Prioritizing Privacy
User Profiles allow you to organize your devices connected to the Roqos Core. This allow you to see a user profile’s usage history, set a schedule when devices are allowed to connect to the Internet, and filter out specific content such as explicit websites and games.
Login to Roqos Core UI web app in a browser on any computer or smart device.
1. Click the navigation menu and select Users.
2. To add a new User Profile click Add User.
3. In the Name field enter the name for the User Profile. You can add an image for the User Profile here as well.
4. You will see a list of devices connected to the Roqos Core at the bottom of the page. Check the box of the devices that you would like to add to this User Profile. Then click Save.
1. Click the User Profile that you want to review.
2. Select Usage History.
3. On the new page you can view usage by Top Visited, All Activity, and Activity Graph.
1. Click the User Profile that you want to review.
2. Select Scheduled Pauses.
3. Click Add Schedule.
4. From here you can set the name of the schedule, the days that the schedule will be in effect, and if the schedule should be applied all day or during specific hours. Click Save.
1. Click the User Profile that you want to review.
2. Select Filters.
3. From here you can use the toggle to Block explicit websites and Block explicit search results.
4. In the Safe Youtube dropdown you can select None, Moderate, or Strict.
5. The Blocked Content area allows you to block specific services such as Games and Social Media.
6. Add specific websites to the Block Sites list if the above policies did not cover them.
7. Add specific websites to the Allowed Sites list if you want to block all websites except for a few.
You can connect to NordVPN on your GL.iNet router using NordLynx, OpenVPN, or a Dedicated IP.
NordLynx: Choose your preferred city or country from NordVPN’s server list
OpenVPN: Choose your preferred city or country from NordVPN’s server list.
Dedicated IP (optional): Enter your unique configuration file if you’ve been assigned a static NordVPN IP.
If you are not already a NordVPN user Sign Up Now.
1. Get your NordVPN Access Token for NordLynx connections. Log in to your NordVPN account and select NordVPN from your list of Services.
2. At the bottom of the page click Get Access token and you will receive a code via email. Enter this code to proceed.
3. After you enter the email code select Generate new token and set it to Doesn’t expire. Copy this token.
4. Login to GL.iNet firmware settings (usually 192.168.8.1) in a browser on any computer or smart device connected to the GL.iNet FlashRouter’s network.
View our guide for more instructions on how to access GL.iNet firmware settings.
5. Navigate to the VPN tab and select Wireguard Client then choose NordVPN. Enter your Token then click Save and Continue
6. Select your preferred server locations, and click Apply.
7. Start a connection by clicking the 3 dots (…) > Start next to your chosen server.
8. A green dot confirms success. You can also switch between Global Mode or Policy Mode for routing in the VPN Dashboard.
1. Get your NordVPN manual service credentials for OpenVPN connections. Log in to your NordVPN account and select NordVPN from your list of Services.
2. At the bottom of the page in the Manual Setup section click Setup NordVPN manually then under the Configuration section go to Service credentials. Click Verify email to receive a code via email and enter the code to view and copy your credentials.
3. Login to GL.iNet firmware settings (usually 192.168.8.1) in a browser on any computer or smart device connected to the GL.iNet FlashRouter’s network.
View our guide for more instructions on how to access GL.iNet firmware settings.
4. Navigate to the VPN tab and select OpenVPN Client.
5. Select the NordVPN group, enter your manual credentials, then click Save Credentials & Get Servers.
6. Choose UDP (recommended), select your preferred server locations, and click Apply.
7. Start a connection by clicking the 3 dots (…) > Start next to your chosen server.
8. A green dot confirms success. You can also switch between Global Mode or Policy Mode for routing in the VPN Dashboard.
1. Get your NordVPN manual service credentials for OpenVPN connections. Log in to your NordVPN account and select NordVPN from your list of Services.
2. At the bottom of the page in the Manual Setup section click Setup NordVPN manually then under the Configuration section go to Service credentials. Click Verify email to receive a code via email and enter the code to view and copy your credentials.
3. Login to GL.iNet firmware settings (usually 192.168.8.1) in a browser on any computer or smart device connected to the GL.iNet FlashRouter’s network.
View our guide for more instructions on how to access GL.iNet firmware settings.
4. Navigate to the VPN tab and select OpenVPN Client.
5. Download your Dedicated IP configuration file from the NordVPN website.
6. Click +New Group and name your NordVPN Dedicated IP connection, then upload the configuration file, enter your manual service credentials and click Apply.
7. Start a connection by clicking the 3 dots (…) > Start next to your chosen server.
8. A green dot confirms success. You can also switch between Global Mode or Policy Mode for routing in the VPN Dashboard.
In some cases you may notice that the location is not showing the same location as the server you have input in your router settings; this is because geo tracking tools are often tricked by VPN connections. As long as you see an IP address that is not the same as your normal Internet IP address then you are indeed connected to NordVPN.
🚫📱Do not run NordVPN apps on devices connected to your NordVPN router. Using the app at the same time as the router VPN may cause conflicts and connection issues.
If you are not already an Windscribe user Sign Up Now.
1. Log in to your account on the Windscribe website.
2. Click on the Download link at the top of the page.
3. Scroll down to the Config Generators section and Click on the OpenVPN link.
4. Click on Get Credentials and copy the Username and Password. This information will be used later on in the configuration.
US East:
us-east.windscribe.com
US West:
us-west.windscribe.com
US Windflix:
wf-us.windscribe.com
Canada:
ca.windscribe.com
Canada West:
ca-west.windscribe.com
Australia:
au.windscribe.com
Austria:
at.windscribe.com
Belgium:
be.windscribe.com
Brazil:
br.windscribe.com
Bulgaria:
bg.windscribe.com
Czech Republic:
cz.windscribe.com
Denmark:
dk.windscribe.com
Egypt:
eg.windscribe.com
Finland:
fi.windscribe.com
France:
fr.windscribe.com
Germany:
de.windscribe.com
Hong Kong:
hk.windscribe.com
Hungary:
hu.windscribe.com
India:
in.windscribe.com
Ireland:
ie.windscribe.com
Italy:
it.windscribe.com
Japan:
jp.windscribe.com
Latvia:
lv.windscribe.com
Luxemburg:
lu.windscribe.com
Malaysia:
my.windscribe.com
Mexico:
mx.windscribe.com
Netherlands:
nl.windscribe.com
Norway:
no.windscribe.com
Poland:
pl.windscribe.com
Romania:
ro.windscribe.com
Russia:
ru.windscribe.com
Singapore:
ch.windscribe.com
South Africa:
za.windscribe.com
South Korea:
kr.windscribe.com
Spain:
es.windscribe.com
Sweden:
se.windscribe.com
Switzerland:
ch.windscribe.com
Taiwan:
tw.windscribe.com
Turkey:
tr.windscribe.com
Ukraine:
ua.windscribe.com
United Kingdom:
uk.windscribe.com
Navigate to Services > VPN
Start OpenVPN Client
If you wish to disable your VPN connection simply set this to Disable at any time and click Apply Settings.
Server IP/Name
Copy and Paste the server you would like to connect to from the server list above. Be sure there are no extra spaces or characters.
If you wish to change Windscribe connection locations, THIS IS THE ONLY FIELD YOU NEED TO CHANGE.
Port
443
Tunnel Device
TUN
Tunnel Protocol
UDP
Encryption cipher
AES-256-CBC
Hash Algorithm
SHA512
User Pass Authentication
Enable
Username
Enter your OpenVPN specific Username.
Password
Enter your OpenVPN specific Password.
Advanced Options
Enable
TLS Cipher
None
LZO Compression
Adaptive
NAT
Enable
Firewall Protection
Enable
TLS Auth Key
-----BEGIN OpenVPN Static key V1----- 5801926a57ac2ce27e3dfd1dd6ef8204 2d82bd4f3f0021296f57734f6f1ea714 a6623845541c4b0c3dea0a050fe6746c b66dfab14cda27e5ae09d7c155aa554f 399fa4a863f0e8c1af787e5c602a801d 3a2ec41e395a978d56729457fe6102d7 d9e9119aa83643210b33c678f9d4109e 3154ac9c759e490cb309b319cf708cae 83ddadc3060a7a26564d1a24411cd552 fe6620ea16b755697a4fc5e6e9d0cfc0 c5c4a1874685429046a424c026db672e 4c2c492898052ba59128d46200b40f88 0027a8b6610a4d559bdc9346d33a0a6b 08e75c7fd43192b162bfd0aef0c716b3 1584827693f676f9a5047123466f0654 eade34972586b31c6ce7e395f4b478cb -----END OpenVPN Static key V1-----
Additional Config
tun-mtu-extra 32
mssfix 1450
persist-key
persist-tun
Policy Based Routing
This field can be used for split VPN and Dual Gateway routing.
CA Cert
-----BEGIN CERTIFICATE----- MIIFozCCA4ugAwIBAgIBATANBgkqhkiG9w0BAQ0FADBAMQswCQYDVQQGEwJDSDEV MBMGA1UEChMMUHJvdG9uVlBOIEFHMRowGAYDVQQDExFQcm90b25WUE4gUm9vdCBD QTAeFw0xNzAyMTUxNDM4MDBaFw0yNzAyMTUxNDM4MDBaMEAxCzAJBgNVBAYTAkNI MRUwEwYDVQQKEwxQcm90b25WUE4gQUcxGjAYBgNVBAMTEVByb3RvblZQTiBSb290 IENBMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAt+BsSsZg7+AuqTq7 vDbPzfygtl9f8fLJqO4amsyOXlI7pquL5IsEZhpWyJIIvYybqS4s1/T7BbvHPLVE wlrq8A5DBIXcfuXrBbKoYkmpICGc2u1KYVGOZ9A+PH9z4Tr6OXFfXRnsbZToie8t 2Xjv/dZDdUDAqeW89I/mXg3k5x08m2nfGCQDm4gCanN1r5MT7ge56z0MkY3FFGCO qRwspIEUzu1ZqGSTkG1eQiOYIrdOF5cc7n2APyvBIcfvp/W3cpTOEmEBJ7/14RnX nHo0fcx61Inx/6ZxzKkW8BMdGGQF3tF6u2M0FjVN0lLH9S0ul1TgoOS56yEJ34hr JSRTqHuar3t/xdCbKFZjyXFZFNsXVvgJu34CNLrHHTGJj9jiUfFnxWQYMo9UNUd4 a3PPG1HnbG7LAjlvj5JlJ5aqO5gshdnqb9uIQeR2CdzcCJgklwRGCyDT1pm7eoiv WV19YBd81vKulLzgPavu3kRRe83yl29It2hwQ9FMs5w6ZV/X6ciTKo3etkX9nBD9 ZzJPsGQsBUy7CzO1jK4W01+u3ItmQS+1s4xtcFxdFY8o/q1zoqBlxpe5MQIWN6Qa lryiET74gMHE/S5WrPlsq/gehxsdgc6GDUXG4dk8vn6OUMa6wb5wRO3VXGEc67IY m4mDFTYiPvLaFOxtndlUWuCruKcCAwEAAaOBpzCBpDAMBgNVHRMEBTADAQH/MB0G A1UdDgQWBBSDkIaYhLVZTwyLNTetNB2qV0gkVDBoBgNVHSMEYTBfgBSDkIaYhLVZ TwyLNTetNB2qV0gkVKFEpEIwQDELMAkGA1UEBhMCQ0gxFTATBgNVBAoTDFByb3Rv blZQTiBBRzEaMBgGA1UEAxMRUHJvdG9uVlBOIFJvb3QgQ0GCAQEwCwYDVR0PBAQD AgEGMA0GCSqGSIb3DQEBDQUAA4ICAQCYr7LpvnfZXBCxVIVc2ea1fjxQ6vkTj0zM htFs3qfeXpMRf+g1NAh4vv1UIwLsczilMt87SjpJ25pZPyS3O+/VlI9ceZMvtGXd MGfXhTDp//zRoL1cbzSHee9tQlmEm1tKFxB0wfWd/inGRjZxpJCTQh8oc7CTziHZ ufS+Jkfpc4Rasr31fl7mHhJahF1j/ka/OOWmFbiHBNjzmNWPQInJm+0ygFqij5qs 51OEvubR8yh5Mdq4TNuWhFuTxpqoJ87VKaSOx/Aefca44Etwcj4gHb7LThidw/ky zysZiWjyrbfX/31RX7QanKiMk2RDtgZaWi/lMfsl5O+6E2lJ1vo4xv9pW8225B5X eAeXHCfjV/vrrCFqeCprNF6a3Tn/LX6VNy3jbeC+167QagBOaoDA01XPOx7Odhsb Gd7cJ5VkgyycZgLnT9zrChgwjx59JQosFEG1DsaAgHfpEl/N3YPJh68N7fwN41Cj zsk39v6iZdfuet/sP7oiP5/gLmA/CIPNhdIYxaojbLjFPkftVjVPn49RqwqzJJPR N8BOyb94yhQ7KO4F3IcLT/y/dsWitY0ZH4lCnAVV/v2YjWAWS3OWyC8BFx/Jmc3W DK/yPwECUcPgHIeXiRjHnJt0Zcm23O2Q3RphpU+1SO3XixsXpOVOYP6rJIXW9bMZ A1gTTlpi7A== -----END CERTIFICATE-----
CLICK APPLY SETTINGS
Leave all settings not mentioned above as their default setting.
