Listed below are important links to setup instructions for connecting an Asus Merlin firmware router to the internet and WiFi.
Search Results for: rate hero 2 router
Access FlashRouter DD-WRT firmware settings
You must be connected to the FlashRouter network via ethernet or WiFi connection on your device in order to be able to access the FlashRouter’s firmware settings.
Why do I need to access my FlashRouter's settings?
It is important to understand how to access your router if you want to:
- Change WiFi or admin passwords
- Switch VPN server locations
- Attempt custom setups
- Troubleshoot your network
Connect your device to the FlashRouter network
We recommend using a computer, tablet, or phone to access your FlashRouter firmware settings. You can connect your device to the FlashRouter via Ethernet Cable or Wireless connection.
Please note, you will NOT be able access the firmware settings unless you connect your device to the FlashRouter Network.
via Ethernet
Connect an Ethernet cable to your device’s Ethernet port.
Connect the other end of that Ethernet cable to a FlashRouter LAN/numbered port.
Be sure NOT to connect your device to the WAN/internet port of the FlashRouter. Please use the LAN/numbered ports to connect your devices.
via Wireless
Navigate to the available wireless networks in your device network settings and join any of the available FlashRouter networks – FlashRouter24, FlashRouter50, or FlashRouter80 (if you have a tri-band router).
Access the FlashRouter settings
We recommend using a Google Chrome or Mozilla Firefox incognito/private browsing window to access the FlashRouter firmware settings. You can access the main DD-WRT firmware GUI or you can go directly into the FlashRouters Privacy App settings to manage your basic router settings and VPN connection settings right away.
Please note, after accessing the FlashRouter Settings at the Local IP Address, you will be prompted to enter an admin username and password. You can find this information in the subsections below.
DD-WRT - Firmware GUI
Local IP Address: 192.168.11.1
Username: flashrouter
Password: ddwrt
Keep in mind that if you enable HTTPS and disable HTTP access you will need to add https:// in front of the Local IP Address to access your FlashRouter’s firmware settings.
If your router has been reset for any reason then you can access the router at a local IP address of 192.168.1.1.
Please note you will be required to set the administration username and password as well as your WiFi and VPN network settings after a reset.
Wireless Repeater Bridge Setup
If you need to extend your connection capabilities and you are not able to wire directly into your main router, you can setup a FlashRouter as a Wireless Repeater Bridge. In Wireless Repeater Bridge mode the FlashRouter connects to your main router on the same subnet via WiFi, and then transmits your internet signal via the FlashRouter for internet access anywhere in your home or office.
Preparing for Wireless Repeater Bridge Setup
Verify your wireless information
In order to setup your FlashRouter as a Wireless Repeater Bridge, you will need the exact SSID and password of your existing wireless network. Make sure you have this information before proceeding.
We recommend using a 2.4GHz network to repeat as this network will have more range. Be sure to click Add under the 2.4GHz settings and not the 5GHz settings.
Locate the Local IP Address of the existing wireless network
Locate the Local IP Address of the existing router that the FlashRouter will be bridged to.
DD-WRT Router Setup for Wireless Repeater Bridge
Disable Firewall
Navigate to Security > Firewall
- Set SPI Firewall to Disable.
- Uncheck all boxes except for Filter Multicast.
- Click Save.
Disable DNSmasq
Navigate to Services > Services
- Set DNSmasq to Disable.
- Click Save.
Enter Wireless settings
Navigate to Wireless > Basic Settings
Select Add in the Virtual Interface area.
In the Wireless Physical Interface settings for the 2.4GHz network set the Wireless Mode to Repeater Bridge.
Change the Wireless Network Name (SSID) to match exactly with the Wireless Network Name of the network that you will bridge to.
In the Virtual Interfaces settings change the Wireless Network Name (SSID) to FlashRouter24 or any other unique SSID.
CLICK SAVE
Enter Wireless Security settings
Navigate to Wireless > Wireless Security
- Duplicate the wireless security settings that are set for the other bands for the newly created virtual interface.
- Change the WPA Shared Key to match exactly with the Wireless Password of the network that you will bridge to.
- Click Save.
Change the FlashRouter's Local IP Address
Navigate to Setup > Basic Setup
- Set the Local IP Address to a different address on the same subnet as the existing network that you noted early. (example: if the existing network is 192.168.1.1 then set the Local IP Address to 192.168.1.2)
- Set the Gateway to the Local IP Address of the existing network. (example: 192.168.1.1)
- Set the Local DNS to the Local IP Address of the existing network. (example: 192.168.1.1)
- Click Save.
Change the FlashRouter's Operating Mode
Navigate to Setup > Advanced Routing
- Set the Operating Mode to Router.
- Click Apply Settings.
Reboot your FlashRouter
Power off the FlashRouter for 30 seconds and then power it back on. When it boots back up you will be able to access the FlashRouter’s settings at the new Local IP Address that you set. Your existing network and the FlashRouter’s network will now be bridged wirelessly.
Back up your settings
Navigate to Administration > Backup
- Click the Backup button.
- A file named nvrambak.bin will be saved to your computer.
- You can load nvrambak.bin to restore your settings in the event of a reset.
How do I upgrade the Asus Merlin firmware of my FlashRouter?
Download the latest AsusWRT Merlin firmware build for your specific FlashRouter model at the Asus Merlin download website. Contact support@flashrouters.com if you are uncertain about your router model or your router model is not available. Click your router model and then select the Release folder.
Make sure you are following the directions below to load the firmware file into the router settings and not trying to open the firmware file on its own.
