It’s no wonder someone asked this question because according to Google, there are more than 7.19 Billion active mobile devices around the world.
With such penetration, problems and vulnerabilities are bound to come. And that is why a VPN is the need of the hour for every internet user. users need to save their devices from hack attacks and data theft.

Running a VPN on your router offers the benefit of easily routing traffic from all devices connected to your LAN through the VPN. This guide shows a DD-WRT user how to configure the OpenVPN Client on a DD-WRT router to use any VPN provider to encrypt and anonymize all Internet traffic on their LAN.

In this guide, I will be using Vrois VPN, one of my favorite VPN provider, you may choose to use any provider you like as long as they support Open VPN.

Materials
* Router with DD-WRT revision greater than 24710 installed (recommend the NETGEAR R7000)

* A PC

* Subscription to a VPN Provider.

Step 1: Select a VPN Server


Your VPN provider should have a page where you can get server hostnames and other credentials you would need to complete the rest of this process.

But in this case I would be using credentials from my VPN Provider.

1. In a browser, I will need to access my VPN's provider server page

2. Note the full host name of the VPN server you would like to use.

Step 2: Modify the DD-WRT Basic DNS Settings


By default, DD-WRT may use your ISP's DNS servers using DHCP. For
privacy reasons, we'll instead configure DD-WRT to explicitly use alternate DNS servers. The below servers are provided as an example, you can use any Public DNS service you would prefer, such as Google DNS (8.8.8.8 and 8.8.4.4), OpenDNS (208.67.222.222 and 208.67.220.220), Level 3 (209.244.0.3 and 209.244.0.4), or you can use a combination to fill in the 3 Static DNS fields.

1. In the DD-WRT Administrative Interface, navigate to Setup > Basic Setup.

2. Under Network Address Server Settings (DHCP), set:
Static DNS 1 = 4.2.2.1

Static DNS 2 = 4.2.2.2

Static DNS 3 = 4.2.2.3

Use DNSMasq for DHCP = Checked

Use DNSMasq for DNS = Checked

DHCP-Authoritative = Checked

3. Save and Apply Settings.

Step 4: Disable IPv6



1. Navigate to Setup > IPV6.

2. Make sure IPv6 is set to Disable, thenSave & Apply Settings.

Step 5: Enable Local DNS

1. Navigate to Services > Services.

2. We'll remove the ISP's DNS suffix from LAN clients. Under DHCP Server, set Used Domain = LAN & WLAN.

3. Under DNSMasq, make sure DNSMasq, Local DNS, & No DNS Rebind are all set to Enable.

4. Save and Apply Settings.

Step 6: Set the OpenVPN Client Parameters


1. Navigate to Services > VPN.

2. Under OpenVPN Client, set Start OpenVPN Client = Enable. Other options will appear.

3. Set Advanced Options to Enable, More options will appear. Set the following:

* Server IP/Name = us-ca.vrois.com

If I prefer to use a specific location, I can find the full list of locations on my VPN's Provider server page

* Port = 1194

* Tunnel Device = TUN

* Tunnel Protocol = UDP

* Encryption Cipher = AES­-128-­CBC

* Hash Algorithm = SHA1

* User Pass Authentication = Enable

* Username, Password = Your VPN's account username & password.

* TLS Cipher = None

* LZO Compression = Yes

* NAT = Enable

NB: The above configuration does varies based on VPN providers configuration, so you need to make sure you have the correct parameters from your provider to have your router configured properly.

Step 7: Set the OpenVPN Additional Config Settings

Enter this for Additional Config:

persist-key

persist-tun

tls-client

remote-cert-tls server

Step 8: Set the OpenVPN CA Cert



1. Open the CA Certificate file you got from your VPN provider

2. Highlight the full contents of the cert.txt file by pressing Ctrl+A then copy with Ctrl+C

3. In DD-WRT, Paste, (Ctrl+P) the contents in the CA Cert field. Be sure the entire text gets pasted in, including “—–BEGIN CERTIFICATE—–” and “—–END CERTIFICATE—–“.

4. Save and Apply Settings

Step 9: Verify the VPN is Working


1. Navigate to Status > OpenVPN.

2. Under State, you should see the message "Client: CONNECTED SUCCESS". If not, check your configuration for typos.