5 Best DD-WRT Routers with VPN

13 Dec 2014 |

Commercial routers are generally designed for ease of use by non-techy users. Unfortunately this ease of use comes at the cost of limiting what you can do them. DD-WRT is an open source project aimed at developing a Linux based firmware solution that removes the restrictions placed on routers by their default programming.

At the end of this post we will explore different points relating to DD-WRT routers such as the advantages that DD-WRT providers, how to go about it flashing a normal router if you wish to go about it on your own and how to set up VPN on DD-WRT.

Flashed Router Providers

There are two primary providers of Flashed Routers: FlashRouters and RouterSource, both have their good and bad points. FlashRouters is definitely a lot bigger and provides a much larger range as well as having marginally lower prices. FlashRouters also provides Tomato routers alongside DD-WRT but Router Source also provides Sabai OS flashed routers which is designed with VPN users in mind and performs excellently and also has what they call “Gateways” – with which you can specify which devices connected to the router use the VPN and which bypass it.

On the support side RouterSource definitely trumps FlashRouters as not only does it provide 1 year hardware and technical guarantee it also provides a 90 day satisfaction guarantee (compared to 90 days and no satisfaction guarantee) – so if you’re a beginner in the world of flashed routers and feel like you might run into a lot of issues, RouterSource will likely be worth it’s more expensive price.

Summary

There are a lot of routers that are compatible with DD-WRT, so this list can in no way be considered definitive. Still, these routers come highly recommended, and are good, solid choices. Given the differences and capabilities, we have decided against putting them in order of preference, in favour of letting you choose which features etc. are important to you.

Prices quoted are from Amazon/FlashRouters/RouterSource on 10/12/2014 respectively. While the routers from Amazon are considerably cheaper (especially with higher end models) you avoid the risk of bricking it and get quality support too.


Netgear Nighthawk R7000

(Amazon: $265.23 , FlashRouters: $349.95 , RouterSource: $299.99 )

Netgear_R7000_DDWRT_VPN

Specifications:

– Up to 1900 Mbps Wireless-AC Dual Band
– 1 GHz processor
– 3 Powerful External Antennas
– Ram/Flash: 256/128
– 1 USB 3.0 & 1 USB 2.0

The Nighthawk is the daddy of all DD-WRT routers! It’s powerful processor gives you the maximum capabilities for VPN encryption and decryption thereby giving you the best speeds possible. It’s flash size also allows the biggest, best and most powerful DD-WRT builds out there. It’s also allows a fantastic 1900 Mbps transfer speeds and is one of the few routers out there that provides USB 3.0. If you have the money to spare we would fully recommend this router in order to give you the fastest/ most capable DD-WRT router.

Get the best DD-WRT VPN Router Today!

Amazon »   FlashRouters »   RouterSource »


Asus RT-AC66U

(Amazon: $199.99 , FlashRouters: $299.95)

Asus_AC66U_DDWRT_VPN

Specifications:

– Up to 1750 Mbps Wireless-AC Dual Band
– 600 MHz processor
– 3 Powerful External Antennas
– RAM/Flash: 256/128
– 2 USB 2.0

Similarly to the Nighthawk, the RT-AC66U by Asus has a great flash size meaning it can also handle the largest and most optimized DD-WRT builds. On the downside it has a significantly slower CPU, meaning the VPN speeds will be lower. As a cheaper alternative to the Nighthawk it is a great and it is by far the most popular Asus AC Model. We’ve previously reviewed both the AC66U as well as it’s small brother the N66U and we’ve been very pleased with both ever since.

Amazon »   FlashRouters »


Netgear AC1450

(Amazon: $109.99 , FlashRouters: $199.95)

Netgear_AC1450_DDWRT_VPN

Specifications:

-Up to 1450 Mbps Wireless-AC Dual Band
-800 MHz Broadcom processor
-RAM/Flash: 256/128
-1 USB 3.0 & 1 USB 2.0

The Netgear AC1450 is a highly overlooked & underrated economy wireless-AC Model. On the upside it has a more powerful processor than the popular AC66U with the same RAM/Flash (so handles the best DD-WRT builds). On the downside it only has internal antennas meaning that it’s not suitable for longer range transmissions.

