web app in a browser on any computer or smart device.

1. Click the navigation menu and select Basic Settings > LAN Settings.

Roqos Basic Settings - LAN settings

2. Click Static IP Assignments.

Roqos LAN settings - Static IP Assignments

3. Click Add Assignment.

Roqos LAN settings - Add Assignment

4. Toggle the device hat you want to set a Static IP for and then enter 192.168.23.x with x being any number between 2 and 254. Click Save.

Now, every time the device connects to the Roqos network it will be assigned the same Static IP address on the Local network.

Service Plan FAQs

· ·

Service Plan FAQs

Is the service plan a one time purchase or does it renew?

All FR service plans automatically renew on a quarterly or annual basis based on the term initially purchased. A reminder e-mail will be sent one week prior to renewal. In your FlashRouter account panel, you can cancel the plan at any time to stop any further renewals.

What is included with a FlashRouter?

  • On-demand Installation of enhanced firmware and our exclusive FlashRouters VPN Privacy App.
  • Custom setup guide.
  • Power cord and an ethernet cable.
  • Individual VPN Account Setup/Pre-configuration (On Request)
  • 1 year open source hardware warranty.
  • 30 day satisfaction guarantee.
  • Initial basic setup assistance via e-mail. For any advanced setups/configurations, live chat or remote assistance, a service plan purchase is required.

Does the service plan include a VPN subscription?

A subscription to a VPN does not come with a FlashRouter or Service plan. If you are planning to use a VPN, you would need to sign up for one separately, directly from a provider.

Need assistance in finding a VPN Provider? Please visit our recent VPN Provider Best Seller List.

Plug and Play VPN Support

Unlike other VPN Router providers, FlashRouters is proud to offer free VPN service integration with any purchase.

To receive a plug and play with VPN device, you will need to provide our team with the credentials from your VPN provider subscription.

IMPORTANT NOTE: This is not required but recommended for users who wish to have the simplest, most seamless experience when the FlashRouter arrives. You can always change the password when the device arrives if you wish as well.

Shows what to look for when you want to preconfigure your router.

To have your router VPN pre-configured:

  1. Select Yes from the “Want Your Router Preconfigured?” on the Payment Page during check out.
  2. Select your VPN provider. If you don’t see your VPN listed select “Other” and you will see an additional field to input who your provider is.
  3. Enter your your VPN username and password
  4. For ExpressVPN Firmware Routers there will be an additional box for your activation code.

Please note:  If you do not enter a server location request in “Order Comments”, we will automatically start the device with the closest/optimal server for the location we are shipping the device by default. A location has to be added to the initial configuration for plug and play encryption security to occur on the device.

Do I have to buy a service plan?

Our routers are priced for the custom upgrades performed at our warehouse, testing expenses and keeping the FlashRouter App update to date.

Our service plan has three levels as an optional add-on with your purchase to get continued direct assistance from our team. This is especially useful to customers who are less tech savvy and want direct access to our support team to make sure their network is running exactly how they desire. Here is how these plans differ

Bronze – Basic E-mail Support
Silver – E-mail and Live Chat Support.
Gold – E-mail, Live Chat, and Remote One-on-One Sessions

Each situation and user has different needs and expertise. Our team of US-based support agents are highly trained specialists in VPN and DD-WRT router setup. From firmware updates to networking configuration/troubleshooting,solutions, the purpose of our Service Plans is to help our customers in whatever level they deem necessary.

Does FlashRouters offer phone support?

At this time, we do not provide phone support with our service plans. We have tested phone support for networking troubleshooting in the past but have found that on average caused us to help less customers in a less efficient manner. However, with a purchase of a Gold Service Plan, customers can schedule 1-on-1 remote support sessions via Teamviewer with our engineers and they will provide a hands-on, personal solution, to any problems you may be facing.

Do I need a Service Plan for a firmware upgrade?

Firmware upgrades are free of charge to any FlashRouter customer!

You can visit our support center and select your specific router model to upgrade your firmware based on the recommendations provided.

If you want the help of our Support Team to assist in this upgrade, you can always sign up for our Gold Service Plan and schedule a 1-on-1 Teamviewer session in which our trained engineers will take care of the upgrade for you!

What does the warranty cover?

Our complimentary 1-year hardware warranty does not include tech support outside. If your router suffers hardware failure within 365 days from the date you received the unit, then we will gladly replace your router with another fully tested one. For more information regarding our warranty and return policy, please check out our warranty and return section.

Can I purchase a router without a service plan and subscribe later?

Yes, you may purchase a service plan at any time. However, we can’t guarantee any pricing, or apply any previously offered discounts or specific features at that later date.

ASUS Guest WiFi With or Without VPN: Setup Guide

· ·

On supported ASUS routers, you can create a separate WiFi network (SSID) that routes connected devices through a VPN profile, while another network uses the regular ISP connection. This is useful for streaming TVs, guests, work devices, and family members who need different VPN behavior.

The available controls depend on your ASUS model and firmware. Newer routers may call the feature Guest Network Pro or simply Network; older routers may only have Guest Network, which does not offer the same VPN-by-SSID options.

What You Need Before Starting

  1. Connect to your ASUS router and open http://www.asusrouter.com or its LAN IP. For login details, see AsusWRT Router Access Guide.
  2. For a VPN WiFi network, first set up and verify at least one connected VPN profile under VPN > VPN Fusion. Choose a supported VPN provider from the AsusWRT VPN Setup Guides, then review How to Use ASUS VPN Fusion: Assign Devices and Multiple VPNs for routing options.
  3. Look for Guest Network Pro, Network, or VPN Network in your ASUS firmware. If you only see the traditional Guest Network screen, read the legacy note below before proceeding.

Create a Dedicated WiFi Network That Uses the VPN

Preferred route for supported ASUS models: create a VPN Network SSID so all devices joining that SSID use the chosen VPN without individual device assignments.

  1. Open Guest Network Pro > VPN Network, or the equivalent Network > Add Network > VPN Network menu in newer firmware.
  2. Choose a recognizable WiFi name such as Home-VPN and a strong WiFi password.
  3. Select the configured, connected VPN Fusion client/profile and enable VPN routing for that network.
  4. Review any options for local-network access, guest isolation, and bands, then click Apply.
  5. Connect a test device to the new Home-VPN WiFi SSID and check its public IP.

ASUS official walkthrough: Guest Network Pro / VPN Network Setup.

Alternative: Assign a VPN to an Existing Guest Network Pro SSID

  1. In Guest Network Pro / Network, open the existing Guest Network profile.
  2. Select the VPN tab, enable VPN routing, and choose your existing VPN Fusion client.
  3. Click Apply, reconnect a device to the guest SSID, and verify the VPN IP.

ASUS also documents this path: Assign a VPN to Guest Network Pro.

Create a Separate WiFi Network Without a VPN

Use a guest/secondary network routed through the regular ISP internet connection for devices that should not use the VPN.

  1. Under Guest Network Pro / Network, add a normal Guest Network or other suitable network profile (not the VPN Network preset).
  2. Set a clear name such as Home-ISP and secure it with a strong password.
  3. In that network profile’s VPN tab, leave the VPN assignment disabled or choose the Internet/ISP path if your firmware offers it.
  4. Check your VPN Fusion default connection and device policies. If a VPN is set to Apply to all devices, simply turning off the Guest Network’s VPN toggle may not guarantee an ISP bypass on every firmware. Configure an explicit ISP/bypass route where supported.
  5. Save, join the Home-ISP network with a test device, and confirm the public IP matches the ISP connection.

Confirm Each WiFi Network Uses the Intended Internet Route

  1. Connect a phone or laptop to the VPN WiFi SSID. Disable any VPN app or iCloud Private Relay on the device for this test.
  2. Visit WhatIsMyIPAddress.com and note the public IP and location. This should reflect your selected VPN endpoint.
  3. Disconnect and join the ISP WiFi SSID. Repeat the IP check; it should now show the ISP’s public internet route.
  4. If both SSIDs show the same IP, review the VPN Fusion default profile, guest-network VPN assignment, and any device-specific rules.

Common Issues and What to Check

I only see “Guest Network,” not “Guest Network Pro” or “VPN Network”

Your router may use older firmware or lack this feature. Traditional Guest Network creates a separate WiFi SSID, but the VPN routing option may not exist. Use VPN Fusion device assignments as an alternative rather than assuming the guest network automatically bypasses or uses the VPN.

Every network still uses the VPN

Check whether Apply to all devices is enabled in VPN Fusion. If it is, verify that the guest profile actually overrides the default route on your firmware. You may need an explicit per-network or per-device ISP rule.

A phone reports the wrong IP although the guest VPN profile is correct

Temporarily disable device-level VPN apps, iCloud Private Relay / Limit IP Address Tracking, browser proxy, or Private DNS settings, then reconnect. See Device Settings That Interfere With Router VPN.

Guest devices cannot reach local printers or other LAN devices

Check the guest network’s intranet access / network isolation settings. Changing isolation affects LAN access, not necessarily VPN selection. Keep guests isolated unless LAN access is actually needed.

