Pick a setup path
GL.iNet and NordVPN document three routes. The built-in WireGuard path has the fewest steps; the OpenVPN routes cover UDP or TCP choice and a dedicated IP. Menu names below are from GL.iNet firmware 4.x docs; since v4.9 the OpenVPN Client and WireGuard Client pages are merged into a single VPN Client Profile page with a protocol switch in the upper-right corner. [2][3][4]
| Path | Where in the router | What you need from Nord Account | Best for |
|---|---|---|---|
| Built-in WireGuard | VPN, WireGuard Client, NordVPN (v4.9+: VPN Client Profile) | An access token, displayed once | Most travellers on firmware v4.7 or later |
| Built-in OpenVPN | VPN, OpenVPN Client, NordVPN | Service credentials (not your login) | Choosing UDP or TCP and refreshing the server list |
| Manual .ovpn upload | VPN, OpenVPN Client, Add Manually | A downloaded UDP or TCP .ovpn file plus service credentials | A specific server or a dedicated IP |
Path 1: built-in WireGuard with an access token
GL.iNet's WireGuard Client guide is written for firmware v4.7 and above; v4.6 and earlier use a separate guide. Update first if your router is older. [2]
- Log in to your Nord Account, open NordVPN in the left menu, and generate an access token. Copy it immediately; GL.iNet notes the token is only displayed once. [2]
- In the router Admin Panel (192.168.8.1 by default), go to VPN, WireGuard Client, NordVPN. Paste the token and click Save and Continue. [1][2]
- Select the servers you want and click Apply. [2]
- Click the three-dot icon next to a server to connect. A green dot appears next to the active configuration. [2]
- Store the token in a password manager. If you lose it you will need to generate another one.
Path 2 and 3: OpenVPN with service credentials
NordVPN's own GL.iNet article uses OpenVPN only. In Nord Account, open NordVPN, Advanced settings, Set up NordVPN manually. The OpenVPN configuration files tab lets you search for a server and download its UDP or TCP file, and the Service credentials section gives the username and password for manual connections. [1]
In the router, go to VPN, OpenVPN Client, add a new configuration, upload the .ovpn file, enter the service credentials when prompted, and click Connect. NordVPN says the status view should then show the VPN server IP and data statistics. [1]
GL.iNet also has a built-in NordVPN option on the OpenVPN Client page: enter the service credentials and the router generates configuration files, with choices for protocol, server count and locations, plus an Update Servers button. GL.iNet warns in capitals that the service credentials are NOT your login email and password. [3]
For a NordVPN dedicated IP, GL.iNet documents the manual route: download the .ovpn file for the specific dedicated server, upload it, enter service credentials, connect, then check that your public IP matches the dedicated IP. [10]
Device slots and server limits
NordVPN allows up to 10 simultaneous devices per account. A router uses one slot and protects every device connected to it. [5]
A subtle limit: if several of your devices connect to the same NordVPN server, NordVPN says they must use different protocols, and a total of five devices can be connected to one server at the same time. Pointing the router and your phone app at the same server with the same protocol can fail; choose a different server for one of them. [5]
Devices behind the router do not need their own app or slot while they stay on the router Wi-Fi. A phone that leaves the room on mobile data and starts its own NordVPN app uses its own slot.
Kill switch and captive portals
On GL.iNet firmware v4.8 and later, each tunnel has its own Kill Switch, enabled by default once the tunnel is active, and Policy Mode adds an Enhanced Kill Switch that blocks traffic not matching any VPN tunnel. On v4.7 and earlier, the setting is Block Non-VPN Traffic under VPN Dashboard, Global Options. [6][7]
Hotel and airport login pages need the VPN off. GL.iNet's captive-portal FAQ says to disable all VPN connections and AdGuard Home while you log in, then turn them back on. With the kill switch enabled, the login page will not load until you do. [8]
Some GL.iNet services such as GoodCloud, DDNS and rtty do not go through the VPN by default because they normally need the device real IP; GL.iNet makes routing them through the VPN an opt-in tunnel option. [6]
Troubleshooting checklist
Work down the list; most failures are credentials, firmware or the captive portal.
- Token rejected: generate a new access token and paste it immediately; it is only shown once. [2]
- Authentication failed on OpenVPN: use the service credentials from Set up NordVPN manually, not your account email and password. [1][3]
- Menu not where the guide says: check your firmware; v4.9 merged the client pages into VPN Client Profile, and v4.6 or earlier uses a different WireGuard guide. [2][4]
- Connects at home but not at the hotel: finish the captive portal with VPN off, then reconnect. [8]
- UDP fails on a restrictive network: try the TCP .ovpn file for the same server. [1]
- Second device fails on the same server: switch that device to another server or protocol. [5]
- Network blocks VPN traffic entirely: NordVPN lists obfuscated servers only in its apps, so use the app on a laptop or phone for that stay. [9]
Who should skip the router setup
If you travel with one laptop and one phone that both run the NordVPN app, the router adds a device to carry and configure. The router setup earns its place when you have devices that cannot run the app, such as a streaming stick, or when you want a single login for the whole travel LAN.
Questions before you decide
Does a GL.iNet router use one of my NordVPN device slots?
Yes. NordVPN states that you can connect up to 10 devices to one account at the same time and that a router uses only one device slot while protecting all devices connected to it.
What credentials does NordVPN on a GL.iNet router need?
For the built-in WireGuard option, GL.iNet documents an access token generated in your Nord Account, which is shown only once. For OpenVPN, both NordVPN and GL.iNet say to use the service credentials from the manual setup area of Nord Account, which are not your account email and password.
Can I use NordVPN obfuscated servers on a GL.iNet router?
NordVPN's obfuscated-server article lists only its own apps on Windows, macOS, Android, iOS, Android TV and Linux and says the category now runs on NordWhisper. It does not list routers, so plan on using the NordVPN app on a laptop or phone when a network needs obfuscation.
Sources & verification
Product details and prices can change. Check the linked provider before buying.
- NordVPN Help Center: GL.iNet setup with NordVPN Accessed 30 Oct 2026
- GL.iNet Router Docs 4: WireGuard Client Accessed 30 Oct 2026
- GL.iNet Router Docs 4: OpenVPN Client Accessed 30 Oct 2026
- GL.iNet Router Docs 4: VPN Client Profile Accessed 30 Oct 2026
- NordVPN Help Center: How many devices can I use with NordVPN? Accessed 30 Oct 2026
- GL.iNet Router Docs 4: VPN Dashboard Accessed 30 Oct 2026
- GL.iNet Router Docs 4: VPN Kill Switch (Block Non-VPN Traffic) Accessed 30 Oct 2026
- GL.iNet Router Docs 4: Connect to public hotspot with Captive Portal Accessed 30 Oct 2026
- NordVPN Help Center: How to connect and disconnect from obfuscated servers Accessed 30 Oct 2026
- GL.iNet Router Docs 4: Connect to NordVPN with dedicated IP Accessed 30 Oct 2026
Sources link directly to providers. Product buttons may use separately labeled affiliate links. Read our disclosure.