Amazon »   FlashRouters »


Netgear WNDR3700

(Amazon: $129.99 , FlashRouters: $149.95 , RouterSource: $149.99 )

Netgear_WNDR3700_DDWRT_VPN

Specifications:

-Up to 600 Mbps Wireless-N Dual Band
-680 MHz Atheros processor
-RAM/Flash: 64/16
-1 USB 2.0

The Netgear WNDR3700 is a great small household model. It has a respectable processor but with a small RAM and Flash it is only able to handle medium sized DD-WRT builds. It’s small overall transfer speeds and only internal antennas are a minor let down, as well as no AC capability but it would fit perfectly in any family home.

Amazon »   FlashRouters »   RouterSource »


Cisco Linksys E1200

(Amazon: $59.99 , FlashRouters: $89.95)

Linksys_E1200_DDWRT_VPN

Specifications:

-The Economy DD-WRT VPN Choice
-Up to 300 Mbps Wireless-N Single Band
-300 MHz Atheros processor
-RAM/Flash: 32/8

The Cisco Linksys E1200 is a great little economy model for those that have a more sensitive wallet and only need the router for a few devices. This router is minimal in every aspect of it’s specification so it’s no surprise that it’s only able to handle small to medium DD-WRT builds. Despite this, it’s a nice discreet piece of kit for those starting out with DD-WRT or wanting a cheaper option. You can also find our review of the E1200 here.

Amazon »   FlashRouters »


DD-WRT Routers

Advantages of DD-WRT

While default router firmware has been improving, installing DD-WRT on your router gives it the full functionality of a business grade router, without the cost. A full list of all the many advantages would be too long for this article, but some of the most useful are:

  • Advanced Quality of Service (QoS) controls – lets you change bandwidth allocation settings for different networks, and usually provides UPnP media streaming
  • Network storage (NAS) – external hard disks and USB flash drives can be plugged into DD-WRT flashed routers that are equipped with USB ports for use as network drives
  • Network printers – printers can also be plugged into a USB port for access from anywhere on the network
  • DNS caching – speeds up host name lookup to improve connection speeds to popular websites
  • Wireless bridging – turns the router into a WiFi repeater to extend the range of your WiFi signal
  • Advanced performance graphs – DD-DRT lets you analyse your network performance and bandwidth use with detailed graphs and statistics
  • Kai Daemon - this feature provides network tunnelling for the PC, Xbox and other consoles to the open source Xlink  Kai game platform
  • Adjust antenna power – to increase wireless range
  • VPN – DD-WRT can route the signals from all connected devices through a VPN service. This is particularly useful when you want to connect devices such games consoles, Kindle Fire tablets, mobile phones, AppleTV, Roku etc. that do not have built-in VPN clients.

Flashing your own router

‘Flashing’ is the process of changing or upgrading the firmware (built in programming) of a hardware device. Not all routers can be flashed with DD-WRT, but there is an increasingly long list of ones that can, with models by Linksys, Buffalo Technology and Belkin so prominent they have started to include DD-WRT as the default firmware on some of their models. A full list of DD-WRT compatible models is available from the official DD-WRT website.
There are a number of ways to ways to get a flashed router:

  • Buy one in which the manufacture has installed DD-WRT as the default firmware i.e. Buffalo
  • Buy a compatible router and flash DD-WRT onto it yourself. While not too complicated, this can be a bit tricky and requires some technical know-how. Also, while unlikely if you follow the instructions carefully, it is possible to brick your router so that it will no longer function, so is performed entirely at your own risk. You will, additionally likely void your manufacturers warrantee. On the other hand, it is the cheapest option! The full, official guide to installing DD-WRT can be found here
  • Buy a router from one of the companies mentioned at the beginning

Configuring VPN on DD-WRT

Pretty near all builds of DD-WRT support VPN using the PPTP protocol. However, this is not very secure and it is generally better to use OpenVPN. The basic framework for DD-WRT supports OpenVPN, but unfortunately not all routers support builds that do, so it is always best to check before buying if this is important to you (recommended).
Many VPN providers supply setup guides for DD-WRT routers, although some only provide support for PPTP. General guides are available on the DD-WRT website for setting up PPTP and OpenVPN.
Some providers (such as TorGuard and ibVPN) also sell routers flashed with DD-WRT and preconfigured for their VPN service, while third party router sellers (such asFlashRouters) specialise in supplying routers preconfigured for popular VPN providers.