Upgrade your ASUS router

Explore the Latest WiFi 7 ASUS FlashRouters

Looking for a newer ASUS router? Browse WiFi 7 models available from FlashRouters and compare features to find the right fit for your home or office. VPN Fusion and other features vary by router model and firmware.

Shop ASUS WiFi 7 Routers →

Why is my WiFi signal weak?

· ·

If you find that wireless signal strength is weak while connected to the FlashRouter’s network we recommend that you do the following:

  1. Make sure that you have the external antennas fully connected to the FlashRouter.
  2. “Forget” the wireless network on the device and then rejoin with a fresh connection. This will be different for each device but can be effective.
  3. Make sure you are within an appropriate range for the network you are using. Keep in mind that a 2.4GHz network will always have better range than 5GHz networks. Devices further away from the router should use the 2.4GHz network.
  4. Interference from your wireless environment can also cause this issue. On the Wireless > Basic Settings adjust the Wireless Channel for the network you are experiencing the issue for. Channel interference is a likely cause for weak signal strength.

How do I save and load a backup file?

· ·

Why should I save a backup file?

Save a backup file of your correctly configured DD-WRT settings to ensure you can load the working settings in a few simple clicks instead of manually configuring each setting in the event of a reset.

Save a backup file

Navigate to Administration > Backup

  1. Click Backup and save / download the file.
  2. Name the backup file “FlashRouter Backup”

Load a backup file

Navigate to Administration > Backup

  1. Click Choose File and find the backup file you previously saved.
  2. Click Restore.
How to Load a Backup File in DD-WRT FlashRouter

My 5.0GHz network is not showing up

· ·

Verify the device supports 5GHz

5.0GHz networks are not compatible with all devices so first make sure that you device’s wireless adapter supports 5GHz wireless frequencies.

If you are not sure, find out if your device support 5 GHz via Google search or by looking in the wireless hardware details in the device’s network settings. If you see Wireless a/b/g/n support then you have a compatible device. If you are missing the Wireless a then this means there is no 5 GHz support.

Enter the recommended wireless settings

Our team has tested the wireless functionality for each FlashRouter that we offer and shared our recommended wireless settings in our Wifi Setup area. Replicate the settings for your FlashRouter model found on that page.

Lower the wireless channel

Some devices do support 5.0GHz connections but not the higher channels that DD-WRT firmware offers.

Navigate to Wireless > Basic Settings

Lower the wireless channel setting for the 5.0GHz band that is not showing. Based on our tests the most broadly compatible channels are 36, 48 and 161.

CLICK APPLY SETTINGS

Refresh your device's network adapter

The easiest way to accomplish this is by rebooting your device as the settings to reset your adapter may vary on all types of internet connected devices.

Review wireless Status

Navigate to Status > Wireless

The readouts on this page can help tell if there are errors with the FlashRouter’s wireless. View our article on how to read the Wireless Status page for more information.

Change WiFi name and password on Asus

· ·

Set a custom WiFi network name and password for your devices to join the Asus FlashRouter’s network.

View our guide for more instructions on how to access AsusWRT firmware settings.

1. Under General select Network Map.

Merlin Wifi change name and pass

2. In the Network name (SSID) field enter the name you want your Asus WiFi to appear as. This can be the same or different for both 2.4GHz and 5GHz bands. We typically advise setting different names for each so you can connect your streaming devices to the 5GHz band as that is the faster WiFi band.

3. In the WPA-PSK key field enter the password you want to join your devices to the Asus WiFi network. If your WiFi names are the same for 2.4GHz and 5GHz make sure they have the exact same wireless password set.

4. Click Apply and then rejoin the new wireless network.

Parental Controls on Roqos

· ·

The Roqos Core includes a suite of user access settings which can be used as Parental Controls.
You can create individual user profiles and assign specific devices. Using these profiles you can restrict access, block certain content, or even monitor internet usage if you choose to do so.

Create User Profiles

  1. Using the navigation pane on the left of the screen, select USERS.
  2. Select the ADD USER button at the top of the menu.
  3. Create a name to identify the user. You may also add a photo or picture to associate with this user however this is optional.
  4. Select the SAVE button at the bottom of the menu.

Assign Devices

  1. Once you have created a user, you must assign one or more devices to the user.
  2. Using the navigation pane on the left of the screen, select USERS. Choose a user from the list.
  3. You are now in the USER/GROUP PROFILE menu.
  1. Select DEVICES.
  2. Select ADD DEVICE.
  1. The ADD DEVICES menu lists all devices which are currently or previously connected to the Roqos. You cannot assign a device to a user unless it has been connected to the Roqos. 
  2. Use the check box to select one or more devices and then select the SAVE button to assign the device to the user.

A device can only be assigned to one user. Access restrictions you place on a user such as scheduled internet access or content restriction will apply to all devices assigned to that user regardless of who in your home is actually using the device at that time.

Turn Off Internet Access

  1. Using the navigation pane on the left of the screen, select USERS. Choose a user from the list
  2. You are now in the USER/GROUP PROFILE menu
  3. Use the PAUSE button next to the user’s name to halt all internet access to the devices assigned to this user. Conversely, you can restore internet access by pushing the PLAY button here as well.

Schedule Internet Access

  1. Using the navigation pane on the left of the screen, select USERS. Choose a user from the list.
  2. You are now in the USER/GROUP PROFILE menu.
  3. Select SCHEDULE PAUSES. You can create multiple schedules for each user to pause their internet access on a daily recurring basis for every day of the week.

Enable Content Filters

  1. Using the navigation pane on the left of the screen, select USERS. Choose a user from the list.
  2. You are now in the USER/GROUP PROFILE menu.
  3. Select FILTER. Use existing category and content filters provided by Roqos and customize with your own blocked and allowed site lists.
  4. Select SAVE.

Monitor Internet Usage

  1. Using the navigation pane on the left of the screen, select USERS. Choose a user from the list.
  2. You are now in the USER/GROUP PROFILE menu.
  3. Select USAGE HISTORY. Access usage data for all devices assigned to this user. This includes websites visited and activity times.

Please note that in order to collect device information, you must enable this functionality on your Roqos. It is disabled by default.

  1. Using the navigation pane on the left of the screen, select ADVANCED SETTINGS.
  2. Select MISCELLANEOUS.
  3. Activate the COLLECT USER INTERNET USAGE and COLLECT DEVICE DATA USAGE options.

TROUBLESHOOTING

Still having issues? Visit our Troubleshooting section to diagnose common problems here.

Troubleshoot Here

How do I change the DHCP range of my FlashRouter?

· ·

Whenever a device joins the FlashRouter network via wired or WiFi connection the DHCP server on the router gives out a local IP address to each device so all these devices can interact on your local network.

Increase the DHCP range to allow more users to automatically be assigned an IP address or decrease the DHCP range to limit the users that are automatically assigned an IP address.

Navigate to Setup > Basic Setup

Change DHCP Range in FlashRouter DD-WRT Settings
  1. Under Network Address Server Settings (DHCP) change the Maximum DHCP Users to your preferred value.
  2. You can edit the Start IP Address to 2 and Maximum DHCP Users to 254 for the most available slots.
  3. Click Apply Settings.

Change WiFi name and password on Merlin

· ·

Set a custom WiFi network name and password for your devices to join the Merlin FlashRouter’s network.

Login to Asus Merlin firmware settings in a browser on any computer or smart device.

1. Under General select Network Map.

Merlin Wifi change name and pass

2. In the Network name (SSID) field enter the name you want your Asus WiFi to appear as. This can be the same or different for both 2.4GHz and 5GHz bands. We typically advise setting different names for each so you can connect your streaming devices to the 5GHz band as that is the faster WiFi band.

3. In the WPA-PSK key field enter the password you want to join your devices to the Merlin WiFi network. If your WiFi names are the same for 2.4GHz and 5GHz make sure they have the exact same wireless password set.

4. Click Apply and then rejoin the new wireless network.

What are some extra steps I can take to secure my network?

· ·

DD-WRT open source firmware removes many firmware vulnerabilities and backdoor access issues that may cause problems in stock firmware. DD-WRT is also updated more frequently than stock firmware, so be sure to always check with the FlashRouter support team to see which DD-WRT build we recommend for the highest level of security for your router at any time.

Aside from avoiding common issues and flaws with stock firmware, DD-WRT give you more control over the firmware settings and allows you to take some extra steps to really lock down your network security. In this article we highlight additional options for WiFi network security and also preventative measures for remote execution attacks.

Wireless MAC Filtering

Navigate to Wireless > MAC Filter

Access FlashRouters DD-WRT Admin Enable MAC Filtering
  1. Set Use Filter to Enable.
  2. Select either Prevent or Permit
    • Choose Prevent to add MAC addresses that you don’t want to join your network.
    • Choose Permit to add MAC addresses that you do want to join your network, automatically blocking all others.
  3. Select Edit MAC Filter List.
  4. Add the MAC Address of the wireless devices you want to prevent or permit. Be sure to use the xx:xx:xx:xx:xx:xx format. Hint: You can see a list of connected devices MAC Address by clicking Wireless Client MAC List.
  5. Click Save.
  6. Replicate the steps above for each wireless band.
  7. Click Apply Settings.

