This guide was created by a community member and reviewed by us. Firmware and router interfaces may change over time, so some steps may differ depending on your device or version.
Requirements:
- Keenetic / Netcraze router with a USB port
- USB flash drive of at least 256MB
Step 1. Installing Required KeeneticOS Components
1.1. Open a web browser, enter the router's IP address (default 192.168.1.1 or my.keenetic.net) into the address bar, and press Enter.
1.2. In the Web Interface Login authorization window, enter your username (admin), administrator password, and click the Log in button.
1.3. After the control panel loads, go to the very bottom of the left sidebar menu to the MANAGEMENT section and select the System Settings subsection.
1.4. In the KeeneticOS Update and Component Options block, click the Component Options button.
1.5. In the opened System Component Options list of components, check the following items if they are not already selected:
- DNS-over-HTTPS proxy
- DNS-over-TLS proxy
- exFAT filesystem
- Ext filesystem
- FAT32 filesystem
- HFS+ filesystem
- NTFS filesystem
- Open Package support
- Kernel modules for filesystems support
- Kernel modules for Netfilter
- Extension package Xtables-addons for Netfilter
- Proxy client
- Storage support
- UDP-to-HTTP proxy (udpxy)
- WireGuard VPN
1.6. Click the Update KeeneticOS button
1.7. In the pop-up window offering to make a backup, click Skip backup and then Confirm.
1.8. The update installation and device reboot process will start in the Operating System Update block. Wait for the router to fully reboot.
1.9. Enter your credentials again on the authorization screen and log into the web interface.
Step 2. Preparing the USB Drive
This is an optional step, but recommended by the router manufacturer. The manufacturer recommends formatting the USB drive to the Ext4 file system. This can be done in various ways; the video demonstrates formatting using the MiniTool Partition Wizard program on Windows:
2.1. Download the installation file for the MiniTool Partition Wizard program using the link https://cdn2.minitool.com/?p=pw\&e=pw-free
2.2. Install and launch the program
2.3. In the lower block with the list of disks, find your connected USB flash drive
2.4. Right-click on it and select Format.
2.5. In the opened Format Partition window, set the following settings:
- Partition Label: Enter the name of the drive (e.g., USB Flash).
- File System: Open the drop-down list and select Ext4.
- Cluster Size: Leave the value Default.
- Click the OK button.
2.6. Click the Apply button in the lower left corner of the program interface.
2.7. In the Apply Changes pop-up window, click the Yes button. Wait for the formatting process to complete and click OK in the Successful pop-up window
2.8. Safely eject the flash drive from the PC and insert it into the USB port of the Keenetic router.
Step 3. Installing Entware
3.1. In the Keenetic web interface, go to the MANAGEMENT -> Storages & Devices section in the left menu. Make sure your flash drive is displayed in the list of drives with a CONNECTED status.
3.2. Download the Entware installation archive
IMPORTANT: Download appropriate software repository installer for processor architecture of your router. Here's the list of architectures of known models:
- For Keenetic/NetCraze: 4G (KN-1212), Omni (KN-1410), Extra (KN-1710/1711/1713), Giga (KN-1010/1011), Ultra (KN-1810), Viva (KN-1910/1912/1913), Giant (KN-2610), Hero 4G (KN-2310/2311), Hopper (KN-3810), use mipsel installer archive - EN_mipsel-installer.tar.gz
- For Keenetic/Netcraze: Ultra SE (KN-2510), Giga SE (KN-2410), DSL (KN-2010), Skipper DSL (KN-2112), Duo (KN-2110), Ultra SE (KN-2510), Hopper DSL (KN-3610) use mips installer archive - EN_mips-installer.tar.gz
- For Keenetic/Netcraze: Peak (KN-2710), Ultra (KN-1811), Ultra (NC-1812), Giga (KN-1012), Hopper (KN-3811) и Hopper SE (KN-3812) aarch64 - EN_aarch64-installer.tar.gz
- If you couldn't find your router model in the lists above then refer to Keenetic User Manual named "Installing the Entware repository on a USB drive" for your router model at support.keenetic.com
3.3. In the router's web interface, in the Storages & Devices section, click on the row of your USB drive to open the built-in File Browser
3.4. On the top panel of the opened file browser, click the first icon on the left with the image of a folder with a plus sign (Create new folder).
3.5. In the appeared Create new folder input field, type the exact folder name in lowercase: install and click the Save button.
3.6. Single-click to select the created install folder, and on the top control panel, click the second icon from the left - the image of a hard drive with an upward arrow (Upload file into the selected folder).
3.7. In the opened explorer window, select the archive downloaded earlier in step 3.2 and click the Open button. Wait for the download to finish until the file appears in the folder list.
3.8. In the router's left menu, go to MANAGEMENT -> OPKG.
3.9. In the Basic Settings block, find the Drive row, click the dropdown list, and select your drive: USB Flash.
3.10. Click the Save button
3.11. Click the gear icon in the upper right corner and select System Log The system log window will open, where the automatic log of the Entware environment installation will begin. Wait for the line: 'Entware' installed!
Step 4. Installing AWG-Manager
You need to connect to Entware via SSH. There are many ways to do this, but this guide focuses on using the PuTTY program on Windows:
4.1. Download, install, and launch the installed PuTTY program: https://the.earth.li/~sgtatham/putty/latest/w64/putty-64bit-0.84-installer.msi
4.2. In the opened PuTTY Configuration window
- in the Host Name (or IP address) field, enter your router's IP address: 192.168.1.1.
