How to configure OpenVPN for Tomato Routers


Need a VPN for your router?

Get ExpressVPN Now

To set up ExpressVPN on your Tomato router, you will first need to download the OpenVPN configuration files. Follow these instructions to configure your router with OpenVPN.

Jump to…

Download the VPN configuration files
Configure your router
Connect to the VPN server location

Download the VPN configuration files

Open the Welcome Email you received when you signed up for ExpressVPN. Click the link in the email.

open the welcome email

If you can’t find the link, log in to your account here.

log in to

Once you’ve clicked the link in the welcome email or logged in to the website, click on Set Up ExpressVPN on the Active Subscriptions page. This will take you to the Downloads page.


On your downloads page, select Manual Configuration for OpenVPN and then download and save the .ovpn file(s) or locations (e.g. Los Angeles, New York, etc.) that you wish to connect to.


Back to top

Configure your router

On your standard web browser, go to your router’s settings page or control panel (Default address is, unless changed)

On your router’s control panel, click on the VPN Tunneling tab, and then select “OpenVPN Client”.

tomato openvpn port 1195

Follow the settings for each of the tabs based on the screenshots below.


In the Basic tab, copy the settings below.

openvpn basic tab config

Note: You can find your server address and port in the .ovpn config file you downloaded earlier. Open the .ovpn config file using any text editor. Copy any of the “remote” server cluster names listed in the config file, and paste it into the Server Address/Port field of the OpenVPN basic control panel. Do the same for the port.

copy the server address from the .ovpn config file


In the Advanced tab, copy the settings from the screenshot into your control panel.

Copy and paste the following text into the Custom Configuration field, then click Save:

tun-mtu 1500
fragment 1300
mssfix 1450
keysize 256
auth SHA512
sndbuf 524288
rcvbuf 524288



In the Keys tab, copy and paste the text from the .ovpn configuration file into the correct fields.

openvpn keys tab

Copy-paste the text in between the <tls-auth> and </tls-auth> block into the Static Key field. See sample image below:
tls auth key sample

Copy-paste the text in between the <ca> and </ca> block into the “Certificate Authority field. See sample image below:
ca crt key sample

Copy-paste the text in between the <cert> and </cert> block into the Client Certificate field. See sample image below:
client cert sample

Copy-paste the text in between the <key> and </key> block into the Client Key field. See sample image below:

client key sample

Once done, just click on Save.

Back to top

Connect to a VPN server location

To connect, click on Start Now and wait for around a minute or two for the connection to get fully established.

Click on the “Status” tab to check if you’re now connected.

openvpn status

Was this article helpful to you?22 0 Undo

Not an ExpressVPN user yet? Sign up today so you can start using our apps!

Install ExpressVPN on all your devices!

windows apple android ios linux chrome ebooks phones consoles router nas share