Disable Remote Access

Navigate to Services > Services

Access FlashRouters DD-WRT Admin Settings and Disable Remote Access
  1. Set SNMP to Disable – this setting disables Simple Network Management Protocol, which prevents software from polling your network for information about connected devices.
  2. Set SSHd to Disable – disabling the Secure Shell is a simple way to prevent root access and brute force attacks on your network.
  3. Set Telnet to Disable – Telnet is a less secure version of SSH to manage your local router network via command line.
  4. Click Apply Settings.

Navigate to Administration > Management

Access FlashRouters DD-WRT Admin Settings and Disable Remote Access 2
  1. Set Web GUI Management to Disable.
  2. Set SSH Management to Disable.
  3. Set Telnet Management to Disable.
  4. Set Allow Any Remote IP to Enable – Even though this setting is set to Enable there is no remote access because Web GUI Management is already set to Disable. 
  5. Click Apply Settings.

Router FAQs

· ·

Router FAQs

What is an IP Address?

An IP (Internet Protocol) Address is a numerical assignment for each device (cell phone, iPad, laptop computer, printer etc) inside a network that uses the Internet Protocol for communication. Internet Protocol is responsible for routing information packets across network boundaries. It is the main protocol establishing the Internet.

An IP address serves two predominant functions. First is to host or network interface identification. Second, it provides location addressing. To put it bluntly, an IP address tells wherever you are connecting, to whom you are visiting, and where you are located.

What is DNS?

DNS (Domain Name System) is a protocol within the TCP/IP protocol that uses a set of standards for how computers exchange data on the Internet and on many private networks.

The basic job of DNS is to convert a user-friendly domain name into an IP address that computers use to identify one another. Think of DNS like your cellphone contact list; you tap the name and the phone contacts to a phone number.

It is easier to remember flashrouters.com, rather than its IP address. Imagine if you had to remember all of the IP addresses of your favorite websites!

What is DNSMasq?

DNSMasq is a local DNS server that speeds up host-name searches from your computer/Internet connection after pressing enter.

Basically, DNSMasq gives the router some advanced enterprise functionality – caching DNS records locally so you have a faster browsing experience. Your computer only has to go to the router instead of repeatedly scouring the web for a commonly visited site.

What is Throughput and How Do I Improve it?

Throughput is the average rate of successful delivery of messages through a network. Simply put, throughput measures the speed of message delivery inside a network. If you think about it in relationship to networks and Internet connections, throughput defines the user experience. The key to a pleasing user experience is uninterrupted service and smooth data transfer.

In order to improve throughput,  you should get a router with more memory. If you notice that your network is running slowly due to congestion, you could probably benefit by upgrading your router to one with more memory. FlashMemory and RAM on a router add more room to prevent network congestion and improve throughput.

Most of FlashRouters‘ high-end units come with at least 8 MB of Flash memory and 64 MB of RAM which should be more than capable for providing for the average home users’ or small business will need in the future.

What is PPPoE?

PPPoE stands for Point-to-Point Protocol over Ethernet, a network protocol for encapsulating Point-to-Point Protocol (PPP) frames inside Ethernet frames. It is used mainly with DSL services where individual users connect to a DSL modem over Ethernet.

With PPPoE, users virtually “dial” from one machine to another over an Ethernet network, establish a point-to-point connection and then data packets are securely transported through the connection.

PPPoE offers an Internet service provider (ISP) an easier way to track exactly how much bandwidth you are using in case they want to charge for it in the future.

What is the Difference Between VPN Encryption and Wireless Network Security?

VPN Encryption: If you are connected to the VPN on your home network, then any data that flows over the Internet is entirely encrypted whether you are connected to the Internet either wired or wirelessly. This means that if your Local ISP was trying to see what you are browsing or downloading, they would not be able to see your data.

Wireless Network Security: If you leave your wireless network open or insecure, it does not matter whether Internet traffic is encrypted, because someone can directly see what you are doing on your network, or even worse, can go in and put a wireless password on your network, locking you out. They may also be able to access folders and files on your computer without your control.

Best thing to do is protect your wireless network with a WPA secured password along with your VPN connection.

Are FlashRouters Affected By the Shellshock Bug?

No.

According to our in-house testing and multiple DD-WRT community reports, we have found that the Shellshock vulnerability will not work on with DD-WRT or TomatoUSB installed router. The vulnerability is based on a shell called BASH (Bourne Again Shell) but DD-WRT & Tomato firmware use BusyBox which is confirmed to not have this issue.

Please be advised that if you are using Optware on your DD-WRT router there is a chance that implementation is BASH based. Only used trusted optware on your router.

Private Internet Access (PIA) Setup for Privacy Hero

· ·

Privacy Hero supports Private Internet Access (PIA) with WireGuard (recommended) and OpenVPN. You need an active PIA subscription and your PIA VPN username and password.

Important difference: PIA WireGuard has a built-in provider integration in Privacy Hero. Choose Private Internet Access from the VPN provider list—not Custom WireGuard. No WireGuard configuration file or key generation is needed.

By default, Privacy Hero can automatically select an optimal available PIA server based on your location and server conditions. Alternatively, use Advanced Options to enter a specific PIA server hostname from the regional list below.

Privacy Hero is cloud-managed. You can configure your router from any device with an internet connection, whether or not you are on the Privacy Hero WiFi network.

Set Up PIA WireGuard in Privacy Hero (Recommended)

Unlike most other providers, PIA WireGuard does not use Custom VPN file uploads in Privacy Hero. The built-in PIA integration connects using your PIA account credentials and handles the WireGuard configuration for you.

  1. Open app.privacyhero.com and sign in to your Privacy Hero account.
  2. Open the VPN section. Select Change beside your current VPN provider.
  3. Choose Private Internet Access from the provider list. Do not select Custom for this WireGuard setup.
  4. Enter your PIA VPN account username and password (not your Privacy Hero dashboard credentials). You can check your account at PIA Client Control Panel.
  5. For automatic server selection, leave the optional server hostname unset, then click Save to connect. Wait until Privacy Hero displays Connected.
Privacy Hero built-in Private Internet Access provider login settings

Choose the Automatic Server or a Specific PIA Location

Privacy Hero offers two ways to select the PIA WireGuard server:

  • Automatic (recommended for most users): Leave the server hostname field blank. Privacy Hero selects an optimal available PIA location, generally favoring nearby servers and server conditions such as load. You do not need to manually maintain a server address.
  • Specific location: Enter a PIA region hostname under Advanced Options. This is useful when you need an IP address from a particular country or city.
  1. To use a specific location, open the existing Private Internet Access connection and select Advanced Options.
  2. Enter a complete PIA server hostname from the list below, for example us-newyorkcity.privacy.network or uk-london.privacy.network.
  3. Click Save, wait for Connected, then verify your new public IP address. If the selected location becomes unavailable, try another hostname or remove the hostname to return to automatic selection.
Privacy Hero Private Internet Access Advanced Options field for entering a VPN server hostname

PIA Server Hostname List by Region

Use these hostnames in PIA > Advanced Options when you prefer a specific location. Expand a region below and copy the complete hostname, including .privacy.network. This list is retained from the existing FlashRouters guide.

Server availability can change. Some hostnames, particularly those ending in -pf or marked for streaming, are specialized locations and may not be available for every connection. If a hostname no longer works, use automatic selection or check PIA’s current location list for available locations. PIA’s location list names regions; it does not necessarily provide matching hostnames.

