• Your Location: -
  • Your IP: -
  • ISP: -
  • Status: Exposed

Does WeVPN Work On Tomato / FreshTomato Routers?

You can absolutely use WeVPN on your Tomato router! This blog post continues on from our Asus Merlin router post and tells you how. Because Tomato works on many other router brands you can use it on Asus, Belkin, D-Link, Linksys, and Netgear devices. Tomato is designed for use with Broadcom chipsets, which includes many common routers sold today.

There’s quite a few forks and flavours of the Tomato firmware. Before we get to the instructions, let’s go over the different flavours of Tomato firmware.

Which Tomato Router Firmware Should I Pick?

Tomato by Shibby has been available for many years now. It’s known as a good alternative firmware for many routers running Broadcom chipsets. Recently, Shibby announced that their Tomato project was no longer under development and recommended moving to the FreshTomato firmware.

AdvancedTomato was a firmware that took Shibby’s original one and gave it a new coat of paint. The JQuery+Bootstrap-based GUI looks very slick, and gave Tomato a much-appreciated visual overhaul. However, this firmware is no longer developed. Because of that, I can’t recommend using it.

FreshTomato is the recommended, currently-developed Tomato firmware today. It comes with GUI options that look and feel easy to use, a wide range of router support, and the blessing of the original Tomato project.

Overall: I recommend using FreshTomato as it’s actively developed and has a lot of good theme options. Through the rest of this article, I’ll include screenshots and instructions for the FreshTomato router firmware specifically. However, this setup should be usable with any version of Tomato that bundles v2.4+ of OpenVPN.

Keep in mind that replacing your router’s firmware with a custom one like Tomato is difficult. Even experienced technicians can flash the firmware incorrectly and end up with their router bricked and unusable. If you go ahead with a new third-party router firmware, take a close look at their hardware compatibility page and install guides.

WeVPN Installation Instructions for FreshTomato Router

Tomato doesn’t give you a way to import OpenVPN files. Because of this, you’ll need to download and open the ovpn file from our dashboard in notepad. Let’s dig into the installation instructions.


(1) Open up our dashboard and select the Manual Setup page. You should keep the default protocol and choose the server that you want to use.


(2) After selecting v2.4+, download the config file and open it in notepad or another text editor.

(3) Click Show Credentials to show your OpenVPN username and password.

(4) Keep this username in mind for when we’re configuring the router.

(5) Keep this password in mind as well.


(6) Enter your router’s configuration page, then open the VPN Tunneling -> OpenVPN Client section.

(7) Start off configuring Client 1’s Basic page. Here are the changes you should make:

  • Start with WAN: Enable this checkbox.
  • Server Address/Port: You can find the Server Address in the .ovpn file, look for the remote line. You’ll also find the port to use right next to there.
  • TLS control channel security: Change this to Encrypt Channel (the one without the v2 next to it).
  • Username/Password Authentication: Enable this checkbox.
  • Username: Insert the Username from step (4) here.
  • Password: Insert the Password from step (5) here.

Now let’s move on to the next page.


(8) Configure the Advanced page for Client 1. Here are the changes you should make:

  • Redirect Internet traffic: Change this to All.
  • Accept DNS configuration: Change this to Exclusive.
  • Data ciphers: Replace this text with AES-256-GCM (this speeds up the connection, because by default a slower cipher is negotiated).
  • Compression: Change this to Disabled.
  • Verify Certificate (remote-cert-tls-server): Enable this checkbox.

And that’s all of the settings configured. After that we need to setup the keys and certificates that will let you connect securely, while verifying our server’s identity.


(8) Configure the Keys page for Client 1. Here are the changes you should make:

  • Static Key: Copy the text between the <tls-crypt> and </tls-crypt> tags in the .ovpn file and put it into this textbox.
  • Certificate Authority: Copy the text between the <ca> and </ca> tags in the .ovpn file and put it into this textbox.
  • Client Certificate: Copy the text between the <cert> and </cert> tags in the .ovpn file and put it into this textbox.
  • Client Key: Copy the text between the <key> and </key> tags in the .ovpn file and put it into this textbox.

(9) Click the Save button down the bottom, and the VPN should connect automatically! If it doesn’t, the Start Now button under the Status tab should let you start the VPN.

If you run into problems, you can see the logs from OpenVPN by selecting the Status -> Logs section in the navigation bar on the left. From this page, you can View 25-100 of the last log lines from the router.

How We’re Different

In addition to FreshTomato, we also provide setup guides for the Merlin, OpenWRT, and DD-WRT firmwares. With these guides and many more, WeVPN is the natural choice when selecting a VPN for use with your router, computer, or mobile device.  With native browser addons as well, it’s simple to get started. You can try us out today for a fast, safe, and secure VPN experience.

Protect Your Digital Privacy !

Get one of the fastest and most reliable VPN services

Daniel O.

Along with being head of QA for a large VPN company, Daniel has written sites worth of training materials and has worked in many roles across the IT space (particularly development, testing, and security). Daniel loves communication, writing documentation, and copy-editing.