Search Results for: this is the doc

Surfshark Manual OpenVPN Setup

TeamFlashRouters · Apr 24, 2019 ·

Preparing for Manual Surfshark Setup

Obtain your Surfshark OpenVPN information

If you are not already an Surfshark user Sign Up Now.

1. Log in to your account on the Surfshark website.

2. Successfully log in with your account information and Navigate to the Manual Connection Guide. Here you will find the OpenVPN Specific Username and Password required for manual configuration.

FlashRouters Privacy App - SurfShark OpenVPN Specific Username and Password

Surfshark Server Addresses

View a full list of Surfshark servers.

United States

Atlanta:
us-atl.prod.surfshark.com
Buffalo:
us-buf.prod.surfshark.com
Chicago:
us-chi.prod.surfshark.com
Dallas:
us-dal.prod.surfshark.com
Las Vegas:
us-las.prod.surfshark.com
Los Angeles:
us-lax.prod.surfshark.com
Miami:
us-mia.prod.surfshark.com
New York City:
us-nyc.prod.surfshark.com
Phoenix:
us-phx.prod.surfshark.com
San Fransisco:
us-sfo.prod.surfshark.com
Seattle:
us-sea.prod.surfshark.com

DD-WRT Router Setup for Surfshark

Navigate to Services > VPN

Enter Surfshark settings

OpenVPN Client

Start OpenVPN Client

If you wish to disable your VPN connection simply set this to Disable at any time and click Apply Settings.

Server IP/Name

Copy and paste the server you would like to connect to from the server list above. Be sure there are no extra spaces or characters.

If you wish to change Surfshark connection locations, THIS IS THE ONLY FIELD YOU NEED TO CHANGE.

Port

1194

Tunnel Device

TUN

Tunnel Protocol

UDP

Encryption cipher

None

Hash Algorithm

SHA512

Userpass Authentication

Enable

Username

Enter your OpenVPN specific Username.

Password

Enter your OpenVPN specific Password.

Advanced Options

Enable

TLS Cipher

None

LZO Compression

Disabled

NAT

Enable

Firewall Protection

Enable

TLS Auth Key

-----BEGIN OpenVPN Static key V1-----
b02cb1d7c6fee5d4f89b8de72b51a8d0
c7b282631d6fc19be1df6ebae9e2779e
6d9f097058a31c97f57f0c35526a44ae
09a01d1284b50b954d9246725a1ead1f
f224a102ed9ab3da0152a15525643b2e
ee226c37041dc55539d475183b889a10
e18bb94f079a4a49888da566b9978346
0ece01daaf93548beea6c827d9674897
e7279ff1a19cb092659e8c1860fbad0d
b4ad0ad5732f1af4655dbd66214e552f
04ed8fd0104e1d4bf99c249ac229ce16
9d9ba22068c6c0ab742424760911d463
6aafb4b85f0c952a9ce4275bc821391a
a65fcd0d2394f006e3fba0fd34c4bc4a
b260f4b45dec3285875589c97d3087c9
134d3a3aa2f904512e85aa2dc2202498
-----END OpenVPN Static key V1-----

Additional Config

remote-cert-tls server
remote-random
nobind
tun-mtu 1500
tun-mtu-extra 32
mssfix 1450
persist-key
persist-tun
ping-timer-rem
reneg-sec 0
cipher AES-256-GCM
log /tmp/vpn.log

Policy Based Routing

This field can be used for split VPN and Dual Gateway routing.

CA Cert

CLICK APPLY SETTINGS

Leave all settings not mentioned above as their default setting.

Verify a successful Surfshark connection

Navigate to Status > OpenVPN

You should now see a CONNECTED SUCCESS message.
Visit WhatIsMyIPAddress to verify your new IP address, virtual location, and status as Protected at the top of the page.

In some cases you may notice that the location is not showing the same location as the server you have input in your router settings; this is because geo tracking tools are often tricked by VPN connections. As long as you see an IP address that is not the same as your normal Internet IP address then you are indeed connected to Surfshark VPN.

Back up your settings

Navigate to Administration > Backup

Click the Backup button.
A file named nvrambak.bin will be saved to your computer.
You can load nvrambak.bin to restore your settings in the event of a reset.

How to change the Surfshark server

Visit the Surfshark Manual setup page and scroll down to Section 3.
Copy and paste one of the server IP Address into the Server IP/Name field.
Click Apply Settings.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

IPVanish Manual OpenVPN Setup

TeamFlashRouters · Apr 5, 2019 ·

Preparing for Manual IPVanish Setup

Verify your IPVanish login information

If you are not already an IPVanish user Sign Up Now.

Log in to your account on the IPVanish website.

IPVanish Server Addresses

View a full list of IPVanish servers.

America

Ashburn:
iad-a01.ipvanish.com
through
iad-a78.ipvanish.com

Atlanta:
atl-a01.ipvanish.com
through
atl-a88.ipvanish.com

Boston:
bos-c01.ipvanish.com
through
bos-c27.ipvanish.com

Chicago:
chi-a01.ipvanish.com
through
chi-a58.ivpanish.com

Cleveland:
cle-c01.ipvanish.com
through
cle-c20.ipvanish.com

Dallas:
dal-a01.ipvanish.com
through
dal-a79.ipvanish.com

Denver:
den-c01.ipvanish.com
through
den-c13.ipvanish.com

Jackson:
jan-c01.ipvanish.com
through
jan-c15.ipvanish.com

Las Vegas:
las-c11.ipvanish.com
through
las-c20.ipvanish.com

Los Angeles:
lax-a01.ipvanish.com
through
lax-a60.ipvanish.com

Miami:
mia-a01.ipvanish.com
through
mia-a34.ipvanish.com

Milwaukee:
mke-c01.ipvanish.com
through
mke-c19.ipvanish.com

New York:
nyc-a01.ipvanish.com
through
nyc-a51.ipvanish.com

Phoenix:
phx-a01.ipvanish.com
through
phx-a24.ipvanish.com

Salt Lake City:
slc-c01.ipvanish.com
through
slc-c12.ipvanish.com

San Jose:
sjc-a01.ipvanish.com
through
sjc-a27.ipvanish.com

Seattle:
sea-a01-ipvanish.com
through
sea-a41.ipvanish.com

St. Louis:
stl-c01.ipvanish.com
through
stl-c18.ipvanish.com

United Kingdom

London:
lon-a01.ipvanish.com
through
lon-a69.ipvanish.com

lon-c01.ipvanish.com
through
lon-c58.ipvanish.com

Manchester:
man-c01.ipvanish.com
through
man-c09.ipvanish.com

DD-WRT Router Setup for IPVanish

Navigate to Services > VPN

Enter IPVanish settings

OpenVPN Client

Start OpenVPN Client

If you wish to disable your VPN connection simply set this to Disable at any time and click Apply Settings.

Server IP/Name

Copy and paste the server you would like to connect to from the server list above. Be sure there are no extra spaces or characters.

If you wish to change IPVanish connection locations, THIS IS THE ONLY FIELD YOU NEED TO CHANGE.

Port

443

Tunnel Device

TUN

Tunnel Protocol

UDP

Encryption cipher

AES-256-CBC

Hash Algorithm

SHA256

User Pass Authentication

Enable

Username

Enter the Username you successfully logged in to your IPVanish account with.

Password

Enter the Password you successfully logged in to your IPVanish account with.

Advanced Options

Enable

TLS Cipher

None

LZO Compression

Adaptive

NAT

Enable

Firewall Protection

Enable

Additional Config

persist-key
persist-tun
persist-remote-ip
keysize 256

Policy Based Routing

This field can be used for split VPN and Dual Gateway routing.

CA Cert

CLICK APPLY SETTINGS

Leave all settings not mentioned above as their default setting.

Verify a successful IPVanish connection

Navigate to Status > OpenVPN

You should now see a CONNECTED SUCCESS message.
Visit IPVanish’s IP Check to verify your new IP address and virtual location.

Back up your settings

Navigate to Administration > Backup.

Click the Backup button.
A file named nvrambak.bin will be saved to your computer.
You can load nvrambak.bin to restore your settings in the event of a reset.

How to change the IPVanish server

Copy the new IPVanish server address from the above server list.
Paste the server into the Server IP/Name field.
Click Apply Settings.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

ExpressVPN TP-Link OpenVPN Setup

TeamFlashRouters · Apr 8, 2024 ·

Preparing for ExpressVPN TP-Link Setup

Obtain your ExpressVPN OpenVPN Information

If you are not already an ExpressVPN user Sign Up Now.

1. Log in to your account on the ExpressVPN website.

2. Successfully log in with your account information. Select More.

3. Select Manual Configuration and copy the Username and Password that are displayed on the right hand side of the screen.

4. Click the Server Location that you want to connect to. This will download a .ovpn file to your computer that we will use later on. There is no need to open the file. For this example I have selected New York but feel free to select any server listed there.

TP-Link Router Setup for ExpressVPN

1. Navigate to the Advanced tab.

2. Navigate to the VPN Client tab.

3. Check the Enable box next to VPN Client. Then click Save at the bottom of the page.

4. Click the Add button in the Server List area.

5. In the Description field enter in the name you’d like to use for this OpenVPN Client profile. We typically advise entering in the location or server number here. Our example server was in New York so I have entered in ExpressVPN New York.

Set the VPN Type to OpenVPN.

In the Username and Password fields paste in the ExpressVPN username and password we obtained earlier.

Click Browse and select the .ovpn file you downloaded earlier. Then click Save.

By default no devices will be assigned to the VPN Tunnel. With TP-Link firmware you must manually assign the devices that you want connected to the VPN tunnel. Proceed with the next steps to do so for all devices you want connected to VPN.

6. Click the Add button in the Device List area.

7. A list of devices connected to the FlashRouter’s network will appear. Check the devices that you want to connect to VPN. Then click OK.

TP-Link select devices to add to VPN tunnel

8. Now that the devices have been assigned to the VPN connection click the Enable toggle in the Server List area.

Verify a successful ExpressVPN connection

You should now see a CONNECTED message.
Visit ExpressVPN’s IP Check to verify your new IP address and virtual location.

How to change the ExpressVPN server

Follow the steps at the top of the page to obtain a new .ovpn file.
Then proceed with the settings same as initial setup.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

ExpressVPN/Aircove FlashRouter Internet Setup and Activation

TeamFlashRouters · Mar 16, 2022 ·

Follow this article when you receive your new ExpressVPN FlashRouter to connect your FlashRouter to the Internet via ExpressVPN and customize your network so it is ready to use.

Obtain your ExpressVPN Activation Code

If you are not already an ExpressVPN user Sign Up Now.

1. Visit ExpressVPN’s website login page.

ExpressVPN on FlashRouters Privacy App Setup - Sign Into ExpressVPN Dashboard

2. Copy your ExpressVPN Activation code and paste it into a document or leave this page open while you proceed with the instructions.

Access Router Settings

1. Connect to the FlashRouter’s network via ethernet cable or wireless.

The wireless network will appear as “Aircove”, “Linksys##”, “Netgear##”, or “Asus” and the password to join the network will be the default wireless password printed on the bottom of the router.

2. Open your web browser and enter expressvpnrouter.com or 192.168.132.1 in the URL.

3. Click Get Started on the ExpressVPN page that is displayed.

4a. If your FlashRouter is wired to the Internet correctly then you will be prompted to enter your ExpressVPN Activation Code found in your ExpressVPN account. Paste that in and click Sign in to ExpressVPN.

4b. If your FlashRouter is not wired correctly or is not receiving Internet properly make sure you are wired as detailed in the diagram that appears. If you are stuck at this screen we recommend powering off your ISP modem and any other router that the ExpressVPN FlashRouter is wired to and then powering them back up one by one.

Proceed with step “4a” above once the router is receiving Internet and you are prompted to enter the Activation Code.

5. Select if you want to share anonymous crash report data with ExpressVPN to help them improve the firmware for future releases.

6. Set the WiFi name and password your wireless devices will use to connect to the FlashRouter’s network. Make sure the WiFi name is unique and not a duplicate of an existing WiFi name if you change it. You can also leave it as the default information if you like. Click Continue.

7. Enter the admin password you will use to access the ExpressVPN router settings. Be sure to TYPE CAREFULLY when setting the admin password as a typo will result in needing to reset the router again. Note this password in a secure location or commit it to memory.

8. Your ExpressVPN FlashRouter is now fully setup!

Device Settings That Can Interfere With Your Router VPN

Dave · Oct 6, 2026 ·

If your router VPN is connected and working on other devices but one phone, tablet, computer, or streaming device shows the wrong IP address, wrong location, cannot access certain websites, or behaves differently, check the affected device before changing the router.

VPN applications, privacy features, custom DNS settings, antivirus software, firewalls, browser settings, and corporate security software can all change how traffic is handled directly on a device.

This guide applies to all FlashRouter types and VPN providers.

Start Here: Is the Problem the Router or One Device?

Before changing your router VPN configuration, compare the affected device with another device connected to the same FlashRouter.

If several devices show the correct VPN IP and location while only one device does not, the router VPN is already demonstrating that it can route traffic through the VPN.

Focus troubleshooting on the affected device.

If every device connected to the FlashRouter has the same VPN problem, continue with router-level VPN troubleshooting instead.

Privacy Hero users should also check the Privacy Hero dashboard. If the VPN itself displays Failed, Disconnected, Connecting, or a timeout error, troubleshoot that connection before changing device settings.

Disconnect VPN Applications Running on the Device

Do not run a VPN application directly on the device while troubleshooting a VPN running on your router.

This includes applications from NordVPN, ExpressVPN, Surfshark, Proton VPN, IPVanish, Private Internet Access, Mullvad, corporate VPN providers, and other VPN services.

