Setup Guides
Troubleshooting
Account & Billing
VPN Use Cases
FAQs
Business
Learning Center
An Easy Guide for Setting up OpenVPN on Asus RT-N66U
Asus RT-N66U is ranked 4th out of the top 8 best wireless routers and is equipped with Gigabit Ethernet ports that ensure fast and reliable internet connection. The following guide will help you through the process of setting up PureVPN on Asus RT N66U router
Things to Consider:
Before you begin, please make sure that:
- You have a working internet connection
- OpenVPN supported Asus router
- A Premium PureVPN account (If you haven’t bought yet click here to buy)
To configure OpenVPN on Asus, first download the OpenVPN Files from here
1 Access your Router Control panel, click on ‘VPN’ tab and select ‘OpenVPN Client’
2 Now, click on ‘Choose File’. Under ‘Import Open file’ tab, select your desired *.ovpn server file from your computer and click on ‘Upload’.
3 Once you upload the desired server *.ovpn file, it will automatically fill the required field. Now, enter credentials provided to you by PureVPN in respective field and click on ‘Apply’.
4 Turn on the Service State and then wait for few seconds.
You can verify your ‘OpenVPN Status’ by clicking on VPN Status tab.
That’s it! Please share your comments, suggestions and feedback in the comments section below.
Comments (38 )
Hello,
I have some problems configuring my ASUS RT-N18U Wifi router in OPEN VPN.
When I try to activate it, it does not work.
Maybe I forget something or make a mistake.
I’m trying to follow the OpenVPN configuration on the Asus RT-N66U, but it’s a bit different from the RT-N18U model.
Could you help me please?
Best regards,
Davide.
Hey Davide, You can email us the settings you have applied to [email protected] our technical experts will get back to you with your resolutions 🙂
Ꮃow that was unusual. I just wrote an verу long comment but after I clicked submit my comment diԀn’t show up.
Grｒrr… well I’m not writing all that over again.
Anyһow, just wanted to ѕaү fantastic blog!
you could look here : Hoᴡ To Password Protect Folder In 15 Minutes And Still Look Your Best
This is totally doable with ASUSWRT-Merlin, but does require some tweaks beyond what the guide above shows and is easier to do manually than to attempt to import an .ovpn file.
The instructions below ASSUME that you have already set up your wireless configuration and are running your router in Wireless Router Mode (Default) with the default IP settings/DHCP scopes. Also assumes you want the fastest connection possible (UDP).
To get OpenVPN working with Merlin (I am using Merlin version 380.65_2), go to the “VPN” menu under “Advanced Settings” and then click on the “OpenVPN Clients” tab.
Set all options as follows:
Basic Settings:
Start with WAN: Yes (unless you don’t want the VPN to automatically start on router reboot)
Interface Type: TUN
Protocol: UPD (for fastest connectivity)
Server Address and Port: Whichever PureVPN server you want to connect to, Port 53
Firewall: Automatic
Authorization Mode: TLS. You will also need to click on “Content modification of Keys and Certificates” and enter the text from the wdc.key and ca.crt files provided by PureVPN in the appropriate fields (wdc.key text goes in the “Static Key” field and ca.crt text goes in the “Certificate Authority” field).
Username/Password Authentication: Yes
Username/Password: Enter your unique username/password provided to you by PureVPN.
Username/Password Auth. Only: No
TLS control channel security: Outgoing Auth (1)
Auth digest: Default
Create NAT on tunnel: Yes
Advanced Settings:
Global Log verbosity: 1
Poll Interval: 0
Accept DNS Configuration: Disabled
Cipher Negotiation: Enable (with fallback)
Negotiable ciphers: AES-128-GCM:AES-256-GCM:AES-128-CBC:AES-256-CBC
Legacy/fallback cipher: AES-256-CBC
Compression: LZO Adaptive
TLS Renegotiation Time: -1
Connection Retry: -1
Verify Server Certificate: No
Redirect Internet traffic: Policy Rules
Block routed clients if tunnel goes down: Yes (if you want to ensure that your connected devices are ALWAYS using the VPN). Otherwise No. I recommend YES.
Rules for routing client traffic through the tunnel: This can be a little tricky, but let’s assume you are using the default IP information for the Asus device and you want ALL clients to route EVERYTHING through the VPN tunnel. If that were the case, you would build 2 rules as follows:
Router 192.168.1.1 0.0.0.0 WAN
ClientDevices 192.168.1.0/24 0.0.0.0 VPN
This ensures the router itself still connects to the internet over the WAN, but that all devices connected to it go through the VPN.
