Search Results for: rule

How to Use ASUS VPN Fusion: Assign Devices and Multiple VPNs

Dave · Oct 26, 2026 ·

ASUS VPN Fusion lets supported AsusWRT routers run VPN client profiles and decide which connected devices use each VPN connection. You can send the entire network through one VPN, use separate VPN profiles for selected devices, or leave certain devices on the regular ISP connection.

This guide covers how to use ASUS VPN Fusion to assign devices to specific VPN connections, manage multiple VPN profiles simultaneously, and choose which devices use a VPN or connect directly through your ISP. These features work with supported VPN providers and protocols, including WireGuard and OpenVPN.

Open VPN Fusion

Connect your computer or phone to your ASUS FlashRouter’s WiFi or LAN.
Open http://www.asusrouter.com or the router’s LAN IP (often 192.168.50.1) and log in. See How to Access Your AsusWRT FlashRouter Settings.
Go to VPN > VPN Fusion. Add and configure at least one working VPN client profile before assigning devices.

VPN Fusion displays your saved VPN profiles and the Add Profile option.

Method 1: Apply One VPN to All Devices

Use this option when you want the selected VPN profile to be your router’s default connection.

In VPN Fusion, open the VPN profile that should provide the default internet route.
Enable Apply to all devices (or Default Connection in firmware that uses that label).
Click Apply all settings, then enable the VPN profile.
Connect a test device to the router and check its IP. If you use per-device overrides, verify those rules separately.

ASUS VPN Fusion Apply to all devices setting and device count — Enable Apply to all devices to use the selected VPN as the default connection.

Method 2: Send Only Selected Devices Through a VPN

In VPN Fusion, turn off Apply to all devices for a profile when you do not want that VPN used network-wide.
Open the profile’s Device area using the pencil/edit icon or the firmware’s device-assignment control.
Select the intended devices (for example, a TV and streaming box), confirm with OK, then click Apply all settings.
Enable the VPN profile and verify the selected devices’ public IPs.
For devices that should use the normal ISP internet, leave them on the Internet Connection route or explicitly set the Internet/bypass rule available in your firmware. Remove any conflicting VPN assignments.

Important: A device being connected to ASUS WiFi does not guarantee that it is assigned to the desired VPN. Check the assigned profile and the actual public IP.

How Multiple VPN Connections Work

On supported models, VPN Fusion can keep several VPN connections active and route different devices through different providers at the same time. For example:

TVNordVPN — WireGuard

LaptopProton VPN — OpenVPN

Streaming deviceSurfshark — OpenVPN

Work computerRegular ISP connection

You may be able to run one WireGuard profile and multiple OpenVPN profiles concurrently, but connection limits and supported combinations vary by ASUS router model and firmware. Adding many saved OpenVPN profiles is not the same as having all of them connected at once.

Create separate profiles with clear names, such as Nord-US-WG, Proton-US-OVPN, and Surfshark-UK-OVPN.
Enable only the profiles you need and confirm each shows connected.
Assign each client device to the appropriate active profile; avoid applying conflicting default routes.
Verify each device’s observed IP and server country. If one tunnel fails, test it individually with the other profiles temporarily disabled.

ASUS reference: How VPN Fusion handles multiple tunnels and devices.

Confirm a Device Is Actually Using the VPN

In VPN Fusion, confirm the target profile’s connection status is active.
Check the device’s assignment in the ASUS VPN Fusion interface.
On that same device, visit IPLeak.net or another public-IP checker.
Compare the reported public IP and location with the VPN server assigned to that device.
If the device still shows your ISP IP, test with its own VPN app and iCloud Private Relay / Private DNS / browser proxy disabled. Use Device Settings That Can Interfere With Your Router VPN.

Quick isolation test

Turn off VPN Fusion routing for a test device and confirm ISP internet works.
Turn on just one known-working VPN profile for that device.
Recheck public IP. If it now works, reintroduce other profiles/assignments individually.

