Skip to content
LookerVPN
Download/Router/OpenWRT
OpenWRT Setup Guide

LookerVPN on OpenWRT

Step-by-step guide to configure WireGuard VPN on your OpenWRT router for whole-home protection.

WireGuard protocolKill switch included~15 minutes setup

Prerequisites

OpenWRT 21.02 or later (22.03+ recommended)
Active LookerVPN account with time remaining
Admin access to your router
Internet connection for package installation
Generate Router ConfigOpenWRT WireGuard Docs

Setup Instructions

1

Generate Your WireGuard Config

Log in to your LookerVPN dashboard and generate a router configuration.

  1. Go to your LookerVPN account dashboard
  2. In the WireGuard Configuration section, select Router as your device type
  3. Choose your preferred server location
  4. Click Generate Config
  5. Keep this page open—you'll need the configuration values for the next steps

Tip: The router config shows individual values (Address, Private Key, etc.) that you can copy directly into OpenWRT's interface.

2

Access OpenWRT Admin Panel

Open your router's LuCI web interface.

  1. Open your web browser and navigate to your router's IP address (usually 192.168.1.1)
  2. Log in with your OpenWRT admin credentials
  3. You should see the LuCI web interface

Note: If you can't access the admin panel, make sure you're connected to your router's network and using the correct IP address.

3

Install WireGuard Packages

Install the required WireGuard packages if not already present.

OpenWRT may not have WireGuard installed by default. Follow these steps:

  1. Go to System → Software
  2. Click Update lists to refresh available packages
  3. In the Filter field, search for wireguard
  4. Install these packages:
    • luci-proto-wireguard
    • wireguard-tools
  5. Wait for installation to complete, then reboot your router

Or via SSH:

opkg update && opkg install luci-proto-wireguard wireguard-tools
4

Create WireGuard Interface

Add a new WireGuard interface for the VPN connection.

  1. Go to Network → Interfaces
  2. Click Add new interface
  3. Configure the new interface:
    • Name: wg0 (or any name you prefer)
    • Protocol: Select WireGuard VPN
  4. Click Create interface
5

Configure Interface Settings

Enter your LookerVPN WireGuard configuration values.

In the interface configuration screen, enter these values from your LookerVPN config:

FieldValue
Private KeyCopy from your LookerVPN config
IP Addresses10.x.x.x/32 (from Address field)

Important: The IP address from your config is in CIDR format (e.g., 10.66.77.88/32). Make sure to include the /32 suffix.

6

Add Peer (LookerVPN Server)

Configure the LookerVPN server as a WireGuard peer.

  1. In the interface settings, go to the Peers tab
  2. Click Add peer
  3. Enter these values from your LookerVPN config:
FieldValue
DescriptionLookerVPN
Public KeyCopy server public key from config
Endpoint HostServer IP from Endpoint field
Endpoint Port51820
Allowed IPs0.0.0.0/0 (routes all traffic through VPN)
Persistent Keep Alive25

Important: Make sure Route Allowed IPs is checked. This ensures traffic is routed through the VPN tunnel.

7

Configure Firewall Zone

Set up firewall rules for the VPN interface.

  1. Still in the interface settings, go to the Firewall Settings tab
  2. For Create / Assign firewall-zone, select wan (or create a new zone called "vpn")
  3. Click Save

For additional security (kill switch), go to Network → Firewall → General Settings:

  1. Find the wan zone (or your vpn zone)
  2. Ensure Input is set to reject
  3. Ensure Forward is set to reject

Kill Switch: These firewall settings will block internet access if the VPN disconnects, preventing data leaks.

8

Configure DNS

Set up DNS to use LookerVPN DNS servers.

  1. Go to Network → Interfaces
  2. Edit the WAN interface
  3. In Advanced Settings, check Use DNS servers advertised by peer OR manually set DNS:
    • Primary: 10.64.0.1 (LookerVPN DNS)
  4. Click Save

Alternatively, configure DNS in Network → DHCP and DNS:

  1. In DNS forwardings, add 10.64.0.1
  2. Uncheck Rebind protection if you have issues
9

Save and Apply

Activate your VPN connection.

  1. Click Save & Apply on any pending changes
  2. Go to Network → Interfaces
  3. Find your WireGuard interface (wg0) and click Connect (or restart the interface)
  4. Wait a few seconds for the connection to establish

Success! Your WireGuard interface should now show as "Connected" with a green status indicator.

10

Test Your Connection

Verify the VPN is working correctly.

  1. On a device connected to your router, visit whatismyipaddress.com
  2. Your IP should show a LookerVPN server location, not your ISP
  3. Visit dnsleaktest.com to verify DNS is not leaking

Tip: If the connection isn't working, check Status → System Log in OpenWRT for error messages related to WireGuard.

Troubleshooting

Common issues and solutions

Need Help?

If you're stuck or have questions about setting up OpenWRT, our support team is here to help.

Contact SupportBack to Router Guides

Using a Different Router?

Check our guides for other router platforms

Asus Merlin (Coming Soon)pfSense (Coming Soon)OPNsense (Coming Soon)GL.iNet (Coming Soon)
    OpenWRT WireGuard Setup Guide - LookerVPN