AsusWRT Merlin has a built-in killswitch that ensures nothing will leak over the WAN connection. While not necessary, it is recommended that you set a static IP address on your devices beforehand.
To activate the killswitch for the VPN connection in AsusWRT Merlin, follow these instructions.
Step 1: Log in to the administrative interface
First, log in to your router's web interface. This can be done by entering the IP address of your router into the URL field of your browser. By default, AsusWRT Merlin use 192.168.1.1. The default username and password is admin for both, but it is strongly recommended that you change the username and password.
Step 2: Activate the killswitch
Navigate to Advanced Settings -> VPN -> OpenVPN Client
On the VPN profile for the VPN connection, make the following changes:
- On Redirect Internet Traffic and select Policy Rules.
- Check the box Block routed clients if the tunnel goes down
- Under Rules for routing client traffic through the tunnel, add the device(s) you want to force through the VPN connection and select the VPN connection under Iface
- Click Apply
This will ensure that no traffic escapes the VPN connection.