VPN setup · Router

Asus-Merlin
VPN

Protect every device at home, smart TVs and consoles too, with IPHush on your Asus-Merlin. Load the WireGuard file from your account, then choose one device or the whole network. Zero connection logs.

Asus-Merlin VPN at a glance

Works withAsuswrt-Merlin 388+Asuswrt-Merlin 388 or newer.
SetupImport a fileIPHush.conf from your account
TestedVendor stepsSteps follow the vendor’s documentation
Connection logsNoneNo sites, DNS queries, times or IP addresses
PlansFamily or ProEach includes 1 router; on Pro it leaves from your dedicated IP

How to set up IPHush on Asus-Merlin

1 · Before you start

  1. Save a backup of the router’s settings

    Administration → Restore/Save/Upload Setting → Save setting

  2. Keep a way back in

    Keep a cable to the router and its admin password at hand while you change it.

2 · Your file

  1. Make the file for your router

    Sign in at iphush.com/app, open Devices, add a Router and choose Asus-Merlin. The app makes IPHush.conf for your router and shows this guide with your own values filled in.

3 · Add the tunnel

  1. Import the file

    VPN → VPN Client → WireGuard → Client 1 → Import config → IPHush.conf → Apply

    Set Description to IPHush. The file has no DNS line. If the import refuses it without one, add the line DNS = 10.96.0.1 under [Interface] and import it again.

  2. Turn it on

    VPN → VPN Client → WireGuard → Client 1 → Enable WireGuard: Yes → Apply

  3. See the handshake

    VPN → VPN Status shows the WireGuard client as connected.

4 · Choose who uses it

One device

Only the devices you choose use IPHush; the others keep your normal connection.

  1. Policy rules
  2. Send the device through it
  3. IPv6: no leak

The whole network

Every device on the network uses IPHush. The order matters: the router must reach the IPHush server outside the tunnel before the default route moves into it.

  1. Keep the IPHush server on your normal connection
  2. Default route through IPHush · VPN → VPN Client → WireGuard → Client 1 → Redirect Internet traffic through tunnel: Yes (all) → Apply
  3. DNS through IPHush · WAN → Internet Connection → WAN DNS Setting → DNS Server: 10.96.0.1
  4. IPv6: no leak · IPv6 → Connection type → Disable
  5. Optional kill switch · VPN → VPN Director → Killswitch (for WGC1)

5 · Check it works

  1. The tunnel is up

    VPN → VPN Status shows the WireGuard client as connected.

  2. Check from a device

    On a device that should use IPHush, open https://whoami.iphush.com/ in a browser. It must show "iphush": true and an IPHush address. A device outside the option you chose shows false: that is expected.

Asus-Merlin VPN: questions

Which Asus-Merlin firmware works with IPHush?

Asuswrt-Merlin 388 or newer.

Can the whole home go through IPHush on Asus-Merlin?

Every device on the network uses IPHush. The order matters: the router must reach the IPHush server outside the tunnel before the default route moves into it.

Is there a kill switch on Asus-Merlin?

Your choice: with it, devices sent to IPHush have no internet while it is down.

Which plan includes a router?

Family and Pro each include 1 router, and the router counts as one connection: every device behind it is protected. On Pro it leaves from your dedicated IP.

Has IPHush tested these steps on Asus-Merlin?

The steps follow the vendor’s current documentation; we have not yet run them on this router in our lab, and the guide in your account says so. Menu names can differ slightly between firmware versions.

More routers

Every device at home, one router

Family and Pro include a router and all 57 locations.

See plans