Configure Tomato Router Firmware for Namecheap VPN OpenVPN

This tutorial will walk you through configuring Namecheap VPN OpenVPN in Tomato firmware and will allow you to establish a permanent VPN tunnel from your router. This guide was prepared and based on a Namecheap OpenVPN installation on a Netgear Nighthawk 7000 router that has been flashed with Tomato OpenVPN firmware.

Before getting started

The following are required to configure Namecheap OpenVPN on Tomato firmware:
  • An Namecheap VPN account (Don't have one? Sign up here)
  • An internet connection
  • Tomato flashed router

IMPORTANT NOTE: Regardless of what model router you have or the version of Tomato firmware you are installing, there is a small chance of bricking your router (i.e., rendering the router completely useless) if the process of putting Tomato on the router does not complete properly. Please thoroughly read and follow the related documentation regarding the updating procedure for your router.

1. Log in to the router control panel by entering the router’s default IP address to the address bar of your preferred browser (if you changed your routerdefault IP address, enter that into your browser instead). While connecting using, the URL may change to

2. You will be redirected to the user interface of the router; select VPN listed under Status Overview on the menu on the left:

3. Click on the OpenVPN Client option and you will land on its Basic tab.


4. A more detailed view of the step-by-step process is as follows. Enter the details as given below:

  • Start with WAN: Click to enable
  • Interface Type: TUN
  • Protocol: UDP or TCP. However, UDP is the fastest and most preferred protocol
  • Server Address/Port: Choose a server from our server list and enter the address in this field (to access the server list, log into the Namecheap VPN Account Panel with your username and password, select the Server List tab to select your preferred server)/1194.
  • Firewall: Automatic
  • Authorization Mode: TLS
  • Username/Password Authentication: Click to enable.
  • Username: username from Namecheap VPN Account Panel
  • Password: Namecheap VPN Password, available from the Namecheap VPN Account Panel
  • Extra HMAC authorization (tls-auth): Disabled
  • Create NAT on tunnel: Click to enable
  • Click on the Save button at the bottom


5. Navigate to the Advanced tab and enter the details as given below.

  • Poll Interval: 0
  • Redirect Internet traffic: Check to enable
  • Accept DNS configuration: Set to disabled
  • Encryption cipher: AES-256-CBC
  • Compression: Adaptive
  • TLS Renegotiation Time: -1
  • Connection retry: 30 seconds
  • Verify server certificate (tls-remote): Leave unchecked
  • Custom Configuration box: Copy and paste the following italicized text into this box:
remote-cert-tls server
keysize 256
  • Click on the Save button


6. Copy and paste the whole content of the text file into the Namecheap VPN Certificate Authority box and click the Save button at the bottom.

Routing Policy and Status

7. Leave the default settings for Routing Policy and Status. Click on the Save buttons given on the bottom of both the tabs.

Connecting your Tomato Router to the VPN

8. Navigate back to the Basic tab and click on the Start VPN Client play button to start connecting Namecheap VPN via the OpenVPN protocol.

9. You can confirm the connection status from the Running prompt displayed next to the title VPN Client.

Disconnecting the VPN

Click on the Stop VPN Client button to disconnect Namecheap VPN via OpenVPN protocol on a Tomato router:

If you have any questions or problems configuring your Tomato router, contact our Support Team.
14469 times

Need help? We're always here for you.