How to Set Up a VPN on a Router

Using a VPN router is extremely helpful because all of your devices (phones, computers, etc.) instantly benefit from that one connection. But it's also more difficult to set up; most people have little to no experience fiddling with their router, let alone logging into it and making changes.

Only some providers let you connect through a router. It works one of two ways: a firmware file is installed on the router to enable VPN functionality, or you enter the configuration details manually into the proper section of the router's settings.

VPN Router Setup

The first step, regardless of who made your router, is to log in to it as an administrator. Most of the time, this works by accessing its web interface through a browser at 192.168.1.1, 192.168.2.1, or 192.168.0.1. When asked for a password, it's often admin by default. Check with the router manufacturer if you can't log in—they all work a little differently.

What follows also varies depending on the router you have:

ASUS | D-Link | DD-WRT | Netgear | Tomato | TP-Link

Here's what it generally looks like:

1. Find the VPN section.
2. Decide on a VPN protocol that your provider supports (available from their website).
3. Locate the same protocol on the router and go to the "client" section.
4. Enable that protocol and enter all the connection details exactly as the provider describes. This includes the server/domain/IP address, a username and password, and any other connection settings.
5. Save it and use the Connect or Start button to enable the VPN.

VPNs that offer a firmware update will have you go through a process like this:

1. Download the firmware file from the VPN.
2. Locate the Administration or Settings area of the router.
3. Find a page that mentions software or firmware.
4. Upload the VPN's firmware file to replace the existing one.
5. Access a custom screen to choose a server, enable and disable the VPN, and edit settings.

ASUS

These steps are for ASUS routers that are using their default firmware:

1. Select VPN from the left pane.
2. Open the VPN Client tab on the right.

3. Choose Add profile at the bottom.
4. Select one of the VPN types: PPTP, L2TP, or OpenVPN.

5. Enter the necessary information in the fields that are provided.
6. Select OK.

If you need to manually change the DNS servers on this router, those settings are in the Internet Connection area of the WAN section (left panel).

Not using stock firmware? After selecting the VPN category from the left pane, choose a tab on the right that corresponds to the VPN protocol you want to use. There might be separate tabs for PPTP/L2TP and OpenVPN. Otherwise, the steps should be pretty similar to how they're laid out above.

If the VPN provides an app, you can upload their custom firmware from the Administration > Firmware Upgrade page.

Return to step 2 and choose Activate or Deactivate next to the VPN to turn it on and off.

D-Link

Here's how to set up a VPN on a D-Link router:

1. Select Settings at the top and then choose Internet from the pop-out menu.

2. Pick an appropriate protocol from the My Internet Connection is menu.

3. Enter the server information into the appropriate box followed by the username and password provided by the VPN company. You might also need to adjust the idle time; check with the VPN provider to be sure.
4. Select Save.

To disconnect from the server, return to step 2 but choose whatever it was before you edited the settings, probably Dynamic IP (DHCP).

Other models have the VPN settings elsewhere:

1. Select Setup from the menu at the top.
2. Choose PPTP or L2TP from the left pane.
3. Put a check in the box next to Enable.

4. Fill out the boxes using the connection details provided by the VPN.
5. Select Apply.

Undo step 3 and choose Apply to disconnect from the VPN.

DD-WRT

If your router is running DD-WRT firmware, do this:

1. Select Services at the top.
2. Choose VPN in the sub-menu.
3. Select the Enable option from either the PPTP Client or OpenVPN Client area.

4. Complete the form as necessary according to the directions from the VPN provider.

5. Select Save at the bottom.

You can change the DNS settings from the Setup > Basic Setup screen.

Netgear

One way to put a VPN on a Netgear router is through custom firmware. ExpressVPN is one example of a provider that has a VPN app for routers available as a firmware file that makes setup and switching servers easy. This isn't supported on all routers, though, and neither do all VPNs offer this method.

Here's how ExpressVPN works with a Netgear Nighthawk R7000 router:

1. Go to routerlogin.net and log in.
2. Select Advanced at the top.
3. Select Administration from the left pane, followed by Router Update in the sub-menu.

4. Select Browse to locate and upload the file you downloaded from the provider.
5. Choose Upload, wait for the file to upload, and then select Apply. Click through any prompts you might receive about older firmware or a temporary network disconnection.
6. Wait while the firmware install completes.
7. Go to expressvpnrouter.com in a new tab.
8. Select Get Started and follow the directions, and then log in when asked.
9. Paste the activation code from our VPN account into the box provided on the router.
10. Select Activate.

Change the server you're connected to by picking one from the drop-down menu on the VPN Connection page.

To turn off the VPN, use the Disconnect button at the top of the ExpressVPNRouter.com page.

Tomato

There are several versions of the Tomato firmware out there including the original, FreshTomato, and AdvancedTomato.

Depending on what you're running, the steps should look something like this:

1. Select VPN TUNNELING or VPN (the globe icon) from the left pane.
2. Choose OpenVPN Client or PPTP Client from that menu.

3. Put a check in the box next to Start with WAN.
4. Fill in the details with information from your VPN provider. In some cases, you need to check the box next to Username/Password Authentication to show those fields, and if the router has Advanced and Keys tabs, those will be used for OpenVPN.
5. Select Save at the bottom.

There are sometimes several details specific to the VPN you're using that need to be entered in a very precise way. If your VPN supports routers, it should give all of this information to you.

For example, if you're using OpenVPN, you'll need to download the server file from the provider and open it with a text editor. The remote entry is the address you need to enter into the Server Address/Port field on the router.

To turn the VPN on and off, return to step 2 and choose Start Now or Stop Now.

TP-Link

Here's how to use a VPN with a TP-Link router:

1. Go to tplinkwifi.net and log in.
2. Use the Advanced tab at the top to select Network on the left.

3. Choose Internet from the new menu.
4. Open the drop-down menu next to Internet Connection Type and choose an appropriate option, like L2TP or PPTP.
5. Fill out the Username and Password fields with the login credentials provided by the VPN.
6. Select Dynamic IP if it isn't already chosen.
7. Paste the address of the VPN server you want to use into the VPN Server IP/Domain Name field.

8. Choose Manually for the Connection Mode option toward the bottom of the page, and change the idle time to 0.
9. Save the changes.

Return to step 3 and select Connect to establish a connection to the server, or Disconnect to turn the VPN off.

Some older firmware versions work a little differently:

1. Choose Network > WAN from the side panel.
2. Change WAN Connection Type to L2TP/Russia L2TP or PPTP/Russia PPTP.

3. Paste the username and password you were given by the VPN into those boxes.
4. Ensure that Dynamic IP is chosen.
5. Enter the VPN server into the Server IP Address/Name section.
6. Edit the Max Idle Time value to be 0.
7. Change the Connection Mode type to Connect Manually.
8. Select Save.