Navigate to Status > OpenVPN
In some cases you may notice that the location is not showing the same location as the server you have input in your router settings; this is because geo tracking tools are often tricked by VPN connections. As long as you see an IP address that is not the same as your normal Internet IP address then you are indeed connected to Windscribe VPN.
Navigate to Administration > Backup
If you are not already an PureVPN user Sign Up Now.
1. Log in to your account on the PureVPN website.
2. Select Manual Configuration.
3. Select the Server Location you want to connect to and then click Download.
4. In the Select Protocol dropdown choose WireGuard.
5. In the Select Device dropdown choose DD-WRT. Then click Generate Configuration. This will save a .conf file to your computer.
Login to GL.iNet firmware settings in a browser on any computer or smart device connected to the GL.iNet FlashRouter’s network. For more instructions on how to access the firmware settings view our guide here.
1. Navigate to the VPN tab and select WireGuard Client.
2. Click New Group.
3. Enter PureVPN and click the check mark.
4. Select the .conf file you downloaded earlier and upload it here.
5. Click Apply.
6. Select VPN Dashboard.
7. Set the Enable toggle to On to begin the PureVPN connection.
In some cases you may notice that the location is not showing the same location as the server you have input in your router settings; this is because geo tracking tools are often tricked by VPN connections. As long as you see an IP address that is not the same as your normal Internet IP address then you are indeed connected to PureVPN.
Replicate the steps above with a new location.
If you are not already an NordVPN user Sign Up Now.
1. Log in to your account on the NordVPN website.
2. Click NordVPN on the left hand side and then click Setup NordVPN manually.
3. Enter in the verification code that was sent to your email.
4. Copy and paste your NordVPN manual username and password to a secure location. This is the username and password you will enter into the router settings to connect to NordVPN.
1. There are two options for obtaining the .ovpn file. The first and recommended is to navigate to NordVPN’s server recommendation page. Click Recommended Server to display the fastest server based on your actual location. You can adjust the country if you don’t want to connect to the recommended country.
Then click Show Available Protocols. Click Download Config next to OpenVPN UDP. This will download the .ovpn file to your computer for this server. Do not open this file.
The second method to obtain a server is for connecting to a specific server number that you know you want to use. This applies to NordVPN Dedicated IP servers if you are signed up for that service. Go to NordVPN’s .ovpn file page. Then search for the server number that you want to use and click Download UDP.
Login to Cudy firmware settings in a browser on any computer or smart device connected to the Cudy FlashRouter’s network.
1. Click General Settings.
2. Click VPN.
3. Toggle the Enable switch to On.
4. Select OpenVPN Client from the Protocol dropdown.
5. Click Browse and select the .ovpn file you downloaded earlier. You should see the server file name listed next to Current Config File after doing so.
6. Enter your NordVPN username and password that you obtained earlier in the Username and Password. Note that these are different from your NordVPN email login and password.
7. Click Save & Apply at the bottom of the page.
In some cases you may notice that the location is not showing the same location as the server you have input in your router settings; this is because geo tracking tools are often tricked by VPN connections. As long as you see an IP address that is not the same as your normal Internet IP address then you are indeed connected to NordVPN.
If you are not already an ExpressVPN user Sign Up Now.
1. Log in to your account on the ExpressVPN website.
2. Successfully log in with your account information. Select More.
3. Select Manual Configuration and copy the Username and Password that are displayed on the right hand side of the screen.
4. Click the Server Location that you want to connect to. This will download a .ovpn file to your computer that we will use later on. There is no need to open the file. For this example I have selected New York but feel free to select any server listed there.
Login to Cudy firmware settings in a browser on any computer or smart device connected to the Cudy FlashRouter’s network.
1. Click General Settings.
2. Click VPN.
3. Toggle the Enable switch to On.
4. Select OpenVPN Client from the Protocol dropdown.
5. Click Browse and select the .ovpn file you downloaded earlier. You should see the server file name listed next to Current Config File after doing so.
6. Enter your ExpressVPN username and password that you obtained earlier in the Username and Password. Note that these are different from your ExpressVPN email login and password.
7. Click Save & Apply at the bottom of the page.
In some cases you may notice that the location is not showing the same location as the server you have input in your router settings; this is because geo tracking tools are often tricked by VPN connections. As long as you see an IP address that is not the same as your normal Internet IP address then you are indeed connected to ExpressVPN.
If you are not already an IPVanish user Sign Up Now.
1. Log in to your account on the IPVanish website.
2. Successfully log in with your account information then go to IPVanish .ovpn file page.
3. Click on the .ovpn file for the server location you want to use to dowloand the .ovpn file. Do not open this file.
Login to Cudy firmware settings in a browser on any computer or smart device connected to the Cudy FlashRouter’s network.
1. Click General Settings.
2. Click VPN.
3. Toggle the Enable switch to On.
4. Select OpenVPN Client from the Protocol dropdown.
5. Click Browse and select the .ovpn file you downloaded earlier. You should see the server file name listed next to Current Config File after doing so.
6. Enter your IPVanish account login email and password that you obtained earlier in the Username and Password.
7. Click Save & Apply at the bottom of the page.
In some cases you may notice that the location is not showing the same location as the server you have input in your router settings; this is because geo tracking tools are often tricked by VPN connections. As long as you see an IP address that is not the same as your normal Internet IP address then you are indeed connected to IPVanish.
If you are not already a PIA user Sign Up Now.
1. Log in to your account on the PIA website.
2. Successfully log in with your account information then go to PIA’s OpenVPN Config Generator.
3. On the OpenVPN Configuration Generator select the following:
OpenVPN Version: OpenVPN 2.4 or newer
Select Platform: Linux
Select Region: Choose the server location you’d like to connect to
Select Port: Typically we recommend UDP/1198 RSA-2048 AES-128-CBC SHA1 for best speeds but feel free to select the one you want to use.
4. Click Generate to download the .ovpn file. Do not open this file once it is downloaded.
Login to Cudy firmware settings in a browser on any computer or smart device connected to the Cudy FlashRouter’s network.
1. Click General Settings.
2. Click VPN.
3. Toggle the Enable switch to On.
4. Select OpenVPN Client from the Protocol dropdown.
5. Click Browse and select the .ovpn file you downloaded earlier. You should see the server file name listed next to Current Config File after doing so.
6. Enter your PIA account login username and password in the Username and Password.
7. Click Save & Apply at the bottom of the page.
In some cases you may notice that the location is not showing the same location as the server you have input in your router settings; this is because geo tracking tools are often tricked by VPN connections. As long as you see an IP address that is not the same as your normal Internet IP address then you are indeed connected to PIA.
If you are not already an ProtonVPN user Sign Up Now.
1. Log in to your account on the ProtonVPN website.
2. Click Downloads.
3. Scroll down to WireGuard configuration and name the device FlashRouter.
4. Select Router as the platform.
5. Select the VPN options that best fit your needs. We typically use the settings as seen in the screenshot here if you are unsure.
6. Next select the server that you would like to connect to and click Create. At the top of the page you’ll see ProtonVPN’s recommended server which we recommend using unless you need to connect to a specific location.
If you need a specific server location find it in the list and click Create.
7. After clicking Create a new window will appear. Click Download to download the .conf file to your computer.
Login to Asus Merlin firmware settings in a browser on any computer or smart device connected to the Merlin FlashRouter’s network.
1. Navigate to the VPN tab.
2. Navigate to the VPN Client tab.
3. Select WireGuard as the VPN Protocol.
4. Click Choose file and select the .conf file you downloaded earlier. Then click Upload.
5. In the Description field enter in the name you’d like to use for this WireGuard Client profile. We typically advise entering in the location here. Our example server was in US-NY#61 so I have entered in ProtonVPN NY-61.
6. Set Enable WireGuard to Yes.
7. Click Apply at the bottom of the page and you should then see a Connected message appear.
8. By default no devices are assigned to the new active WireGuard connection profile. Click the VPN Director tab to assign specific devices to the new WireGuard profile. Your IP will not be changed on your devices yet.
9. On the VPN Director page click the + symbol next to Add new rule.
10. Select the new WireGuard profile in the Interface dropdown.
11. In the Local IP field enter in 192.168.50.0/24 if you want ALL devices connected to the FlashRouter’s network to use the WireGuard VPN connection. Click OK.
If you only want certain devices to connect to the WireGuard Client profile you have setting up instead of all the devices connected to the FlashRouter’s network please complete the instructions on our VPN Director guide.
12. Then click Apply at the bottom of the page.
Visit ProtonVPN’s IP Check from a private/incognito browsing window to verify your new IP address and virtual location.
In some cases you may notice that the location is not showing the same location as the server you have input in your router settings; this is because geo tracking tools are often tricked by VPN connections. As long as you see an IP address that is not the same as your normal Internet IP address then you are indeed connected to ProtonVPN.
Aircove
R6300 V2, R6400 V2, R6700 V3, R7000, R7000P
RT-AC56U, RT-AC56R, RT-AC56S, RT-AC68U V3, RT-AC87U
EA6200, WRT1200AC, WRT1900AC V1, WRT1900AC V2, WRT1900ACS V1, WRT1900ACS V2, WRT32X, WRT3200ACM
If you are not already an IPVanish user Sign Up Now.
Log in to your account on the IPVanish website.
View a full list of IPVanish servers.