Want a Separate WiFi Network With or Without VPN?

Rather than selecting devices one at a time, supported ASUS routers offer Guest Network Pro or Network > VPN Network features that can associate a WiFi SSID with VPN routing. See ASUS Guest WiFi With or Without VPN: Setup Guide.

On routers with only the traditional Guest Network feature, available VPN-by-SSID behavior may differ; do not assume the standard guest SSID bypasses a network-wide VPN default.

Upgrade your ASUS router

Explore the Latest WiFi 7 ASUS FlashRouters

Looking for a newer ASUS router? Browse WiFi 7 models available from FlashRouters and compare features to find the right fit for your home or office. VPN Fusion and other features vary by router model and firmware.

Shop ASUS WiFi 7 Routers →

ASUS Guest WiFi With or Without VPN: Setup Guide

Dave · Oct 26, 2026 ·

On supported ASUS routers, you can create a separate WiFi network (SSID) that routes connected devices through a VPN profile, while another network uses the regular ISP connection. This is useful for streaming TVs, guests, work devices, and family members who need different VPN behavior.

The available controls depend on your ASUS model and firmware. Newer routers may call the feature Guest Network Pro or simply Network; older routers may only have Guest Network, which does not offer the same VPN-by-SSID options.

What You Need Before Starting

Connect to your ASUS router and open http://www.asusrouter.com or its LAN IP. For login details, see AsusWRT Router Access Guide.
For a VPN WiFi network, first set up and verify at least one connected VPN profile under VPN > VPN Fusion. Choose a supported VPN provider from the AsusWRT VPN Setup Guides, then review How to Use ASUS VPN Fusion: Assign Devices and Multiple VPNs for routing options.
Look for Guest Network Pro, Network, or VPN Network in your ASUS firmware. If you only see the traditional Guest Network screen, read the legacy note below before proceeding.

Create a Dedicated WiFi Network That Uses the VPN

Preferred route for supported ASUS models: create a VPN Network SSID so all devices joining that SSID use the chosen VPN without individual device assignments.

Open Guest Network Pro > VPN Network, or the equivalent Network > Add Network > VPN Network menu in newer firmware.
Choose a recognizable WiFi name such as Home-VPN and a strong WiFi password.
Select the configured, connected VPN Fusion client/profile and enable VPN routing for that network.
Review any options for local-network access, guest isolation, and bands, then click Apply.
Connect a test device to the new Home-VPN WiFi SSID and check its public IP.

ASUS official walkthrough: Guest Network Pro / VPN Network Setup.

Alternative: Assign a VPN to an Existing Guest Network Pro SSID

In Guest Network Pro / Network, open the existing Guest Network profile.
Select the VPN tab, enable VPN routing, and choose your existing VPN Fusion client.
Click Apply, reconnect a device to the guest SSID, and verify the VPN IP.

ASUS also documents this path: Assign a VPN to Guest Network Pro.

Create a Separate WiFi Network Without a VPN

Use a guest/secondary network routed through the regular ISP internet connection for devices that should not use the VPN.

Under Guest Network Pro / Network, add a normal Guest Network or other suitable network profile (not the VPN Network preset).
Set a clear name such as Home-ISP and secure it with a strong password.
In that network profile’s VPN tab, leave the VPN assignment disabled or choose the Internet/ISP path if your firmware offers it.
Check your VPN Fusion default connection and device policies. If a VPN is set to Apply to all devices, simply turning off the Guest Network’s VPN toggle may not guarantee an ISP bypass on every firmware. Configure an explicit ISP/bypass route where supported.
Save, join the Home-ISP network with a test device, and confirm the public IP matches the ISP connection.

