Use Home IP Address While Traveling with GL.iNet AX Slate, Opal, and WireGuard® VPN

[@justinreviewsandrepairs5246]

Helpful Links Port Forwarding Help: kzbin.info/www/bejne/gqulkmmBqMt6b6M Captive Portal Tutorial: kzbin.info/www/bejne/amfReGujndJopck Test DDNS: justinpruett.com/glinet-troubleshoot.php Update: Many cable routers seem to struggle with TCP, please select UDP only in the Port Forwarding rule instead of both. Update: The Beryl AX came out right after this video was published, it is a much better option than the Opal in a price range that balances price and performance. Need Support? I try to answer every email and comment for free. Please see my troubleshooting page for common issues and send me an email if necessary: justinpruett.com/glinet-troubleshoot.php Want 1 on 1 Support? GLiNet has partnered with RemoteToHome to provide complete remote setup and can even handle more advanced cases not covered in the video. RTH has provided me a 5% Discount Code as well: JustinRR5 remotetohome.io/

[@jamiec2852]

What do you do once you're in your new location to test and connect? Can you make a video about this

[@210thsrob5]

This did the trick!!! I didn't match isp assigned ip! YOU WERE EXCELLENT!! APPRECIATE YOU AGAIN!💯💪🏿🙏🏿

[@russhewett514]

If my home internet has a static ip, what steps would I use? Thanks

[@Fr3shProduce]

@@russhewett514good question.

[@macuser1232]

@@russhewett514 you simply don't use Dynamic DNS. Everything else is the same.

[@chuckmarrs8181]

I want to comment how Justin is very responsive and kind to answer questions. From all of us, Thank You

[@justinreviewsandrepairs5246]

Thank you, I appreciate your support! 🙏

[@W.O.V.E.N]

110% He's Awesome!!!

[@Speatto]

Just wanted to share that your videos took me from essentially 0 knowledge on VPNs to successfully working remotely in Thailand for the past 4 months with no issues. Using 2 Slate AX as my setup, thanks for the help!

[@justinreviewsandrepairs5246]

Wow! Thank you for sharing! Thailand doesn't have the best Internet infrastructure according to WonderShare Latency data so it is good to hear it is working there! Thank you!

[@nizzar2003]

So nice to hear that it works in Thailand, could you possibly test and see how the latency/ping is and preferably in which city do you test this in Thailand? I am considering working from Thailand with softphone via VPN and am very dependent on a good latency :(

[@Speatto]

@@nizzar2003 I run my home server from the UK, in Koh Samui the ping has been around 200-300ms which is obviously quite bad but I was able to take calls, there was definitely some slight delay but it was manageable. Have done video calls with no issue also.

[@nizzar2003]

​ @Speatto Thanks for sharing, I think 200-300ms can be as you say manageable, I'm thinking of moving to Phuket or Bangkok depending on where the network is more stable and which allows me to carry out my work with customer service via softphone without a large latency/ ping. @Speatto Do you also have problems with a lot of power outages considering rainy seasons or what is it like in Koh Samui?

[@Speatto]

@@nizzar2003 power outages have happened yes, I’d say 2-3 times in the last 6 months. There are coworking spaces in al lot of areas (there will be many in Bangkok) which can be useful. I’d imagine the internet stability would be similar in the main areas such as Phuket/Bangkok. I was in Phuket for a few months last year and it’s great, I will move there soon. If you’re more of a city person then Bangkok is also a great place and probably the best for work/opportunity.

[@adewale3157]

I just want to want to say MANY THANKS Justin! For your time and efforts you put together to make this video tutorial. I got my GL-INET routers talking to each other.

[@justinreviewsandrepairs5246]

Great to hear! Thank you for the comment! Comments like this keep me going!

[@kstarluvsall]

This is amazing! I was trying to find a step by step video and couldn’t find anything until this. This is perfect! Ty so much! The only reason I’m doing this is because my boyfriend is in a different state for 9 months and now I can be with him 💕

[@justinreviewsandrepairs5246]

Glad it helped! Thank you!

[@jd20610]

Thanks for this great tutorial. I purchased both of the items you used in your demo and the WireGuard service works perfectly. I have used it both domestically in the US and internationally with no problems. I updated the firmware on the home Opal device today, and was warned that the process would remove custom settings, so I had to reconfigure the WireGuard server. The update added a nice feature to the configuration process where you can choose to "Use DDNS Domain" so that it generates the script including the DDNS address, so you no longer need to cut and paste that information manually.

[@justinreviewsandrepairs5246]

That's great to hear! GLiNet does a great job making things easier to use! Thanks for sharing!

[@chrismedeiros3201]

Hello Justin. Thank you for this very useful, step-by-step guide. I appreciate your style of teaching. With your help on the nuts and bolts of this operation, my wife won't feel like she's missing out on any of her favorite streaming things while we're visiting Europe.