If both the router VPN and device VPN are active, the device VPN can take control of that device’s traffic after it passes through the router.

This can cause:

An unexpected public IP address.
An unexpected VPN location.
Websites or applications not loading.
Streaming region problems.
DNS problems.
Slow or unstable connections.
One device behaving differently from other devices on the same router.

Disconnect the VPN application completely before testing the router VPN.

Closing the VPN app window may not disconnect the VPN. Confirm in the application or device network settings that the device-level VPN is actually disconnected.

iPhone and iPad: Check Private Relay and Limit IP Address Tracking

Apple devices include privacy features that can change how supported internet traffic is handled and make router VPN testing more difficult.

Limit IP Address Tracking

To temporarily disable Limit IP Address Tracking for your FlashRouter WiFi network:

Open Settings.
Select Wi-Fi.
Tap the information button next to the FlashRouter WiFi network.
Find Limit IP Address Tracking.
Turn it Off.
Disconnect from WiFi and reconnect.
Test the connection again.

This setting is configured per WiFi network, so make sure you are changing it for the FlashRouter network being tested.

iCloud Private Relay

iCloud Private Relay can also alter IP address visibility for supported traffic.

For troubleshooting:

Open Settings.
Tap your Apple Account/name.
Select iCloud.
Select Private Relay.
Temporarily turn Private Relay Off.
Reconnect to the FlashRouter.
Test the IP address and connection again.

These settings can be restored after testing.

Android: Check Private DNS and Always-On VPN

Android devices can have DNS and VPN settings that operate independently of the router.

Private DNS

Android Private DNS can send DNS requests to a selected DNS provider instead of relying solely on the DNS configuration supplied by the router.

If you are troubleshooting DNS, website access, streaming, filtering, or location behavior:

Open Settings.
Select Network & internet.
Select Private DNS.
Temporarily select Off.
Save the setting.
Reconnect to the FlashRouter WiFi.
Test again.

Android menus vary by manufacturer and Android version. Search the device Settings for Private DNS if necessary.

Always-On VPN

An Android VPN application can be configured to automatically reconnect even after you believe the VPN has been disconnected.

Open Settings.
Select Network & internet.
Select VPN.
Select the configured VPN.
Disable Always-on VPN while testing.
Check whether Block connections without VPN is enabled and temporarily disable it if necessary for testing.

Then reconnect to the FlashRouter and test the router VPN again.

Check Antivirus, Firewall, Browser, and Work Security Settings

If the problem affects a computer or only occurs in one browser, check for software that modifies network traffic directly on the device.

Antivirus and Internet Security Software

Security applications may include network features such as:

Web Protection.
Safe Browsing or Secure Web.
Network Protection.
DNS Protection.
HTTPS scanning.
Tracking protection.
Built-in VPN services.
Firewall controls.

Temporarily disable the relevant network protection feature and test again. You do not normally need to disable the entire antivirus product.

Third-Party Firewalls

A third-party firewall can block applications, DNS requests, VPN-related traffic, or specific network interfaces.

Temporarily disable the firewall and test the connection. If the problem disappears, re-enable the firewall and review its network rules.

Browser VPN, Proxy, and Secure DNS

Browsers and browser extensions can also use their own:

VPN services.
Proxy connections.
Secure DNS or DNS-over-HTTPS.
Privacy or filtering extensions.
Location-changing extensions.

If the problem occurs only in one browser, test another browser without extensions or custom networking settings.

Work and Corporate Devices

Company-managed computers and mobile devices may use corporate VPN clients, DNS filtering, web filtering, endpoint security, device-management profiles, or zero-trust networking software.

These systems may intentionally override the local router’s network behavior.

If a personal device works correctly on the same FlashRouter while a company-managed device does not, the company security configuration may be responsible.

Run a Clean Router VPN Test

For the cleanest test, temporarily remove device-level networking variables and let the FlashRouter VPN handle the connection.

FlashRouter VPN: On
Device VPN: Off
iCloud Private Relay: Off while testing
Limit IP Address Tracking: Off while testing
Android Private DNS/custom DNS: Off while testing
Always-On VPN: Off while testing
Third-party network filtering: Off while testing

Then:

Disconnect the affected device from WiFi.
Reconnect it to the FlashRouter.
Open a fresh private/incognito browser window.
Check the device’s public IP address and location.
Compare the result with another device connected to the same FlashRouter.

If the second device shows the correct VPN IP but the affected device does not, continue troubleshooting settings or software on the affected device.

If all devices show the same incorrect IP address or all devices fail to use the VPN, continue with router-level VPN troubleshooting.

Privacy Hero VPN Connected but Device Still Shows the Wrong IP?

Privacy Hero provides device-level VPN controls. Make sure the affected device is actually assigned to use the VPN.

Open app.privacyhero.com.
Open the Devices section.
Select the affected device.
Confirm VPN protection is enabled for that device.
Disconnect any VPN application running directly on the device.
Test the public IP address again.

If other Privacy Hero devices show the correct VPN IP and only one device remains incorrect, continue with the device-level checks above.

Related FlashRouters Guides

VPN FAQs

admin · Jan 29, 2019 ·

VPN FAQs

General VPN FAQ Answers

What is a VPN?

VPN is an acronym for ‘Virtual Private Network’, historically used by private organizations to seamlessly link geographically diverse locations via the Internet. A VPN ‘tunnels’ traffic between two devices by transmitting it over a secure network. There are also clearly identifiable benefits to individual Internet users accessing a VPN.

A VPN provides you with top-level security and privacy for all your Internet downloading, streaming and browsing. As long as you are signed into your VPN account, all data you transmit over the Internet is encrypted.
A VPN encrypts your device by hiding the IP address assigned by your Internet Service Provider (ISP) and replacing it with the IP address of your choosing from the list of server locations belonging to your VPN provider. This masks your identity when visiting sites that geo-restricted content, and helps you avoid devious local Internet marketing and advertising schemes that track you through your IP address.

Will a FlashRouter with a built-in VPN client speed up my connection?

FlashRouters are relatively new models that may enhance data transfers across your home network or extend the range of your Wireless signal. However, the speed at which you download or stream content can not exceed the speed of the connection you pay for through your ISP. Purchasing a FlashRouter or signing up for VPN service WILL NOT transform your regular connection into a high-speed broadband connection.

At the same time, if you do have a broadband connection, a FlashRouter with a VPN connection may slow down your transfer speeds due to the processor encrypting all of your data. In certain cases a FlashRouter with a VPN can also prevent throttling by an ISP of specific service like Netflix or Amazon Video.

Which VPN provider should I use?

Our routers have been tested to perform with many of the most popular VPN providers such as ExpressVPN, NordVPN, IPVanish, PrivateInternetAccess & CyberGhost among 50+ VPN providers so that subscribers can get the maximum benefit from their VPN service. If you prefer another provider, that is not an issue at all. You can still use a DD-WRT VPN FlashRouter with any VPN provider that offers DD-WRT router integration support. Contact our team for further information about using our routers with your VPN service of choice or if you need a VPN provider recommendation based on your location.

Should my FlashRouter replace my old router?

A FlashRouter will work as a standalone router by connecting your modem to its Wide Area Network (WAN) port, or using it in a Dual Router Network by connecting it to your existing router through a Local Area Network (LAN)/Ethernet port. Either way a FlashRouter can be configured to tunnel all traffic through the VPN server of your choosing.

If you would like to set up your Home Network so that some devices are being tunneled through a VPN server, and others are connecting to your Internet Service Provider (ISP) within your home country, then using your FlashRouter as an auxiliary device is recommended.

VPN Security FAQ Answers

Can I change my IP address to one in another country?

YES! The countries that you can change your IP address to depend on the offerings of your specific VPN providers. Prices and server locations vary across all VPN providers.

If you choose to purchase a FlashRouter then you will not have to install any VPN client software on your computer to change your IP address; the VPN will already be configured within the router. Therefore, any device you plug into this FlashRouter is automatically assigned the IP address of your selected VPN server.

When is my connection secure?

As long as the VPN account preset into your FlashRouter is active, any device that is connected to the Internet through this router has its network traffic encrypted, and IP address masked. With a FlashRouter you never have to physically login to your VPN account, as the settings have been stored in the router’s DD-WRT firmware.

Don’t worry though! If you are not at home, and using Wi-Fi in a public location, you can still use your VPN account on a laptop or mobile device through various other methods.

How can I be sure my connection is safe and encrypted?

In order to make sure that the connection on your FlashRouter is being rerouted appropriately through your VPN service, visit What is my IP address and make sure the location listed is the one you have chosen in your VPN settings, NOT your actual location.

If you wish, there is an Internet Kill Switch available as well for your router which will block the internet whenever you disconnect from VPN.

What VPN connection standards are supported on a FlashRouter?

Currently we support the OpenVPN protocol for VPN client connections. PPTP VPN has been deemed as insecure by the privacy community and so we no longer offer support for PPTP VPN connections.

Technical VPN FAQ Answers

What operating systems do you support?

A FlashRouter can be used with any operating system, be it Windows, Mac OS or Linux. A FlashRouter can also be used as a wireless access point for iPhones, iPads, and Android devices.

Our routers also work in conjunction with any other brand of router of ADSL or DSL modem/router combo from ISPs across the world.

Can I set up a VPN on a PS4, Xbox One, Kindle Fire, Roku, AppleTV or other devices without native VPN support?

THAT’S WHAT WE ARE HERE FOR!

If you purchase one of our FlashRouters loaded with DD-WRT firmware, you can run the client VPN connection from your router. Once you do this every device connected to the router will tunnel through the VPN.

Now you can stream content like Netflix, BBC iPlayer, Pandora Hulu, or Amazon Instant to your TV through any of these devices, instead of being constrained to streaming content on your computer!

If you need a recommendation for a VPN service with a specific streaming platform do not hesitate to contact our support team.

CyberGhost Manual OpenVPN Setup

TeamFlashRouters · Apr 9, 2019 ·

Preparing for Manual CyberGhost Setup

Obtain your CyberGhost OpenVPN Information

If you are not already a CyberGhost user Sign Up Now.

1. Log in to your account on the CyberGhost website.

2. Select My Devices.

3. Select Other and then Configure New Device.

CyberGhost Website OpenVPN Configuration Files Generator Cyberghost - Website Screen CyberGhost Website OpenVPN Configuration Files Generator

4. Set Protocol to OpenVPN. Select the Country you would like to connect to. Select the Server Group. Name the device in the Device Name field. Click Save Configuration.

CyberGhost Website OpenVPN Configuration Files Generator 3

5. Press View configuration.

CyberGhost Website OpenVPN Configuration Files Generator 2

6. Copy the Username, and Password that appear to a notepad, since you will need this information later in the setup process. Click Download Configuration.

CyberGhost Website OpenVPN Configuration Files Generator 1

Open the file that was downloaded with NotePad++ for Windows or TextEdit for Apple. You only need the ca.crt, client.crt, and client.key files. All CyberGhost servers have different keys and certificates.

DD-WRT Router Setup for CyberGhost

Navigate to Services > VPN

Enter CyberGhost settings

OpenVPN Client

Start OpenVPN Client

If you wish to disable your VPN connection simply set this to Disable at any time and click Apply Settings.

Server IP/Name

Copy and paste the server you selected in your account. Be sure there are no extra spaces or characters.

Port

443

Tunnel Device

TUN

Tunnel Protocol

UDP

Encryption cipher

AES-256-CBC

Hash Algorithm

SHA256

User Pass Authentication

Enable

Username

Enter the Username you obtained in your CyberGhost account.

Password

Enter the Password you obtained in your CyberGhost account.

Advanced Options

Enable

TLS Cipher

None

LZO Compression

Adaptive

NAT

Enable

Firewall Protection

Enable

Additional Config

tun-mtu 1500
fragment 1300
mssfix 1300

Policy Based Routing

This field can be used for split VPN and Dual Gateway routing.

CA Cert

—–BEGIN CERTIFICATE—–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==
—–END CERTIFICATE—–

Public Client Cert

Copy and paste all contents of the client.crt file starting and ending with:
—–BEGIN CERTIFICATE—–
…
—–END CERTIFICATE—–

Private Client Key

Copy and paste all contents of the client.key file starting and ending with:
—–BEGIN PRIVATE KEY—–
…
—–END PRIVATE KEY—–

CLICK APPLY SETTINGS

Leave all settings not mentioned above as their default setting.

Verify a successful CyberGhost connection

Navigate to Status > OpenVPN

You should now see a CONNECTED SUCCESS message.
Visit CyberGhost’s website to verify your new IP address and virtual location.

Back up your settings

Navigate to Administration > Backup

Click the Backup button.
A file named nvrambak.bin will be saved to your computer.
You can load nvrambak.bin to restore your settings in the event of a reset.

How to change the CyberGhost server

Follow the instructions for obtaining the OpenVPN information from above.
Enter the new Server Address in the Server IP/Name field.
Enter the new Username and Password.
Enter the new ca.crt, client.crt, and client.key
Click Apply Settings.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

Warranty and Returns FAQs

admin · Jan 29, 2019 ·

Warranty and Returns FAQs

At FlashRouters, we are confident that every router sold will function as advertised. We open, inspect, upgrade, configure, and then test all FlashRouters before they get shipped out. That is why we guarantee you will receive a working unit and offer our own 1-Year Hardware Warranty included with all New and Refurbished routers purchased from the FlashRouters website.

If you would like to extend the warranty coverage period to 2 years, the option is available during the FlashRouters checkout process.

Since we are so certain you will be happy with your upgraded and super secure network, all routers purchased from FlashRouters.com also come with a 30-day satisfaction guarantee.

