Tomato Setup

1. We recommend using one of the preconfigured IPVanish routers sold through our
partner Flashrouters. We have a number of routers available at multiple price
points. If you wish to configure a router yourself you can do so by using the
instructions on all following instructions.

2. In the side bar, click on "VPN Tunneling," and then "OpenVPN Client."

Under the Basic tab, make the following changes:

1) Put a check mark next to "Start with WAN"
2) Change "Interface Type" to TUN
3) Change "Protocol" to your preference (TCP or UDP)
4) Type in your desired server ( the server list) and your desired port (choose from
443 or 1194)
5) Change "Firewall" to Automatic
6) Change "Authorization Mode" to TLS
7) Put a check mark next to "Username/Password Authentication"
8) Enter your IPVanish username and password in the appropriate fields
9) Put a check mark next to "Username Authen. Only"
10) Make "Extra HMAC authorization (tls-auth)" Disabled
11) Put a check mark next to "Create NAT on tunnel"

After you are finished, click "Save" at the bottom-right.

3. Under the advanced tab, make the following changes:

1) Put a check mark next to "Redirect Internet traffic"
2) Change "Accept DNS configuration" to Strict
3) Change "Encryption cipher" to AES-256-CBC
4) Change "Compression" to Adaptive
5) Leave "TLS Renegotiation Time" at -1
6) Leave "Connection Retry" at 30
7) The Verify server certificate (tls-remote) should be unchecked. Fill in the IPVanish
hostname you've selected in the "Common Name:" field (example: phx-
a01.ipvanish.com). You can view our list of available hosts here.
8) Enter the following into the "Custom Configuration":

resolv-retry infinite
nobind
persist-key
persist-tun
persist-remote-ip
comp-lzo
verb 3
auth SHA256
keysize 256
tls-cipher DHE-RSA-AES256-SHA

After you are finished, click "Save" at the bottom-right.

4. Under the Keys tab, paste in everything from the following file:
http://www.ipvanish.com/software/configs/guideCRT.txt After you are finished, click "Save" at t
the bottom-right.

5. Under the Keys tab, hit the Start button to begin the OpenVPN service.
Wait for the service to start.

6. We now want to make sure that the router start up with OpenVPN. In the side bar, click on
"Reboot." Next, click on OK.

7. Wait for the router to reboot.

8. Some distributions of Tomato may require you to hit "Continue" before the router finishes
booting.

9. We can now check to see if OpenVPN is running. In the side bar, click on "VPN Tunneling,"
and then "OpenVPN Client." Click on the "Status" tab. You should see statistics appear. As
you use the service, the bytes transferred will increase.