VPN on a Netis router: WireGuard in the NX series
Netis has a WireGuard client on the NX31, NX30 V2 and NX62: set up under the "Options" tab of the web interface, with a file from your NvoVPN account, then an IP check. No AmneziaWG — what to do in Russia.
A WireGuard client arrived on Netis with the NX series: the NX31 got it with firmware from March 31, 2025, and the NX30 V2 with firmware published on January 6, 2026. A VPN on a Netis router is set up in the web interface, under the "Options" tab; the BeeWiFi mobile app has none of these settings. WireGuard is a VPN protocol, the "language" the router and server use to encrypt traffic. AmneziaWG — the same WireGuard with obfuscation — is not in Netis's firmware, so the stock route does not work in Russia: see the "Are you in Russia?" block.
-
Download the WireGuard file from your account
Open your account → "Connection" → "Manual". Choose a server, choose "Router" in the device list and click "Create". The main file is AmneziaWG, which Netis does not understand: download the plain WireGuard variant sitting next to it. You need an active plan or trial.
-
Check your model and firmware
Open your model's downloads page on netisru.com: look for the word WireGuard in the firmware description. For the NX31, that is firmware netis-NX31-V4.0.250322.143107 or later; for the NX30 V2, NX30V2-V4.0.250822 or later. On the NX62, WireGuard is listed in the review specs on Netis's site. Firmware older than that — download the new one from the same page and update the router. Other models: see "Models and firmware".
-
Add a WireGuard connection under the "Options" tab
In the router's web interface, open the "Options" tab → the VPN section → WireGuard, client mode. The exact menu layout depends on the firmware — go by the WireGuard fields from the file. From the
[Interface]section: PrivateKey and Address. From the[Peer]section: PublicKey (the server's key), Endpoint (the server's address and port), AllowedIPs = 0.0.0.0/0 (all traffic into the tunnel), and PresharedKey, if it is in the file. If the section has a file upload button, upload the whole.conffile. Save and turn on the connection. -
Check the IP from a device behind the router
On a TV or laptop connected to the Netis, open the "What is my IP" page: it should show the NvoVPN server's address, not your provider's. Seeing your provider's address? Go to the "If it will not connect" section.
Look for VPN in the browser, not the BeeWiFi app
Per the reviews on Netis's site, OpenVPN and WireGuard are only set up in the router's web interface — the BeeWiFi mobile app has none of these settings. Open the router's address in a browser on a computer or phone, sign in with the administrator password, and switch to the "Options" tab. Netis has no official step-by-step WireGuard guide, so check the field names in your firmware against the file's lines.
Are you in Russia? A VPN on a Netis router over WireGuard will not work — here is what to do
Plain WireGuard is throttled in Russia — only AmneziaWG works, WireGuard with traffic obfuscation. Netis's firmware has no AmneziaWG, so the stock WireGuard client will not bring up a connection in Russia. Two simple options work, plus one for advanced users.
Option 1 — the NvoVPN app on every device
The Netis stays as it is. Install the app on your phone, computer and TV, and press the shield. If the network throttles the VPN, the app switches to stealth mode by itself — there is nothing to turn on. A subscription covers up to five devices at once.
Download the appsOption 2 — a second router with AmneziaWG behind the Netis
Keenetic understands the AmneziaWG file from your account with no tweaks needed. Connect the Netis's LAN port to the Keenetic's WAN port with a cable (where the provider's cable usually goes), upload the file — and everything connected to the Keenetic goes through the VPN, while the Netis keeps distributing internet as before. How to set it up: the VPN on Keenetic guide.
Option 3 — OpenWrt, for advanced users only
OpenWrt is free firmware where AmneziaWG installs through third-party packages; it officially supports the NX31, NX30 V2, NX32U, NX62, N6, WF2881, M1200AC and WF2770. But on the NX31, the install goes through SSH and TFTP with a bootloader replacement — OpenWrt's developers say you need experience with MTD and TFTP. This is not an easy route: details in the OpenWrt section of the general router guide.
If it will not connect: Netis and general pitfalls
- No VPN or WireGuard section. Check that you are in the web interface, not BeeWiFi, that the "Options" tab is open, and that your firmware is not older than the one in step 2. Models outside the NX series have no WireGuard client in their stock firmware — see "Models and firmware".
