INTERNET ACCESS (PIA)
ASUS DSL-AC68U & RT-AC68U
(and similar models) WRT VPN Setup Guide
NOTES FROM ASUS:
VPN (Virtual Private Network) clients are often
used to connect to a VPN server to access private resources securely over a
Some devices like set-top boxes, smart TVs and
Blu-ray players do not support VPN software.
The ASUSWRT VPN feature provides VPN access to all
devices in a home network without having to install VPN software on each
BEFORE DOING ANY VPN SETUP – Back Up your
Current Settings and Upgrade your Asus Firmware
the Router Admin and go to the Administration Tab.
Router Settings (also Back Up
Router Settings after setting up VPN Configuration):
Click on Administration
and go to the Restore / Save / Upload Settings Tab and save the settings
to your computer, renaming this configuration file is advisable.
In case you ever
lose settings or your router is reset, you can load any previously working
settings back from this same page.
Firmware Version and follow the steps to download latest version file and
Do not proceed with VPN Setup if router does
not update to the latest firmware version. (Continued...)
If you reset your
router then you will need to complete the VPN setup again (or restore from your
saved Configuration File).
OPEN VPN –
PIA CONFIGURATION SETTINGS:
Login to the PIA website to verify your
username and password.
.ovpn configuration files and ca.crt file
NotePad to open files in Windows or use TextEdit to open files in MacOS
Access the router
settings in a browser to change or update VPN settings (on your LAN –
your router will lilely have an IP Address something like 192.168.1.1). You
will also need your Admin Username and Password.
WAN Settings: From the main menu on the left under Advance Settings choose the
WAN tab and set as follows:
i. PVC Setting
WAN Connection Type PPPoE
Enable WAN – Yes
Enable NAT – Yes
Enable UPnP – Yes
Enable – Yes
VLAN ID – 101
802.1P – 0
ii. WAN IP Setting
Get the WAN IP automatically – Yes
iii. WAN DNS Setting
Connect to DNS Server Automatically – No
DNS Server 1 – 126.96.36.199
(Open VPN). Or alternately 188.8.131.52 (Google)
DNS Server 2 – 184.108.40.206
(Open VPN). Or alternately 220.127.116.11 (Google)
Internet Server and Account settings will remain the same… your ISP provider
has these details. (Continued...)
From the main menu
on the left under Advanced Settings choose the VPN tab.
i. Choose the
VPN Client Tab (the VPN Server
settings should all be left OFF)
ii. Under the VPN Server List add a new profile configured
Settings Configuration – I use PIA Open VPN
Insert your main
PIA Username and Password.
Click the button to Import / Upload the .open VPN file / server you want to use.
Ø This will
be located where you downloaded the openvpn folder and files from PIA to.
Choose any server/location file with the .ovpn extension that you wish from
within the folder. (The locations are in the filenames)
Click the button to Import / Upload the CA File (Certificate) manually. This opens a
more detailed dialogue.
Certificate files are also located in the openvpn folder and files that were
downloaded from PIA. Look for the .crt extension.
Upload the CA (.crt) File (Certificate).
Edit the settings manually.
entirety of the .crt file that was opened in in Text Editor or NotePad. (Use Ctl A to copy and Clt V to paste).
entire text into the top field Certificate Authority (including
the -----BEGIN CERTIFICATE----- and -----END CERTIFICATE----- portions of the
Click OK /
Save at the bottom of the manual settings window.
Click OK /
Save at the bottom of the OpenVPN window as you back out of settings.
the Connection and check Connection
Status. You should see a blue checkmark.
Ø You should
now see the checkmark and have a working PIA OpenVPN connection on your Asus
Go back to
the Network Map (homepage) for your Asus Router. Check the connection status in the top right corner. If
you want to, you can reboot the router from here and make sure all of the
settings are fully set. If you have any trouble with restart… be very patient
and wait a good long time until it has had plenty of time to sort itself out,
then if it still does not restart, power off and power on again… it should be
working after rebooting (again – be patient. (Continued...)
CONFIGURATION - PIA PPTP settings:
Be sure you do not use OpenVPN and PPTP connection protocols at the same
time on your router.
Open the PIA website and log into your
account, then scroll down and in the
PPTP/L2TP/SOCKS Username and Password section click Generate Username and
Use the same WAN settings as in 2.d. above.
d. In the Asus Router settings click on the VPN tab, then VPN Client,
then add a profile for PPTP from the tabs in the window that opens when adding
e. Choose a
Name for this configuration… (best to use PPTP as
part of the name).
f. In the VPN Server field enter any of the PIA PPTP server address that are
in the openvpn folder previously downloaded from PIA (same one as for the OpenVPN
server addresses). For example: US East.ovpn or US Silicon Valley.ovpn
and Password: Enter your PIA PPTP
specific Username and PPTP specific Password.
This is the login information you just generated on
the PIA website.
h. In the PPTP Options field set it to MPPE 128.
i. Click OK /
j. Go back to the Network Map (homepage) for your Asus Router. Check
the connection status in the top right corner. Reboot the router from
here and make sure all of the settings are fully set. If you have any trouble
with restart… be very patient and wait a good long time until it has had plenty
of time to sort itself out, then if it still does not restart, power off and
power on again… it should be working after rebooting … be patient!
Tips and Troubleshooting for PIA:
You are guaranteed
to lose some connection speed when you connect to a VPN provider. Data is often
being sent across countries, and then encrypted and sent back. There should
still be plenty of speed to visit websites and stream video as you like. We
recommend always using the closest server to you geographically for the best
VPN connection speeds.
I have been getting download speeds of 2.5
Mbs with the OpenVPN configuration above on a BT VDSL Fibre Line.
If you notice slow
speeds try different VPN server locations or the alternate PPTP VPN
configuration to see which settings work best in your specific location.
information is offered freely in goodwill and in the hopes of assisting others
that have not been able to obtain any support or find settings for these common,
fast and robust routers (as I was unable to find). Users do so at their own risk and I take no responsibility for any user
problems that may occur.