Prioritizing Privacy
Change the FlashRouter’s wireless network name to any name you like.
Navigate to Wireless > Basic Settings
ExpressVPN offers a SmartDNS service known as MediaStreamer for unblocking geo-restricted content without the encryption of a VPN service. SmartDNS routes DNS servers to different regions which “tricks” the website to allow access to previously restricted content.
SmartDNS does not change your IP Address or provide the encryption that a VPN connection does. This can result in faster speeds and unblocked content.
SmartDNS and VPN should not both be configured at the same time. When using a SmartDNS connection make sure to disable your VPN connection on the FlashRouter.
If you are not already a ExpressVPN user Sign Up Now.
Visit ExpressVPN website login page and successfully login.
Navigate to the DNS Settings tab on top right of the ExpressVPN Dashboard.
Click on Register my IP address.
Navigate to the ExpressVPN Dashboard.
Click on Set Up on More Devices.
Scroll down and click on MediaStreamer and note the DNS servers that appear on the right side of the page.
Navigate to Setup > Basic Setup
Once the FlashRouter has fully rebooted, you can now access your desired regional content on any device that connects to the FlashRouter’s network.
If your VPN Out page in your Roqos settings is reporting that you are Connected to your VPN provider but your IP Address and location have not changed when you visit What is my IP address? follow the below checklist.
Since the Roqos UI is being accessed securely via the cloud you can change the settings while your device is not connected to the Roqos network. This would result in your IP Address not updating when you connect to VPN.
Make sure that you are connected to your Roqos WiFi network or from an ethernet port on the back of the Roqos directly to your device and not another network.
By default there are no devices assigned to the VPN tunnel. To assign devices to the Roqos’ VPN connection.
2. Select the VPN tab on the left hand menu and select VPN Out.
3. Click Included Devices. From this page you can choose if all devices should connect to VPN or only certain devices.
4. From the dropdown select Include all devices if you want every device that connects to the Roqos to connect to VPN or if you only want specific devices to connect to VPN while others bypass the VPN connection select Include selected devices from the dropdown and then toggle the sliders for the devices you want connected to VPN. Click Save.
Connecting to VPN via a device application or browser extension at the same time while connecting via your Roqos is not recommended. Doubling up on VPN connections can cause issues with speeds and stability.
When you are connected to the Roqos VPN network at home you should leave all VPN applications and extensions disconnected and unopened.
The encryption provided by a VPN connection almost always results in slower connection speed. In some cases you may have noticed that your computer or tablet was working faster when running a VPN client application or program, that is because a computer has a processor that is normally about 4-6x times as strong as a the processor on a router, and that is for managing a single VPN connection. A router has a smaller processor and is managing an entire network of devices. Encrypting an entire network does take considerable processing power.
Speed test results while connected to VPN are never going to be accurate. A speed test measures the rate at which a data packet travels from one server to another, however when you are connecting to VPN the data packets travel to an extra server where they are encrypted and then sent back into the route. We strongly recommend disabling the FlashRouter’s VPN connection when testing speeds to make sure there isn’t and issue with the router.
Ethernet: Wired ethernet connections will almost always be the most stable and reliable connection. To speed up your internet connection, use an ethernet cable to wire your devices to the FlashRouter.
Wireless (5.0GHz): The 5.0GHz WiFi frequency has less range than the standard 2.4GHz WiFi, but also transmits your internet connection at a significantly faster speed. If you were previously using the 2.4GHz network and experiencing slow speeds please connect to the 5GHz wireless network which should improve your speed.
Our supported VPN providers offer many servers in different countries and regions. If a server has slower connection speed we recommend connecting to the server closest to your actual location.
The process for changing servers is detailed in your provider’s setup instructions.
UDP servers do not authenticate every data packets the way TCP servers do which results in faster connection speeds.
Contact your VPN provider for a server recommendation that should provide the fastest speeds for you.
The VPN connection on the FlashRouter will not drop in most instances however if the VPN stopped working follow the steps below.
In order to use the FlashRouters Privacy App you need DD-WRT build 02/15/22 r48362 or 2/10/20 r42335.
Follow these instructions to upgrade the firmware to 02/15/22 r48362: How do I upgrade the DD-WRT firmware of my FlashRouter?
If you would like the fully featured FR Privacy App version with Simple Setup you must use firmware builds from 2/10/20 r42335.
Navigate to Status > MyPage
Navigate to Services > VPN
Can’t send or receive emails? Connecting to a VPN server can result in your email client not being able to send or receive emails. This can happen for several reasons:
This issue will only occur with email client applications and not with web browser email.
Access the settings of your email client and change the SMTP port to 587 or 465.
Connect to a different VPN server. The process for changing servers is detailed in your provider’s setup instructions.
Disconnect from VPN on the FlashRouter and use your ISP Internet connection when using email.
Dual router setup users can leave the VPN running on the FlashRouter and simply connect to the other router’s network when using email.
In some cases if you contact your VPN service provider they will be able to give you access to a specifically requested e-mail service.
If you ever have an issue with WiFi, you can always wire directly into the FlashRouter to verify and/or update your current WiFi settings.
Our team has tested the wireless functionality for each FlashRouter that we offer and shared our recommended wireless settings in our Wifi Setup area. Replicate the settings for your FlashRouter model found on that page if the 2.4GHz is not showing.
Navigate to Wireless > Basic Settings
Change the wireless channel setting for the 2.4GHz band that is not appearing. The most broadly compatible channels are 6 and 11.
CLICK APPLY SETTINGS
In rare instances the wireless adapter for your device may stop picking up WiFi networks and must be reset. This will be different for each device, that is why the best way to refresh your wireless adapter is to simply reboot any device in question and see if the adapter now picks up your WiFi networks.
Navigate to Status > Wireless
The readouts on this page can help tell if there are errors with the FlashRouter’s wireless. View our article on how to read the Wireless Status page for more information.
If you are not already an Surfshark user Sign Up Now.
1. Log in to your account on the Surfshark website.
2. Successfully log in with your account information and Navigate to the Manual Connection Guide. Here you will find the OpenVPN Specific Username and Password required for manual configuration.
View a full list of Surfshark servers.
Atlanta:
us-atl.prod.surfshark.com
Buffalo:
us-buf.prod.surfshark.com
Chicago:
us-chi.prod.surfshark.com
Dallas:
us-dal.prod.surfshark.com
Las Vegas:
us-las.prod.surfshark.com
Los Angeles:
us-lax.prod.surfshark.com
Miami:
us-mia.prod.surfshark.com
New York City:
us-nyc.prod.surfshark.com
Phoenix:
us-phx.prod.surfshark.com
San Fransisco:
us-sfo.prod.surfshark.com
Seattle:
us-sea.prod.surfshark.com
Navigate to Services > VPN
Start OpenVPN Client
If you wish to disable your VPN connection simply set this to Disable at any time and click Apply Settings.
Server IP/Name
Copy and paste the server you would like to connect to from the server list above. Be sure there are no extra spaces or characters.
If you wish to change Surfshark connection locations, THIS IS THE ONLY FIELD YOU NEED TO CHANGE.
Port
1194
Tunnel Device
TUN
Tunnel Protocol
UDP
Encryption cipher
None
Hash Algorithm
SHA512
Userpass Authentication
Enable
Username
Enter your OpenVPN specific Username.
Password
Enter your OpenVPN specific Password.
Advanced Options
Enable
TLS Cipher
None
LZO Compression
Disabled
NAT
Enable
Firewall Protection
Enable
TLS Auth Key
-----BEGIN OpenVPN Static key V1----- b02cb1d7c6fee5d4f89b8de72b51a8d0 c7b282631d6fc19be1df6ebae9e2779e 6d9f097058a31c97f57f0c35526a44ae 09a01d1284b50b954d9246725a1ead1f f224a102ed9ab3da0152a15525643b2e ee226c37041dc55539d475183b889a10 e18bb94f079a4a49888da566b9978346 0ece01daaf93548beea6c827d9674897 e7279ff1a19cb092659e8c1860fbad0d b4ad0ad5732f1af4655dbd66214e552f 04ed8fd0104e1d4bf99c249ac229ce16 9d9ba22068c6c0ab742424760911d463 6aafb4b85f0c952a9ce4275bc821391a a65fcd0d2394f006e3fba0fd34c4bc4a b260f4b45dec3285875589c97d3087c9 134d3a3aa2f904512e85aa2dc2202498 -----END OpenVPN Static key V1-----
Additional Config
remote-cert-tls server
remote-random
nobind
tun-mtu 1500
tun-mtu-extra 32
mssfix 1450
persist-key
persist-tun
ping-timer-rem
reneg-sec 0
cipher AES-256-GCM
log /tmp/vpn.log
Policy Based Routing
This field can be used for split VPN and Dual Gateway routing.
