1. Login to DD-WRT router web GUI and first set the DNS to static 3rd party.
Mandatory step: DD-WRT doesn't assign the VPN provided DNS resolvers so you must setup static 3rd party DNS resolvers in general settings.
- Open Setup > Basic Setup
- Enter the DNS servers as Static DNS. It is recommended to use 3: 208.67.222.222, 208.67.220.220, 8.8.8.8, 4.2.2.1 or other 3rd party resolvers (NEVER your main router or your ISP's DNS).
- Enable "Use DNSMasq for DNS"
- Save and Apply settings. Restart the router if needed.
2. Open Services > VPN and enable OpenVPN Client
3. Under OpenVPN Client, use the following settings:
Server Name: hostname from https://vpn.ac/status such as nl3.vpn.ac (in China you must use the alternative addresses, check the instructions sent to you)
Port: 12200 or 53, 26000, 80, 88
Tunnel Device: TUN
Tunnel Protocol: UDP (you can also use TCP, same ports - preferably port 80 for firewall by-pass)
Encryption Cipher: AES-128-CBC
Hash Algorithm: SHA256
Advanced Options: Enable
TLS Cipher: None
LZO Compression: Disabled
NAT Enabled
TLS auth key:
-----BEGIN OpenVPN Static key V1-----
5bb417a376709d2a5456718f34fe4b3e
e8de0596548c5afd6fcde25d882c1249
b122d52365257aa33708527fda8e8ac5
f57180703ba8e2fc4e5c94da0e575cd5
cc5b2a3793476165ae748f97975b24bc
844ce6491356a51295c73be20ed420f6
96d650d9b79f058985a9c4ca144a80ac
1b09e08acb2cc59d75038c36bd342520
57638184a321ce5a384ae9bbc33d4c8d
b451b0dcef194d7af2b0cdd435dc13c6
f7d924f43bc802868899e4cda6aa2491
1a93652fa918c6d293913af4c528c02a
1c10d9d1d8c7863b24b86ddb916b6d1e
dbe7a30dd5b98b18bd2269fa8bf73667
47231a3cb919fb4a022d8d15dc089171
cbc26f694a35faadfe2dddbe6ae31847
-----END OpenVPN Static key V1-----
Advanced options:
persist-key
persist-tun
tls-client
remote-cert-tls server
persist-remote-ip
CA cert:
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Screenshot with the correct configuration.
Be aware that speed on routers will always be slower than connecting directly on your PC due to routers' weak CPUs (500MHz - 1GHz in most cases), which means that maximum 10-30 Mbps OpenVPN speed with most consumer-grade routers is normal.
To set up a "kill switch", see this guide.