North America (65 locations)
bahamas.privacy.networkca-ontario.privacy.networkca-toronto.privacy.networkca-vancouver.privacy.networkca-montreal.privacy.networkgreenland.privacy.networkgt-guatemala-pf.privacy.networkmexico.privacy.networkpanama.privacy.networksanjose.privacy.networkus-alabama-pf.privacy.networkus-alaska-pf.privacy.networkus-arkansas-pf.privacy.networkus-atlanta.privacy.networkus-california.privacy.networkus-chicago.privacy.networkus-connecticut-pf.privacy.networkus-denver.privacy.networkus-florida.privacy.networkus-houston.privacy.networkus-idaho-pf.privacy.networkus-indiana-pf.privacy.networkus-iowa-pf.privacy.networkus-kansas-pf.privacy.networkus-kentucky-pf.privacy.networkus-lasvegas.privacy.networkus-louisiana-pf.privacy.networkus-maine-pf.privacy.networkus-massachusetts-pf.privacy.networkus-michigan-pf.privacy.networkus-minnesota-pf.privacy.networkus-mississippi-pf.privacy.networkus-missouri-pf.privacy.networkus-montana-pf.privacy.networkus-nebraska-pf.privacy.networkus-new-hampshire-pf.privacy.networkus-new-mexico-pf.privacy.networkus-newyorkcity.privacy.networkus-north-carolina-pf.privacy.networkus-north-dakota-pf.privacy.networkus-ohio-pf.privacy.networkus-oklahoma-pf.privacy.networkus-oregon-pf.privacy.networkus-pennsylvania-pf.privacy.networkus-rhode-island-pf.privacy.networkus-seattle.privacy.networkus-siliconvalley.privacy.networkus-south-carolina-pf.privacy.networkus-south-dakota-pf.privacy.networkus-texas.privacy.networkus-tennessee-pf.privacy.networkus-vermont-pf.privacy.networkus-virginia-pf.privacy.networkus-washingtondc.privacy.networkus-west-virginia-pf.privacy.networkus-wisconsin-pf.privacy.networkus-wyoming-pf.privacy.networkus3.privacy.networkus-baltimore.privacy.networkus-honolulu.privacy.networkus-newjersey.privacy.networkus-saltlakecity.privacy.networkus-streaming-2.privacy.networkus-streaming.privacy.networkus-wilmington.privacy.network
South America (9 locations)
ar.privacy.networkbo-bolivia-pf.privacy.networkbogota.privacy.networkbr.privacy.networkec-ecuador-pf.privacy.networkpe-peru-pf.privacy.networksantiago.privacy.networkuy-uruguay-pf.privacy.networkvenezuela.privacy.network
Europe (51 locations)
al.privacy.networkad.privacy.networkaustria.privacy.networkbrussels.privacy.networkba.privacy.networksofia.privacy.networkzagreb.privacy.networkczech.privacy.networkde-berlin.privacy.networkde-frankfurt.privacy.networkdenmark.privacy.networkdenmark-2.privacy.networkspain.privacy.networkes-valencia.privacy.networkee.privacy.networkfi.privacy.networkfi-2.privacy.networkfrance.privacy.networkgr.privacy.networkhungary.privacy.networkitaly.privacy.networkitaly-2.privacy.networkis.privacy.networkireland.privacy.networkman.privacy.networklv.privacy.networkliechtenstein.privacy.networklt.privacy.networklu.privacy.networkmalta.privacy.networkmd.privacy.networkmonaco.privacy.networkmontenegro.privacy.networknl-amsterdam.privacy.networkmk.privacy.networkno.privacy.networkpoland.privacy.networkpt.privacy.networkro.privacy.networksweden.privacy.networksweden-2.privacy.networkrs.privacy.networksk.privacy.networkslovenia.privacy.networkswiss.privacy.networktr.privacy.networkuk-london.privacy.networkuk-manchester.privacy.networkuk-southampton.privacy.networkuk-2.privacy.networkua.privacy.network
Asia (26 locations)
ae.privacy.networkbangladesh.privacy.networkcambodia.privacy.networkchina.privacy.networkcyprus.privacy.networkgeorgia.privacy.networkhk.privacy.networkin.privacy.networkisrael.privacy.networkjakarta.privacy.networkjapan.privacy.networkjapan-2.privacy.networkkazakhstan.privacy.networkkr-south-korea-pf.privacy.networkkualalumpur.privacy.networkmacau.privacy.networkmongolia.privacy.networknp-nepal-pf.privacy.networkphilippines.privacy.networkqatar.privacy.networksaudiarabia.privacy.networksg.privacy.networksrilanka.privacy.networktaiwan.privacy.networkvietnam.privacy.networkyerevan.privacy.network
Oceania (7 locations)
au-adelaide-pf.privacy.networkau-australia-so.privacy.networkau-brisbane-pf.privacy.networkaus-melbourne.privacy.networkaus-perth.privacy.networkau-sydney.privacy.networknz.privacy.network
Africa (5 locations)
dz.privacy.networkegypt.privacy.networkmorocco.privacy.networknigeria.privacy.networkza.privacy.network

Set Up PIA OpenVPN in Privacy Hero

OpenVPN is the alternative when you need a manually uploaded connection or if the built-in PIA WireGuard method does not work on your network. OpenVPN uses Custom in Privacy Hero, unlike the built-in PIA WireGuard setup.

Download a PIA OpenVPN Configuration File

  1. Sign in to the PIA Client Control Panel using your PIA VPN account.
  2. Open Downloads and scroll to OpenVPN Configuration Generator or OpenVPN Configurations.
  3. If using the generator, choose OpenVPN 2.4 or newer and Linux when these options are offered, then choose an available server location.
  4. Select your preferred configuration. UDP / 1198 (AES-128-CBC) is a standard default. UDP / 1197 (AES-256-CBC) is an alternative. Use a PIA-provided TCP configuration if UDP does not work on your network.
  5. Click Generate or download a suitable pre-made configuration and save the resulting .ovpn file. Each server file is tied to its selected location/settings.

PIA also provides pre-made OpenVPN configuration bundles; see PIA’s OpenVPN file instructions.

Add PIA OpenVPN as a Custom VPN

  1. Open Privacy Hero, go to VPN, click Change, and select Custom.
  2. Choose OpenVPN and upload the PIA .ovpn file downloaded in the previous section.
  3. Enter your PIA VPN username and password in the Custom OpenVPN authentication fields.
  4. Click Save and confirm Privacy Hero shows Connected.
Privacy Hero Custom OpenVPN configuration with file upload and username password fields

Note: If OpenVPN UDP cannot connect, try a TCP profile from PIA or another server. When switching protocols, make sure you upload a matching PIA configuration file.

Verify Your Private Internet Access Connection

  1. Connect a device to the Privacy Hero WiFi or LAN network.
  2. Disconnect any PIA app or other VPN running directly on the device so the router VPN can be tested independently.
  3. Open a private/incognito browser window and visit PIA What Is My IP.
  4. Confirm that your public IP address reflects the VPN connection, and that the approximate location is consistent with either the selected hostname or Privacy Hero’s automatic server selection.

Privacy Hero VPN settings can be changed remotely, but the device used to verify the VPN IP must be connected to the Privacy Hero network.

Streaming Relocation and Your PIA Location

If Streaming Relocation is enabled for a supported service, that service may use the Streaming Relocation location instead of your PIA VPN server location. See Privacy Hero Streaming Relocation.

PIA VPN Not Connecting?

If Privacy Hero reports Failed, stays on Connecting, or connected devices lose internet access, try these checks:

  1. Confirm your PIA subscription is active and enter your PIA VPN login, not your Privacy Hero email/password.
  2. For built-in PIA WireGuard, verify the provider is Private Internet Access—not Custom. No downloaded WireGuard file is required.
  3. Remove any specific server hostname to test automatic server selection. If that connects, the previous hostname may be unavailable.
  4. For Custom OpenVPN, upload a fresh PIA .ovpn file, re-enter the PIA credentials, and try a different server or a TCP configuration.
  5. Turn off the router VPN temporarily to check that normal internet access works. If the VPN Kill Switch is blocking internet traffic, temporarily disable it for testing, then restore your preferred setting.
  6. Check whether a separate VPN app, iCloud Private Relay, Private DNS, proxy, or security software on the testing device is affecting your VPN IP results.

No Internet When the VPN Disconnects?

The Privacy Hero VPN Kill Switch may intentionally block internet access if the VPN goes down. See Privacy Hero VPN Kill Switch: No Internet or WiFi Troubleshooting.

VPN Connected but One Device Shows the Wrong IP?

If other devices show the expected VPN address, review device VPN apps, iCloud Private Relay, Private DNS, and security settings.

Related Privacy Hero Guides

Warranty and Returns FAQs

· ·

Warranty and Returns FAQs

At FlashRouters, we are confident that every router sold will function as advertised. We open, inspect, upgrade, configure, and then test all FlashRouters before they get shipped out. That is why we guarantee you will receive a working unit and offer our own 1-Year Hardware Warranty included with all New and Refurbished routers purchased from the FlashRouters website.

If you would like to extend the warranty coverage period to 2 years, the option is available during the FlashRouters checkout process.

Since we are so certain you will be happy with your upgraded and super secure network, all routers purchased from FlashRouters.com also come with a 30-day satisfaction guarantee.

Please read the warranty and return section in detail before placing an order or requesting an RMA. Our goal is to make the return process as smooth and transparent as possible for all customers. If the router you purchased does not work out for your needs we still want you to be satisfied with your purchasing experience.

Hardware Warranty and Return Policy

Requesting an RMA

Automated Return Merchant Authorization (RMA) requests are available from within your customer account panel. If you are eligible for a return then your RMA request will be approved. If your RMA request is not valid then it will be denied and you must e-mail FlashRouters Support for any additional information or actions. RMAs are valid for 7 days from the day they are issued. 

The following are the available options when submitting an RMA request. Continue reading for more information on all available RMA options and conditions. 

  1. Hardware Guarantee – available for 7 days after receiving your FlashRouter.
  2. Satisfaction Guarantee – available for 30 days after receiving your FlashRouter.
  3. Hardware Warranty – available for 1 year, or 2 years if upgraded when purchasing a FlashRouter.
  4. Hardware Repair – Anyone with a valid FlashRouters Support subscription is eligible for free Hardware Repair. 