Ashburn:
iad-a01.ipvanish.com
through
iad-a78.ipvanish.com
Atlanta:
atl-a01.ipvanish.com
through
atl-a88.ipvanish.com
Boston:
bos-c01.ipvanish.com
through
bos-c27.ipvanish.com
Chicago:
chi-a01.ipvanish.com
through
chi-a58.ivpanish.com
Cleveland:
cle-c01.ipvanish.com
through
cle-c20.ipvanish.com
Dallas:
dal-a01.ipvanish.com
through
dal-a79.ipvanish.com
Denver:
den-c01.ipvanish.com
through
den-c13.ipvanish.com
Jackson:
jan-c01.ipvanish.com
through
jan-c15.ipvanish.com
Las Vegas:
las-c11.ipvanish.com
through
las-c20.ipvanish.com
Los Angeles:
lax-a01.ipvanish.com
through
lax-a60.ipvanish.com
Miami:
mia-a01.ipvanish.com
through
mia-a34.ipvanish.com
Milwaukee:
mke-c01.ipvanish.com
through
mke-c19.ipvanish.com
New York:
nyc-a01.ipvanish.com
through
nyc-a51.ipvanish.com
Phoenix:
phx-a01.ipvanish.com
through
phx-a24.ipvanish.com
Salt Lake City:
slc-c01.ipvanish.com
through
slc-c12.ipvanish.com
San Jose:
sjc-a01.ipvanish.com
through
sjc-a27.ipvanish.com
Seattle:
sea-a01-ipvanish.com
through
sea-a41.ipvanish.com
St. Louis:
stl-c01.ipvanish.com
through
stl-c18.ipvanish.com
London:
lon-a01.ipvanish.com
through
lon-a69.ipvanish.com
lon-c01.ipvanish.com
through
lon-c58.ipvanish.com
Manchester:
man-c01.ipvanish.com
through
man-c09.ipvanish.com
Navigate to Services > VPN
Start OpenVPN Client
If you wish to disable your VPN connection simply set this to Disable at any time and click Apply Settings.
Server IP/Name
Copy and paste the server you would like to connect to from the server list above. Be sure there are no extra spaces or characters.
If you wish to change IPVanish connection locations, THIS IS THE ONLY FIELD YOU NEED TO CHANGE.
Port
443
Tunnel Device
TUN
Tunnel Protocol
UDP
Encryption cipher
AES-256-CBC
Hash Algorithm
SHA256
User Pass Authentication
Enable
Username
Enter the Username you successfully logged in to your IPVanish account with.
Password
Enter the Password you successfully logged in to your IPVanish account with.
Advanced Options
Enable
TLS Cipher
None
LZO Compression
Adaptive
NAT
Enable
Firewall Protection
Enable
Additional Config
persist-key
persist-tun
persist-remote-ip
keysize 256
Policy Based Routing
This field can be used for split VPN and Dual Gateway routing.
CA Cert
-----BEGIN CERTIFICATE----- MIIErTCCA5WgAwIBAgIJAMYKzSS8uPKDMA0GCSqGSIb3DQEBDQUAMIGVMQswCQYD VQQGEwJVUzELMAkGA1UECBMCRkwxFDASBgNVBAcTC1dpbnRlciBQYXJrMREwDwYD VQQKEwhJUFZhbmlzaDEVMBMGA1UECxMMSVBWYW5pc2ggVlBOMRQwEgYDVQQDEwtJ UFZhbmlzaCBDQTEjMCEGCSqGSIb3DQEJARYUc3VwcG9ydEBpcHZhbmlzaC5jb20w HhcNMTIwMTExMTkzMjIwWhcNMjgxMTAyMTkzMjIwWjCBlTELMAkGA1UEBhMCVVMx CzAJBgNVBAgTAkZMMRQwEgYDVQQHEwtXaW50ZXIgUGFyazERMA8GA1UEChMISVBW YW5pc2gxFTATBgNVBAsTDElQVmFuaXNoIFZQTjEUMBIGA1UEAxMLSVBWYW5pc2gg Q0ExIzAhBgkqhkiG9w0BCQEWFHN1cHBvcnRAaXB2YW5pc2guY29tMIIBIjANBgkq hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9DBWNr/IKOuY3TmDP5x7vYZR0DGxLbX U8TyAzBbjUtFFMbhxlHiXVQrZHmgzih94x7BgXM7tWpmMKYVb+gNaqMdWE680Qm3 nOwmhy/dulXDkEHAwD05i/iTx4ZaUdtV2vsKBxRg1vdC4AEiwD7bqV4HOi13xcG9 71aQ55Mj1KeCdA0aNvpat1LWx2jjWxsfI8s2Lv5Fkoi1HO1+vTnnaEsJZrBgAkLX pItqP29Lik3/OBIvkBIxlKrhiVPixE5qNiD+eSPirsmROvsyIonoJtuY4Dw5K6pc NlKyYiwo1IOFYU3YxffwFJk+bSW4WVBhsdf5dGxq/uOHmuz5gdwxCwIDAQABo4H9 MIH6MAwGA1UdEwQFMAMBAf8wHQYDVR0OBBYEFEv9FCWJHefBcIPX9p8RHCVOGe6u MIHKBgNVHSMEgcIwgb+AFEv9FCWJHefBcIPX9p8RHCVOGe6uoYGbpIGYMIGVMQsw CQYDVQQGEwJVUzELMAkGA1UECBMCRkwxFDASBgNVBAcTC1dpbnRlciBQYXJrMREw DwYDVQQKEwhJUFZhbmlzaDEVMBMGA1UECxMMSVBWYW5pc2ggVlBOMRQwEgYDVQQD EwtJUFZhbmlzaCBDQTEjMCEGCSqGSIb3DQEJARYUc3VwcG9ydEBpcHZhbmlzaC5j b22CCQDGCs0kvLjygzANBgkqhkiG9w0BAQ0FAAOCAQEAI2dkh/43ksV2fdYpVGhY aFZPVqCJoToCez0IvOmLeLGzow+EOSrY508oyjYeNP4VJEjApqo0NrMbKl8g/8bp LBcotOCF1c1HZ+y9v7648uumh01SMjsbBeHOuQcLb+7gX6c0pEmxWv8qj5JiW3/1 L1bktnjW5Yp5oFkFSMXjOnIoYKHyKLjN2jtwH6XowUNYpg4qVtKU0CXPdOznWcd9 /zSfa393HwJPeeVLbKYaFMC4IEbIUmKYtWyoJ9pJ58smU3pWsHZUg9Zc0LZZNjkN lBdQSLmUHAJ33Bd7pJS0JQeiWviC+4UTmzEWRKa7pDGnYRYNu2cUo0/voStphv8E VA== -----END CERTIFICATE-----
CLICK APPLY SETTINGS
Leave all settings not mentioned above as their default setting.
Navigate to Status > OpenVPN
In some cases you may notice that the location is not showing the same location as the server you have input in your router settings; this is because geo tracking tools are often tricked by VPN connections. As long as you see an IP address that is not the same as your normal Internet IP address then you are indeed connected to IPVanish.
Navigate to Administration > Backup.
If you are not already an ExpressVPN user Sign Up Now.
1. Log in to your account on the ExpressVPN website.
2. Successfully log in with your account information. Select More.
3. Select Manual Configuration and copy the Username and Password that are displayed on the right hand side of the screen.
4. Click the Server Location that you want to connect to. This will download a .ovpn file to your computer that we will use later on. There is no need to open the file. For this example I have selected New York but feel free to select any server listed there.
Login to TP-Link firmware settings in a browser on any computer or smart device connected to the FlashRouter’s network.
1. Navigate to the Advanced tab.
2. Navigate to the VPN Client tab.
3. Check the Enable box next to VPN Client. Then click Save at the bottom of the page.
4. Click the Add button in the Server List area.
5. In the Description field enter in the name you’d like to use for this OpenVPN Client profile. We typically advise entering in the location or server number here. Our example server was in New York so I have entered in ExpressVPN New York.
Set the VPN Type to OpenVPN.
In the Username and Password fields paste in the ExpressVPN username and password we obtained earlier.
Click Browse and select the .ovpn file you downloaded earlier. Then click Save.
By default no devices will be assigned to the VPN Tunnel. With TP-Link firmware you must manually assign the devices that you want connected to the VPN tunnel. Proceed with the next steps to do so for all devices you want connected to VPN.
6. Click the Add button in the Device List area.
7. A list of devices connected to the FlashRouter’s network will appear. Check the devices that you want to connect to VPN. Then click OK.
8. Now that the devices have been assigned to the VPN connection click the Enable toggle in the Server List area.
In some cases you may notice that the location is not showing the same location as the server you have input in your router settings; this is because geo tracking tools are often tricked by VPN connections. As long as you see an IP address that is not the same as your normal Internet IP address then you are indeed connected to ExpressVPN.
If you are not already a PIA user Sign Up Now.
Log in to your account on the PIA website.
The below servers are the only servers compatible with PIA router connections. Dedicated IP Addresses are not able to connect via routers.
us-california.privacy.network
us-newjersey.privacy.network
us-chicago.privacy.network
us-texas.privacy.network
us-florida.privacy.network
us-seattle.privacy.network
us3.privacy.network
us-siliconvalley.privacy.network
us-newyorkcity.privacy.network
us-washingtondc.privacy.network
us-atlanta.privacy.network
us-houston.privacy.network
us-denver.privacy.network
uk-london.privacy.network
uk-manchester.privacy.network
ca-toronto.privacy.network
ca-montreal.privacy.network
au-sydney.privacy.network
aus-melbourne.privacy.network
aus-perth.privacy.network
de-berlin.privacy.network
de-frankfurt.privacy.network
ae.privacy.network
austria.privacy.network
dz.privacy.network
ad.privacy.network
ar.privacy.network
yerevan.privacy.network
bahamas.privacy.network
bangladesh.privacy.network
brussels.privacy.network
sofia.privacy.network
cambodia.privacy.network
china.privacy.network
cyprus.privacy.network
czech.privacy.network
denmark.privacy.network
egypt.privacy.network
fi.privacy.network
france.privacy.network
georgia.privacy.network
greenland.privacy.network
hungary.privacy.network
is.privacy.network
in.privacy.network
iran.privacy.network
ireland.privacy.network
man.privacy.network
israel.privacy.network
italy.privacy.network
japan.privacy.network
kazakhstan.privacy.network
liechtenstein.privacy.network
lu.privacy.network
macau.privacy.network
malta.privacy.network
mexico.privacy.network
md.privacy.network
monaco.privacy.network
mongolia.privacy.network
montenegro.privacy.network
morocco.privacy.network
nl-amsterdam.privacy.network
nz.privacy.network
nigeria.privacy.network
no.privacy.network
panama.privacy.network
philippines.privacy.network
poland.privacy.network
qatar.privacy.network
ro.privacy.network
rs.privacy.network
saudiarabia.privacy.network
spain.privacy.network
srilanka.privacy.network
sweden.privacy.network
swiss.privacy.network
sg.privacy.network
tr.privacy.network
taiwan.privacy.network
ua.privacy.network
venezuela.privacy.network
vietnam.privacy.network
za.privacy.network
Navigate to Services > VPN
PIA offers two different Encryption levels.
Default Encryption (AES-128) typically provides faster speeds.
Strong Encryption (AES-256) provides stronger encryption.
Follow the table below of the one that fits your needs.
Start OpenVPN Client
If you wish to disable your VPN connection simply set this to Disable at any time and click Apply Settings.
Server IP/Name
Copy and paste the server you would like to connect to from the server list above. Be sure there are no extra spaces or characters.
If you wish to change PIA connection locations, THIS IS THE ONLY FIELD YOU NEED TO CHANGE.
Port
1198
Tunnel Device
TUN
Tunnel Protocol
UDP
Encryption cipher
AES-128-CBC
Hash Algorithm
SHA1
First Data Cipher
Not set
Second Data Cipher
Not set
Third Data Cipher
Not set
Userpass Authentication
Enable
Username
Enter the Username you successfully logged in to your PIA account with.
Password
Enter the Password you successfully logged in to your PIA account with.
Advanced Options
Enable
TLS Cipher
None
LZO Compression
Disabled
NAT
Enable
Firewall Protection
Enable
Additional Config
persist-key
persist-tun
Policy Based Routing
This field can be used for split VPN and Dual Gateway routing.