- The connection will not come up. Check the keys and Endpoint against the file's lines — one wrong character in a key breaks everything. Create a new file (a different server) in your account and try again. Did not help? The network is throttling WireGuard: normal in Russia, see the "Are you in Russia?" block.
- The tunnel is up, but sites will not open. Some firmware does not pick up the
DNS =line from the file; we have not checked how Netis behaves. Set the DNS manually — in the connection settings, if there is such a field, or on the device itself — using the address in the file. DNS is the internet's "phone book" — it turns website names into addresses. - Heavy pages hang, light ones open. Set MTU to 1420 on the VPN connection, if the firmware has that field. MTU is the maximum data packet size; one that is too large will not pass through the tunnel.
- The Netis sits behind your provider's router. If there is a Persistent Keepalive field in the settings, set it to 25 — that is what WireGuard's official documentation recommends: the router reminds the server it is there once every 25 seconds, so the connection does not drop across your provider's network. About a provider's router: a separate guide.
- AllowedIPs = 0.0.0.0/0 sends all of the router's traffic into the tunnel. We have not checked whether Netis's stock firmware can select individual devices.
- One file, one device. You cannot use the router's configuration on a phone at the same time: the connection will drop on both. Create a separate file for the phone — a subscription covers up to five.
- A kill switch — blocking direct internet access when the tunnel drops. We have not verified it for Netis's stock firmware. If it matters to you, turn it on in the app on your devices: how to do that.
Netis models and firmware: where WireGuard exists
Per the manufacturer's data as of September 2026.
- NX31 (Wi-Fi 6, AX3000) — a WireGuard server and client from firmware netis-NX31-V4.0.250322.143107, dated March 31, 2025; the next one is V4.0.250829.151908 from September 4, 2025. The product page says: "WireGuard server and WireGuard client provide data protection and a secure connection to the enterprise network".
- NX30 V2 — firmware NX30V2-V4.0.250822, published January 6, 2026: "Added WireGuard client and server".
- NX62 — per the review on Netis's site: OpenVPN and WireGuard, server and client.
- The rest (older N series, WF2xxx, MW series) — WireGuard is not mentioned in the firmware descriptions; you cannot set up a VPN for them with the stock firmware.
- AmneziaWG — on no model: there are no mentions in the firmware descriptions or product pages.
- OpenWrt: NX31 — release 25.12.5 (supported since 24.10.1); NX30 V2 and NX32U — 25.12.2 (since 25.12.0); NX62 — 25.12.5 (since 25.12.0); N6 — 25.12.2 (since 23.05.6); WF2881 and M1200AC — 25.12.2 (since 17.01); WF2770 — 25.12.2. Installing on the NX31 requires replacing the bootloader through SSH and TFTP. The list is in the OpenWrt device table, NX31 page.
FAQ
Does Netis have AmneziaWG? No. Stock firmware only has WireGuard; AmneziaWG only appears on Netis with OpenWrt and third-party packages. In Russia, the options that work are the app on your devices, or a second router with AmneziaWG behind the Netis.
Which file from my account should I take? The plain WireGuard variant. A Netis router will not accept the AmneziaWG file — it has obfuscation parameters that WireGuard does not know.
Can I set up the VPN through the BeeWiFi app? No: per the reviews on Netis's site, OpenVPN and WireGuard only exist in the router's web interface.
Will a VPN slow the router down? The NX31, NX30 V2 and NX32U have an MT7981 CPU: on OpenWrt it gives 350–393 Mbps through a WireGuard tunnel, per measurements from the OpenWrt forum. The N6, WF2881 and M1200AC have an MT7621, at 80–105 Mbps. There are no measurements for Netis's stock firmware.
Can I route only the TV through the VPN? We have not checked this for Netis's stock firmware. A reliable way is to connect the TV to a second router with a VPN and leave the rest on the Netis.
Does the router count as one device? Yes: to NvoVPN it is one configuration, no matter how many devices sit behind it. A subscription covers up to five configurations.
Related guides: VPN on a router: general guide and pitfalls · VPN on Keenetic: AmneziaWG out of the box · AmneziaWG vs WireGuard: what is the difference · A router from your provider: how to add a VPN
Ready to connect?
Download the app and sign in — you are protected. The free trial starts by itself, no card needed.