Asuswrt-Merlin OpenVPN Setup Guide
Basic Asuswrt-Merlin Setup.
Download and extract the IVPN .ovpn config files to your PC.
Launch the web browser and enter the IP address of your router, which is usually
Once logged in, navigate to
OpenVPN Clientstab & click on the
Look for the extracted earlier configuration files, select the one with the preferred server location and click on the
Enter your IVPN account ID that begins with letters ‘ivpnXXXXXXXX’ or ‘i-XXXX-XXXX-XXXX’ and any password in the Username & Password fields accordingly.Only your account ID is used for the authentication and is case-sensitive. The password field can be empty or set to anything, like "ivpn", if your client requires a non-blank password.
Set the Accept DNS Configuration to Strict. In the Custom Configuration fill in the following:
tls-client tls-cipher TLS-DHE-RSA-WITH-AES-256-CBC-SHA key-direction 1 resolv-retry infinite keepalive 10 60 nobind persist-key persist-tun persist-remote-ip verb 3
Applyon the bottom of the page and your router should now be connected to IVPN. To confirm the latter, check the Online status tool on our website or visit the dnsleaktest.com.
On your router, navigate to
Under WAN DNS Setting set Connect to DNS Server automatically to No
Specify one of the following DNS servers in the
- 10.0.254.1 = redular DNS with no blocking
- 10.0.254.2 = standard AntiTracker to block advertising and malware domains
- 10.0.254.3 = AntiTracker Hardcore Mode to also block Google and Facebook
..and 126.96.36.199 in the
Applyto save the changes.
Configuring a Kill-Switch
Under Advanced Settings select Redirect Internet Traffic: Policy Rules
Have the Block routed clients if tunnel goes down option Enabled
In the Rules for routing client traffic through the tunnel add your local network:
- Description - give it any name
- Source IP - e.g. 192.168.1.0/24 (substitute with your real local network’s IP address)
- Destination IP - blank
- Iface - VPN
Reboot your router and wait for a minute or two for everything to settle, then reboot your computer system.
Check the assigned public IP address on our website and run a leak test at https://www.dnsleaktest.com from one of the devices connected to your AsusWRT router.
Please note: If you plan to use a Multi-hop setup please see this guide and make the required changes in the .ovpn config file.