VyprVPN OpenVPN Setup for Tomato

Using Shibby Tomato

Determine if your router is compatible with Tomato firmware. We used Shibby’s Tomato build for this tutorial; however, you may be able to apply these instructions to other builds of Tomato as well.

Official Shibby Tomato Website: http://tomato.groov.pl/

Please note: We offer limited support for this configuration due to many variables that can cause connection or performance issues. This firmware is open-source with many versions and a growing list of supported hardware. We cannot guarantee VyprVPN's performance or functionality on your router.

Bold items
are things you will click or type

1. Flash your router with the appropriate Tomato firmware build. *Take care in this process. Golden Frog cannot be held liable for any damage to your router, as flashing third-party firmware can "brick" the device, making it unusable.*

2. Once the router is running Tomato, open your browser and navigate to the firmware interface by entering in the address bar. Press Enter.

You may or may not be prompted to log in with credentials, depending on if you have already set an Admin username or password in the firmware.

3. On the left-hand side of the page, click VPN Tunneling, then click the OpenVPN Client sub-option.

4. Configure the following settings in the Basic tab:

  • Check the box for Start with WAN.
  • Set Interface Type to: TUN
  • Set Protocol to: UDP
  • For the Server Address/Port section, you will specify your desired VPN endpoint. You may select a server name to enter in this field from the list below.
VyprVPN Server Hostname
US - Los Angeles, CA us1.vyprvpn.com
US - Washington, DC us2.vyprvpn.com
US - Austin, TX us3.vyprvpn.com
US - Miami, FL us4.vyprvpn.com
US - New York City, NY us5.vyprvpn.com
US - Chicago, IL us6.vyprvpn.com
US - San Francisco, CA us7.vyprvpn.com
US - Seattle, WA us8.vyprvpn.com
Canada - Toronto ca1.vyprvpn.com
Netherlands - Amsterdam eu1.vyprvpn.com
Denmark - Copenhagen dk1.vyprvpn.com
Sweden - Stockholm se1.vyprvpn.com
Hong Kong - Hong Kong hk1.vyprvpn.com
United Kingdom - London uk1.vyprvpn.com
France - Paris fr1.vyprvpn.com
Germany - Frankfurt de1.vyprvpn.com
Switzerland - Zurich ch1.vyprvpn.com
Russia - Moscow ru1.vyprvpn.com
Luxembourg - Luxembourg City lu1.vyprvpn.com
Romania - Bucharest ro1.vyprvpn.com
Singapore - Singapore sg1.vyprvpn.com
Ireland - Dublin ie1.vyprvpn.com
Malaysia - Kuala Lumpur my1.vyprvpn.com
Italy - Rome it1.vyprvpn.com
Spain - Madrid es1.vyprvpn.com
Japan - Tokyo jp1.vyprvpn.com
South Korea - Seoul kr1.vyprvpn.com
Norway - Oslo no1.vyprvpn.com
Turkey - Istanbul tr1.vyprvpn.com
Finland - Helsinki fi1.vyprvpn.com
Poland - Warsaw pl1.vyprvpn.com
Portugal - Lisbon pt1.vyprvpn.com
Czech Republic - Prague cz1.vyprvpn.com
Austria - Vienna at1.vyprvpn.com
Belgium - Brussels be1.vyprvpn.com
Lithuania - Vilnius lt1.vyprvpn.com
Bulgaria - Sofia bg1.vyprvpn.com
Liechtenstein - Schaan li1.vyprvpn.com
Australia - Sydney au1.vyprvpn.com
Australia - Melbourne au2.vyprvpn.com
Australia - Perth au3.vyprvpn.com
Indonesia - Jakarta id1.vyprvpn.com
New Zealand - Auckland nz1.vyprvpn.com
Vietnam - Hanoi vn1.vyprvpn.com
Thailand - Bangkok th1.vyprvpn.com
Iceland - Reykjavík is1.vyprvpn.com
Philippines - Manila ph1.vyprvpn.com
Brazil - São Paulo br1.vyprvpn.com
Mexico - Mexico City mx1.vyprvpn.com
Argentina - Buenos Aires ar1.vyprvpn.com
Colombia - Bogotá co1.vyprvpn.com
Costa Rica - San José cr1.vyprvpn.com
Panama - Panama City pa1.vyprvpn.com
Taiwan - Taipei tw1.vyprvpn.com
Bahrain - Manama bh1.vyprvpn.com
Saudi Arabia - Riyadh sa1.vyprvpn.com
Qatar - Doha qa1.vyprvpn.com
India - Mumbai in1.vyprvpn.com
UAE - Dubai ae1.vyprvpn.com
Israel - Tel Aviv il1.vyprvpn.com
Liechtenstein - Schaan li1.vyprvpn.com
Bulgaria - Sofia bg1.vyprvpn.com
Slovakia - Bratislava sk1.vyprvpn.com
Ukraine - Kiev ua1.vyprvpn.com
Slovenia - Ljubljana si1.vyprvpn.com
Latvia - Riga lv1.vyprvpn.com
El Salvador - San Salvador sv1.vyprvpn.com
Uruguay - Montevideo uy1.vyprvpn.com
Macao - Macao mo1.vyprvpn.com
Marshall Islands - Majuro mh1.vyprvpn.com
Maldives - Malé mv1.vyprvpn.com
Algeria - Algiers dz1.vyprvpn.com
Egypt - Cairo eg1.vyprvpn.com
Greece - Athens gr1.vyprvpn.com
Pakistan - Karachi pk1.vyprvpn.com


  • Set Port to: 443
  • Set Firewall to: Automatic
  • Set Authorization Mode to: TLS
  • Check the option for Username/Password Authentication.
  • Enter your Golden Frog email address and password in the appropriate fields.

Username Authen. Only should be unchecked.

Extra HMAC authorization should be disabled.

Create NAT on tunnel should be checked.


5. Configure the following settings in the Advanced tab:

  • Set Poll Interval to: 0
  • Redirect Internet traffic should be unchecked.
  • Ignore Redirect Gateway should be unchecked.
  • Set Accept DNS Configuration to Strict
  • Set Encryption Cipher to: AES-256-CBC
  • Set Compression to: Enabled
  • Set TLS Renegotiation Time to: -1
  • Set Connection Retry to: 30
  • Verify Server Certificate should be unchecked.
  • Copy and paste the following text in the Custom Configuration box:
resolv-retry infinite
keepalive 10 60
verify-x509-name us4.vyprvpn.com name
verb 3
auth SHA256

Note: For the “verify-x509-name" line, change the example server hostname of us4.vyprvpn.com to the desired server location hostname. It needs to match what you entered in the Server Address/Port field for the client options.


  1. Configure the following settings in the Keys tab:
  • In the Certificate Authority box, paste the text from this file: CA Cert
  • Click the Save button on the bottom right-hand side of the page.


  • Once the settings are saved, press the Start Now button to initiate the connection. It may take several minutes for the connection to establish.


  1. Visit the link below to verify you are connected.


  1. Enjoy VyprVPN in your Tomato router!

    If you have any questions contact Golden Frog Support. We're available 24/7/365.


Last reviewed/updated March 2020

Was this article helpful?
0 out of 0 found this helpful
Have more questions? Submit a request