Confirm Each WiFi Network Uses the Intended Internet Route

Connect a phone or laptop to the VPN WiFi SSID. Disable any VPN app or iCloud Private Relay on the device for this test.
Visit WhatIsMyIPAddress.com and note the public IP and location. This should reflect your selected VPN endpoint.
Disconnect and join the ISP WiFi SSID. Repeat the IP check; it should now show the ISP’s public internet route.
If both SSIDs show the same IP, review the VPN Fusion default profile, guest-network VPN assignment, and any device-specific rules.

Common Issues and What to Check

I only see “Guest Network,” not “Guest Network Pro” or “VPN Network”

Your router may use older firmware or lack this feature. Traditional Guest Network creates a separate WiFi SSID, but the VPN routing option may not exist. Use VPN Fusion device assignments as an alternative rather than assuming the guest network automatically bypasses or uses the VPN.

Every network still uses the VPN

Check whether Apply to all devices is enabled in VPN Fusion. If it is, verify that the guest profile actually overrides the default route on your firmware. You may need an explicit per-network or per-device ISP rule.

A phone reports the wrong IP although the guest VPN profile is correct

Temporarily disable device-level VPN apps, iCloud Private Relay / Limit IP Address Tracking, browser proxy, or Private DNS settings, then reconnect. See Device Settings That Interfere With Router VPN.

Guest devices cannot reach local printers or other LAN devices

Check the guest network’s intranet access / network isolation settings. Changing isolation affects LAN access, not necessarily VPN selection. Keep guests isolated unless LAN access is actually needed.

Upgrade your ASUS router

Explore the Latest WiFi 7 ASUS FlashRouters

Shop ASUS WiFi 7 Routers →

ProtonVPN Merlin WireGuard Setup

TeamFlashRouters · Mar 30, 2023 ·

Preparing for ProtonVPN Merlin Setup

Download your ProtonVPN .conf file

If you are not already an ProtonVPN user Sign Up Now.

1. Log in to your account on the ProtonVPN website.

2. Click Downloads.

3. Scroll down to WireGuard configuration and name the device FlashRouter.

4. Select Router as the platform.

5. Select the VPN options that best fit your needs. We typically use the settings as seen in the screenshot here if you are unsure.

6. Next select the server that you would like to connect to and click Create. At the top of the page you’ll see ProtonVPN’s recommended server which we recommend using unless you need to connect to a specific location.

If you need a specific server location find it in the list and click Create.

7. After clicking Create a new window will appear. Click Download to download the .conf file to your computer.

Merlin Router Setup for ProtonVPN

Login to Asus Merlin firmware settings in a browser on any computer or smart device connected to the Merlin FlashRouter’s network.

1. Navigate to the VPN tab.

2. Navigate to the VPN Client tab.

3. Select WireGuard as the VPN Protocol.

4. Click Choose file and select the .conf file you downloaded earlier. Then click Upload.

5. In the Description field enter in the name you’d like to use for this WireGuard Client profile. We typically advise entering in the location here. Our example server was in US-NY#61 so I have entered in ProtonVPN NY-61.

6. Set Enable WireGuard to Yes.

7. Click Apply at the bottom of the page and you should then see a Connected message appear.

8. By default no devices are assigned to the new active WireGuard connection profile. Click the VPN Director tab to assign specific devices to the new WireGuard profile. Your IP will not be changed on your devices yet.

9. On the VPN Director page click the + symbol next to Add new rule.

10. Select the new WireGuard profile in the Interface dropdown.

11. In the Local IP field enter in 192.168.50.0/24 if you want ALL devices connected to the FlashRouter’s network to use the WireGuard VPN connection. Click OK.

If you only want certain devices to connect to the WireGuard Client profile you have setting up instead of all the devices connected to the FlashRouter’s network please complete the instructions on our VPN Director guide.

12. Then click Apply at the bottom of the page.

Verify a successful ProtonVPN connection

Visit ProtonVPN’s IP Check from a private/incognito browsing window to verify your new IP address and virtual location.

