Prioritizing Privacy
The VPN Kill Switch disables the Internet connection on your Roqos Core in the even that your VPN disconnects. Internet access of all your devices will be blocked when the kill switch is enabled – except for the ones you have excluded from VPN Out.
Login to Roqos Core UI web app in a browser on any computer or smart device.
1. Click the navigation menu and select VPN > VPN Out.
2. Toggle the VPN Kill Switch to enable this feature.
Once you have OpenVPN connected on your Merlin FlashRouter you can enable the VPN Killswitch so that no internet traffic passes through your router that is not encrypted by the VPN tunnel.
Login to Asus Merlin firmware settings in a browser on any computer or smart device.
1. Under Advanced Settings select VPN.
2. Click the VPN Client tab.
3. Set Killswitch – Block routed clients if tunnel goes down to Yes.
4. Click Apply.
Your Privacy Hero router uses Cloud Based router management which means you can access the router settings from anywhere on any device that has an internet connection. You can follow these steps while connected to your phone, other Wi-Fi network, or the Privacy Hero network.
Use these steps to enable Privacy Hero’s adblocking, malware, and phishing prevention settings to add extra security to your network.
1. From any device that has a browser such as a computer, smartphone, or tablet visit app.privacyhero.com
2. Enter your Privacy Hero account email and password. Click Login.
If you have not created your Privacy Hero account yet please follow these instructions.
3. Click the VPN symbol.
4. Toggle the Adblocking and Malware & Phishing switches to On.
Your Privacy Hero router uses Cloud Based router management which means you can access the router settings from anywhere on any device that has an internet connection. You can follow these steps while connected to your phone, other Wi-Fi network, or the Privacy Hero network.
Use these steps to enable Privacy Hero’s VPN Kill Switch to make sure that no traffic goes through your router unless it is connected to VPN.
1. From any device that has a browser such as a computer, smartphone, or tablet visit app.privacyhero.com
2. Enter your Privacy Hero account email and password. Click Login.
If you have not created your Privacy Hero account yet please follow these instructions.
3. Click the VPN symbol.
4. Toggle the VPN Kill Switch setting to On.
If you are not already an ExpressVPN user Sign Up Now.
1. Log in to your account on the ExpressVPN website.
2. Successfully log in with your account information. Select More.
3. Select Manual Configuration and copy the Username and Password that are displayed on the right hand side of the screen.
4. Click the Server Location(s) that you want to connect to. This will download a .ovpn file to your computer that we will use later on. There is no need to open the file. For this example I have selected New York but feel free to select any server listed there or multiple servers.
Login to GL.iNet firmware settings in a browser on any computer or smart device connected to the GL.iNet FlashRouter’s network. For more instructions on how to access the firmware settings view our guide here.
1. Navigate to the VPN tab and select OpenVPN Client.
2. Click New Group.
3. Enter ExpressVPN and click the check mark.
4. Select the .ovpn file(s) you downloaded earlier and upload them here.
5. Enter in the ExpressVPN username and password that you obtained earlier. Do NOT enter your ExpressVPN account email and password login. Click Apply.
6. Select VPN Dashboard.
7. Set the Enable toggle to On to begin the ExpressVPN connection.
In some cases you may notice that the location is not showing the same location as the server you have input in your router settings; this is because geo tracking tools are often tricked by VPN connections. As long as you see an IP address that is not the same as your normal Internet IP address then you are indeed connected to ExpressVPN.
If you are not already an PureVPN user Sign Up Now.
1. Log in to your account on the PureVPN website.
2. Select Manual Configuration.
3. Select the Server Location you want to connect to and then click Download.
4. In the Select Protocol dropdown choose WireGuard.
5. In the Select Device dropdown choose DD-WRT. Then click Generate Configuration. This will save a .conf file to your computer.
Login to GL.iNet firmware settings in a browser on any computer or smart device connected to the GL.iNet FlashRouter’s network. For more instructions on how to access the firmware settings view our guide here.
1. Navigate to the VPN tab and select WireGuard Client.
2. Click New Group.
3. Enter PureVPN and click the check mark.
4. Select the .conf file you downloaded earlier and upload it here.
5. Click Apply.
6. Select VPN Dashboard.
7. Set the Enable toggle to On to begin the PureVPN connection.
In some cases you may notice that the location is not showing the same location as the server you have input in your router settings; this is because geo tracking tools are often tricked by VPN connections. As long as you see an IP address that is not the same as your normal Internet IP address then you are indeed connected to PureVPN.