Please read the warranty and return section in detail before placing an order or requesting an RMA. Our goal is to make the return process as smooth and transparent as possible for all customers. If the router you purchased does not work out for your needs we still want you to be satisfied with your purchasing experience.

Hardware Warranty and Return Policy

Requesting an RMA

Automated Return Merchant Authorization (RMA) requests are available from within your customer account panel. If you are eligible for a return then your RMA request will be approved. If your RMA request is not valid then it will be denied and you must e-mail FlashRouters Support for any additional information or actions. RMAs are valid for 7 days from the day they are issued.

The following are the available options when submitting an RMA request. Continue reading for more information on all available RMA options and conditions.

Hardware Guarantee – available for 7 days after receiving your FlashRouter.
Satisfaction Guarantee – available for 30 days after receiving your FlashRouter.
Hardware Warranty – available for 1 year, or 2 years if upgraded when purchasing a FlashRouter.
Hardware Repair – Anyone with a valid FlashRouters Support subscription is eligible for free Hardware Repair.

Please note we can only provide prepaid labels for approved Hardware Warranty returns within the USA. Prepaid labels are not available for international customers. All return shipping for 30 Day Satisfaction refunds is paid for by the customer.

Hardware Guarantee

In the rare case you receive a faulty router, you can open a ticket to contact FlashRouter Support for an RMA or request an RMA in your customer account panel and we will work to rectify the situation immediately. If it is determined that the power supply you received was faulty, and not the router itself, our team will immediately ship you out a tested power supply at no additional cost.

Rest assured that we individually test and inspect every FlashRouter with great detail before shipment. BUT… if router gremlins (yes they do exist) snuck into your router during the shipping process and it no longer powers on, our team will supply you with a prepaid shipping label to return the unit back to our offices. As soon as we receive verified tracking on your return shipment we will ship out another thoroughly tested unit to you at no additional cost.

You must contact us within 7 days from when you received your FlashRouter to be eligible for a Hardware Guarantee prepaid shipping label from FlashRouters.

30-Day Satisfaction Guarantee

If you are not satisfied with the performance of your router after trying it out for up to 30 days, you can open a ticket to contact FlashRouter Support for an RMA or request an RMA in your customer account panel. Once the RMA is approved, you will then have the option to ship the unit back to FlashRouters.

Once we receive the return, our team inspects and refunds accordingly based on the original purchase price of your FlashRouter. Please note there is a $25 restocking fee and refunds do not include any initial shipping costs associated with your order. All restocking fees are returned as Store Credit. This means if you make another purchase at FlashRouters then your fee is refunded.

The item must also be fully functional and have no signs of cosmetic damage for you to receive the maximum refund. If you do not include the original boxing, or any router accessories you may also be charged an additional fee as indicated.

Ethernet Cable: $5

Power Source: $10

Antennas: $5 per antenna

Router Stand: $10

Box: $10

Cosmetic Damage: Up to $25

What is covered under the 30-Day Satisfaction Guarantee?

If the VPN speeds or WiFi network speeds are not what you had hoped, if the setup is too complicated, or you just decided on another solution; these are all covered under the 30-Day Satisfaction Guarantee.

We will not accept any returns of working routers after 30 days from the date you received your router. After 30 days, router returns/replacements will only be processed under the Hardware Warranty.

Can I get the restocking fee waived?

If you place a new order for a different FlashRouter unit before returning your initial purchase, then we will waive the restocking fee. Otherwise the $25 restocking fee will be applied to your customer account as a store credit. You can then use this $25 store credit on any future FlashRouter purchase.

Rewards Points refunds

If you return your FlashRouter under the 30 day satisfaction guarantee then you will lose any reward points received for your initial purchase.

Hardware Warranty

A 1-year Hardware Warranty is included with the purchase of all New and Refurbished FlashRouters. If your router suffers hardware failure within 365 days from the date you received the unit then we will replace your router with another fully tested unit. You must pay for return shipping of the faulty unit back to our offices located in New Jersey, USA and our team will ship out your replacement at no additional cost.

You must contact the FlashRouter support team for an RMA number or request an RMA from your customer account panel before returning a router for warranty replacement. If you do not receive approval for a return then you will not be eligible for a replacement unit.

There are 2 options for receiving a Hardware Warranty replacement unit:

Option #1: Process another order for immediate shipping and as soon as we receive the returned device back in our offices we will issue you a refund for the initial purchase.

Option #2: Ship your faulty router back to our office, and as soon as we receive the unit our returns department will have a replacement unit shipped out to you at no extra cost.

How long do I have before my RMA expires?

RMA’s are good for 7 days from the date they are issued.

What if I upgraded to a 2 year Hardware Warranty at checkout?

All refund, replacement, RMA details, and options covered by the 1-year Warranty apply in the exact same manner for 2 year warranties over each respective warranty coverage period.

If for any reason the router you purchased is no longer in stock or discontinued then you have the option to replace your router with one of equal value or receive a refund. Hardware warranties are only eligible for refunds if we are unable to provide a replacement unit for you.

What should I do if my router is out of warranty coverage?

If your FlashRouter is out of the warranty coverage period, we are first and foremost apologetic for the passing of your router. Be sure to contact our sales team though and you can receive a special coupon as a return customer for a shiny new wireless networking centerpiece.

What is not covered with a FlashRouter Warranty?

Items that have been clearly damaged either by the customer or during the return process are not eligible for a full refund. This includes routers that have visible dents, scratches, or moving parts inside the router.

Can I upgrade to a 2 year warranty after my FlashRouter purchase?

2 year warranty upgrades are only available at the time of your FlashRouter purchase. Upgrades are not available once a FlashRouter order has been shipped.

Can I get a Warranty on my router if I purchased a “Flash My Router” plan from FlashRouters?

Routers that have been “flashed” and configured by our support specialists for anyone who has purchased a Flash My Router Plan are not eligible for warranty coverage from FlashRouters. Only routers purchased through the FlashRouters.com website are eligible for warranty replacements or refunds.

Hardware Repair

FlashRouters is proud to offer a free repair and upgrade service for anyone with an active Silver or Gold Service Plan subscription. Any and all shipment costs associated with FlashRouter repairs or upgrade requests are the burden of the customer and will not be paid for by FlashRouters. However, the repair and upgrade service itself is FREE.

If you do choose to ship your router back to our office for repair, then you should include a prepaid shipping label in your package back to your home or office, so our team can send the router back to you whether we are able to repair the unit or not. Router accessories like power supplies, ethernet cable, or antennas do not need to be included when shipping back a unit for repair.

If our team is not able to resurrect your router from a power failure, faulty firmware upgrade, or any other reason then we can return the faulty unit back to you using the return shipping label included with your return package. Alternatively, we can destroy the unit and refund the return shipping costs if that is your preference.

Open Box Routers

What is an Open Box Router?

Open Box routers are fully functional units that have cosmetic flaws and are sold at heavy discounts. These units come with the same Support Plan options as New or RM units, which means you get the same support service with extremely discounted hardware.

Open Box routers are covered under the FlashRouter 30-Day Satisfaction Guarantee BUT come with no Hardware Warranty. We take every measure possible to ensure complete functionality and our team fully load tests these devices before shipment, but you should be very aware that you buy these discounted “open box” devices at your own risk without any Hardware Warranty.

What is the Open Box Router return policy?

Open Box Routers can only be returned within 30 days from the date you received your router. Returns will not be accepted on open box routers after 30-Day Satisfaction Guarantee window has expired. Please note that Open Box Router return shipping costs are not covered by FlashRouters and initial shipping costs are not included in any refunds.

Accessories Warranty

All Accessories come with manufacturer warranties as listed on the respective product pages.

FlashRouters will accept returns for refund or replacement of accessories only within 30 days from the date you received your order. After 30 days you must contact the manufacturer for any warranty replacements.

Accessories must be returned with all original packaging and with no cosmetic damage to receive a full refund. A missing box or damage to an item will result in a restocking fee per our discretion.

"Flash My Router" Refund Policy

The “Flash My Router” product offered by FlashRouters is a virtual service provided by the FlashRouters support team. This product includes a remote support session where our support team will flash your router and then complete your internet, WiFi, and VPN setup, and in certain cases support additional router features.

Once your remote support session is completed there are absolutely no refunds on “Flash My Router” purchases. In the case we are unable to successfully flash your router we will offer a full refund for your “Flash My Router” purchase. “Flash My Router” purchases are fully refundable if you decide you would no longer like to use the service after your purchase is completed.

Service Plan Subscription Refund Policy

All FlashRouter router purchases include a recurring FlashRouters Service Plan subscription. There are 3 levels of support to choose from as either a quarterly or yearly recurring billing plan.

30-Day Satisfaction Guarantee

If you choose to return your FlashRouter under the 30-Day Satisfaction Guarantee, then you are eligible for a full refund on any Service Plan purchased with your FlashRouter.

Cancellation Policy

You may cancel your recurring billing at any time and you will not be charged again. Please note you will not be refunded for unused time from the initial billing/service period of your support plan subscription.

If you choose to cancel your 3 month FlashRouter support plan then you will retain support until the end of the 3 month period. If you choose to cancel your 1 year FlashRouter support plan then you will retain support until the end of the 1 year period. You will not lose time from your existing service plan if you cancel when a plan is active.

There is a 7-day grace period after Service Plan renewals have been charged, where you may request an immediate cancellation and full refund.

How do I change my FlashRouter Support subscription level?

How do I Upgrade my Service Plan?

You can upgrade a Service Plan at any time during a billing cycle. You must e-mail or live chat our support team and request an upgrade. Our team will then issue you store credit for any unused time on your existing Service Plan, which will then be immediately applied to your new upgraded Service Plan purchase. Your recurring billing will then continue at the new Service Plan level. Your 3 months or 1 year of upgrade service will start again from the date of the upgrade purchase.

How do I switch from a Quarterly to a Yearly Service Plan?

If you would like to switch to a Yearly plan from a Quarterly plan of the same service level, then you must e-mail or live chat our support team and request an upgrade. Our team will then issue you store credit for any unused time on your existing Quarterly Service Plan, which will then be immediately applied to your new Yearly Service Plan purchase. Your recurring billing will then continue at the Yearly Service Plan level. Your 1 year of service will start again from the date of the upgrade purchase.

How do I Downgrade my Service Plan?

If you are subscribed a Service Plan, but would like to switch to a lower level Service Plan then you can request that our support team cancel your recurring billing at any time. As soon your existing Service Plan is expired you can make a new purchase for the new Service Plan of your choice.

How do I switch from a Yearly to a Quarterly Service Plan?

If you would like to change the billing cycle from yearly to quarterly, you may cancel your existing subscription plan and then once your year of service has expired, you may purchase a Quarterly Service Plan instead.

If you just purchased a FlashRouter, there is a 7-day grace period from when you receive your unit if you would like an immediate change from Yearly to a Quarterly Service Plan.

How do I cancel my subscription?

You may request a Service Plan subscription cancellation by e-mailing support@flashrouters.com or from within your customer account panel at any time. You will be notified of a successful cancellation and your payment method will not be billed again.

Please note there are no refunds when cancelling your subscription. Cancellation means you will not be billed again for your Service Plan, there are no partial refunds for cancelled Service Plans.

AirVPN Manual OpenVPN Setup

TeamFlashRouters · Jun 11, 2019 ·

Preparing for Manual AirVPN Setup

Obtain your AirVPN OpenVPN Information

If you are not already a AirVPN user Sign Up Now.

1. Log in to your account on the AirVPN website.

AIRVPN OpenVPN Client Login for FlashRouter DD-WRT VPN Configuration

2. Click on the Client Area tab.

AIRVPN OpenVPN Client Area for FlashRouter DD-WRT VPN Configuration

3. Click on the Config Generator subtab.

AIRVPN OpenVPN Configuration Generator for FlashRouter DD-WRT VPN Configuration

4. Click on the Router icon under Choose your Operating System.

AIRVPN OpenVPN FlashRouter DD-WRT VPN Configuration

5. Select a Protocol under the Protocols section. We recommend UDP.

Select AIRVPN OpenVPN Encryption Protocol for FlashRouter DD-WRT VPN Configuration

6. Select one option under the Choose Servers section. AirVPN sorts these servers by Planet, Continent, Country, and Single servers. Choose whichever best suits your needs.

Sort AIRVPN OpenVPN Specific Certificates for FlashRouter DD-WRT VPN Configuration

7. Scroll down towards the bottom of the page and click on Generate.

Generate AIRVPN OpenVPN Specific Certificates for FlashRouter DD-WRT VPN Configuration

Open the file that was downloaded with NotePad++ for Windows or TextEdit for Apple. You will be copying the Server IP/Name, client.crt and client.key from this file.

Please note, all VPN servers have different keys and certificates. If you wish to change servers in the future, you will have to go through steps 1-7 again.

DD-WRT Router Setup for AirVPN

Navigate to Services > VPN

Enter AirVPN settings

OpenVPN Client

Start OpenVPN Client

If you wish to disable your VPN connection simply set this to Disable at any time and click Apply Settings.

Server IP/Name

Copy and paste the server you selected in your account. Be sure there are no extra spaces or characters.

Port

443

Tunnel Device

TUN

Tunnel Protocol

UDP or TCP

Encryption cipher

AES-256-CBC

Hash Algorithm

SHA1

User Pass Authentication

Disable

Advanced Options

Enable

TLS Cipher

None

LZO Compression

NAT

Enable

Firewall Protection

Enable

nsCertType verification

Checked

Policy Based Routing

This field can be used for split VPN and Dual Gateway routing.

