Last updated:

Modems connect your home to the internet. Your internet service provider (ISP) usually provides them. This article explains how to connect a router running ExpressVPN to the internet.

Standard setup

connect expressvpn router to lan port

Connect an ethernet cable from the “Internet” port of your ExpressVPN router to an available LAN port on your modem or existing router.

Need help with a different kind of setup?

If you don’t have a modem, you may have a special configuration. The instructions below cover most of the configurations that are supported.

Modem-router combo
Wired house or apartment
Ethernet switch
Mesh network
Wi-Fi range extenders
Multiple ExpressVPN routers

Skip to FAQ

Modem-router combo

A modem-router combo is a modem that also has router functionality. If you only have one box, you likely have a combo.

In this configuration, continue with setup as normal (see diagram above).
Back to top

Wired house or apartment

connect ExpressVPN router to wall outlet

A wired house or apartment has Ethernet ports throughout the building that provide internet. These ports are all connected to the modem.

Connect your ExpressVPN router’s internet port to the Ethernet wall outlet.
Back to top

Ethernet switch


An Ethernet switch allows more devices to be wired directly to the internet. To connect your ExpressVPN router to an Ethernet switch:

  1. Make sure your switch is connected to your modem or other internet source.
  2. Connect your ExpressVPN router’s Internet port to any LAN port on the switch.

Back to top

Mesh network

A mesh network provides better Wi-Fi coverage in larger homes. It does so by delivering the Wi-Fi signal through multiple mesh nodes distributed throughout the building.

Method 1: Connect the ExpressVPN router to a mesh node

diagram of aircove connected to the LAN port of a mesh node

This configuration only protects devices connected to the ExpressVPN router’s LAN ports or Wi-Fi; the rest of the mesh network will not be protected. To use this configuration, connect the ExpressVPN router’s internet port to a LAN port on any of the mesh router nodes.

Method 2: Connect the ExpressVPN router between the ISP modem/router and mesh network

Aircove connected to the lan of the ISP router, protecting the entire network

This configuration provides VPN protection for the entire mesh network. To connect the ExpressVPN router between your ISP modem-router and mesh router:

  1. Connect the internet port on the ExpressVPN router to a LAN port on your ISP modem-router. 
  2. Connect any LAN port on the ExpressVPN router to the WAN or internet port on your mesh router.

However, devices connected to the mesh network will not be able to take advantage of Device Groups unless the mesh router is placed in bridge mode (see the instructions from your mesh router manufacturer). If you have difficulty accessing the ExpressVPN router dashboard in this configuration, see these troubleshooting steps.

Popular mesh routers include Asus ZenWiFi, Eero, Google Nest Wi-Fi, Netgear Orbi, and TP-Link Deco.

 

Back to top

Wi-Fi range extenders

aircover and range extender

If you have a large home, Wi-Fi extenders can extend the range of your wireless signal to cover any dead zones. Plug one near the edge of your ExpressVPN router’s wireless range and pair it with the network, and it’ll start rebroadcasting the signal farther out into your home. In most cases, you will be able to use the same Wi-Fi name (SSID) and password as your ExpressVPN router.
Back to top

Popular Wi-Fi range extenders include Asus RP-AX56, D-Link EaglePro AI, Linksys RE7310, Netgear EAX15, and TP-Link RE603X.

Multiple ExpressVPN routers

multiple aricove routers

If you want to connect two or more ExpressVPN routers together, you will need to ensure each has a unique IP address. Otherwise, their IP addresses will conflict, preventing them from connecting to the internet. 

To connect multiple ExpressVPN routers, please follow these steps:

  1. Connect the primary router’s LAN port to the secondary router’s “Internet” port using an Ethernet cable.
  2. Connect to the primary router via Wi-Fi or Ethernet cable
  3. On the primary router, go to the Dashboard and place the secondary router into a “No VPN” Device Group
  4. Connect to the secondary router via Wi-Fi or Ethernet cable
  5. On the secondary router, go to the Local Network Settings
  6. Under Router IP setup, change the IP address to something unique from the other routers on the network. A couple of guidelines:
    1. Only change the third block of the address (E.g. 192.168.132.1 ).
    2. Select a value of up to 255.
    3. E.g. 192.168.132.1 → 192.168.133.1
  7. Click Save
  8. Under DHCP server on Local Network Settings, confirm that the First & Last client IP addresses have updated to match the subnet of the Router IP address:
    1. E.g. First client IP address: 192.168.132.10 → 192.168.133.10
    2. E.g. Last client IP address: 192.168.132.219 → 192.168.133.219

Back to top

Frequently Asked Questions

Will the ExpressVPN router work with my ISP’s modem or router?