Please note we can only provide prepaid labels for approved Hardware Warranty returns within the USA. Prepaid labels are not available for international customers. All return shipping for 30 Day Satisfaction refunds is paid for by the customer.

Hardware Guarantee

In the rare case you receive a faulty router, you can open a ticket to contact FlashRouter Support for an RMA or request an RMA in your customer account panel and we will work to rectify the situation immediately. If it is determined that the power supply you received was faulty, and not the router itself, our team will immediately ship you out a tested power supply at no additional cost.

Rest assured that we individually test and inspect every FlashRouter with great detail before shipment. BUT… if router gremlins (yes they do exist) snuck into your router during the shipping process and it no longer powers on, our team will supply you with a prepaid shipping label to return the unit back to our offices. As soon as we receive verified tracking on your return shipment we will ship out another thoroughly tested unit to you at no additional cost.

You must contact us within 7 days from when you received your FlashRouter to be eligible for a Hardware Guarantee prepaid shipping label from FlashRouters.

30-Day Satisfaction Guarantee

If you are not satisfied with the performance of your router after trying it out for up to 30 days, you can open a ticket to contact FlashRouter Support for an RMA or request an RMA in your customer account panel. Once the RMA is approved, you will then have the option to ship the unit back to FlashRouters.

Once we receive the return, our team inspects and refunds accordingly based on the original purchase price of your FlashRouter. Please note there is a $25 restocking fee and refunds do not include any initial shipping costs associated with your order. All restocking fees are returned as Store Credit. This means if you make another purchase at FlashRouters then your fee is refunded.

The item must also be fully functional and have no signs of cosmetic damage for you to receive the maximum refund. If you do not include the original boxing, or any router accessories you may also be charged an additional fee as indicated.

Ethernet Cable: $5

Power Source: $10 

Antennas: $5 per antenna

Router Stand: $10

Box: $10

Cosmetic Damage: Up to $25

What is covered under the 30-Day Satisfaction Guarantee?

If the VPN speeds or WiFi network speeds are not what you had hoped, if the setup is too complicated, or you just decided on another solution; these are all covered under the 30-Day Satisfaction Guarantee. 

We will not accept any returns of working routers after 30 days from the date you received your router. After 30 days, router returns/replacements will only be processed under the Hardware Warranty. 

Can I get the restocking fee waived?

If you place a new order for a different FlashRouter unit before returning your initial purchase, then we will waive the restocking fee. Otherwise the $25 restocking fee will be applied to your customer account as a store credit. You can then use this $25 store credit on any future FlashRouter purchase.

Rewards Points refunds

If you return your FlashRouter under the 30 day satisfaction guarantee then you will lose any reward points received for your initial purchase.

Hardware Warranty

A 1-year Hardware Warranty is included with the purchase of all New and Refurbished FlashRouters. If your router suffers hardware failure within 365 days from the date you received the unit then we will replace your router with another fully tested unit. You must pay for return shipping of the faulty unit back to our offices located in New Jersey, USA and our team will ship out your replacement at no additional cost.

You must contact the FlashRouter support team for an RMA number or request an RMA from your customer account panel before returning a router for warranty replacement. If you do not receive approval for a return then you will not be eligible for a replacement unit.

There are 2 options for receiving a Hardware Warranty replacement unit:

Option #1: Process another order for immediate shipping and as soon as we receive the returned device back in our offices we will issue you a refund for the initial purchase.

Option #2: Ship your faulty router back to our office, and as soon as we receive the unit our returns department will have a replacement unit shipped out to you at no extra cost.

How long do I have before my RMA expires?

RMA’s are good for 7 days from the date they are issued.

What if I upgraded to a 2 year Hardware Warranty at checkout?

All refund, replacement, RMA details, and options covered by the 1-year Warranty apply in the exact same manner for 2 year warranties over each respective warranty coverage period.

If for any reason the router you purchased is no longer in stock or discontinued then you have the option to replace your router with one of equal value or receive a refund. Hardware warranties are only eligible for refunds if we are unable to provide a replacement unit for you.

What should I do if my router is out of warranty coverage?

If your FlashRouter is out of the warranty coverage period, we are first and foremost apologetic for the passing of your router. Be sure to contact our sales team though and you can receive a special coupon as a return customer for a shiny new wireless networking centerpiece.

What is not covered with a FlashRouter Warranty?

Items that have been clearly damaged either by the customer or during the return process are not eligible for a full refund. This includes routers that have visible dents, scratches, or moving parts inside the router.

Can I upgrade to a 2 year warranty after my FlashRouter purchase?

2 year warranty upgrades are only available at the time of your FlashRouter purchase. Upgrades are not available once a FlashRouter order has been shipped. 

Can I get a Warranty on my router if I purchased a “Flash My Router” plan from FlashRouters?

Routers that have been “flashed” and configured by our support specialists for anyone who has purchased a Flash My Router Plan are not eligible for warranty coverage from FlashRouters. Only routers purchased through the FlashRouters.com website are eligible for warranty replacements or refunds.

Hardware Repair

FlashRouters is proud to offer a free repair and upgrade service for anyone with an active Silver or Gold Service Plan subscription. Any and all shipment costs associated with FlashRouter repairs or upgrade requests are the burden of the customer and will not be paid for by FlashRouters. However, the repair and upgrade service itself is FREE.

If you do choose to ship your router back to our office for repair, then you should include a prepaid shipping label in your package back to your home or office, so our team can send the router back to you whether we are able to repair the unit or not. Router accessories like power supplies, ethernet cable, or antennas do not need to be included when shipping back a unit for repair.

If our team is not able to resurrect your router from a power failure, faulty firmware upgrade, or any other reason then we can return the faulty unit back to you using the return shipping label included with your return package. Alternatively, we can destroy the unit and refund the return shipping costs if that is your preference.

Open Box Routers

What is an Open Box Router?

Open Box routers are fully functional units that have cosmetic flaws and are sold at heavy discounts. These units come with the same Support Plan options as New or RM units, which means you get the same support service with extremely discounted hardware.

Open Box routers are covered under the FlashRouter 30-Day Satisfaction Guarantee BUT come with no Hardware Warranty. We take every measure possible to ensure complete functionality and our team fully load tests these devices before shipment, but you should be very aware that you buy these discounted “open box” devices at your own risk without any Hardware Warranty.

What is the Open Box Router return policy?

Open Box Routers can only be returned within 30 days from the date you received your router. Returns will not be accepted on open box routers after 30-Day Satisfaction Guarantee window has expired. Please note that Open Box Router return shipping costs are not covered by FlashRouters and initial shipping costs are not included in any refunds. 

Accessories Warranty

All Accessories come with manufacturer warranties as listed on the respective product pages. 

FlashRouters will accept returns for refund or replacement of accessories only within 30 days from the date you received your order. After 30 days you must contact the manufacturer for any warranty replacements.

Accessories must be returned with all original packaging and with no cosmetic damage to receive a full refund. A missing box or damage to an item will result in a restocking fee per our discretion.

"Flash My Router" Refund Policy

The “Flash My Router” product offered by FlashRouters is a virtual service provided by the FlashRouters support team. This product includes a remote support session where our support team will flash your router and then complete your internet, WiFi, and VPN setup, and in certain cases support additional router features. 

Once your remote support session is completed there are absolutely no refunds on “Flash My Router” purchases. In the case we are unable to successfully flash your router we will offer a full refund for your “Flash My Router” purchase. “Flash My Router” purchases are fully refundable if you decide you would no longer like to use the service after your purchase is completed.

Service Plan Subscription Refund Policy

All FlashRouter router purchases include a recurring FlashRouters Service Plan subscription. There are 3 levels of support to choose from as either a quarterly or yearly recurring billing plan.

30-Day Satisfaction Guarantee

If you choose to return your FlashRouter under the 30-Day Satisfaction Guarantee, then you are eligible for a full refund on any Service Plan purchased with your FlashRouter.

Cancellation Policy

You may cancel your recurring billing at any time and you will not be charged again. Please note you will not be refunded for unused time from the initial billing/service period of your support plan subscription.

If you choose to cancel your 3 month FlashRouter support plan then you will retain support until the end of the 3 month period. If you choose to cancel your 1 year FlashRouter support plan then you will retain support until the end of the 1 year period. You will not lose time from your existing service plan if you cancel when a plan is active.

There is a 7-day grace period after Service Plan renewals have been charged, where you may request an immediate cancellation and full refund.

How do I change my FlashRouter Support subscription level?

How do I Upgrade my Service Plan?

You can upgrade a Service Plan at any time during a billing cycle. You must e-mail or live chat our support team and request an upgrade. Our team will then issue you store credit for any unused time on your existing Service Plan, which will then be immediately applied to your new upgraded Service Plan purchase. Your recurring billing will then continue at the new Service Plan level. Your 3 months or 1 year of upgrade service will start again from the date of the upgrade purchase. 

How do I switch from a Quarterly to a Yearly Service Plan?

If you would like to switch to a Yearly plan from a Quarterly plan of the same service level, then you must e-mail or live chat our support team and request an upgrade. Our team will then issue you store credit for any unused time on your existing Quarterly Service Plan, which will then be immediately applied to your new Yearly Service Plan purchase. Your recurring billing will then continue at the Yearly Service Plan level. Your 1 year of service will start again from the date of the upgrade purchase. 

