` with a secure password to access the Wi-Fi network.
sudo nmcli device wifi hotspot ssid <NAME> password <PASSWORD> ifname wlan0
\
**Example**
sudo nmcli device wifi hotspot ssid meshnet-wifi password s3cur3-w1f1-p4ssw0rd ifname wlan0
4. Verify that the new network has been created with the `nmcli connection` command.
Your nearby devices should now see the newly created Wi-Fi network with the custom name.
This network will share your router device’s internet connection. All you need to do is start routing traffic, and NetworkManager will take care of all the network forwarding to begin transmitting the VPN connection. Continue to the [Set up Meshnet](#set-up-meshnet) section below for further guidance.
## Set up Meshnet
With the networking configurations taken care of, you can install NordVPN and enable Meshnet to finalize the setup.
### Install NordVPN
Follow these steps to install NordVPN on your Linux router device:
1. Download and install the NordVPN Linux client by running the command below.
sh <(wget -qO - https://downloads.nordcdn.com/apps/linux/install.sh)
2. Log in to your NordVPN account.
### Log in to NordVPN
You can log in to your NordVPN account without the use of a graphical user interface (GUI) in two ways:
* By running the `nordvpn login` command with the `--token` flag
* By running the `nordvpn login` command with the `--callback` flag
Instructions for both methods are outlined below.
Log in using a token
1. On any device, log in to your [Nord Account](https://my.ndaccount.com/) dashboard and select the **Meshnet (by NordVPN)** card.
2. Under **Advanced settings**, select **Get access token**.
3. Enter the verification code sent to your email address.
4. Under **Access token**, click **Generate new token**.
5. In the dialog that appears, choose either a token that expires in 30 days or one that never expires, and then select **Generate token**.
6. Select **Copy and close**.
7. On your router device, run the `nordvpn login --token ` command, replacing `` with the copied token.\
\
**Example**
nordvpn login --token 3fe460cefb8dcf1478c92e45908cec9f9bdbadf7a456a6dfb35dc2c58ee39d5b
You should now see a welcome message.
Log in using a URL
1. Run the following command:
```
nordvpn login
```
2. Open the provided link on any device in your browser.
3. Complete the login procedure.
4. Right-click the **Continue** button and select **Copy link address**.
5. Run the `nordvpn login --callback ""` command, replacing `` with the previously copied link address.\
\
**Example**
nordvpn login --callback "nordvpn://login?action=login&exchange_token=MGFlY2E1NmE4YjM2NDM4NjUzN2VjOWIzYWM3ZTU3ZDliNDdiNzRjZTMwMjE5YjkzZTNhNTI3ZWZlOTIwMGJlOQ%3D%3D&status=done"
You should now see a welcome message.
{% hint style="info" %}
**Note**
If you encounter the error message `Whoops! Permission denied accessing /run/nordvpn/nordvpnd.sock`, enter `sudo usermod -aG nordvpn $USER`. Then, reboot your device and log back in.
{% endhint %}
{% hint style="success" %}
**Tip**
To preserve your token when logging out of the NordVPN app, use the `nordvpn logout --persist-token` command. Otherwise, your token will be revoked.
{% endhint %}
### Enable Meshnet
Upon logging in, you can [enable Meshnet on Linux](https://meshnet.nordvpn.com/getting-started/how-to-start-using-meshnet/using-meshnet-on-linux#enable-meshnet-on-linux) by typing this command:
{% code overflow="wrap" %}
```bash
nordvpn set meshnet on
```
{% endcode %}
To check your server’s Nord name and the Meshnet IP address, enter the following command:
{% code overflow="wrap" %}
```bash
nordvpn meshnet peer list
```
{% endcode %}
**Example**
You will also see your Meshnet peer devices with their [corresponding permissions](https://meshnet.nordvpn.com/features/explaining-permissions).
## Share the VPN connection
{% hint style="info" %}
**Note**
Ensure that the device you want to route traffic through has granted your device the [traffic routing permission](https://meshnet.nordvpn.com/features/explaining-permissions/traffic-routing-permissions).
{% endhint %}
Lastly, you should modify the app’s settings to allow connections from local devices and establish a traffic routing connection to share it with nearby devices.
1. On the router device, add the IP range of your new wireless network to the NordVPN firewall’s allowlist.
* If you set up the Wi-Fi network using RaspAP, use this command:
nordvpn allowlist add subnet 10.4.0.0/16 #For RaspAP
* If you configured the hotspot using NetworkManager, run the command below:
nordvpn allowlist add subnet 10.42.0.0/16 #For NetworkManager
2. To retain local access to the router device, add your local network’s IP range to the allowlist with the following command, where `` is your [local area network](https://nordvpn.com/blog/what-is-lan/) (LAN) subnet:
nordpvn allowlist add subnet <network>
\
**Example**
nordvpn allowlist add subnet 192.168.0.0/16
3. Locate your VPN server device's Nord name using the `nordvpn meshnet peer list` command.
4. Initiate a traffic routing connection by running the following command, replacing `` with your VPN server’s Nord name.
nordvpn meshnet peer connect <server>
\
**Example**
The configuration is now fully complete. All devices connected to your Linux router’s Wi-Fi network will gain the public IP address of the traffic routing VPN connection.