Replicate the steps above with a new location.
You must be connected to the FlashRouter network via ethernet or WiFi connection on your device in order to be able to access the FlashRouter’s firmware settings.
We recommend using a computer, tablet, or phone to access your FlashRouter firmware settings. You can connect your device to the FlashRouter via Ethernet Cable or Wireless connection.
Please note, you will NOT be able access the firmware settings unless you connect your device to the FlashRouter Network.
Connect an Ethernet cable to your device’s Ethernet port.
Connect the other end of that Ethernet cable to a FlashRouter LAN/numbered port.
Be sure NOT to connect your device to the WAN/internet port of the FlashRouter. Please use the LAN/numbered ports to connect your devices.
Navigate to the available wireless networks in your device network settings and join any of the available FlashRouter networks – FlashRouter24, FlashRouter50, or FlashRouter80 (if you have a tri-band router).
We recommend using a Google Chrome or Mozilla Firefox incognito/private browsing window to access the FlashRouter firmware settings. You can access the main DD-WRT firmware GUI or you can go directly into the FlashRouters Privacy App settings to manage your basic router settings and VPN connection settings right away.
Please note, after accessing the FlashRouter Settings at the Local IP Address, you will be prompted to enter an admin username and password. You can find this information in the subsections below.
Local IP Address: 192.168.11.1
Username: flashrouter
Password: ddwrt
Keep in mind that if you enable HTTPS and disable HTTP access you will need to add https:// in front of the Local IP Address to access your FlashRouter’s firmware settings.
If your router has been reset for any reason then you can access the router at a local IP address of 192.168.1.1.
Please note you will be required to set the administration username and password as well as your WiFi and VPN network settings after a reset.
If you are not already an IPVanish user Sign Up Now.
1. Log in to your account on the IPVanish website.
2. Successfully log in with your account information then go to IPVanish .ovpn file page.
3. Click on the .ovpn file for the server location you want to use to dowloand the .ovpn file. Do not open this file.
Login to AsusWRT firmware settings in a browser on any computer or smart device connected to the AsusWRT FlashRouter’s network.
1. Navigate to the VPN tab.
2. Navigate to the VPN Fusion tab.
3. Click Add profile.
4. In the Connection Name field enter in the name you’d like to use for this OpenVPN Client profile. We typically advise entering in the location or server number here. Our example server was in New York so I have entered in IPVanish New York.
5. In the VPN Type dropdown select OpenVPN.
6. Click Import .ovpn file and select the .ovpn file you downloaded earlier. Then click Upload.
7. In the Username and Password fields paste in the IPVanish email and password you use to successfully login to your IPVanish website account.
8. Click Apply and Enable at the bottom of the page.
If you only want certain devices to connect to the OpenVPN Client profile you are setting up instead of all the devices connected to the FlashRouter’s network click into the profile and disable Apply to all devices. Then click Devices and select the devices that you want to connect to VPN.
9. At the top of the page set the Service State toggle to ON to activate the VPN connection.
In some cases you may notice that the location is not showing the same location as the server you have input in your router settings; this is because geo tracking tools are often tricked by VPN connections. As long as you see an IP address that is not the same as your normal Internet IP address then you are indeed connected to IPVanish.
If you are not already a Surfshark user Sign Up Now.
1. Log in to your account on the Surfshark website.
2. Click VPN Manual Setup.
3. Select Router as the Setup method.
4. Select WireGuard as the Protocol.
5. Select I don’t have a key pair.
6. Enter FlashRouter as the name of the connection and click Next.
7. Click Generate a new key pair.
8. A Public Key and Private Key will then appear. Use the copy box to copy the Private Key. You will not need the public key.
Login to AsusWRT firmware settings in a browser on any computer or smart device connected to the AsusWRT FlashRouter’s network.
1. Navigate to the VPN tab.
2. Navigate to the VPN Fusion tab.
3. Click Add profile.
4. In the Connection Name field enter in Surfshark.
5. In the VPN Type dropdown select Surfshark.
6. In the Region dropdown select the Surfshark location you want to connect to.
7. In the Private Key field paste in the Surfshark Private Key obtained earlier.
8. Click Apply and Enable at the bottom of the page.
If you only want certain devices to connect to the Surfshark profile you are setting up instead of all the devices connected to the FlashRouter’s network click into the profile and disable Apply to all devices. Then click Devices and select the devices that you want to connect to VPN.
