How do I install Hotspot Shield on a DD-WRT router?

Step-by-step guide

  1. Go to https://www.hotspotshield.com/ and click on Account. Sign in if you’re asked.
    HSS_Front_Page.png


  2. Go to https://account.pango.co/app/router
    Select location and pick the virtual location that the router will use. Now click on “Download file.”  The configuration file (config.ovpn) will be downloaded to your computer. (Note where the file will be located, as you will need this later).
    Link_Router_Beta.png
  3. In the separate browser window, sign in to the Control Panel of your router.  For most routers, you’ll want to  enter 192.168.1.1 in the address bar or refer to your router documentation for your router’s address.
    Note:  The user name and password for your router are different from the credentials you obtained from the Hotspot Shield account page.
  4. Navigate to the Setup tab and disable IPV6.
    Router_IPv6.png
  5. Click Save and then click Apply Settings.
  6. Select the Services tab then the VPN tab
    Router_Services_VPN_tab.png

     

  7. Enable OpenVPN Client and make sure that OpenVPN Server/Daemon is disabled.
    OpenVPN_Client.png

     

    OpenVPN Client settings menu will appear after it is enabled and you will perform the following operations:

  8. Remember the configuration file (config.ovpn)? Open it in a text editor. 
  9. Copy server name (after remote …… .us) from the config.ovpn file and paste it into the Server IP/Name field
    Server_name.png
    Enable_OpenVPN_client.png

  10. Enter the following information into the router:
    1. Enter 8041 into the Port field
    2. Tunnel Device = TUN
    3. Tunnel Protocol = UDP
    4. Encryption Cipher = AES-256 CBC
    5. Hash Algorithm = SHA256
    6. Enable User Pass Authentication
      Additional_info_for_router.png
  11. Go back to the Router Account page (https://account.pango.co/app/router#) and copy the username and password. 
    User_name_and_password.png
  12. Then paste it into the username field in the router.
  13. Enable Advanced Options and make sure that:
    1. TLS Cipher = None;
    2. LZO Compression = No
    3. NAT = enabled;
    4. Firewall Protection = enabled;
    5. IP Address and Subnet Mask are blank;
    6. Tunnel MTU settings = 1500
    7. Tunnel UDP Fragment is blank;
      Advanced_options.png
  14. In the Additional Config field, copy/paste the following (make sure you change server_name into the name of your actual server):
    verify-x509-name server_name name
    resolv-retry infinite
    remote-random
    nobind
    tun-mtu 1500
    tun-mtu-extra 32
    mssfix 1450
    persist-key
    persist-tun
    ping 15
    ping-restart 0
    reneg-sec 0
    remote-cert-tls server
    comp-noadapt

  15. Open configuration file, copy the section between <ca> </ca> tags (do not copy <ca> tags) and paste into CA Cert field.
    cert1.png
  16. Copy the section between <cert> </cert> tags from config file into the Public Client Cert field
    cert_2.png
  17. Copy the section between <key> </key> tags from config file into the Private Client Key field
    cert_3.png
  18. Click Save and then Click Apply Settings
  19. To verify connection, go to Status -> OpenVPN tab and make sure that client is listed as Connected Success under State.Connected_Success.png

Note: To double-verify if your VPN connection is established, go to https://whatismyipaddress.com or http://www.findipinfo.com/ and check if your IP address is different from your default IP that’s provided by your ISP

Disconnecting from Virtual Location

When you want to disconnect from the VPN service, you can log in to the Control Panel of your router and click the Deactivate button in the VPN Server list.

 

 

Troubleshooting

When you enable the VPN but for some reason VPN cannot connect to the server, there will be no Internet in your network. Some of the reasons the VPN might not be able to establish a successful connection are:

  • Your ISP does not allow VPN to be enabled (leased equipment, firewall, etc.)
  • Your Premium subscription has ended
  • Our server is temporarily unavailable for a particular virtual location

Please, contact our customer support team to help you troubleshoot connection issues.

 

 

Restore your previous settings

If you need to turn off the VPN, go back to the Control Panel on the router and select the Services tab and then the VPN tab. Disable the VPN client.

 Disable_client_VPN.png