In some cases you may notice that the location is not showing the same location as the server you have input in your router settings; this is because geo tracking tools are often tricked by VPN connections. As long as you see an IP address that is not the same as your normal Internet IP address then you are indeed connected to ProtonVPN.

How to change the ProtonVPN server

Follow the steps at the top of the page to obtain a new .conf file.
Then proceed with the settings same as initial setup.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

Surfshark Merlin WireGuard Setup

TeamFlashRouters · Mar 30, 2023 ·

Preparing for Surfshark Merlin Setup

Download your Surfshark .conf file

If you are not already a Surfshark user Sign Up Now.

1. Log in to your account on the Surfshark website.

2. Click VPN Manual Setup.

3. Select Router as the Setup Method.

4. Select WireGuard as the Protocol.

5. Select I don’t have a key pair.

6. Enter FlashRouter as the name of the connection and click Next.

7. Click Generate a new key pair.

8. Click Choose a location.

9. Select the server location you want to connect to. Unless you need a specific location we recommend using Surfshark’s recommended Fastest server. Click Download to download the .conf file for this Surfshark server location.

Merlin Router Setup for Surfshark

Login to Asus Merlin firmware settings in a browser on any computer or smart device connected to the Merlin FlashRouter’s network.

1. Navigate to the VPN tab.

2. Navigate to the VPN Client tab.

3. Select WireGuard as the VPN Protocol.

4. Click Choose file and select the .conf file you downloaded earlier. Then click Upload.

5. In the Description field enter in the name you’d like to use for this WireGuard Client profile. We typically advise entering in the location here. Our example server was in New York so I have entered in Surfshark New York.

6. Set Enable WireGuard to Yes.

7. Click Apply at the bottom of the page and you should then see a Connected message appear.

9. On the VPN Director page click the + symbol next to Add new rule.

10. Select the new WireGuard profile in the Interface dropdown.

11. In the Local IP field enter in 192.168.50.0/24 if you want ALL devices connected to the FlashRouter’s network to use the WireGuard VPN connection. Click OK.

12. Then click Apply at the bottom of the page.

Verify a successful Surfshark connection

Visit Surfshark’s IP Check from a private/incognito browsing window to verify your new IP address and virtual location.

How to change the Surfshark server

Follow the steps at the top of the page to obtain a new .conf file.
Then proceed with the settings same as initial setup.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

VPN Director for Asus Merlin

TeamFlashRouters · Jan 19, 2022 ·

Once you have OpenVPN connected on your Merlin FlashRouter you can manage your VPN connections by device or by VPN servers or even VPN providers. This is a major advantage of Asus Merlin firmware as it allows up to 5 VPN connections at the same.

Setup multiple VPN clients

1. Under Advanced Settings select VPN.

2. Click the VPN Client tab.

3. In the Select Client instance dropdown select a new client instance to setup and follow your VPN providers setup guide.

4. Name the client in the Description field for more clarity for which server or provider is being setup.

5. Set the Redirect Internet traffic through tunnel dropdown to VPN Director.

Start or Stop VPN Client

1. Under Advanced Settings select VPN.

2. Click the VPN Director tab.

3. With multiple VPN clients connected you can start and stop them as needed from this page.

Assign a device to a specific VPN client

1. On the VPN Director page click the + symbol next to Add new rule.

2. Select the Interface that you want to add the device to.

3. Click the Local IP dropdown and a full list of devices connected to the Merlin FlashRouter should appear. Select the device you want to assign to this VPN client.

4. Click OK and click Apply.

PureVPN Merlin WireGuard Setup

TeamFlashRouters · Jul 20, 2023 ·

Preparing for PureVPN Merlin Setup

Download your PureVPN .conf file

If you are not already an PureVPN user Sign Up Now.

1. Log in to your account on the PureVPN website.

2. Select Manual Configuration.

3. Select the Server Location you want to connect to and then click Download.

4. In the Select Protocol dropdown choose WireGuard.

5. In the Select Device dropdown choose DD-WRT. Then click Generate Configuration. This will save a .conf file to your computer.

