How to Setup Surfshark on Router in 2021
Install Surfshark on your Router (ASUS, DD-WRT, & Tomato Routers) and protect your online privacy. Connect to multiple devices at the same time without having a problem of compatibility issues.
If you’re in the market for a super affordable VPN that can be easily configured on your router, then Surfshark VPN is all that you need. We were absolutely blown away by its performance when we tested it for our in-depth Surfshark review.
Not only is Surfshark ranked amongst the fastest VPN service providers in the industry, but it also offers 3200 servers all over the globe and premium features like Kill switch, Ad-blocker, Split tunneling, and much more that you can expect from any top-of-the-line VPN service. Speaking of speeds, just check out how Surfshark performed in our speed test.
Sounds like the perfect VPN for your router right?
In this article, I will show you how to setup Surfshark on a router in the easiest way possible. Beginners, you’re in luck. Once you configure Surfshark on your router, you’ll be able to unblock any blocked website or service like Netflix U.S, HBO Now, and Hulu and gain access to an unlimited simultaneous connection.
Installing Surfshark on Router
Surfshark only supports routers running open-source firmware including DD-WRT and Tomato. The only other stock firmware from popular router manufacturers that Surfshark supports is AsusWRT.
Keeping that in mind, I will demonstrate the setup process for Asus routers specifically and then for DD-WRT and Tomato to help as wide of an audience as possible.
How to Setup Surfshark on ASUS Routers
If you have an Asus router, then you’re in luck. Not only are most Asus routers compatible with Surfshark, but the installation method is reasonably straightforward as well and will hardly take you 5 minutes.
Follow the steps below to proceed with the setup process of Surfshark on the router:
Step 2: Log in to the ASUS router control panel by entering the Default Gateway address bar. This is usually 192.168.1.1
Step 3: Enter your login details
Step 4: Now click VPN in the sidebar
Step 5: Click on the VPN Client tab and Add a profile
Step 6: Now click on the OpenVPN tab and enter:
- Description: You can choose whatever name you want to give to your VPN
- Username: Enter your Surfshark username
- Password: Enter your Surfshark password
Step 7: You now have to add configuration files of your desired VPN server. First, you will need to download these configuration files from here
Step 8: Now click Choose File and select the configuration file you want
Step 9: Click the OK button after file import is completed. Leave the Import the CA file or edit the .ovpn file manually unchecked.
Step 10: This will create a new connection with the name you gave it in the description. Click on Activate button to connect your Asus router to the desired Surfshark server
Step 11: A blue tick will appear in the Connection Status that indicates a successful connection
So, if you have been wondering how difficult is it to install Surfshark VPN on your router, I suppose the answer to that is: not as hard as you think.
These steps should get Surfshark properly configured on your router in no time. Now you’ll never have to worry about enabling Surfshark every time before streaming Netflix with Surfshark. But in case something goes wrong, you can check out our Surfshark not working guide for common troubleshooting steps.
How to Install Surfshark on DD-WRT Routers
DD-WRT is an open-source firmware that can be installed on many different types of routers.
If your router doesn’t already have a DD-WRT firmware installed, you will have to flash it first. This article explains the flashing process in detail. You must also make sure your router supports DD-WRT firmware, which you will find here.
When you’re done with setting up DD-WRT on your router, follow the steps below to configure Surfshark:
- First, you must set up Surfshark’s DNS servers. Open your DD-WRT router control panel > Setup > Network Address Server Settings (DHCP) and enter these values:
- Static DNS 1 = 252.172.57
- Static DNS 2 = 154.159.92
- Static DNS 2 = 0.0.0 (default)
- Use DNSMasq for DHCP = Checked
- Use DNSMasq for DNS = Checked
- DHCP-Authoritative = Checked
- When these values are entered, as shown above, click Save and Apply Settings
- Select the Service tab and then Under OpenVPN Client, click Enable and enter information as shown below:
- Server IP/Name: Enter the server address of your desired VPN server. You can find the Surfshark server VPN name/address here
- Port: 1194;
- Tunnel Device: TUN;
- Tunnel Protocol: UDP;
- Encryption Cipher: None;
- Hash Algorithm: SHA-512;
- User Pass Authentication: Enable;
- Username: Your Surfshark service username;
- Password: Your Surfshark service password
Note: If there are no username and password fields, enter the other details mentioned above and then skip to step 4.
- Advanced Options = Enable (this will enable additional options)
- TLS Cipher: None;
- LZO Compression: Disabled;
- NAT: Enable;
Leave all other fields not mentioned in this list unchanged.