9. At the top of the page set the Service State toggle to ON to activate the VPN connection.
In some cases you may notice that the location is not showing the same location as the server you have input in your router settings; this is because geo tracking tools are often tricked by VPN connections. As long as you see an IP address that is not the same as your normal Internet IP address then you are indeed connected to Surfshark.
If you are not already a CyberGhost user Sign Up Now.
1. Log in to your account on the CyberGhost website.
2. Select VPN.
3. Click Configure New Device.
4. Set Protocol to OpenVPN. Select the Country you would like to connect to. Select the Server Group. Name the device in the Device Name field. Click Save Configuration.
5. Press View configuration.
6. Copy the Username, and Password that appear to a notepad, since you will need this information later in the setup process. Click Download Configuration.
Open the folder that was downloaded. Then open the ca.crt the client.crt, and client.key files with NotePad++ for Windows or TextEdit for Apple. All CyberGhost servers have different keys and certificates.
Login to AsusWRT firmware settings in a browser on any computer or smart device connected to the AsusWRT FlashRouter’s network.
1. Navigate to the VPN tab.
2. Navigate to the VPN Fusion tab.
3. Click Add profile.
4. In the Connection Name field enter in the name you’d like to use for this OpenVPN Client profile. We typically advise entering in the location or server number here. Our example server was in USA so I have entered in CyberGhost USA.
5. In the VPN Type dropdown select OpenVPN.
6. Click Import .ovpn file and select the openvpn.ovpn file from the folder you downloaded earlier. Then click Upload.
7. In the Username and Password fields enter in the CyberGhost assigned username and password that you obtained earlier.
8. After uploading the openvpn.ovpn file you will get a message that says “Complete, Lack of Client Key!, Lack of Client Certificate, Lack of Certificate Authority”. For CyberGhost you need to enter in these details manually. Click Import the CA file or edit the .ovpn file manually and then click the edit icon next to Content modification of Keys and Certificate.
9. In the Certificate Authority field paste in the entire content of the ca.crt file.
—– BEGIN xxx —– / —– END xxx —– block (including those two lines).
10. In the Client Certificate field paste in the entire content of the client.crt file.
—– BEGIN xxx —– / —– END xxx —– block (including those two lines).
11. In the Client Key field paste in the entire content of the client.key file.
—– BEGIN xxx —– / —– END xxx —– block (including those two lines).
Then click OK.
8. Click Apply and Enable at the bottom of the page.
If you only want certain devices to connect to the OpenVPN Client profile you are setting up instead of all the devices connected to the FlashRouter’s network click into the profile and disable Apply to all devices. Then click Devices and select the devices that you want to connect to VPN.
9. At the top of the page set the Service State toggle to ON to activate the VPN connection.
In some cases you may notice that the location is not showing the same location as the server you have input in your router settings; this is because geo tracking tools are often tricked by VPN connections. As long as you see an IP address that is not the same as your normal Internet IP address then you are indeed connected to CyberGhost.
Follow this guide to disable Wi-Fi network on your GL.iNet FlashRouter.
1. Connect your computer, phone, or tablet to the GL.iNet router via wireless (FlashRouter24 / FlashRouter50) or via ethernet cable to one of the LAN ports on the router.
The FlashRouter WiFi password is printed on the sheet that came with the router and is set to Wireless#[First 5 characters of your router MAC]. The router MAC can be found on the bottom of your router if you cannot locate the sheet. For e.g. if your MAC is 1459C07E70A8 then your WiFi password is Wireless#1459C
Be sure to capitalize the W.
2. Once connected via wireless or ethernet on your device open your browser and go to 192.168.8.1
3. Enter openwrt as the admin password to access the GL.iNet firmware settings.
4. Click Wireless.
5. Click Modify under the 5GHz or 2.4GHz band.
The 5GHz and 2.4GHz bands must be disabled at separate times. Keep in mind that if you are connected to wireless when disabling one band you may need to reconnect with the other band to disable it. Also make sure you have a device that has ethernet capabilities so you can still access the settings with wireless disabled.