CA Cert
-----BEGIN CERTIFICATE----- MIIFTTCCAzWgAwIBAgIJAMs9S3fqwv+mMA0GCSqGSIb3DQEBCwUAMD0xCzAJBgNV BAYTAlZHMRIwEAYDVQQKDAlTdXJmc2hhcmsxGjAYBgNVBAMMEVN1cmZzaGFyayBS b290IENBMB4XDTE4MDMxNDA4NTkyM1oXDTI4MDMxMTA4NTkyM1owPTELMAkGA1UE BhMCVkcxEjAQBgNVBAoMCVN1cmZzaGFyazEaMBgGA1UEAwwRU3VyZnNoYXJrIFJv b3QgQ0EwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDEGMNj0aisM63o SkmVJyZPaYX7aPsZtzsxo6m6p5Wta3MGASoryRsBuRaH6VVa0fwbI1nw5ubyxkua Na4v3zHVwuSq6F1p8S811+1YP1av+jqDcMyojH0ujZSHIcb/i5LtaHNXBQ3qN48C c7sqBnTIIFpmb5HthQ/4pW+a82b1guM5dZHsh7q+LKQDIGmvtMtO1+NEnmj81BAp FayiaD1ggvwDI4x7o/Y3ksfWSCHnqXGyqzSFLh8QuQrTmWUm84YHGFxoI1/8AKdI yVoB6BjcaMKtKs/pbctk6vkzmYf0XmGovDKPQF6MwUekchLjB5gSBNnptSQ9kNgn TLqi0OpSwI6ixX52Ksva6UM8P01ZIhWZ6ua/T/tArgODy5JZMW+pQ1A6L0b7egIe ghpwKnPRG+5CzgO0J5UE6gv000mqbmC3CbiS8xi2xuNgruAyY2hUOoV9/BuBev8t tE5ZCsJH3YlG6NtbZ9hPc61GiBSx8NJnX5QHyCnfic/X87eST/amZsZCAOJ5v4EP SaKrItt+HrEFWZQIq4fJmHJNNbYvWzCE08AL+5/6Z+lxb/Bm3dapx2zdit3x2e+m iGHekuiE8lQWD0rXD4+T+nDRi3X+kyt8Ex/8qRiUfrisrSHFzVMRungIMGdO9O/z CINFrb7wahm4PqU2f12Z9TRCOTXciQIDAQABo1AwTjAdBgNVHQ4EFgQUYRpbQwyD ahLMN3F2ony3+UqOYOgwHwYDVR0jBBgwFoAUYRpbQwyDahLMN3F2ony3+UqOYOgw DAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAgEAn9zV7F/XVnFNZhHFrt0Z S1Yqz+qM9CojLmiyblMFh0p7t+Hh+VKVgMwrz0LwDH4UsOosXA28eJPmech6/bjf ymkoXISy/NUSTFpUChGO9RabGGxJsT4dugOw9MPaIVZffny4qYOc/rXDXDSfF2b+ 303lLPI43y9qoe0oyZ1vtk/UKG75FkWfFUogGNbpOkuz+et5Y0aIEiyg0yh6/l5Q 5h8+yom0HZnREHhqieGbkaGKLkyu7zQ4D4tRK/mBhd8nv+09GtPEG+D5LPbabFVx KjBMP4Vp24WuSUOqcGSsURHevawPVBfgmsxf1UCjelaIwngdh6WfNCRXa5QQPQTK ubQvkvXONCDdhmdXQccnRX1nJWhPYi0onffvjsWUfztRypsKzX4dvM9k7xnIcGSG EnCC4RCgt1UiZIj7frcCMssbA6vJ9naM0s7JF7N3VKeHJtqe1OCRHMYnWUZt9vrq X6IoIHlZCoLlv39wFW9QNxelcAOCVbD+19MZ0ZXt7LitjIqe7yF5WxDQN4xru087 FzQ4Hfj7eH1SNLLyKZkA1eecjmRoi/OoqAt7afSnwtQLtMUc2bQDg6rHt5C0e4dC LqP/9PGZTSJiwmtRHJ/N5qYWIh9ju83APvLm/AGBTR2pXmj9G3KdVOkpIC7L35dI 623cSEC3Q3UZutsEm/UplsM= -----END CERTIFICATE-----
CLICK APPLY SETTINGS
Leave all settings not mentioned above as their default setting.
Navigate to Status > OpenVPN
In some cases you may notice that the location is not showing the same location as the server you have input in your router settings; this is because geo tracking tools are often tricked by VPN connections. As long as you see an IP address that is not the same as your normal Internet IP address then you are indeed connected to Surfshark VPN.
Navigate to Administration > Backup
If you are not already an Windscribe user Sign Up Now.
1. Log in to your account on the Windscribe website.
2. Click on the Download link at the top of the page.
3. Scroll down to the Config Generators section and Click on the OpenVPN link.
4. Click on Get Credentials and copy the Username and Password. This information will be used later on in the configuration.
US East:
us-east.windscribe.com
US West:
us-west.windscribe.com
US Windflix:
wf-us.windscribe.com
Canada:
ca.windscribe.com
Canada West:
ca-west.windscribe.com
Australia:
au.windscribe.com
Austria:
at.windscribe.com
Belgium:
be.windscribe.com
Brazil:
br.windscribe.com
Bulgaria:
bg.windscribe.com
Czech Republic:
cz.windscribe.com
Denmark:
dk.windscribe.com
Egypt:
eg.windscribe.com
Finland:
fi.windscribe.com
France:
fr.windscribe.com
Germany:
de.windscribe.com
Hong Kong:
hk.windscribe.com
Hungary:
hu.windscribe.com
India:
in.windscribe.com
Ireland:
ie.windscribe.com
Italy:
it.windscribe.com
Japan:
jp.windscribe.com
Latvia:
lv.windscribe.com
Luxemburg:
lu.windscribe.com
Malaysia:
my.windscribe.com
Mexico:
mx.windscribe.com
Netherlands:
nl.windscribe.com
Norway:
no.windscribe.com
Poland:
pl.windscribe.com
Romania:
ro.windscribe.com
Russia:
ru.windscribe.com
Singapore:
ch.windscribe.com
South Africa:
za.windscribe.com
South Korea:
kr.windscribe.com
Spain:
es.windscribe.com
Sweden:
se.windscribe.com
Switzerland:
ch.windscribe.com
Taiwan:
tw.windscribe.com
Turkey:
tr.windscribe.com
Ukraine:
ua.windscribe.com
United Kingdom:
uk.windscribe.com
Navigate to Services > VPN
Start OpenVPN Client
If you wish to disable your VPN connection simply set this to Disable at any time and click Apply Settings.
Server IP/Name
Copy and Paste the server you would like to connect to from the server list above. Be sure there are no extra spaces or characters.
If you wish to change Windscribe connection locations, THIS IS THE ONLY FIELD YOU NEED TO CHANGE.
Port
443
Tunnel Device
TUN
Tunnel Protocol
UDP
Encryption cipher
AES-256-CBC
Hash Algorithm
SHA512
User Pass Authentication
Enable
Username
Enter your OpenVPN specific Username.
Password
Enter your OpenVPN specific Password.
Advanced Options
Enable
TLS Cipher
None
LZO Compression
Adaptive
NAT
Enable
Firewall Protection
Enable
TLS Auth Key
-----BEGIN OpenVPN Static key V1----- 5801926a57ac2ce27e3dfd1dd6ef8204 2d82bd4f3f0021296f57734f6f1ea714 a6623845541c4b0c3dea0a050fe6746c b66dfab14cda27e5ae09d7c155aa554f 399fa4a863f0e8c1af787e5c602a801d 3a2ec41e395a978d56729457fe6102d7 d9e9119aa83643210b33c678f9d4109e 3154ac9c759e490cb309b319cf708cae 83ddadc3060a7a26564d1a24411cd552 fe6620ea16b755697a4fc5e6e9d0cfc0 c5c4a1874685429046a424c026db672e 4c2c492898052ba59128d46200b40f88 0027a8b6610a4d559bdc9346d33a0a6b 08e75c7fd43192b162bfd0aef0c716b3 1584827693f676f9a5047123466f0654 eade34972586b31c6ce7e395f4b478cb -----END OpenVPN Static key V1-----
Additional Config
tun-mtu-extra 32
mssfix 1450
persist-key
persist-tun
Policy Based Routing
This field can be used for split VPN and Dual Gateway routing.
CA Cert
-----BEGIN CERTIFICATE----- MIIFozCCA4ugAwIBAgIBATANBgkqhkiG9w0BAQ0FADBAMQswCQYDVQQGEwJDSDEV MBMGA1UEChMMUHJvdG9uVlBOIEFHMRowGAYDVQQDExFQcm90b25WUE4gUm9vdCBD QTAeFw0xNzAyMTUxNDM4MDBaFw0yNzAyMTUxNDM4MDBaMEAxCzAJBgNVBAYTAkNI MRUwEwYDVQQKEwxQcm90b25WUE4gQUcxGjAYBgNVBAMTEVByb3RvblZQTiBSb290 IENBMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAt+BsSsZg7+AuqTq7 vDbPzfygtl9f8fLJqO4amsyOXlI7pquL5IsEZhpWyJIIvYybqS4s1/T7BbvHPLVE wlrq8A5DBIXcfuXrBbKoYkmpICGc2u1KYVGOZ9A+PH9z4Tr6OXFfXRnsbZToie8t 2Xjv/dZDdUDAqeW89I/mXg3k5x08m2nfGCQDm4gCanN1r5MT7ge56z0MkY3FFGCO qRwspIEUzu1ZqGSTkG1eQiOYIrdOF5cc7n2APyvBIcfvp/W3cpTOEmEBJ7/14RnX nHo0fcx61Inx/6ZxzKkW8BMdGGQF3tF6u2M0FjVN0lLH9S0ul1TgoOS56yEJ34hr JSRTqHuar3t/xdCbKFZjyXFZFNsXVvgJu34CNLrHHTGJj9jiUfFnxWQYMo9UNUd4 a3PPG1HnbG7LAjlvj5JlJ5aqO5gshdnqb9uIQeR2CdzcCJgklwRGCyDT1pm7eoiv WV19YBd81vKulLzgPavu3kRRe83yl29It2hwQ9FMs5w6ZV/X6ciTKo3etkX9nBD9 ZzJPsGQsBUy7CzO1jK4W01+u3ItmQS+1s4xtcFxdFY8o/q1zoqBlxpe5MQIWN6Qa lryiET74gMHE/S5WrPlsq/gehxsdgc6GDUXG4dk8vn6OUMa6wb5wRO3VXGEc67IY m4mDFTYiPvLaFOxtndlUWuCruKcCAwEAAaOBpzCBpDAMBgNVHRMEBTADAQH/MB0G A1UdDgQWBBSDkIaYhLVZTwyLNTetNB2qV0gkVDBoBgNVHSMEYTBfgBSDkIaYhLVZ TwyLNTetNB2qV0gkVKFEpEIwQDELMAkGA1UEBhMCQ0gxFTATBgNVBAoTDFByb3Rv blZQTiBBRzEaMBgGA1UEAxMRUHJvdG9uVlBOIFJvb3QgQ0GCAQEwCwYDVR0PBAQD AgEGMA0GCSqGSIb3DQEBDQUAA4ICAQCYr7LpvnfZXBCxVIVc2ea1fjxQ6vkTj0zM htFs3qfeXpMRf+g1NAh4vv1UIwLsczilMt87SjpJ25pZPyS3O+/VlI9ceZMvtGXd MGfXhTDp//zRoL1cbzSHee9tQlmEm1tKFxB0wfWd/inGRjZxpJCTQh8oc7CTziHZ ufS+Jkfpc4Rasr31fl7mHhJahF1j/ka/OOWmFbiHBNjzmNWPQInJm+0ygFqij5qs 51OEvubR8yh5Mdq4TNuWhFuTxpqoJ87VKaSOx/Aefca44Etwcj4gHb7LThidw/ky zysZiWjyrbfX/31RX7QanKiMk2RDtgZaWi/lMfsl5O+6E2lJ1vo4xv9pW8225B5X eAeXHCfjV/vrrCFqeCprNF6a3Tn/LX6VNy3jbeC+167QagBOaoDA01XPOx7Odhsb Gd7cJ5VkgyycZgLnT9zrChgwjx59JQosFEG1DsaAgHfpEl/N3YPJh68N7fwN41Cj zsk39v6iZdfuet/sP7oiP5/gLmA/CIPNhdIYxaojbLjFPkftVjVPn49RqwqzJJPR N8BOyb94yhQ7KO4F3IcLT/y/dsWitY0ZH4lCnAVV/v2YjWAWS3OWyC8BFx/Jmc3W DK/yPwECUcPgHIeXiRjHnJt0Zcm23O2Q3RphpU+1SO3XixsXpOVOYP6rJIXW9bMZ A1gTTlpi7A== -----END CERTIFICATE-----
CLICK APPLY SETTINGS
Leave all settings not mentioned above as their default setting.