Access the FlashRouter via wired connection. It is possible to upgrade firmware via WiFi, but this is not recommended unless you are unable to wire directly to the router.
Navigate to Administration > Firmware Upgrade
Why is the internet LED red on my router?
Upon flashing the router from stock manufacturer firmware to DD-WRT firmware many buttons and lights on the router may have altered functionality. With DD-WRT firmware on certain devices a red internet/WAN light means a successful connection. While in factory firmware a red light denotes an issue with your internet connection. For anyone with DD-WRT firmware, this is not something you need to worry about as long as the internet functionality is in fact working.
ExpressVPN/Aircove FlashRouter Internet Setup and Activation
Follow this article when you receive your new ExpressVPN FlashRouter to connect your FlashRouter to the Internet via ExpressVPN and customize your network so it is ready to use.
Obtain your ExpressVPN Activation Code
If you are not already an ExpressVPN user Sign Up Now.
1. Visit ExpressVPN’s website login page.
2. Copy your ExpressVPN Activation code and paste it into a document or leave this page open while you proceed with the instructions.
Access Router Settings
1. Connect to the FlashRouter’s network via ethernet cable or wireless.
The wireless network will appear as “Aircove”, “Linksys##”, “Netgear##”, or “Asus” and the password to join the network will be the default wireless password printed on the bottom of the router.
2. Open your web browser and enter expressvpnrouter.com or 192.168.132.1 in the URL.
3. Click Get Started on the ExpressVPN page that is displayed.
4a. If your FlashRouter is wired to the Internet correctly then you will be prompted to enter your ExpressVPN Activation Code found in your ExpressVPN account. Paste that in and click Sign in to ExpressVPN.
4b. If your FlashRouter is not wired correctly or is not receiving Internet properly make sure you are wired as detailed in the diagram that appears. If you are stuck at this screen we recommend powering off your ISP modem and any other router that the ExpressVPN FlashRouter is wired to and then powering them back up one by one.
Proceed with step “4a” above once the router is receiving Internet and you are prompted to enter the Activation Code.
5. Select if you want to share anonymous crash report data with ExpressVPN to help them improve the firmware for future releases.
6. Set the WiFi name and password your wireless devices will use to connect to the FlashRouter’s network. Make sure the WiFi name is unique and not a duplicate of an existing WiFi name if you change it. You can also leave it as the default information if you like. Click Continue.
7. Enter the admin password you will use to access the ExpressVPN router settings. Be sure to TYPE CAREFULLY when setting the admin password as a typo will result in needing to reset the router again. Note this password in a secure location or commit it to memory.
8. Your ExpressVPN FlashRouter is now fully setup!
Why can’t I access router settings?
Be sure to first try the preset details to access your FlashRouter’s settings.
First time setup
Are you connected to the FlashRouter's network?
In order to access the FlashRouter’s settings you need to be connected to the FlashRouter’s network via ethernet or WiFi.
It is possible that if you are connected to the FlashRouter’s network you device might have static IP settings from a previous connection preventing it from being read correctly. Check your device’s static IP settings before proceeding.
Is your FlashRouter wired correctly?
Your FlashRouter should be wired as detailed in our Connect FlashRouter to the Internet setup.
A common mistake is to connect from your modem or other router to a LAN/numbered port of the FlashRouter instead of the WAN/Internet port of the FlashRouter as it should be. Doing so results in no access to the FlashRouter’s settings.
Lost access
How to find you FlashRouter's Local IP Address?
It is possible that your Local IP Address was changed at some point. Your Local IP Address is the address that you can access the FlashRouter’s settings with. We recommend finding the Local IP Address of the FlashRouter.
Was your FlashRouter reset?
If your FlashRouter is showing a local IP Address of 192.168.1.1 and you are seeing ‘dd-wrt’ as an available network in your wireless networks, your FlashRouter was reset. Reconfigure your FlashRouter.
Keep in mind that seeing a Local IP Address of 192.168.1.1 can also mean your are wired incorrectly and the router has not been reset. Be sure to check your wireless networks for ‘dd-wrt’. If the FlashRouter’s wireless network name appears as it was set then your FlashRouter was not reset and you should see the above section.
Tried updating firmware
Why can't I access my FlashRouter after a firmware upgrade?
When performing a firmware upgrade there is a dropdown that has Don’t Reset or Reset to Default settings as options.
If you accidentally selected Reset to Default settings you will need to reconfigure your FlashRouter.
If you had Don’t Reset selected and are still unable to connect to the FlashRouter’s network after a firmware upgrade, first make sure you are connected to the FlashRouter’s network as WiFi can disconnect during an upgrade, and then Reboot the FlashRouter.
Why is my router not connecting to internet?
Router not connecting to the internet? Follow these simple steps!
- Make sure that you are not setting a WAN IP of 0.0.0.0 in the top right corner of your FlashRouter DD-WRT settings. If you do, then make sure your FlashRouter is wired correctly for Internet.
- Try power cycling your ISP modem, FlashRouter and any other router that may be in the setup. Power the modem back on first, wait for it to boot up fully, and then power the FlashRouter back on.
- Make sure you do not have Global Kill Switch enabled in the FlashRouters Privacy App and if you do make sure your VPN status is Connected.
PPPoE Internet Setup
Most ISPs do not require PPPoE credentials. If you are certain this is an ISP requirement in your setup, we kindly ask that you get in touch with your ISP to verify that they do in fact require PPPoE authentication and to provide you with the correct credentials to enter into your FlashRouter.