[@justinreviewsandrepairs5246]

Thank you! Yes, that is another use for the VPN! But I was pleasantly surprised by some of the shows available in other countries as well! Back at home you can also use it to share streaming service accounts by using one IP Address at two places.

[@chrismedeiros3201]

@@justinreviewsandrepairs5246 Unfortunately, I'm running into the same issue as many of the other recent commenters. Unable to start the VPN client on the 1800. The log shows the same errors others are having. 🙄I'll have to call GL Support to see if they can help.

[@justinreviewsandrepairs5246]

Feel free to email me at [e-mail] if they are unable to help. The most common problem is the Port Forwarding step which is different for everyone based on who their Internet Service Provider is. The second most common problem is trying to test using the same Internet connection as the server, which is not possible since both devices are already on the home network.

[@Yld.Thigertz]

Thank you so much!! This method is amazinggg! So I just wanna confirm with this method there is no need for a VPN provider like Nord right?

[@chrismedeiros3201]

@@Yld.Thigertz I did not use any 3rd party VPN. Only the WireGuard VPN built into the Slate AX and Opel devices.

[@ugomma]

It worked!! It took a while but only because of 2 majors issues #1, I didn't set up port forwarding correctly which required a call to my ISP (really take your time with this one). #2 I inadvertently put both routers on the same Wifi SSID. but switching one of the router to the 5G network, it worked like a charm! Thank you so much for uploading this Justin!

[@justinreviewsandrepairs5246]

Port Forwarding is tricky and most ISP routers make it even harder, some even give it a different name! Glad you were able to get it all working though! Thanks for the comment!

[@chucklarry5986]

Hey ugomma, any chance you can show me how you tackled the 5g issue? I may be having the same issue. Can’t seem to run the client

[@luxsuxx4167]

What do you mean set port forwarding up correctly?how do i know if im doing it correctly?

[@helmgimble1258]

Hey Justin, just wanna say thank you. I can't imagine how much time this guide saved me. All up and running first go, who woulda thought?! You're a real chief!

[@justinreviewsandrepairs5246]

Thank you! Comments like yours keep me motivated!

[@Ttamh10]

Could you please share how you got the public IP address?

[@jitendrajoshi1456]

Thanks, Justin, for the guide and your quick replies about the network setup. You really made everything so much easier-I truly appreciate it!

[@ds1svg]

Thanks a million, this is the only video that I found that made sense and was actually helpful with no added long talking.

[@justinreviewsandrepairs5246]

Thank you!

[@SunilKumar-cp7qk]

Justin Thank you very much for this video. I have zero knowledge on networking and it was difficult to understand initially, but after watching it few times I was able to set it up. This solved a major hurdle i was facing all these days. And this is the only video which clearly points out what to do. Thanks again for your effort.

[@justinreviewsandrepairs5246]

Thank you! One major change since the video was made is the "Block Non-VPN Traffic" is no longer on by default in the newer firmware. I think it should be turned on for better security: docs.gl-inet.com/router/en/4/faq/block_no_vpn_traffic/

[@22missp]

Thank you Justin. This has been a great help. I travel for work and have always wanted to setup a VPN with my home network. Got the same two routers and the system works great!

[@justinreviewsandrepairs5246]

Glad to hear! Thank you for watching and commenting! If there are any other tech things you have been wanting to do, let me know, I might be able to make a video about it!

[@RBzee112]

This video is great. I use the Flint as my home router and Beryl AX as my travel router. Following your instructions made setup super easy.

[@justinreviewsandrepairs5246]

Glad it helped!

[@karimlonguar5826]

Why did you use Flint?

[@ScorpioOnTheGo]

How many travel routers can connect to flint?

[@BillAnt]

​@@karimlonguar5826 - The Flint has a better processor, more memory, more ethernet ports, and 4 antennas, therefore it's faster and better for only $100 bucks. They just came out with the Flint-2 ($149) as an upgraded version.

[@crystalrose1967]

Hey I have those same router and would needs some additional help with mines

[@ok9ok3ok6ok]

You deserve an award for this video because you have steps that others leave out. Thanks!

[@justinreviewsandrepairs5246]

Thank you!

[@rickygarbaj]

Just re-watched and can't thank you enough! Got everything setup so now I can work on the go ;)

[@by9diz8]

Any updates? How did it go?

[@rickygarbaj]

@@jonyvillanueva I only did it once and did not get caught. I work for a different company now where it’s no issue where I work and they actually encourage work from anywhere for up to 4 weeks a year!

