Skip to main content
All CollectionsPureVPNRouterOPNsense
How to set up PureVPN on OPNsense router
How to set up PureVPN on OPNsense router

Configuring a PureVPN tunnel on your router is a great way to ensure the safety and security of all the devices in your home.

Updated over a month ago

Learn how to set up OpenVPN on your OPNsense router with this step-by-step guide. Follow our easy-to-understand instructions and improve your network security today!

Find your VPN credentials for manual configuration

To find your VPN credentials log into the PureVPN Member Area. Click 👉 here to visit Member Area.

  • Login to the Member Area using your PureVPN registered email address and password.

  • On Subscriptions tab scroll down to be able to view your VPN credentials.

  • You will be able to see and copy your VPN credentials.

  • Note down your PureVPN username and click the Eye icon to make your password visible and use it in the manual configuration.


How to set up OpenVPN on OPNsense router

  • Login to OPNsense panel using IP assigned.

  • In your router’s web UI, navigate to System > Trust > Authorities and enter the CA2.cert into Certificate Data. Click here to get the files.

  • Choose the VPN option from the panel OpenVPN and click on Client.

  • Choose an OpenVPN server from our Server status page and make note of its hostname (this guide uses a German server as an example-., de2-auto-udp.ptoserver.com).

  • Navigate to VPN > OpenVPN > Clients, click on the +button and enter the following configuration as follow:

    1. Disabled - Unchecked

    2. Description - Give it any name, i.e., PureVPN Germany

    3. Server Mode - Peer to Peer (SSL/TLS)

    4. Protocol - UDP or TCP

    5. Device mode - tun

    6. Interface - WAN

    7. Remote server – Purevpn’s server hostname, i.e., de2-auto-udp.ptoserver.com

    8. Port - 1194 (or 53, 80, 443, 2050 for UDP and 80, 443, 1443 for TCP. All ports are equally secure).

  • Put Username - Your PureVPN account ID (purevpn0sXXXX & VPN password) which can be find from member area.

  • TLS Authentication - check the Enable authentication of TLS packets option then copy and paste the contents of our wdc.key file.

  • Peer Certificate Authority – CA2.

  • Client Certificate - None (Username and Password required).

  • Encryption algorithm - (AES-256-GCM & AES-256-CBC are also supported).

  • Auth Digest Algorithm - SHA1 (160bit).

  • Compression - Legacy - Disabled LZO algorithm (–comp-lzo no).

  • Hit Save.

  • Go to Connection Status to check your VPN status.


Did this answer your question?