How to Disable VPN for Router Access
VPN software tunnels all your network traffic through an external server, which makes local addresses like 192.168.1.1 unreachable. Disconnecting the VPN for the duration of your admin session is the only fix.
Why a VPN Blocks Router Access
When a VPN is active, your device sends all network traffic through an encrypted tunnel to a VPN server - typically in another city or country. Local network traffic to addresses like 192.168.1.1 is also captured by this tunnel and sent outside your home network, where it fails because 192.168.1.1 is a private address that does not exist on the public internet.
Some VPN clients have a split tunneling feature that can exclude local network traffic from the tunnel, allowing you to access 192.168.1.1 while the VPN protects your other traffic. If your VPN supports this, it is the cleanest solution. Otherwise, disconnect the VPN, make your router changes, and reconnect.
Types of VPN That Cause This Problem
NordVPN, ExpressVPN, ProtonVPN, Mullvad, Surfshark, PIA - all standard consumer VPN apps capture local traffic unless split tunneling is configured. Disconnect via the app.
Cisco AnyConnect, Pulse Secure, GlobalProtect. These often capture all traffic by design. If you need to access your router while on a work VPN, disconnect the work VPN first or ask IT about split tunneling.
Opera's built-in VPN, Brave's Tor mode, Chrome/Firefox VPN extensions. These route only browser traffic but can still block access to local IPs in the browser. Disable the extension for the router session.
System-level or browser proxy settings can also block local IP access. Check Windows: Settings → Network → Proxy or macOS: System Settings → Network → Proxies. Ensure no manual proxy is configured.
How to Disconnect and Access Your Router
Open your VPN application and click Disconnect or Turn Off. Do not just pause it - some VPN clients in pause mode still affect routing. Wait 5 seconds for the network to restore normal routing.
Open your browser's extension or add-on list and disable any VPN or proxy extensions. In Chrome: Menu → Extensions → toggle off any VPN extension.
Open an incognito window or a fresh tab. Type http://192.168.1.1 with the http:// prefix in the address bar. The router login page should now appear.
Log in and make whatever configuration changes you need. Once done, reconnect the VPN as normal. Your router configuration changes are saved - the VPN does not affect them.
Some commercial VPNs support split tunneling, which lets you route local network traffic outside the VPN tunnel while the VPN protects other connections. If you frequently need to access your router while connected to a VPN, check your VPN app settings for a split tunneling or local network access option.
Frequently Asked Questions
Can I configure a VPN split tunnel so I never have to disconnect?
Yes, if your VPN client supports it. In NordVPN, go to Settings → Split Tunneling and add your browser or enable "Allow local network access." In ExpressVPN, the split tunneling option is under Preferences → Split Tunneling. In ProtonVPN, look for the "Allow connections to local network" option in the connection settings. Note that corporate VPN policies may prevent this.
I disconnected the VPN but still cannot reach 192.168.1.1 - what else could it be?
After disconnecting a VPN, the routing table sometimes takes a few seconds to fully restore. Try waiting 10 seconds then test again. If still failing, try using Command Prompt on Windows to run ipconfig /release then ipconfig /renew - this forces your network adapter to re-request its configuration from the router, clearing any stale routing entries left by the VPN.