Как поставить proton vpn на роутер

посоветуйте роутер с подключением к proton vpn и точкой доступа

All, возникла потребность в девайсе/роутере, который будет уметь следующее:

• подключаться по wifi к точке доступа (поддерживать login screen точки доступа)
• подключаться к vpn (protonvpn в данном случае)
• создавать, в свою очередь, новую wi fi ap
• переправлять весь входящий трафик в vpn
• если коннекция c vpn рвётся — подключившиеся хосты теряют доступ к интернету
• питание от usb

то есть такой девайс, подключившись к которому, весь траффик заворачивается в vpn и я могу безопасно сёрфить интернет через proton

epsilon1024
02.06.20 16:56:44 MSK

Без особых сложностей можно сделать на любой wrt прошивке. Только без понятия, что за «login screen точки доступа».

Просто настроить OpenVPN или IKEv2/IPSec же, вроде.

Guide to installing Proton VPN on different routers

There are many advantages to configuring your router to run Proton VPN. These include:

• No need to set up a VPN on each device
• Protects devices that don’t support VPNs
• Automatically secures all your Internet traffic
• Protects your entire household with one device

We don’t recommend you attempt to set up a VPN connection yourself unless you are a tech-savvy user. You cannot set up Proton VPN on any router.

You can install Proton VPN on routers that support OpenVPN as a “Client” (instead of as a “Server”). You can also use routers that support IKEv2, but L2TP is not supported by Proton VPN.

Note that routers your Internet service provider gives you will generally not support VPN configurations.

This means you must either find a router that has a VPN client package, which can take some research, or you must “flash” (or install DD-WRT software) on your router, which comes with the risk of rendering your router inoperable if you make a mistake.

However, if you are a tech-savvy user, we have created several guides for the routers and firmware that work with Proton VPN:

Proton VPN router guides

We have partnered with InvizBox to create a router specifically for Proton VPN. This router is open source and configured to connect easily to your Proton account.

• AsusWRT using OpenVPN
• AsusWRT using WireGuard
• AsusWRT-Merlin using OpenVPN
• DD-WRT
• FreshTomato
• Gl.iNet Flint using OpenVPN
• MikroTik using WireGuard
• Mikrotik using IKEv2
• OpenWRT
• pfSense 2.4.5x
• pfSense 2.5.x
• pfSense 2.6.x
• Tomato (legacy)
• Vilfo router

FAQ: Proton VPN on routers

Q: Will my connection speed slow down if I set up Proton VPN on my router?

A: That depends on the processing power of your router. If your router cannot handle the additional VPN encryption, then yes, you could see slower speeds.

Q: Will having Proton VPN on my router protect all my connections?

A: The VPN on your router will protect the connections of all devices connected to the router, but not necessarily the connection between the device and the router. The VPN encryption takes place on your router, which means it only applies to the traffic between your router and your Internet service provider. As long as your router is password-protected and you do not have any unknown devices connected to your network, this should not be an issue.

Other local network connections, like a Bluetooth connection between your smartphone and speaker, will not be protected.

Q: Once I set up a VPN on my router, do I need to do anything else?

A: A router, like any other device, needs to be updated regularly to receive the latest security improvements. If they are not updated, routers can become incompatible and stop supporting Proton VPN’s service. This can happen if the router is running an outdated version of OpenVPN (e.g., 2.3) or an old version of the SSL/TLS networking stack. (These examples are taken from user issue reports.)

Keeping your router up to date will help it stay compatible with our servers. When you are selecting a router to install Proton VPN on, you should choose one from a brand with a good track record of keeping its firmware up-to-date.

If you have any questions, please contact our Support team.

How to set up Proton VPN on OpenWRT routers

In this article, we are going to cover the basic VPN setup process on an OpenWRT router so that it can connect directly to the Proton VPN servers.

We don’t recommend setting up a VPN connection if you aren’t a tech-savvy user. Please be aware that OpenWRT 18.06 is no longer officially supported. We therefore suggest updating to OpenWRT 21.02, which supports the newer and faster OpenVPN 2.5.

1. Install required packages

Install openvpn-openssl and luci-app-openvpn to manage OpenVPN on your router using the web interface. A new page in the web interface should appear.

Navigate to VPN tab→ OpenVPN to open the OpenVPN config management page.

2. Upload and edit an OpenVPN config file

This is available starting with the OpenWRT 19.07.

Log in to your Proton VPN account and download the desired OpenVPN configuration files by selecting the Router option.

Now go back to OpenVPN on your router config page. Go to OVPN configuration file upload → Browse… , locate the configuration file that you have just downloaded, give it a name, and Upload it.