CA Cert
-----BEGIN CERTIFICATE----- MIIFqzCCBJOgAwIBAgIJAKZ7D5Yv87qDMA0GCSqGSIb3DQEBDQUAMIHoMQswCQYD VQQGEwJVUzELMAkGA1UECBMCQ0ExEzARBgNVBAcTCkxvc0FuZ2VsZXMxIDAeBgNV BAoTF1ByaXZhdGUgSW50ZXJuZXQgQWNjZXNzMSAwHgYDVQQLExdQcml2YXRlIElu dGVybmV0IEFjY2VzczEgMB4GA1UEAxMXUHJpdmF0ZSBJbnRlcm5ldCBBY2Nlc3Mx IDAeBgNVBCkTF1ByaXZhdGUgSW50ZXJuZXQgQWNjZXNzMS8wLQYJKoZIhvcNAQkB FiBzZWN1cmVAcHJpdmF0ZWludGVybmV0YWNjZXNzLmNvbTAeFw0xNDA0MTcxNzM1 MThaFw0zNDA0MTIxNzM1MThaMIHoMQswCQYDVQQGEwJVUzELMAkGA1UECBMCQ0Ex EzARBgNVBAcTCkxvc0FuZ2VsZXMxIDAeBgNVBAoTF1ByaXZhdGUgSW50ZXJuZXQg QWNjZXNzMSAwHgYDVQQLExdQcml2YXRlIEludGVybmV0IEFjY2VzczEgMB4GA1UE AxMXUHJpdmF0ZSBJbnRlcm5ldCBBY2Nlc3MxIDAeBgNVBCkTF1ByaXZhdGUgSW50 ZXJuZXQgQWNjZXNzMS8wLQYJKoZIhvcNAQkBFiBzZWN1cmVAcHJpdmF0ZWludGVy bmV0YWNjZXNzLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAPXD L1L9tX6DGf36liA7UBTy5I869z0UVo3lImfOs/GSiFKPtInlesP65577nd7UNzzX lH/P/CnFPdBWlLp5ze3HRBCc/Avgr5CdMRkEsySL5GHBZsx6w2cayQ2EcRhVTwWp cdldeNO+pPr9rIgPrtXqT4SWViTQRBeGM8CDxAyTopTsobjSiYZCF9Ta1gunl0G/ 8Vfp+SXfYCC+ZzWvP+L1pFhPRqzQQ8k+wMZIovObK1s+nlwPaLyayzw9a8sUnvWB /5rGPdIYnQWPgoNlLN9HpSmsAcw2z8DXI9pIxbr74cb3/HSfuYGOLkRqrOk6h4RC OfuWoTrZup1uEOn+fw8CAwEAAaOCAVQwggFQMB0GA1UdDgQWBBQv63nQ/pJAt5tL y8VJcbHe22ZOsjCCAR8GA1UdIwSCARYwggESgBQv63nQ/pJAt5tLy8VJcbHe22ZO sqGB7qSB6zCB6DELMAkGA1UEBhMCVVMxCzAJBgNVBAgTAkNBMRMwEQYDVQQHEwpM b3NBbmdlbGVzMSAwHgYDVQQKExdQcml2YXRlIEludGVybmV0IEFjY2VzczEgMB4G A1UECxMXUHJpdmF0ZSBJbnRlcm5ldCBBY2Nlc3MxIDAeBgNVBAMTF1ByaXZhdGUg SW50ZXJuZXQgQWNjZXNzMSAwHgYDVQQpExdQcml2YXRlIEludGVybmV0IEFjY2Vz czEvMC0GCSqGSIb3DQEJARYgc2VjdXJlQHByaXZhdGVpbnRlcm5ldGFjY2Vzcy5j b22CCQCmew+WL/O6gzAMBgNVHRMEBTADAQH/MA0GCSqGSIb3DQEBDQUAA4IBAQAn a5PgrtxfwTumD4+3/SYvwoD66cB8IcK//h1mCzAduU8KgUXocLx7QgJWo9lnZ8xU ryXvWab2usg4fqk7FPi00bED4f4qVQFVfGfPZIH9QQ7/48bPM9RyfzImZWUCenK3 7pdw4Bvgoys2rHLHbGen7f28knT2j/cbMxd78tQc20TIObGjo8+ISTRclSTRBtyC GohseKYpTS9himFERpUgNtefvYHbn70mIOzfOJFTVqfrptf9jXa9N8Mpy3ayfodz 1wiqdteqFXkTYoSDctgKMiZ6GdocK9nMroQipIQtpnwd4yBDWIyC6Bvlkrq5TQUt YDQ8z9v+DMO6iwyIDRiU -----END CERTIFICATE-----
CLICK APPLY SETTINGS
Leave all settings not mentioned above as their default setting.
Start OpenVPN Client
If you wish to disable your VPN connection simply set this to Disable at any time and click Apply Settings.
Server IP/Name
Copy and paste the server you would like to connect to from the server list above. Be sure there are no extra spaces or characters.
If you wish to change PIA connection locations, THIS IS THE ONLY FIELD YOU NEED TO CHANGE.
Port
1197
Tunnel Device
TUN
Tunnel Protocol
UDP
Encryption cipher
AES-256-CBC
Hash Algorithm
SHA256
First Data Cipher
Not set
Second Data Cipher
Not set
Third Data Cipher
Not set
Userpass Authentication
Enable
Username
Enter the Username you successfully logged in to your PIA account with.
Password
Enter the Password you successfully logged in to your PIA account with.
Advanced Options
Enable
TLS Cipher
None
LZO Compression
Adaptive
NAT
Enable
Firewall Protection
Enable
Additional Config
persist-key
persist-tun
Policy Based Routing
This field can be used for split VPN and Dual Gateway routing.
CA Cert
-----BEGIN CERTIFICATE----- MIIHqzCCBZOgAwIBAgIJAJ0u+vODZJntMA0GCSqGSIb3DQEBDQUAMIHoMQswCQYD VQQGEwJVUzELMAkGA1UECBMCQ0ExEzARBgNVBAcTCkxvc0FuZ2VsZXMxIDAeBgNV BAoTF1ByaXZhdGUgSW50ZXJuZXQgQWNjZXNzMSAwHgYDVQQLExdQcml2YXRlIElu dGVybmV0IEFjY2VzczEgMB4GA1UEAxMXUHJpdmF0ZSBJbnRlcm5ldCBBY2Nlc3Mx IDAeBgNVBCkTF1ByaXZhdGUgSW50ZXJuZXQgQWNjZXNzMS8wLQYJKoZIhvcNAQkB FiBzZWN1cmVAcHJpdmF0ZWludGVybmV0YWNjZXNzLmNvbTAeFw0xNDA0MTcxNzQw MzNaFw0zNDA0MTIxNzQwMzNaMIHoMQswCQYDVQQGEwJVUzELMAkGA1UECBMCQ0Ex EzARBgNVBAcTCkxvc0FuZ2VsZXMxIDAeBgNVBAoTF1ByaXZhdGUgSW50ZXJuZXQg QWNjZXNzMSAwHgYDVQQLExdQcml2YXRlIEludGVybmV0IEFjY2VzczEgMB4GA1UE AxMXUHJpdmF0ZSBJbnRlcm5ldCBBY2Nlc3MxIDAeBgNVBCkTF1ByaXZhdGUgSW50 ZXJuZXQgQWNjZXNzMS8wLQYJKoZIhvcNAQkBFiBzZWN1cmVAcHJpdmF0ZWludGVy bmV0YWNjZXNzLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBALVk hjumaqBbL8aSgj6xbX1QPTfTd1qHsAZd2B97m8Vw31c/2yQgZNf5qZY0+jOIHULN De4R9TIvyBEbvnAg/OkPw8n/+ScgYOeH876VUXzjLDBnDb8DLr/+w9oVsuDeFJ9K V2UFM1OYX0SnkHnrYAN2QLF98ESK4NCSU01h5zkcgmQ+qKSfA9Ny0/UpsKPBFqsQ 25NvjDWFhCpeqCHKUJ4Be27CDbSl7lAkBuHMPHJs8f8xPgAbHRXZOxVCpayZ2SND fCwsnGWpWFoMGvdMbygngCn6jA/W1VSFOlRlfLuuGe7QFfDwA0jaLCxuWt/BgZyl p7tAzYKR8lnWmtUCPm4+BtjyVDYtDCiGBD9Z4P13RFWvJHw5aapx/5W/CuvVyI7p Kwvc2IT+KPxCUhH1XI8ca5RN3C9NoPJJf6qpg4g0rJH3aaWkoMRrYvQ+5PXXYUzj tRHImghRGd/ydERYoAZXuGSbPkm9Y/p2X8unLcW+F0xpJD98+ZI+tzSsI99Zs5wi jSUGYr9/j18KHFTMQ8n+1jauc5bCCegN27dPeKXNSZ5riXFL2XX6BkY68y58UaNz meGMiUL9BOV1iV+PMb7B7PYs7oFLjAhh0EdyvfHkrh/ZV9BEhtFa7yXp8XR0J6vz 1YV9R6DYJmLjOEbhU8N0gc3tZm4Qz39lIIG6w3FDAgMBAAGjggFUMIIBUDAdBgNV HQ4EFgQUrsRtyWJftjpdRM0+925Y6Cl08SUwggEfBgNVHSMEggEWMIIBEoAUrsRt yWJftjpdRM0+925Y6Cl08SWhge6kgeswgegxCzAJBgNVBAYTAlVTMQswCQYDVQQI EwJDQTETMBEGA1UEBxMKTG9zQW5nZWxlczEgMB4GA1UEChMXUHJpdmF0ZSBJbnRl cm5ldCBBY2Nlc3MxIDAeBgNVBAsTF1ByaXZhdGUgSW50ZXJuZXQgQWNjZXNzMSAw HgYDVQQDExdQcml2YXRlIEludGVybmV0IEFjY2VzczEgMB4GA1UEKRMXUHJpdmF0 ZSBJbnRlcm5ldCBBY2Nlc3MxLzAtBgkqhkiG9w0BCQEWIHNlY3VyZUBwcml2YXRl aW50ZXJuZXRhY2Nlc3MuY29tggkAnS7684Nkme0wDAYDVR0TBAUwAwEB/zANBgkq hkiG9w0BAQ0FAAOCAgEAJsfhsPk3r8kLXLxY+v+vHzbr4ufNtqnL9/1Uuf8NrsCt pXAoyZ0YqfbkWx3NHTZ7OE9ZRhdMP/RqHQE1p4N4Sa1nZKhTKasV6KhHDqSCt/dv Em89xWm2MVA7nyzQxVlHa9AkcBaemcXEiyT19XdpiXOP4Vhs+J1R5m8zQOxZlV1G tF9vsXmJqWZpOVPmZ8f35BCsYPvv4yMewnrtAC8PFEK/bOPeYcKN50bol22QYaZu LfpkHfNiFTnfMh8sl/ablPyNY7DUNiP5DRcMdIwmfGQxR5WEQoHL3yPJ42LkB5zs 6jIm26DGNXfwura/mi105+ENH1CaROtRYwkiHb08U6qLXXJz80mWJkT90nr8Asj3 5xN2cUppg74nG3YVav/38P48T56hG1NHbYF5uOCske19F6wi9maUoto/3vEr0rnX JUp2KODmKdvBI7co245lHBABWikk8VfejQSlCtDBXn644ZMtAdoxKNfR2WTFVEwJ iyd1Fzx0yujuiXDROLhISLQDRjVVAvawrAtLZWYK31bY7KlezPlQnl/D9Asxe85l 8jO5+0LdJ6VyOs/Hd4w52alDW/MFySDZSfQHMTIc30hLBJ8OnCEIvluVQQ2UQvoW +no177N9L2Y+M9TcTA62ZyMXShHQGeh20rb4kK8f+iFX8NxtdHVSkxMEFSfDDyQ= -----END CERTIFICATE-----
CLICK APPLY SETTINGS
Leave all settings not mentioned above as their default setting.