Before you enter your PPPoE credentials, you should have already setup your FlashRouter in a Single Router Setup with correct wiring. Once you enter PPPoE credentials you should then be able to connect to the internet.
If you are using a Dual Router Setup there is no need to enter PPPoE credentials if they are already entered in the existing router. You can disregard this article.
Enter your PPPoE credentials
DD-WRT Firmware
Navigate to Setup > Basic Setup
- Set the Connection Type dropdown to PPPoE.
- Enter your ISP assigned PPPoE username and password.
- Click Apply Settings.
Power cycle your network devices
- Power off your ISP modem and the FlashRouter.
- Power on the ISP modem and wait for it to fully boot up.
- Power on the FlashRouter.
Verify a successful Internet connection
Once the FlashRouter is booted up connect one of your devices to the FlashRouter via Ethernet or Wireless.
Visit any website and make sure the page fully loads. Once you have verified a successful Internet connection, begin connecting your network devices to the FlashRouter via wired or WiFi.
Please be aware that our support is not able to replicate PPPoE issues on our end, which makes them challenging to troubleshoot. In the event of an issue we recommend using a Dual Router Setup.
My WiFi password is not working
Keep in mind that passwords are case sensitive.
The preset DD-WRT FlashRouter WiFi password is Wireless#[First 5 characters of your router MAC]. The router MAC can be found on the bottom of your router. For e.g. if your MAC is 1459C07E70A8 then your WiFi password is Wireless#1459C
Verify wireless password
Connect an ethernet cable from a numbered port on the FlashRouter to a computer and access the FlashRouter’s settings.
Navigate to Wireless > Wireless Security
Check the Unmask box and note the wireless password that is entered.
Verify the wireless settings
Make sure that you have WPA2 Personal / AES set as the security settings for all bands. For some router models make sure the CCMP-128 (AES) box is checked for all bands.
Forget network on your device
Wireless devices usually offer a “forget” network feature to remove a wireless network from the saved information of the wireless adapter. If you have updated your WiFi password and are trying to connect on a device that previously used the old WiFi password then removing the wireless network and then trying to connect fresh can help with this issue.
Wireless Client Bridge Setup
If you need to extend your wired connection capabilities and you are not able to wire directly into your main router, you can setup a FlashRouter as a Wireless Client Bridge. In Wireless Client Bridge mode the FlashRouter connects to your main router via WiFi, and then transmits your internet signal via the FlashRouter LAN ports for wired internet access anywhere in your home or office.
Preparing for Wireless Client Bridge Setup
Verify your wireless information
In order to setup your FlashRouter as a Wireless Client Bridge, you will need the exact SSID and password of your existing wireless network. Make sure you have this information before proceeding.
We recommend using a 2.4GHz network to repeat as this network will have more range.
Locate the Local IP Address of the existing wireless network
Locate the Local IP Address of the existing router that the FlashRouter will be bridged to.
DD-WRT Router Setup for Wireless Client Bridge
Disable Firewall
Navigate to Security > Firewall
- Set SPI Firewall to Disable.
- Uncheck all boxes except for Filter Multicast.
- Click Save.
Disable DNSmasq
Navigate to Services > Services
- Set DNSmasq to Disable.
- Click Save.
Enter Wireless settings
Navigate to Wireless > Basic Settings
- In the Wireless Physical Interface settings for the 2.4GHz network set the Wireless Mode to Client Bridge.
- Change the Wireless Network Name (SSID) to match exactly with the Wireless Network Name of the network that you will bridge to.
- Click Save.
Enter Wireless Security settings
Navigate to Wireless > Wireless Security
- Change the WPA Shared Key to match exactly with the Wireless Password of the network that you will bridge to.
- Click Save.
Change the FlashRouter's Local IP Address
Navigate to Setup > Basic Setup
- Set the Local IP Address to a different address on the same subnet as the existing network that you noted early. (example: if the existing network is 192.168.1.1 then set the Local IP Address to 192.168.1.2)
- Set the Gateway to the Local IP Address of the existing network. (example: 192.168.1.1)
- Set the Local DNS to the Local IP Address of the existing network. (example: 192.168.1.1)
- Click Apply Settings.
Reboot your FlashRouter
Power off the FlashRouter for 30 seconds and then power it back on. When it boots back up you will be able to access the FlashRouter’s settings at the new Local IP Address that you set. Your existing network and the FlashRouter’s network will now be bridged wirelessly.
Your FlashRouter is now providing wired connection access to your main router network. Wireless connections to the FlashRouter are disabled in this setup.
Back up your settings
Navigate to Administration > Backup
- Click the Backup button.
- A file named nvrambak.bin will be saved to your computer.
- You can load nvrambak.bin to restore your settings in the event of a reset.
Wireless Access Point Setup
A Wireless Access Point is a setup that has the FlashRouter using an existing network’s DHCP instead of assigning its own. The FlashRouter’s WAN/Internet port should be not be connected to your modem or other router while performing this setup.
Preparing for Wireless Access Point Setup
Locate the Local IP Address of the existing wireless network
Locate the Local IP Address of the existing router that the FlashRouter will be bridged to.
DD-WRT Router Setup for Wireless Access Point
Disable Firewall
Navigate to Security > Firewall
- Set SPI Firewall to Disable.
- Click Save.
Disable DNSmasq
Navigate to Services > Services
- Set DNSmasq to Disable.
- Click Save.