6. Set the Enable Wi-Fi toggle to the OFF position and click Apply.
Follow this guide to setup a Guest Network on your GL.iNet FlashRouter. Devices connected to the guest network will be on a separate subnet and will not have access to the router settings or be able to talk to devices on the main network.
1. Connect your computer, phone, or tablet to the GL.iNet router via wireless (FlashRouter24 / FlashRouter50) or via ethernet cable to one of the LAN ports on the router.
The FlashRouter WiFi password is printed on the sheet that came with the router and is set to Wireless#[First 5 characters of your router MAC]. The router MAC can be found on the bottom of your router if you cannot locate the sheet. For e.g. if your MAC is 1459C07E70A8 then your WiFi password is Wireless#1459C
Be sure to capitalize the W.
2. Once connected via wireless or ethernet on your device open your browser and go to 192.168.8.1
3. Enter openwrt as the admin password to access the GL.iNet firmware settings.
4. Click Wireless.
5. Click 5GHz Guest Wi-Fi or 2.4GHz Guest Wi-Fi.
6. Click Modify.
7. Set the Enable Wi-Fi toggle to the ON position.
8. Change the Wi-Fi Name (SSID) and Wi-Fi Password fields to what you want to use. The SSID should be unique and NOT a duplicate of an existing network. Click Apply.
9. Connect your devices to the new guest wireless network.
WiFi as WAN is a feature of the Roqos software which allows you to use an existing WiFi network as the Internet source for the Roqos router instead of an ethernet cable connection. This is a great solution for travelling users who do not have access to the modem/router in their hotel or AirBnB.
Login to Roqos Core UI web app in a browser on any computer or smart device.
1. Click the navigation menu and select Basic Settings > Internet Settings.
2. Click WiFi as WAN.
3. Scroll down and select the existing WiFi network you wish to use for WAN/Internet from the Nearby Wireless Networks list.
4. Enter the correct password for the existing WiFi network and click Connect.
5. Toggle the Enable slide and click Save.
Be patient as the connection is made. It usually takes 30 seconds to a minute to connect. Then test that your Internet is working while connected to the Roqos network.
If you are not already an NordVPN user Sign Up Now.
1. Log in to your account on the NordVPN website.
2. Click NordVPN on the left hand side and then click Setup NordVPN manually.
3. Enter in the verification code that was sent to your email.
4. Copy and paste your NordVPN manual username and password to a secure location. This is the username and password you will enter into the router settings to connect to NordVPN.
1. There are two options for obtaining the .ovpn file. The first and recommended is to navigate to NordVPN’s server recommendation page. Click Recommended Server to display the fastest server based on your actual location. You can adjust the country if you don’t want to connect to the recommended country.
Then click Show Available Protocols. Click Download Config next to OpenVPN UDP. This will download the .ovpn file to your computer for this server. Do not open this file.
The second method to obtain a server is for connecting to a specific server number that you know you want to use. This applies to NordVPN Dedicated IP servers if you are signed up for that service. Go to NordVPN’s .ovpn file page. Then search for the server number that you want to use and click Download UDP.
Login to Cudy firmware settings in a browser on any computer or smart device connected to the Cudy FlashRouter’s network.
1. Click General Settings.
2. Click VPN.
3. Toggle the Enable switch to On.
4. Select OpenVPN Client from the Protocol dropdown.
5. Click Browse and select the .ovpn file you downloaded earlier. You should see the server file name listed next to Current Config File after doing so.
6. Enter your NordVPN username and password that you obtained earlier in the Username and Password. Note that these are different from your NordVPN email login and password.
7. Click Save & Apply at the bottom of the page.
In some cases you may notice that the location is not showing the same location as the server you have input in your router settings; this is because geo tracking tools are often tricked by VPN connections. As long as you see an IP address that is not the same as your normal Internet IP address then you are indeed connected to NordVPN.
If you are not already an ExpressVPN user Sign Up Now.
1. Log in to your account on the ExpressVPN website.
2. Successfully log in with your account information. Select More.
3. Select Manual Configuration and copy the Username and Password that are displayed on the right hand side of the screen.
4. Click the Server Location that you want to connect to. This will download a .ovpn file to your computer that we will use later on. There is no need to open the file. For this example I have selected New York but feel free to select any server listed there.