Navigate to Status > OpenVPN
In some cases you may notice that the location is not showing the same location as the server you have input in your router settings; this is because geo tracking tools are often tricked by VPN connections. As long as you see an IP address that is not the same as your normal Internet IP address then you are indeed connected to PIA.
Navigate to Administration > Backup
If you are not already a Surfshark user Sign Up Now.
1. Log in to your account on the Surfshark website.
2. Click VPN Manual Setup.
3. Select Router as the Setup Method.
4. Select WireGuard as the Protocol.
5. Select I don’t have a key pair.
6. Enter FlashRouter as the name of the connection and click Next.
7. Click Generate a new key pair.
8. Click Choose a location.
9. Select the server location you want to connect to. Unless you need a specific location we recommend using Surfshark’s recommended Fastest server. Click Download to download the .conf file for this Surfshark server location.
Login to Asus Merlin firmware settings in a browser on any computer or smart device connected to the Merlin FlashRouter’s network.
1. Navigate to the VPN tab.
2. Navigate to the VPN Client tab.
3. Select WireGuard as the VPN Protocol.
4. Click Choose file and select the .conf file you downloaded earlier. Then click Upload.
5. In the Description field enter in the name you’d like to use for this WireGuard Client profile. We typically advise entering in the location here. Our example server was in New York so I have entered in Surfshark New York.
6. Set Enable WireGuard to Yes.
7. Click Apply at the bottom of the page and you should then see a Connected message appear.
8. By default no devices are assigned to the new active WireGuard connection profile. Click the VPN Director tab to assign specific devices to the new WireGuard profile. Your IP will not be changed on your devices yet.
9. On the VPN Director page click the + symbol next to Add new rule.
10. Select the new WireGuard profile in the Interface dropdown.
11. In the Local IP field enter in 192.168.50.0/24 if you want ALL devices connected to the FlashRouter’s network to use the WireGuard VPN connection. Click OK.
If you only want certain devices to connect to the WireGuard Client profile you have setting up instead of all the devices connected to the FlashRouter’s network please complete the instructions on our VPN Director guide.
12. Then click Apply at the bottom of the page.
Visit Surfshark’s IP Check from a private/incognito browsing window to verify your new IP address and virtual location.
In some cases you may notice that the location is not showing the same location as the server you have input in your router settings; this is because geo tracking tools are often tricked by VPN connections. As long as you see an IP address that is not the same as your normal Internet IP address then you are indeed connected to Surfshark.
If you are not already an ExpressVPN user Sign Up Now.
1. Log in to your account on the ExpressVPN website.
2. Successfully log in with your account information. Select More.
3. Select Manual Configuration and copy the Username and Password that are displayed on the right hand side of the screen.
usa-atlanta-ca-version-2.expressnetw.com
usa-boston-ca-version-2.expressnetw.com
usa-chicago-ca-version-2.expressnetw.com
usa-dallas-ca-version-2.expressnetw.com
usa-dallas-2-ca-version-2.expressnetw.com
usa-denver-ca-version-2.expressnetw.com
usa-kansascity-ca-version-2.expressnetw.com
usa-losangeles-ca-version-2.expressnetw.com
usa-losangeles-1-ca-version-2.expressnetw.com
usa-losangeles-2-ca-version-2.expressnetw.com
usa-losangeles-3-ca-version-2.expressnetw.com
usa-los-angeles-4-ca-version-2.expressnetw.com
usa-miami-ca-version-2.expressnetw.com
usa-miami-2-ca-version-2.expressnetw.com
usa-minneapolis-ca-version-2.expressnetw.com
usa-newjersey-1-ca-version-2.expressnetw.com
usa-newjersey-3-ca-version-2.expressnetw.com
usa-newyork-ca-version-2.expressnetw.com
us-new-york-2-ca-version-2.expressnetw.com
usa-phoenix-ca-version-2.expressnetw.com
usa-saltlakecity-ca-version-2.expressnetw.com
usa-sanfrancisco-ca-version-2.expressnetw.com
usa-sanjose-ca-version-2.expressnetw.com
usa-seattle-ca-version-2.expressnetw.com
usa-tampa-1-ca-version-2.expressnetw.com
usa-virginia-ca-version-2.expressnetw.com
usa-washingtondc-ca-version-2.expressnetw.com
usa-washingtondc-2-ca-version-2.expressnetw.com
canada-montreal-ca-version-2.expressnetw.com
canada-toronto-ca-version-2.expressnetw.com
canada-toronto-2-ca-version-2.expressnetw.com
canada-vancouver-ca-version-2.expressnetw.com
mexico-ca-version-2.expressnetw.com
argentina-ca-version-2.expressnetw.com
brazil-ca-version-2.expressnetw.com
brazil-2-ca-version-2.expressnetw.com
chile-ca-version-2.expressnetw.com
colombia-ca-version-2.expressnetw.com
costarica-ca-version-2.expressnetw.com
ecuador-ca-version-2.expressnetw.com
guatemala-ca-version-2.expressnetw.com
panama-ca-version-2.expressnetw.com
peru-ca-version-2.expressnetw.com
uruguay-ca-version-2.expressnetw.com
venezuela-ca-version-2.expressnetw.com
uk-berkshire-ca-version-2.expressnetw.com
uk-berkshire-2-ca-version-2.expressnetw.com
uk-docklands-ca-version-2.expressnetw.com
uk-east-london-ca-version-2.expressnetw.com
uk-kent-ca-version-2.expressnetw.com
uk-london-ca-version-2.expressnetw.com
france-paris-1-ca-version-2.expressnetw.com
france-paris-2-ca-version-2.expressnetw.com
france-strasbourg-ca-version-2.expressnetw.com
germany-darmstadt-ca-version-2.expressnetw.com
germany-frankfurt-1-ca-version-2.expressnetw.com
germany-frankfurt-2-ca-version-2.expressnetw.com
germany-nuremberg-ca-version-2.expressnetw.com
italy-cosenza-ca-version-2.expressnetw.com
italy-milan-ca-version-2.expressnetw.com
netherlands-amsterdam-ca-version-2.expressnetw.com
netherlands-rotterdam-ca-version-2.expressnetw.com
netherlands-thehague-ca-version-2.expressnetw.com
spain-barcelona-ca-version-2.expressnetw.com
spain-ca-version-2.expressnetw.com
sweden-ca-version-2.expressnetw.com
sweden-2-ca-version-2.expressnetw.com
switzerland-ca-version-2.expressnetw.com
switzerland-2-ca-version-2.expressnetw.com
albania-ca-version-2.expressnetw.com
andorra-ca-version-2.expressnetw.com
armenia-ca-version-2.expressnetw.com
austria-ca-version-2.expressnetw.com
azerbaijan-ca-version-2.expressnetw.com
belarus-ca-version-2.expressnetw.com
belgium-ca-version-2.expressnetw.com
bosniaandherzegovina-ca-version-2.expressnetw.com
bulgaria-ca-version-2.expressnetw.com
croatia-ca-version-2.expressnetw.com
cyprus-ca-version-2.expressnetw.com
czechrepublic-ca-version-2.expressnetw.com
denmark-ca-version-2.expressnetw.com
estonia-ca-version-2.expressnetw.com
finland-ca-version-2.expressnetw.com
georgia-ca-version-2.expressnetw.com
greece-ca-version-2.expressnetw.com
hungary-ca-version-2.expressnetw.com
iceland-ca-version-2.expressnetw.com
ireland-ca-version-2.expressnetw.com
isleofman-ca-version-2.expressnetw.com
jersey-ca-version-2.expressnetw.com
latvia-ca-version-2.expressnetw.com
liechtenstein-ca-version-2.expressnetw.com
lithuania-ca-version-2.expressnetw.com
luxembourg-ca-version-2.expressnetw.com
macedonia-ca-version-2.expressnetw.com
malta-ca-version-2.expressnetw.com
moldova-ca-version-2.expressnetw.com
monaco-ca-version-2.expressnetw.com
montenegro-ca-version-2.expressnetw.com
norway-ca-version-2.expressnetw.com
poland-ca-version-2.expressnetw.com
portugal-ca-version-2.expressnetw.com
romania-ca-version-2.expressnetw.com
serbia-ca-version-2.expressnetw.com
slovakia-ca-version-2.expressnetw.com
slovenia-ca-version-2.expressnetw.com
ukraine-ca-version-2.expressnetw.com
australia-brisbane-ca-version-2.expressnetw.com
australia-melbourne-ca-version-2.expressnetw.com
australia-perth-ca-version-2.expressnetw.com
australia-sydney-ca-version-2.expressnetw.com
australia-sydney-2-ca-version-2.expressnetw.com
australia-sydney-3-ca-version-2.expressnetw.com
hongkong-2-ca-version-2.expressnetw.com
hongkong4-ca-version-2.expressnetw.com
hongkong-1-ca-version-2.expressnetw.com
japan-tokyo-1-ca-version-2.expressnetw.com
japan-tokyo-2-ca-version-2.expressnetw.com
india-chennai-ca-version-2.expressnetw.com
india-mumbai-1-ca-version-2.expressnetw.com
singapore-cbd-ca-version-2.expressnetw.com
singapore-jurong-ca-version-2.expressnetw.com
southkorea-ca-version-2.expressnetw.com
southkorea2-ca-version-2.expressnetw.com
bangladesh-ca-version-2.expressnetw.com
bhutan-ca-version-2.expressnetw.com
brunei-ca-version-2.expressnetw.com
cambodia-ca-version-2.expressnetw.com
indonesia-ca-version-2.expressnetw.com
kazakhstan-ca-version-2.expressnetw.com
kyrgyzstan-ca-version-2.expressnetw.com
laos-ca-version-2.expressnetw.com
macau-ca-version-2.expressnetw.com
malaysia-ca-version-2.expressnetw.com
mongolia-ca-version-2.expressnetw.com
myanmar-ca-version-2.expressnetw.com
nepal-ca-version-2.expressnetw.com
newzealand-ca-version-2.expressnetw.com
pakistan-ca-version-2.expressnetw.com
ph-via-sing-ca-version-2.expressnetw.com
srilanka-ca-version-2.expressnetw.com
taiwan-3-ca-version-2.expressnetw.com
thailand-ca-version-2.expressnetw.com
vietnam-ca-version-2.expressnetw.com
algeria-ca-version-2.expressnetw.com
israel-ca-version-2.expressnetw.com
kenya-ca-version-2.expressnetw.com
southafrica-ca-version-2.expressnetw.com
Navigate to Services > VPN
Start OpenVPN Client
If you wish to disable your VPN connection simply set this to Disable at any time and click Apply Settings.
Server IP/Name
Copy and paste the server you would like to connect to from the server list above. Be sure there are no extra spaces or characters.
If you wish to change ExpressVPN connection locations, THE ONLY SETTING YOU NEED TO CHANGE IS THE EXPRESSVPN SERVER ADDRESS.*
Port
1195
Tunnel Device
TUN
Tunnel Protocol
UDP
Encryption cipher
AES-256-CBC
Hash Algorithm
SHA512
User Pass Authentication
Enable
Username
Enter the Username you found in the Manual Config section.
Password
Enter the Password you found in the Manual Config section.
Advanced Options
Enable
TLS Cipher
None
LZO Compression
Adaptive
NAT
Enable
Firewall Protection
Enable
nsCertType verification
Checked
TLS Auth Key
-----BEGIN OpenVPN Static key V1----- 48d9999bd71095b10649c7cb471c1051 b1afdece597cea06909b99303a18c674 01597b12c04a787e98cdb619ee960d90 a0165529dc650f3a5c6fbe77c91c137d cf55d863fcbe314df5f0b45dbe974d9b de33ef5b4803c3985531c6c23ca6906d 6cd028efc8585d1b9e71003566bd7891 b9cc9212bcba510109922eed87f5c8e6 6d8e59cbd82575261f02777372b2cd4c a5214c4a6513ff26dd568f574fd40d6c d450fc788160ff68434ce2bf6afb00e7 10a3198538f14c4d45d84ab42637872e 778a6b35a124e700920879f1d003ba93 dccdb953cdf32bea03f365760b0ed800 2098d4ce20d045b45a83a8432cc73767 7aed27125592a7148d25c87fdbe0a3f6 -----END OpenVPN Static key V1-----
Additional Config
persist-key
persist-tun
fragment 1300
mssfix 1450
keysize 256
Policy Based Routing
This field can be used for split VPN and Dual Gateway routing.