Change the FlashRouter's Local IP Address
Navigate to Setup > Basic Setup
- Set the Local IP Address to a different address on the same subnet as the existing network that you noted early. (example: if the existing network is 192.168.1.1 then set the Local IP Address to 192.168.1.2)
- Set the Gateway to the Local IP Address of the existing network. (example: 192.168.1.1)
- Set the Local DNS to the Local IP Address of the existing network. (example: 192.168.1.1)
- Click Save.
Change the FlashRouter's DHCP settings
- Set the DHCP Type to DHCP Forwarder.
- Click Save.
Change the FlashRouter's Operating Mode
Navigate to Setup > Advanced Routing
- Set the Operating Mode to Router.
- Click Apply Settings.
Reboot your FlashRouter
- Power off the FlashRouter for 30 seconds and connect from the other router’s LAN port to one of the FlashRouter’s LAN port then power it back on. When it boots back up you will be able to access the FlashRouter’s settings at the new Local IP Address that you set.
Back up your settings
Navigate to the Administration > Backup page.
- Click the Backup button.
- A file named nvrambak.bin will be saved to your computer.
- You can load nvrambak.bin to restore your settings in the event of a reset.
NordVPN Setup for GL.iNet Routers
You can connect to NordVPN on your GL.iNet router using NordLynx, OpenVPN, or a Dedicated IP.
Quick Options
-
NordLynx: Choose your preferred city or country from NordVPN’s server list
-
OpenVPN: Choose your preferred city or country from NordVPN’s server list.
-
Dedicated IP (optional): Enter your unique configuration file if you’ve been assigned a static NordVPN IP.
If you are not already a NordVPN user Sign Up Now.
1. Get your NordVPN Access Token for NordLynx connections. Log in to your NordVPN account and select NordVPN from your list of Services.
2. At the bottom of the page click Get Access token and you will receive a code via email. Enter this code to proceed.
3. After you enter the email code select Generate new token and set it to Doesn’t expire. Copy this token.
4. Login to GL.iNet firmware settings (usually 192.168.8.1) in a browser on any computer or smart device connected to the GL.iNet FlashRouter’s network.
View our guide for more instructions on how to access GL.iNet firmware settings.
5. Navigate to the VPN tab and select Wireguard Client then choose NordVPN. Enter your Token then click Save and Continue
6. Select your preferred server locations, and click Apply.
7. Start a connection by clicking the 3 dots (…) > Start next to your chosen server.
8. A green dot confirms success. You can also switch between Global Mode or Policy Mode for routing in the VPN Dashboard.
1. Get your NordVPN manual service credentials for OpenVPN connections. Log in to your NordVPN account and select NordVPN from your list of Services.
2. At the bottom of the page in the Manual Setup section click Setup NordVPN manually then under the Configuration section go to Service credentials. Click Verify email to receive a code via email and enter the code to view and copy your credentials.
3. Login to GL.iNet firmware settings (usually 192.168.8.1) in a browser on any computer or smart device connected to the GL.iNet FlashRouter’s network.
View our guide for more instructions on how to access GL.iNet firmware settings.
4. Navigate to the VPN tab and select OpenVPN Client.
5. Select the NordVPN group, enter your manual credentials, then click Save Credentials & Get Servers.
6. Choose UDP (recommended), select your preferred server locations, and click Apply.
7. Start a connection by clicking the 3 dots (…) > Start next to your chosen server.
8. A green dot confirms success. You can also switch between Global Mode or Policy Mode for routing in the VPN Dashboard.
1. Get your NordVPN manual service credentials for OpenVPN connections. Log in to your NordVPN account and select NordVPN from your list of Services.
2. At the bottom of the page in the Manual Setup section click Setup NordVPN manually then under the Configuration section go to Service credentials. Click Verify email to receive a code via email and enter the code to view and copy your credentials.
3. Login to GL.iNet firmware settings (usually 192.168.8.1) in a browser on any computer or smart device connected to the GL.iNet FlashRouter’s network.
View our guide for more instructions on how to access GL.iNet firmware settings.
4. Navigate to the VPN tab and select OpenVPN Client.
5. Download your Dedicated IP configuration file from the NordVPN website.
6. Click +New Group and name your NordVPN Dedicated IP connection, then upload the configuration file, enter your manual service credentials and click Apply.
7. Start a connection by clicking the 3 dots (…) > Start next to your chosen server.
8. A green dot confirms success. You can also switch between Global Mode or Policy Mode for routing in the VPN Dashboard.
- You should now see information appear in the Server Address, Server Listen Port, Traffic Statistics, and Client Virtual IP areas.
- Visit NordVPN’s IP Check to verify your new IP address and virtual location.
In some cases you may notice that the location is not showing the same location as the server you have input in your router settings; this is because geo tracking tools are often tricked by VPN connections. As long as you see an IP address that is not the same as your normal Internet IP address then you are indeed connected to NordVPN.
🚫📱Do not run NordVPN apps on devices connected to your NordVPN router. Using the app at the same time as the router VPN may cause conflicts and connection issues.
Connecting to OpenVPN on Asus Merlin Firmware
To setup VPN on your Asuswrt Merlin router, you will need to first download an OpenVPN (.ovpn) file from your VPN service provider and load it onto your router.
Review your specific VPN service instructions below. Follow these instructions to locate and upload your OpenVPN file. Depending on the VPN service, there may be additional steps and configurations required to complete the setup.
Using Asuswrt Merlin’s VPN Director, your router can store up to five different VPN connections and switch between them at will.
AsusWRT-Merlin Router Setup Guide
Quick Start Guide for AsusWRT-Merlin FlashRouters
Find setup guides, FAQs and troubleshooting tips for Asus-Merlin configured FlashRouters.