The configuration file will appear in the table under OpenVPN instances. Click Edit next to it.

In section 1, look for the line beginning with auth-user-pass. Edit it to add the full path to the username/password .auth file. This can be found at the end of the heeding for section 2.

In section 2, enter your OpenVPN username and password (which are different from your regular Proton VPN account details). To find these, log into your Proton VPN account and go to Account → OpenVPN / IKEv2 Username.

Note: to use our NetShield DNS filtering feature, append the suffix +f1 to your username to block malware, or +f2 to block malware, ads, and trackers (for example 123456789+f2).

Return to section 1 and add the following lines to the configuration file. Note: this is not required for OpenWRT 21.02+.

script-security 2 up /etc/openvpn/client.sh down /etc/openvpn/client.sh

Save the configuration file.

Go back to the VPN tab → OpenVPN and click on Save & Apply.

3. Add DNS updater script (skip this step if running OpenWRT 21.0+)

Log in on your router via SSH client with root user. Type the following in the terminal:

cat /etc/openvpn/client.sh #!/bin/sh env | sed -n -e " /^foreign_option_.*=dhcp-option.*DNS/s//nameserver/p /^foreign_option_.*=dhcp-option.*DOMAIN/s//search/p " | sort -u > /tmp/resolv.conf.vpn case $ in (up) uci set dhcp.@dnsmasq[0].resolvfile="/tmp/resolv.conf.vpn" ;; (down) uci revert dhcp ;; esac /etc/init.d/dnsmasq restart & EOF chmod +x /etc/openvpn/client.sh

Exit your shell.

4. Start and enable the client

Start the client by pressing the Start button in the table of available configurations. This can take up to 10 seconds to complete, as OpenVPN startup and shutdown are slow.

If you want this VPN client connection to start on boot and always remain active, tick the Enabled checkbox.

Click Save & Apply to save changes.

5. Firewall

At this point, the VPN is set up and your router can use it. However, the devices in the LAN of your router won’t be able to access the Internet anymore. To do this, you need to set the VPN network interface as public by assigning a VPN interface to WAN zone.

Click on Network in the top bar and then on Firewall to open the firewall configuration page, then click on the Edit button of the wan (red) zone in the Zones list at the bottom of the page.

Click on the Advanced Settings tab and select the tunX interface (tun0 in the screenshot, which is the most likely if you have a single OpenVPN client/server running). Click Save, then Save & Apply.

Click on Status on the top bar and then click on System Log to see the interface name.

A few lines from the system log where you can see the interface name of the OpenVPN client started with the configuration file FR

Mon Nov 23 09:58:54 2020 daemon.notice openvpn(FR)[3416]: /sbin/route add -net 0.0.0.0 netmask 128.0.0.0 gw 10.20.0.1 Mon Nov 23 09:58:54 2020 daemon.notice openvpn(FR)[3416]: /sbin/route add -net 128.0.0.0 netmask 128.0.0.0 gw 10.20.0.1 Mon Nov 23 09:58:54 2020 daemon.notice openvpn(FR)[3416]: Initialization Sequence Completed

6. Run a test

Establish the VPN connection. Verify your client traffic is routed via VPN gateway.

6.1. Check your client’s public IP addresses.

6.2. Make sure there is no DNS leak on the client-side.

How to set up your AsusWRT router for Proton VPN using OpenVPN

In this article, we show you how to set up an AsusWRT router to connect to Proton VPN using the OpenVPN VPN protocol. On Asus RT-AXxxx routers, it’s also possible to configure Proton VPN using the WireGuard® protocol.

• Learn how to set up your AsusWRT router for Proton VPN using WireGuard
• Learn about OpenVPN vs. WireGuard

If you encounter any problems, please see the troubleshooting section at the end of the article or contact our Support team.

Please note that Proton VPN only guarantees support for streaming services if you have a Proton VPN Plus, Proton Unlimited, or Visionary (legacy) plan.

Setup instructions differ somewhat, depending on whether you have an Asus RT-ACxxx or an Assus RT-AXxxx router.

• How to set up OpenVPN on AsusWRT RT-ACxxx routers
• How to set up OpenVPN on AsusWRT RT-AXxxx routers

How to set up OpenVPN on AsusWRT RT-ACxxx routers

1. Open your Asus router’s admin panel by typing its local IP address into your browser’s URL bar. By default, the address is 192.168.50.1, but you may have changed it when you set up your router.

If you don’t know your router’s IP address, you can log in using the URL: router.asus.com (as long as you’re not connected to a VPN on the device you’re configuring AsusWRT from). Sign in using your Asus router account.