CA Cert
-----BEGIN CERTIFICATE----- MIIF+DCCA+CgAwIBAgIBATANBgkqhkiG9w0BAQ0FADCBhDELMAkGA1UEBhMCVkcx DDAKBgNVBAgMA0JWSTETMBEGA1UECgwKRXhwcmVzc1ZQTjETMBEGA1UECwwKRXhw cmVzc1ZQTjEWMBQGA1UEAwwNRXhwcmVzc1ZQTiBDQTElMCMGCSqGSIb3DQEJARYW c3VwcG9ydEBleHByZXNzdnBuLmNvbTAeFw0xNTEwMjEwMDAwMDBaFw0yNjA0MDEy MTEyMDBaMIGEMQswCQYDVQQGEwJWRzEMMAoGA1UECAwDQlZJMRMwEQYDVQQKDApF eHByZXNzVlBOMRMwEQYDVQQLDApFeHByZXNzVlBOMRYwFAYDVQQDDA1FeHByZXNz VlBOIENBMSUwIwYJKoZIhvcNAQkBFhZzdXBwb3J0QGV4cHJlc3N2cG4uY29tMIIC IjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxzXvHZ25OsESKRMQFINHJNqE 9kVRLWJS50oVB2jxobudPhCsWvJSApvar8CB2RrqkVMhXu2HT3FBtDL91INg070q AyjjRpzEbDPWqQ1+G0tk0sjiJt2mXPJK2IlNFnhe6rTs09Pkpcp8qRhfZay/dIlm agohQAr4JvYL1Ajg9A3sLb8JkY03H6GhOF8EKYTqhrEppCcg4sQKQhNSytRoQAm8 Ta+tnTYIedwWpqjUXP9YXFOvljPaixfYug24eAkpTjeuWTcELSyfnuiBeK+z9+5O YunhqFt2QZMq33kLFZGMN2gHRCzngxxphurypsPRo7jiFgQI1yLt8uZsEZ+otGEK 91jjKfOC+g9TBy2RUtxk1neWcQ6syXDuc3rBNrGA8iM0ZoEqQ1BC8xWr3NYlSjqN +1mgpTAX3/Dxze4GzHd7AmYaYJV8xnKBVNphlMlg1giCAu5QXjMxPbfCgZiEFq/u q0SOKQJeT3AI/uVPSvwCMWByjyMbDpKKAK8Hy3UT5m4bCNu8J7bxj+vdnq0A2HPw tF0FwBl/TIM3zNsyFrZZ0j6jLRT50mFsgDBKcD4L/J5rjdCsKPu5rodhxe38rCx2 GknP1Zkov4yoVCcR48+CQwg3oBkq0/EflvWUvcYApzs9SomUM/g+8Q/V0WOfJmFW uxN9YntZlnzHRSRjrvMCAwEAAaNzMHEwHQYDVR0OBBYEFIzmQGj8xS+0LLklwqHD 45VVOZRJMB8GA1UdIwQYMBaAFIzmQGj8xS+0LLklwqHD45VVOZRJMA8GA1UdEwEB /wQFMAMBAf8wCwYDVR0PBAQDAgEGMBEGCWCGSAGG+EIBAQQEAwIBFjANBgkqhkiG 9w0BAQ0FAAOCAgEAbHfuMKtojm1NgX7qSU2Rm2B5L8G0FuFP0L40dj8O5WHt45j2 z8coMK90vrUnQEZNQmRzot7v3XjVzVlxBWYSsCEApTsSDNi/4BNFP8H/BUUtJuy2 GFTO4wDVJnqNkZOHBmyVD75s1Y+W8a+zB4jkMeDEhOHZdwQ0l1fJDDgXal5f1UT5 F5WH6/RwHmWTwX4GxuCiIVtx70CjkXqhM8yZtTp1UtHLRNYcNSIes0vrAPHPgoA5 z9B8UvsOjuP+mfcjzi0LGGrY+2pJu0BKO2dRnarIZZABETIisI3FokoTszx5jpRP yxyUTuRDKWHrvi0PPtOmC8nFahfugWFUi6uBsqCaSeuex+ahnTPCq0b1l0Ozpg0Y eE8CW1TL9Y92b01up2c+PP6wZOIm3JyTH+L5smDFbh80V42dKyGNdPXMg5IcJhj3 YfAy4k8h/qbWY57KFcIzKx40bFsoI7PeydbGtT/dIoFLSZRLW5bleXNgG9mXZp27 0UeEC6CpATCS6uVl8LVT1I02uulHUpFaRmTEOrmMxsXGt6UAwYTY55K/B8uuID34 1xKbeC0kzhuN2gsL5UJaocBHyWK/AqwbeBttdhOCLwoaj7+nSViPxICObKrg3qav GNCvtwy/fEegK9X/wlp2e2CFlIhFbadeXOBr9Fn8ypYPP17mTqe98OJYM04= -----END CERTIFICATE-----
Public Client Cert
-----BEGIN CERTIFICATE----- MIIDTjCCAregAwIBAgIDKzZvMA0GCSqGSIb3DQEBCwUAMIGFMQswCQYDVQQGEwJV UzELMAkGA1UECBMCQ0ExFTATBgNVBAcTDFNhbkZyYW5jaXNjbzEVMBMGA1UEChMM Rm9ydC1GdW5zdG9uMRgwFgYDVQQDEw9Gb3J0LUZ1bnN0b24gQ0ExITAfBgkqhkiG 9w0BCQEWEm1lQG15aG9zdC5teWRvbWFpbjAgFw0xNjExMDMwMzA2MThaGA8yMDY2 MTEwMzAzMDYxOFowgYoxCzAJBgNVBAYTAlZHMQwwCgYDVQQIDANCVkkxEzARBgNV BAoMCkV4cHJlc3NWUE4xEzARBgNVBAsMCkV4cHJlc3NWUE4xHDAaBgNVBAMME2V4 cHJlc3N2cG5fY3VzdG9tZXIxJTAjBgkqhkiG9w0BCQEWFnN1cHBvcnRAZXhwcmVz c3Zwbi5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrOYt/KOi2 uMDGev3pXg8j1SO4J/4EVWDF7vJcKr2jrZlqD/zuAFx2W1YWvwumPO6PKH4PU962 1aNdiumaUkv/RplCfznnnxqobhJuTE2oA+rS1bOq+9OhHwF9jgNXNVk+XX4d0toS T5uGE6Z3OdmPBur8o5AlCf78PDSAwpFOw5HrgLqOEU4hTweC1/czX2VsvsHv22HR I6JMZgP8gGQii/p9iukqfaJvGdPciL5p1QRBUQIi8P8pNvEp1pVIpxYj7/LOUqb2 DxFvgmp2v1IQ0Yu88SWsFk84+xAYHzfkLyS31Sqj5uLRBnJqx3fIlOihQ50GI72f wPMwo+OippvVAgMBAAGjPzA9MAwGA1UdEwEB/wQCMAAwDgYDVR0PAQH/BAQDAgSw MB0GA1UdDgQWBBSkBM1TCX9kBgFsv2RmOzudMXa9njANBgkqhkiG9w0BAQsFAAOB gQA+2e4b+33zFmA+1ZQ46kWkfiB+fEeDyMwMLeYYyDS2d8mZhNZKdOw7dy4Ifz9V qzp4aKuQ6j61c6k1UaQQL0tskqWVzslSFvs9NZyUAJLLdGUc5TT2MiLwiXQwd4Uv H6bGeePdhvB4+ZbW7VMD7TE8hZhjhAL4F6yAP1EQvg3LDA== -----END CERTIFICATE-----
Private Client Key
-----BEGIN RSA PRIVATE KEY----- MIIEpAIBAAKCAQEAqzmLfyjotrjAxnr96V4PI9UjuCf+BFVgxe7yXCq9o62Zag/8 7gBcdltWFr8Lpjzujyh+D1PettWjXYrpmlJL/0aZQn85558aqG4SbkxNqAPq0tWz qvvToR8BfY4DVzVZPl1+HdLaEk+bhhOmdznZjwbq/KOQJQn+/Dw0gMKRTsOR64C6 jhFOIU8Hgtf3M19lbL7B79th0SOiTGYD/IBkIov6fYrpKn2ibxnT3Ii+adUEQVEC IvD/KTbxKdaVSKcWI+/yzlKm9g8Rb4Jqdr9SENGLvPElrBZPOPsQGB835C8kt9Uq o+bi0QZyasd3yJTooUOdBiO9n8DzMKPjoqab1QIDAQABAoIBAHgsekC0SKi+AOcN OZqJ3pxqophE0V7fQX2KWGXhxZnUZMFxGTc936deMYzjZ1y0lUa6x8cgOUcfqHol 3hDmw9oWBckLHGv5Wi9umdb6DOLoZO62+FQATSdfaJ9jheq2Ub2YxsRN0apaXzB6 KDKz0oM0+sZ4Udn9Kw6DfuIELRIWwEx4w0v3gKW7YLC4Jkc4AwLkPK03xEA/qImf kCmaMPLhrgVQt+IFfP8bXzL7CCC04rNU/IS8pyjex+iUolnQZlbXntF7Bm4V2mz0 827ZVqrgAb/hEQRlsTW3rRkVh+rrdoUE7BCZRTFmRCbLoShjN6XuSf4sAus8ch4U EN12gN0CgYEA4o/tSvij1iPaXLmt4KOEuxqmSGB8MLKhFde8lBbNdrDgxiIH9bH7 khKx15XRTX0qLDbs8b2/UJygZG0Aa1kIBqZTXTgeMAuxPRTesALJPdqQ/ROnbJcd FkI7gllrAG8VB0fH4wTRsRd0vWEB6YlCdE107u6LEsLAHxOj9Q5819cCgYEAwXjx 9RkQ2qITBx5Ewib8YsltA0n3cmRomPicLlsnKV5DfvyCLpFIsZ1h3f9dUpfxRLwz p8wcoLiq9cCoOGdu1udw/yBTqmhaXWhUK/g77f9Ze2ZB1OEhuyKLYJ1vW/h/Z/a1 aPCMxZqsDTPCePsuO8Cez5gqs8LjM3W7EyzRxDMCgYEAvhHrDFt975fSiLoJgo0M PIAGAnBXn+8sLwv3m/FpW+rWF8LTFK/Fku12H5wDpNOdvswxijkauIE+GiJMGMLv dcyx4WHECaC1h73reJRNykOEIZ0Md5BrCZJ1JEzp9Mo8RQhWTEFtvfkkqgApP4g0 pSeaMx0StaGG1kt+4IbP+68CgYBrZdQKlquAck/Vt7u7eyDHRcE5/ilaWtqlb/xi zz7h++3D5C/v4b5UumTFcyg+3RGVclPKZcfOgDSGzzeSd/hTW46iUTOgeOUQzQVM kzPRXdoyYgVRQtgSpY5xR3O1vjAbahwx8LZ0SvQPMBhYSDbV/Isr+fBacWjl/Aip EEwxeQKBgQDdrAEnVlOFoCLw4sUjsPoxkLjhTAgI7CYk5NNxX67Rnj0tp+Y49+sG Uhl5sCGfMKkLShiON5P2oxZa+B0aPtQjsdnsFPa1uaZkK4c++SS6AetzYRpVDLmL p7/1CulE0z3O0sBekpwiuaqLJ9ZccC81g4+2j8j6c50rIAct3hxIxw== -----END RSA PRIVATE KEY-----
CLICK APPLY SETTINGS
Leave all settings not mentioned above as their default setting.