How do I Downgrade my Service Plan?

If you are subscribed a Service Plan, but would like to switch to a lower level Service Plan then you can request that our support team cancel your recurring billing at any time. As soon your existing Service Plan is expired you can make a new purchase for the new Service Plan of your choice.

How do I switch from a Yearly to a Quarterly Service Plan?

If you would like to change the billing cycle from yearly to quarterly, you may cancel your existing subscription plan and then once your year of service has expired, you may purchase a Quarterly Service Plan instead.

If you just purchased a FlashRouter, there is a 7-day grace period from when you receive your unit if you would like an immediate change from Yearly to a Quarterly Service Plan.

How do I cancel my subscription?

You may request a Service Plan subscription cancellation by e-mailing support@flashrouters.com or from within your customer account panel at any time. You will be notified of a successful cancellation and your payment method will not be billed again.

Please note there are no refunds when cancelling your subscription. Cancellation means you will not be billed again for your Service Plan, there are no partial refunds for cancelled Service Plans.

ExpressVPN Setup for Privacy Hero

· ·

Privacy Hero supports ExpressVPN using OpenVPN. To connect, you need your ExpressVPN Manual Configuration username and password and an OpenVPN (.ovpn) configuration file for your preferred server location.

Important: In Privacy Hero, choose Custom as the VPN provider. Upload the ExpressVPN .ovpn file and enter your separate Manual Configuration credentials, not your regular ExpressVPN website login.

Privacy Hero is cloud-managed, so you can complete setup from any computer, smartphone, or tablet with an internet connection. You do not need to be connected to Privacy Hero WiFi while changing the settings.

Get Your ExpressVPN Manual Configuration Credentials

ExpressVPN provides separate credentials for manual OpenVPN connections. These are different from your normal ExpressVPN website email and password.

  1. Open ExpressVPN Set Up Devices and sign in to your ExpressVPN account.
  2. In the left navigation, select Set Up Devices.
  3. Under Applications, expand Advanced setup and choose Manual Configuration.
  4. Find your unique Username and Password under Manual Configuration. Keep this tab open so you can copy them into Privacy Hero.

Important: Do not use your regular ExpressVPN account password, and do not share your manual configuration credentials publicly.

Download Your ExpressVPN OpenVPN Server File

Each available ExpressVPN location has its own OpenVPN configuration file. The file determines the server location used by Privacy Hero.

  1. On the same Manual Configuration page, locate the server regions, such as Americas, Europe, Asia Pacific, or Middle East & Africa.
  2. Expand your preferred region and download the UDP .ovpn file for an available location. Save it to the device you are using to configure Privacy Hero.

Only locations offered on your ExpressVPN Manual Configuration page can be used for this setup. To change locations later, download the corresponding .ovpn file and upload it to Privacy Hero.

Add ExpressVPN to Privacy Hero as a Custom VPN

ExpressVPN uses Privacy Hero’s Custom VPN configuration rather than a dedicated ExpressVPN provider option.

Upload the OpenVPN File and Enter Credentials

  1. Open app.privacyhero.com and sign in to your Privacy Hero account.
  2. Open the VPN section.
  3. Click Change beside the VPN provider and choose Custom.
  4. Choose OpenVPN if prompted, then upload the UDP .ovpn file downloaded from ExpressVPN.
  5. Copy the separate ExpressVPN Manual Configuration Username and Password into the corresponding Privacy Hero fields.
Privacy Hero Custom OpenVPN configuration showing file upload and manual username and password fields

Check the UDP Configuration and Connect

  1. If Privacy Hero displays the OpenVPN configuration in an editor, confirm that the downloaded UDP configuration specifies proto udp. If the directive is missing, add proto udp at the beginning of the configuration. Do not add a conflicting second protocol directive.
  2. Click Save to apply the configuration and establish the VPN connection.
  3. Confirm Privacy Hero displays Connected for the Custom OpenVPN connection.
Privacy Hero Custom OpenVPN configuration editor with proto udp directive

Verify Your ExpressVPN Connection

After Privacy Hero reports Connected, check that devices on the Privacy Hero network are actually using the VPN.

  1. Connect the testing device to the Privacy Hero WiFi or LAN network.
  2. Disconnect the ExpressVPN app or any other VPN application running directly on that device.
  3. Open a fresh private/incognito browser window.
  4. Visit ExpressVPN What Is My IP.
  5. Confirm the public IP address and approximate location correspond to the ExpressVPN server selected in your .ovpn file.

Important: You can manage Privacy Hero’s VPN settings from another network or cellular data. However, to verify the router’s VPN IP, the testing device must be connected to the Privacy Hero network. Running another VPN app on the device can produce double-VPN results.

Streaming Relocation and VPN Location

If Streaming Relocation is enabled for a supported streaming service, that service may use its Streaming Relocation region instead of the location defined in the ExpressVPN configuration file. See Privacy Hero Streaming Relocation.

ExpressVPN Not Connecting?

If Privacy Hero shows Failed, stays on Connecting, or displays a timeout error, try these checks:

  1. Confirm your ExpressVPN subscription is active and you entered the separate Manual Configuration username and password.
  2. Check that you selected Custom in Privacy Hero, rather than another VPN provider.
  3. Download a fresh UDP .ovpn file for an available ExpressVPN server location and upload it again.
  4. Check that the OpenVPN configuration uses proto udp without conflicting protocol directives.
  5. Temporarily disable the VPN Kill Switch while testing whether normal internet access works without the VPN, then restore your preferred Kill Switch setting.
  6. Try another ExpressVPN server location or reconnect the VPN.

No Internet After the VPN Disconnects?

The Privacy Hero VPN Kill Switch may intentionally block normal internet traffic when the VPN connection is unavailable. See Privacy Hero VPN Kill Switch: No Internet or WiFi Troubleshooting.

VPN Connected, but One Device Shows the Wrong IP?

If other devices show the correct VPN IP, check the affected device’s VPN apps, iCloud Private Relay, Private DNS, antivirus filtering, browser proxy/DNS settings, or other security software. See Device Settings That Can Interfere With Your Router VPN.

Related Privacy Hero Guides

ExpressVPN Merlin OpenVPN Setup

· ·

Preparing for ExpressVPN Merlin Setup

Obtain your ExpressVPN OpenVPN Information

If you are not already an ExpressVPN user Sign Up Now.

1. Log in to your account on the ExpressVPN website.

ExpressVPN login page

2. Successfully log in with your account information. Select More.

3. Select Manual Configuration and copy the Username and Password that are displayed on the right hand side of the screen.

ExpressVPN Manual Configuration
ExpressVPN username and password

4. Click the Server Location that you want to connect to. This will download a .ovpn file to your computer that we will use later on. There is no need to open the file. For this example I have selected New York but feel free to select any server listed there.

ExpressVPN Download .ovpn file

Merlin Router Setup for ExpressVPN

Login to Asus Merlin firmware settings in a browser on any computer or smart device connected to the Merlin FlashRouter’s network.

1. Navigate to the VPN tab.

Merlin VPN Tab

2. Navigate to the VPN Client tab.

Merlin VPN Client Tab

3. Click Choose file and select the .ovpn file you downloaded earlier. Then click Upload.

Merlin Choose File Upload

4. Set Automatic Start at boot time to Yes if you want the VPN connection to begin automatically when the router is powered off and back on.

Merlin Automatic Start at boot time

5. In the Description field enter in the name you’d like to use for this OpenVPN Client profile. We typically advise entering in the location or server number here. Our example server was in New York so I have entered in ExpressVPN New York.

Merlin ExpressVPN Description

6. Set Accept DNS Configuration to Strict. Set Redirect Internet traffic through tunnel to Yes (all). Set Kill Switch to Yes or No depending on if you want the Internet to be killed if the VPN connection drops.

Merlin Accept DNS configuration Redirect Internet and Kill Switch

If you only want certain devices to connect to the OpenVPN Client profile you are setting up instead of all the devices connected to the FlashRouter’s network please set the Redirect Internet traffic through tunnel to VPN Director. Then complete the instructions on this page and then view our VPN Director guide.

7. Enter your ExpressVPN username and password that you obtained earlier in the Username and Password. Note that these are different from your ExpressVPN email login and password.

Merlin VPN Username and Password

8. Click Apply at the bottom of the page.

9. At the top of the page set the Service State toggle to ON to activate the VPN connection.

Merlin Service State

Verify a successful ExpressVPN connection

  1. You should now see a CONNECTED message.
  2. Visit ExpressVPN’s IP Check to verify your new IP address and virtual location.

In some cases you may notice that the location is not showing the same location as the server you have input in your router settings; this is because geo tracking tools are often tricked by VPN connections. As long as you see an IP address that is not the same as your normal Internet IP address then you are indeed connected to ExpressVPN.