[@TitinaOF]

Jason, you are the best! I have different routers but the way you explained this makes it simpler to follow for other setups. I must admit I watched the videos 50 times during the last week, read through every comment and I was about to email you when I had a last idea and worked! the dot is green now!! thank you

[@justinreviewsandrepairs5246]

Thank you! And thank you for increasing my view count! 😄 Feel free to comment or email if you do run into any problems!

[@ernestomart1]

How is everything working?

[@TitinaOF]

Really good. Not a problem at all. I have not had to do anything else after I set it up the first time

[@fitfamz]

@@TitinaOF Hi! I am trying different ways to reach viewers from other countries on TikTok by changing the IP like this. What is your situation at the moment? What do you use that State AX and Opal setup for? What's your opinion? Could something like this that I am trying work with a setup like this?

[@chrismedeiros3201]

Just wanted to let you know your help here was instrumental in allowing us to access all our U.S. accounts while in Portugal. We were able to access everything in the U.S. as if we were there, at home. It worked flawlessly with the GLinet AX Slate and Opal routers. Took a little while to get it set up properly before we left, but with your help, it worked great in Portugal. We plan to head back there next year and this gear will be going with us again! Thank you.

[@justinreviewsandrepairs5246]

Thank you for sharing! I am glad it worked well! 🙏 Thank You!

[@__5036]

I used Brume 2 for Wireguard Server and Beryl AX for travel router, works like a charm. Like others said here - use UDP instead of TCP/UDP, just UDP.

[@justinreviewsandrepairs5246]

Thank you for sharing!

[@Loscraft]

I have the same setup. Can you access the Brume Admin page while being connected to the berry client? Because I don't know how to make that work

[@mariammusisi5278]

Hello Thanks for sharing.. how about your work phone? Any ideas of how to use your work phone ?

[@sjarouge]

The most useful video on internet! thank you so much Justin!! I'm going to order Slate AX X2. Saludos desde Argentina!

[@justinreviewsandrepairs5246]

Glad it was helpful! Thank you!

[@sjarouge]

Hi ​@@justinreviewsandrepairs5246 ! I was able to create my own VPN at home, thanks again!! I wanted to ask you about this: I have a friend in Spain who set up a VPN using Open VPN, but on Linux. He shared an OVPN file (server), but it's not working on my Slate AX (client). Do you think it is possible to make it work?

[@TheDicampo]

Lograste hacerlo , yo no he podido

[@sjarouge]

@@TheDicampo Sí, lo tengo funcionando

[@philipthomas3503]

Thank you so much for this, because of you I’m able to spend time with my girlfriend abroad where otherwise we would’ve been apart for months

[@justinreviewsandrepairs5246]

Glad it helped! Feel free to name your children after me! 😜

[@bolao9]

Justin, I apologize for my ignorance on the terminology and understanding with this stuff. You have been super helpful and I hope I did not come across rude with my last comment. I will just start over and go through the setup of each travel router and see what happens. Thanks again for your replies and content.

[@justinreviewsandrepairs5246]

No need to apologize, I was just having a hard time following along with the comment. Feel free to email me and include screenshots to make it clearer: [e-mail]

[@AdmobOfficial]

Thank you so much. I wanted to highlight one thing: I followed the whole video and still faced an error when I was trying to connect(turn on) the VPN client. The reason behind that was my second router was not connected to the internet. So, if you are facing an error when you turn on the client after configuration, make sure your device is connected to the internet (similar to how you connected the first device to your home internet). Thanks.

[@MariaUriellaAlfaro]

facing the same problem do we connect the slate AX to our laptops or an actual ethernet router??

[@zahscr]

Hey Justin! I just got this setup working using the Slate AX for the client and Brume 2 as the server. Thanks for putting this together, of all the resources online this video was the most helpful. The biggest headache for me was actually getting the port forwarding to work on my ISP modem because apparently its software sucks lol. Anyways, I just wanted to say thanks for this super comprehensive video. If you ever need a testimonial or advice with anything data/software engineering related (that's what I do) don't hesitate to ask.

[@justinreviewsandrepairs5246]

Thank you! I am a software engineer too! Email me your discord or Google Hangouts if you want to talk shop, I am full stack. [e-mail]

[@josieicaza7031]

Hey @ZahScr , any tips for getting the port forwarding to work?

[@zahscr]

@@josieicaza7031 for me it was just crappy software in the modem. Make sure that you’re setting up port forwarding on the correct device. For example, I had a modem which was the internet gateway and a separate router for wifi, which meant I needed to set up port forwarding on the gateway modem and connect the gl.Uber to that. The other thing is try restarting whichever device is doing the port forwarding after you set it up and give it a few minutes. If that doesn’t work then do a factory reset (make sure you can recreate whatever configurations you had) and then try setting up the port forwarding again - also with a restart after. Hope you get it working!

[@josieicaza7031]

Thank you!!

