How to Download, Install, & Use CyberGhost VPN on TomatoUSB?

If you own a Tomato router, configure CyberGhost VPN on it to keep all your devices protected. Tomato is a custom firmware that you can install on compatible routers to use the CyberGhost OpenVPN client. So, let's learn how to download, install, and use CyberGhost VPN on TomatoUSB.

1. First, visit the CyberGhost VPN subscription page.

2. Next, click the Get CyberGhost VPN button.

3. Now, choose your preferred subscription plan on the next page and fill in the required details to complete the purchase.

4. Once done, you'll receive a confirmation email.

5. Next, visit CyberGhost official website and click the My Account button from the top-right corner.

6. Enter your Username and Password now to Log in.

7. Once you can access your dashboard, navigate to Routers or other devices, and hit the Configure button.

8. Now, you've to fill in the details as mentioned below:

• PROTOCOL- OpenVPN
• COUNTRY- Select your preferred location from the list of countries. Whenever you choose a new location, you've to configure CyberGhost VPN on your router.
• SERVER GROUP- Choose the server group (UDP/TCP).
• DEVICE NAME- Tomato OpenVPN
• EXTRA FEATURES- Tick the boxes for enhanced security.

9. Now, hit the Save Configuration button.

10. You'll be redirected to the Manage Devices page next, find Routers or other devices and click the View button.

11. Now, the full configuration will appear; you can choose Edit if any changes are required. 

12. Take a note of your Username, Password, and Server Group; then click the Download Configuration button to save the .zip file. 

13. Once done, extract the .zip files, and you'll get the below entries:

• ca.crt- Certificate from the authority
• client.crt- User certificate
• client.key- Private key
• openvpn.ovpn- OpenVPN configuration

TomatoUSB

1. First, choose a browser and enter 192.168.1.1 or 192.168.0.1 in the address bar to open your router's settings page. 

2. Next, log in using your Username and Password.

3. After that, choose VPN Tunneling from the left-pane and click OpenVPN Client from the drop-down.

4. Now, navigate to the Client 1 tab from the right side and select the sub-tab, Basic.

5. You need to fill the sections with the below details now:

• Start with WAN: Uncheck the box
• Interface Type: Choose TUN
• Protocol: Choose TCP or UDP depending on what you choose while picking the SERVER GROUP.
• Server Address/Port: Enter the server address that was previewed in the configuration under Server Group.
• Firewall: Choose Automatic
• Authorization Mode: TLS
• Username/Password Authentication: Checked
• Username: Enter the username generated in the configuration preview.
• Password: Use the password you received in the configuration preview.
• Username Authentication only: Unchecked
• Extra HMAC authorization: Disabled
• Create NAT on tunnel: Checked

6. Now, navigate to the Advanced tab and set the below options as mentioned.

• Poll Interval: 0 
• Redirect Internet traffic: Checked
• Accept DNS configuration: Strict
• Encryption cypher: AES-256-CBC
• Compression: Disabled
• TLS Renegotiation Time: -1
• Connection retry: -1
• Verify server certificate: Unchecked

7. To fill Custom Configuration, open the openvpn.ovpn file that you extracted from the .zip and copy the text from 'resolve-retry infinete' to 'verb 4' and paste in the Custom Configuration section.

8. Now, move onto the Keys tab and fill in the below details with the help of the rest of the extracted files.

• Certificate Authority: Paste the content of 'ca.crt' file
• Client Certificate: Paste the content of 'client.crt' file
• Client Key: Paste the content of 'client.key' file

9. Once done, click Start Now and then move to the Status tab to check the connection.

10. You should be connected now.

TomatoUSB Merlin Build

1. First, open your web browser and search for both of these IPs, 192.168.1.1 and 192.168.0.1.

2. Anyone of the above-mentioned IP addresses will open your router settings page. 

3. Find Advanced Settings from the left pane and navigate to VPN Server.

4. Now, find OpenVPN Client Settings from the right side.

5. Under Basic Settings, choose Client 1 right beside the Select client Instance option. 

6. Now fill in the details as mentioned:

• Start with WAN: No
• Interface Type: TUN
• Protocol: UDP/ TCP [depending on what you've selected in SERVER GROUP]
• Server Address and Port: Server Group Address from configuration preview
• Firewall: Automatic
• Authorization Mode: TLS
• Username/Password Authentication: Yes
• Username: The username you’ve received in the configuration preview
• Password: The password you’ve received in the configuration preview
• Username Authentication only: No
• Extra HMAC authorization: Disabled
• Create NAT on tunnel: Yes

7. Once done, navigate to Advanced Settings and fill in the below details: 

• Poll Interval: 0 
• Redirect Internet traffic: Yes
• Accept DNS configuration: Relaxed
• Encryption cypher: AES-256-CBC
• Compression: Disabled
• TLS Renegotiation Time: -1
• Connection retry: 30
• Verify server certificate: No
• Custom Configuration: Copy the text from 'resolve-retry infinite' to 'verb 4' from the openvpn.ovpn file and paste it here.

8. Move to the OpenVPN Keys tab next and enter the below details as mentioned:

• Certificate Authority: The content received in 'ca.crt' file
• Client Certificate: Paste the text from 'client.crt'
• Client Key: Enter the text from 'client.key'

9. Finally, hit the Apply button to save the new configuration.

That's all! Now you know how to download, install, and use CyberGhost VPN on TomatoUSB. If you want to install this VPN on other devices also, check our complete setup guide. Thanks for reading! If you face any issues while performing the steps, drop us a comment through the below button.