TLS Auth Key

—–BEGIN OpenVPN Static key V1—–
7bb7a23a0f5f28d01e792df68f1764ab
f2688719288808bf58e8a2d4f9354ecf
132625dfb895fc3f6330ae1e868e4dfa
c164c0931593d7f9a7da9595cf353433
8896e1d0a987a0d19838944af8fea4e5
215a3a0c76f4c67d5a4aee6a53be66a4
c88b84f850030840fb30f8550ed8068f
35c1ef34ee8f40a0ea5862dfb6f8d3c5
7ab5e27ac2799cf93e8765ff63cd8cd8
6b391b813925cd373bb202796f64d16f
003d042ca828d1b07f18ba1d0cb0323d
df3ee9287e9e084e655699efb3cffa92
3626946fa372e7beee245e7a95b4c1d8
7d16cae685218d4b8afc019b22e41083
476ee9883fe666d236301e55b2062551
4d91c8a69467a758293994df1e6fa7ae
—–END OpenVPN Static key V1—–

CA Cert

—–BEGIN CERTIFICATE—–
MIIGVDCCBDygAwIBAgIJAIzYQ+/kXyADMA0GCSqGSIb3DQEBBQUAMHkxCzAJBgNV
BAYTAklUMQswCQYDVQQIEwJJVDEQMA4GA1UEBxMHUGVydWdpYTETMBEGA1UEChMK
YWlydnBuLm9yZzEWMBQGA1UEAxMNYWlydnBuLm9yZyBDQTEeMBwGCSqGSIb3DQEJ
ARYPaW5mb0BhaXJ2cG4ub3JnMB4XDTE0MDQxMTEwMTU0NVoXDTI0MDQwODEwMTU0
NVoweTELMAkGA1UEBhMCSVQxCzAJBgNVBAgTAklUMRAwDgYDVQQHEwdQZXJ1Z2lh
MRMwEQYDVQQKEwphaXJ2cG4ub3JnMRYwFAYDVQQDEw1haXJ2cG4ub3JnIENBMR4w
HAYJKoZIhvcNAQkBFg9pbmZvQGFpcnZwbi5vcmcwggIiMA0GCSqGSIb3DQEBAQUA
A4ICDwAwggIKAoICAQDGG3ZrJbP61PNjGc4mjTx0TLkUjP7IXZ3wnpPjwF/lwK9n
HgRqoPL0KY/ABJuzMViD8ChtwthNfc7PuJ7vSPtN84lSJ4JGmTxvZkNeLQLZsu1F
f88OcSpjW5ErBM05iVBeF8/ljwaajgFfbgop9W/UK5yMji4qgq5KHxxXqsB8R4rC
eFpWHoNTwFjvXhtVyMgXiT9XAh/vBYim021m8onio4K48q7YRZ4qU8gvE79h5M0g
miIlt6v1vaZskw9cqIBbCYefGMsvBRk2x824ChPf6FazMwAnQHsuBHt6eXAARvfF
DBDanzPHlRSiCP6Je6Vod/MPyepiTZgjgk2VxYUc1ohNxEEGzPGTayeNzLJUldou
P4B+tjJ0Xly30+wvlahADlqjtz3CGQmKMj7btZjd+Uo61B7gau5YiXR/IO7ZpFAC
PCZJSbrwFs6rt9Kewqk8zslfVIro8oDndXRkVsa/c8Qmd6ZE7V+oMGl2OggdWOLl
mDEjkytzx+Bw2sSSalJRAQmOQO8V0anOI6jGYLuU2jnFDsnqSHuwIK11xb6iHmh7
ONsRLUtQ+d64TzB00w2M0fCvGqUIp0N+lf7nsZKsEcU08OoHQYUuwX75ZEOYNSZJ
rqAXohcXdVUHqgRlJRErfSkjcGMM0yqjHkvopcnBIRXKMYTDVXvzRJboyJiVpQID
AQABo4HeMIHbMB0GA1UdDgQWBBTlFdcTqJ4x49Ew1/Ef9OJj0lDIiDCBqwYDVR0j
BIGjMIGggBTlFdcTqJ4x49Ew1/Ef9OJj0lDIiKF9pHsweTELMAkGA1UEBhMCSVQx
CzAJBgNVBAgTAklUMRAwDgYDVQQHEwdQZXJ1Z2lhMRMwEQYDVQQKEwphaXJ2cG4u
b3JnMRYwFAYDVQQDEw1haXJ2cG4ub3JnIENBMR4wHAYJKoZIhvcNAQkBFg9pbmZv
QGFpcnZwbi5vcmeCCQCM2EPv5F8gAzAMBgNVHRMEBTADAQH/MA0GCSqGSIb3DQEB
BQUAA4ICAQCUVAQteCtgNQiZMXV0wCdqivlxlCCuj5sD+XvEuoDqb7dH70u1KQ90
OAbkeotHlIbqJU10xWtvHEjnXg8QG5VOzaWnWWev+ivdPCkGWe8E7C8shsr4WMlA
EF8PPRtzOwCKayxjR713x+Tc2Sb6/rDsXcY5LV6RNmE9HWBM6IoHdqruR8PHkYge
2CPXMuLByEADri6xmvussAjCWEDplJNY7tQsUGT7vjrwrNSNBx/SvxkXnWBj0wYa
EwNu43jrjcRfM/3eGcKDX3cQqTfRQd3j3OA7zmJOXPeExRUIWZTNCvQItGy1TJdw
JTphflw15Bui4l2mYfDqK08zm4aJODrCjoQnVVzM5uOzSTOjmneI6AHj3MjjL3A/
CFA5PCSquBhUycF4UEVf3aPGiV0vAthCBUqM4eKE+rbjWPSaxKghVdr/S82o7Wzz
9mGwnOZDqWk+8AWSsGBjamMk3mNMR45E9FRfPF/dyjOSbVyyTsd1VzlTFEJa0wjB
l3yq3r3iZAM3UtevocAyTEAu0vDYBbS6TgWmWEDOizybB0hNrTx5u/SEI0Kwcthc
rilYxD+n4kmV7TvIR0ZSaYpgYALWQV27zOqY51Ol4UT98WCOokge9HdoFcGJU2Uj
5VneGp14/Oklh7y6BxxxGC3zNGjKGNQYuHGTIgw1DoASmRUdkPkn/w==
—–END CERTIFICATE—–

Public Client Cert

Copy and paste all contents between <cert> and </cert> make sure to also include the following lines when copying and pasting:
—–BEGIN CERTIFICATE—–
…
—–END CERTIFICATE—–

Private Client Key

Copy and paste all contents between <key> and </key> make sure to also include the following lines when copying and pasting:
—–BEGIN PRIVATE KEY—–
…
—–END PRIVATE KEY—–

CLICK APPLY SETTINGS

Leave all settings not mentioned above as their default setting.

Verify a successful AirVPN connection

Navigate to Status > OpenVPN

You should now see a CONNECTED SUCCESS message.
Visit whatismyipaddress.com to verify your new IP address and virtual location.

Back up your settings

Navigate to Administration > Backup

Click the Backup button.
A file named nvrambak.bin will be saved to your computer.
You can load nvrambak.bin to restore your settings in the event of a reset.

How to change the AirVPN server

Follow the instructions for obtaining the OpenVPN information from above.
Enter the new Server Address in the Server IP/Name field.
Enter the new client.key and private.key
Click Apply Settings.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

Surfshark TP-Link OpenVPN Setup

TeamFlashRouters · Apr 29, 2024 ·

Preparing for Surfshark TP-Link Setup

Download your Surfshark .ovpn file

If you are not already a Surfshark user Sign Up Now.

1. Log in to your account on the Surfshark website.

2. Click VPN Manual Setup.

3. Select Router as the Setup method.

4. Select OpenVPN as the Protocol.

5. Copy and paste your Surfshark manual username and password to a secure location. This is the username and password you will enter into the router settings to connect to Surfshark.

6. Click Location and select the server location you want to connect to. Unless you need a specific location we recommend using Surfshark’s recommended Fastest server. Click Download to download the UDP .ovpn file for this Surfshark server location.

TP-Link Router Setup for Surfshark

1. Navigate to the Advanced tab.

2. Navigate to the VPN Client tab.

3. Check the Enable box next to VPN Client. Then click Save at the bottom of the page.

4. Click the Add button in the Server List area.

5. In the Description field enter in the name you’d like to use for this OpenVPN Client profile. We typically advise entering in the location. Our example server was New York so I have entered in Surfshark New York.

Set the VPN Type to OpenVPN.

In the Username and Password fields paste in the Surfshark username and password we obtained earlier.

Click Browse and select the .ovpn file you downloaded earlier. Then click Save.

6. Click the Add button in the Device List area.

7. A list of devices connected to the FlashRouter’s network will appear. Check the devices that you want to connect to VPN. Then click OK.

8. Now that the devices have been assigned to the VPN connection click the Enable toggle in the Server List area.

Verify a successful Surfshark connection

You should now see a CONNECTED message.
Visit Surfshark’s IP Check to verify your new IP address and virtual location.

How to change the Surfshark server

Follow the steps at the top of the page to obtain a new .ovpn file.
Then proceed with the settings same as initial setup.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

Wireless Guest Network Setup – Bridged (Advanced)

TeamFlashRouters · Jun 12, 2019 ·

If you would like to prevent visitors from connecting to your main WiFi network then you can create a Bridged Guest Network that will prevent access to the main router. This setup also allows you to create different rules for different WiFi SSID’s in your home ranging from QoS controls, access restrictions, VPN network segmentation, and more.

Preparing for Wireless Guest Network Setup

If you have a Dual-band or Tri-Band router you can setup a WiFi Guest Network, creating a separate VLAN (virtual local area network) for your visitors, or in order to segment your VPN networks on any band you like. We recommend using the 2.4GHz network for your DD-WRT Guest Wireless Network so it is compatible with the most possible WiFi devices. Setting up a guest network for visitors in your home allows you to keep them off of your main WiFi network.

We recommend performing this setup while connected to the FlashRouter via ethernet cable. If your computer does not have an ethernet port and you must proceed via wireless connection to the FlashRouter pay attention to the wireless connection as you may need to rejoin the FlashRouter’s network after making changes.

DD-WRT Router Setup for Wireless Guest Network

Enter Wireless settings

Navigate to Wireless > Basic Settings

Bridged Wireless Guest Network Setup on DD-WRT FlashRouter – Setting SSID for Guest Network

Under the 2.4GHz or 5GHz Interface click the Add button.
In the Wireless Network Name (SSID) field enter the unique network name of the guest network.
Click Save.

Enter Wireless Security settings

Navigate to Wireless > Wireless Security

Bridged Wireless Guest Network Setup on DD-WRT FlashRouter – Setting Guest Network Wireless Password

Duplicate the wireless security settings that are set for the other bands for the newly created virtual interface.
Click Apply Settings.
Reboot your router.

Create Bridge

Navigate to Setup > Networking

Under Create Bridge click Add. Name the newly created bridge br1.
Click Apply Settings

Assign to Bridge

Bridged Wireless Guest Network Setup on DD-WRT FlashRouter – Assign Bridge

Under Assign to Bridge select br1 from the Assignment dropdown. Select wl1.1 or ath1.1 depending on your router model.
Click Apply Settings.

Depending on the router model and WiFi band you are using, the wireless interfaces will be labelled differently.

This setting can be labelled wl1.1, ath0.1, wl2.1, and so on. Make sure when you get up to the bridge assignment section that you are using the correct guest network Virtual Interface.

Network Configuration br1

Bridged Wireless Guest Network Setup on DD-WRT FlashRouter – Configure Bridge DNS Redirection

Under Network Configuration br1 select Enable for Forced DNS Redirection.
Set Optional DNS Target to 208.67.220.220
Set IP Address to 192.168.12.1
Set Subnet Mask to 255.255.255.0
Click Apply Settings.

Multiple DHCP Server

Bridged Wireless Guest Network Setup on DD-WRT FlashRouter – Configure DHCP Server Settings

Under Multiple DHCP Server click Add.
Set the first dropdown to br1.
Click Apply Settings.
Reboot your router.

Firewall Rules

Navigate to Administration > Commands

Copy the fire script from below and paste into the empty Commands shell
Click Save Firewall.
Wait one minute and then reboot your router.

iptables -I FORWARD -i br1 -o br0 -m state –state NEW -j DROP
iptables -I FORWARD -i br0 -o br1 -m state –state NEW -j DROP
iptables -I INPUT -i br1 -p tcp –dport telnet -j REJECT –reject-with tcp-reset
iptables -I INPUT -i br1 -p tcp –dport ssh -j REJECT –reject-with tcp-reset
iptables -I INPUT -i br1 -p tcp –dport www -j REJECT –reject-with tcp-reset
iptables -I INPUT -i br1 -p tcp –dport https -j REJECT –reject-with tcp-reset

You will now have a working Bridged Guest Network on the FlashRouter. By inputting the firewall rules, this will also prevent any guests on your network from gaining access to your router settings.

Back up your settings

Navigate to Administration > Backup

Click the Backup button.
A file named nvrambak.bin will be saved to your computer.
You can load nvrambak.bin to restore your settings in the event of a reset.

TROUBLESHOOTING

Still having issues? Visit our Troubleshooting section to diagnose common problems here.

Troubleshoot Here

IPVanish AsusWRT OpenVPN Setup

TeamFlashRouters · Apr 29, 2024 ·

Preparing for IPVanish AsusWRT Setup

Download your IPVanish .ovpn file

If you are not already an IPVanish user Sign Up Now.

1. Log in to your account on the IPVanish website.

2. Successfully log in with your account information then go to IPVanish .ovpn file page.

3. Click on the .ovpn file for the server location you want to use to dowloand the .ovpn file. Do not open this file.

AsusWRT Router Setup for IPVanish

Login to AsusWRT firmware settings in a browser on any computer or smart device connected to the AsusWRT FlashRouter’s network.

