An Easy Guide for Setting up OpenVPN on Asus RT-N66U

Admin
Jun 02, 2015
Sep 13, 2018
38 Comments
Download PDF

Asus RT-N66U is ranked 4th out of the top 8 best wireless routers and is equipped with Gigabit Ethernet ports that ensure fast and reliable internet connection. The following guide will help you through the process of setting up PureVPN on Asus RT N66U router

Things to Consider:

Before you begin, please make sure that:

  • You have a working internet connection
  • OpenVPN supported Asus router
  • A Premium PureVPN account (If you haven’t bought yet click here to buy)

To configure OpenVPN on Asus, first download the OpenVPN Files from here

1 Access your Router Control panel, click on ‘VPN’ tab and select ‘OpenVPN Client’

1 setting up openvpn on asus rt-n66

2 Now, click on ‘Choose File’. Under ‘Import Open file’ tab, select your desired *.ovpn server file from your computer and click on ‘Upload’.

2 set up openvpn on asus rt-n66

3 Once you upload the desired server *.ovpn file, it will automatically fill the required field. Now, enter credentials provided to you by PureVPN in respective field and click on ‘Apply’.

3 openvpn on asus rt-n66

3. setting up openvpn on asus rt-n66

4 Turn on the Service State and then wait for few seconds.

4 asus rt-n66

You can verify your ‘OpenVPN Status’ by clicking on VPN Status tab.

That’s it! Please share your comments, suggestions and feedback in the comments section below.

No Yes

Comments (38 )

38 Comments

  1. Davide says:

    Hello,

    I have some problems configuring my ASUS RT-N18U Wifi router in OPEN VPN.
    When I try to activate it, it does not work.
    Maybe I forget something or make a mistake.
    I’m trying to follow the OpenVPN configuration on the Asus RT-N66U, but it’s a bit different from the RT-N18U model.
    Could you help me please?
    Best regards,
    Davide.

  2. Ꮃow that was unusual. I just wrote an verу long comment but after I clicked submit my comment diԀn’t show up.

    Grrrr… well I’m not writing all that over again.
    Anyһow, just wanted to ѕaү fantastic blog!

    you could look here : Hoᴡ To Password Protect Folder In 15 Minutes And Still Look Your Best

  3. Chad McEntire says:

    This is totally doable with ASUSWRT-Merlin, but does require some tweaks beyond what the guide above shows and is easier to do manually than to attempt to import an .ovpn file.

    The instructions below ASSUME that you have already set up your wireless configuration and are running your router in Wireless Router Mode (Default) with the default IP settings/DHCP scopes. Also assumes you want the fastest connection possible (UDP).

    To get OpenVPN working with Merlin (I am using Merlin version 380.65_2), go to the “VPN” menu under “Advanced Settings” and then click on the “OpenVPN Clients” tab.

    Set all options as follows:

    Basic Settings:

    Start with WAN: Yes (unless you don’t want the VPN to automatically start on router reboot)
    Interface Type: TUN
    Protocol: UPD (for fastest connectivity)
    Server Address and Port: Whichever PureVPN server you want to connect to, Port 53
    Firewall: Automatic
    Authorization Mode: TLS. You will also need to click on “Content modification of Keys and Certificates” and enter the text from the wdc.key and ca.crt files provided by PureVPN in the appropriate fields (wdc.key text goes in the “Static Key” field and ca.crt text goes in the “Certificate Authority” field).
    Username/Password Authentication: Yes
    Username/Password: Enter your unique username/password provided to you by PureVPN.
    Username/Password Auth. Only: No
    TLS control channel security: Outgoing Auth (1)
    Auth digest: Default
    Create NAT on tunnel: Yes

    Advanced Settings:

    Global Log verbosity: 1
    Poll Interval: 0
    Accept DNS Configuration: Disabled
    Cipher Negotiation: Enable (with fallback)
    Negotiable ciphers: AES-128-GCM:AES-256-GCM:AES-128-CBC:AES-256-CBC
    Legacy/fallback cipher: AES-256-CBC
    Compression: LZO Adaptive
    TLS Renegotiation Time: -1
    Connection Retry: -1
    Verify Server Certificate: No
    Redirect Internet traffic: Policy Rules
    Block routed clients if tunnel goes down: Yes (if you want to ensure that your connected devices are ALWAYS using the VPN). Otherwise No. I recommend YES.
    Rules for routing client traffic through the tunnel: This can be a little tricky, but let’s assume you are using the default IP information for the Asus device and you want ALL clients to route EVERYTHING through the VPN tunnel. If that were the case, you would build 2 rules as follows:
    Router 192.168.1.1 0.0.0.0 WAN
    ClientDevices 192.168.1.0/24 0.0.0.0 VPN
    This ensures the router itself still connects to the internet over the WAN, but that all devices connected to it go through the VPN.
    Custom Configuration:
    mute 20
    route-method exe
    route-delay 2
    auth-retry interact
    explicit-exit-notify 2
    ifconfig-nowarn
    auth-nocache
    disable-occ

    That’s it! Apply the settings, and then you should be able to change the “Service State” to ON. The VPN Status tab will show you whether the connection was successful (or is still trying). You can also look at the System Log for detailed information or errors about the connection.