Navigate to Status > OpenVPN
In some cases you may notice that the location is not showing the same location as the server you have input in your router settings; this is because geo tracking tools are often tricked by VPN connections. As long as you see an IP address that is not the same as your normal Internet IP address then you are indeed connected to Windscribe VPN.
Navigate to Administration > Backup
If you are not already an IPVanish user Sign Up Now.
Log in to your account on the IPVanish website.
View a full list of IPVanish servers.
Ashburn:
iad-a01.ipvanish.com
through
iad-a78.ipvanish.com
Atlanta:
atl-a01.ipvanish.com
through
atl-a88.ipvanish.com
Boston:
bos-c01.ipvanish.com
through
bos-c27.ipvanish.com
Chicago:
chi-a01.ipvanish.com
through
chi-a58.ivpanish.com
Cleveland:
cle-c01.ipvanish.com
through
cle-c20.ipvanish.com
Dallas:
dal-a01.ipvanish.com
through
dal-a79.ipvanish.com
Denver:
den-c01.ipvanish.com
through
den-c13.ipvanish.com
Jackson:
jan-c01.ipvanish.com
through
jan-c15.ipvanish.com
Las Vegas:
las-c11.ipvanish.com
through
las-c20.ipvanish.com
Los Angeles:
lax-a01.ipvanish.com
through
lax-a60.ipvanish.com
Miami:
mia-a01.ipvanish.com
through
mia-a34.ipvanish.com
Milwaukee:
mke-c01.ipvanish.com
through
mke-c19.ipvanish.com
New York:
nyc-a01.ipvanish.com
through
nyc-a51.ipvanish.com
Phoenix:
phx-a01.ipvanish.com
through
phx-a24.ipvanish.com
Salt Lake City:
slc-c01.ipvanish.com
through
slc-c12.ipvanish.com
San Jose:
sjc-a01.ipvanish.com
through
sjc-a27.ipvanish.com
Seattle:
sea-a01-ipvanish.com
through
sea-a41.ipvanish.com
St. Louis:
stl-c01.ipvanish.com
through
stl-c18.ipvanish.com
London:
lon-a01.ipvanish.com
through
lon-a69.ipvanish.com
lon-c01.ipvanish.com
through
lon-c58.ipvanish.com
Manchester:
man-c01.ipvanish.com
through
man-c09.ipvanish.com
Navigate to Services > VPN
Start OpenVPN Client
If you wish to disable your VPN connection simply set this to Disable at any time and click Apply Settings.
Server IP/Name
Copy and paste the server you would like to connect to from the server list above. Be sure there are no extra spaces or characters.
If you wish to change IPVanish connection locations, THIS IS THE ONLY FIELD YOU NEED TO CHANGE.
Port
443
Tunnel Device
TUN
Tunnel Protocol
UDP
Encryption cipher
AES-256-CBC
Hash Algorithm
SHA256
User Pass Authentication
Enable
Username
Enter the Username you successfully logged in to your IPVanish account with.
Password
Enter the Password you successfully logged in to your IPVanish account with.
Advanced Options
Enable
TLS Cipher
None
LZO Compression
Adaptive
NAT
Enable
Firewall Protection
Enable
Additional Config
persist-key
persist-tun
persist-remote-ip
keysize 256
Policy Based Routing
This field can be used for split VPN and Dual Gateway routing.
CA Cert
-----BEGIN CERTIFICATE----- MIIErTCCA5WgAwIBAgIJAMYKzSS8uPKDMA0GCSqGSIb3DQEBDQUAMIGVMQswCQYD VQQGEwJVUzELMAkGA1UECBMCRkwxFDASBgNVBAcTC1dpbnRlciBQYXJrMREwDwYD VQQKEwhJUFZhbmlzaDEVMBMGA1UECxMMSVBWYW5pc2ggVlBOMRQwEgYDVQQDEwtJ UFZhbmlzaCBDQTEjMCEGCSqGSIb3DQEJARYUc3VwcG9ydEBpcHZhbmlzaC5jb20w HhcNMTIwMTExMTkzMjIwWhcNMjgxMTAyMTkzMjIwWjCBlTELMAkGA1UEBhMCVVMx CzAJBgNVBAgTAkZMMRQwEgYDVQQHEwtXaW50ZXIgUGFyazERMA8GA1UEChMISVBW YW5pc2gxFTATBgNVBAsTDElQVmFuaXNoIFZQTjEUMBIGA1UEAxMLSVBWYW5pc2gg Q0ExIzAhBgkqhkiG9w0BCQEWFHN1cHBvcnRAaXB2YW5pc2guY29tMIIBIjANBgkq hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9DBWNr/IKOuY3TmDP5x7vYZR0DGxLbX U8TyAzBbjUtFFMbhxlHiXVQrZHmgzih94x7BgXM7tWpmMKYVb+gNaqMdWE680Qm3 nOwmhy/dulXDkEHAwD05i/iTx4ZaUdtV2vsKBxRg1vdC4AEiwD7bqV4HOi13xcG9 71aQ55Mj1KeCdA0aNvpat1LWx2jjWxsfI8s2Lv5Fkoi1HO1+vTnnaEsJZrBgAkLX pItqP29Lik3/OBIvkBIxlKrhiVPixE5qNiD+eSPirsmROvsyIonoJtuY4Dw5K6pc NlKyYiwo1IOFYU3YxffwFJk+bSW4WVBhsdf5dGxq/uOHmuz5gdwxCwIDAQABo4H9 MIH6MAwGA1UdEwQFMAMBAf8wHQYDVR0OBBYEFEv9FCWJHefBcIPX9p8RHCVOGe6u MIHKBgNVHSMEgcIwgb+AFEv9FCWJHefBcIPX9p8RHCVOGe6uoYGbpIGYMIGVMQsw CQYDVQQGEwJVUzELMAkGA1UECBMCRkwxFDASBgNVBAcTC1dpbnRlciBQYXJrMREw DwYDVQQKEwhJUFZhbmlzaDEVMBMGA1UECxMMSVBWYW5pc2ggVlBOMRQwEgYDVQQD EwtJUFZhbmlzaCBDQTEjMCEGCSqGSIb3DQEJARYUc3VwcG9ydEBpcHZhbmlzaC5j b22CCQDGCs0kvLjygzANBgkqhkiG9w0BAQ0FAAOCAQEAI2dkh/43ksV2fdYpVGhY aFZPVqCJoToCez0IvOmLeLGzow+EOSrY508oyjYeNP4VJEjApqo0NrMbKl8g/8bp LBcotOCF1c1HZ+y9v7648uumh01SMjsbBeHOuQcLb+7gX6c0pEmxWv8qj5JiW3/1 L1bktnjW5Yp5oFkFSMXjOnIoYKHyKLjN2jtwH6XowUNYpg4qVtKU0CXPdOznWcd9 /zSfa393HwJPeeVLbKYaFMC4IEbIUmKYtWyoJ9pJ58smU3pWsHZUg9Zc0LZZNjkN lBdQSLmUHAJ33Bd7pJS0JQeiWviC+4UTmzEWRKa7pDGnYRYNu2cUo0/voStphv8E VA== -----END CERTIFICATE-----
CLICK APPLY SETTINGS
Leave all settings not mentioned above as their default setting.
Navigate to Status > OpenVPN
In some cases you may notice that the location is not showing the same location as the server you have input in your router settings; this is because geo tracking tools are often tricked by VPN connections. As long as you see an IP address that is not the same as your normal Internet IP address then you are indeed connected to IPVanish.
Navigate to Administration > Backup.
A reset of the FlashRouter should only be performed in the following instances:
Asus FlashRouters:
Aircove, Linksys and Netgear FlashRouters:
1. Connect to the FlashRouter’s network via ethernet cable or wireless.
The wireless network will appear as “Aircove”, “Linksys##”, “Netgear##”, or “Asus” and the password to join the network will be the default wireless password printed on the bottom of the router.
2. Open your web browser and enter expressvpnrouter.com or 192.168.132.1 in the URL.
3. Click Get Started on the ExpressVPN page that is displayed.
4a. If your FlashRouter is wired to the Internet correctly then you will be prompted to enter your ExpressVPN Activation Code found in your ExpressVPN account. Paste that in and click Sign in to ExpressVPN.
4b. If your FlashRouter is not wired correctly or is not receiving Internet properly make sure you are wired as detailed in the diagram that appears. If you are stuck at this screen we recommend powering off your ISP modem and any other router that the ExpressVPN FlashRouter is wired to and then powering them back up one by one.
Proceed with step “4a” above once the router is receiving Internet and you are prompted to enter the Activation Code.
5. Select if you want to share anonymous crash report data with ExpressVPN to help them improve the firmware for future releases.
6. Set the WiFi name and password your wireless devices will use to connect to the FlashRouter’s network. Make sure the WiFi name is unique and not a duplicate of an existing WiFi name if you change it. You can also leave it as the default information if you like. Click Continue.
7. Enter the admin password you will use to access the ExpressVPN router settings. Be sure to TYPE CAREFULLY when setting the admin password as a typo will result in needing to reset the router again. Note this password in a secure location or commit it to memory.
8. Your ExpressVPN FlashRouter is now fully setup!
If you are not already a PIA user Sign Up Now.
Log in to your account on the PIA website.