1. Navigate to the VPN tab.

2. Navigate to the VPN Fusion tab.

3. Click Add profile.

4. In the Connection Name field enter in the name you’d like to use for this OpenVPN Client profile. We typically advise entering in the location or server number here. Our example server was in New York so I have entered in IPVanish New York.

5. In the VPN Type dropdown select OpenVPN.

6. Click Import .ovpn file and select the .ovpn file you downloaded earlier. Then click Upload.

7. In the Username and Password fields paste in the IPVanish email and password you use to successfully login to your IPVanish website account.

8. Click Apply and Enable at the bottom of the page.

If you only want certain devices to connect to the OpenVPN Client profile you are setting up instead of all the devices connected to the FlashRouter’s network click into the profile and disable Apply to all devices. Then click Devices and select the devices that you want to connect to VPN.

9. At the top of the page set the Service State toggle to ON to activate the VPN connection.

Verify a successful IPVanish connection

You should now see a CONNECTED message.
Visit IPVanish’s IP Check to verify your new IP address and virtual location.

How to change the IPVanish server

Follow the steps at the top of the page to obtain a new .ovpn file.
Then proceed with the settings same as initial setup.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

CyberGhost AsusWRT OpenVPN Setup

TeamFlashRouters · Apr 29, 2024 ·

Preparing for CyberGhost Setup

Obtain your CyberGhost OpenVPN information

If you are not already a CyberGhost user Sign Up Now.

1. Log in to your account on the CyberGhost website.

2. Select VPN.

3. Click Configure New Device.

4. Set Protocol to OpenVPN. Select the Country you would like to connect to. Select the Server Group. Name the device in the Device Name field. Click Save Configuration.

5. Press View configuration.

6. Copy the Username, and Password that appear to a notepad, since you will need this information later in the setup process. Click Download Configuration.

Open the folder that was downloaded. Then open the ca.crt the client.crt, and client.key files with NotePad++ for Windows or TextEdit for Apple. All CyberGhost servers have different keys and certificates.

AsusWRT Router Setup for CyberGhost

Login to AsusWRT firmware settings in a browser on any computer or smart device connected to the AsusWRT FlashRouter’s network.

1. Navigate to the VPN tab.

2. Navigate to the VPN Fusion tab.

3. Click Add profile.

5. In the VPN Type dropdown select OpenVPN.

6. Click Import .ovpn file and select the openvpn.ovpn file from the folder you downloaded earlier. Then click Upload.

7. In the Username and Password fields enter in the CyberGhost assigned username and password that you obtained earlier.

8. After uploading the openvpn.ovpn file you will get a message that says “Complete, Lack of Client Key!, Lack of Client Certificate, Lack of Certificate Authority”. For CyberGhost you need to enter in these details manually. Click Import the CA file or edit the .ovpn file manually and then click the edit icon next to Content modification of Keys and Certificate.

9. In the Certificate Authority field paste in the entire content of the ca.crt file.

—– BEGIN xxx —– / —– END xxx —– block (including those two lines).

10. In the Client Certificate field paste in the entire content of the client.crt file.

—– BEGIN xxx —– / —– END xxx —– block (including those two lines).

11. In the Client Key field paste in the entire content of the client.key file.

—– BEGIN xxx —– / —– END xxx —– block (including those two lines).

Then click OK.

8. Click Apply and Enable at the bottom of the page.

9. At the top of the page set the Service State toggle to ON to activate the VPN connection.

Verify a successful CyberGhost connection

You should now see a CONNECTED message.
Visit What is my IP Address from a private/incognito browser to verify your new IP address and virtual location.

How to change the CyberGhost server

Follow the steps at the top of the page to create a new CyberGhost location profile in your account.
Then proceed with the settings same as initial setup.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

How to Use ASUS VPN Fusion: Assign Devices and Multiple VPNs

Dave · Oct 26, 2026 ·

ASUS VPN Fusion lets supported AsusWRT routers run VPN client profiles and decide which connected devices use each VPN connection. You can send the entire network through one VPN, use separate VPN profiles for selected devices, or leave certain devices on the regular ISP connection.

This guide covers how to use ASUS VPN Fusion to assign devices to specific VPN connections, manage multiple VPN profiles simultaneously, and choose which devices use a VPN or connect directly through your ISP. These features work with supported VPN providers and protocols, including WireGuard and OpenVPN.

Open VPN Fusion

Connect your computer or phone to your ASUS FlashRouter’s WiFi or LAN.
Open http://www.asusrouter.com or the router’s LAN IP (often 192.168.50.1) and log in. See How to Access Your AsusWRT FlashRouter Settings.
Go to VPN > VPN Fusion. Add and configure at least one working VPN client profile before assigning devices.

VPN Fusion displays your saved VPN profiles and the Add Profile option.

Method 1: Apply One VPN to All Devices

Use this option when you want the selected VPN profile to be your router’s default connection.

In VPN Fusion, open the VPN profile that should provide the default internet route.
Enable Apply to all devices (or Default Connection in firmware that uses that label).
Click Apply all settings, then enable the VPN profile.
Connect a test device to the router and check its IP. If you use per-device overrides, verify those rules separately.

ASUS VPN Fusion Apply to all devices setting and device count — Enable Apply to all devices to use the selected VPN as the default connection.

Method 2: Send Only Selected Devices Through a VPN

In VPN Fusion, turn off Apply to all devices for a profile when you do not want that VPN used network-wide.
Open the profile’s Device area using the pencil/edit icon or the firmware’s device-assignment control.
Select the intended devices (for example, a TV and streaming box), confirm with OK, then click Apply all settings.
Enable the VPN profile and verify the selected devices’ public IPs.
For devices that should use the normal ISP internet, leave them on the Internet Connection route or explicitly set the Internet/bypass rule available in your firmware. Remove any conflicting VPN assignments.

Important: A device being connected to ASUS WiFi does not guarantee that it is assigned to the desired VPN. Check the assigned profile and the actual public IP.

How Multiple VPN Connections Work

On supported models, VPN Fusion can keep several VPN connections active and route different devices through different providers at the same time. For example:

TVNordVPN — WireGuard

LaptopProton VPN — OpenVPN

Streaming deviceSurfshark — OpenVPN

Work computerRegular ISP connection

You may be able to run one WireGuard profile and multiple OpenVPN profiles concurrently, but connection limits and supported combinations vary by ASUS router model and firmware. Adding many saved OpenVPN profiles is not the same as having all of them connected at once.

Create separate profiles with clear names, such as Nord-US-WG, Proton-US-OVPN, and Surfshark-UK-OVPN.
Enable only the profiles you need and confirm each shows connected.
Assign each client device to the appropriate active profile; avoid applying conflicting default routes.
Verify each device’s observed IP and server country. If one tunnel fails, test it individually with the other profiles temporarily disabled.

ASUS reference: How VPN Fusion handles multiple tunnels and devices.

Confirm a Device Is Actually Using the VPN

In VPN Fusion, confirm the target profile’s connection status is active.
Check the device’s assignment in the ASUS VPN Fusion interface.
On that same device, visit IPLeak.net or another public-IP checker.
Compare the reported public IP and location with the VPN server assigned to that device.
If the device still shows your ISP IP, test with its own VPN app and iCloud Private Relay / Private DNS / browser proxy disabled. Use Device Settings That Can Interfere With Your Router VPN.

Quick isolation test

Turn off VPN Fusion routing for a test device and confirm ISP internet works.
Turn on just one known-working VPN profile for that device.
Recheck public IP. If it now works, reintroduce other profiles/assignments individually.

Want a Separate WiFi Network With or Without VPN?

Rather than selecting devices one at a time, supported ASUS routers offer Guest Network Pro or Network > VPN Network features that can associate a WiFi SSID with VPN routing. See ASUS Guest WiFi With or Without VPN: Setup Guide.

On routers with only the traditional Guest Network feature, available VPN-by-SSID behavior may differ; do not assume the standard guest SSID bypasses a network-wide VPN default.

Upgrade your ASUS router

Explore the Latest WiFi 7 ASUS FlashRouters

Looking for a newer ASUS router? Browse WiFi 7 models available from FlashRouters and compare features to find the right fit for your home or office. VPN Fusion and other features vary by router model and firmware.

Shop ASUS WiFi 7 Routers →

IPVanish Setup for Privacy Hero

TeamFlashRouters · Sep 23, 2025 ·

Privacy Hero supports IPVanish VPN through WireGuard (recommended) and OpenVPN. Both are configured in Privacy Hero using the Custom VPN provider option. You will need an active IPVanish VPN subscription and the configuration file for the protocol and server location you select.

Choose your method: WireGuard uses a generated .conf file and generally provides better performance. OpenVPN uses a downloaded .ovpn file plus your IPVanish VPN username and password.

Privacy Hero is cloud-managed. You can sign in and adjust VPN settings from a computer, phone, or tablet connected to any internet connection. You do not need to be on the Privacy Hero WiFi network to configure the router.

Download an IPVanish WireGuard Configuration (Recommended)

Use the WireGuard configuration generator in your IPVanish account to create a server file for your router. A generated WireGuard file contains the connection keys and server details, so keep it private.

Open the IPVanish account sign-in page and log in.
Open WireGuard in the account navigation to access the WireGuard Configuration Generator.
Select your preferred IPVanish server location and choose Generate to download the WireGuard configuration file. Save the downloaded .conf file to the device you are using for setup.

Important: Do not publicly share your WireGuard configuration file. To switch server locations later, generate and upload a new configuration.

Add IPVanish WireGuard to Privacy Hero

Sign in to the Privacy Hero dashboard at app.privacyhero.com.
Open the VPN section, select Change beside the provider, and choose Custom.
Choose WireGuard and upload the IPVanish .conf file you just generated.
Click Save to apply the settings. Wait for Privacy Hero to report Connected.

Privacy Hero Custom WireGuard configuration with WireGuard file upload

WireGuard authentication is contained in the generated configuration file; there is no separate OpenVPN username/password step in this method.

Download an IPVanish OpenVPN Configuration File

OpenVPN is a good alternative if WireGuard is unavailable or fails to connect on your network. It requires an IPVanish .ovpn configuration file and VPN login credentials.

Open the IPVanish OpenVPN server configuration list.
Download an .ovpn file for your preferred available server location. If IPVanish provides both UDP and TCP files, start with UDP and keep a TCP file as a fallback.
Have your IPVanish account username and password available for the OpenVPN setup. Use the credentials accepted by your IPVanish VPN account; these are not Privacy Hero login credentials.

If the linked server directory has changed, check the latest manual OpenVPN configuration downloads offered by IPVanish before selecting a file.

Add IPVanish OpenVPN to Privacy Hero

Sign in at app.privacyhero.com and open VPN.
Select Change, choose Custom, and select OpenVPN.
Upload the IPVanish .ovpn file you downloaded.
Enter your IPVanish username and password in the Custom OpenVPN fields. Do not enter the Privacy Hero account login.
Click Save and wait for the connection status to show Connected.

Privacy Hero Custom OpenVPN configuration showing server file upload and username and password fields

Tip: If OpenVPN UDP times out or cannot connect, try an available IPVanish OpenVPN TCP configuration or another server location.

Verify Your IPVanish VPN Connection

After Privacy Hero displays Connected, verify that a device on the router is actually using IPVanish.

Connect the device you want to test to the Privacy Hero WiFi or LAN network.
Temporarily disconnect any IPVanish app, other VPN app, or device-level VPN connection on that device so you test the router VPN alone.
Open a new private/incognito browser window and visit IPVanish What Is My IP Address.
Confirm that your public IP address and approximate location correspond to the VPN server you selected.

Note: Privacy Hero settings can be managed remotely, but the device used for this IP test must be on the Privacy Hero network.

Streaming Relocation and Your VPN Location

If Streaming Relocation is enabled for a supported streaming service, that service may use the configured Streaming Relocation location instead of the IPVanish server location. See Privacy Hero Streaming Relocation.

IPVanish Not Connecting?

If Privacy Hero remains on Connecting, displays Failed, or reports a timeout, check the following:

Make sure your IPVanish subscription is active and that Custom is selected as the VPN provider in Privacy Hero.
For WireGuard, generate a fresh configuration from your IPVanish account and upload that .conf file again.
For OpenVPN, confirm your IPVanish username/password and upload a fresh .ovpn file for a different server.
Try a different server location. With OpenVPN, also try switching between available UDP and TCP files.
Temporarily disable the Privacy Hero VPN connection and test normal internet access. If enabled, temporarily turn off the VPN Kill Switch for this test, then restore your preferred Kill Switch setting.
Check whether a device-level VPN app, private DNS, proxy, or security software is interfering with the router VPN connection.

VPN Disconnected and No Internet?

The VPN Kill Switch can intentionally block internet access when the VPN disconnects. Review Privacy Hero VPN Kill Switch Setup.

VPN Connected but One Device Shows the Wrong IP?

If only one device shows an unexpected IP address, look for another VPN app, iCloud Private Relay, Private DNS, browser proxy/DNS settings, or security software on that device. See Device Settings That Can Interfere With Your Router VPN.

Related Privacy Hero Guides

VPN Unlimited Manual OpenVPN Setup

TeamFlashRouters · Apr 19, 2019 ·

Preparing for Manual VPN Unlimited Setup

Verify your VPN Unlimited login information

If you are not already a VPN Unlimited user Sign Up Now.

Log in to your account on the VPN Unlimited website.

Generate your VPN Unlimited OVPN Configuration Files

1. Navigate to the VPN Unlimited section in the dropdown on the top left.

2. Set Device to “Manually create new device…”

3. Name your device.

4. Select Server.

5. Set Protocol to OpenVPN.

FlashRouters DD-WRT Privacy App - Create Open VPN Configuration files

6. Open the ‘.OVPN’ file in a word processing program.

NOTE: We highly recommend using Notepad++ for Windows or TextEdit for Apple to open these files in order to preserve text format.