Custom Configuration:
mute 20
route-method exe
route-delay 2
auth-retry interact
explicit-exit-notify 2
ifconfig-nowarn
auth-nocache
disable-occ
That’s it! Apply the settings, and then you should be able to change the “Service State” to ON. The VPN Status tab will show you whether the connection was successful (or is still trying). You can also look at the System Log for detailed information or errors about the connection.
You can test the “kill switch” functionality at this point by simply turning the Service State of the OpenVPN instance On/Off. If working properly, when on, you should be able to ping internet servers/devices from your devices and your external IP should show it is from the country/location your VPN is connecting to. When off, your ability to connect to the internet from your devices should fail.
Try setting Accept DNS Configuration to “Exclusive”.
Thanks for reaching out. If you do not connect your other devices with VPN configured router and there traffic will router normally.
Feel free to join us on 24/7 live chat if you still have any questions!
If I use this on an Asus router can I set it so only certain devices use the VPN and others are routed normally?
Hi Thomas,
We are sorry for the inconvenience. Can you kindly join us on 24/7 live chat so we may assist you in better way.
Hi there,
the software on new RT-N66Us for OpenVPN has changed and you can’t see the advanced settings any longer. I managed to connect for both PPTP and OpenVPN (according to the symbol in the relevant column) but OpenVPN doesn’t let any traffic through. I suspect that your configuration file misses a setting, which I also can’t enter manually. Please be so kind and verify tour config files with the newest router software. PPTP connects fine and I get all I need, so there is no problem with the connection, account etc.
Thanks.
Thomas
Hi Thomas,
if I can help you, I solved the problem by configuring the router differently from this guide. I set “TCP” and I set “Extra HMac autorizathion: Outgoing (1)”, and “verify server certicate: no”.
Hi Anders,
Thanks for reaching out. As you are aware Routers does not give “Kill Switch” options and we cannot do much about it however, if you have a Router with DD-WRT firmware then there is a way of configuring PureVPN in such a way that when your VPN connection drops, your internet activity will be stopped, much like what “Kill Switch” does.
You can review this tutorial for details https://support.purevpn.com/how-do-i-configure-dd-wrt-router-vpn-such-that-if-vpn-disconnects-all-browsing-stops
Feel free to reach us if you have further questions!
Its a good question. As long as you are connected with VPN your traffic will route through VPN. However, when you are disconnected then your traffic will go through your normal ISP as there is no “Kill Switch” option available for routers yet to kill the internet activity.
Hope it answers your query, feel free to write us if you still have any question/confusion!
Maybe this is worth mentioning?
It seems possible to setup more advanced settings using asuswrt-merlin, where it seems possible to route certain connected devices only through the VPN tunnel, such that if the vpn connection drops, there is no alternative route for this device.
would you be able to verify/test this? whitout any “killswitch” on the “supported” routers the sole purpose and anonymity is easily compromised.
using this setup, where is traffic routed if the VPN connection is dropped? will it work like a killswitch or just route it outside of the VPN?
Well, Johan I am sorry you are still facing these issues, have you tried other protocols? If not, that do try, that might work. I would also request you to join us on live chat, so we help you resolve all problems at once. We are really sorry for the inconvenience.
Thanks for being patient!
I am sorry for the inconvenience Johan, Kindly confirm me if this router does not contain any ISP configuration So, I may assist you in better way. Thanks!
Manage to connect now after fixing the credentials.
I now have a different problem. It seem that OpenVPN via the Asus router mostly would work. However, if I want to switch on VPN on the Mac Client only, it is very hit or miss. I see some PPTP error messages.
How did you get this working?
Thanks
If you are facing any issue, please let us know, we would love to help you out. You can also join us anytime on live chat, we are here 24/7 for your assistance!
Uploaded the China TCP OpenVPN file to my Asus RT-N66U. However, I’m unable to switch the VPN service on. I’ve tried both TCP and UDP files.
Please advise how to get it working.
