What does a VPN on a router do?

Setting up a VPN client on your router routes all traffic from every device on your network through the VPN, without installing a VPN app on each device. Smart TVs, game consoles, IoT devices, and phones all get VPN protection automatically. The router handles the VPN connection and acts as a gateway for all traffic.

Which routers support VPN client mode?

ASUS routers running the stock firmware or AsusWRT-Merlin support OpenVPN and WireGuard client. DD-WRT, OpenWrt, and Tomato firmware support VPN clients on compatible hardware. FRITZ!Box has built-in WireGuard and IPSec. Most ISP gateways and budget routers do not support VPN client mode.

Will a VPN slow down my router?

Yes, VPN encryption requires CPU processing. Older or budget routers with weak CPUs may struggle to handle 100+ Mbps VPN throughput. Modern routers with AES hardware acceleration (ASUS RT-AX88U, NETGEAR Nighthawk) can sustain 200-400 Mbps on OpenVPN. WireGuard is much less demanding than OpenVPN and reaches higher throughput on the same hardware.

How to Set Up a VPN on Your Router

A VPN client on your router protects every device on your network without installing VPN apps individually. Smart TVs, game consoles, IoT devices, and guests all benefit automatically. This guide covers the main approaches by router type.

Router VPN Client Compatibility

Router / Firmware	OpenVPN	WireGuard	Notes
ASUS (stock firmware)	Yes	Yes (newer models)	Best stock support for VPN client
ASUS + Merlin firmware	Yes	Yes	Most feature-complete VPN client for home use
NETGEAR Nighthawk	Yes (some models)	No stock	OpenVPN client in Advanced → VPN Service
TP-Link (stock)	No (Archer, Deco)	No	TP-Link routers are not recommended for router-level VPN
DD-WRT	Yes	Yes (newer builds)	Open-source firmware for compatible hardware
OpenWrt	Yes	Yes	Most flexible, requires technical setup
FRITZ!Box	No	Yes (built-in)	WireGuard server only, not client to external VPN
GL.iNet	Yes	Yes	Excellent travel router VPN client, GUI-based
MikroTik	Yes	Yes	Full VPN client support via RouterOS

ASUS Router — OpenVPN Client Setup

ASUS routers have the most user-friendly VPN client implementation in stock consumer router firmware:

Log in at 192.168.50.1
Go to VPN → VPN Client
Click Add profile
Select OpenVPN
Download the .ovpn config file from your VPN provider (Mullvad, NordVPN, ExpressVPN, ProtonVPN, etc.)
Upload the .ovpn file, enter your VPN username and password
Click OK, then activate the VPN
The status indicator turns green when connected

Split tunneling on ASUS: You can route specific devices through the VPN while others use the normal connection. In VPN Client settings → enable Redirect Internet Traffic → select "Routing policy" → add specific device IPs to route through VPN vs direct.

ASUS Router — WireGuard Client

Newer ASUS routers (RT-AX88U Pro, GT-AX6000, and 2022+ models) support WireGuard client natively:

VPN → VPN Client → Add profile → WireGuard
Paste the WireGuard .conf file contents from your VPN provider
Activate the profile

WireGuard is significantly faster than OpenVPN on the same hardware — expect 2–3x higher throughput and lower CPU usage.

GL.iNet Travel Routers — Easiest VPN Client

GL.iNet routers (at 192.168.8.1) have a dedicated VPN section in the admin panel with pre-configured templates for major VPN providers. They are particularly popular for travel use (connecting through a home VPN) and for routing all traffic through a commercial VPN without complex configuration.

Log in at 192.168.8.1
Go to VPN → OpenVPN Client or WireGuard Client
Upload your VPN provider's config file or use the pre-built templates for Mullvad, AzireVPN, etc.
Click Connect

DD-WRT — OpenVPN Client

DD-WRT firmware runs on many routers that do not support VPN in stock firmware. Check ddwrt.com for your router's compatibility:

After flashing DD-WRT, go to Services → VPN
Enable OpenVPN Client
Paste your VPN provider's CA certificate, client certificate, and client key
Set the server IP/hostname and port
Apply settings

OpenWrt — WireGuard Client

# Install WireGuard on OpenWrt
opkg update
opkg install wireguard-tools kmod-wireguard luci-proto-wireguard

# Or configure via LuCI web interface:
# Network > Interfaces > Add new interface
# Protocol: WireGuard VPN
# Paste your WireGuard config
# Set firewall zone to wan
# Save & Apply

Choosing a VPN Provider for Router Use

Provider	Router Support	WireGuard	Privacy
Mullvad	Excellent — downloadable per-device configs	Yes	No-log, anonymous accounts
ProtonVPN	Good — OpenVPN and WireGuard configs available	Yes	Strong, Swiss law
IVPN	Good — WireGuard and OpenVPN	Yes	Strong, transparent
NordVPN	Good — NordLynx (WireGuard-based) configs	Yes (NordLynx)	Claims no-log, audited
ExpressVPN	Good — has its own router firmware (Aircove)	Lightway protocol	Audited

Performance Expectations

Router CPU	OpenVPN Max	WireGuard Max
Budget (MT7621, 880 MHz)	40–80 Mbps	150–300 Mbps
Mid-range (IPQ8064, 1.4 GHz)	100–200 Mbps	300–500 Mbps
High-end (IPQ8074, 2 GHz)	200–400 Mbps	500–900 Mbps

WireGuard throughput is 2–4x higher than OpenVPN on the same hardware due to its simpler, kernel-level implementation. Choose WireGuard when your router supports it.