1. Login to DD-WRT router web GUI and first set the DNS to static 3rd party.
Mandatory step: DD-WRT doesn't assign the VPN provided DNS resolvers so you must setup static 3rd party DNS resolvers in general settings.
- Open Setup > Basic Setup
- Enter the DNS servers as Static DNS. It is recommended to use 3: 208.67.222.222, 208.67.220.220, 8.8.8.8, 4.2.2.1 or other 3rd party resolvers (NEVER your main router or your ISP's DNS).
- Enable "Use DNSMasq for DNS"
- Save and Apply settings. Restart the router if needed.
2. Open Services > VPN and enable OpenVPN Client
3. Under OpenVPN Client, use the following settings:
Server Name: hostname from https://vpn.ac/status such as nl3.vpn.ac (in China you must use the alternative addresses, check the instructions sent to you)
Port: 12200 or 53, 26000, 80, 88
Tunnel Device: TUN
Tunnel Protocol: UDP (you can also use TCP, same ports - preferably port 80 for firewall by-pass)
Encryption Cipher: AES-128-CBC
Hash Algorithm: SHA256
Advanced Options: Enable
TLS Cipher: None
LZO Compression: Disabled
NAT Enabled
TLS auth key:
-----BEGIN OpenVPN Static key V1-----
5bb417a376709d2a5456718f34fe4b3e
e8de0596548c5afd6fcde25d882c1249
b122d52365257aa33708527fda8e8ac5
f57180703ba8e2fc4e5c94da0e575cd5
cc5b2a3793476165ae748f97975b24bc
844ce6491356a51295c73be20ed420f6
96d650d9b79f058985a9c4ca144a80ac
1b09e08acb2cc59d75038c36bd342520
57638184a321ce5a384ae9bbc33d4c8d
b451b0dcef194d7af2b0cdd435dc13c6
f7d924f43bc802868899e4cda6aa2491
1a93652fa918c6d293913af4c528c02a
1c10d9d1d8c7863b24b86ddb916b6d1e
dbe7a30dd5b98b18bd2269fa8bf73667
47231a3cb919fb4a022d8d15dc089171
cbc26f694a35faadfe2dddbe6ae31847
-----END OpenVPN Static key V1-----
Advanced options:
persist-key
persist-tun
tls-client
remote-cert-tls server
persist-remote-ip
CA cert:
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Screenshot with the correct configuration.
Be aware that speed on routers will always be slower than connecting directly on your PC due to routers' weak CPUs (500MHz - 1GHz in most cases), which means that maximum 10-30 Mbps OpenVPN speed with most consumer-grade routers is normal.
To set up a "kill switch", see this guide.