DD-WRT vs Other Platfroms

Tomato is an alternative Linux based firmware package for routers, most notably the Linksys WRT54G/GL/GS, Buffalo WHR-G54S/WHR-HP-G54 and other Broadcom-based routers. Like DD-WRT, it can be used to flash a compatible router, allowing it to be used as a VPN gateway, as well as providing similar functionality to a DD-WRT flashed router.

DD-WRT is compatible with more routers, and is generally reckoned more newbie friendly, but many people prefer Tomato’s interface and excellent real-time network monitoring capabilities.

Conclusion

A DD-WRT router is a fantastic way to take control of your wireless network and give you business grade functionality for a fraction of the cost. Most importantly as far as we at BestVPN.com are concerned, is the fact that it is the easiest way to connect all the internet enabled devices in your home to your favourite VPN service, shielding your internet use from prying eyes and allowing you to spoof your location so you can access services normally denied you based on you geographic location.



Did you like the article? Help spread the word and share!
Peter Selmeczy Written by Peter Selmeczy
I am an engineer by trade and tech geek by night, who's passionate about sharing his knowledge with the people. Find me on Google+.

38 Responses to “5 Best DD-WRT Routers with VPN”

  1. Julia says:

    Hi Peter –

    Thank you for taking the time to share your knowledge. I’m a little confused though. Do I still need to subscribe to a VPN service even after flashing my router and if so isn’t it just the same to use Windows and the VPN service? I mean, if you have to pay for the service anyway, why bother with a router?

    Thanks again!

    • Peter Selmeczy Peter Selmeczy says:

      Hi Julia
      Yes you still need to subscribe to a VPN service after.
      The reason is that usually the number of devices you can connect to the VPN is limited (the average is around 2/3). By running a VPN on your router all devices connected to it will automatically be protected yet you’ll only be using 1 connection. For example I have a router with a VPN on it and I can connect my laptop, computer, touchpad and phone to it without any issues as well as my families devices and I’ll still only be using one connection whereas if they we’re connected individually using the windows/mac/android/ios software I’d be using around 5.
      Peter

  2. Tom says:

    Hi Peter
    Thanks for the article. I was wondering if you could help.

    I want to upgrade my network to have a router that will be able to connect to a vpn (ExpressVPN). However, I don’t want all the devices connected to the vpn. I’m looking for a set up where I will be able to control which selected devices are routed through the vpn (and if possible even down to the port) and it to all be managed router side. Is there anything which you know of that would allow me to do this? My research is unfortunately coming up short.

    Many Thanks,

    Tom

    • Peter Selmeczy Peter Selmeczy says:

      Hi Tom

      I have the perfect solution for you (I can’t remember if port settings are included but device yet), it’s called Sabai Technology/ Sabai OS. In the review look under Features ‘Gateways’. I’m not sure if such a thing is possible with DD-WRT or Tomato, or at least not very easily anyway. It also performed very well in our VPN comparison for routers. You also get a year long support which they are very good at!
      On the downside they are slightly pricey (though you can sign up to just support and install yourself if you have one of the required routers) and if you want to install some custom stuff on there (i.e. I installed Transmission – a torrent client) there’s a few tweaks you have to make in order to do it but nothing major.

      Peter

    • Peter Selmeczy Peter Selmeczy says:

      I have also got in contact with Sabai and the initial statement from them is that it might be possible to specify which devices uses VPN using Ports using some fancy IP tables. Their tech guys will have a look into it and see how easy it is to do and get back to me, or they might post straight here.