Navigate to Status > OpenVPN.
In some cases you may notice that the location is not showing the same location as the server you have input in your router settings; this is because geo tracking tools are often tricked by VPN connections. As long as you see an IP address that is not the same as your normal Internet IP address then you are indeed connected to ExpressVPN.
Navigate to Administration > Backup
Once you have OpenVPN connected on your Merlin FlashRouter you can enable the VPN Killswitch so that no internet traffic passes through your router that is not encrypted by the VPN tunnel.
Login to Asus Merlin firmware settings in a browser on any computer or smart device.
1. Under Advanced Settings select VPN.
2. Click the VPN Client tab.
3. Set Killswitch – Block routed clients if tunnel goes down to Yes.
4. Click Apply.
Once you have OpenVPN connected on your Merlin FlashRouter you can manage your VPN connections by device or by VPN servers or even VPN providers. This is a major advantage of Asus Merlin firmware as it allows up to 5 VPN connections at the same.
Login to Asus Merlin firmware settings in a browser on any computer or smart device.
1. Under Advanced Settings select VPN.
2. Click the VPN Client tab.
3. In the Select Client instance dropdown select a new client instance to setup and follow your VPN providers setup guide.
4. Name the client in the Description field for more clarity for which server or provider is being setup.
5. Set the Redirect Internet traffic through tunnel dropdown to VPN Director.
1. Under Advanced Settings select VPN.
2. Click the VPN Director tab.
3. With multiple VPN clients connected you can start and stop them as needed from this page.
1. On the VPN Director page click the + symbol next to Add new rule.
2. Select the Interface that you want to add the device to.
3. Click the Local IP dropdown and a full list of devices connected to the Merlin FlashRouter should appear. Select the device you want to assign to this VPN client.
4. Click OK and click Apply.
Your Privacy Hero router uses Cloud Based router management which means you can access the router settings from anywhere on any device that has an internet connection. You can follow these steps while connected to your phone, other Wi-Fi network, or the Privacy Hero network.
Use these steps change your location for popular streaming services allowing you to access to regionally restricted content. Privacy Hero uses DNS routing to change your location which is a great way around VPN streaming blocks.
1. From any device that has a browser such as a computer, smartphone, or tablet visit app.privacyhero.com
2. Enter your Privacy Hero account email and password. Click Login.
3. Click the Streaming symbol.
4. Set the Streaming Relocation toggle to On.
5. Click the flag of the country you would like the listed streaming service to use.
This streaming relocation feature will not change your IP address in the way that a VPN does. This is why it is not able to be blocked in the same way that a VPN connection can be.
The listed services on the streaming relocation page will not be connected to VPN even if the Privacy Hero has an active VPN connection. These services are set to bypass the router’s VPN tunnel to avoid streaming blocks.
Toggling the streaming relocation feature On will also relocate many other streaming services automatically. They will be automatically optimized for the best connection with no manual selection needed for:
ABC
Adult Swim
All 4
Apple TV Channels
BBC
Britbox
CBC Gem
CBS Sports
Crackle
DirecTV Stream
DSTV Now
Filmrise
Freeform
Freevee
Frndly TV
F1 TV
FX Now
ITV
MGM+
Molotov.TV
My 5
NBC
NBC Sports
Now E
Now TV
Pandora
Paramount+
PBS
Peacock
Philo
Pluto TV
Showmax
Sling
SonyLIV
S Sports Plus
Starz
Stirr
TBS
Tennis Channel
The CW
Tubi
TVPlayer
Vudu
Xumo
Zattoo
If you are not already an NordVPN user Sign Up Now.
Log in to your account on the NordVPN website.
For a NordVPN server recommendation visit their Recommend Server page.
Once you have selected the server you want to connect to, download the UDP .ovpn file containing the Server IP Address, TLS Auth Key, and CA Cert referenced below.
Open the .ovpn file that is downloaded to your computer with NotePad++ for Windows or TextEdit for Apple. You will only need the Server IP Address, TLS Auth Key, and CA Cert from this file. All NordVPN servers and .ovpn files have different IP Addresses, keys, and certificates.
Navigate to Services > VPN
Start OpenVPN Client
If you wish to disable your VPN connection simply set this to Disable at any time and click Apply Settings.
Server IP/Name
At the top of the .ovpn file you downloaded above, there is a line e.g.:
remote 206.226.72.27 1194
206.226.72.27 is your NordVPN server IP address. Enter the IP Address in this field.
Port
1194
Tunnel Device
TUN
Tunnel Protocol
UDP
Encryption cipher
AES-256-CBC
Hash Algorithm
SHA512
Userpass Authentication
Enable
Username
Enter the Username you successfully logged in to your NordVPN account with.
Password
Enter the Password you successfully logged in to your NordVPN account with.
Advanced Options
Enable
TLS Cipher
None
LZO Compression
Adaptive
NAT
Enable
Firewall Protection
Enable
TLS Auth Key
In the .ovpn file copy and paste all contents in between the <tls-auth> and </tls-auth> lines from your .ovpn file starting and ending with:
—–BEGIN OpenVPN Static key V1—–
…
—–END OpenVPN Static key V1—–
Additional Config
tun-mtu-extra 32
mssfix 1450
persist-key
persist-tun
Policy Based Routing
This field can be used for split VPN and Dual Gateway routing.
CA Cert
In the .ovpn file Copy and Paste all contents in between the <ca> and </ca> lines from your .ovpn file starting and ending with:
—–BEGIN CERTIFICATE—–
…
—–END CERTIFICATE—–
CLICK APPLY SETTINGS
Leave all settings not mentioned above as their default setting.
Navigate to Status > OpenVPN
In some cases you may notice that the location is not showing the same location as the server you have input in your router settings; this is because geo tracking tools are often tricked by VPN connections. As long as you see an IP address that is not the same as your normal Internet IP address then you are indeed connected to NordVPN.
Navigate to Administration > Backup
It can be very useful to setup static local IP addresses for devices on your FlashRouter network. By assigning specific IP’s to specific devices you can better control and manage how your network and the internet interacts with each device.
Once you setup a static IP you can set access restrictions, monitor and control bandwidth, as well as bypass a router VPN connection or setup a device specific Kill Switch. Without a static IP assignment you may lose device specific settings when the DHCP lease to the router expires.
Navigate to Services > Services
If a device has wireless and ethernet capabilities the MAC Addresses will be different for a wireless connection and an ethernet connection. Make sure to set a static IP for both MAC Addresses in this case.
Your Privacy Hero router uses Cloud Based router management which means you can access the router settings from anywhere on any device that has an internet connection. You can follow these steps while connected to your phone, other Wi-Fi network, or the Privacy Hero network.
Use these steps to connect to Privacy Hero’s own WireGuard VPN servers. You will automatically be connected to the ideal USA or Canada server based on your location.
1. From any device that has a browser such as a computer, smartphone, or tablet visit app.privacyhero.com
2. Enter your Privacy Hero account email and password. Click Login.
If you have not created your Privacy Hero account yet please follow these instructions.
3. Click the VPN symbol.
4. Set the VPN toggle to On.
5. Connect to the Privacy Hero’s via wireless or ethernet connection on your device and visit What is my IP Address from a private/incognito browser to verify your new IP address and virtual location.
Privacy Hero’s cloud based router settings access makes it so you can change settings while not connected to the Privacy Hero network so if your IP Address has not changed be sure to double check that you are indeed connected to the Privacy Hero network on the device you are checking your IP from.
Keep in mind that the VPN connection will not change the location of the streaming services listed in the Streaming Relocation area of the Privacy Hero settings.
If you are not already an NordVPN user Sign Up Now.
1. Log in to your account on the NordVPN website.
2. Click NordVPN on the left hand side and then click Setup NordVPN manually.
3. Enter in the verification code that was sent to your email.
4. Copy and paste your NordVPN manual username and password to a secure location. This is the username and password you will enter into the router settings to connect to NordVPN.
1. There are two options for obtaining the .ovpn file. The first and recommended is to navigate to NordVPN’s server recommendation page. Click Recommended Server to display the fastest server based on your actual location. You can adjust the country if you don’t want to connect to the recommended country.
Then click Show Available Protocols. Click Download Config next to OpenVPN UDP. This will download the .ovpn file to your computer for this server. Do not open this file.
The second method to obtain a server is for connecting to a specific server number that you know you want to use. This applies to NordVPN Dedicated IP servers if you are signed up for that service. Go to NordVPN’s .ovpn file page. Then search for the server number that you want to use and click Download UDP.
Login to TP-Link firmware settings in a browser on any computer or smart device connected to the FlashRouter’s network.
1. Navigate to the Advanced tab.
2. Navigate to the VPN Client tab.
3. Check the Enable box next to VPN Client. Then click Save at the bottom of the page.
4. Click the Add button in the Server List area.
5. In the Description field enter in the name you’d like to use for this OpenVPN Client profile. We typically advise entering in the location or server number here. Our example server was us6821 so I have entered in NordVPN us6821.
Set the VPN Type to OpenVPN.
In the Username and Password fields paste in the NordVPN username and password we obtained earlier.
Click Browse and select the .ovpn file you downloaded earlier. Then click Save.
By default no devices will be assigned to the VPN Tunnel. With TP-Link firmware you must manually assign the devices that you want connected to the VPN tunnel. Proceed with the next steps to do so for all devices you want connected to VPN.
6. Click the Add button in the Device List area.
7. A list of devices connected to the FlashRouter’s network will appear. Check the devices that you want to connect to VPN. Then click OK.
8. Now that the devices have been assigned to the VPN connection click the Enable toggle in the Server List area.
In some cases you may notice that the location is not showing the same location as the server you have input in your router settings; this is because geo tracking tools are often tricked by VPN connections. As long as you see an IP address that is not the same as your normal Internet IP address then you are indeed connected to NordVPN.
If you are not already an PureVPN user Sign Up Now.
1. Log in to your account on the PureVPN website.
2. Select Manual Configuration.
3. Select the Server Location you want to connect to and then click Download.
4. In the Select Protocol dropdown choose WireGuard.
5. In the Select Device dropdown choose DD-WRT. Then click Generate Configuration. This will save a .conf file to your computer.
Login to Asus Merlin firmware settings in a browser on any computer or smart device connected to the Merlin FlashRouter’s network.
1. Navigate to the VPN tab.
2. Navigate to the VPN Client tab.
3. Select WireGuard as the VPN Protocol.
4. Click Choose file and select the .conf file you downloaded earlier. Then click Upload.
5. In the Description field enter in the name you’d like to use for this WireGuard Client profile. We typically advise entering in the location here.
6. Set Enable WireGuard to Yes.
7. Click Apply at the bottom of the page and you should then see a Connected message appear.
8. By default no devices are assigned to the new active WireGuard connection profile. Click the VPN Director tab to assign specific devices to the new WireGuard profile. Your IP will not be changed on your devices yet.
9. On the VPN Director page click the + symbol next to Add new rule.
10. Select the new WireGuard profile in the Interface dropdown.
11. In the Local IP field enter in 192.168.50.0/24 if you want ALL devices connected to the FlashRouter’s network to use the WireGuard VPN connection. Click OK.
If you only want certain devices to connect to the WireGuard Client profile you have setting up instead of all the devices connected to the FlashRouter’s network please complete the instructions on our VPN Director guide.
12. Then click Apply at the bottom of the page.
Visit PureVPN’s IP Check to verify your new IP address and virtual location.