Login to Cudy firmware settings in a browser on any computer or smart device connected to the Cudy FlashRouter’s network.
1. Click General Settings.
2. Click VPN.
3. Toggle the Enable switch to On.
4. Select OpenVPN Client from the Protocol dropdown.
5. Click Browse and select the .ovpn file you downloaded earlier. You should see the server file name listed next to Current Config File after doing so.
6. Enter your ExpressVPN username and password that you obtained earlier in the Username and Password. Note that these are different from your ExpressVPN email login and password.
7. Click Save & Apply at the bottom of the page.
In some cases you may notice that the location is not showing the same location as the server you have input in your router settings; this is because geo tracking tools are often tricked by VPN connections. As long as you see an IP address that is not the same as your normal Internet IP address then you are indeed connected to ExpressVPN.
If you are not already an IPVanish user Sign Up Now.
1. Log in to your account on the IPVanish website.
2. Successfully log in with your account information then go to IPVanish .ovpn file page.
3. Click on the .ovpn file for the server location you want to use to dowloand the .ovpn file. Do not open this file.
Login to Cudy firmware settings in a browser on any computer or smart device connected to the Cudy FlashRouter’s network.
1. Click General Settings.
2. Click VPN.
3. Toggle the Enable switch to On.
4. Select OpenVPN Client from the Protocol dropdown.
5. Click Browse and select the .ovpn file you downloaded earlier. You should see the server file name listed next to Current Config File after doing so.
6. Enter your IPVanish account login email and password that you obtained earlier in the Username and Password.
7. Click Save & Apply at the bottom of the page.
In some cases you may notice that the location is not showing the same location as the server you have input in your router settings; this is because geo tracking tools are often tricked by VPN connections. As long as you see an IP address that is not the same as your normal Internet IP address then you are indeed connected to IPVanish.
If you are not already a PIA user Sign Up Now.
1. Log in to your account on the PIA website.
2. Successfully log in with your account information then go to PIA’s OpenVPN Config Generator.
3. On the OpenVPN Configuration Generator select the following:
OpenVPN Version: OpenVPN 2.4 or newer
Select Platform: Linux
Select Region: Choose the server location you’d like to connect to
Select Port: Typically we recommend UDP/1198 RSA-2048 AES-128-CBC SHA1 for best speeds but feel free to select the one you want to use.
4. Click Generate to download the .ovpn file. Do not open this file once it is downloaded.
Login to Cudy firmware settings in a browser on any computer or smart device connected to the Cudy FlashRouter’s network.
1. Click General Settings.
2. Click VPN.
3. Toggle the Enable switch to On.
4. Select OpenVPN Client from the Protocol dropdown.
5. Click Browse and select the .ovpn file you downloaded earlier. You should see the server file name listed next to Current Config File after doing so.
6. Enter your PIA account login username and password in the Username and Password.
7. Click Save & Apply at the bottom of the page.
In some cases you may notice that the location is not showing the same location as the server you have input in your router settings; this is because geo tracking tools are often tricked by VPN connections. As long as you see an IP address that is not the same as your normal Internet IP address then you are indeed connected to PIA.
If you are not already an ProtonVPN user Sign Up Now.
1. Log in to your account on the ProtonVPN website.
2. Click Downloads.
3. Scroll down to WireGuard configuration and name the device FlashRouter.
4. Select Router as the platform.
5. Select the VPN options that best fit your needs. We typically use the settings as seen in the screenshot here if you are unsure.
6. Next select the server that you would like to connect to and click Create. At the top of the page you’ll see ProtonVPN’s recommended server which we recommend using unless you need to connect to a specific location.
If you need a specific server location find it in the list and click Create.
7. After clicking Create a new window will appear. Click Download to download the .conf file to your computer.
Login to Asus Merlin firmware settings in a browser on any computer or smart device connected to the Merlin FlashRouter’s network.
1. Navigate to the VPN tab.
2. Navigate to the VPN Client tab.
3. Select WireGuard as the VPN Protocol.
4. Click Choose file and select the .conf file you downloaded earlier. Then click Upload.
5. In the Description field enter in the name you’d like to use for this WireGuard Client profile. We typically advise entering in the location here. Our example server was in US-NY#61 so I have entered in ProtonVPN NY-61.
