How to Configure and Use NordVPN on DrayTek Vigor

If your router runs on DrayTek Vigor firmware, you can easily configure NordVPN on it. Yes, you just have to create an IKEv2 EAP VPN tunnel from your router to any NordVPN server in your preferred location. However, the installation process can be a bit difficult for first-time users. That's why we've created a step-by-step guide to help you learn how to configure and use NordVPN on DrayTek Vigor. Have a look.

Note

NordVPN doesn’t work on the DrayTek routers running older versions of the firmware. Here is the list of unsupported firmware versions-

v2765 - 4.2.1.1
v2135 - 4.2.1.2
v2865 - 4.2.2
v2927 - 4.2.2

1. First, visit the NordVPN website.

2. Next, hit the Grab the Deal button and choose a subscription on the next page.

3. You’ve to enter your payment details after that to complete the purchase.

4. You’ll receive a confirmation on your subscription now.

5. Next, click here to get the hostname of the server you want to connect to.

6. Then, log into your router’s management page with admin access; you can choose any browser and visit this IP, 192.168.1.1, for that.

7. Once the page opens, move to the Certificate Management option and choose Trusted CA Certificate from the drop-down.

Trusted CA Certificate on DrayTek router login page

8. Next, download the NordVPN root CA certificate; you have to import it to your router’s page.

9. Now, click IMPORT under Trusted CA Certificate.

10. Click on Choose File after that and Open the .der file.

11. Next, click Import and wait for a few seconds.

CA Certificate file Import to router login page

12. Your router will respond with an Import Success message, and the Certificate Status will show OK.

13. Now, move to VPN and Remote Access and choose IPsec Peer Identity.

VPN and Remote Access on DrayTek login page

14. Set the profile name to NordVPN next and check the box next to Enable this Account, and choose the option Accept Any Peer ID.

15. Then, move on to VPN and Remote Access, and pick LAN to LAN.

16. Next, click on an available index number and edit the profile with the details we’ve mentioned below.

Common Settings:

Choose any profile name.
Check the option Enable this profile.
Select Dial-Out for Call Direction.
In Dial-Out Through, choose WAN for the VPN connection.

Dial-Out Settings:

First, select IPsec Tunnel and IKEv2.
Under VPN server type, choose IPsec EAP.
Enter the VPN server IP/hostname now that you’ve received in step 5.
Type in your Username and Password next that you can find these options under NordVPN service credentials in your online VPN account dashboard.

NordVPN service credentials on Nord Account

Select Digital Signature for IKE Authentication Method, and for Peer ID, choose the IPsec Peer Identity Profile you’ve created earlier.
For IPsec Security Method, choose AES with Authentication.
Click Advanced next.

IKE advanced settings:

IKE phase 1 proposal as AES256_SHA1_G14
IKE phase 2 proposal as AES256_SHA1
IKE phase 1 key lifetime as 28800
IKE phase 2 key lifetime as 3600

TCP/IP Network Settings:

Remote Network IP as 0.0.0.0.
Remote Network Mask 0.0.0.0/00.
Change Routing to NAT.
Enable Change Default Route to this VPN tunnel option if you want to encrypt your complete web traffic.

17. Once done, you’ll be connected, and you can check your VPN status through VPN and Remote Access >> Connection Management

That’s all! Now you know how to configure and use NordVPN on DrayTek Vigor. If you’ve further queries, drop us a comment through the below button. Thanks for reading!