    You can test the “kill switch” functionality at this point by simply turning the Service State of the OpenVPN instance On/Off. If working properly, when on, you should be able to ping internet servers/devices from your devices and your external IP should show it is from the country/location your VPN is connecting to. When off, your ability to connect to the internet from your devices should fail.

  4. x17 says:

    Try setting Accept DNS Configuration to “Exclusive”.

  5. PureVPN Team says:

    Thanks for reaching out. If you do not connect your other devices with VPN configured router and there traffic will router normally.

    Feel free to join us on 24/7 live chat if you still have any questions!

  6. John Read says:

    If I use this on an Asus router can I set it so only certain devices use the VPN and others are routed normally?

  7. PureVPN Team says:

    Hi Thomas,

    We are sorry for the inconvenience. Can you kindly join us on 24/7 live chat so we may assist you in better way.

  8. TS says:

    Hi there,
    the software on new RT-N66Us for OpenVPN has changed and you can’t see the advanced settings any longer. I managed to connect for both PPTP and OpenVPN (according to the symbol in the relevant column) but OpenVPN doesn’t let any traffic through. I suspect that your configuration file misses a setting, which I also can’t enter manually. Please be so kind and verify tour config files with the newest router software. PPTP connects fine and I get all I need, so there is no problem with the connection, account etc.

    Thanks.
    Thomas

    • Daniele says:

      Hi Thomas,
      if I can help you, I solved the problem by configuring the router differently from this guide. I set “TCP” and I set “Extra HMac autorizathion: Outgoing (1)”, and “verify server certicate: no”.

  9. PureVPN Team says:

    Hi Anders,

    Thanks for reaching out. As you are aware Routers does not give “Kill Switch” options and we cannot do much about it however, if you have a Router with DD-WRT firmware then there is a way of configuring PureVPN in such a way that when your VPN connection drops, your internet activity will be stopped, much like what “Kill Switch” does.
    You can review this tutorial for details https://support.purevpn.com/how-do-i-configure-dd-wrt-router-vpn-such-that-if-vpn-disconnects-all-browsing-stops

    Feel free to reach us if you have further questions!

  10. PureVPN Team says:

    Its a good question. As long as you are connected with VPN your traffic will route through VPN. However, when you are disconnected then your traffic will go through your normal ISP as there is no “Kill Switch” option available for routers yet to kill the internet activity.

    Hope it answers your query, feel free to write us if you still have any question/confusion!

    • Anders says:

      Maybe this is worth mentioning?

      It seems possible to setup more advanced settings using asuswrt-merlin, where it seems possible to route certain connected devices only through the VPN tunnel, such that if the vpn connection drops, there is no alternative route for this device.

      would you be able to verify/test this? whitout any “killswitch” on the “supported” routers the sole purpose and anonymity is easily compromised.

  11. Anders says:

    using this setup, where is traffic routed if the VPN connection is dropped? will it work like a killswitch or just route it outside of the VPN?

  12. PureVPN Team says:

    Well, Johan I am sorry you are still facing these issues, have you tried other protocols? If not, that do try, that might work. I would also request you to join us on live chat, so we help you resolve all problems at once. We are really sorry for the inconvenience.

    Thanks for being patient!

  13. PureVPN Team says:

    I am sorry for the inconvenience Johan, Kindly confirm me if this router does not contain any ISP configuration So, I may assist you in better way. Thanks!

    • Johan says:

      Manage to connect now after fixing the credentials.

      I now have a different problem. It seem that OpenVPN via the Asus router mostly would work. However, if I want to switch on VPN on the Mac Client only, it is very hit or miss. I see some PPTP error messages.

  14. Blade20354 says:

    How did you get this working?

    Thanks

    • PureVPN Team says:

      If you are facing any issue, please let us know, we would love to help you out. You can also join us anytime on live chat, we are here 24/7 for your assistance!

  15. Johan says:

    Uploaded the China TCP OpenVPN file to my Asus RT-N66U. However, I’m unable to switch the VPN service on. I’ve tried both TCP and UDP files.

    Please advise how to get it working.

    See log below:

    Mar 26 22:12:44 rc_service: httpd 265:notify_rc start_vpnclient4

    Mar 26 22:12:44 kernel: tun: Universal TUN/TAP device driver, 1.6

    Mar 26 22:12:44 kernel: tun: (C) 1999-2004 Max Krasnyansky

    Mar 26 22:12:44 openvpn[9181]: OpenVPN 2.3.8 mipsel-unknown-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [MH] [IPv6] built on Dec 24 2015

    Mar 26 22:12:44 openvpn[9181]: library versions: OpenSSL 1.0.2e 3 Dec 2015, LZO 2.08