- If there are username and password fields in this setup screen, navigate to Administration > Commands and enter the following command:
echo "USERNAME PASSWORD" > /tmp/openvpncl/user.conf /usr/bin/killall openvpn /usr/sbin/openvpn --config /tmp/openvpncl/openvpn.conf --route-up /tmp/openvpncl/route-up.sh --down-pre /tmp/openvpncl/route-down.sh --daemon
Note: Replace USERNAME and PASSWORD with the login credentials provided to you by Surfshark, then click Save Startup and return to the VPN tab
- Enter the following commands in Additional Config:
remote-cert-tls server remote-random nobind tun-mtu 1500 tun-mtu-extra 32 mssfix 1450 persist-key persist-tun ping-timer-rem reneg-sec 0 cipher AES-256-GCM auth SHA512 log /tmp/vpn.log
- You will now need to download CA certificates and TLS auth keys in the .ovpn files that you downloaded for Surfshark from here
- Now open the configuration file with a text editor
- Copy the text after the <ca> tag to the CA Cert field. Don’t forget to copy the —-BEGIN CERTIFICATE—– and —–END CERTIFICATE—- lines as well
- Copy the text after <tls-auth> tag to the TLS Auth Key Also, copy the ——BEGIN OpenVPN Static key V1 ——- and ——- END OpenVPN Static Key V1 ——- lines
- Click Save and Apply Settings
- You can check if the VPN setup is successful by clicking Status > OpenVPN and check if it says Connected Success under State.
How to Install Surfshark on Tomato Routers
Tomato is another open-source router firmware but it does not enjoy as wide support on devices as DD-WRT. To make sure your router is compatible with Tomato, visit this article.
If your router does support Tomato, you can install it with the help of this guide.
When you’re done installing Tomato on your router, follow the steps below to complete Surfshark configuration on your router:
- Access your Tomato’s control panel by entering Default Gateway in the browser’s address bar. This is 168.1.1 by default
- Enter your device login credentials when prompted
- Now click on VPN > OpenVPN Client
- Click the Basic tab on the top left and enter the following information:
- Start with WAN: Checked;
- Interface Type: TUN;
- Protocol: UDP or TCP;
- Server Address: Enter the server address you wish to connect to. You can find this information on this page
- Port:1194 if you selected UDP or 1443 for TCP connection;
- Firewall: Automatic;
- Authorization mode: TLS;
- Username/Password Authentication: Checked;
- Username: Your Surfshark service username;
- Password: Your Surfshark service password;
- Username Authen. Only: Unchecked;
- Extra HMAC authorization (tls-auth):Outgoing (1);
- Create NAT on tunnel: Checked
- Now click on Advanced and enter the following information:
- Poll interval: 0;
- Redirect Internet traffic: Checked;
- Accept DNS configuration: Strict;
- Encryption cipher: None;
- Compression: Disabled;
- TLS Renegotiation Time:-1;
- Connection retry:-1;
- Verify server certificate (tls-remote): Unchecked;
- Now in the Custom Configuration, enter the following text:
remote-cert-tls server remote-random nobind tun-mtu 1500 tun-mtu-extra 32 mssfix 1450 persist-key persist-tun ping-timer-rem reneg-sec 0 auth SHA512 cipher AES-256-CBC log /tmp/vpn.log
- Click on the Keys tab and open the .ovpn files that you earlier downloaded from this link. In the Static key, enter the text from <tls-auth> to </tls-auth> block. You must also include —- BEGIN OpenVPN Static key V1—–and —–END OpenVPN Static key V1—– lines as well. In the Certificate Authority, enter the text from <ca> to </ca> block. You must also include —–BEGIN CERTIFICATE—– and —–END CERTIFICATE—– lines
- Press the Save button to apply pages. To create a connection with the Surfshark server, click on Start VPN Client 1, at the top right corner. Check the Status tab to make sure you are connected to Surfshark successfully
You should now be connected to Surfshark via your router.
If you want to consolidate your security further, you can configure DNS addresses to prevent DNS leaks. To do this, click Basic Settings > Network. Now click on WAN Settings, change DNS Server to Manual and input these addresses:
And that’s all there is to it. You can enjoy Surfshark’s servers to access any website/service you want on any device with strong security and no possibility of DNS leaks.
Reasons to Install Surfshark on Router
Here are some of the reasons why you need to set up Surfshark on your router:
- Protection from External Threats: The traditional way of using a VPN is to install it on the device that you want to protect from external threats, keep your privacy safe, and unblock websites that are censored or geo-restricted in your region.
- Connect Surfshark to Multiple Devices: Once you have installed Surfshark on Router, you can connect to multiple devices at the same time. If you only use one device, then the benefits of having a Surfshark VPN on the router won’t apply to you. For that, you can simply download Surfshark on mobile, desktop, tablet, and more.
- Don’t need to Turn ON the VPN every time: You will never have to trouble yourself by switching on and off your VPN app all the time. Setting up a Surfshark account on the router will ensure that you always remain connected to a VPN.
- No Compatibility Issues: What’s more, you can also get past any compatibility issues if you also need a VPN for some device that isn’t directly supported by Surfshark.
In case you find Surfshark to not be the right match for you, then you can always cancel your subscription and get a full refund. You can also check out our NordVPN vs Surfshark comparison to see which one is the best option for routers.
Surfshark is a complete package for users seeking privacy and internet freedom. Setting up Surfshark on Router will help you use it on multiple devices, browse the internet without any fear, watch any streaming service you like, and download torrents risk-free. Speaking of torrenting, here’s what makes Surfshark so great for torrenting. It is also the best free desktop VPN.
All you need to do is just take out a few minutes, keep a cup of freshly brewed coffee handy, and go about changing the settings as shown above. That’s literally all it takes to enjoy unlimited online freedom and privacy with Surfshark.