      • Michael D says:

        There is a WanUp script that I’ve been using for a couple years in Tomato firmware to route specific computers through openvpn client on my router to an external OpenVPN server.
        from bottom of this page, not my work, we all stand on the shoulders of giants etc: http://serverfault.com/questions/382498/howto-only-tunnel-specific-hosts-route-through-openvpn-client-on-tomato

        DD-wrt uses “.wanup” for wanup scripts, I don’t have one in front of me.
        http://www.dd-wrt.com/wiki/index.php/Script_Execution
        Should be possible to run this or very similar in wanup in DD-WRT.
        script after this colon:
        # disable Reverse Path Filtering on all network interfaces:
        #
        for i in /proc/sys/net/ipv4/conf/*/rp_filter ; do
        echo 0 > $i
        done

        #
        ip route flush table 100
        ip route del default table 100
        ip rule del fwmark 1 table 100
        ip route flush cache
        iptables -t mangle -F PREROUTING

        # OpenVPN tunnel named “tun11″
        #
        ip route show table main | grep -Ev ^default | grep -Ev tun11 \
        | while read ROUTE ; do
        ip route add table 100 $ROUTE
        done
        ip route add default table 100 via $(nvram get wan_gateway)
        ip rule add fwmark 1 table 100
        ip route flush cache

        # all traffic bypasses the VPN
        iptables -t mangle -A PREROUTING -i br0 -j MARK –set-mark 1

        # these addresses use the VPN
        iptables -t mangle -A PREROUTING -i br0 -m iprange –dst-range 192.168.0.1-192.168.0.6 -j MARK –set-mark 0

        • Peter Selmeczy Peter Selmeczy says:

          Hey

          Thanks, that’s awesome! When we get a chance we’ll definitely check that out and hopefully bring out a similar list for Tomato too!

          Peter

  3. Hey Tom and Peter,

    Great discussion you’ve got going on here.

    Our gateways feature routes based on IP address only and helps with static DHCP setup. We are not routing based on port yet. What underlies Gateways is ip rule in linux that allows routing based on IP address. There is an ability in iptables that would let us address based on port, but that’s not built into the web interface. Would love to know what setup you were thinking with ports rather than IP address. Would you have a switch connected with multiple devices? We’re open to adding it to our development schedule if it’s something that’s highly useful.

    The next cool thing we plan to add to our interface is the ability to route based on website, so that you can have a website and any sub-sites routed locally or through the tunnel. It uses an underlying linux capability called ipset. It got integrated with dnsmasq, which we use for DHCP but we’d be the first that I know of with a web interface for control.

    William

  4. Andreas says:

    Hello Peter,

    Very interesting article.

    I will move from an Internet free country (Mexico) to a very restricted country (China). A VPN Router was actually was I am looking for instead of setting up every client. Unfortunatley the German company (AVM) is not listed to upgrade to a DD-WRT Router.

    AVM offers VPN (Client – VPN) conection for WIndows / Linux / iPhone / Android. For instance sitting in China connecting to my Fritzbox in Germany or USA/Mexico using unblocked internet.

    Does these mentioned DD-WRT Routers can connect to the Fritzbox VPN with the IPsec VPN?
    Has anybody checked these Routers if they work in China with VPN Providers strongVPN, Astrill or any other, maybe Fritzbox (German/Mexican IP)?

    Thanks for your comments
    Andreas

    • Peter Selmeczy Peter Selmeczy says:

      Hi Andreas

      I just saw you left two comments.
      I had a look at Fritz Products and you can’t upgrade these to run DD-WRT.
      If you’re Fritxbox only runs a VPN Client then you won’t be able to connect to it from China as you would need it to run a VPN Server not a client.
      Setting up strongVPN or Astrill on the router should be no problem and they both provide setup guides for this.

      Peter

      • Douglas Crawford Douglas Crawford says:

        Just to add to Peter’s answer, setting up StrongVPN or Astrill on a DD-WRT router should not be a problem, but whether this will work in China depends on whether these VPN services are currently being blocked by the Great Firewall of China (GFW). Check out our article ‘www.bestvpn.com/blog/12142/5-best-vpns-china-december-2014/’ for our most up-to-date information on the current situation (also check our readers comments in that article for ‘on the ground’ advice).

  5. Andreas says:

    Hello Peter,

    very interesting and informative.

    I will move from an open internet country to a very restrictive country.
    Therefore I am looking for a possibility to connect my router via VPN to the free internet.

