CLI Usage¶

nym-vpnc is the command-line client. It talks to the nym-vpnd daemon over gRPC — everything LuCI can do goes through the same commands.

Connection¶

nym-vpnc connect-v2
nym-vpnc disconnect
nym-vpnc status

Gateways¶

nym-vpnc gateway get
nym-vpnc gateway list mixnet-exit          # or mixnet-entry, wg
nym-vpnc gateway set --entry-country DE --exit-country CH
nym-vpnc gateway set --exit-id <base58-gateway-id>
nym-vpnc gateway set --entry-random --exit-random

Account¶

nym-vpnc account set "your twenty four word mnemonic phrase here"
nym-vpnc account get
nym-vpnc account forget
nym-vpnc account rotate-keys

Tunnel settings¶

nym-vpnc tunnel get
nym-vpnc tunnel set --ipv6 on --two-hop on
nym-vpnc tunnel set --killswitch off       # allows WAN fallback and carve-outs
nym-vpnc tunnel set --killswitch on

Inbound services¶

Keeps port-forwarded services reachable from the WAN while the kill-switch is on. The port is the WAN-side one; LAN-hosted services also need a port forward in Network → Firewall → Port Forwards. Full mechanism in Inbound Services.

nym-vpnc inbound list
nym-vpnc inbound add tcp:443 --label "HTTPS"
nym-vpnc inbound add udp:51820
nym-vpnc inbound del tcp:443

DNS¶

nym-vpnc dns get
nym-vpnc dns set 1.1.1.1 9.9.9.9
nym-vpnc dns enable
nym-vpnc dns disable
nym-vpnc dns clear

Ad blocking¶

nym-vpnc ad-block get
nym-vpnc ad-block set enabled
nym-vpnc ad-block set disabled

LAN policy¶

Whether LAN devices can reach each other and local services while the VPN is up.

nym-vpnc lan get
nym-vpnc lan set allow
nym-vpnc lan set block

Network¶

nym-vpnc network get
nym-vpnc network set mainnet                # or canary

Daemon¶

nym-vpnc info

/etc/init.d/nym-vpnd start
/etc/init.d/nym-vpnd stop
/etc/init.d/nym-vpnd restart
/etc/init.d/nym-vpnd status

/etc/init.d/nym-vpnd enable                 # start on boot
/etc/init.d/nym-vpnd disable

procd respawns the daemon automatically if it dies. On stop, the init script disconnects and tears down the firewall table — including when the daemon is hung and cannot be asked nicely.

Configuration¶

Settings live in /etc/config/nym-vpn (UCI, preserved across firmware upgrades). Read it if you like:

uci show nym-vpn

Write it through nym-vpnc or LuCI, not by hand — the daemon holds its own copy of most settings and editing UCI directly will not reach it.

Logs¶

logread -e nym-vpnd
logread -e nym-vpnd -f