DD-WRT Router Setup for VPN Unlimited

Navigate to the Services > VPN

Enter VPN Unlimited settings

OpenVPN Client

Start OpenVPN Client

If you wish to disable your VPN connection simply set this to Disable at any time and click Apply Settings.

Server IP/Name

At the bottom of the .ovpn file you downloaded above, you can find your server address, it should look something like us-la.vpnunlimitedapp.com

Port

1194 for Tunnel Protocol UDP
80 for Tunnel Protocol TCP

Tunnel Device

TUN

Tunnel Protocol

UDP or TCP

Encryption cipher

Blowfish-CBC

Hash Algorithm

SHA1

User Pass Authentication

Disabled

Advanced Options

Enable

TLS Cipher

None

LZO Compression

Adaptive

NAT

Enable

Firewall Protection

Enable

nsCertType verification

Checked

Additional Config

persist-key
persist-tun

Policy Based Routing

This field can be used for split VPN and Dual Gateway routing.

CA Cert

—–BEGIN CERTIFICATE—–
MIIEjjCCA/egAwIBAgIJAKsVbHBdakXuMA0GCSqGSIb3DQEBBQUAMIHgMQswCQYD
VQQGEwJVUzELMAkGA1UECBMCTlkxETAPBgNVBAcTCE5ldyBZb3JrMR8wHQYDVQQK
ExZTaW1wbGV4IFNvbHV0aW9ucyBJbmMuMRYwFAYDVQQLEw1WcG4gVW5saW1pdGVk
MSMwIQYDVQQDExpzZXJ2ZXIudnBudW5saW1pdGVkYXBwLmNvbTEjMCEGA1UEKRMa
c2VydmVyLnZwbnVubGltaXRlZGFwcC5jb20xLjAsBgkqhkiG9w0BCQEWH3N1cHBv
cnRAc2ltcGxleHNvbHV0aW9uc2luYy5jb20wHhcNMTMxMjE2MTM1OTQ0WhcNMjMx
MjE0MTM1OTQ0WjCB4DELMAkGA1UEBhMCVVMxCzAJBgNVBAgTAk5ZMREwDwYDVQQH
EwhOZXcgWW9yazEfMB0GA1UEChMWU2ltcGxleCBTb2x1dGlvbnMgSW5jLjEWMBQG
A1UECxMNVnBuIFVubGltaXRlZDEjMCEGA1UEAxMac2VydmVyLnZwbnVubGltaXRl
ZGFwcC5jb20xIzAhBgNVBCkTGnNlcnZlci52cG51bmxpbWl0ZWRhcHAuY29tMS4w
LAYJKoZIhvcNAQkBFh9zdXBwb3J0QHNpbXBsZXhzb2x1dGlvbnNpbmMuY29tMIGf
MA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDADUzS8QWGvdhLFKsEzAiq5+b0ukKj
Bza0k6/dmCeYTvCVqGKg/h1IAtQdVVLAkmEp0zvGH7PuOhXm7zZrCouBr/RiG4tE
coRHwc6AJmowkYERlY7+xGx3OuNrD00QceNTsan0bn78jwt0zhFNmHdoTtFjgK3o
qmQYSAtbEVWYgwIDAQABo4IBTDCCAUgwHQYDVR0OBBYEFKClmYP+tMNgWagUJCCH
jtaui2k+MIIBFwYDVR0jBIIBDjCCAQqAFKClmYP+tMNgWagUJCCHjtaui2k+oYHm
pIHjMIHgMQswCQYDVQQGEwJVUzELMAkGA1UECBMCTlkxETAPBgNVBAcTCE5ldyBZ
b3JrMR8wHQYDVQQKExZTaW1wbGV4IFNvbHV0aW9ucyBJbmMuMRYwFAYDVQQLEw1W
cG4gVW5saW1pdGVkMSMwIQYDVQQDExpzZXJ2ZXIudnBudW5saW1pdGVkYXBwLmNv
bTEjMCEGA1UEKRMac2VydmVyLnZwbnVubGltaXRlZGFwcC5jb20xLjAsBgkqhkiG
9w0BCQEWH3N1cHBvcnRAc2ltcGxleHNvbHV0aW9uc2luYy5jb22CCQCrFWxwXWpF
7jAMBgNVHRMEBTADAQH/MA0GCSqGSIb3DQEBBQUAA4GBALkWhfw7SSV7it+ZYZmT
+cQbExjlYgQ40zae2J2CqIYACRcfsDHvh7Q+fiwSocevv2NE0dWi6WB2H6SiudYj
vDvubAX/QbzfBxtbxCCoAIlfPCm8xOnWFN7TUJAzWwHJkKgEnu29GZHu2x8J+7Ve
DbKH5RTMHHe8FkSxh6Zz/BMN
—–END CERTIFICATE—–

Public Client Cert

Copy and Paste all contents in between the <cert> and </cert> lines from your .ovpn file starting and ending with:
—–BEGIN CERTIFICATE—–
…
—–END CERTIFICATE—–

Private Client Key

Copy and Paste all contents in between the <key> and </key> lines from your .ovpn file starting and ending with:
—–BEGIN RSA PRIVATE KEY—–
…
—–END RSA PRIVATE KEY—–

CLICK APPLY SETTINGS

Leave all settings not mentioned above as their default setting.

Verify a successful VPN Unlimited connection

Navigate to the Status > OpenVPN

You should now see a CONNECTED SUCCESS message.
Visit to WhatIsMyIPAddress to verify your new IP address and virtual location.

Back up your settings

Navigate to the Administration > Backup

Click the Backup button.
A file named nvrambak.bin will be saved to your computer.
You can load nvrambak.bin to restore your settings in the event of a reset.

How to change the VPN Unlimited server

Follow Steps 1-6 to Generate an .OVPN file for the server you wish to connect to and open it a word processing program.
Copy and paste the server IP Address into the Server IP/Name field.
Copy and paste the <cert> into the Public Client Cert field.
Copy and paste the <key> into the Private Client Key field.
Click Apply Settings.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

IPVanish Asus AX1800S OpenVPN Setup

TeamFlashRouters · Feb 26, 2024 ·

Preparing for IPVanish Asus AX1800S Setup

Download your IPVanish .ovpn file

If you are not already an IPVanish user Sign Up Now.

1. Log in to your account on the IPVanish website.

2. Successfully log in with your account information then go to IPVanish .ovpn file page.

3. Click on the .ovpn file for the server location you want to use to dowloand the .ovpn file. Do not open this file.

Asus AX1800S Router Setup for IPVanish

1. Navigate to the VPN tab.

2. Navigate to the VPN Client tab.

3. Click Add Profile.

4. Click Choose file and select the .ovpn file you downloaded earlier. Then click Upload.

5. In the Description field enter in the name you’d like to use for this OpenVPN Client profile. We typically advise entering in the location or server number here.

6. Enter your IPVanish account email/username and password.

7. Click the Activate button.

Verify a successful IPVanish connection

You should now see a check mark in the Connection Status area.
Visit IPVanish’s IP Check to verify your new IP address and virtual location.

How to change the IPVanish server

Follow the steps at the top of the page to obtain a new .ovpn file.
Then proceed with the settings same as initial setup.
Be sure to deactivate a previously active connection before activating the new one. You do not want to connect to two at the same time.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

PrivateInternetAccess (PIA) Asus AX1800S OpenVPN Setup

TeamFlashRouters · Feb 26, 2024 ·

Preparing for PIA Asus AX1800S Setup

Download your PIA .ovpn file

If you are not already a PIA user Sign Up Now.

1. Log in to your account on the PIA website.

2. Successfully log in with your account information then go to PIA’s OpenVPN Config Generator.

3. On the OpenVPN Configuration Generator select the following:

OpenVPN Version: OpenVPN 2.4 or newer

Select Platform: Linux

Select Region: Choose the server location you’d like to connect to

Select Port: Typically we recommend UDP/1198 RSA-2048 AES-128-CBC SHA1 for best speeds but feel free to select the one you want to use.

4. Click Generate to download the .ovpn file. Do not open this file once it is downloaded.

Asus AX1800S Router Setup for PIA

1. Navigate to the VPN tab.

2. Navigate to the VPN Client tab.

3. Click Add Profile.

4. Click Choose file and select the .ovpn file you downloaded earlier. Then click Upload.

5. In the Description field enter in the name you’d like to use for this OpenVPN Client profile. We typically advise entering in the location here.

6. Enter your PIA account username and password.

7. Click the Activate button.

Verify a successful PIA connection

You should now see a check mark in the Connection Status area.
Visit PIA’s IP Check to verify your new IP address and virtual location.

How to change the PIA server

Follow the steps at the top of the page to obtain a new .ovpn file.
Then proceed with the settings same as initial setup.
Be sure to deactivate a previously active connection before activating the new one. You do not want to connect to two at the same time.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

My 5.0GHz network is not showing up

TeamFlashRouters · May 2, 2019 ·

Verify the device supports 5GHz

5.0GHz networks are not compatible with all devices so first make sure that you device’s wireless adapter supports 5GHz wireless frequencies.

If you are not sure, find out if your device support 5 GHz via Google search or by looking in the wireless hardware details in the device’s network settings. If you see Wireless a/b/g/n support then you have a compatible device. If you are missing the Wireless a then this means there is no 5 GHz support.

Enter the recommended wireless settings

Our team has tested the wireless functionality for each FlashRouter that we offer and shared our recommended wireless settings in our Wifi Setup area. Replicate the settings for your FlashRouter model found on that page.

Lower the wireless channel

Some devices do support 5.0GHz connections but not the higher channels that DD-WRT firmware offers.

Navigate to Wireless > Basic Settings

Lower the wireless channel setting for the 5.0GHz band that is not showing. Based on our tests the most broadly compatible channels are 36, 48 and 161.

CLICK APPLY SETTINGS

Refresh your device's network adapter

The easiest way to accomplish this is by rebooting your device as the settings to reset your adapter may vary on all types of internet connected devices.

Review wireless Status

Navigate to Status > Wireless

The readouts on this page can help tell if there are errors with the FlashRouter’s wireless. View our article on how to read the Wireless Status page for more information.

Wireless Client Bridge Setup

TeamFlashRouters · Apr 22, 2019 ·

If you need to extend your wired connection capabilities and you are not able to wire directly into your main router, you can setup a FlashRouter as a Wireless Client Bridge. In Wireless Client Bridge mode the FlashRouter connects to your main router via WiFi, and then transmits your internet signal via the FlashRouter LAN ports for wired internet access anywhere in your home or office.

Preparing for Wireless Client Bridge Setup

Verify your wireless information

In order to setup your FlashRouter as a Wireless Client Bridge, you will need the exact SSID and password of your existing wireless network. Make sure you have this information before proceeding.

We recommend using a 2.4GHz network to repeat as this network will have more range.

Locate the Local IP Address of the existing wireless network

Locate the Local IP Address of the existing router that the FlashRouter will be bridged to.

DD-WRT Router Setup for Wireless Client Bridge

Disable Firewall

Navigate to Security > Firewall

Set SPI Firewall to Disable.
Uncheck all boxes except for Filter Multicast.
Click Save.

Disable DNSmasq

Navigate to Services > Services

Set DNSmasq to Disable.
Click Save.

Enter Wireless settings

Navigate to Wireless > Basic Settings

Wireless Client Bridge Setup on FlashRouter DD-WRT - Set Wireless Mode to Client Bridge

In the Wireless Physical Interface settings for the 2.4GHz network set the Wireless Mode to Client Bridge.
Change the Wireless Network Name (SSID) to match exactly with the Wireless Network Name of the network that you will bridge to.
Click Save.

Enter Wireless Security settings

Navigate to Wireless > Wireless Security

Wireless Client Bridge Setup on FlashRouter DD-WRT - Set Wireless Password

Change the WPA Shared Key to match exactly with the Wireless Password of the network that you will bridge to.
Click Save.

Change the FlashRouter's Local IP Address

Navigate to Setup > Basic Setup

Set the Local IP Address to a different address on the same subnet as the existing network that you noted early. (example: if the existing network is 192.168.1.1 then set the Local IP Address to 192.168.1.2)
Set the Gateway to the Local IP Address of the existing network. (example: 192.168.1.1)
Set the Local DNS to the Local IP Address of the existing network. (example: 192.168.1.1)
Click Apply Settings.

Reboot your FlashRouter

Power off the FlashRouter for 30 seconds and then power it back on. When it boots back up you will be able to access the FlashRouter’s settings at the new Local IP Address that you set. Your existing network and the FlashRouter’s network will now be bridged wirelessly.

Your FlashRouter is now providing wired connection access to your main router network. Wireless connections to the FlashRouter are disabled in this setup.

Back up your settings

Navigate to Administration > Backup

Click the Backup button.
A file named nvrambak.bin will be saved to your computer.
You can load nvrambak.bin to restore your settings in the event of a reset.

TROUBLESHOOTING

Still having issues? Visit our Troubleshooting section to diagnose common problems here.

Troubleshoot Here

How to Access Your GL.iNet FlashRouter Settings

TeamFlashRouters · Feb 26, 2024 ·

This quick guide walk you through connecting to your GL.iNet FlashRouter (Flint, Slate, Beryl, or Marble) and logging into the admin settings page. You’ll use either WiFi or an Ethernet cable, then access the router dashboard through your browser.