The below servers are the only servers compatible with PIA router connections. Dedicated IP Addresses are not able to connect via routers.
us-california.privacy.network
us-newjersey.privacy.network
us-chicago.privacy.network
us-texas.privacy.network
us-florida.privacy.network
us-seattle.privacy.network
us3.privacy.network
us-siliconvalley.privacy.network
us-newyorkcity.privacy.network
us-washingtondc.privacy.network
us-atlanta.privacy.network
us-houston.privacy.network
us-denver.privacy.network
uk-london.privacy.network
uk-manchester.privacy.network
ca-toronto.privacy.network
ca-montreal.privacy.network
au-sydney.privacy.network
aus-melbourne.privacy.network
aus-perth.privacy.network
de-berlin.privacy.network
de-frankfurt.privacy.network
ae.privacy.network
austria.privacy.network
dz.privacy.network
ad.privacy.network
ar.privacy.network
yerevan.privacy.network
bahamas.privacy.network
bangladesh.privacy.network
brussels.privacy.network
sofia.privacy.network
cambodia.privacy.network
china.privacy.network
cyprus.privacy.network
czech.privacy.network
denmark.privacy.network
egypt.privacy.network
fi.privacy.network
france.privacy.network
georgia.privacy.network
greenland.privacy.network
hungary.privacy.network
is.privacy.network
in.privacy.network
iran.privacy.network
ireland.privacy.network
man.privacy.network
israel.privacy.network
italy.privacy.network
japan.privacy.network
kazakhstan.privacy.network
liechtenstein.privacy.network
lu.privacy.network
macau.privacy.network
malta.privacy.network
mexico.privacy.network
md.privacy.network
monaco.privacy.network
mongolia.privacy.network
montenegro.privacy.network
morocco.privacy.network
nl-amsterdam.privacy.network
nz.privacy.network
nigeria.privacy.network
no.privacy.network
panama.privacy.network
philippines.privacy.network
poland.privacy.network
qatar.privacy.network
ro.privacy.network
rs.privacy.network
saudiarabia.privacy.network
spain.privacy.network
srilanka.privacy.network
sweden.privacy.network
swiss.privacy.network
sg.privacy.network
tr.privacy.network
taiwan.privacy.network
ua.privacy.network
venezuela.privacy.network
vietnam.privacy.network
za.privacy.network
Navigate to Services > VPN
PIA offers two different Encryption levels.
Default Encryption (AES-128) typically provides faster speeds.
Strong Encryption (AES-256) provides stronger encryption.
Follow the table below of the one that fits your needs.
Start OpenVPN Client
If you wish to disable your VPN connection simply set this to Disable at any time and click Apply Settings.
Server IP/Name
Copy and paste the server you would like to connect to from the server list above. Be sure there are no extra spaces or characters.
If you wish to change PIA connection locations, THIS IS THE ONLY FIELD YOU NEED TO CHANGE.
Port
1198
Tunnel Device
TUN
Tunnel Protocol
UDP
Encryption cipher
AES-128-CBC
Hash Algorithm
SHA1
First Data Cipher
Not set
Second Data Cipher
Not set
Third Data Cipher
Not set
Userpass Authentication
Enable
Username
Enter the Username you successfully logged in to your PIA account with.
Password
Enter the Password you successfully logged in to your PIA account with.
Advanced Options
Enable
TLS Cipher
None
LZO Compression
Disabled
NAT
Enable
Firewall Protection
Enable
Additional Config
persist-key
persist-tun
Policy Based Routing
This field can be used for split VPN and Dual Gateway routing.
CA Cert
-----BEGIN CERTIFICATE----- MIIFqzCCBJOgAwIBAgIJAKZ7D5Yv87qDMA0GCSqGSIb3DQEBDQUAMIHoMQswCQYD VQQGEwJVUzELMAkGA1UECBMCQ0ExEzARBgNVBAcTCkxvc0FuZ2VsZXMxIDAeBgNV BAoTF1ByaXZhdGUgSW50ZXJuZXQgQWNjZXNzMSAwHgYDVQQLExdQcml2YXRlIElu dGVybmV0IEFjY2VzczEgMB4GA1UEAxMXUHJpdmF0ZSBJbnRlcm5ldCBBY2Nlc3Mx IDAeBgNVBCkTF1ByaXZhdGUgSW50ZXJuZXQgQWNjZXNzMS8wLQYJKoZIhvcNAQkB FiBzZWN1cmVAcHJpdmF0ZWludGVybmV0YWNjZXNzLmNvbTAeFw0xNDA0MTcxNzM1 MThaFw0zNDA0MTIxNzM1MThaMIHoMQswCQYDVQQGEwJVUzELMAkGA1UECBMCQ0Ex EzARBgNVBAcTCkxvc0FuZ2VsZXMxIDAeBgNVBAoTF1ByaXZhdGUgSW50ZXJuZXQg QWNjZXNzMSAwHgYDVQQLExdQcml2YXRlIEludGVybmV0IEFjY2VzczEgMB4GA1UE AxMXUHJpdmF0ZSBJbnRlcm5ldCBBY2Nlc3MxIDAeBgNVBCkTF1ByaXZhdGUgSW50 ZXJuZXQgQWNjZXNzMS8wLQYJKoZIhvcNAQkBFiBzZWN1cmVAcHJpdmF0ZWludGVy bmV0YWNjZXNzLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAPXD L1L9tX6DGf36liA7UBTy5I869z0UVo3lImfOs/GSiFKPtInlesP65577nd7UNzzX lH/P/CnFPdBWlLp5ze3HRBCc/Avgr5CdMRkEsySL5GHBZsx6w2cayQ2EcRhVTwWp cdldeNO+pPr9rIgPrtXqT4SWViTQRBeGM8CDxAyTopTsobjSiYZCF9Ta1gunl0G/ 8Vfp+SXfYCC+ZzWvP+L1pFhPRqzQQ8k+wMZIovObK1s+nlwPaLyayzw9a8sUnvWB /5rGPdIYnQWPgoNlLN9HpSmsAcw2z8DXI9pIxbr74cb3/HSfuYGOLkRqrOk6h4RC OfuWoTrZup1uEOn+fw8CAwEAAaOCAVQwggFQMB0GA1UdDgQWBBQv63nQ/pJAt5tL y8VJcbHe22ZOsjCCAR8GA1UdIwSCARYwggESgBQv63nQ/pJAt5tLy8VJcbHe22ZO sqGB7qSB6zCB6DELMAkGA1UEBhMCVVMxCzAJBgNVBAgTAkNBMRMwEQYDVQQHEwpM b3NBbmdlbGVzMSAwHgYDVQQKExdQcml2YXRlIEludGVybmV0IEFjY2VzczEgMB4G A1UECxMXUHJpdmF0ZSBJbnRlcm5ldCBBY2Nlc3MxIDAeBgNVBAMTF1ByaXZhdGUg SW50ZXJuZXQgQWNjZXNzMSAwHgYDVQQpExdQcml2YXRlIEludGVybmV0IEFjY2Vz czEvMC0GCSqGSIb3DQEJARYgc2VjdXJlQHByaXZhdGVpbnRlcm5ldGFjY2Vzcy5j b22CCQCmew+WL/O6gzAMBgNVHRMEBTADAQH/MA0GCSqGSIb3DQEBDQUAA4IBAQAn a5PgrtxfwTumD4+3/SYvwoD66cB8IcK//h1mCzAduU8KgUXocLx7QgJWo9lnZ8xU ryXvWab2usg4fqk7FPi00bED4f4qVQFVfGfPZIH9QQ7/48bPM9RyfzImZWUCenK3 7pdw4Bvgoys2rHLHbGen7f28knT2j/cbMxd78tQc20TIObGjo8+ISTRclSTRBtyC GohseKYpTS9himFERpUgNtefvYHbn70mIOzfOJFTVqfrptf9jXa9N8Mpy3ayfodz 1wiqdteqFXkTYoSDctgKMiZ6GdocK9nMroQipIQtpnwd4yBDWIyC6Bvlkrq5TQUt YDQ8z9v+DMO6iwyIDRiU -----END CERTIFICATE-----
CLICK APPLY SETTINGS
Leave all settings not mentioned above as their default setting.
Start OpenVPN Client
If you wish to disable your VPN connection simply set this to Disable at any time and click Apply Settings.
Server IP/Name
Copy and paste the server you would like to connect to from the server list above. Be sure there are no extra spaces or characters.
If you wish to change PIA connection locations, THIS IS THE ONLY FIELD YOU NEED TO CHANGE.
Port
1197
Tunnel Device
TUN
Tunnel Protocol
UDP
Encryption cipher
AES-256-CBC
Hash Algorithm
SHA256
First Data Cipher
Not set
Second Data Cipher
Not set
Third Data Cipher
Not set
Userpass Authentication
Enable
Username
Enter the Username you successfully logged in to your PIA account with.
Password
Enter the Password you successfully logged in to your PIA account with.
Advanced Options
Enable
TLS Cipher
None
LZO Compression
Adaptive
NAT
Enable
Firewall Protection
Enable
Additional Config
persist-key
persist-tun
Policy Based Routing
This field can be used for split VPN and Dual Gateway routing.