How to change the ExpressVPN server

  1. Copy the new ExpressVPN server address from the below server list.
  2. Paste the server into the Server Address field.
  3. Click Apply at the bottom of the page.

ExpressVPN Server Addresses

Americas

usa-atlanta-ca-version-2.expressnetw.com
usa-boston-ca-version-2.expressnetw.com
usa-chicago-ca-version-2.expressnetw.com
usa-dallas-ca-version-2.expressnetw.com
usa-dallas-2-ca-version-2.expressnetw.com
usa-denver-ca-version-2.expressnetw.com
usa-kansascity-ca-version-2.expressnetw.com
usa-losangeles-ca-version-2.expressnetw.com
usa-losangeles-1-ca-version-2.expressnetw.com
usa-losangeles-2-ca-version-2.expressnetw.com
usa-losangeles-3-ca-version-2.expressnetw.com
usa-los-angeles-4-ca-version-2.expressnetw.com
usa-miami-ca-version-2.expressnetw.com
usa-miami-2-ca-version-2.expressnetw.com
usa-minneapolis-ca-version-2.expressnetw.com
usa-newjersey-1-ca-version-2.expressnetw.com
usa-newjersey-3-ca-version-2.expressnetw.com
usa-newyork-ca-version-2.expressnetw.com
us-new-york-2-ca-version-2.expressnetw.com
usa-phoenix-ca-version-2.expressnetw.com
usa-saltlakecity-ca-version-2.expressnetw.com
usa-sanfrancisco-ca-version-2.expressnetw.com
usa-sanjose-ca-version-2.expressnetw.com
usa-seattle-ca-version-2.expressnetw.com
usa-tampa-1-ca-version-2.expressnetw.com
usa-virginia-ca-version-2.expressnetw.com
usa-washingtondc-ca-version-2.expressnetw.com
usa-washingtondc-2-ca-version-2.expressnetw.com
canada-montreal-ca-version-2.expressnetw.com
canada-toronto-ca-version-2.expressnetw.com
canada-toronto-2-ca-version-2.expressnetw.com
canada-vancouver-ca-version-2.expressnetw.com
mexico-ca-version-2.expressnetw.com
argentina-ca-version-2.expressnetw.com
brazil-ca-version-2.expressnetw.com
brazil-2-ca-version-2.expressnetw.com
chile-ca-version-2.expressnetw.com
colombia-ca-version-2.expressnetw.com
costarica-ca-version-2.expressnetw.com
ecuador-ca-version-2.expressnetw.com
guatemala-ca-version-2.expressnetw.com
panama-ca-version-2.expressnetw.com
peru-ca-version-2.expressnetw.com
uruguay-ca-version-2.expressnetw.com
venezuela-ca-version-2.expressnetw.com

Europe

uk-berkshire-ca-version-2.expressnetw.com
uk-berkshire-2-ca-version-2.expressnetw.com
uk-docklands-ca-version-2.expressnetw.com
uk-east-london-ca-version-2.expressnetw.com
uk-kent-ca-version-2.expressnetw.com
uk-london-ca-version-2.expressnetw.com
france-paris-1-ca-version-2.expressnetw.com
france-paris-2-ca-version-2.expressnetw.com
france-strasbourg-ca-version-2.expressnetw.com
germany-darmstadt-ca-version-2.expressnetw.com
germany-frankfurt-1-ca-version-2.expressnetw.com
germany-frankfurt-2-ca-version-2.expressnetw.com
germany-nuremberg-ca-version-2.expressnetw.com
italy-cosenza-ca-version-2.expressnetw.com
italy-milan-ca-version-2.expressnetw.com
netherlands-amsterdam-ca-version-2.expressnetw.com
netherlands-rotterdam-ca-version-2.expressnetw.com
netherlands-thehague-ca-version-2.expressnetw.com
spain-barcelona-ca-version-2.expressnetw.com
spain-ca-version-2.expressnetw.com
sweden-ca-version-2.expressnetw.com
sweden-2-ca-version-2.expressnetw.com
switzerland-ca-version-2.expressnetw.com
switzerland-2-ca-version-2.expressnetw.com
albania-ca-version-2.expressnetw.com
andorra-ca-version-2.expressnetw.com
armenia-ca-version-2.expressnetw.com
austria-ca-version-2.expressnetw.com
azerbaijan-ca-version-2.expressnetw.com
belarus-ca-version-2.expressnetw.com
belgium-ca-version-2.expressnetw.com
bosniaandherzegovina-ca-version-2.expressnetw.com
bulgaria-ca-version-2.expressnetw.com
croatia-ca-version-2.expressnetw.com
cyprus-ca-version-2.expressnetw.com
czechrepublic-ca-version-2.expressnetw.com
denmark-ca-version-2.expressnetw.com
estonia-ca-version-2.expressnetw.com
finland-ca-version-2.expressnetw.com
georgia-ca-version-2.expressnetw.com
greece-ca-version-2.expressnetw.com
hungary-ca-version-2.expressnetw.com
iceland-ca-version-2.expressnetw.com
ireland-ca-version-2.expressnetw.com
isleofman-ca-version-2.expressnetw.com
jersey-ca-version-2.expressnetw.com
latvia-ca-version-2.expressnetw.com
liechtenstein-ca-version-2.expressnetw.com
lithuania-ca-version-2.expressnetw.com
luxembourg-ca-version-2.expressnetw.com
macedonia-ca-version-2.expressnetw.com
malta-ca-version-2.expressnetw.com
moldova-ca-version-2.expressnetw.com
monaco-ca-version-2.expressnetw.com
montenegro-ca-version-2.expressnetw.com
norway-ca-version-2.expressnetw.com
poland-ca-version-2.expressnetw.com
portugal-ca-version-2.expressnetw.com
romania-ca-version-2.expressnetw.com
serbia-ca-version-2.expressnetw.com
slovakia-ca-version-2.expressnetw.com
slovenia-ca-version-2.expressnetw.com
ukraine-ca-version-2.expressnetw.com

Asia Pacific

australia-brisbane-ca-version-2.expressnetw.com
australia-melbourne-ca-version-2.expressnetw.com
australia-perth-ca-version-2.expressnetw.com
australia-sydney-ca-version-2.expressnetw.com
australia-sydney-2-ca-version-2.expressnetw.com
australia-sydney-3-ca-version-2.expressnetw.com
hongkong-2-ca-version-2.expressnetw.com
hongkong4-ca-version-2.expressnetw.com
hongkong-1-ca-version-2.expressnetw.com
japan-tokyo-1-ca-version-2.expressnetw.com
japan-tokyo-2-ca-version-2.expressnetw.com
india-chennai-ca-version-2.expressnetw.com
india-mumbai-1-ca-version-2.expressnetw.com
singapore-cbd-ca-version-2.expressnetw.com
singapore-jurong-ca-version-2.expressnetw.com
southkorea-ca-version-2.expressnetw.com
southkorea2-ca-version-2.expressnetw.com
bangladesh-ca-version-2.expressnetw.com
bhutan-ca-version-2.expressnetw.com
brunei-ca-version-2.expressnetw.com
cambodia-ca-version-2.expressnetw.com
indonesia-ca-version-2.expressnetw.com
kazakhstan-ca-version-2.expressnetw.com
kyrgyzstan-ca-version-2.expressnetw.com
laos-ca-version-2.expressnetw.com
macau-ca-version-2.expressnetw.com
malaysia-ca-version-2.expressnetw.com
mongolia-ca-version-2.expressnetw.com
myanmar-ca-version-2.expressnetw.com
nepal-ca-version-2.expressnetw.com
newzealand-ca-version-2.expressnetw.com
pakistan-ca-version-2.expressnetw.com
ph-via-sing-ca-version-2.expressnetw.com
srilanka-ca-version-2.expressnetw.com
taiwan-3-ca-version-2.expressnetw.com
thailand-ca-version-2.expressnetw.com
vietnam-ca-version-2.expressnetw.com

Middle East and Africa

algeria-ca-version-2.expressnetw.com
israel-ca-version-2.expressnetw.com
kenya-ca-version-2.expressnetw.com
southafrica-ca-version-2.expressnetw.com

Merlin ExpressVPN change server location

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

How do I reset and reconfigure my FlashRouter?

· ·

When is a router reset needed?

A reset of the FlashRouter should only be performed in the following instances:

  • You have exhausted all other troubleshooting methods and cannot access your router settings.
  • A backup file was saved of your previously working settings.
  • Username and password to access the FlashRouter’s settings are not working.
  • Power light on the router is blinking steadily.
  • Firmware upgrade was performed with Reset to Default settings selected.

Reset Router

Asus FlashRouters:

  1. While the router is powered off press and hold the WPS button on the back or side of the router. Power up the router while continuing to hold the WPS. Continue to hold for 15 seconds as the router powers on (note this could be up to 45 seconds on some models before lights flash).
  2. You will see the lights on the router flashing steadily and this is how you know you have reset the router.
  3. Let the router sit for about a minute and then reboot the router.