[@shinejsticwong5806]

@@zahscr did it need a public Ip ? Thanks

[@777pm]

Justin! Thank you so much for this video. I watched several other videos that left out so many steps and had been frustrated for several days. I finally decided to watch this video and low-and-behold, now my Opal is able to connect to my Flint2 Router. And it was able to connect to the Flint through the same AT&T Router IP! I was trying to use my phone’s hotspot but that was not working. Thanks again fellow Dallasite!

[@justinreviewsandrepairs5246]

Glad it helped! Thank you for sharing! If you ever run into problems please reach out!

[@777pm]

@@justinreviewsandrepairs5246 Hey Justin. After successfully connecting my Opal1200 to my Flint2 Router via WireGuard that's hardwired my AT&T ISP Router, I decided to get a backup Slate AX. I successfully setup and connected the Slate AX via WireGuard yet now the Opal won't connect. I should be able to have both of them connected at the same time, yes?

[@justinreviewsandrepairs5246]

Did you generate a new configuration for the Slate AX? Each configuration file can only be used once but you can generate a new one and use both devices at once.

[@777pm]

Yes I generated a new config file and uploaded that to the Slate AX. It has a different IP than the Opal.

[@stephanienorton5289]

Seriously I wouldn’t have been able to figure it out without this video and your help! Thank you so much

[@justinreviewsandrepairs5246]

Glad it helped, thank you!

[@sstee1314]

First of all, wow thank you so much for this video! It’s taken me days to find something like this. Thank you for your responses to all questions asked as well. You’re awesome for doing this! I will be setting mine up the way you did it here and I’ll be back to let you know how it goes :)

[@justinreviewsandrepairs5246]

Thank you! Let me know if you run into any problems!

[@DanielleC-y6h]

You are the genius and lifesaver I'm looking for. I have a trip coming up and was worried that internet access outside the US would be banned. I just placed the order through your link, and I can't wait to set up the routers for the trip.

[@justinreviewsandrepairs5246]

Thank you! Let me know if you run into any problems! [e-mail]

[@DanielleC-y6h]

@@justinreviewsandrepairs5246 Hi Justin, I just emailed you about a Port Fowarding question. The subject line is Port forwarding question from Danielle Chen. I tried every steps but still could not connect the two devices. However, openVPN works fine on Slate AX. It just won't connect to the Beryl AX.... Please help!

[@halogeorge2]

Hey man thank you so much been working for a week from Colombia .. I'm like the happiest man alive 😂

[@TheDicampo]

Hola gorge, soy también colombiano y necesito hacer este puente, podrías ayudarme a hacer el set up de los routers, ta compre los dos pero no se como se instalan, cualquier ayuda le agradecería! Bendiciones, si algo nos comunicaremos por WhatsApp

[@TheDicampo]

Perdona q insista es q me urge ir a Colombia y mantener mi trabajo, cualquier ayuda y si hay algún cobro por el tutorialme hace saber, quedo atento. Thank you

[@TheDicampo]

No ayuda a los paisanos 😢

[@M.Isabelp031]

Hi Justin, thank you for the information! I am planning on buying this router, but I have a quick question. I need to travel to South America for three weeks, but my employer does not allow me to work from there, and my computer also has a VPN set up. Can I use this VPN router to set up a US location and connect to my work VPN from there? I am new to this information, so I am trying to understand how I can do it. Thank you!

[@justinreviewsandrepairs5246]

Yes, the two routers basically make a bridge from wherever you are back to your house. However, there are some speed and latency issues with video calls or anything high bandwidth like that. Also, if your home Internet goes down while you are away, you are out of luck. So be sure to test as much as you can before you go. Safe travels and thanks for watching!

[@ratimes8k]

@@justinreviewsandrepairs5246this is the same question I had ! So even if I my work computer has its own company built in vpn…I can still by pass this by telling the vpn that my IP address is in my “ home address “ by following your instructions? Just wanted to double confirm this information !!! Please let me know !!! And thanks once again you are the best !!!

[@zahscr]

@@ratimes8k yes, you can bypass it this way.

[@ratimes8k]

@@zahscr aye how can I set up the vpn using a web link from the hotel I am staying at…for some reason I can’t get it done any help

[@alfredocalzadilla7251]

This is by far the best instructional video on how to get it done. I just followed all of your steps in this and the other Slate video and was able to get it done with no issues. The only difference is that I have beryl instead of Opal. Anyway, thank you!!

[@justinreviewsandrepairs5246]

Thank you! Glad it helped! Please be sure to double check that "Block Non-VPN Traffic" is enabled on the Travel Router VPN Dashboard page under "Global Options" as it may not be on by default in the latest firmware! 🙏

[@alfredocalzadilla7251]

@@justinreviewsandrepairs5246 Yes, I just checked and I did block non-vpn traffic. Good point. Thanks!

