Firmware
OpenWrt 24.10 or 25.12. Avoid 21.02 / 22.03: they are outdated. The stable line is 24.10, the newer one is 25.12.
Router: OpenWrt and Passwall2
vibe.VPN works over VLESS / GRPC / REALITY / TCP. On a router this is installed through OpenWrt and Passwall2, not OpenVPN. After setup, VPN covers every device on the home network.
What you need
Hardware
From 256 MB RAM, 512 MB is better. For Xray/sing-box, 128 MB is often not enough. Leave about 20-30 MB of flash free.
Access
LuCI, SSH and a subscription link from the vibe.VPN cabinet. The router counts as one device in the limit of 20.
Install Passwall2
OpenWrt 24.10 (opkg)
Download luci-app-passwall2 as an .ipk from the official releases plus dependencies for your router architecture.
opkg update
opkg install luci-app-passwall2_*.ipk
OpenWrt 25.12 (apk)
From 25.12 the package manager is apk. Take .apk files from the official releases, not ipk, and install the package for your router architecture.
apk add --allow-untrusted luci-app-passwall2_*.apk
Take packages and cores (xray-core, sing-box) only from Passwall2 releases. The architecture must match the router. If opkg update fails after adding a feed, check the OpenWrt version and CPU.
Connect vibe.VPN
1. Add a node
In LuCI open Services → Passwall2. Import the subscription link from the cabinet or paste a VLESS node. Do not change UUID, SNI or transport manually if the cabinet already gave you a ready profile.
2. Enable the proxy
Select the node, enable Passwall2 and check that LAN traffic goes through it. Enable autostart if needed.
3. Check DNS
DNS should go through the VPN, otherwise leaks are possible. After enabling, open an IP check website from a phone on Wi-Fi.
If it does not work
Common causes
- Not enough RAM or flash space
- Wrong package architecture
- Mixed ipk and apk packages
- Firewall/DNS not going through Passwall2
- The profile was not updated from the cabinet
What not to use
The vibe.VPN cabinet does not issue OpenVPN or WireGuard. Packages like luci-app-openvpn are not needed for this service. OpenClash only makes sense if you build a Clash subscription yourself; for VLESS from the cabinet, Passwall2 is easier.
FAQ
Only if it runs OpenWrt or a compatible build with Passwall2. VLESS cannot be installed on most stock brand firmwares.
No. It is one subscription device. Phones and PCs on home Wi-Fi go through it and do not use extra slots unless they connect their own client.
Some steps are done in LuCI, but packages are usually installed over SSH. If you are unsure, send support the router model and OpenWrt version.
Need help
Send the model, OpenWrt version and a Passwall2 screenshot. We will suggest packages for your architecture.