- in the Port field, specify the value 222.
- Make sure the Connection type switch is set to SSH, and click the Open button at the very bottom.
4.3. In the appeared PuTTY Security Alert security warning window, click the Accept button.
4.4. In the opened black terminal console, at the login as: input line, enter the username root and press Enter.
4.5. In the root@192.168.1.1's password: input line, enter the Entware password. The default password is keenetic (note: symbols are hidden and not displayed during input) and press Enter. Upon successful login, the BusyBox shell welcome text will appear.
4.6. Change the default root user password for the security of the Entware environment. Enter the command:
- passwd
- Press Enter. The console will prompt for New password:. Enter the new password, press Enter, then re-enter it in the Retype password: line and press Enter again. The line passwd: password for root changed by root will appear.
4.7. Update the package repository indices for Entware by running the command:
- opkg update
- Press Enter and wait for all package lists to finish loading.
4.8. Install the necessary components to work with secure SSL requests and certificates. Enter the command:
- opkg install wget-ssl ca-bundle
- Press Enter and wait for the console to execute
4.9. Run the automatic installation script for AWG-Manager. Enter the following command:
- wget -qO- http://repo.hoaxisr.ru/install.sh | sh
- Press Enter. Wait for the process to complete until the final green information block is displayed on the screen with the text:
- AWG Manager installed successfully!
- AWG Manager: http://192.168.1.1:2222
Step 5. Setting up AmneziaWG
If you do not need AmneziaWG, proceed to Step 6.
5.1. Go to the website xeovo.com. Click the Log In button in the top menu, enter your credentials (Username and Password), and click the Log In button to access the Dashboard.
5.2. In the left menu of the Xeovo personal account, go to the WIREGUARD section (or via the menu GENERATORS -> WireGuard).
5.3. In the Select Key block, set the round switch opposite Generate New Key.
5.4. In the Select Country block, click the country selection field (where it says All countries in .zip), select the required location from the dropdown list, for example Norway, Sandefjord.
5.5. In the ADVANCED SETTINGS dropdown menu. In the Client block, switch the selection to AmneziaWG.
5.6. Click the Download button to save the configuration file to your computer.
5.7. Open the AWG-MANAGER web interface in your browser at http://192.168.1.1:2222 (and translate the page to English if necessary)
5.8. On the TUNNELS tab, click the > Import File button and select the .conf file downloaded earlier in step 5.6
5.9. If necessary, assign a name for the VPN connection. And click the Save and run button in the upper right corner.
Step 6. Installing Sing-box
6.1. In the top menu of the AWG-Manager panel, go to the SETTINGS tab.
6.2. In the first settings block called General find the Usage Rate row. Click the third button (Advanced).
6.3. Scroll the settings page down to the Integrations section. Find the Sing-box program line and click the blue Install next to it. Wait for the installation to complete.
6.4. Scroll the page all the way down to the Actions block. Opposite the Sing-box item, click the Launch (Start) button.
Step 7. Adding Stealth Proxies Subscriptions
If you do not need Stealth Proxies, proceed to Step 8.
7.1. Go to the website xeovo.com. Log in with your username and password if necessary.
7.2. In the left menu of the Xeovo personal account, go to the STEALTH PROXY section
7.3. On the proxy server page, click the Generate Key (or Regenerate Key) button. The subscription status will temporarily change to Pending. Wait until the status changes to Active. Your subscription is ready.
7.4. In the platforms list, select iOS, click the application dropdown list, and choose the Karing client.
7.5. Click on the Copy link button
7.6. In the AWG-Manager web interface at http://192.168.1.1:2222, go to the TUNNELS tab in the top menu.
7.7. Go to the Sing-box subscriptions subtab.
7.8. Click the + Add button. The Subscribe by URL settings window will open. Fill in the parameters:
- Name: Enter a name for this proxy group, for example: Xeovo Subscription.
- Subscription URL: Paste the link copied in step 7.5 from the clipboard.
- In the server selection parameters block (Server Selection Mode), click Auto Speed Selection (you can also leave manual server selection if desired).
7.9. Click the Create button. The panel will load the proxy server configurations. The page for your subscription will open, displaying the available Stealth protocols with their current ping
Step 8. Setting up Global Routing
8.1. In the top menu of the AWG-Manager panel, go to the ROUTING tab.
8.2. In the appeared submenu, select the Sing-box Router subtab from the row of options.
8.3. In the upper right corner of this page, switch the display mode to Expert
8.4. In the Routing rules block, next to the row FIRST-MATCH-WINS IF NOTHING WORKS ->, select the VPN connection you need from the dropdown list (which was created in step 5.9 and/or 7.9)
8.5. To the right of the dropdown list, click the Save button
8.6. In the appeared Unsaved changes block, click the Apply button
8.7. Click the Sing-box parameters button
8.8. In the appeared panel in the block WHAT KIND OF TRAFFIC TO HANDLE select The entire router
8.9. In the STATUS block at the top, switch the activation slider to the working position, and wait until the status changes to The engine works. Status: Active.
Your VPN is now working. To verify, visit the website doesmyvpn.work
Deactivation
To disable the VPN, go to the AWG-Manager panel:
ROUTING -> Sing-box Router -> Sing-box parameters
and switch the slider to the left until the message Engine Off appears