Step 1. Connect Your Device to the Router

You can connect by WiFi or Ethernet:

WiFi: Look for a network name like FlashRouter24 or FlashRouter50
- The WiFi password has been set to: Wireless#9483C
- ⚠️ Be sure to capitalize the “W” in
Ethernet: Plug an Ethernet cable from your computer into one of the router’s LAN ports (usually marked or color-coded differently from the WAN port).

👉 Pro tip: Disconnect from any other WiFi networks during setup.

Step 2. Open the Router Login Page

Open a web browser (Chrome, Safari, Firefox, Edge).
In the address bar, type: 192.168.8.1
Press Enter.

This is the local router dashboard address (not a public website). If the page doesn’t load:

Try a different browser.
Clear your cache.
Ensure your device is connected to the FlashRouter network.

Step 3. Log In to the Router Settings

Default password: glopenwrt1 or openwrt
This is the factory default for all GL.iNet routers shipped by FlashRouters.

💡 Once you’re in, you can update your admin password in the settings for extra security.

Next Steps

Now that you’ve accessed your GL.iNet FlashRouter, you can:

Set up your VPN service
Customize your WiFi name and password
Adjust device controls and security settings

Check our support library for your specific VPN setup guide.

Flint/Slate GL.iNet ExpressVPN OpenVPN Setup

TeamFlashRouters · May 29, 2023 ·

Preparing for ExpressVPN GL.iNet Setup

Obtain your ExpressVPN OpenVPN Information

If you are not already an ExpressVPN user Sign Up Now.

1. Log in to your account on the ExpressVPN website.

2. Successfully log in with your account information. Select More.

3. Select Manual Configuration and copy the Username and Password that are displayed on the right hand side of the screen.

4. Click the Server Location(s) that you want to connect to. This will download a .ovpn file to your computer that we will use later on. There is no need to open the file. For this example I have selected New York but feel free to select any server listed there or multiple servers.

GL.iNet Router Setup for ExpressVPN

Login to GL.iNet firmware settings in a browser on any computer or smart device connected to the GL.iNet FlashRouter’s network. For more instructions on how to access the firmware settings view our guide here.

1. Navigate to the VPN tab and select OpenVPN Client.

2. Click New Group.

3. Enter ExpressVPN and click the check mark.

4. Select the .ovpn file(s) you downloaded earlier and upload them here.

5. Enter in the ExpressVPN username and password that you obtained earlier. Do NOT enter your ExpressVPN account email and password login. Click Apply.

6. Select VPN Dashboard.

7. Set the Enable toggle to On to begin the ExpressVPN connection.

Verify a successful ExpressVPN connection

You should now see information appear in the Server Address, Server Listen Port, Traffic Statistics, and Client Virtual IP areas.
Visit ExpressVPN’s IP Check to verify your new IP address and virtual location.

How to change the ExpressVPN server

Download a new .ovpn file location as detailed above.
In the ExpressVPN Group on the OpenVPN Client area click Upload Configuration File and select the new .ovpn file.
Click VPN Dashboard and then click the Configuration File area and select the new location that you added.
Click Apply.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

NordVPN Setup for GL.iNet Routers

TeamFlashRouters · May 29, 2023 ·

You can connect to NordVPN on your GL.iNet router using NordLynx, OpenVPN, or a Dedicated IP.

Quick Options

NordLynx: Choose your preferred city or country from NordVPN’s server list
OpenVPN: Choose your preferred city or country from NordVPN’s server list.
Dedicated IP (optional): Enter your unique configuration file if you’ve been assigned a static NordVPN IP.

If you are not already a NordVPN user Sign Up Now.

NordVPN NordLynx Setup for GLiNet

1. Get your NordVPN Access Token for NordLynx connections. Log in to your NordVPN account and select NordVPN from your list of Services.

2. At the bottom of the page click Get Access token and you will receive a code via email. Enter this code to proceed.

3. After you enter the email code select Generate new token and set it to Doesn’t expire. Copy this token.

4. Login to GL.iNet firmware settings (usually 192.168.8.1) in a browser on any computer or smart device connected to the GL.iNet FlashRouter’s network.

View our guide for more instructions on how to access GL.iNet firmware settings.

5. Navigate to the VPN tab and select Wireguard Client then choose NordVPN. Enter your Token then click Save and Continue

6. Select your preferred server locations, and click Apply.

7. Start a connection by clicking the 3 dots (…) > Start next to your chosen server.

8. A green dot confirms success. You can also switch between Global Mode or Policy Mode for routing in the VPN Dashboard.

NordVPN OpenVPN Setup for GLiNet

1. Get your NordVPN manual service credentials for OpenVPN connections. Log in to your NordVPN account and select NordVPN from your list of Services.

2. At the bottom of the page in the Manual Setup section click Setup NordVPN manually then under the Configuration section go to Service credentials. Click Verify email to receive a code via email and enter the code to view and copy your credentials.

3. Login to GL.iNet firmware settings (usually 192.168.8.1) in a browser on any computer or smart device connected to the GL.iNet FlashRouter’s network.

View our guide for more instructions on how to access GL.iNet firmware settings.

4. Navigate to the VPN tab and select OpenVPN Client.

5. Select the NordVPN group, enter your manual credentials, then click Save Credentials & Get Servers.

6. Choose UDP (recommended), select your preferred server locations, and click Apply.

7. Start a connection by clicking the 3 dots (…) > Start next to your chosen server.

8. A green dot confirms success. You can also switch between Global Mode or Policy Mode for routing in the VPN Dashboard.

NordVPN Dedicated IP Setup for GLiNet

1. Get your NordVPN manual service credentials for OpenVPN connections. Log in to your NordVPN account and select NordVPN from your list of Services.

3. Login to GL.iNet firmware settings (usually 192.168.8.1) in a browser on any computer or smart device connected to the GL.iNet FlashRouter’s network.

View our guide for more instructions on how to access GL.iNet firmware settings.

4. Navigate to the VPN tab and select OpenVPN Client.

5. Download your Dedicated IP configuration file from the NordVPN website.

6. Click +New Group and name your NordVPN Dedicated IP connection, then upload the configuration file, enter your manual service credentials and click Apply.

7. Start a connection by clicking the 3 dots (…) > Start next to your chosen server.

8. A green dot confirms success. You can also switch between Global Mode or Policy Mode for routing in the VPN Dashboard.

You should now see information appear in the Server Address, Server Listen Port, Traffic Statistics, and Client Virtual IP areas.
Visit NordVPN’s IP Check to verify your new IP address and virtual location.

🚫📱Do not run NordVPN apps on devices connected to your NordVPN router. Using the app at the same time as the router VPN may cause conflicts and connection issues.

Still having issues?

Feel free to submit a ticket and we will get back to you as soon as possible.

CyberGhost Merlin OpenVPN Setup

TeamFlashRouters · Mar 30, 2023 ·

Preparing for CyberGhost Setup

Obtain your CyberGhost OpenVPN information

If you are not already a CyberGhost user Sign Up Now.

1. Log in to your account on the CyberGhost website.

2. Select VPN.

3. Click Configure New Device.

4. Set Protocol to OpenVPN. Select the Country you would like to connect to. Select the Server Group. Name the device in the Device Name field. Click Save Configuration.

5. Press View configuration.

6. Copy the Username, and Password that appear to a notepad, since you will need this information later in the setup process. Click Download Configuration.

Merlin Router Setup for CyberGhost

Login to Asus Merlin firmware settings in a browser on any computer or smart device connected to the Merlin FlashRouter’s network.

1. Navigate to the VPN tab.

2. Navigate to the VPN Client tab.

3. Click Choose file and select the .ovpn file from the folder you downloaded earlier. Then click Upload.

4. Set Automatic Start at boot time to Yes if you want the VPN connection to begin automatically when the router is powered off and back on.

5. In the Description field enter in the name you’d like to use for this OpenVPN Client profile. We typically advise entering in the location here. Our example server was in USA so I have entered in CyberGhost USA.

6. Set Accept DNS Configuration to Strict. Set Redirect Internet traffic through tunnel to Yes (all). Set Kill Switch to Yes or No depending on if you want the Internet to be killed if the VPN connection drops.

Merlin Accept DNS configuration Redirect Internet and Kill Switch

If you only want certain devices to connect to the OpenVPN Client profile you are setting up instead of all the devices connected to the FlashRouter’s network please set the Redirect Internet traffic through tunnel to VPN Director. Then complete the instructions on this page and then view our VPN Director guide.

7. Enter your CyberGhost OpenVPN username and password that you obtained earlier. Do not enter your account login.

8. Click the Edit button in the Keys and Certificates area.

Merlin Keys and Certificates Edit button

9. In the Certificate Authority field paste in the entire content of the ca.crt file.

—– BEGIN xxx —– / —– END xxx —– block (including those two lines).

10. In the Client Certificate field paste in the entire content of the client.crt file.

—– BEGIN xxx —– / —– END xxx —– block (including those two lines).

11. In the Client Key field paste in the entire content of the client.key file.

—– BEGIN xxx —– / —– END xxx —– block (including those two lines).

12. Click Save at the bottom of that window.

13. Click Apply at the bottom of the page.

14. At the top of the page set the Service State toggle to ON to activate the VPN connection.

Verify a successful CyberGhost connection

You should now see a CONNECTED message.
Visit What is my IP Address from a private/incognito browser to verify your new IP address and virtual location.

TROUBLESHOOTING

Still having issues? Visit the FR Privacy App Troubleshooting section.

Troubleshoot Here

ExpressVPN Cudy OpenVPN Setup

TeamFlashRouters · Feb 29, 2024 ·

Preparing for ExpressVPN Cudy Setup

Obtain your ExpressVPN OpenVPN Information

If you are not already an ExpressVPN user Sign Up Now.

1. Log in to your account on the ExpressVPN website.

2. Successfully log in with your account information. Select More.

3. Select Manual Configuration and copy the Username and Password that are displayed on the right hand side of the screen.

Cudy Router Setup for ExpressVPN

Login to Cudy firmware settings in a browser on any computer or smart device connected to the Cudy FlashRouter’s network.

1. Click General Settings.

2. Click VPN.

3. Toggle the Enable switch to On.

4. Select OpenVPN Client from the Protocol dropdown.

5. Click Browse and select the .ovpn file you downloaded earlier. You should see the server file name listed next to Current Config File after doing so.

6. Enter your ExpressVPN username and password that you obtained earlier in the Username and Password. Note that these are different from your ExpressVPN email login and password.

Cudy ExpressVPN enter username and password

7. Click Save & Apply at the bottom of the page.

Verify a successful ExpressVPN connection

You should now see a CONNECTED message.
Visit ExpressVPN’s IP Check to verify your new IP address and virtual location.

How to change the ExpressVPN server

Follow the steps at the top of the page to obtain a new .ovpn file.
Then proceed with the settings same as initial setup.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

Surfshark Merlin WireGuard Setup

TeamFlashRouters · Mar 30, 2023 ·

Preparing for Surfshark Merlin Setup

Download your Surfshark .conf file

If you are not already a Surfshark user Sign Up Now.

1. Log in to your account on the Surfshark website.

2. Click VPN Manual Setup.

3. Select Router as the Setup Method.

4. Select WireGuard as the Protocol.

5. Select I don’t have a key pair.

6. Enter FlashRouter as the name of the connection and click Next.

7. Click Generate a new key pair.

8. Click Choose a location.

9. Select the server location you want to connect to. Unless you need a specific location we recommend using Surfshark’s recommended Fastest server. Click Download to download the .conf file for this Surfshark server location.

Merlin Router Setup for Surfshark

Login to Asus Merlin firmware settings in a browser on any computer or smart device connected to the Merlin FlashRouter’s network.

1. Navigate to the VPN tab.

2. Navigate to the VPN Client tab.

3. Select WireGuard as the VPN Protocol.

4. Click Choose file and select the .conf file you downloaded earlier. Then click Upload.

5. In the Description field enter in the name you’d like to use for this WireGuard Client profile. We typically advise entering in the location here. Our example server was in New York so I have entered in Surfshark New York.

6. Set Enable WireGuard to Yes.

7. Click Apply at the bottom of the page and you should then see a Connected message appear.

8. By default no devices are assigned to the new active WireGuard connection profile. Click the VPN Director tab to assign specific devices to the new WireGuard profile. Your IP will not be changed on your devices yet.

9. On the VPN Director page click the + symbol next to Add new rule.

10. Select the new WireGuard profile in the Interface dropdown.

11. In the Local IP field enter in 192.168.50.0/24 if you want ALL devices connected to the FlashRouter’s network to use the WireGuard VPN connection. Click OK.

If you only want certain devices to connect to the WireGuard Client profile you have setting up instead of all the devices connected to the FlashRouter’s network please complete the instructions on our VPN Director guide.

12. Then click Apply at the bottom of the page.

Verify a successful Surfshark connection

Visit Surfshark’s IP Check from a private/incognito browsing window to verify your new IP address and virtual location.

How to change the Surfshark server

Follow the steps at the top of the page to obtain a new .conf file.
Then proceed with the settings same as initial setup.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

ExpressVPN Manual OpenVPN Setup

admin · Feb 19, 2019 ·

Preparing for Manual ExpressVPN Setup

Obtain your ExpressVPN OpenVPN Information

If you are not already an ExpressVPN user Sign Up Now.

1. Log in to your account on the ExpressVPN website.

2. Successfully log in with your account information. Select More.

3. Select Manual Configuration and copy the Username and Password that are displayed on the right hand side of the screen.