- RT-BE88U (BE7200), RT-AC68U, RT-AC88U, RT-AC3100, RT-AC5300, RT-AC86U, RT-AX56U, RT-AX58U, RT-AX68U, RT-AX86U. RT-AX86U-PRO, RT-AX88U, RT-AX88U-PRO
- GT-AC2900, GT-AX6000, GT-AX11000, GT-AXE11000,GT-AXE11000-PRO, GT-AXE16000
- ZenWiFi Pro XT12
VPN Setup
- Connecting to OpenVPN on Asus Merlin Firmware
- PureVPN Merlin WireGuard Setup
- Surfshark Merlin WireGuard Setup
- ProtonVPN Merlin WireGuard Setup
- IPVanish Merlin OpenVPN Setup
- PrivateInternetAccess (PIA) Merlin OpenVPN Setup
- NordVPN Merlin OpenVPN Setup
- ExpressVPN Merlin OpenVPN Setup
- CyberGhost Merlin OpenVPN Setup
AsusWRT-Merlin Features
Search Support Articles
Troubleshooting
More Ways to Get Help
DD-WRT Router VPN Setup
DD-WRT Router VPN Setup
TP-Link Router Setup Guide
Quick Start Guide for TP-Link FlashRouters
Find setup guides, FAQs and troubleshooting tips for TP-Link configured FlashRouters.
Archer AX10000, Archer AX1100, Archer AX21, Archer AX3000, Archer AX3000 Pro, Archer AX3200, Archer AX4400, Archer AX5400 Pro, Archer AX55, Archer AX55 Pro
Archer AX6000, Archer AX72 Pro, Archer AX73, Archer AX75, Archer AX80, Archer AX90
Archer AXE300, Archer AXE5400, Archer AXE75, Archer AXE95
Archer BE550, Archer BE800, Archer BE900, Archer BE9300, Archer GE80, Archer GX90
Search Support Articles
Troubleshooting
More Ways to Get Help
ExpressVPN Router Setup Guide
Quick Start Guide for ExpressVPN FlashRouters
Find setup guides, FAQs and troubleshooting tips for ExpressVPN configured FlashRouters.
Aircove
R6300 V2, R6400 V2, R6700 V3, R7000, R7000P
RT-AC56U, RT-AC56R, RT-AC56S, RT-AC68U V3, RT-AC87U
EA6200, WRT1200AC, WRT1900AC V1, WRT1900AC V2, WRT1900ACS V1, WRT1900ACS V2, WRT32X, WRT3200ACM
WiFi Setup
VPN Setup
- Change server locations on ExpressVPN/Aircove firmware
- Using Device Groups to connect to multiple VPN locations on ExpressVPN/Aircove firmware
- Using Device Groups to bypass VPN on ExpressVPN/Aircove firmware
- Change VPN Protocols on ExpressVPN/Aircove firmware
- ExpressVPN TP-Link OpenVPN Setup
- ExpressVPN Cudy OpenVPN Setup
- ExpressVPN Asus AX1800S OpenVPN Setup
- Flint/Slate GL.iNet ExpressVPN OpenVPN Setup
- ExpressVPN Merlin OpenVPN Setup
ExpressVPN Features
Search Support Articles
Troubleshooting
More Ways to Get Help
Cudy Router Setup Guide
Quick Start Guide for Cudy FlashRouters
Find setup guides, FAQs and troubleshooting tips for Cudy configured FlashRouters.
WR3000, M1800, M3000
Search Support Articles
Troubleshooting
More Ways to Get Help
What is a DNS leak and how can I prevent a DNS leak in my router?
What is a DNS leak?
A DNS Leak is an instance where your ISP receives DNS requests despite being connected to a VPN tunnel.
How do I check if my DNS is leaking?
- Perform the extended test on DNSLeakTest.com. Be sure to do so on multiple web browsers for best accuracy.
- Here you should only find one server and your ISP should not be listed as your actual ISP.
- If your actual ISP is not listed there is no DNS leak.
How can I prevent a DNS leak in DD-WRT?
Check your device's browser settings
Updates to web browsers have added DNS settings capabilities, while this often makes your browsing experience more secure it can also effect the results of a DNS leak test. You can go into your browser’s settings and search for “DNS” and disable the DNS of the browser for more accurate DNS leak test results.
A simple web search for “DNS settings [browser name]” should return helpful information for finding the setting in your browser.
Adjust DD-WRT settings
1. On the Setup > Basic Setup page of the DD-WRT settings check the Ignore WAN DNS box.
This setting may not appear in older DD-WRT firmware builds. If it is not appearing for you, upgrade your DD-WRT firmware.
2. Lower on the same page check the Forced DNS Redirection box.
3. Click Apply Settings at the bottom of the page and then wait a full minute and power the FlashRouter off and back on. Reconnect to the FlashRouter’s network once it boots back up and then make sure you are connected to VPN by going to https://whatismyipaddress.com then perform the DNS leak test again.
Adding your VPN provider’s DNS servers to the router’s configuration can be helpful as well. The DNS servers are typically found on the VPN provider’s website or you can reach out to their team for a recommendation of what DNS servers to enter.
Asus RT-AC68U B1 / C1 / AC1900 DD-WRT WiFi Settings
Recommended DD-WRT WiFi settings for the Asus RT-AC68U are based on extensive testing by FlashRouters. Please note that optimal settings may vary depending on external factors such as home size, interference, and the types of WiFi devices you are connecting in your network.