CA Cert
-----BEGIN CERTIFICATE----- MIIHqzCCBZOgAwIBAgIJAJ0u+vODZJntMA0GCSqGSIb3DQEBDQUAMIHoMQswCQYD VQQGEwJVUzELMAkGA1UECBMCQ0ExEzARBgNVBAcTCkxvc0FuZ2VsZXMxIDAeBgNV BAoTF1ByaXZhdGUgSW50ZXJuZXQgQWNjZXNzMSAwHgYDVQQLExdQcml2YXRlIElu dGVybmV0IEFjY2VzczEgMB4GA1UEAxMXUHJpdmF0ZSBJbnRlcm5ldCBBY2Nlc3Mx IDAeBgNVBCkTF1ByaXZhdGUgSW50ZXJuZXQgQWNjZXNzMS8wLQYJKoZIhvcNAQkB FiBzZWN1cmVAcHJpdmF0ZWludGVybmV0YWNjZXNzLmNvbTAeFw0xNDA0MTcxNzQw MzNaFw0zNDA0MTIxNzQwMzNaMIHoMQswCQYDVQQGEwJVUzELMAkGA1UECBMCQ0Ex EzARBgNVBAcTCkxvc0FuZ2VsZXMxIDAeBgNVBAoTF1ByaXZhdGUgSW50ZXJuZXQg QWNjZXNzMSAwHgYDVQQLExdQcml2YXRlIEludGVybmV0IEFjY2VzczEgMB4GA1UE AxMXUHJpdmF0ZSBJbnRlcm5ldCBBY2Nlc3MxIDAeBgNVBCkTF1ByaXZhdGUgSW50 ZXJuZXQgQWNjZXNzMS8wLQYJKoZIhvcNAQkBFiBzZWN1cmVAcHJpdmF0ZWludGVy bmV0YWNjZXNzLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBALVk hjumaqBbL8aSgj6xbX1QPTfTd1qHsAZd2B97m8Vw31c/2yQgZNf5qZY0+jOIHULN De4R9TIvyBEbvnAg/OkPw8n/+ScgYOeH876VUXzjLDBnDb8DLr/+w9oVsuDeFJ9K V2UFM1OYX0SnkHnrYAN2QLF98ESK4NCSU01h5zkcgmQ+qKSfA9Ny0/UpsKPBFqsQ 25NvjDWFhCpeqCHKUJ4Be27CDbSl7lAkBuHMPHJs8f8xPgAbHRXZOxVCpayZ2SND fCwsnGWpWFoMGvdMbygngCn6jA/W1VSFOlRlfLuuGe7QFfDwA0jaLCxuWt/BgZyl p7tAzYKR8lnWmtUCPm4+BtjyVDYtDCiGBD9Z4P13RFWvJHw5aapx/5W/CuvVyI7p Kwvc2IT+KPxCUhH1XI8ca5RN3C9NoPJJf6qpg4g0rJH3aaWkoMRrYvQ+5PXXYUzj tRHImghRGd/ydERYoAZXuGSbPkm9Y/p2X8unLcW+F0xpJD98+ZI+tzSsI99Zs5wi jSUGYr9/j18KHFTMQ8n+1jauc5bCCegN27dPeKXNSZ5riXFL2XX6BkY68y58UaNz meGMiUL9BOV1iV+PMb7B7PYs7oFLjAhh0EdyvfHkrh/ZV9BEhtFa7yXp8XR0J6vz 1YV9R6DYJmLjOEbhU8N0gc3tZm4Qz39lIIG6w3FDAgMBAAGjggFUMIIBUDAdBgNV HQ4EFgQUrsRtyWJftjpdRM0+925Y6Cl08SUwggEfBgNVHSMEggEWMIIBEoAUrsRt yWJftjpdRM0+925Y6Cl08SWhge6kgeswgegxCzAJBgNVBAYTAlVTMQswCQYDVQQI EwJDQTETMBEGA1UEBxMKTG9zQW5nZWxlczEgMB4GA1UEChMXUHJpdmF0ZSBJbnRl cm5ldCBBY2Nlc3MxIDAeBgNVBAsTF1ByaXZhdGUgSW50ZXJuZXQgQWNjZXNzMSAw HgYDVQQDExdQcml2YXRlIEludGVybmV0IEFjY2VzczEgMB4GA1UEKRMXUHJpdmF0 ZSBJbnRlcm5ldCBBY2Nlc3MxLzAtBgkqhkiG9w0BCQEWIHNlY3VyZUBwcml2YXRl aW50ZXJuZXRhY2Nlc3MuY29tggkAnS7684Nkme0wDAYDVR0TBAUwAwEB/zANBgkq hkiG9w0BAQ0FAAOCAgEAJsfhsPk3r8kLXLxY+v+vHzbr4ufNtqnL9/1Uuf8NrsCt pXAoyZ0YqfbkWx3NHTZ7OE9ZRhdMP/RqHQE1p4N4Sa1nZKhTKasV6KhHDqSCt/dv Em89xWm2MVA7nyzQxVlHa9AkcBaemcXEiyT19XdpiXOP4Vhs+J1R5m8zQOxZlV1G tF9vsXmJqWZpOVPmZ8f35BCsYPvv4yMewnrtAC8PFEK/bOPeYcKN50bol22QYaZu LfpkHfNiFTnfMh8sl/ablPyNY7DUNiP5DRcMdIwmfGQxR5WEQoHL3yPJ42LkB5zs 6jIm26DGNXfwura/mi105+ENH1CaROtRYwkiHb08U6qLXXJz80mWJkT90nr8Asj3 5xN2cUppg74nG3YVav/38P48T56hG1NHbYF5uOCske19F6wi9maUoto/3vEr0rnX JUp2KODmKdvBI7co245lHBABWikk8VfejQSlCtDBXn644ZMtAdoxKNfR2WTFVEwJ iyd1Fzx0yujuiXDROLhISLQDRjVVAvawrAtLZWYK31bY7KlezPlQnl/D9Asxe85l 8jO5+0LdJ6VyOs/Hd4w52alDW/MFySDZSfQHMTIc30hLBJ8OnCEIvluVQQ2UQvoW +no177N9L2Y+M9TcTA62ZyMXShHQGeh20rb4kK8f+iFX8NxtdHVSkxMEFSfDDyQ= -----END CERTIFICATE-----
CLICK APPLY SETTINGS
Leave all settings not mentioned above as their default setting.
Navigate to Status > OpenVPN
In some cases you may notice that the location is not showing the same location as the server you have input in your router settings; this is because geo tracking tools are often tricked by VPN connections. As long as you see an IP address that is not the same as your normal Internet IP address then you are indeed connected to PIA.
Navigate to Administration > Backup
Router not connecting to the internet? Follow these simple steps!
A slowly blinking power light means that the FlashRouter was somehow put into Rescue/Restore/Recovery Mode. This usually happens if the reset button was held down for too long.
This may also happen if you have incorrectly tried to update the firmware on your FlashRouter. The first thing to try is a simple reboot of the router to see if it exits restore mode.
If a reboot does not clear up the issue then try to reset and reconfigure your FlashRouter.
If you are not already an ExpressVPN user Sign Up Now.
1. Log in to your account on the ExpressVPN website.
2. Successfully log in with your account information. Select More.
3. Select Manual Configuration and copy the Username and Password that are displayed on the right hand side of the screen.
usa-atlanta-ca-version-2.expressnetw.com
usa-boston-ca-version-2.expressnetw.com
usa-chicago-ca-version-2.expressnetw.com
usa-dallas-ca-version-2.expressnetw.com
usa-dallas-2-ca-version-2.expressnetw.com
usa-denver-ca-version-2.expressnetw.com
usa-kansascity-ca-version-2.expressnetw.com
usa-losangeles-ca-version-2.expressnetw.com
usa-losangeles-1-ca-version-2.expressnetw.com
usa-losangeles-2-ca-version-2.expressnetw.com
usa-losangeles-3-ca-version-2.expressnetw.com
usa-los-angeles-4-ca-version-2.expressnetw.com
usa-miami-ca-version-2.expressnetw.com
usa-miami-2-ca-version-2.expressnetw.com
usa-minneapolis-ca-version-2.expressnetw.com
usa-newjersey-1-ca-version-2.expressnetw.com
usa-newjersey-3-ca-version-2.expressnetw.com
usa-newyork-ca-version-2.expressnetw.com
us-new-york-2-ca-version-2.expressnetw.com
usa-phoenix-ca-version-2.expressnetw.com
usa-saltlakecity-ca-version-2.expressnetw.com
usa-sanfrancisco-ca-version-2.expressnetw.com
usa-sanjose-ca-version-2.expressnetw.com
usa-seattle-ca-version-2.expressnetw.com
usa-tampa-1-ca-version-2.expressnetw.com
usa-virginia-ca-version-2.expressnetw.com
usa-washingtondc-ca-version-2.expressnetw.com
usa-washingtondc-2-ca-version-2.expressnetw.com
canada-montreal-ca-version-2.expressnetw.com
canada-toronto-ca-version-2.expressnetw.com
canada-toronto-2-ca-version-2.expressnetw.com
canada-vancouver-ca-version-2.expressnetw.com
mexico-ca-version-2.expressnetw.com
argentina-ca-version-2.expressnetw.com
brazil-ca-version-2.expressnetw.com
brazil-2-ca-version-2.expressnetw.com
chile-ca-version-2.expressnetw.com
colombia-ca-version-2.expressnetw.com
costarica-ca-version-2.expressnetw.com
ecuador-ca-version-2.expressnetw.com
guatemala-ca-version-2.expressnetw.com
panama-ca-version-2.expressnetw.com
peru-ca-version-2.expressnetw.com
uruguay-ca-version-2.expressnetw.com
venezuela-ca-version-2.expressnetw.com
uk-berkshire-ca-version-2.expressnetw.com
uk-berkshire-2-ca-version-2.expressnetw.com
uk-docklands-ca-version-2.expressnetw.com
uk-east-london-ca-version-2.expressnetw.com
uk-kent-ca-version-2.expressnetw.com
uk-london-ca-version-2.expressnetw.com
france-paris-1-ca-version-2.expressnetw.com
france-paris-2-ca-version-2.expressnetw.com
france-strasbourg-ca-version-2.expressnetw.com
germany-darmstadt-ca-version-2.expressnetw.com
germany-frankfurt-1-ca-version-2.expressnetw.com
germany-frankfurt-2-ca-version-2.expressnetw.com
germany-nuremberg-ca-version-2.expressnetw.com
italy-cosenza-ca-version-2.expressnetw.com
italy-milan-ca-version-2.expressnetw.com
netherlands-amsterdam-ca-version-2.expressnetw.com
netherlands-rotterdam-ca-version-2.expressnetw.com
netherlands-thehague-ca-version-2.expressnetw.com
spain-barcelona-ca-version-2.expressnetw.com
spain-ca-version-2.expressnetw.com
sweden-ca-version-2.expressnetw.com
sweden-2-ca-version-2.expressnetw.com
switzerland-ca-version-2.expressnetw.com
switzerland-2-ca-version-2.expressnetw.com
albania-ca-version-2.expressnetw.com
andorra-ca-version-2.expressnetw.com
armenia-ca-version-2.expressnetw.com
austria-ca-version-2.expressnetw.com
azerbaijan-ca-version-2.expressnetw.com
belarus-ca-version-2.expressnetw.com
belgium-ca-version-2.expressnetw.com
bosniaandherzegovina-ca-version-2.expressnetw.com
bulgaria-ca-version-2.expressnetw.com
croatia-ca-version-2.expressnetw.com
cyprus-ca-version-2.expressnetw.com
czechrepublic-ca-version-2.expressnetw.com
denmark-ca-version-2.expressnetw.com
estonia-ca-version-2.expressnetw.com
finland-ca-version-2.expressnetw.com
georgia-ca-version-2.expressnetw.com
greece-ca-version-2.expressnetw.com
hungary-ca-version-2.expressnetw.com
iceland-ca-version-2.expressnetw.com
ireland-ca-version-2.expressnetw.com
isleofman-ca-version-2.expressnetw.com
jersey-ca-version-2.expressnetw.com
latvia-ca-version-2.expressnetw.com
liechtenstein-ca-version-2.expressnetw.com
lithuania-ca-version-2.expressnetw.com
luxembourg-ca-version-2.expressnetw.com
macedonia-ca-version-2.expressnetw.com
malta-ca-version-2.expressnetw.com
moldova-ca-version-2.expressnetw.com
monaco-ca-version-2.expressnetw.com
montenegro-ca-version-2.expressnetw.com
norway-ca-version-2.expressnetw.com
poland-ca-version-2.expressnetw.com
portugal-ca-version-2.expressnetw.com
romania-ca-version-2.expressnetw.com
serbia-ca-version-2.expressnetw.com
slovakia-ca-version-2.expressnetw.com
slovenia-ca-version-2.expressnetw.com
ukraine-ca-version-2.expressnetw.com
australia-brisbane-ca-version-2.expressnetw.com
australia-melbourne-ca-version-2.expressnetw.com
australia-perth-ca-version-2.expressnetw.com
australia-sydney-ca-version-2.expressnetw.com
australia-sydney-2-ca-version-2.expressnetw.com
australia-sydney-3-ca-version-2.expressnetw.com
hongkong-2-ca-version-2.expressnetw.com
hongkong4-ca-version-2.expressnetw.com
hongkong-1-ca-version-2.expressnetw.com
japan-tokyo-1-ca-version-2.expressnetw.com
japan-tokyo-2-ca-version-2.expressnetw.com
india-chennai-ca-version-2.expressnetw.com
india-mumbai-1-ca-version-2.expressnetw.com
singapore-cbd-ca-version-2.expressnetw.com
singapore-jurong-ca-version-2.expressnetw.com
southkorea-ca-version-2.expressnetw.com
southkorea2-ca-version-2.expressnetw.com
bangladesh-ca-version-2.expressnetw.com
bhutan-ca-version-2.expressnetw.com
brunei-ca-version-2.expressnetw.com
cambodia-ca-version-2.expressnetw.com
indonesia-ca-version-2.expressnetw.com
kazakhstan-ca-version-2.expressnetw.com
kyrgyzstan-ca-version-2.expressnetw.com
laos-ca-version-2.expressnetw.com
macau-ca-version-2.expressnetw.com
malaysia-ca-version-2.expressnetw.com
mongolia-ca-version-2.expressnetw.com
myanmar-ca-version-2.expressnetw.com
nepal-ca-version-2.expressnetw.com
newzealand-ca-version-2.expressnetw.com
pakistan-ca-version-2.expressnetw.com
ph-via-sing-ca-version-2.expressnetw.com
srilanka-ca-version-2.expressnetw.com
taiwan-3-ca-version-2.expressnetw.com
thailand-ca-version-2.expressnetw.com
vietnam-ca-version-2.expressnetw.com
algeria-ca-version-2.expressnetw.com
israel-ca-version-2.expressnetw.com
kenya-ca-version-2.expressnetw.com
southafrica-ca-version-2.expressnetw.com
Navigate to Services > VPN
Start OpenVPN Client
If you wish to disable your VPN connection simply set this to Disable at any time and click Apply Settings.