See log below:
Mar 26 22:12:44 rc_service: httpd 265:notify_rc start_vpnclient4
Mar 26 22:12:44 kernel: tun: Universal TUN/TAP device driver, 1.6
Mar 26 22:12:44 kernel: tun: (C) 1999-2004 Max Krasnyansky
Mar 26 22:12:44 openvpn[9181]: OpenVPN 2.3.8 mipsel-unknown-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [MH] [IPv6] built on Dec 24 2015
Mar 26 22:12:44 openvpn[9181]: library versions: OpenSSL 1.0.2e 3 Dec 2015, LZO 2.08
Mar 26 22:12:44 openvpn[9181]: ERROR: username from Auth authfile ‘up’ is empty
Mar 26 22:12:44 openvpn[9181]: Exiting due to fatal error
Mar 26 22:12:44 syslog: VPN_LOG_ERROR: 447: Starting OpenVPN failed…
Mar 26 22:12:44 dnsmasq[9165]: read /etc/hosts – 5 addresses
Mar 26 22:12:44 dnsmasq[9165]: using nameserver 165.21.100.88#53 for domain singnet.com.sg
Mar 26 22:12:44 dnsmasq[9165]: using nameserver 165.21.83.88#53 for domain singnet.com.sg
Mar 26 22:12:44 dnsmasq[9165]: using nameserver 165.21.83.88#53
Mar 26 22:12:44 dnsmasq[9165]: using nameserver 165.21.100.88#53
Mar 26 22:12:44 dnsmasq[9165]: exiting on receipt of SIGTERM
Mar 26 22:12:44 dnsmasq[9216]: started, version 2.76-g41a8d9e cachesize 1500
Mar 26 22:12:44 dnsmasq[9216]: warning: interface ppp1* does not currently exist
Mar 26 22:12:44 dnsmasq[9216]: asynchronous logging enabled, queue limit is 5 messages
Mar 26 22:12:44 dnsmasq-dhcp[9216]: DHCP, IP range 192.168.1.2 — 192.168.1.254, lease time 1d
Mar 26 22:12:44 dnsmasq[9216]: read /etc/hosts – 5 addresses
Mar 26 22:12:44 dnsmasq[9216]: using nameserver 165.21.100.88#53 for domain singnet.com.sg
Mar 26 22:12:44 dnsmasq[9216]: using nameserver 165.21.83.88#53 for domain singnet.com.sg
Mar 26 22:12:44 dnsmasq[9216]: using nameserver 165.21.83.88#53
Mar 26 22:12:44 dnsmasq[9216]: using nameserver 165.21.100.88#53
Hi,
Thanks for reaching out to us. Can you please elaborate what do you mean by script? All our users follow Asus tutorials and we have never received any complain from them. Can I ask what issue you are facing in following our Asus tutorials? so I can assist you in better way.
Thanks!
We want support for Asus Merlin Firmware! It has nothing to configure just a script on your side. Would you do it?
Hi,
I am Glad that your issue is resolved. Always feel free to contact us if you have any question/suggestion.
Have a great day!
Hi,
I am sorry for the inconvenience. Can you kindly hare the OpenVPN error logs with us so we can assist you in better way.
Hi
Thank you but i got it to work. Your online help desk could assist me this time.
I have followed all steps but the status remains “connecting”
Hi,
Thanks for reaching out to us. Dedicated IP will surely work o router, different settings are not required, you just need to enter “Dedicated IP” in server address field.
Feel free to contact us if you need further assistance!
Will the dedicated IP address work on the router? Any different settings required?
Hi,
I am sorry for the inconvenience. You are requested to please try connecting with both TCP and UDP protocol. Also please connect OpenVPN on your system directly and check, if you are able to browse or not and then let me know the result.
Looking forward to hear from you!
I tried the TCP but got an error: IP/Routing conflict. I have screenshots of my setup, how do I upload it to you privately?
Hi,
Kindly send screenshots at [email protected], we will reply you as soon as possible.
Thanks!
Hi,
I apologies for the inconvenience. I request you to send your Router’s settings screenshots at [email protected] and we will send you back its configuration guide.
Thanks for understanding!
This guide if for a Asus N66U please provide a guide for other ASUS routers using the stock firmware with the OpenVPN Client, i have Asus RT68U!
ok, I was able to connect via OpenVPN Client using the instructions provided, however, I can’t open any websites at all examples: http://www.yahoo.com, http://www.google.com etc. I was using hk1-ovpn-udp server. What did I do wrong?
Hi Micheal,
If you use speed test tool, it gives you best server and you can rely on it. Regarding statistic of server traffic, we do have all data and we will work on it to make it available for our users, we do not have any request about it, you are our first user to have come up with such request and we really appreciate it and forward it to concerned department. But you can still choose best server by speed test tool. Its very easy and quick process. Let me know if I can help any other way. Thanks 🙂
Hi Michael,
It sounds good, we do have plans to have a rating system for our servers and I have also forwarded your comments to concerned department. I would be happy if you keep giving your suggestions and feedback.
keep writing 🙂
Hi (person) Its nice to be head, however i prefer “helped” instead 😉
You must have some traffic statistic – howls would you be planning your needed capacity?
Hi, I think its nice to have many selection of servers. For the US alone its >than a 100. However they are not rated, no traffic indication, no nothing, its just a URL. So i can choose US1.purevpn.net or US17.purevpn.net for that matters – its all the same to me.
If i use the speedtool then the server adresses is not corresponding to the list.
All in all: It a mess and very time consuming to find a decent setup