    Do you know if the routers you are showing here are working in China and can connect via IPsec to a VPN Server on a Fritzbox from AVM?

    The DD-WRT Software needs to be installed after you have purchased the router, correct?

    Thank you very much.
    Regards
    Andreas

    • Peter Selmeczy Peter Selmeczy says:

      Hi Andreas

      DD-WRT can be installed after purchasing the router yes or as stated at the beginning of the article you can buy preflashed ones.
      Router’s will work anywhere as long as the power supply is right (you’ll need to check this for yourself but most come with 110v/240v acceptance now)
      Yes L2TP/IPsec client can be run on a DD-WRT router.
      With the part regarding to the Fritzbox can you please clarify what you mean as I’m not sure I understand correctly>
      Peter

      • Andreas says:

        Hello Peter,

        thank you very much for your information.
        Sorry for the double posting. After refreshing the side I did not see my post and thought it was lost.

        The Fritzbox is running a VPN Server, which means the router could connect directly with the Fritzbox or any other client (iPhone, Android, Laptop, tablet, ect.) can connect to the Fritzbox.

        I will check now that the VPN to the Fritzbox (VPN Server) from China is working and then get the Router. Makes the life easier.

        Is it possible to setup two profiles for VPN in case switching country IPs?

        Thank you a lot
        Andreas

        • Peter Selmeczy Peter Selmeczy says:

          Hi Andreas

          No problem. Yes we check comments as we do get quiet a lot of spam and while our spam filter does catch most of it, it doesn’t get everything.

          Changing VPN client information on DD-WRT can be a bit of a pain depending on how you set it up, especially since most of the time the router has to be restarted for the changes to take effect (at least with OpenVPN, not sure for L2TP). If you’re looking to change often I’d recommend looking into Tomato as it allows multiple client information to be set up.

          You’re welcome
          Peter

  6. Andreas says:

    Hello Peter,

    thanks for your help.
    Short last question. Reading the DD-WRT website and looking for IPSec I do not find any answer that it is really working.
    I am not the specialist, but in my Android I need to set it up with IPSec Xauth PSK. And also for L2TP I cannot find something in the wiki of DD-WRT. They speak always about PPTP and OpenVPN but never mentioned IPSec?
    Thanks
    Andreas

    • Peter Selmeczy Peter Selmeczy says:

      Hi Andreas

      PPTP and OpenVPN are more common to use hence you won’t see L2TP much – but on most DD-WRT builts it’s doable.
      Make sure you select a VPN provider that gives you L2TP DD-WRT set-up guides and then you can’t go wrong.

      Peter

  7. Andreas says:

    Hi Peter,

    Since the great firewall is blocking VPN Services I was thinking in my own fritzbox server. And this only offers IPSec. PPTP is also not secure anymore as I was reading.
    Thanks
    Andreas

    • Peter Selmeczy Peter Selmeczy says:

      Hi Andreas
      They are trying to block VPNs but they haven’t been very successful so far and plenty of services are still up and running.
      Peter

    • Miklos says:

      Hi Andreas,

      I have a fritzbox too which I love due to the voip capability and the integrated dect base station. Unfortunately VPN is a pain on it, as it doesn’t handle openvpn, and not even L2TP, just “pure ipsec” as they call it. Currently it’s not possible to connect to a vpn provider :-( I already wrote AVM a few times suggesting to implement an openvpn client, unfortunately no success until now.

      Now I bought an asus router and flashed tomato on it, and put the fritzbox behind it. Everything works well, the whole network is behind the vpn, but my incoming voip calls don’t always get through. Annoying…

  8. Andrea says:

    Dear Peter,

    i have a question for you, i am using Witopia as vpn provider mainly because I am an Italian living in Hungary and I like to have the access to italian tv that it has IP restriction, so far i am using Witopia on my laptop and iPhone but i am facing issue while i try to connect my device to my chromecast because it doesn’t allow to broadcast trough a vpn client.
    For this reason i would like to buy a new router, i was also considering to buy the Witopia router but they deliver just in the USA, for this reason can you please advice me if it is possible to use the Witopia VPN on one of the routers u mentioned in your great article.
    Thank you very much.
    Andrea

    • Peter Selmeczy Peter Selmeczy says:

      Hi
      Since you’re internal IP stays same chromecast with a VPN router shouldn’t be an issue. There is also a FlashRouters article on this for a bit more information.
      You’re problem is actually WiTopia as they do not allow you to use their normal VPN on a router . You probably won’t even need a new router just a different provider. Also have you looked into using a SmartDNS instead?
      Peter

  9. scott says:

    Hello Peter and thank you in advance for your help. I live in the Dominican Republic which prohibits me from getting soooo many USA websites. If I get a ‘flashed router’ with a preinstalled vpn, what happens when I decide I no longer want that particular vpn service? Am I stuck with a router that only works with that company??
    Thanks
    Scott

    • Peter Selmeczy Peter Selmeczy says:

      Hi Scott
      No. They just set up the VPN as recomended by the VPN provider. If you decided to change VPN provider you would have to just change a few settings around. I have not heard of any VPN Providers hard-coding their settings into the router.
      Peter

  10. Vaz says:

    Hi Peter,

    Great article, appreciate you sharing your knowledge on VPNs. I am a bit new to this, please excuse me for ignorance – trying to learn by my own through trial and error.

    I have already set up my home VPN using a good brand AC1900 router, with DynDNS services – works like a charm. It includes a personal NAS drive, now we can access from anywhere in the world.

    My next project is for a friend’s retail stores where they have 4 sites – 3 IP Cameras and 1 NVR locations,
    > site 1 is to host the VPN server to host the NVR that needs to connect to the 3 IP Cameras
    > site 2 – 4 to host VPN clients having the IP Camera devices that do not have VPN capabilities on their own

    Main criteria is to have the IP Cameras and the NVR in the same IP subnet, I am thinking VPN is the best option – correct me if I am wrong.

    Do you think this is workable?
    Is it possible to use 1 expensive VPN Router and 3 generic routers to completed the VPN tunnelling?

    Your suggestions will be highly appreciated and will definitely help a lot.

    Thanks
    Vaz

    • Peter Selmeczy Peter Selmeczy says:

      Hi Vaz

      No problem I learnt to use DD-WRT on my own using trial & error and a lot of Google too so I know the feeling.

      I think what you’re suggesting should be possible but I’d recommend getting some cheaper gear and testing it out first. If I understand (guess) correctly you want to use the powerful VPN Router to be the server. VPN both server and client can be processor intensive and unlike desktops and mobiles the CPUs in routers hasn’t been advancing the same rate. What I think might be more helpful is to get a Synology system (or similar) as these have tons of functionality built in and better capabilities – at least for the central location anyway. Alternatively Sabai/RouterSource has a VPN accelerator bundle which might aid you too.

      I will talk to some tech guys at both Sabai and FlashRouters and see if they have any tips/ideas. I think I might also know someone with expertise in this area but I won’t be able to have a talk with them until Monday at least.

      Peter

      • Vaz says:

        Thanks Peter for the insight. Will definitely look into the suggestions and please do check with your colleagues / friends for any ideas.

        Vaz

  11. Raaja Shekh says:

    Hello Peter,

    i need your help for buying Router, which is the best router for DD-WRT support fast interface/internet/long life

    40Mbps download internet broadband
    100 users (no need wifi)
    most active on Access Restrictions Tab (main n only purpose for DD-WRT)

    thanks for your kind help.

    Raaja

    • Peter Selmeczy Peter Selmeczy says:

      Hi Raaja

      You would need a switch for that and not a router. I’m not sure that you can get switches support by DD-WRT.

      Sorry I couldn’t help you.

      Peter

  12. epolz says:

    hi,

    good review, but can any one clarify 1 problem if vpn connect via router it has very limited speed +- 220-280kb/s only even with 20mb line. Speed both my VPN normal (1.8mb/s 2.3mb/s up/down) if connect via computer (software//gui )

    as i know it happened because ‘cpu’ limit by router. Correct me if im wrong since i try 2 VPN ‘Private Internet Access’ & ‘FinchVPN’ service with my 3 Asus Router run via Tomato Shiby firmware. (RT-N10, RT-N12 and RT-18U)

    • Peter Selmeczy Peter Selmeczy says:

      Hi Epolz
      You’re getting very slow speeds even without the router. Try out a few different providers as with a 20MB line on your computer you should get about 15 upwards (depending on where to and where from you’re connecting of course).
      Yes with a router your CPU indicates your max speed. I have a 30MB line and with an N66U I could still get close to 15 in some cases with Tomato and DD-WRT.