Server IP/Name
Copy and paste the server you would like to connect to from the server list above. Be sure there are no extra spaces or characters.
If you wish to change ExpressVPN connection locations, THE ONLY SETTING YOU NEED TO CHANGE IS THE EXPRESSVPN SERVER ADDRESS.*
Port
1195
Tunnel Device
TUN
Tunnel Protocol
UDP
Encryption cipher
AES-256-CBC
Hash Algorithm
SHA512
User Pass Authentication
Enable
Username
Enter the Username you found in the Manual Config section.
Password
Enter the Password you found in the Manual Config section.
Advanced Options
Enable
TLS Cipher
None
LZO Compression
Adaptive
NAT
Enable
Firewall Protection
Enable
nsCertType verification
Checked
TLS Auth Key
-----BEGIN OpenVPN Static key V1----- 48d9999bd71095b10649c7cb471c1051 b1afdece597cea06909b99303a18c674 01597b12c04a787e98cdb619ee960d90 a0165529dc650f3a5c6fbe77c91c137d cf55d863fcbe314df5f0b45dbe974d9b de33ef5b4803c3985531c6c23ca6906d 6cd028efc8585d1b9e71003566bd7891 b9cc9212bcba510109922eed87f5c8e6 6d8e59cbd82575261f02777372b2cd4c a5214c4a6513ff26dd568f574fd40d6c d450fc788160ff68434ce2bf6afb00e7 10a3198538f14c4d45d84ab42637872e 778a6b35a124e700920879f1d003ba93 dccdb953cdf32bea03f365760b0ed800 2098d4ce20d045b45a83a8432cc73767 7aed27125592a7148d25c87fdbe0a3f6 -----END OpenVPN Static key V1-----
Additional Config
persist-key
persist-tun
fragment 1300
mssfix 1450
keysize 256
Policy Based Routing
This field can be used for split VPN and Dual Gateway routing.
CA Cert
-----BEGIN CERTIFICATE----- MIIF+DCCA+CgAwIBAgIBATANBgkqhkiG9w0BAQ0FADCBhDELMAkGA1UEBhMCVkcx DDAKBgNVBAgMA0JWSTETMBEGA1UECgwKRXhwcmVzc1ZQTjETMBEGA1UECwwKRXhw cmVzc1ZQTjEWMBQGA1UEAwwNRXhwcmVzc1ZQTiBDQTElMCMGCSqGSIb3DQEJARYW c3VwcG9ydEBleHByZXNzdnBuLmNvbTAeFw0xNTEwMjEwMDAwMDBaFw0yNjA0MDEy MTEyMDBaMIGEMQswCQYDVQQGEwJWRzEMMAoGA1UECAwDQlZJMRMwEQYDVQQKDApF eHByZXNzVlBOMRMwEQYDVQQLDApFeHByZXNzVlBOMRYwFAYDVQQDDA1FeHByZXNz VlBOIENBMSUwIwYJKoZIhvcNAQkBFhZzdXBwb3J0QGV4cHJlc3N2cG4uY29tMIIC IjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxzXvHZ25OsESKRMQFINHJNqE 9kVRLWJS50oVB2jxobudPhCsWvJSApvar8CB2RrqkVMhXu2HT3FBtDL91INg070q AyjjRpzEbDPWqQ1+G0tk0sjiJt2mXPJK2IlNFnhe6rTs09Pkpcp8qRhfZay/dIlm agohQAr4JvYL1Ajg9A3sLb8JkY03H6GhOF8EKYTqhrEppCcg4sQKQhNSytRoQAm8 Ta+tnTYIedwWpqjUXP9YXFOvljPaixfYug24eAkpTjeuWTcELSyfnuiBeK+z9+5O YunhqFt2QZMq33kLFZGMN2gHRCzngxxphurypsPRo7jiFgQI1yLt8uZsEZ+otGEK 91jjKfOC+g9TBy2RUtxk1neWcQ6syXDuc3rBNrGA8iM0ZoEqQ1BC8xWr3NYlSjqN +1mgpTAX3/Dxze4GzHd7AmYaYJV8xnKBVNphlMlg1giCAu5QXjMxPbfCgZiEFq/u q0SOKQJeT3AI/uVPSvwCMWByjyMbDpKKAK8Hy3UT5m4bCNu8J7bxj+vdnq0A2HPw tF0FwBl/TIM3zNsyFrZZ0j6jLRT50mFsgDBKcD4L/J5rjdCsKPu5rodhxe38rCx2 GknP1Zkov4yoVCcR48+CQwg3oBkq0/EflvWUvcYApzs9SomUM/g+8Q/V0WOfJmFW uxN9YntZlnzHRSRjrvMCAwEAAaNzMHEwHQYDVR0OBBYEFIzmQGj8xS+0LLklwqHD 45VVOZRJMB8GA1UdIwQYMBaAFIzmQGj8xS+0LLklwqHD45VVOZRJMA8GA1UdEwEB /wQFMAMBAf8wCwYDVR0PBAQDAgEGMBEGCWCGSAGG+EIBAQQEAwIBFjANBgkqhkiG 9w0BAQ0FAAOCAgEAbHfuMKtojm1NgX7qSU2Rm2B5L8G0FuFP0L40dj8O5WHt45j2 z8coMK90vrUnQEZNQmRzot7v3XjVzVlxBWYSsCEApTsSDNi/4BNFP8H/BUUtJuy2 GFTO4wDVJnqNkZOHBmyVD75s1Y+W8a+zB4jkMeDEhOHZdwQ0l1fJDDgXal5f1UT5 F5WH6/RwHmWTwX4GxuCiIVtx70CjkXqhM8yZtTp1UtHLRNYcNSIes0vrAPHPgoA5 z9B8UvsOjuP+mfcjzi0LGGrY+2pJu0BKO2dRnarIZZABETIisI3FokoTszx5jpRP yxyUTuRDKWHrvi0PPtOmC8nFahfugWFUi6uBsqCaSeuex+ahnTPCq0b1l0Ozpg0Y eE8CW1TL9Y92b01up2c+PP6wZOIm3JyTH+L5smDFbh80V42dKyGNdPXMg5IcJhj3 YfAy4k8h/qbWY57KFcIzKx40bFsoI7PeydbGtT/dIoFLSZRLW5bleXNgG9mXZp27 0UeEC6CpATCS6uVl8LVT1I02uulHUpFaRmTEOrmMxsXGt6UAwYTY55K/B8uuID34 1xKbeC0kzhuN2gsL5UJaocBHyWK/AqwbeBttdhOCLwoaj7+nSViPxICObKrg3qav GNCvtwy/fEegK9X/wlp2e2CFlIhFbadeXOBr9Fn8ypYPP17mTqe98OJYM04= -----END CERTIFICATE-----
Public Client Cert
-----BEGIN CERTIFICATE----- MIIDTjCCAregAwIBAgIDKzZvMA0GCSqGSIb3DQEBCwUAMIGFMQswCQYDVQQGEwJV UzELMAkGA1UECBMCQ0ExFTATBgNVBAcTDFNhbkZyYW5jaXNjbzEVMBMGA1UEChMM Rm9ydC1GdW5zdG9uMRgwFgYDVQQDEw9Gb3J0LUZ1bnN0b24gQ0ExITAfBgkqhkiG 9w0BCQEWEm1lQG15aG9zdC5teWRvbWFpbjAgFw0xNjExMDMwMzA2MThaGA8yMDY2 MTEwMzAzMDYxOFowgYoxCzAJBgNVBAYTAlZHMQwwCgYDVQQIDANCVkkxEzARBgNV BAoMCkV4cHJlc3NWUE4xEzARBgNVBAsMCkV4cHJlc3NWUE4xHDAaBgNVBAMME2V4 cHJlc3N2cG5fY3VzdG9tZXIxJTAjBgkqhkiG9w0BCQEWFnN1cHBvcnRAZXhwcmVz c3Zwbi5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrOYt/KOi2 uMDGev3pXg8j1SO4J/4EVWDF7vJcKr2jrZlqD/zuAFx2W1YWvwumPO6PKH4PU962 1aNdiumaUkv/RplCfznnnxqobhJuTE2oA+rS1bOq+9OhHwF9jgNXNVk+XX4d0toS T5uGE6Z3OdmPBur8o5AlCf78PDSAwpFOw5HrgLqOEU4hTweC1/czX2VsvsHv22HR I6JMZgP8gGQii/p9iukqfaJvGdPciL5p1QRBUQIi8P8pNvEp1pVIpxYj7/LOUqb2 DxFvgmp2v1IQ0Yu88SWsFk84+xAYHzfkLyS31Sqj5uLRBnJqx3fIlOihQ50GI72f wPMwo+OippvVAgMBAAGjPzA9MAwGA1UdEwEB/wQCMAAwDgYDVR0PAQH/BAQDAgSw MB0GA1UdDgQWBBSkBM1TCX9kBgFsv2RmOzudMXa9njANBgkqhkiG9w0BAQsFAAOB gQA+2e4b+33zFmA+1ZQ46kWkfiB+fEeDyMwMLeYYyDS2d8mZhNZKdOw7dy4Ifz9V qzp4aKuQ6j61c6k1UaQQL0tskqWVzslSFvs9NZyUAJLLdGUc5TT2MiLwiXQwd4Uv H6bGeePdhvB4+ZbW7VMD7TE8hZhjhAL4F6yAP1EQvg3LDA== -----END CERTIFICATE-----
Private Client Key
-----BEGIN RSA PRIVATE KEY----- MIIEpAIBAAKCAQEAqzmLfyjotrjAxnr96V4PI9UjuCf+BFVgxe7yXCq9o62Zag/8 7gBcdltWFr8Lpjzujyh+D1PettWjXYrpmlJL/0aZQn85558aqG4SbkxNqAPq0tWz qvvToR8BfY4DVzVZPl1+HdLaEk+bhhOmdznZjwbq/KOQJQn+/Dw0gMKRTsOR64C6 jhFOIU8Hgtf3M19lbL7B79th0SOiTGYD/IBkIov6fYrpKn2ibxnT3Ii+adUEQVEC IvD/KTbxKdaVSKcWI+/yzlKm9g8Rb4Jqdr9SENGLvPElrBZPOPsQGB835C8kt9Uq o+bi0QZyasd3yJTooUOdBiO9n8DzMKPjoqab1QIDAQABAoIBAHgsekC0SKi+AOcN OZqJ3pxqophE0V7fQX2KWGXhxZnUZMFxGTc936deMYzjZ1y0lUa6x8cgOUcfqHol 3hDmw9oWBckLHGv5Wi9umdb6DOLoZO62+FQATSdfaJ9jheq2Ub2YxsRN0apaXzB6 KDKz0oM0+sZ4Udn9Kw6DfuIELRIWwEx4w0v3gKW7YLC4Jkc4AwLkPK03xEA/qImf kCmaMPLhrgVQt+IFfP8bXzL7CCC04rNU/IS8pyjex+iUolnQZlbXntF7Bm4V2mz0 827ZVqrgAb/hEQRlsTW3rRkVh+rrdoUE7BCZRTFmRCbLoShjN6XuSf4sAus8ch4U EN12gN0CgYEA4o/tSvij1iPaXLmt4KOEuxqmSGB8MLKhFde8lBbNdrDgxiIH9bH7 khKx15XRTX0qLDbs8b2/UJygZG0Aa1kIBqZTXTgeMAuxPRTesALJPdqQ/ROnbJcd FkI7gllrAG8VB0fH4wTRsRd0vWEB6YlCdE107u6LEsLAHxOj9Q5819cCgYEAwXjx 9RkQ2qITBx5Ewib8YsltA0n3cmRomPicLlsnKV5DfvyCLpFIsZ1h3f9dUpfxRLwz p8wcoLiq9cCoOGdu1udw/yBTqmhaXWhUK/g77f9Ze2ZB1OEhuyKLYJ1vW/h/Z/a1 aPCMxZqsDTPCePsuO8Cez5gqs8LjM3W7EyzRxDMCgYEAvhHrDFt975fSiLoJgo0M PIAGAnBXn+8sLwv3m/FpW+rWF8LTFK/Fku12H5wDpNOdvswxijkauIE+GiJMGMLv dcyx4WHECaC1h73reJRNykOEIZ0Md5BrCZJ1JEzp9Mo8RQhWTEFtvfkkqgApP4g0 pSeaMx0StaGG1kt+4IbP+68CgYBrZdQKlquAck/Vt7u7eyDHRcE5/ilaWtqlb/xi zz7h++3D5C/v4b5UumTFcyg+3RGVclPKZcfOgDSGzzeSd/hTW46iUTOgeOUQzQVM kzPRXdoyYgVRQtgSpY5xR3O1vjAbahwx8LZ0SvQPMBhYSDbV/Isr+fBacWjl/Aip EEwxeQKBgQDdrAEnVlOFoCLw4sUjsPoxkLjhTAgI7CYk5NNxX67Rnj0tp+Y49+sG Uhl5sCGfMKkLShiON5P2oxZa+B0aPtQjsdnsFPa1uaZkK4c++SS6AetzYRpVDLmL p7/1CulE0z3O0sBekpwiuaqLJ9ZccC81g4+2j8j6c50rIAct3hxIxw== -----END RSA PRIVATE KEY-----