6. Set Enable WireGuard to Yes.
7. Click Apply at the bottom of the page and you should then see a Connected message appear.
8. By default no devices are assigned to the new active WireGuard connection profile. Click the VPN Director tab to assign specific devices to the new WireGuard profile. Your IP will not be changed on your devices yet.
9. On the VPN Director page click the + symbol next to Add new rule.
10. Select the new WireGuard profile in the Interface dropdown.
11. In the Local IP field enter in 192.168.50.0/24 if you want ALL devices connected to the FlashRouter’s network to use the WireGuard VPN connection. Click OK.
If you only want certain devices to connect to the WireGuard Client profile you have setting up instead of all the devices connected to the FlashRouter’s network please complete the instructions on our VPN Director guide.
12. Then click Apply at the bottom of the page.
Visit ProtonVPN’s IP Check from a private/incognito browsing window to verify your new IP address and virtual location.
In some cases you may notice that the location is not showing the same location as the server you have input in your router settings; this is because geo tracking tools are often tricked by VPN connections. As long as you see an IP address that is not the same as your normal Internet IP address then you are indeed connected to ProtonVPN.
If you are not already a Surfshark user Sign Up Now.
1. Log in to your account on the Surfshark website.
2. Click VPN Manual Setup.
3. Select Router as the Setup Method.
4. Select WireGuard as the Protocol.
5. Select I don’t have a key pair.
6. Enter FlashRouter as the name of the connection and click Next.
7. Click Generate a new key pair.
8. Click Choose a location.
9. Select the server location you want to connect to. Unless you need a specific location we recommend using Surfshark’s recommended Fastest server. Click Download to download the .conf file for this Surfshark server location.
Login to Asus Merlin firmware settings in a browser on any computer or smart device connected to the Merlin FlashRouter’s network.
1. Navigate to the VPN tab.
2. Navigate to the VPN Client tab.
3. Select WireGuard as the VPN Protocol.
4. Click Choose file and select the .conf file you downloaded earlier. Then click Upload.
5. In the Description field enter in the name you’d like to use for this WireGuard Client profile. We typically advise entering in the location here. Our example server was in New York so I have entered in Surfshark New York.
6. Set Enable WireGuard to Yes.
7. Click Apply at the bottom of the page and you should then see a Connected message appear.
8. By default no devices are assigned to the new active WireGuard connection profile. Click the VPN Director tab to assign specific devices to the new WireGuard profile. Your IP will not be changed on your devices yet.
9. On the VPN Director page click the + symbol next to Add new rule.
10. Select the new WireGuard profile in the Interface dropdown.
11. In the Local IP field enter in 192.168.50.0/24 if you want ALL devices connected to the FlashRouter’s network to use the WireGuard VPN connection. Click OK.
If you only want certain devices to connect to the WireGuard Client profile you have setting up instead of all the devices connected to the FlashRouter’s network please complete the instructions on our VPN Director guide.
12. Then click Apply at the bottom of the page.
Visit Surfshark’s IP Check from a private/incognito browsing window to verify your new IP address and virtual location.
In some cases you may notice that the location is not showing the same location as the server you have input in your router settings; this is because geo tracking tools are often tricked by VPN connections. As long as you see an IP address that is not the same as your normal Internet IP address then you are indeed connected to Surfshark.
If you are not already an PureVPN user Sign Up Now.
1. Log in to your account on the PureVPN website.
2. Select Manual Configuration.
3. Select the Server Location you want to connect to and then click Download.
4. In the Select Protocol dropdown choose WireGuard.
5. In the Select Device dropdown choose DD-WRT. Then click Generate Configuration. This will save a .conf file to your computer.
Login to Asus Merlin firmware settings in a browser on any computer or smart device connected to the Merlin FlashRouter’s network.
1. Navigate to the VPN tab.
2. Navigate to the VPN Client tab.
3. Select WireGuard as the VPN Protocol.
4. Click Choose file and select the .conf file you downloaded earlier. Then click Upload.
5. In the Description field enter in the name you’d like to use for this WireGuard Client profile. We typically advise entering in the location here.
6. Set Enable WireGuard to Yes.
7. Click Apply at the bottom of the page and you should then see a Connected message appear.
8. By default no devices are assigned to the new active WireGuard connection profile. Click the VPN Director tab to assign specific devices to the new WireGuard profile. Your IP will not be changed on your devices yet.