Screenshots below provide a visual display of recommended WiFi and encryption settings exactly as they appear in the Asus RT-AC68U with DD-WRT firmware.
Navigate to the Wireless > Basic Settings to view or edit WiFi network settings.
2.4 GHz - Wireless-N
5.0 GHz - Wireless-AC
Additional DD-WRT WiFi Information
Intimidated by all the available WiFi settings? The DD-WRT website provides extensive information about all of the available configuration options in the firmware. Learn about everything from Wireless channels to channel widths and more in the Basic Wireless Settings – DD-WRT Wiki.
RT-AC68U DD-WRT Wireless Security
The preset RT-AC68U FlashRouter WiFi password is Wireless#[First 5 characters of your router MAC]. The router MAC can be found on the bottom of your router. For e.g. if your MAC is 1459C07E70A8 then your WiFi password is Wireless#1459C
Navigate to the Wireless > Wireless Security to view or edit WiFi passwords.
Asus RT-AC66U DD-WRT WiFi Settings
Recommended DD-WRT WiFi settings for the Asus RT-AC66U are based on extensive testing by FlashRouters. Please note that optimal settings may vary depending on external factors such as home size, interference, and the types of WiFi devices you are connecting in your network.
Screenshots below provide a visual display of recommended WiFi and encryption settings exactly as they appear in the Asus RT-AC66U with DD-WRT firmware.
Navigate to the Wireless > Basic Settings to view or edit WiFi network settings.
2.4 GHz - Wireless-N
5.0 GHz - Wireless-AC
Additional DD-WRT WiFi Information
Intimidated by all the available WiFi settings? The DD-WRT website provides extensive information about all of the available configuration options in the firmware. Learn about everything from Wireless channels to channel widths and more in the Basic Wireless Settings – DD-WRT Wiki.
RT-AC66U DD-WRT Wireless Security
The preset RT-AC66U FlashRouter WiFi password is Wireless#[First 5 characters of your router MAC]. The router MAC can be found on the bottom of your router. For e.g. if your MAC is 1459C07E70A8 then your WiFi password is Wireless#1459C
Navigate to the Wireless > Wireless Security to view or edit WiFi passwords.
Asus RT-AC56U DD-WRT WiFi Settings
Recommended DD-WRT WiFi settings for the Asus RT-AC56U are based on extensive testing by FlashRouters. Please note that optimal settings may vary depending on external factors such as home size, interference, and the types of WiFi devices you are connecting in your network.
Screenshots below provide a visual display of recommended WiFi and encryption settings exactly as they appear in the Asus RT-AC56U with DD-WRT firmware.
Navigate to the Wireless > Basic Settings to view or edit WiFi network settings.
2.4 GHz - Wireless-N
5.0 GHz - Wireless-AC
Additional DD-WRT WiFi Information
Intimidated by all the available WiFi settings? The DD-WRT website provides extensive information about all of the available configuration options in the firmware. Learn about everything from Wireless channels to channel widths and more in the Basic Wireless Settings – DD-WRT Wiki.
RT-AC56U DD-WRT Wireless Security
The preset RT-AC56U FlashRouter WiFi password is Wireless#[First 5 characters of your router MAC]. The router MAC can be found on the bottom of your router. For e.g. if your MAC is 1459C07E70A8 then your WiFi password is Wireless#1459C
Navigate to the Wireless > Wireless Security to view or edit WiFi passwords.
Surfshark AsusWRT WireGuard Setup
Preparing for Surfshark AsusWRT Setup
Copy your Surfshark Private Key
If you are not already a Surfshark user Sign Up Now.
1. Log in to your account on the Surfshark website.
2. Click VPN Manual Setup.
3. Select Router as the Setup method.
4. Select WireGuard as the Protocol.
5. Select I don’t have a key pair.
6. Enter FlashRouter as the name of the connection and click Next.
7. Click Generate a new key pair.
8. A Public Key and Private Key will then appear. Use the copy box to copy the Private Key. You will not need the public key.
AsusWRT Router Setup for Surfshark
Login to AsusWRT firmware settings in a browser on any computer or smart device connected to the AsusWRT FlashRouter’s network.
1. Navigate to the VPN tab.
2. Navigate to the VPN Fusion tab.
3. Click Add profile.
4. In the Connection Name field enter in Surfshark.
5. In the VPN Type dropdown select Surfshark.
6. In the Region dropdown select the Surfshark location you want to connect to.
7. In the Private Key field paste in the Surfshark Private Key obtained earlier.
8. Click Apply and Enable at the bottom of the page.
If you only want certain devices to connect to the Surfshark profile you are setting up instead of all the devices connected to the FlashRouter’s network click into the profile and disable Apply to all devices. Then click Devices and select the devices that you want to connect to VPN.
9. At the top of the page set the Service State toggle to ON to activate the VPN connection.
Verify a successful Surfshark connection
- You should now see a CONNECTED message.
- Visit Surfshark’s IP Check to verify your new IP address and virtual location.
In some cases you may notice that the location is not showing the same location as the server you have input in your router settings; this is because geo tracking tools are often tricked by VPN connections. As long as you see an IP address that is not the same as your normal Internet IP address then you are indeed connected to Surfshark.
How to change the Surfshark server
- Use the profile service state toggle to disconnect the currently connected location.
- Then click into the Surfshark profile in the router’s settings.
- Then adjust the Region dropdown to a new location.
- Click Apply all settings.
- Use the profile service state toggle to connect the new location.