CLICK APPLY SETTINGS
Leave all settings not mentioned above as their default setting.
Navigate to Status > OpenVPN.
In some cases you may notice that the location is not showing the same location as the server you have input in your router settings; this is because geo tracking tools are often tricked by VPN connections. As long as you see an IP address that is not the same as your normal Internet IP address then you are indeed connected to ExpressVPN.
Navigate to Administration > Backup
Upon flashing the router from stock manufacturer firmware to DD-WRT firmware many buttons and lights on the router may have altered functionality. With DD-WRT firmware on certain devices a red internet/WAN light means a successful connection. While in factory firmware a red light denotes an issue with your internet connection. For anyone with DD-WRT firmware, this is not something you need to worry about as long as the internet functionality is in fact working.
Follow this article when you receive your new ExpressVPN FlashRouter to connect your FlashRouter to the Internet via ExpressVPN and customize your network so it is ready to use.
If you are not already an ExpressVPN user Sign Up Now.
1. Visit ExpressVPN’s website login page.
2. Copy your ExpressVPN Activation code and paste it into a document or leave this page open while you proceed with the instructions.
1. Connect to the FlashRouter’s network via ethernet cable or wireless.
The wireless network will appear as “Aircove”, “Linksys##”, “Netgear##”, or “Asus” and the password to join the network will be the default wireless password printed on the bottom of the router.
2. Open your web browser and enter expressvpnrouter.com or 192.168.132.1 in the URL.
3. Click Get Started on the ExpressVPN page that is displayed.
4a. If your FlashRouter is wired to the Internet correctly then you will be prompted to enter your ExpressVPN Activation Code found in your ExpressVPN account. Paste that in and click Sign in to ExpressVPN.
4b. If your FlashRouter is not wired correctly or is not receiving Internet properly make sure you are wired as detailed in the diagram that appears. If you are stuck at this screen we recommend powering off your ISP modem and any other router that the ExpressVPN FlashRouter is wired to and then powering them back up one by one.
Proceed with step “4a” above once the router is receiving Internet and you are prompted to enter the Activation Code.
5. Select if you want to share anonymous crash report data with ExpressVPN to help them improve the firmware for future releases.
6. Set the WiFi name and password your wireless devices will use to connect to the FlashRouter’s network. Make sure the WiFi name is unique and not a duplicate of an existing WiFi name if you change it. You can also leave it as the default information if you like. Click Continue.
7. Enter the admin password you will use to access the ExpressVPN router settings. Be sure to TYPE CAREFULLY when setting the admin password as a typo will result in needing to reset the router again. Note this password in a secure location or commit it to memory.
8. Your ExpressVPN FlashRouter is now fully setup!
Changing the VPN protocol your ExpressVPN FlashRouter is using can help with obtaining faster speeds while connected to VPN and connectivity issues in some regions of the world. A great advantage of using ExpressVPN firmware is the ability to use multiple protocols such as OpenVPN, IKEv2, and ExpressVPN’s own protocol Lightway.
1. Connect to the FlashRouter’s network via ethernet cable or wireless.
2. Open your web browser and enter expressvpnrouter.com or 192.168.132.1 in the URL.
3. Login with your ExpressVPN FlashRouter admin password.
4. Select VPN Options on the left hand side of the menu.
5. Select VPN Preferences on the left hand side of the menu.
6. Choose the VPN protocol that best suits your needs. We typically see the fastest speeds while using the Lightway – UDP or IKEv2 protocols. Click Save.
7. Click OK and then select Dashboard.
8. Click Disconnect to turn the VPN connection off.
9. Click Connect to turn the VPN connection back on so it is using the new Protocol you selected.
StrongVPN Wireguard DD-WRT setup is now officially supported by FlashRouters. Follow the steps below to gather all the required information to complete your Wireguard router setup.
Navigate to Security > Firewall
Set SPI Firewall to Disable.
Click Save at the bottom of the page.
Select your actual time zone for you physical location from the dropdown and enter 1.pool.ntp.org in the Server IP/Name dropdown.
Click Apply Settings at the bottom of the page.
If you are not already a StrongVPN user Sign Up Now.
1. Log in to your account on the StrongVPN website.
2. Select Router icon as the Platform
3. Select the Advanced Options dropdown and then check Exclude LAN Traffic and set any value between 52000 and 60000 in the Custom Port field.
4. Select the Server Location from the dropdown that you would like to connect to.
5. Select the Generate at the bottom of the page.
6. Click the DD-WRT installer script box to copy.
Navigate to Administration > Commands
Paste the StrongVPN Script that was copied in the empty Commands Shell.
Delete the very last line sleep 8 && reboot.
Click Save Custom (or Save Custom Script may appear depending on your firmware build, they are the same thing)
Copy the line below and paste into the empty Commands Shell.
sh /tmp/.rc_custom
Click Run Commands.
Wait two minutes and then power the FlashRouter off and back on. Reconnect to the FlashRouter’s network when it has booted back up.
Navigate to Setup > Tunnels
Navigate to Administration > Backup
If you are not already an NordVPN user Sign Up Now.
Log in to your account on the NordVPN website.
For a NordVPN server recommendation visit their Recommend Server page.
Once you have selected the server you want to connect to, download the UDP .ovpn file containing the Server IP Address, TLS Auth Key, and CA Cert referenced below.
Open the .ovpn file that is downloaded to your computer with NotePad++ for Windows or TextEdit for Apple. You will only need the Server IP Address, TLS Auth Key, and CA Cert from this file. All NordVPN servers and .ovpn files have different IP Addresses, keys, and certificates.
