How to set up PureVPN on Tomato router

Using this guide you can easily configure VPN on Tomato Router. Set up PureVPN on Tomato Router using simple steps.

Written By Fahad Ahmed

Updated at October 3rd, 2024

Configuring a PureVPN tunnel on your router is a great way to ensure the safety and security of all the devices in your home. This method is especially beneficial if you have devices that don’t have VPN compatibility or you want to protect all the Wi-Fi-connected devices in your home.

It is very easy to configure VPN on Tomato router. The following guide will help you set up PureVPN on your Tomato router.

Find your VPN credentials for manual configuration

To find your VPN credentials log into the PureVPN Member Area. Click 👉 here to visit Member Area.

On the Subscription tab scroll down to be able to view your VPN credentials.

You will be able to see and copy your VPN credentials.
Note down your PureVPN username and click the Eye icon to make your password visible and use it in the manual configuration.

Delete

How to set up OpenVPN on Tomato router

Go to the Control Panel and select VPN Tunneling. Click on OpenVPN Client and select Client 1 to enter the following details under the Basic Tab:
1. From Drop Down in Interface Type select TUN
2. In Protocol Drop down, select UDP
3. To fill the Server Address Details, open the downloaded .ovpn file on Notepad, copy the address of your desired server and paste it in the field
4. Insert 53 for UDP in the port field
5. Select Automatic in firewall
6. Select TLS in Authorization Mode
7. Select on Username/ Password Authentication
8. Enter your Username and Password provided to you by PureVPN
9. Uncheck the Username Authen. Only
10. Select Outgoing (1) in the drop down of Extra HMAC authorization (tls-auth-)
11. Check Create NAT on tunnel

Delete

Note: For TCP port, you need to change the port from UDP to TCP and select 80 instead 53 in the port field..

Go to the Advance tab and do as follows:

Enter 0 in the field Poll Interval
Uncheck Redirect Internet Traffic
Select Relaxed in the drop down of Accept DNS Configuration
Select AES-256-CBC in the drop down of Encryption Cipher
Select Adaptive in Compression
Enter -1 in TLS Renegotiation
Enter 30 in Connection Retry
Uncheck the option Verify server certificate (tls-remote)

Go to the tab titled Keys and do as follows:

For Static Key open the WDC.key in a notepad, copy all content and paste the content in the field.
For Certificate Authority, open CA.crt in a notepad, copy all its content and paste the content in the field.
For Client Certificate, open Client.crt in a notepad, copy all of the content and paste the content in the field.
For Certificate Key, open Client.key in a notepad, copy all its content and paste the content in the field.

Click on the Save button and then click on the Start Now button. After a few seconds, your VPN connection will be established. You can verify the VPN connection status by clicking on the Status tab.

Delete

Note: Dedicated IP addon can be only be connected with Ras protocol i.e PPTP/L2TP/SSTP.

Delete

How to configure OpenVPN on Advanced Tomato v3.5 router

This article will guide you through the steps involved in setting up PureVPN OpenVPN on an Advanced Tomato firmware router. We have used the Netgear R7000 router flashed with the latest Advanced Tomato firmware version 3.5 to prepare this article:

Log in to the router control panel by entering the router’s default IP address 192.168.1.1 in the address bar of your preferred browser. (If you have changed your router's default IP address, enter that in your browser tab instead). Enter the admin name and password for your router, then click Sign in.

In order to configure OpenVPN on Adv. Tomato, first download the required OpenVPN Files from this link.
Now go to the VPN tab and select the OpenVPN Client option.

Now configure your OpenVPN client as shown below:

Under basic tab
1. Start with WAN: Check
2. Interface Type: TUN
3. Protocol: Choose either UDP or TCP and keep it in mind as this will be important later on
4. Server Address/Port: Enter your desired location’s OpenVPN address. You can get your desired server address from this link.
5. Enter port number 80 for TCP or port number 53 for UDP.
6. Firewall: Automatic
7. Authentication Mode: TLS
8. Enter your PureVPN credentials. Here is how you can find your VPN credentials.
9. Extra HMAC authorization (tls-auth): Outgoing(1)
10. Create NAT on tunnel: Check
Click the Save button.

Under Advanced Tab:

Redirect Internet Traffic: Checked.
Accept DNS configuration: Relaxed.
Encryption Cipher: AES-256-CBC.
Compression: Adaptive.
TLS Renegotiation Time: -1
Connection retry: 30

Click the Save button.

Under Keys Tab:

For Static Key: Copy and paste all the content from the Wdc.key file you have from the previously downloaded the OpenVPN configuration files.
For Certificate Authority: Copy and paste all the content from the ca.crt file.
Client Certificate and Client Key: blank.