[@hungariannerd8445]

this is how we work from NorthAmerica while living in Thailand

[@spiritvateme]

How is it working for you buddy all.smooth

[@felixb12]

How the internet speed?

[@rochakkunwar953]

Internet speed sucks when having two router hotspot

[@hungariannerd8445]

​@@b.n.y.a1599 i made a tutorial on my channel - how to set up a vpn server and vpn router. in that video towards the end, i show a button that ensures your connection stops working whenever the VPN stops working for whatever reason.

[@olgamartinez8377]

Do you work from your own computer or one provided by your employer?

[@eg6028]

Thank you thank you thank you! You made what was quite a complex challenge (for my low technical aptitude) so so easy to follow! I got hung up on setting the port forwarding for AT&T because I missed a step bit after that it worked like a charm

[@justinreviewsandrepairs5246]

Port forwarding is tricky because every ISP router is different, glad the video helped though!

[@arjunreddy7203]

Can you PM me how you did port forwarding with AT&T because I wasn't able to set it up?

[@nikkil1985]

Work in Vietnam and use my home in americas ip address with this method. Speed is lower but it works

[@justinreviewsandrepairs5246]

Thanks for sharing! Do you have Fiber Optic Internet at home? The distance between the two locations introduces higher latency, so using the lowest latency Internet will provide the best results.

[@nikkil1985]

@ I have spectrum

[@raya741]

Does this work even if my work needs me to sign into one of their VPN?

[@justinreviewsandrepairs5246]

Yes, the Travel Router establishes its own VPN connection so you can continue to use your work computer as if you were home, including their VPN service.

[@LocdnessMomster]

Is there a Killswitch to stop internet if it isn't pulling the residential IP?

[@justinreviewsandrepairs5246]

Yes, on the Client go to Global Options and enable "Block Non-VPN Traffic"

[@LocdnessMomster]

@@justinreviewsandrepairs5246 thank you so much! You sincerely don't understand how helpful this is thank you so much!

[@justinreviewsandrepairs5246]

Glad it helped! Thank you! 🙏

[@miguelpetrarca5540]

Hi Justin! In the screen show in minute 5:31, I have a tab that says Profiles and has this text: Each client device that connects to the WireGuard server requires a unique peer configuration. You need to create a separate configuration for each client device; each configuration must specify a unique client IP. I am unsure what to do about this. It also has an option to Add a profile

[@justinreviewsandrepairs5246]

From the Server Router you can generate a profile for each Client Travel Router. So if you had three routers and two were to be used as a Client, you would generate a new profile for each one. Never use the same configuration profile on more than one device since it contains unique routing information.

[@nickkoutris4873]

Hi Justin, we did all the steps but we cant get the VPN client connected with Wireguard. The log file keeps telling us that is reloading firewall du to the IFUP of modem.

[@justinreviewsandrepairs5246]

Someone else is having the same problem, I am going to check if new firmware is causing it. If it's not then I wonder if you both have the same ISP causing the problem. I will try to post an update soon.

[@nickkoutris4873]

@@justinreviewsandrepairs5246 We fixed the isuue with support from GL. Instead of choosing "both" in port forwarding, we needed to choose UDP and connect the 1800 in another network than the 1200. Thank you

[@chyfsam]

​@@nickkoutris4873 Hi Nick, I think I hit the same problem as you did. On my Client router, the yellow light is always on the "WireGuard® Client" sign of the admin website. Per your solution, is changing port forwarding from 'Both' to 'UDP' the only change you made to solve the problem?

[@lukewarmgains]

@@nickkoutris4873 this worked for me! I switched the port forwarding from both to UDP. I also connected the repeater with the client wireguard to a different network than the network i was forwarding on (where i had my repeater with the wireguard server). I just used my hotspot to test.

[@peteharvey207]

@@chyfsam Any update on this? I'm having the same issue and changing from 'both' to 'UDP' didn't fix the issue

[@jenniferreid9576]

Hi Justin! I got everything set up just like in this video. However, when I connect my client Slate AX to a public WiFi network outside the home (Starbucks, the library etc.) I get the message " The interface is connected, but the Internet can't be accessed with IPv4 protocol." It works perfectly when I use my mobile hotspot to connect to the client router. Is there something wrong with my configuration? I am worried because I have an out-of-state trip to go on in 2 days, and need this system up and running. Thank you so much for your help! Best regards, Jennifer

[@justinreviewsandrepairs5246]

Hi Jennifer, sometimes public WiFi networks require you to accept terms of use and things like that, it makes the process a lot more time consuming but it can be done: docs.gl-inet.com/en/4/tutorials/connect_to_a_hotspot_with_captive_portal/

[@jenniferreid9576]

@@justinreviewsandrepairs5246 Thank you so much, I realized that this might be the case. For anyone else, I fixed it by updating my client router to version 4.2, which has a new feature that essentially lets you spoof your MAC address by using a custom mac address. I went through the login page on my iPhone and then went into settings, clicked the wifi network I connected to, and then copied down the "Wifi Address". Then I copied that MAC address into the router, and then the wifi connected to the router perfectly. I hope this is helpful for someone!