In some cases you may notice that the location is not showing the same location as the server you have input in your router settings; this is because geo tracking tools are often tricked by VPN connections. As long as you see an IP address that is not the same as your normal Internet IP address then you are indeed connected to PureVPN.
Static network settings set on a device from a previous connection will interfere with the FlashRouter’s network. Typically the FlashRouter’s network performs best when connected devices are set to automatically use the FlashRouter’s IP Address and DNS.
Make sure you are connected to the FlashRouter’s network via ethernet or WiFi. Keep in mind these instructions may vary based on your current software version.
1. Open the Window search box, and search “Network Status”
2. Select “Change adapter optons”
3. Right click on the WiFi and/or ethernet adapter and select Properties.
4. Highlight Internet Protocol Version 4 (TCP/IPv4) and click Properties.
5. Delete the values entered for IP address, Subnet mask, Default gateway, Preferred DNS server, and Alternate DNS server.
6. Select Obtain an IP address automatically and Obtain DNS server address automatically.
7. Click OK.
1. Open System Preferences, and select Network.
2. Select the adapter that is connected via ethernet or wireless. This will vary based on your current connection.
3. Select Advanced.
4. Select the TCP/IP tab.
5. Set Configure IPv4 to Automatically.
6. Select the DNS field and highlight any DNS servers you see there. If they can be removed you should click the minus symbol below.
7. Click OK.
8. Click Apply.
1. Open Settings 
2. Select WiFi, and select the blue icon next to your current connection.
3. Make sure Configure IP is set to Automatically.
1. From the top of the screen, swipe down to display settings.
2. Select WiFi.
3. Select your current network.
4. Select Advanced.
5. Make sure that IP settings is set to DHCP.
If you are not already a PIA user Sign Up Now.
1. Log in to your account on the PIA website.
2. Successfully log in with your account information then go to PIA’s OpenVPN Config Generator.
3. On the OpenVPN Configuration Generator select the following:
OpenVPN Version: OpenVPN 2.4 or newer
Select Platform: Linux
Select Region: Choose the server location you’d like to connect to
Select Port: Typically we recommend UDP/1198 RSA-2048 AES-128-CBC SHA1 for best speeds but feel free to select the one you want to use.
4. Click Generate to download the .ovpn file. Do not open this file once it is downloaded.
Login to TP-Link firmware settings in a browser on any computer or smart device connected to the FlashRouter’s network.
1. Navigate to the Advanced tab.
2. Navigate to the VPN Client tab.
3. Check the Enable box next to VPN Client. Then click Save at the bottom of the page.
4. Click the Add button in the Server List area.
5. In the Description field enter in the name you’d like to use for this OpenVPN Client profile. We typically advise entering in the location. Our example server was New York so I have entered in PIA New York.
Set the VPN Type to OpenVPN.
In the Username and Password fields paste in the PIA username and password you use to successfully login to your PIA website account.
Click Browse and select the .ovpn file you downloaded earlier. Then click Save.
By default no devices will be assigned to the VPN Tunnel. With TP-Link firmware you must manually assign the devices that you want connected to the VPN tunnel. Proceed with the next steps to do so for all devices you want connected to VPN.
6. Click the Add button in the Device List area.
7. A list of devices connected to the FlashRouter’s network will appear. Check the devices that you want to connect to VPN. Then click OK.
8. Now that the devices have been assigned to the VPN connection click the Enable toggle in the Server List area.
In some cases you may notice that the location is not showing the same location as the server you have input in your router settings; this is because geo tracking tools are often tricked by VPN connections. As long as you see an IP address that is not the same as your normal Internet IP address then you are indeed connected to PIA.
If you are not already a CyberGhost user Sign Up Now.
1. Log in to your account on the CyberGhost website.
2. Select My Devices.
3. Select Other and then Configure New Device.
4. Set Protocol to OpenVPN. Select the Country you would like to connect to. Select the Server Group. Name the device in the Device Name field. Click Save Configuration.
5. Press View configuration.
6. Copy the Username, and Password that appear to a notepad, since you will need this information later in the setup process. Click Download Configuration.
Open the file that was downloaded with NotePad++ for Windows or TextEdit for Apple. You only need the ca.crt, client.crt, and client.key files. All CyberGhost servers have different keys and certificates.
Navigate to Services > VPN
Start OpenVPN Client
If you wish to disable your VPN connection simply set this to Disable at any time and click Apply Settings.
Server IP/Name
Copy and paste the server you selected in your account. Be sure there are no extra spaces or characters.
Port
443
Tunnel Device
TUN
Tunnel Protocol
UDP
Encryption cipher
AES-256-CBC
Hash Algorithm
SHA256
User Pass Authentication
Enable
Username
Enter the Username you obtained in your CyberGhost account.
Password
Enter the Password you obtained in your CyberGhost account.
Advanced Options
Enable
TLS Cipher
None
LZO Compression
Adaptive
NAT
Enable
Firewall Protection
Enable
Additional Config
tun-mtu 1500
fragment 1300
mssfix 1300
Policy Based Routing
This field can be used for split VPN and Dual Gateway routing.
CA Cert
—–BEGIN CERTIFICATE—–
MIIGWjCCBEKgAwIBAgIJAJxUG61mxDS7MA0GCSqGSIb3DQEBDQUAMHsxCzAJBgNV
BAYTAlJPMRIwEAYDVQQHEwlCdWNoYXJlc3QxGDAWBgNVBAoTD0N5YmVyR2hvc3Qg
Uy5BLjEbMBkGA1UEAxMSQ3liZXJHaG9zdCBSb290IENBMSEwHwYJKoZIhvcNAQkB
FhJpbmZvQGN5YmVyZ2hvc3Qucm8wHhcNMTcwNjE5MDgxNzI1WhcNMzcwNjE0MDgx
NzI1WjB7MQswCQYDVQQGEwJSTzESMBAGA1UEBxMJQnVjaGFyZXN0MRgwFgYDVQQK
Ew9DeWJlckdob3N0IFMuQS4xGzAZBgNVBAMTEkN5YmVyR2hvc3QgUm9vdCBDQTEh
MB8GCSqGSIb3DQEJARYSaW5mb0BjeWJlcmdob3N0LnJvMIICIjANBgkqhkiG9w0B
AQEFAAOCAg8AMIICCgKCAgEA7O8+mji2FlQhJXn/G4VLrKPjGtxgQBAdjo0dZEQz
KX08q14dLkslmOLgShStWKrOiLXGAvB1rPvvk613jtA0KjQLpgyLy9lIWohQKYjj
5jrJYXMZMkbSHBYI9L8L7iezBEFYrjYKdDo51nq99wRFhKdbyKKjDh3e2L2SVEZL
T1ogkK5gWzjvH+mjjtjUUicK+YjGwWOz6I+KKaG4Ve/D/cE6nCLbhHIMMnargZEu
7sqA6BFeS4kEP/ZdCZoTSX2n43XV1q63nJt/v0KDetbZDciFVW9h9SVPG4qT44p0
550N+Mom7zTX7S/ID5T9dplgU8sRGtIMrG0cIMD9zmpFgUnMusCrR7jJFr0sMAve
TbgZg95LmstV6R6WKZkSFdUrE0DHl4dHoZvTFX+1LhwhHgjgDLaosX0vhG/C/7Lp
oVWimd6RRQT3M9o4Fa1TuhfvBzQ20QHrmRV/yKvGNK0xckZ6EZ/QY7Z55ORU15Tg
ab4ebnblYPWoEmn0mIYP3LFFeoR5OS1EX7+j4kPv+bwPGsmpHjxmZyq2Y7sJBpbO
CJgbkn52WZdPBIRDpPdIHQ8pAJC4T0iMK9xvAwWNl/V6EYYNpR97osyEDXn+BTdA
HlhJ5fck9KlwI9mb1Kg1bhbvbmaIAiOLenSULYf3j6rI1ygo3R2cCyybtuAq8M7z
0OECAwEAAaOB4DCB3TAdBgNVHQ4EFgQU6tdK1g/He5qzjeAoM5eHt4in9iUwga0G
A1UdIwSBpTCBooAU6tdK1g/He5qzjeAoM5eHt4in9iWhf6R9MHsxCzAJBgNVBAYT
AlJPMRIwEAYDVQQHEwlCdWNoYXJlc3QxGDAWBgNVBAoTD0N5YmVyR2hvc3QgUy5B
LjEbMBkGA1UEAxMSQ3liZXJHaG9zdCBSb290IENBMSEwHwYJKoZIhvcNAQkBFhJp
bmZvQGN5YmVyZ2hvc3Qucm+CCQCcVButZsQ0uzAMBgNVHRMEBTADAQH/MA0GCSqG
SIb3DQEBDQUAA4ICAQDNyQ92kj4qiNjnHk99qvnFw9qGfwB9ofaPL74zh0G5hEe3
Wgb2o4fqUGnvUNgOu53gJksz3DcPQ8t40wfmm9I1Z8tiM9qrqvkuQ+nKcLgdooXt
EsTybPIYDZ2cWR/5E0TKRvC7RFzKgQ4D77Vbi4TdaHiDV7ZNfU1iLCoBGcYm80hc
UHEs5KIVLwUmcSOTmbZBySJxcSD0yUpS7nlZGwLY6VQrU+JFwDSisbXT4DXf3iSz
p7FzW0/u/SFvWsPHrjE0hkPoZPalYvouaJEHKAhip0ZwSmitlxbBnmm8+K/3c9mL
A5/uXrirfpuhhs8V3lyV2mczVtSiTl6gpi88gc//JY80JeHdupjO25T3XEzY9cpx
ecmkWaUEjLMx4wVoXQuUiPonfILM6OLwi+zUS8gQErdFeGvcQXbncPa4SdJuHkF8
lgiX2i8S8fPGdXvU37E9bdAXwP5nZriYq1s0D59Qfvz+vLXVkmyZp6ztxjKjKole
mPMak0Y5c1Q4RjNF6tmQoFuy/ACSkWy14Tzu2dFp7UiVbGg1FOvKhfs48zC2/IUQ
v1arqmPT/9LVq3B2DVT9UKXRUXX/f/jSSsVjkz4uUe2jUyL+XHX1nSmROTPHSAJ+
oKf0BLnfqUxFkEUTwLnayssP2nwGgq35b7wEbTFIXdrjHGFUVQIDeERz8UThew==
—–END CERTIFICATE—–
Public Client Cert
Copy and paste all contents of the client.crt file starting and ending with:
—–BEGIN CERTIFICATE—–
…
—–END CERTIFICATE—–
Private Client Key
Copy and paste all contents of the client.key file starting and ending with:
—–BEGIN PRIVATE KEY—–
…
—–END PRIVATE KEY—–
CLICK APPLY SETTINGS
Leave all settings not mentioned above as their default setting.
Navigate to Status > OpenVPN
In some cases you may notice that the location is not showing the same location as the server you have input in your router settings; this is because geo tracking tools are often tricked by VPN connections. As long as you see an IP address that is not the same as your normal Internet IP address then you are indeed connected to CyberGhost.
Navigate to Administration > Backup
Bypassing the ExpressVPN tunnel on certain devices allows you to have multiple IP Addresses while connected to the same router. This feature is very helpful with certain websites where VPN is blocked such as streaming services and banking information.
1. Connect to the FlashRouter’s network via ethernet cable or wireless.
2. Open your web browser and enter expressvpnrouter.com or 192.168.132.1 in the URL.
3. Login with your ExpressVPN FlashRouter admin password.
4. Select VPN Off on the right hand side of the menu.
5. Click and drag the device that you want to bypass the VPN tunnel to the No VPN area.
The devices assigned to No VPN will now correct directly to your ISP internet while the devices in the VPN group will remain connected to the VPN server.