NordVPN Merlin OpenVPN Setup
Preparing for NordVPN Merlin Setup
Obtain your NordVPN manual Username and Password
If you are not already an NordVPN user Sign Up Now.
1. Log in to your account on the NordVPN website.
2. Click NordVPN on the left hand side and then click Setup NordVPN manually.
3. Enter in the verification code that was sent to your email.
4. Copy and paste your NordVPN manual username and password to a secure location. This is the username and password you will enter into the router settings to connect to NordVPN.
Download your NordVPN .ovpn file
1. There are two options for obtaining the .ovpn file. The first and recommended is to navigate to NordVPN’s server recommendation page. Click Recommended Server to display the fastest server based on your actual location. You can adjust the country if you don’t want to connect to the recommended country.
Then click Show Available Protocols. Click Download Config next to OpenVPN UDP. This will download the .ovpn file to your computer for this server. Do not open this file.
The second method to obtain a server is for connecting to a specific server number that you know you want to use. This applies to NordVPN Dedicated IP servers if you are signed up for that service. Go to NordVPN’s .ovpn file page. Then search for the server number that you want to use and click Download UDP.
Merlin Router Setup for NordVPN
Login to Asus Merlin firmware settings in a browser on any computer or smart device connected to the Merlin FlashRouter’s network.
1. Navigate to the VPN tab.
2. Navigate to the VPN Client tab.
3. Click Choose file and select the .ovpn file you downloaded earlier. Then click Upload.
4. Set Automatic Start at boot time to Yes if you want the VPN connection to begin automatically when the router is powered off and back on.
5. In the Description field enter in the name you’d like to use for this OpenVPN Client profile. We typically advise entering in the location or server number here. Our example server was in us5835.nordvpn.com so I have entered in NordVPN us5835.
6. Set Accept DNS Configuration to Strict. Set Redirect Internet traffic through tunnel to Yes (all). Set Kill Switch to Yes or No depending on if you want the Internet to be killed if the VPN connection drops.
If you only want certain devices to connect to the OpenVPN Client profile you are setting up instead of all the devices connected to the FlashRouter’s network please set the Redirect Internet traffic through tunnel to VPN Director. Then complete the instructions on this page and then view our VPN Director guide.
7. Enter your NordVPN username and password that you obtained earlier in the Username and Password. Note that these are different from your NordVPN email login and password.
8. Click Apply at the bottom of the page.
9. At the top of the page set the Service State toggle to ON to activate the VPN connection.
Verify a successful NordVPN connection
- You should now see a CONNECTED message.
- Visit NordVPN’s IP Check to verify your new IP address and virtual location.
In some cases you may notice that the location is not showing the same location as the server you have input in your router settings; this is because geo tracking tools are often tricked by VPN connections. As long as you see an IP address that is not the same as your normal Internet IP address then you are indeed connected to NordVPN.
How to change the NordVPN server
- Follow the steps at the top of the page to obtain a new .ovpn file.
- Then proceed with the settings same as initial setup.
Linksys WRT1200AC DD-WRT WiFi Settings
Recommended DD-WRT WiFi settings for the Linksys WRT1200AC are based on extensive testing by FlashRouters. Please note that optimal settings may vary depending on external factors such as home size, interference, and the types of WiFi devices you are connecting in your network.
Screenshots below provide a visual display of recommended WiFi and encryption settings exactly as they appear in the Linksys WRT1200AC with DD-WRT firmware.
Navigate to the Wireless > Basic Settings to view or edit WiFi network settings.
5.0 GHz - Wireless-AC
2.4 GHz - Wireless-N
Additional DD-WRT WiFi Information
Intimidated by all the available WiFi settings? The DD-WRT website provides extensive information about all of the available configuration options in the firmware. Learn about everything from Wireless channels to channel widths and more in the Basic Wireless Settings – DD-WRT Wiki.
WRT1200AC DD-WRT Wireless Security
The preset WRT1200AC FlashRouter WiFi password is Wireless#[First 5 characters of your router MAC]. The router MAC can be found on the bottom of your router. For e.g. if your MAC is 1459C07E70A8 then your WiFi password is Wireless#1459C
Navigate to the Wireless > Wireless Security to view or edit WiFi passwords.
Untangle Support
Support for Untangle Router NG Firewall features is provided by the Untangle Support team and not the FlashRouter support team.
We recommend reviewing these excellent resources that Untangle has created to get you setup as desired.
To contact Untangle directly you can email them at support@untangle.com and their team would be happy to assist you with getting setup to use their NG Firewall settings such as Web Monitor, Captive Portal, Intrusion Prevention, and many other features supported by the Untangle firmware running on your FlashRouter.
Linksys WRT32X DD-WRT WiFi Settings
Recommended DD-WRT WiFi settings for the Linksys WRT32X are based on extensive testing by FlashRouters. Please note that optimal settings may vary depending on external factors such as home size, interference, and the types of WiFi devices you are connecting in your network.
Screenshots below provide a visual display of recommended WiFi and encryption settings exactly as they appear in the Linksys WRT32X with DD-WRT firmware.
Navigate to the Wireless > Basic Settings to view or edit WiFi network settings.
5.0 GHz - Wireless-AC
2.4 GHz - Wireless-N
Additional DD-WRT WiFi Information
Intimidated by all the available WiFi settings? The DD-WRT website provides extensive information about all of the available configuration options in the firmware. Learn about everything from Wireless channels to channel widths and more in the Basic Wireless Settings – DD-WRT Wiki.