[@justinreviewsandrepairs5246]

Thank you for sharing!

[@IzzyBradley]

@@justinreviewsandrepairs5246 Hey Justin, I am having the same problem and do not quite understand what to do. I tried to follow the directions that you posted but I was still having issues. It no longer gave me the error message of the internet being accessed, and said that it was connected, however, it did not load any web pages. I also tried to get on my phone hot spot to try that out and it said it was connected but then again, wouldn't load web pages saying that it was not connected to the internet. Could you possibly make a video of you using this system to connect to a phone hotspot or a different wifi network? Just so I could see it visually? Or if not, do you have any guidance? I appreciate this video and your responses so much!! If I can get it working it will be the best thing in the world (and I won't lose my job lol)!

[@thekidblack111]

Just wanted to leave a note incase anyone runs into the same issues I had getting this setup running. I have a Brune2 as the VPN Server and the Slate take with me. I followed all the same steps, including the port forwarding on my main ISP router, except changed the IP to 10.1.0.x/24 instead of the default. After I was able to run the Server on the Brune2 I tested the connection with the Wireguard app, important to note when you're testing the connection turn off wifi and use a separate network like 4G/5G. Once I uploaded the Client config file to the Slate it initially wasn't getting a handshake and connect but I was trying on the same network. Once I had everything configured and I turned on the client outside my home network and the Slate and Brune started to talk to each other as intended. Still need to test more outside my home office but this video is the best tutorial I found on this after reading through many other pages, forum posts and documentation. THANK YOU Justin!!!

[@justinreviewsandrepairs5246]

Thank you! Glad it helped! I noticed more ISP routers are using 10.0.0.x as their Local IP range which can lead to problems with the default WireGuard ®️ IP range, good job catching that!

[@SpunAngel]

Thanks Justin your videos! It looks like for your work remote set up you recommend using the Slate AX router along with a GL.iNet Opal Router. In this videos comments though you recommend using the Slate AX with the GL.iNet Beryl AX instead of the Opal. Another guy on KZbin who makes similar content/how to videos recommends using the Slate AX travel router with GL.iNet Flint 2 router. And another guy on KZbin recommends using 2 Slate AX routers; he says the Slate AX offers faster wireguard speeds than the Beryl. 1 thing is clear - you all recommend the GL.iNet Slate AX router as the 1 to travel with. But which is the best 1 to have at home? The 4 options you 3 guys recommend are a 2nd GL.iNet Slate AX or GL.iNet Opal or GL.iNet Beryl AX or GL.iNet Flint 2. The router modem currently at home is the Xfinity Gateway XB8 (for Xfinity Comcast internet)... What router would be best to use at home with XB8?

[@justinreviewsandrepairs5246]

This video is more than a year old so as new routers come out the best option changes. Currently the Flint 2 would be the fastest option but if your budget is lower then the Beryl AX is an excellent ratio of price and performance. A full list is in the description. Let me know if you have any questions or run into any issues.

[@SpunAngel]

​@@justinreviewsandrepairs5246 I have the Xfinity Gateway XB8 router modem combo at home with Xfinity Comcast internet. I have Xfinity Comcast's largest wifi plan, the Gigabit Extra, which has up to 1200 Mbps. I'm getting the Slate AX router to travel with but I'm not sure which to get for at home - the Flint 2 or another Slate AX router? I'm not sure how to compare them or know which is better for the at home router, can you advice? Thank you!

[@Media4000]

I tried your setup and you were very good at explaining things, it appears to be working with the VPN dashboard showing up and down traffic. Since it is going to a Beryl at the "home" location which also gives the 192.168.8.xx IP it was hard to determine if it really was working. So while doing the speed test I disconnected the client and it stopped the speed test, but I sure can't tell by the IP address. You did very well to help someone actually make this work that is far from qualified. Thanks. I am still questioning my success!

[@justinreviewsandrepairs5246]

Thank you! You can use a website like www.whatismyip.com/ to see what your Public IP Address is before and after connecting to the VPN.

[@JavaDevPL]

Hey Justin, I did port forwarding in my ISP part and also did WireGuard Server Config. After that DNS Test still says that IP adresses are different. I am wondering if CGNAC of ISP can affect port forwarding. And if there CGNAC which will mean my IPV4 address is not unique dynamic, what can I do? I think nowadays all ISPs use CGNAC as of IPV4 range constraint. Anyways I didn’t continue the config till the end I just tested and as DnS test was not successfull stopped

[@bolao9]

Thanks Justin for the comment. Let me give it a try. I exchanged a few msgs with nord, but not getting anywhere with them. I will definitely look up the port forwarding for the xfinity router/modem.