    Mar 26 22:12:44 openvpn[9181]: ERROR: username from Auth authfile ‘up’ is empty

    Mar 26 22:12:44 openvpn[9181]: Exiting due to fatal error

    Mar 26 22:12:44 syslog: VPN_LOG_ERROR: 447: Starting OpenVPN failed…

    Mar 26 22:12:44 dnsmasq[9165]: read /etc/hosts – 5 addresses

    Mar 26 22:12:44 dnsmasq[9165]: using nameserver 165.21.100.88#53 for domain singnet.com.sg

    Mar 26 22:12:44 dnsmasq[9165]: using nameserver 165.21.83.88#53 for domain singnet.com.sg

    Mar 26 22:12:44 dnsmasq[9165]: using nameserver 165.21.83.88#53

    Mar 26 22:12:44 dnsmasq[9165]: using nameserver 165.21.100.88#53

    Mar 26 22:12:44 dnsmasq[9165]: exiting on receipt of SIGTERM

    Mar 26 22:12:44 dnsmasq[9216]: started, version 2.76-g41a8d9e cachesize 1500

    Mar 26 22:12:44 dnsmasq[9216]: warning: interface ppp1* does not currently exist

    Mar 26 22:12:44 dnsmasq[9216]: asynchronous logging enabled, queue limit is 5 messages

    Mar 26 22:12:44 dnsmasq-dhcp[9216]: DHCP, IP range 192.168.1.2 — 192.168.1.254, lease time 1d

    Mar 26 22:12:44 dnsmasq[9216]: read /etc/hosts – 5 addresses

    Mar 26 22:12:44 dnsmasq[9216]: using nameserver 165.21.100.88#53 for domain singnet.com.sg

    Mar 26 22:12:44 dnsmasq[9216]: using nameserver 165.21.83.88#53 for domain singnet.com.sg

    Mar 26 22:12:44 dnsmasq[9216]: using nameserver 165.21.83.88#53

    Mar 26 22:12:44 dnsmasq[9216]: using nameserver 165.21.100.88#53

  16. PureVPN Team says:

    Hi,

    Thanks for reaching out to us. Can you please elaborate what do you mean by script? All our users follow Asus tutorials and we have never received any complain from them. Can I ask what issue you are facing in following our Asus tutorials? so I can assist you in better way.

    Thanks!

  17. texplorer says:

    We want support for Asus Merlin Firmware! It has nothing to configure just a script on your side. Would you do it?

  18. PureVPN Team says:

    Hi,

    I am Glad that your issue is resolved. Always feel free to contact us if you have any question/suggestion.

    Have a great day!

  19. PureVPN Team says:

    Hi,

    I am sorry for the inconvenience. Can you kindly hare the OpenVPN error logs with us so we can assist you in better way.

  20. Mustafa Abulrub says:

    I have followed all steps but the status remains “connecting”

  21. PureVPN Team says:

    Hi,

    Thanks for reaching out to us. Dedicated IP will surely work o router, different settings are not required, you just need to enter “Dedicated IP” in server address field.

    Feel free to contact us if you need further assistance!

  22. marbles383 says:

    Will the dedicated IP address work on the router? Any different settings required?

  23. PureVPN Team says:

    Hi,

    I am sorry for the inconvenience. You are requested to please try connecting with both TCP and UDP protocol. Also please connect OpenVPN on your system directly and check, if you are able to browse or not and then let me know the result.

    Looking forward to hear from you!

  24. PureVPN Team says:

    Hi,

    I apologies for the inconvenience. I request you to send your Router’s settings screenshots at [email protected] and we will send you back its configuration guide.

    Thanks for understanding!

  25. Fav150 says:

    This guide if for a Asus N66U please provide a guide for other ASUS routers using the stock firmware with the OpenVPN Client, i have Asus RT68U!

  26. WrathofAztecs says:

    ok, I was able to connect via OpenVPN Client using the instructions provided, however, I can’t open any websites at all examples: http://www.yahoo.com, http://www.google.com etc. I was using hk1-ovpn-udp server. What did I do wrong?

  27. PureVPN Team says:

    Hi Micheal,

    If you use speed test tool, it gives you best server and you can rely on it. Regarding statistic of server traffic, we do have all data and we will work on it to make it available for our users, we do not have any request about it, you are our first user to have come up with such request and we really appreciate it and forward it to concerned department. But you can still choose best server by speed test tool. Its very easy and quick process. Let me know if I can help any other way. Thanks 🙂

  28. PureVPN Team says:

    Hi Michael,

    It sounds good, we do have plans to have a rating system for our servers and I have also forwarded your comments to concerned department. I would be happy if you keep giving your suggestions and feedback.
    keep writing 🙂

    • Michael says:

      Hi (person) Its nice to be head, however i prefer “helped” instead 😉
      You must have some traffic statistic – howls would you be planning your needed capacity?

  29. Michael says:

    Hi, I think its nice to have many selection of servers. For the US alone its >than a 100. However they are not rated, no traffic indication, no nothing, its just a URL. So i can choose US1.purevpn.net or US17.purevpn.net for that matters – its all the same to me.
    If i use the speedtool then the server adresses is not corresponding to the list.

    All in all: It a mess and very time consuming to find a decent setup