WRT32X DD-WRT Wireless Security
The preset WRT32X FlashRouter WiFi password is Wireless#[First 5 characters of your router MAC]. The router MAC can be found on the bottom of your router. For e.g. if your MAC is 1459C07E70A8 then your WiFi password is Wireless#1459C
Navigate to the Wireless > Wireless Security to view or edit WiFi passwords.
Netgear R6400V2 DD-WRT WiFi Settings
Recommended DD-WRT WiFi settings for the Linksys R6400V2 are based on extensive testing by FlashRouters. Please note that optimal settings may vary depending on external factors such as home size, interference, and the types of WiFi devices you are connecting in your network.
Screenshots below provide a visual display of WiFi settings exactly as they appear in the Linksys R6400V2 with DD-WRT firmware.
Navigate to the Wireless > Basic Settings to view or edit WiFi network settings.
2.4 GHz - Wireless-N
5.0 GHz - Wireless-AC
Additional DD-WRT WiFi Information
Intimidated by all the available WiFi settings? The DD-WRT website provides extensive information about all of the available configuration options in the firmware. Learn about everything from Wireless channels to channel widths and more in the Basic Wireless Settings – DD-WRT Wiki.
R6400V2 DD-WRT Wireless Security
The preset WiFi password is Wireless#[First 5 characters of your router MAC]. The router MAC can be found on the bottom of your router. For e.g. if your MAC is 1459C07E70A8 then your WiFi password is Wireless#1459C
Navigate to the Wireless > Wireless Security to view or edit WiFi passwords.
AirVPN Manual OpenVPN Setup
Preparing for Manual AirVPN Setup
Obtain your AirVPN OpenVPN Information
If you are not already a AirVPN user Sign Up Now.
1. Log in to your account on the AirVPN website.
2. Click on the Client Area tab.
3. Click on the Config Generator subtab.
4. Click on the Router icon under Choose your Operating System.
5. Select a Protocol under the Protocols section. We recommend UDP.
6. Select one option under the Choose Servers section. AirVPN sorts these servers by Planet, Continent, Country, and Single servers. Choose whichever best suits your needs.
7. Scroll down towards the bottom of the page and click on Generate.
Open the file that was downloaded with NotePad++ for Windows or TextEdit for Apple. You will be copying the Server IP/Name, client.crt and client.key from this file.
Please note, all VPN servers have different keys and certificates. If you wish to change servers in the future, you will have to go through steps 1-7 again.
DD-WRT Router Setup for AirVPN
Navigate to Services > VPN
Enter AirVPN settings
OpenVPN Client
Start OpenVPN Client
If you wish to disable your VPN connection simply set this to Disable at any time and click Apply Settings.
Server IP/Name
Copy and paste the server you selected in your account. Be sure there are no extra spaces or characters.
Port
443
Tunnel Device
TUN
Tunnel Protocol
UDP or TCP
Encryption cipher
AES-256-CBC
Hash Algorithm
SHA1
User Pass Authentication
Disable
Advanced Options
Enable
TLS Cipher
None
LZO Compression
No
NAT
Enable
Firewall Protection
Enable
nsCertType verification
Checked
Policy Based Routing
This field can be used for split VPN and Dual Gateway routing.
TLS Auth Key
—–BEGIN OpenVPN Static key V1—–
7bb7a23a0f5f28d01e792df68f1764ab
f2688719288808bf58e8a2d4f9354ecf
132625dfb895fc3f6330ae1e868e4dfa
c164c0931593d7f9a7da9595cf353433
8896e1d0a987a0d19838944af8fea4e5
215a3a0c76f4c67d5a4aee6a53be66a4
c88b84f850030840fb30f8550ed8068f
35c1ef34ee8f40a0ea5862dfb6f8d3c5
7ab5e27ac2799cf93e8765ff63cd8cd8
6b391b813925cd373bb202796f64d16f
003d042ca828d1b07f18ba1d0cb0323d
df3ee9287e9e084e655699efb3cffa92
3626946fa372e7beee245e7a95b4c1d8
7d16cae685218d4b8afc019b22e41083
476ee9883fe666d236301e55b2062551
4d91c8a69467a758293994df1e6fa7ae
—–END OpenVPN Static key V1—–
CA Cert
—–BEGIN CERTIFICATE—–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—–END CERTIFICATE—–
Public Client Cert
Copy and paste all contents between <cert> and </cert> make sure to also include the following lines when copying and pasting:
—–BEGIN CERTIFICATE—–
…
—–END CERTIFICATE—–
Private Client Key
Copy and paste all contents between <key> and </key> make sure to also include the following lines when copying and pasting:
—–BEGIN PRIVATE KEY—–
…
—–END PRIVATE KEY—–
CLICK APPLY SETTINGS
Leave all settings not mentioned above as their default setting.
Verify a successful AirVPN connection
Navigate to Status > OpenVPN
- You should now see a CONNECTED SUCCESS message.
- Visit whatismyipaddress.com to verify your new IP address and virtual location.
In some cases you may notice that the location is not showing the same location as the server you have input in your router settings; this is because geo tracking tools are often tricked by VPN connections. As long as you see an IP address that is not the same as your normal Internet IP address then you are indeed connected to AirVPN.
Back up your settings
Navigate to Administration > Backup
- Click the Backup button.
- A file named nvrambak.bin will be saved to your computer.
- You can load nvrambak.bin to restore your settings in the event of a reset.
How to change the AirVPN server
- Follow the instructions for obtaining the OpenVPN information from above.
- Enter the new Server Address in the Server IP/Name field.
- Enter the new client.key and private.key
- Click Apply Settings.