[@justinreviewsandrepairs5246]

Here is the video that shows how to get your IP Address or MAC Address from your travel router for port forwarding: kzbin.info/www/bejne/gqulkmmBqMt6b6Msi=bpljRVvc_0LTJpt8

[@johnbrumfield6212]

Awesome instructions!!!! Exactly what I needed since I already have a router!!! Thanks for the config info especially the port forwarding info!! I have two Slate AX. One for Home and the other for Remote.

[@justinreviewsandrepairs5246]

Thank you! The two Slate AX are an excellent choice. One extra step since the video was made, Block VPN Traffic is no longer enabled by Default, I think it should be turned on: docs.gl-inet.com/router/en/4/faq/block_no_vpn_traffic/

[@shahd85454]

Guys!!! This worked smoothly 🎉 it is the best setup explanation ever , can't thank you enough

[@justinreviewsandrepairs5246]

Thank you! 🙏

[@khanhly-courtleveltennis]

Hi Justin, First, I want to thank you so much for the detailed step by step tutorial. Like most people here I happen to encounter the most common issue - I can’t start the VPN WireGuard Client on the travel router despite setting up the server/port forwarding. Some background, I have Verizon and even after setting up port forwarding, I run the DDNS Test I still have 2 different IP Address and the same warning - from DDNS Domain Resolution is the same as my ISP Public IP, but the WAN Interface Ethernet is still the same one it was assigned initially. Look forward to hearing from you and thanks once again! Edit: Turned out I changed from TCP to Both in the process of Port Forwarding set up and everything started to pick up and worked out fine now.

[@justinreviewsandrepairs5246]

Yes, some people have to select UDP only, but "Both" works for many. Glad everything is working now!

[@khanhly-courtleveltennis]

@@justinreviewsandrepairs5246 Just a follow up question - I expect a big drop in connection speed but what would you estimate the speed to be if I were to be in very long distance (thinking US-Asia Pacific)?

[@justinreviewsandrepairs5246]

You can estimate using the latency values from wondernetwork.com/pings between two cities. If it is above 300 your speeds will drop significantly

[@ricardodiaz8964]

@khanhly-courtleveltennis how were you able to set the port forwarding in Verizon? I'm also using both in the process of port forwarding but it doesn't seem to work .... did you call verizon?

[@systemout-b6i]

I have heard that Advanced IT departments equipped with Deep Packet Inspection (DPI) technology can detect and analyze the WireGuard packet headers within your traffic. any idea how to get over that?

[@justinreviewsandrepairs5246]

Since the company typically has full control of your computer, they could do something like this to determine the trace route is different, but since the VPN is on the Travel Router they won't be able to see the middle part of the transaction. It would still be a level of speculation on their part.

[@systemout-b6i]

I heard that Advanced IT departments equipped with Deep Packet Inspection (DPI) technology can detect and analyze the WireGuard packet headers within your traffic. do you know to get over that?

[@justinreviewsandrepairs5246]

Since the company typically has full control of your computer, they could do something like this to determine the trace route is different, but since the VPN is on the Travel Router they won't be able to see the middle part of the transaction. It would still be a level of speculation on their part.

[@Nobleflex101]

Thanks a lot Justin i do appreciate your quick response i got them all setup and rolling now ready for my trip, thanks alot for your time and effort.

[@justinreviewsandrepairs5246]

Thank you! Once you get connected at your destination, please enable "Block Non-VPN Traffic" from the Client VPN "Global Options" menu for added protection.

[@Nobleflex101]

@@justinreviewsandrepairs5246 thanks a lot for your professional advice i'll make sure to do that.

[@mehrdad5156]

Thank you very much Justin for perfect explanation. The only issue is, when connected directly to internet my internet speed is 20MB download and 15MB upload (using my mobile hotspot), but when connecting to the wiregaurd server the internet speed reduces to 5 MB up and 5 down. I am using GLiNET AX-1800 for my server at home and the AXT-1800 for travel router. I appreciate your help

[@justinreviewsandrepairs5246]

You will always be limited by your slowest connection, that's why if possible you should get Fiber Optic Internet for both ends. Besides Upload and Download speeds, the third factor is Latency. Your HotSpot is likely adding latency which will reduce overall speeds.

[@mehrdad5156]

@@justinreviewsandrepairs5246 Another question. I set this up at home and it worked well. Now I connected my server modem to my friend's home Xfinity modem via cable and I get internet on my server modem but as soon as I turn on the Wiregaurd server, internet get's disconnected. I even tried adding the portforwarding port to my friend's Xfinity app (and turning off advanced security, but the issue still persists). Do you know what could be the issue?

