How to set up PureVPN on Tomato router

Using this guide you can easily configure VPN on Tomato Router. Set up PureVPN on Tomato Router using simple steps.

Written By Fahad Ahmed

Updated at July 8th, 2024

Configuring a PureVPN tunnel on your router is a great way to ensure the safety and security of all the devices in your home. This method is especially beneficial if you have devices that don’t have VPN compatibility or you want to protect all the Wi-Fi-connected devices in your home.

It is very easy to configure VPN on Tomato Router. The following guide will help you set up PureVPN on your Tomato router.

Find your VPN credentials for manual configuration

To find your VPN credentials log into the PureVPN Member Area. Click 👉 here to visit Member Area.

  • Login to the Member Area using your PureVPN registered email address and password.

  • On Subscription tab scroll down to be able to view your VPN credentials.

  • You will be able to see and copy your VPN credentials.
  • Note down your PureVPN username and click the Eye icon to make your password visible and use it in the manual configuration.


How to set up OpenVPN on Tomato router

  • Go to the Control Panel and select VPN Tunneling. Click on OpenVPN Client and select Client 1to enter the following details under the Basic Tab:
    1. From Drop Down in Interface Type select TUN
    2. In Protocol Drop down, select UDP
    3. To fill the Server Address Details, open the downloaded .ovpn file on notepad, copy the address of your desired server and paste it in the field
    4. Insert 53 for UDP in the port field
    5. Select Automatic in firewall
    6. Select TLS in Authorization Mode
    7. Select on Username/ Password Authentication
    8. Enter your Username and Password provided to you by PureVPN
    9. Uncheck the Username Authen. Only
    10. Select Outgoing (1) in the drop down of Extra HMAC authorization (tls-auth-)
    11. Check Create NAT on tunnel

Note: For TCP port, you need to change the port from UDP to TCP and select 80 instead 53 in the port field..

  • Go to Advance Tab and do as follows:
    1. Enter 0 in the field Poll Interval
    2. Uncheck Redirect Internet Traffic
    3. Select Relaxed in the drop down of Accept DNS Configuration
    4. Select AES-256-CBC in the drop down of Encryption Cipher
    5. Select Adaptive in Compression
    6. Enter -1 in TLS Renegotiation
    7. Enter 30 in Connection Retry
    8. Uncheck the option Verify server certificate (tls-remote)

  • Go to the tab titled Keys and do as follows:
    1. For Static Key open the WDC.key in a notepad, copy all content and paste the content in the field.
    2. For Certificate Authority, open CA.crt in a notepad, copy all its content and paste the content in the field.
    3. For Client Certificate, open Client.crt in a notepad, copy all of the content and paste the content in the field.
    4. For Certificate Key, open Client.key in a notepad, copy all its content and paste the content in the field.

  • Click on the Save button and then click on the Start Now button. After a few seconds, your VPN connection will be established. You can verify the VPN connection status by clicking on the Status Tab.


Note: Dedicated IP addon can be only be connected with Ras protocol i.e PPTP/L2TP/SSTP.


How to configure OpenVPN on Advanced Tomato v3.5 router

This article will guide you through the steps involved in setting up PureVPN OpenVPN on an Advanced Tomato firmware router. We have used the Netgear R7000 router flashed with the latest Advanced Tomato firmware version 3.5 to prepare this article:

  • Log in to the router control panel by entering the router’s default IP address in the address bar of your preferred browser. (If you have changed your router's default IP address, enter that in your browser tab instead). Enter the admin name and password for your router, then click Sign In.

  • In order to configure OpenVPN on Adv. Tomato, first download the required OpenVPN Files from this link. 
  • Now go to the VPN tab and select the OpenVPN Client option.

  • Now configure your OpenVPN client as shown below. 
  • Under basic tab
    1. Start with WAN: Check
    2. Interface Type: TUN
    3. Protocol: Choose either UDP or TCP and keep it in mind as this will be important later on
    4. Server Address/Port: Enter your desired location’s OpenVPN address. You can get your desired server address from this link.
    5. Enter port number 80 for TCP or port number 53 for UDP.
    6. Firewall: Automatic
    7. Authentication Mode: TLS
    8. Enter your PureVPN credentials. Here is how you can find your VPN credentials.
    9. Extra HMAC authorization (tls-auth): Outgoing(1)
    10. Create NAT on tunnel: Check
  • Click the Save button.

  • Under Advanced Tab:
    1. Redirect Internet Traffic: Checked.
    2. Accept DNS configuration: Relaxed.
    3. Encryption Cipher: AES-256-CBC.
    4. Compression: Adaptive.
    5. TLS Renegotiation Time: -1
    6. Connection retry: 30
  • Click the Save button.

  • Under Keys Tab:
    1. For Static Key: Copy and paste all the content from the Wdc.key file you have from the previously downloaded the OpenVPN configuration files.
    2. For Certificate Authority: Copy and paste all the content from the ca.crt file.
    3. Client Certificate and Client Key: blank.
  • Click the Save button.

  • Now under the Status tab.
  • Click on Start VPN Client to establish/connect with the PureVPN OpenVPN connection.

You are connected to VPN now!!!

  • In order to disconnect the OpenVPN connection, click on Stop VPN Client button.


How to set up PPTP on Tomato router

  • This image shows what your VPN setup will look like.

  • Access your router Control panel and click Network under Basic option on the left panel.
  • In Connection Type select PPTP from drop-down menu.
  • Check DHCP and Use Default Gateway on Remote Network.
  • In Subnet Mask type
  • In PPTP Gateway field Insert your desired server address (Please refer to the below list for available server addresses.)
    1. Germany:
    2. Netherlands:
    3. United Kingdom:
    4. United States:
    5. United States:
    6. Australia:
  • Leave Option field blank and in Connect Mode choose Keep Alive from drop-down menu. Also, Set Check Interval to 30 seconds.
  • Set MTU to Default
  • Keep your LAN and Wireless settings to default settings.
  • Now, scroll down to the bottom of the page and click Save. You Are Done!