Merlin Router Setup for PureVPN

Login to Asus Merlin firmware settings in a browser on any computer or smart device connected to the Merlin FlashRouter’s network.

1. Navigate to the VPN tab.

2. Navigate to the VPN Client tab.

3. Select WireGuard as the VPN Protocol.

4. Click Choose file and select the .conf file you downloaded earlier. Then click Upload.

5. In the Description field enter in the name you’d like to use for this WireGuard Client profile. We typically advise entering in the location here.

6. Set Enable WireGuard to Yes.

7. Click Apply at the bottom of the page and you should then see a Connected message appear.

9. On the VPN Director page click the + symbol next to Add new rule.

10. Select the new WireGuard profile in the Interface dropdown.

11. In the Local IP field enter in 192.168.50.0/24 if you want ALL devices connected to the FlashRouter’s network to use the WireGuard VPN connection. Click OK.

12. Then click Apply at the bottom of the page.

Verify a successful PureVPN connection

Visit PureVPN’s IP Check to verify your new IP address and virtual location.

How to change the PureVPN server

Follow the steps at the top of the page to obtain a new .conf file.
Then proceed with the settings same as initial setup.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

Privacy Hero Bedtime Settings (Internet Scheduler)

TeamFlashRouters · Apr 3, 2023 ·

Your Privacy Hero router uses Cloud Based router management which means you can access the router settings from anywhere on any device that has an internet connection. You can follow these steps while connected to your phone, other Wi-Fi network, or the Privacy Hero network.

The Bedtime settings feature allows users to schedule when internet access will be turned off for specific user profiles. All devices assigned to this profile will have these rules applied.

1. From any device that has a browser such as a computer, smartphone, or tablet visit app.privacyhero.com

2. Enter your Privacy Hero account email and password. Click Login.

If you have not created your Privacy Hero account yet please follow these instructions.

3. Click the Profiles symbol.

4. Click the name of the User Profile.

5. Click Schoolnights or Weekends depending on which you need to set rules for.

Privacy Hero Bedtime School Nights Weekends

6. Select the time that you want the Internet to turn off and the days you want this rule to apply to. Click Save.

7. Set the Bedtime toggle to On.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

Search Results for: rule

Open VPN Fusion

Method 1: Apply One VPN to All Devices

Method 2: Send Only Selected Devices Through a VPN

How Multiple VPN Connections Work

Confirm a Device Is Actually Using the VPN

Quick isolation test

Want a Separate WiFi Network With or Without VPN?

Related AsusWRT Guides

Explore the Latest WiFi 7 ASUS FlashRouters

What You Need Before Starting

Create a Dedicated WiFi Network That Uses the VPN

Alternative: Assign a VPN to an Existing Guest Network Pro SSID

Create a Separate WiFi Network Without a VPN

Confirm Each WiFi Network Uses the Intended Internet Route

Common Issues and What to Check

I only see “Guest Network,” not “Guest Network Pro” or “VPN Network”

Every network still uses the VPN

A phone reports the wrong IP although the guest VPN profile is correct

Guest devices cannot reach local printers or other LAN devices

Related AsusWRT Guides

Explore the Latest WiFi 7 ASUS FlashRouters

Preparing for ProtonVPN Merlin Setup

Download your ProtonVPN .conf file

Merlin Router Setup for ProtonVPN

Verify a successful ProtonVPN connection

How to change the ProtonVPN server

Preparing for Surfshark Merlin Setup

Download your Surfshark .conf file

Merlin Router Setup for Surfshark

Verify a successful Surfshark connection

How to change the Surfshark server

Setup multiple VPN clients

Start or Stop VPN Client

Assign a device to a specific VPN client

Preparing for PureVPN Merlin Setup

Download your PureVPN .conf file

Merlin Router Setup for PureVPN

Verify a successful PureVPN connection

How to change the PureVPN server

Footer