9. On the VPN Director page click the + symbol next to Add new rule.
10. Select the new WireGuard profile in the Interface dropdown.
11. In the Local IP field enter in 192.168.50.0/24 if you want ALL devices connected to the FlashRouter’s network to use the WireGuard VPN connection. Click OK.
If you only want certain devices to connect to the WireGuard Client profile you have setting up instead of all the devices connected to the FlashRouter’s network please complete the instructions on our VPN Director guide.
12. Then click Apply at the bottom of the page.
Visit PureVPN’s IP Check to verify your new IP address and virtual location.
In some cases you may notice that the location is not showing the same location as the server you have input in your router settings; this is because geo tracking tools are often tricked by VPN connections. As long as you see an IP address that is not the same as your normal Internet IP address then you are indeed connected to PureVPN.
Create a Guest WiFi network on your Roqos to segment certain devices from the main network and set custom content filters as you see fit. Note that this is only for 2.4GHz wireless.
Login to Roqos Core UI web app in a browser on any computer or smart device.
1. Click the navigation menu and select Basic Settings > WiFi Settings.
2. Click Guest WiFi.
3. Toggle the Enable slider and set the Network Name and Guest WiFi Password. Click Save.
4. Optional: If you wish to set specific Content Filters for the Guest Network and set the Filters that you see fit.
If you would like to prevent visitors from connecting to your main WiFi network then you can create a Bridged Guest Network that will prevent access to the main router. This setup also allows you to create different rules for different WiFi SSID’s in your home ranging from QoS controls, access restrictions, VPN network segmentation, and more.
If you have a Dual-band or Tri-Band router you can setup a WiFi Guest Network, creating a separate VLAN (virtual local area network) for your visitors, or in order to segment your VPN networks on any band you like. We recommend using the 2.4GHz network for your DD-WRT Guest Wireless Network so it is compatible with the most possible WiFi devices. Setting up a guest network for visitors in your home allows you to keep them off of your main WiFi network.
We recommend performing this setup while connected to the FlashRouter via ethernet cable. If your computer does not have an ethernet port and you must proceed via wireless connection to the FlashRouter pay attention to the wireless connection as you may need to rejoin the FlashRouter’s network after making changes.
Navigate to Wireless > Basic Settings
Navigate to Wireless > Wireless Security
Navigate to Setup > Networking
Depending on the router model and WiFi band you are using, the wireless interfaces will be labelled differently.
This setting can be labelled wl1.1, ath0.1, wl2.1, and so on. Make sure when you get up to the bridge assignment section that you are using the correct guest network Virtual Interface.
Navigate to Administration > Commands
iptables -I FORWARD -i br1 -o br0 -m state –state NEW -j DROP
iptables -I FORWARD -i br0 -o br1 -m state –state NEW -j DROP
iptables -I INPUT -i br1 -p tcp –dport telnet -j REJECT –reject-with tcp-reset
iptables -I INPUT -i br1 -p tcp –dport ssh -j REJECT –reject-with tcp-reset
iptables -I INPUT -i br1 -p tcp –dport www -j REJECT –reject-with tcp-reset
iptables -I INPUT -i br1 -p tcp –dport https -j REJECT –reject-with tcp-reset
You will now have a working Bridged Guest Network on the FlashRouter. By inputting the firewall rules, this will also prevent any guests on your network from gaining access to your router settings.
Navigate to Administration > Backup
If you would like to prevent visitors from connecting to your main WiFi network then you can create a separate Guest Network that will prevent access to the main router. This setup also allows you to create different rules for different WiFi SSID’s in your home ranging from QoS controls, access restrictions, VPN network segmentation, and more.
If you have a Dual-band or Tri-Band router you can setup a WiFi Guest Network, creating a separate VLAN (virtual local area network) for your visitors, or in order to segment your VPN networks on any band you like. We recommend using the 2.4GHz network for your DD-WRT Guest Wireless Network so it is compatible with the most possible WiFi devices. Setting up a guest network for visitors in your home allows you to keep them off of your main WiFi network.
We recommend performing this setup while connected to the FlashRouter via ethernet cable. If your computer does not have an ethernet port and you must proceed via wireless connection to the FlashRouter. Be sure to pay attention to the wireless connection as you may need to rejoin the FlashRouter’s network after making changes.
