ASUSConsumer RoutersDevicesHow Tos

Configure VPN for an ASUS Router

By November 9, 2022November 21st, 2022No Comments

About ASUS VPN Routers

ASUS routers are a popular and affordable choice for home office users looking for an all-in-one network and security solution.

As well as impressive WiFi capabilities, many ASUS routers also feature support for both IPsec and WireGuard® VPN - making it easy to gain secure remote access to your network when out and about.

On this page, we take you through the key VPN specification for one of the most popular ASUS devices of the moment - the RT-AX88U - as well as all you need to know about setting up an IPsec or WireGuard® VPN server on your ASUS device to connect on Mac, iPhone or iPad.

Menu

Technical Specification

Model: RT-AX88U

Recommended for: Home Office / Personal Use

Supported VPN Protocols: IPsec, WireGuard®

Max number of VPN users (IPsec): 8

Built in WiFi: Yes

Key Features: WiFi 6, up to 6000 Mbit/s WiFi speeds, 1.8 GHz quad-core processor, Amazon Alexa compatible, AiProtection Pro license from Trend Micro™ included

Device Status: Active

ASUS RT-AX88U router

Which ASUS devices support WireGuard® VPN?

Looking to configure a WireGuard® VPN connection for your ASUS device? WireGuard® is available for devices running ASUSWRT 2022 and newer:

  • ZenWiFi XT9
  • ZenWiFi AX (XT8)
  • GT-AXE11000
  • RT-AX88U
  • RT-AX86U
  • RT-AX86S
  • RT-AX86U Pro
  • RT-AXE7800
  • GT6
  • ZenWiFi XD6
  • XT12

Don't see your device in the list? No problem. You can still get remote access on Mac, iPhone & iPad using IPsec VPN.

Requirements

In order to reach your ASUS device remotely, you will need a fixed public IP address or alternatively a DynDNS host name (1). Find out more in this guide.

How to Configure IPsec VPN for an ASUS Router

Configuration information

Throughout this guide, certain information is referenced which you will need later to configure your new IPsec VPN connection in the VPN client. To help you identify this information, it is labelled as follows:

  1. Public WAN IP address
    or DDNS Host name (see above)
  2. Pre-shared Key
  3. Username
  4. Password

Step One: Activate IPsec VPN

  • Open the web UI of your ASUS router and go to Advanced Settings > VPN > VPN Server
  • Click the slider to activate IPsec VPN
Activate IPsec VPN for your ASUS router

Activate IPsec VPN for your ASUS router

Step Two: Configure IPsec VPN

  • Under General settings, go to Server IP Address and make a note of the IP address shown (1) - you will need this later to configure your VPN in the VPN client. If you don't have a public IP address assigned from your ISP, you'll need to set up DDNS instead.
  • For Pre-shared key, enter a secure connection password (2). This will be used to access the connection in the VPN client
Configure a Pre-Shared Key for your connection

Configure a Pre-Shared Key for your VPN connection

Step Three: Set up a VPN User

  • Scroll down to VPN Client and click the + to add a new VPN user
    Add a new VPN user

    Add a new VPN user

  • Enter a Username (3) and Password (4) and select V1 & V2 from the dropdown
  • Click Apply all settings to save the new configuration

    Set up your new user profile with a username and password

Connect to your new IPsec VPN Server

In order to connect to the new IPsec VPN and get secure remote access to your ASUS device, you will need a VPN client.

VPN Tracker supports IPsec VPN connections on Mac, iPhone and iPad!

Follow these steps to configure a connection:

  1. Open VPN Tracker, create a new connection and select ASUS > IPsec from the list
  2. Give your connection a name
  3. By VPN Gateway > Address, enter the public IP address or host name (1) of your ASUS router
  4. Topology: Here you can specify the remote network range you want to connect to over the VPN. If you'd prefer to tunnel all traffic through the VPN, select Host to Everywhere in the dropdown. Note that choosing this option could lead to slower performance, depending on your connection
  5. Under Authentication enter your Pre-shared key (2)
  6. For User login details (XAUTH) enter the Username (3) and Password (4) you configured in the previous step
  7. Click Done to save your connection in your account using secure end-to-end encryption

You can now connect to your ASUS router via IPsec VPN on Mac, iPhone or iPad. Try it here!

Configure IPsec VPN for an ASUS router in VPN Tracker

How to Configure WireGuard® VPN for an ASUS Router

Step One: Activate WireGuard® VPN

  • Open the web UI of your ASUS router and go to Advanced Settings > VPN > VPN Server
  • Click the slider to activate WireGuard VPN

Activate WireGuard VPN on your ASUS device

Step Two: Enable DNS (optional)

You can also choose to allow DNS for the connection. When enabled, your router's DNS settings will be exported with your WireGuard® configuration file for the VPN client. This step is optional and not required to gain remote access to your device.

Please refer to ASUS support for more information on configuring DNS for your router.

  • Under VPN Details, click the dropdown to switch to Advanced Settings
  • Click the slider to Allow DNS

Optional: Enable DNS for the connection

Step Three: Set up a VPN User

  • Switch back to the General settings
  • Go to VPN Client and click the + to add a new VPN user
  • Enter a Username in the popup window (e.g. testuser1)

Enter a Username for the new VPN user

Optional: Configure split tunneling

Within the user configuration window, you can also choose to set up split tunneling for your connection. This gives you the option to specify a remote network range (e.g. the LAN network)  to be used with the new VPN tunnel.

  • Click to expand the dropdown More Settings for Site to Site Usage
  • In the field Allowed IPs (Client), enter the remote network range to be used with the VPN, e.g. 192.168.10.0/24
  • Click Apply and Enable to save your changes

Optional: Enter a remote network range to use for split tunneling

Note: If you don't configure this option, all traffic is tunneled via the VPN by default which could result in slower VPN connection speeds, depending on your internet performance.

Step Four: Generate your configuration file

  • Once you've saved your new user profile, it will appear in the list under VPN Client
  • Click the (...) icon to access your new WireGuard® VPN configuration
  • Choose between:
    • A QR code: Scan this with your iPhone or iPad in the next step)
    • A configuration file: Switch to the Export tab and click Export to download

      Export a WireGuard® configuration file to use in the VPN client

Connect to your new WireGuard® VPN Server

In order to connect to the new WireGuard® VPN server and get secure remote access to your ASUS device, you will need a VPN client.

VPN Tracker supports WireGuard® VPN connections on Mac, iPhone and iPad!

Follow these steps to configure a connection:

  1. Open VPN Tracker, create a new connection and select ASUS > WireGuard® from the list
  2. Scan your QR code with your iPhone or iPad or upload your WireGuard® configuration file
  3. Give the connection a name and save your connection in your account using secure end-to-end encryption

You can now connect to your ASUS RT-AX88U via WireGuard® VPN on Mac, iPhone or iPad. Try it here!

0 0 votes
Article Rating
Subscribe
Notify of
guest
0 Comments
Inline Feedback
View all comments
Privacy-Settings / Datenschutz-Einstellungen
0
Feedback or improvements? Let us know!x
()
x