  13. Eddie says:

    Hi folks
    I have stumbled across this article by sheer coincidence and I have to say there are some very knowledgeable folks on here who are very forthcoming.
    A couple of weeks ago I managed to flash my Netgear WNDR3700v2 router with dd-wrt. After many weeks of research I am still at a loss on how to set the router up to let specific devices through the VPN and other devices through ISP.
    Any info would be greatly appreciated.

    Regards
    Eddie

    • Douglas Crawford Douglas Crawford says:

      Hi Eddie,

      I believe this can be achieved by playing with the router’s IP tables, although I would need to do some research before I could comment fully on this (I may write a guide in the future). My DD-WRT router config page (services -> VPN) also notes that,

      ‘OpenVPN Client
      Policy based Routing: Add IPs/NETs in the form 0.0.0.0/0 to force clients to use the tunnel as default gateway. One line per IP/NET.
      IP Address/Netmask: Must be set when using DHCP-Proxy mode and local TAP is NOT bridged’

      I hope this is of some help. An alternative workaround is to simply connect the devices to wish to use VPN with to the VPN router, and the other devices direct to ytour modem…

      • netguru says:

        “After many weeks of research I am still at a loss on how to set the router up to let specific devices through the VPN and other devices through ISP.”

        its very easy …
        the dd-wrt based router is behind your first router with internet access, right?

        in this case you have to use dedicated ips on your client side.
        use vpn: set gateway in the client setup to dd wrt router
        use isp mode: set gateway in the client setup to the isp router

        thats all ,-)

        • Douglas Crawford Douglas Crawford says:

          Hi netguru,

          I love it when our readers come to the aid others! Thanks, and I hope this answer helps out Eddie (and anyone else suffering similar problems.)

  14. Mark says:

    I’ve been reading through and trying to figure what I need to do. Some back ground: I’m in the US and moving to the middle east for a few years. Most all of my electronics are connected through wifi. I have an Apple airport extreme currently. I know Apple doesn’t play well with VPN and VPNs usually run a little slower bandwidth. I still want to get my Netflix, Hulu, and other US based services I have now, hence looking for a VPN/router. I would also like to keep a faster local/in country connection. So, my plan was to keep the Apple airport extreme for the local and get a VPN/router to get back to a US location. I’m not sure, but would I just change the wifi networks (VPN or non-VPN)? I’m looking for ease and not network savvy at all. Thanks.

    • Douglas Crawford Douglas Crawford says:

      Hi Mark,

      Yup, simply connect both routers to your broadband modem and change WiFi networks as required. Alternatively, depending on what devices you plan to connect, you could just run the VPN through a software client, which would save you buying an extra router (although this will not work with smart TV’s, games consoles etc.). If the only reason you need a VPN for is to watch Netflix etc., (i.e. not for privacy and security), then you might want to consider using SmartDNS instead, as this gives better streaming performance (less computational overheads).

Leave a Reply

Recent Posts

Support Privacy

BestVPN.com sometimes receives monetary compensation from some listed VPN providers. We proudly donate to:

EFF

privacy international

IDL

Fight for the future

WAIT! 20% OFF AN AWESOME VPN TODAY!
SIGN UP TO OUR NEWSLETTER AND GET THIS DEAL RIGHT NOW
We have a weekly privacy news summary and will also send you great discounts, coupons and deals on VPN services.
JUST ENTER YOUR EMAIL TO GET THIS DEAL
Your Information will never be shared with any third party.
WAIT! 20% OFF AN AWESOME VPN TODAY!
SIGN UP TO OUR NEWSLETTER AND GET THIS DEAL RIGHT NOW
We have a weekly privacy news summary and will also send you great discounts, coupons and deals on VPN services.
JUST ENTER YOUR EMAIL TO GET THIS DEAL
Your Information will never be shared with any third party.