Navigate to Wireless > Basic Settings
Under the 2.4GHz or 5GHz Interface click the Add button.
Wireless Network Name (SSID)
Enter the a unique network name for the guest network.
Network Configuration
Unbridged
Force DNS Redirection
Enable
Optional DNS Target
208.67.220.220
IP Address
192.168.12.1
Subnet Mask
255.255.255.0
CLICK SAVE
Navigate to Wireless > Wireless Security
Navigate to Setup > Networking
Depending on the router model and WiFi band you are using, the wireless interfaces will be labelled differently.
This setting can be labelled wl1.1, ath0.1, wl2.1, and so on. Make sure when you get up to the bridge assignment section that you are using the correct guest network Virtual Interface.
Navigate to Administration > Backup
If you are not already an ExpressVPN user Sign Up Now.
1. Log in to your account on the ExpressVPN website.
2. Successfully log in with your account information. Select More.
3. Select Manual Configuration and copy the Username and Password that are displayed on the right hand side of the screen.
4. Click the Server Location that you want to connect to. This will download a .ovpn file to your computer that we will use later on. There is no need to open the file. For this example I have selected New York but feel free to select any server listed there.
Login to AsusWRT firmware settings in a browser on any computer or smart device connected to the AsusWRT FlashRouter’s network.
1. Navigate to the VPN tab.
2. Navigate to the VPN Fusion tab.
3. Click Add profile.
4. In the Connection Name field enter in the name you’d like to use for this OpenVPN Client profile. We typically advise entering in the location or server number here. Our example server was in New York so I have entered in ExpressVPN New York.
5. In the VPN Type dropdown select OpenVPN.
6. Click Import .ovpn file and select the .ovpn file you downloaded earlier. Then click Upload.
7. Enter your ExpressVPN username and password that you obtained earlier in the Username and Password. Note that these are different from your ExpressVPN email login and password.
8. Click Apply and Enable at the bottom of the page.
If you only want certain devices to connect to the OpenVPN Client profile you are setting up instead of all the devices connected to the FlashRouter’s network click into the profile and disable Apply to all devices. Then click Devices and select the devices that you want to connect to VPN.
9. At the top of the page set the Service State toggle to ON to activate the VPN connection.
In some cases you may notice that the location is not showing the same location as the server you have input in your router settings; this is because geo tracking tools are often tricked by VPN connections. As long as you see an IP address that is not the same as your normal Internet IP address then you are indeed connected to ExpressVPN.
If you are not already a PIA user Sign Up Now.
1. Log in to your account on the PIA website.
2. Successfully log in with your account information then go to PIA’s OpenVPN Config Generator.
3. On the OpenVPN Configuration Generator select the following:
OpenVPN Version: OpenVPN 2.4 or newer
Select Platform: Linux
Select Region: Choose the server location you’d like to connect to
Select Port: Typically we recommend UDP/1198 RSA-2048 AES-128-CBC SHA1 for best speeds but feel free to select the one you want to use.
4. Click Generate to download the .ovpn file. Do not open this file once it is downloaded.
Login to AsusWRT firmware settings in a browser on any computer or smart device connected to the AsusWRT FlashRouter’s network.
1. Navigate to the VPN tab.
2. Navigate to the VPN Fusion tab.
3. Click Add profile.
4. In the Connection Name field enter in the name you’d like to use for this OpenVPN Client profile. We typically advise entering in the location or server number here. Our example server was in New York so I have entered in PIA New York.
5. In the VPN Type dropdown select OpenVPN.
6. Click Import .ovpn file and select the .ovpn file you downloaded earlier. Then click Upload.
7. In the Username and Password fields paste in the PIA username and password you use to successfully login to your PIA website account.
8. Click Apply and Enable at the bottom of the page.
If you only want certain devices to connect to the OpenVPN Client profile you are setting up instead of all the devices connected to the FlashRouter’s network click into the profile and disable Apply to all devices. Then click Devices and select the devices that you want to connect to VPN.
9. At the top of the page set the Service State toggle to ON to activate the VPN connection.
In some cases you may notice that the location is not showing the same location as the server you have input in your router settings; this is because geo tracking tools are often tricked by VPN connections. As long as you see an IP address that is not the same as your normal Internet IP address then you are indeed connected to PIA.