ExpressVPN Server Addresses

Americas

usa-atlanta-ca-version-2.expressnetw.com
usa-boston-ca-version-2.expressnetw.com
usa-chicago-ca-version-2.expressnetw.com
usa-dallas-ca-version-2.expressnetw.com
usa-dallas-2-ca-version-2.expressnetw.com
usa-denver-ca-version-2.expressnetw.com
usa-kansascity-ca-version-2.expressnetw.com
usa-losangeles-ca-version-2.expressnetw.com
usa-losangeles-1-ca-version-2.expressnetw.com
usa-losangeles-2-ca-version-2.expressnetw.com
usa-losangeles-3-ca-version-2.expressnetw.com
usa-los-angeles-4-ca-version-2.expressnetw.com
usa-miami-ca-version-2.expressnetw.com
usa-miami-2-ca-version-2.expressnetw.com
usa-minneapolis-ca-version-2.expressnetw.com
usa-newjersey-1-ca-version-2.expressnetw.com
usa-newjersey-3-ca-version-2.expressnetw.com
usa-newyork-ca-version-2.expressnetw.com
us-new-york-2-ca-version-2.expressnetw.com
usa-phoenix-ca-version-2.expressnetw.com
usa-saltlakecity-ca-version-2.expressnetw.com
usa-sanfrancisco-ca-version-2.expressnetw.com
usa-sanjose-ca-version-2.expressnetw.com
usa-seattle-ca-version-2.expressnetw.com
usa-tampa-1-ca-version-2.expressnetw.com
usa-virginia-ca-version-2.expressnetw.com
usa-washingtondc-ca-version-2.expressnetw.com
usa-washingtondc-2-ca-version-2.expressnetw.com
canada-montreal-ca-version-2.expressnetw.com
canada-toronto-ca-version-2.expressnetw.com
canada-toronto-2-ca-version-2.expressnetw.com
canada-vancouver-ca-version-2.expressnetw.com
mexico-ca-version-2.expressnetw.com
argentina-ca-version-2.expressnetw.com
brazil-ca-version-2.expressnetw.com
brazil-2-ca-version-2.expressnetw.com
chile-ca-version-2.expressnetw.com
colombia-ca-version-2.expressnetw.com
costarica-ca-version-2.expressnetw.com
ecuador-ca-version-2.expressnetw.com
guatemala-ca-version-2.expressnetw.com
panama-ca-version-2.expressnetw.com
peru-ca-version-2.expressnetw.com
uruguay-ca-version-2.expressnetw.com
venezuela-ca-version-2.expressnetw.com

Europe

uk-berkshire-ca-version-2.expressnetw.com
uk-berkshire-2-ca-version-2.expressnetw.com
uk-docklands-ca-version-2.expressnetw.com
uk-east-london-ca-version-2.expressnetw.com
uk-kent-ca-version-2.expressnetw.com
uk-london-ca-version-2.expressnetw.com
france-paris-1-ca-version-2.expressnetw.com
france-paris-2-ca-version-2.expressnetw.com
france-strasbourg-ca-version-2.expressnetw.com
germany-darmstadt-ca-version-2.expressnetw.com
germany-frankfurt-1-ca-version-2.expressnetw.com
germany-frankfurt-2-ca-version-2.expressnetw.com
germany-nuremberg-ca-version-2.expressnetw.com
italy-cosenza-ca-version-2.expressnetw.com
italy-milan-ca-version-2.expressnetw.com
netherlands-amsterdam-ca-version-2.expressnetw.com
netherlands-rotterdam-ca-version-2.expressnetw.com
netherlands-thehague-ca-version-2.expressnetw.com
spain-barcelona-ca-version-2.expressnetw.com
spain-ca-version-2.expressnetw.com
sweden-ca-version-2.expressnetw.com
sweden-2-ca-version-2.expressnetw.com
switzerland-ca-version-2.expressnetw.com
switzerland-2-ca-version-2.expressnetw.com
albania-ca-version-2.expressnetw.com
andorra-ca-version-2.expressnetw.com
armenia-ca-version-2.expressnetw.com
austria-ca-version-2.expressnetw.com
azerbaijan-ca-version-2.expressnetw.com
belarus-ca-version-2.expressnetw.com
belgium-ca-version-2.expressnetw.com
bosniaandherzegovina-ca-version-2.expressnetw.com
bulgaria-ca-version-2.expressnetw.com
croatia-ca-version-2.expressnetw.com
cyprus-ca-version-2.expressnetw.com
czechrepublic-ca-version-2.expressnetw.com
denmark-ca-version-2.expressnetw.com
estonia-ca-version-2.expressnetw.com
finland-ca-version-2.expressnetw.com
georgia-ca-version-2.expressnetw.com
greece-ca-version-2.expressnetw.com
hungary-ca-version-2.expressnetw.com
iceland-ca-version-2.expressnetw.com
ireland-ca-version-2.expressnetw.com
isleofman-ca-version-2.expressnetw.com
jersey-ca-version-2.expressnetw.com
latvia-ca-version-2.expressnetw.com
liechtenstein-ca-version-2.expressnetw.com
lithuania-ca-version-2.expressnetw.com
luxembourg-ca-version-2.expressnetw.com
macedonia-ca-version-2.expressnetw.com
malta-ca-version-2.expressnetw.com
moldova-ca-version-2.expressnetw.com
monaco-ca-version-2.expressnetw.com
montenegro-ca-version-2.expressnetw.com
norway-ca-version-2.expressnetw.com
poland-ca-version-2.expressnetw.com
portugal-ca-version-2.expressnetw.com
romania-ca-version-2.expressnetw.com
serbia-ca-version-2.expressnetw.com
slovakia-ca-version-2.expressnetw.com
slovenia-ca-version-2.expressnetw.com
ukraine-ca-version-2.expressnetw.com

Asia Pacific

australia-brisbane-ca-version-2.expressnetw.com
australia-melbourne-ca-version-2.expressnetw.com
australia-perth-ca-version-2.expressnetw.com
australia-sydney-ca-version-2.expressnetw.com
australia-sydney-2-ca-version-2.expressnetw.com
australia-sydney-3-ca-version-2.expressnetw.com
hongkong-2-ca-version-2.expressnetw.com
hongkong4-ca-version-2.expressnetw.com
hongkong-1-ca-version-2.expressnetw.com
japan-tokyo-1-ca-version-2.expressnetw.com
japan-tokyo-2-ca-version-2.expressnetw.com
india-chennai-ca-version-2.expressnetw.com
india-mumbai-1-ca-version-2.expressnetw.com
singapore-cbd-ca-version-2.expressnetw.com
singapore-jurong-ca-version-2.expressnetw.com
southkorea-ca-version-2.expressnetw.com
southkorea2-ca-version-2.expressnetw.com
bangladesh-ca-version-2.expressnetw.com
bhutan-ca-version-2.expressnetw.com
brunei-ca-version-2.expressnetw.com
cambodia-ca-version-2.expressnetw.com
indonesia-ca-version-2.expressnetw.com
kazakhstan-ca-version-2.expressnetw.com
kyrgyzstan-ca-version-2.expressnetw.com
laos-ca-version-2.expressnetw.com
macau-ca-version-2.expressnetw.com
malaysia-ca-version-2.expressnetw.com
mongolia-ca-version-2.expressnetw.com
myanmar-ca-version-2.expressnetw.com
nepal-ca-version-2.expressnetw.com
newzealand-ca-version-2.expressnetw.com
pakistan-ca-version-2.expressnetw.com
ph-via-sing-ca-version-2.expressnetw.com
srilanka-ca-version-2.expressnetw.com
taiwan-3-ca-version-2.expressnetw.com
thailand-ca-version-2.expressnetw.com
vietnam-ca-version-2.expressnetw.com

Middle East and Africa

algeria-ca-version-2.expressnetw.com
israel-ca-version-2.expressnetw.com
kenya-ca-version-2.expressnetw.com
southafrica-ca-version-2.expressnetw.com

DD-WRT Router Setup for ExpressVPN

Navigate to Services > VPN

Enter ExpressVPN settings

OpenVPN Client

Start OpenVPN Client

If you wish to disable your VPN connection simply set this to Disable at any time and click Apply Settings.

Server IP/Name

Copy and paste the server you would like to connect to from the server list above. Be sure there are no extra spaces or characters.

If you wish to change ExpressVPN connection locations, THE ONLY SETTING YOU NEED TO CHANGE IS THE EXPRESSVPN SERVER ADDRESS.*

Port

1195

Tunnel Device

TUN

Tunnel Protocol

UDP

Encryption cipher

AES-256-CBC

Hash Algorithm

SHA512

User Pass Authentication

Enable

Username

Enter the Username you found in the Manual Config section.

Password

Enter the Password you found in the Manual Config section.

Advanced Options

Enable

TLS Cipher

None

LZO Compression

Adaptive

NAT

Enable

Firewall Protection

Enable

nsCertType verification

Checked

TLS Auth Key

-----BEGIN OpenVPN Static key V1-----
48d9999bd71095b10649c7cb471c1051
b1afdece597cea06909b99303a18c674
01597b12c04a787e98cdb619ee960d90
a0165529dc650f3a5c6fbe77c91c137d
cf55d863fcbe314df5f0b45dbe974d9b
de33ef5b4803c3985531c6c23ca6906d
6cd028efc8585d1b9e71003566bd7891
b9cc9212bcba510109922eed87f5c8e6
6d8e59cbd82575261f02777372b2cd4c
a5214c4a6513ff26dd568f574fd40d6c
d450fc788160ff68434ce2bf6afb00e7
10a3198538f14c4d45d84ab42637872e
778a6b35a124e700920879f1d003ba93
dccdb953cdf32bea03f365760b0ed800
2098d4ce20d045b45a83a8432cc73767
7aed27125592a7148d25c87fdbe0a3f6
-----END OpenVPN Static key V1-----

Additional Config

persist-key
persist-tun
fragment 1300
mssfix 1450
keysize 256

Policy Based Routing

This field can be used for split VPN and Dual Gateway routing.

CA Cert

Public Client Cert

Private Client Key

CLICK APPLY SETTINGS

Leave all settings not mentioned above as their default setting.

Verify a successful ExpressVPN connection

Navigate to Status > OpenVPN.

You should now see a CONNECTED SUCCESS message.
Visit ExpressVPN’s IP Check to verify your new IP address and virtual location.

Back up your settings

Navigate to Administration > Backup

Click the Backup button.
A file named nvrambak.bin will be saved to your computer.
You can load nvrambak.bin to restore your settings in the event of a reset.

How to change the ExpressVPN server

Copy the new ExpressVPN server address from the above server list.
Paste the server into the Server IP/Name field.
Click Apply Settings.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

Why are some of my devices not connecting to the internet?

Dave · May 2, 2019 ·

Make sure you are not using any device VPN device application or proxy on devices that are connected to the FlashRouter’s network as this can cause a conflict. Make sure the FlashRouter’s VPN connection is the only active VPN connection in your network.
Check that static settings are not configured on your device.
Certain devices require port forwarding rules to be properly setup before full connectivity. This may apply to devices like VOIP or smart cameras. If this is the case you may need to contact the manufacturer for more specific information.
Check that the FR Privacy App feature for a device specific Kill Switch is not set for the device, and if kill switch is setup, then make sure the VPN connection is active.

VPN Director for Asus Merlin

TeamFlashRouters · Jan 19, 2022 ·

Once you have OpenVPN connected on your Merlin FlashRouter you can manage your VPN connections by device or by VPN servers or even VPN providers. This is a major advantage of Asus Merlin firmware as it allows up to 5 VPN connections at the same.

Setup multiple VPN clients

1. Under Advanced Settings select VPN.

2. Click the VPN Client tab.

3. In the Select Client instance dropdown select a new client instance to setup and follow your VPN providers setup guide.

4. Name the client in the Description field for more clarity for which server or provider is being setup.

5. Set the Redirect Internet traffic through tunnel dropdown to VPN Director.

Start or Stop VPN Client

1. Under Advanced Settings select VPN.

2. Click the VPN Director tab.

3. With multiple VPN clients connected you can start and stop them as needed from this page.

Assign a device to a specific VPN client

1. On the VPN Director page click the + symbol next to Add new rule.

2. Select the Interface that you want to add the device to.

3. Click the Local IP dropdown and a full list of devices connected to the Merlin FlashRouter should appear. Select the device you want to assign to this VPN client.

4. Click OK and click Apply.

PureVPN Merlin WireGuard Setup

TeamFlashRouters · Jul 20, 2023 ·

Preparing for PureVPN Merlin Setup

Download your PureVPN .conf file

If you are not already an PureVPN user Sign Up Now.

1. Log in to your account on the PureVPN website.

2. Select Manual Configuration.

3. Select the Server Location you want to connect to and then click Download.

4. In the Select Protocol dropdown choose WireGuard.

5. In the Select Device dropdown choose DD-WRT. Then click Generate Configuration. This will save a .conf file to your computer.

Merlin Router Setup for PureVPN

Login to Asus Merlin firmware settings in a browser on any computer or smart device connected to the Merlin FlashRouter’s network.

1. Navigate to the VPN tab.

2. Navigate to the VPN Client tab.

3. Select WireGuard as the VPN Protocol.

4. Click Choose file and select the .conf file you downloaded earlier. Then click Upload.

5. In the Description field enter in the name you’d like to use for this WireGuard Client profile. We typically advise entering in the location here.

6. Set Enable WireGuard to Yes.

7. Click Apply at the bottom of the page and you should then see a Connected message appear.

9. On the VPN Director page click the + symbol next to Add new rule.

10. Select the new WireGuard profile in the Interface dropdown.

11. In the Local IP field enter in 192.168.50.0/24 if you want ALL devices connected to the FlashRouter’s network to use the WireGuard VPN connection. Click OK.

12. Then click Apply at the bottom of the page.

Verify a successful PureVPN connection

Visit PureVPN’s IP Check to verify your new IP address and virtual location.

How to change the PureVPN server

Follow the steps at the top of the page to obtain a new .conf file.
Then proceed with the settings same as initial setup.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

« Previous Page