IPVanish OpenVPN Tomato Firmware FlashRouter Setup

1. Getting started:

  • If you are following this guide it means you have no problems connecting to your FlashRouter network and accessing your FlashRouter settings. 
  • If you are having trouble accessing your router settings then you can always follow our guide on how to access your router settings or if needed how to reset your router to default Tomato firmware settings before proceeding with your IPVanish client connection setup. 
  • Log into the IPVanish website to make sure your account is active and your username and password are correct. If you are unable to login to their website then you have the incorrect information for the setup below.

2. Entering IPVanish settings:

In your Tomato FlashRouter settings click on the VPN Tunneling > OpenVPN Client section. 

OpenVPN Client > Client 1 > Basic

Start with WAN

Check this box if you want your VPN connection to startup automatically anytime the router connects to the Internet.

Interface Type




Server Address/Port

You can find a full list of IPVanish servers at this link.

nyc-a01.ipvanish.com is one of the IPVanish servers for New York
443 is your IPVanish port

If you wish to change IPVanish connection location, this is the only field you need to update.



Authorization Mode


Username/Password Authentication

Check Username/Password Authentication and enter the Email (or username) and password that you use to login to the IPVanish website.


Extra HMAC authorization (tls-auth)


Create NAT on tunnel

Check this box.

Click Save.

OpenVPN Client > Client 1 > Advanced

Poll Interval


Redirect Internet Traffic

Check this box.

Ignore Redirect Gateway (route-nopull)

Do not check this box unless you are using the advanced VPN Routing Policy feature.

Accept DNS configruation


Encryption cipher




TLS Renegotiation Time


Connection Retry


Verify server certificate (tls-remote)


Custom Configuration

 Copy & paste the following lines into the empty space:

verb 3

auth SHA256
keysize 256
tls-cipher DHE-RSA-AES256-SHA

Click Save. 

OpenVPN Client > Client 1 > Keys

Certificate Authority

Copy and Paste all contents of the ca.crt found at this link, starting and ending with:

Click Save.

Hint: The IPVanish Certificate is the same for all IPVanish server locations. If you ever wish to change your VPN server location you DO NOT need to update this section.

 Click the Start Now button to start up the IPVanish connection. 

3. Verifying a successful VPN connection:

How can I tell if my VPN connection is active?

  1. Instead of seeing the Start Now button, you should now see the Stop Now button in your OpenVPN Client area. Click Stop Now to terminate the active VPN connection at any time. 
  2. Visit http://www.whatismyipaddress.com to verify your new IP address and virtual location. 
    Note: In some cases you may notice that the location is not showing the same location as the server you have input in your router settings; this is because geo tracking tools are often tricked by VPN connections. As long as you see an IP address that is not the same as your normal Internet IP address then you are indeed connected to IPVanish.
  3. Navigate to the Advanced > Routing section in your Tomato firmware settings. If you are connected to a VPN then you will notice a tun11 listed in your Routing Table interfaces (tun12 if you are using OpenVPN Client 2). 

4. Additional Router VPN Features

How can I setup 2 IPVanish client connections on my Tomato FlashRouter?

  1. In the VPN Tunneling > OpenVPN Client section you will see a Client 1 and Client 2 section. It is not possible to run both client VPN connections at the same time, but you can setup both clients and then Start/Stop Now whichever client you like, depending on which VPN server location you want to use. 
  2. Copy all settings used for IPVanish setup as indicated in Client 1 setup above, except this time enter a different server address in the Client 2 > Basic section and different Static Key and Certificate Authority in the Client 2 > Keys section. 
  3. Make sure you do not check the Start with WAN checkbox on both VPN Clients. If you try to connect to both Client 1 and Client 2 at the same time you will likely lose Internet connectivity entirely. 

5. Backing up your settings:

  1. It is always a good idea to save a backup of your working VPN settings after completing this setup, so that in the result of a reset or faulty settings change you can load your working settings in a few simple clicks.
  2. Go to the Administration > Configuration page and name the file "FlashRouter Backup" for easy searching should you ever need it. Click the Backup button. The file will be saved to your computer.
  3. To load your backup go to the Administration > Configuration, and under the Restore Configuration section, click Choose File, select your backup file, then click Restore and give the router a minute or two to load your settings. 

6. Troubleshooting:

  1. If you have any issues with your connection, you can review our IPVanish Troubleshooting page.



Have more questions? Submit a request


Please sign in to leave a comment.
Powered by Zendesk