These are the instructions to set up an OpenVPN connection with NordVPN on your ASUS router that is flashed with ASUSWRT-MERLIN firmware. The instructions were made using an ASUS RT-AC87U with version 380.59 of the ASUSWRT-MERLIN firmware.
1. Before you can change any settings on your router, you first need to log into the router control panel. To do this, open your favourite internet browser (Internet Explorer, Microsoft Edge, Google Chrome, Mozilla Firefox, Opera etc.) and enter the routers address to the address bar. This by default is 192.168.1.1 Then, a prompt should display the option to enter a username and password. If you have never changed the username or password enter the default values admin for the username and admin for the password.
3. Click on OpenVPN Clients tab
4. Download the latest NordVPN .ovpn configuration files from our website and unzip the downloaded file to your computer. Get back to the Asus router control panel and click on Browse… button.
5. Select a preferred configuration file from the list and click on Open. Please note that every file represents its server. If you need help deciding which configuration file to choose feel free to contact our customer support team. They will be happy to help you. And one more thing – we would recommend you to use files that have udp1194 in their names. It means that the configuration will use UDP which is faster than TCP.
8. Set Accept DNS Configuration to Strict if you are planning to use NordVPN on all your home network devices or set it to Exclusive if you will use it on specific devices. We would recommend you to set it to Strict.
9. Click on Apply button at the bottom of the page. Wait a bit for the changes to be applied. If you see the green ON button – you are connected! You can verify it by going back to VPN Status page or by checking your IP address at our website.
10. Kill Switch set up (optional):
To setup a Kill Switch on AsusWRT Merlin software please do the following:
1. Navigate to VPN -> OpenVPN Client.
2. Under Advanced Settings select “Redirect Internet Traffic: Policy Rules”
3. A new option will appear “Block routed clients if tunnel goes down” which has to be enabled.
4. Then under the “Rules for routing client traffic through the tunnel” add your whole network:
Description: all devices
Source IP: 192.168.1.0/24 (if you have different network or subnet mask, change accordingly)
Destination IP: blank