NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
Solved
Why no OpenVPN support? (RS700)
Hi Team,
I'd love to see OpenVPN support added to Netgear routers, especially WiFi 7 based routers?
It would add an extra layer of defense from all the nasties on the internet!
Would be feature be foreseeable in the future?
Since the router firmware won't add VPN client mode, a few practical workarounds depending on your setup:
The most flexible option is to put a small dedicated device between your RS700 and your ISP modem (or on a spare LAN port) running firmware that supports VPN client. A GL.iNet travel router (like the GL-MT3000) runs OpenWrt with built-in OpenVPN and WireGuard client support, lets you select which devices route through the VPN, and costs under $80. You'd connect it to a LAN port on the RS700 and point specific devices to use it as their gateway.
If you have a Raspberry Pi or old mini PC lying around, you can run OpenWrt or pfSense on it as a transparent VPN gateway. Configure it with ExpressVPN's OpenVPN config, then either set it as the default gateway for your whole network or just for specific devices via static routes or DHCP reservations on the RS700.
For per-device VPN without any extra hardware, ExpressVPN's apps on individual devices (Windows, Mac, phones) with split tunneling let you choose which traffic goes through the VPN. Less elegant than a router-level solution but works immediately.
The Aircove you mentioned is essentially what GL.iNet does but locked to ExpressVPN only. The GL.iNet approach gives you the same functionality with any VPN provider and better WiFi when paired with your RS700.
5 Replies
Page 158 of the User Manual describes how to set up OpenVPN on the RS700.
https://www.downloads.netgear.com/files/GDC/RS700S/RS700_UM_EN.pdf
There are two parts to any VPN connection (OpenVPN being one of the most common):
- A VPN Host, which accepts connections from VPN Clients.
- A VPN Client, which makes a connection to a VPN Host.
For many years, Netgear routers have provided a VPN Host feature (specifically OpenVPN). When this feature is enabled, it allows devices to connect through the internet to the router and thus gain access to the router local network (LAN).
What Netgear does not provide is a VPN Client feature, which opens a connection through the internet to a VPN Host (such as ExpressVPN, NordVPN, etc.) and thus allows every device on the local network to use the VPN connection to connect to the internet.
There are some routers which do provide a VPN Client facility. (There is even third party firmware for a few Netgear routers which includes this feature.) However, stock firmware for Netgear routers does not.
It's been there since the beginning I believe.
Seen on my RS600 and I presume it's on my RS700 as well:
Hi all,
Thanks for the advice, i should of been more specific about my needs from a VPN.
What Netgear does not provide is a VPN Client feature, which opens a connection through the internet to a VPN Host (such as ExpressVPN, NordVPN, etc.) and thus allows every device on the local network to use the VPN connection to connect to the internet.
Yes i'm well aware of the 'VPN Service' option in the routers, but i need a OpenVPN/VPN Client mode which can connect directly to ExpressVPN servers and the ability to set which devices on my network use the VPN service.
I'm hoping Netgear can expand the options to use VPN Client mode in the the future
I've also been playing around with the Aircove router directly bought from ExpressVPN and whilst it's functional, it's incredibly restrictive on what it can do and WiFi range is also very ordinary.
I would put the chances of Netgear adding a VPN Client feature something similar to "when pigs fly". There appear to be two practical options:
- Replace this $600 WiFi router with a model from a different vendor which supports VPN Client.
There are models from Asus, TP-Link, Express VPN (Aircove), and others. - Add a VPN Client device to the network, such as the MT2500A Brume 2 from GLiNet. ($90 on Amazon) or the newer Brume 3 ($140 on Amazon)
https://www.gl-inet.com/products/gl-mt2500/
https://store-us.gl-inet.com/collections/security-gateways/products/brume-3-gl-mt5000-high-speed-vpn-security-gateway
With a solution like this, you can choose which devices on the network use the VPN Client and which do not.
- Replace this $600 WiFi router with a model from a different vendor which supports VPN Client.
Since the router firmware won't add VPN client mode, a few practical workarounds depending on your setup:
The most flexible option is to put a small dedicated device between your RS700 and your ISP modem (or on a spare LAN port) running firmware that supports VPN client. A GL.iNet travel router (like the GL-MT3000) runs OpenWrt with built-in OpenVPN and WireGuard client support, lets you select which devices route through the VPN, and costs under $80. You'd connect it to a LAN port on the RS700 and point specific devices to use it as their gateway.
If you have a Raspberry Pi or old mini PC lying around, you can run OpenWrt or pfSense on it as a transparent VPN gateway. Configure it with ExpressVPN's OpenVPN config, then either set it as the default gateway for your whole network or just for specific devices via static routes or DHCP reservations on the RS700.
For per-device VPN without any extra hardware, ExpressVPN's apps on individual devices (Windows, Mac, phones) with split tunneling let you choose which traffic goes through the VPN. Less elegant than a router-level solution but works immediately.
The Aircove you mentioned is essentially what GL.iNet does but locked to ExpressVPN only. The GL.iNet approach gives you the same functionality with any VPN provider and better WiFi when paired with your RS700.