If your internet service provider’s modem or router has a spare LAN Ethernet port, you will be able to connect your ExpressVPN router to it.

For your ExpressVPN router to work with your ISP’s modem or router, it must support DHCP, Static IP, or PPPoE. Your ISP should be able to tell you what your modem or router-modem combo supports.

What are Static IP, DHCP and PPPoE?

DHCP, Static IP, and PPPoE are different ways to connect to networks like your internet service provider (ISP).

  • DHCP (most common) works by automatically assigning an IP address to your device.
  • Static IP works by manually inputting an IP address, subnet mask, and default gateway provided by your ISP.
  • PPPoE works by connecting to your ISP using a username and password provided by them.

What should I do if my ExpressVPN router doesn’t detect my internet connection?

You may encounter issues connecting your ExpressVPN router to the internet, especially if you are using an ISP-supplied modem-router setup. Try the following methods to resolve the issue.

Connect the ExpressVPN router to a different LAN port on your primary modem or router

Some setups only allow internet connectivity over certain LAN ports on your primary modem or router. Try to connect your ExpressVPN router to other LAN ports on the modem or router until one of the LAN ports works.

Put the ExpressVPN router into the ISP modem-router “DMZ”

A “DMZ” (demilitarized zone) is a router function that allows you to open all external ports for a specific IP from the router’s local network.

Putting the ExpressVPN router in the “DMZ” (demilitarized zone) of the ISP modem-router, if supported, may allow the ExpressVPN router to operate normally. Aircove has its own firewall and is safe to be placed in the DMZ.

You will need to know the IP or MAC address of your ExpressVPN router to place it in the DMZ:

    • IP address can be found in the Internet Settings screen of the Dashboard
    • MAC address can be found on the bottom label of your ExpressVPN router

How to do this will depend on the model of modem-router supplied by your ISP. Try searching for “How to configure the DMZ on a <modem-router model name>” or contact your ISP for support.

How to set up the DMZ
  1. Connect to your ISP modem-router via Wi-Fi or Ethernet
  2. Locate your ISP modem-router’s settings page
  3. Find the DMZ settings (if supported)
  4. Enable the DMZ and type in the IP or MAC address you’ve previously noted from the ExpressVPN router
  5. Save the settings and reboot the ISP modem-router
Instructions for select ISPs

Put the ISP modem-router into “bridge mode”

Bridging together two routers means that the secondary router becomes an extension of the primary router, allowing them to coexist.

Putting the ISP modem-router into “bridge mode” (also known as “bridging”, “transparent bridging” or “modem only” mode), if supported, may allow the ExpressVPN router to operate normally.

How to do this will depend on the model of modem-router supplied by your ISP. Try searching for “How to put <modem-router model name> into bridge mode” or contact your ISP for support.

How to enable bridge mode
  1. Connect to your ISP modem-router via Wi-Fi or Ethernet.
  2. Locate your ISP modem-router’s settings page.
  3. Find the router mode settings (if supported).
  4. Enable bridge mode.
  5. Save the settings and reboot the ISP modem-router.
Instructions for select ISPs

How can I change the router’s DNS servers?

The Domain Name System (DNS) is the phonebook of the internet. Humans access information online through domain names like bbc.com or expressvpn.com. Web browsers interact through Internet Protocol (IP) addresses. DNS translates domain names to IP addresses so browsers can load Internet resources like webpages.

When the VPN is connected, the router will use ExpressVPN’s private DNS servers.

When the VPN is disconnected, your DNS requests are sent to your ISP, who can use this information to track your activity online. Some providers may sell this data or use it to show you targeted ads.

ExpressVPN for routers allow you to use alternative DNS servers when the VPN is disconnected so that your DNS queries are never visible to your ISP. This can be enabled in Internet Settings; you will need the IP address(es) of your DNS provider (e.g. Quad9 or OpenDNS).

ExpressVPN interface showing DNS settings with alternative DNS servers enabled

Note: Custom DNS will not hide your IP address or encrypt your web traffic. ExpressVPN is not responsible for how third-party DNS providers handle your DNS activity.

Was this article helpful?

We're sorry to hear that. Let us know how we can improve.

A member of our Support Team will follow up on your issue.