2. Go to Advanced settings → VPN .

3. Select the VPN Client tab and Add profile .

4. Download the OpenVPN configuration file(s) you desire, selecting Router for the platform.

5. Back on your Asus router’s admin page, select OpenVPN and enter the following:

• Description – This can be anything you wish (for example, Proton VPN)
• Username: Your OpenVPN / IKEv2 username
• Password: Your OpenVPN / IKEv2 password

Your OpenVPN / IKEv2 username and password are not your regular Proton VPN username and password. To find your OpenVPN / IKEv2 username and password, log in to account.protonvpn.com and go to Account → OpenVPN / IKEv2 username.

Note: To use our NetShield DNS filtering feature, append the suffix +f1 to your username to block malware or +f2 to block malware, ads, and trackers (for example, 123456789+f2). NetShield is a premium feature available with a Proton VPN Plus, Proton Unlimited, or Visionary (legacy) plan.

After you’ve filled everything in, click the Choose File button and use your system’s file manager to locate the OpenVPN configuration file you downloaded in step 4.

Click Upload to import the OpenVPN profile to your AsusWRT router. You’ll see a Complete notification once this is done. Click OK to complete the setup.

How to connect to Proton VPN

You are now ready to connect to a Proton VPN server and begin browsing securely. Return to the VPN Client page (Advanced settings → VPN) and click the Activate button next to the connection you just set up to establish a VPN connection.

If the connection is established successfully, you will see a blue checkmark under Connection Status.

To confirm that the AsusWRT router VPN setup is complete and the connection is working correctly, visit ip.me in a browser.

To disconnect the AsusWRT VPN connection, visit the VPN Client page and click the Deactivate button.

How to set up OpenVPN on AsusWRT RT-AXxxx routers

1. Open your Asus router’s admin panel by typing its local IP address into your browser’s URL bar. By default, the address is 192.168.50.1, but you may have changed it when you set up your router.

If you don’t know your router’s IP address, you can log in using the URL: router.asus.com (as long as you are not connected to a VPN on the device you’re configuring AsusWRT from). Sign in using your Asus router account.

2. Go to Advanced Settings → VPN → VPN Fusion tab → Add profile.

4. Download the OpenVPN configuration file(s) you desire, selecting Router for the platform.

5. Back on your Asus router’s admin page, fill in the following details:

• Connection Name: This can be anything you wish (for example, ProtonVPN).
• VPN type: OpenVPN
• Username: Your OpenVPN / IKEv2 username
• Password: Your OpenVPN / IKEv2 password

Your OpenVPN / IKEv2 username and password are not your regular Proton VPN username and password. To find your OpenVPN / IKEv2 username and password, log in to account.protonvpn.com and go to Account → OpenVPN / IKEv2 username.

Note: To use our NetShield DNS filtering feature, append the suffix +f1 to your username to block malware or +f2 to block malware, ads, and trackers (for example, 123456789+f2). NetShield is a premium feature available with a Proton VPN Plus, Proton Unlimited, or Visionary (legacy) plan.

After you’ve filled everything in, click the Import .ovpn file button and use your system’s file manager to locate the OpenVPN configuration file you downloaded in step 4.

You’ll see a Complete notification once this is done. Click Apply and Enable to complete the setup.

How to connect to Proton VPN

A VPN connection will be established when you first set the connection up and click Apply and Enable.

To connect at a later point, go to Advanced settings → VPN → VPN Fusion tab and toggle the switch next to your new connection on.

To confirm that the AsusWRT router VPN setup is complete and the connection is working correctly, visit ip.me in a browser.

To disconnect the AsusWRT VPN connection, visit the VPN Fusion page and toggle the switch off.

Troubleshooting

Proton VPN does not support OpenVPN versions earlier than OpenVPN 2.4 because they are no longer considered secure.

However, some AsusWRT routers have firmware that supports OpenVPN versions lower than 2.4. In this case, we recommend upgrading your firmware to the latest official version . To check the OpenVPN version supported by your router’s firmware:

1. Start or restart a VPN connection, as described above ( Deactivate your VPN connection if it is running and then Activate it).

2. Go to Advanced Settings → System log . Scroll to the top of the log and look for the OpenVPN version.

If your OpenVPN version is 2.4+ (or you have updated your firmware and are still encountering problems), you have two options:

1. Report the issue to ASUS using its official Security Advisory tool (as using earlier versions of OpenVPN is a security issue).
2. Flash your router with alternative secure firmware such as FreshTomato (Proton VPN setup guide here ) or OpenWRT (Proton VPN setup guide here ).