Navigate to Services > VPN
Start OpenVPN Client
If you wish to disable your VPN connection simply set this to Disable at any time and click Apply Settings.
Server IP/Name
At the top of the .ovpn file you downloaded above, there is a line e.g.:
remote 206.226.72.27 1194
206.226.72.27 is your NordVPN server IP address. Enter the IP Address in this field.
Port
1194
Tunnel Device
TUN
Tunnel Protocol
UDP
Encryption cipher
AES-256-CBC
Hash Algorithm
SHA512
Userpass Authentication
Enable
Username
Enter the Username you successfully logged in to your NordVPN account with.
Password
Enter the Password you successfully logged in to your NordVPN account with.
Advanced Options
Enable
TLS Cipher
None
LZO Compression
Adaptive
NAT
Enable
Firewall Protection
Enable
TLS Auth Key
In the .ovpn file copy and paste all contents in between the <tls-auth> and </tls-auth> lines from your .ovpn file starting and ending with:
—–BEGIN OpenVPN Static key V1—–
…
—–END OpenVPN Static key V1—–
Additional Config
tun-mtu-extra 32
mssfix 1450
persist-key
persist-tun
Policy Based Routing
This field can be used for split VPN and Dual Gateway routing.
CA Cert
In the .ovpn file Copy and Paste all contents in between the <ca> and </ca> lines from your .ovpn file starting and ending with:
—–BEGIN CERTIFICATE—–
…
—–END CERTIFICATE—–
CLICK APPLY SETTINGS
Leave all settings not mentioned above as their default setting.
Navigate to Status > OpenVPN
In some cases you may notice that the location is not showing the same location as the server you have input in your router settings; this is because geo tracking tools are often tricked by VPN connections. As long as you see an IP address that is not the same as your normal Internet IP address then you are indeed connected to NordVPN.
Navigate to Administration > Backup
Recommended DD-WRT WiFi settings for the Linksys WRT32X are based on extensive testing by FlashRouters. Please note that optimal settings may vary depending on external factors such as home size, interference, and the types of WiFi devices you are connecting in your network.
Screenshots below provide a visual display of recommended WiFi and encryption settings exactly as they appear in the Linksys WRT32X with DD-WRT firmware.
Navigate to the Wireless > Basic Settings to view or edit WiFi network settings.
Intimidated by all the available WiFi settings? The DD-WRT website provides extensive information about all of the available configuration options in the firmware. Learn about everything from Wireless channels to channel widths and more in the Basic Wireless Settings – DD-WRT Wiki.
The preset WRT32X FlashRouter WiFi password is Wireless#[First 5 characters of your router MAC]. The router MAC can be found on the bottom of your router. For e.g. if your MAC is 1459C07E70A8 then your WiFi password is Wireless#1459C
Navigate to the Wireless > Wireless Security to view or edit WiFi passwords.
It can be very useful to setup static local IP addresses for devices on your FlashRouter network. By assigning specific IP’s to specific devices you can better control and manage how your network and the internet interacts with each device.
Once you setup a static IP you can set access restrictions, monitor and control bandwidth, as well as bypass a router VPN connection or setup a device specific Kill Switch. Without a static IP assignment you may lose device specific settings when the DHCP lease to the router expires.
Navigate to Services > Services
If a device has wireless and ethernet capabilities the MAC Addresses will be different for a wireless connection and an ethernet connection. Make sure to set a static IP for both MAC Addresses in this case.
Schedule a reboot of the FlashRouter to restart your connection. A reboot of your network can help with stability and prevent the connection from slowing down over time.
Navigate to Administration > Keep Alive
If you are not already a IVPN user Sign Up Now.
Log in to your account on the IVPN website.
Navigate to Setup > Tunnels
1. Click Add Tunnel.
2. Set Tunnel to Enable.
3. Select Wireguard from the dropdown.
3. Set MTU to 1412.
4. Click Generate Key.
9. Copy the Local Public Key.
10. In a new tab (leave the DD-WRT settings opened), go to your IVPN Account and click WireGuard and then click WireGuard Key Management.
11. Click Add New Key.
12. Paste the copied Local Public key to the Public Key field and click Add Key.
13.Copy the IP Address assigned to your public key and add it to the IP Addresses/Netmask(CIDR) field followed by a /32 subnet mask.
Certain DD-WRT builds will show two separate fields here: IP Address and Subnet Mask. If that is the case set the IP Address field to the Address without the /32 added and set the Subnet Mask to 255.255.255.255
14. Click Add Peer.
15. Set the Peer Tunnel IP to 0.0.0.0. Set Peer Tunnel DNS to 172.16.0.1
16. Set Endpoint to Enable.
17. Go to the IVPN Server Status page and copy the server name for the WireGuard server location you want to connect to.
Be sure to copy the WireGuard server address and not the OpenVPN server address.
18. Paste the server name you copied into the Endpoint Address field and set the Port to 2049.
19. On the IVPN Server Status page copy the Public Key of the server location you entered. Paste the Public Key into the Peer Public Key field.
20. Leave Allowed IPs as 0.0.0.0/0. Set Router Allowed IP’s via tunnel to Enable. Set Persistent Keep Alive to 25.
21. At the bottom of the page click Save and then click Apply Settings.
Navigate to Setup > Basic Setup
Set Static DNS 1 to 172.16.0.1
Set Static DNS 2 to 198.245.51.147
Click Apply Settings.
Navigate to Administration > Management
Scroll to the bottom of the page and click the red Reboot Router button. Wait for the FlashRouter to reboot and then reconnect.
Navigate to Setup > Tunnels
Navigate to Administration > Backup
Changing the wireless channel on your ExpressVPN FlashRouter can help with WiFi stability and allows you to use a wireless channel with less traffic in your local environment.
1. Connect to the FlashRouter’s network via ethernet cable or wireless.
2. Open your web browser and enter expressvpnrouter.com or 192.168.132.1 in the URL.
3. Login with your ExpressVPN FlashRouter admin password.
4. Select Network Settings on the left hand side of the menu.
5. Select Wi-Fi Settings on the left hand side of the menu.
6. Select Advanced Settings.
7. Select the Channel Width and Main Channel you want your ExpressVPN FlashRouter to use. Note that higher 5GHz Wi-Fi channels will not be compatible with older devices. Click Save. Click Continue.
Whenever a device joins the FlashRouter network via wired or WiFi connection the DHCP server on the router gives out a local IP address to each device so all these devices can interact on your local network.
Increase the DHCP range to allow more users to automatically be assigned an IP address or decrease the DHCP range to limit the users that are automatically assigned an IP address.
Navigate to Setup > Basic Setup
Europe/Berlin is the default Time Zone setting for DD-WRT firmware.
To change this to your location’s actual Time Zone do the following.
Navigate to Setup > Basic Setup
Select your actual Time Zone from the dropdown field. Leave the Server IP/Name field blank.
CLICK APPLY SETTINGS
The network may reboot for a moment. Simply reconnect when it is back up.
Disabling the NTP Client setting will result in the VPN connection not working so we ask that you please leave it enabled at all times.
By default ExpressVPN firmware bonds the 2.4GHz and 5GHz wireless networks to a single wireless network name. Your device will automatically choose which one will provide the best connection. You can separate these networks to have unique Wi-Fi names so you can control which network your devices will use.
1. Connect to the FlashRouter’s network via ethernet cable or wireless.
2. Open your web browser and enter expressvpnrouter.com or 192.168.132.1 in the URL.
3. Login with your ExpressVPN FlashRouter admin password.
4. Select Network Settings on the left hand side of the menu.
5. Select Wi-Fi Settings on the left hand side of the menu.
6. Click the toggle for Separate 2.4GHz and 5GHz Wi-Fi.
7. Separate Wi-Fi details for the 5GHz band will now display. You can change the name and password if you so choose or leave it with the default name and password with “-5GHz” added to the name. Click Save. Click Continue.
Recommended DD-WRT WiFi settings for the Linksys R6400V2 are based on extensive testing by FlashRouters. Please note that optimal settings may vary depending on external factors such as home size, interference, and the types of WiFi devices you are connecting in your network.
Screenshots below provide a visual display of WiFi settings exactly as they appear in the Linksys R6400V2 with DD-WRT firmware.
Navigate to the Wireless > Basic Settings to view or edit WiFi network settings.
Intimidated by all the available WiFi settings? The DD-WRT website provides extensive information about all of the available configuration options in the firmware. Learn about everything from Wireless channels to channel widths and more in the Basic Wireless Settings – DD-WRT Wiki.
The preset WiFi password is Wireless#[First 5 characters of your router MAC]. The router MAC can be found on the bottom of your router. For e.g. if your MAC is 1459C07E70A8 then your WiFi password is Wireless#1459C
Navigate to the Wireless > Wireless Security to view or edit WiFi passwords.
If you are not already a Windscribe user Sign Up Now.
Log in to your account on the Windscribe website.
Go to the Windscribe WireGuard config generator page and select the Server location and Port you would like to use. Click Download Config.
Open the .conf file that is downloaded using Notepad in Windows or TextEdit in Mac.
Navigate to Setup > Tunnels
1. Click Add Tunnel.
2. Set Tunnel to Enable.
3. Select Wireguard from the dropdown.
3. Set CVE-2019-14899 Mitigation to Enable. Set NAT via Tunnel to Enable. Set Local Port to 51820. Set MTU to 1420.
4. Check Firewall inbound and Kill Switch.
5. Set Advanced Settings to Enable and copy the PrivateKey from the .conf file and paste it into the Local Private Key field.
6. Click Add Peer.
7. Set Peer Tunnel IP to 0.0.0.0. Set Peer Tunnel DNS to the DNS found in the .conf file.
8. Set Endpoint to Enable. Copy and Paste the Endpoint from the .conf file and paste it into the Endpoint Address field. Enter the same Port that appears next to the Endpoint.
9. Leave Allowed IPs as 0.0.0.0/0. Set Router Allowed IP’s via tunnel to Enable. Set Persistent Keep Alive to 25.
10. Copy and Paste the PublicKey from the .conf file and paste it into the Peer Public Key field.
11. Set Use Pre-shared Key to Enable. Copy and Paste the Presharedkey from the .conf file and paste it into the Pre-Shared Key field.
12. Copy the Address from the .conf file and paste it into the IP Addresses/Netmask(CIDR) field.
Certain DD-WRT builds will show two separate fields here: IP Address and Subnet Mask. If that is the case set the IP Address field to the Address without the /32 added and set the Subnet Mask to 255.255.255.255
21. At the bottom of the page click Save and then click Apply Settings.
Navigate to Setup > Tunnels
Navigate to Administration > Backup