Linksys and Netgear FlashRouters:

  1. While the router is plugged in, find the reset button located on the back of the router. You will need a pin or pencil to hold down the button for 15 seconds.
  2. You will see the lights on the back of the router flash simultaneously and this is how you know you have reset the router.
  3. Let the router sit for about a minute and then reboot the router.

Access Router Settings

1. Connect to the FlashRouter’s network via ethernet cable or wireless.

The wireless network will appear as “dd-wrt” and will likely not require a password to join. If it does require a password to join the password will be the default wireless password found on the bottom of the router.

2. Open your web browser and enter 192.168.1.1 in the URL.

Reset FlashRouters DD-WRT Settings Back to Default Settings

3. Delete the dots and enter the new administration login in the Router Username, Router Password, and Re-enter to confirm fields.

TYPE CAREFULLY when setting the administration login as a typo will result in needing to reset the router again.

Change Local IP Address and DNS

Navigate to Setup > Basic Setup

1. Set the Local IP Address to 192.168.11.1

2. Set the Static DNS 1 to 8.8.8.8

3. Set the Static DNS 2 to 8.8.4.4

4. Set the Static DNS 3 to 208.67.220.220

Enter New Local IP Address and DNS Servers After FlashRouter DD-WRT Reset

CLICK SAVE

Setup WiFi

Navigate to Wireless > Basic Settings

Find your FlashRouter model in the WiFi Setup section and replicate the wireless settings on this page.

CLICK APPLY SETTINGS

REBOOT ROUTER

Connect to the FlashRouter's network

You will be able to connect to the newly setup wireless network using the details you set. The router will now be accessible at 192.168.11.1

Back up your settings

  1. Click the Backup button.
  2. A file named nvrambak.bin will be saved to your computer.
  3. You can load nvrambak.bin to restore your settings in the event of a reset.

Obtain your NordVPN manual Username and Password for OpenVPN

· ·

Obtain your NordVPN manual Username and Password

If you are not already an NordVPN user Sign Up Now.

1. Log in to your account on the NordVPN website.

NordVPN login

2. Click NordVPN on the left hand side and then click Setup NordVPN manually.

3. Go to the Service Credentials section and click Verify email. Enter in the verification code that was sent to your email.

Nord Email Verification
NordVPN verify code

4. Copy and paste your NordVPN manual username and password to a secure location. This is the username and password you will enter into the router settings to connect to NordVPN OpenVPN.

NordVPN OpenVPN Credentials

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

NordVPN Merlin OpenVPN Setup

· ·

Preparing for NordVPN Merlin Setup

Obtain your NordVPN manual Username and Password

If you are not already an NordVPN user Sign Up Now.

1. Log in to your account on the NordVPN website.

NordVPN login

2. Click NordVPN on the left hand side and then click Setup NordVPN manually.

NordVPN setup manually

3. Enter in the verification code that was sent to your email.

NordVPN verify code

4. Copy and paste your NordVPN manual username and password to a secure location. This is the username and password you will enter into the router settings to connect to NordVPN.

NordVPN credentials

Download your NordVPN .ovpn file

1. There are two options for obtaining the .ovpn file. The first and recommended is to navigate to NordVPN’s server recommendation page. Click Recommended Server to display the fastest server based on your actual location. You can adjust the country if you don’t want to connect to the recommended country.

Then click Show Available Protocols. Click Download Config next to OpenVPN UDP. This will download the .ovpn file to your computer for this server. Do not open this file.

NordVPN Recommended Server

The second method to obtain a server is for connecting to a specific server number that you know you want to use. This applies to NordVPN Dedicated IP servers if you are signed up for that service. Go to NordVPN’s .ovpn file page. Then search for the server number that you want to use and click Download UDP.

NordVPN Download Specific Server

Merlin Router Setup for NordVPN

Login to Asus Merlin firmware settings in a browser on any computer or smart device connected to the Merlin FlashRouter’s network.

1. Navigate to the VPN tab.

Merlin VPN Tab

2. Navigate to the VPN Client tab.

Merlin VPN Client Tab

3. Click Choose file and select the .ovpn file you downloaded earlier. Then click Upload.

Merlin Choose File Upload

4. Set Automatic Start at boot time to Yes if you want the VPN connection to begin automatically when the router is powered off and back on.

Merlin Automatic Start at boot time

5. In the Description field enter in the name you’d like to use for this OpenVPN Client profile. We typically advise entering in the location or server number here. Our example server was in us5835.nordvpn.com so I have entered in NordVPN us5835.

Merlin NordVPN Description

6. Set Accept DNS Configuration to Strict. Set Redirect Internet traffic through tunnel to Yes (all). Set Kill Switch to Yes or No depending on if you want the Internet to be killed if the VPN connection drops.

Merlin Accept DNS configuration Redirect Internet and Kill Switch

If you only want certain devices to connect to the OpenVPN Client profile you are setting up instead of all the devices connected to the FlashRouter’s network please set the Redirect Internet traffic through tunnel to VPN Director. Then complete the instructions on this page and then view our VPN Director guide.

7. Enter your NordVPN username and password that you obtained earlier in the Username and Password. Note that these are different from your NordVPN email login and password.

Merlin VPN Username and Password

8. Click Apply at the bottom of the page.

9. At the top of the page set the Service State toggle to ON to activate the VPN connection.

Merlin Service State All Providers

Verify a successful NordVPN connection

  1. You should now see a CONNECTED message.
  2. Visit NordVPN’s IP Check to verify your new IP address and virtual location.

In some cases you may notice that the location is not showing the same location as the server you have input in your router settings; this is because geo tracking tools are often tricked by VPN connections. As long as you see an IP address that is not the same as your normal Internet IP address then you are indeed connected to NordVPN.

How to change the NordVPN server

  1. Follow the steps at the top of the page to obtain a new .ovpn file.
  2. Then proceed with the settings same as initial setup.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

Number test

· ·

  1. Visit ExpressVPN’s website login page
    ExpressVPN on FlashRouters Privacy App Setup - Sign Into ExpressVPN Dashboard
  2. Successfully log in with your account information. Select Setup on More Devices.
    ExpressVPN on FlashRouters Privacy App Setup - Setup On More Devices
  3. Select Manual Config and copy the Username and Password that are displayed on the right hand side of the screen.
    ExpressVPN on FlashRouters Privacy App Setup - OpenVPN Specific Username and Password

ExpressVPN Setup on Roqos

· ·

Preparing for ExpressVPN Setup

Obtain your ExpressVPN login information

If you are not already an ExpressVPN user Sign Up Now.

1. Visit ExpressVPN’s website login page.

ExpressVPN login page

2. Successfully log in with your account information. Select More.

ExpressVPN account page

3. Select Manual Configuration and copy the Username and Password that are displayed on the right hand side of the screen.

ExpressVPN Manual Configuration
ExpressVPN username and password

Connecting to ExpressVPN in the Roqos Core

Access the Roqos Core UI

1. Login to the Roqos Core web app in a browser on any computer or smart device.

2. Click VPN from the navigation menu and then click VPN OUT.

Roqos VPN Out

3. Click the Connect to box.

Roqos VPN Connect to

4. In the Connect dropdown choose 3rd Party VPN Providers and for the VPN Provider dropdown choose ExpressVPN.

Roqos ExpressVPN select provider

Enter your ExpressVPN information

In the Username and Password field enter the ExpressVPN OpenVPN Username and Password that you obtained.

ExpressVPN on FlashRouters Privacy App Setup - OpenVPN Specific Username and Password
Roqos VPN ExpressVPN enter username and password

Select an ExpressVPN server

Click the Server dropdown and type in or scroll to your preferred server location.

Roqos VPN ExpressVPN select server

Click the Save button.

Roqos VPN Save Settings

Connect to ExpressVPN

Once you click Save you will be returned to the VPN OUT menu.

Click the Connect button to start your ExpressVPN connection. Please be patient as the router connects your entire network through VPN.

Roqos VPN Connect

Assign devices to connect to VPN

By default there are no devices assigned to the VPN tunnel. Click Included Devices. From this page you can choose if all devices should connect to ExpressVPN or only certain devices.

Roqos VPN Included Devices

From the dropdown select Include all devices if you want every device that connects to the Roqos to connect to ExpressVPN. Then click Save.

Roqos VPN Include All Devices

If you only want specific devices to connect to ExpressVPN while others bypass the VPN connection select Include selected devices from the dropdown and then toggle the sliders for the devices you want connected to VPN. Click Save.

Roqos VPN Include Selected devices

Verify a successful ExpressVPN connection

Make sure you are connected to the Roqos network via WiFi or ethernet connection on your device.

Visit ExpressVPN’s IP Check to verify your new IP Address and virtual location.

You should see Connected at the top of the page underneath ExpressVPN.

Connect to a different ExpressVPN server

To change your server click Disconnect on the VPN OUT page then return to the Connect To section to select a new server from the Server dropdown and click Save. Now click Connect once again on the VPN Out page.

Disconnect from ExpressVPN

To disconnect from ExpressVPN click the Disconnect button.

TROUBLESHOOTING

Still having issues? Visit the FR Privacy App Troubleshooting section.

Troubleshoot Here