← All installation guides

Installation Guide

Install on DD-WRT routers

Protect every device on your home network by running Arresti VPN on a DD-WRT router. You'll need DD-WRT firmware that supports modern OpenVPN configurations and at least 8 MB of RAM/Flash storage.

Step 1 — Download your Arresti configuration files

To set up Arresti VPN on your DD-WRT router, you'll first need OpenVPN configuration files from your Arresti account.

The latest configuration files are on the Arresti VPN downloads page. Select Download next to your desired server locations.

Step 2 — Configure the router

In your browser, enter the IP address for your router admin panel. By default this is 192.168.0.1. If your router's IP was changed in the past, you can find it in your device's network settings.

Log in with your router username and password (both default to admin).

At the top of the page, click the Services tab, then the VPN sub-tab.

Under OpenVPN Client, enable Start OpenVPN Client. This reveals the OpenVPN configuration panel.

The next steps may differ depending on your DD-WRT firmware version. Refer to the section appropriate to your version.

For DD-WRT versions with User Pass Authentication

If your firmware has User Pass Authentication, enter the following:

  • Server IP/Name: right-click the .ovpn config file and open it with any text editor. You'll see the server address listed between the word remote and a 4-digit port number. Copy and paste that address here.
  • Port: the number after the server IP/name in the .ovpn file.
  • Tunnel Device: TUN
  • Tunnel Protocol: UDP
  • Encryption Cipher: AES-256 CBC
  • Hash Algorithm: SHA512
  • User Pass Authentication: Enable
  • Username: your Arresti VPN username
  • Password: your Arresti VPN password
  • Advanced Options: Enable
  • TLS Cipher: None
  • LZO Compression: None
  • NAT: Enable
  • Tunnel UDP MSS-Fix: Enable
  • nsCertType verification: uncheck the box

If the Username and Password fields are missing in your firmware, go to Administration > Commands and enter this script (replace YOURUSERNAME and YOURPASSWORD):

echo "YOURUSERNAME YOURPASSWORD" > /tmp/openvpncl/user.conf

/usr/bin/killall openvpn

/usr/sbin/openvpn --config /tmp/openvpncl/openvpn.conf --route-up /tmp/openvpncl/route-up.sh --down-pre /tmp/openvpncl/route-down.sh --daemon

Step 3 — Configure Arresti VPN keys & certificates

In the Additional Config field, enter:

persist-key
persist-tun
remote-cert-tls server
# Delete `#` in the line below if your router does not have credentials fields and you followed the script step above
#auth-user-pass /tmp/openvpncl/user.conf

In the TLS Auth Key field, copy the text between the <tls-auth> and </tls-auth> tags in the .ovpn file and paste it in.

In the CA Cert field, copy the text between the <ca> and </ca> tags in the .ovpn file and paste it in.

Click Save, then Apply settings to start the VPN connection.

Step 4 — Verify connection status

In your DD-WRT control panel, go to Status > OpenVPN. If the connection is successful you'll see CONNECTED SUCCESS in the status output.

Every device on your home network now routes through Arresti VPN automatically.


Stuck somewhere? Send our support team a quick message and we'll get back to you within one business day.

← All guides ← Linux guide iOS guide →