[@mehrdad5156]

@@justinreviewsandrepairs5246 another question. I set this up at home and worked well connecting client to server. Then I connected server modem to my friend’s Xfinity via cable. The issue is I have internet on my server modem until I turn the wiregaurd server on. I soon as I turn wiregaurd server on, internet gets disconnected. I even tried adding the port to Xfinity app in my friend’s phone and turned off advaced security but still not working.

[@mehrdad5156]

@@justinreviewsandrepairs5246 another question. I set this up at home and worked well connecting client to server. Then I connected server modem to my friend’s Xfinity via cable. The issue is I have internet on my server modem until I turn the wiregaurd server on. I soon as I turn wiregaurd server on, internet gets disconnected. I even tried adding the port to Xfinity app in my friend’s phone and turned off advaced security but still not working.

[@justinreviewsandrepairs5246]

Xfinity uses a corporate network address by default which conflicts with the default local address for the WireGuard ®️ VPN Client. You will need to change the default from 10.0.0.1/24 to 10.1.0.1/24 on the WireGuard ®️ configuration as seen here: docs.gl-inet.com/router/en/4/interface_guide/wireguard_server/#setup-wireguard-server

[@abelulloa3970]

Hey Justin thank you for your detailed explanation setting up these routers. However, I ran into an issue, but I was able to fix it by reading the comments. I wanted to share this in case someone else encounters the same problem and needs some help. If you have a Xfinity router at home, please DO NOT use the default IP address for the Wireguard server which is 10.0.0.1. Instead, you canchange it to 10.20.0.X/24. After I did this, my network became more stable with no drops, and it's working smoothly.

[@justinreviewsandrepairs5246]

Thank you for sharing! This is correct! Xfinity routers use a private IP Address range typically used in a corporate environment. You will also need to change your default LAN if your ISP Router is using 192.168.8.1/24

[@antrinh3330]

Hi @abelulloa3979, I have Xfinity as well and when running DDNS Test and it says that the DNS record for this DDNS domain could not be found. Would you be kind to help me?

[@locarnet1965]

Hey Justin thank you for this amazing video! Most detailed out of everything I looked up. I watched multiple times now and sorry for some dumb questions if you don’t mind. 1. With port forwarding between home router and travel router, do we need a VPN subscription like NordVPN? Cuz I looked up NordVPN and they dont allow port forwarding, and also I didn’t see you logging in to anything. 2. What is your Frontier router’s role in this? I saw that you are leaving Opal at home and traveling with Slate AX but didn’t get why you’re adding in Frontier. Thank you!

[@justinreviewsandrepairs5246]

Thank you! 1. In this video you are basically running your own VPN Service, you do not need Nord for this video. There is another video that covers using Nord. 2. Frontier is my Internet Service Provider, they provide me with a router and instead of replacing theirs I added the Opal. If you have Fiber Optic Internet you can probably get the Flint 2 router and replace the ISP router completely. If you have cable, you must use a modem which typically is bundled with a router these days. So unless the GLiNet router is the main router you will have to do the Port Forwarding step. Please let me know if you have any other questions Thank you - Justin

[@locarnet1965]

@@justinreviewsandrepairs5246 hey Justin, thank you so so so much for explaining. The set up worked out perfect for me. The two things that did the trick was first only enable UDP on the home router port forwarding and second change the default IP address 10.0.0.1 to 10.1.0.1 on the stay at home server router. Hope this helps others too. Again thank you!

[@justinreviewsandrepairs5246]

Do you have Xfinity? For some reason their routers use the same IP Address range as WireGuard ®️ which is why you had to change it. Glad you got everything working! Thanks for sharing!

[@locarnet1965]

@@justinreviewsandrepairs5246 exactly I use Xfinity! Don’t mind this extra step and I noticed traceroute that it takes 1 step in my home city before routing to the next steps.

[@neelsbigwheels]

Hi Justin great in depth video!! Just ordered two GL Slate 1800. One will stay in TX and im traveling to Africa in a month. Question 1) what is the best way to bypass (CGNAT) using this method some threads suggest Tailscale? My Isp is starlink unable to port forward.

[@justinreviewsandrepairs5246]

Yes, TailScale and ZeroTier are two common methods. Setting the "Exit Node" from the GUI is not available in Beta yet, so it will require some manual command line setup to complete the install: docs.gl-inet.com/router/en/4/interface_guide/tailscale/

[@sirtipsalot7320]

I had a prior site to site VPN setup with my Flint as VPN home router, main Netgear router, and travel Slate AX router. Posted comments 7 months ago, everything went well, even worked abroad for over a few months and didn't have any issues. I got a new ISP for some fiber speeds, bought my own TP Link wifi 7 router (Archer BE800), and was curious if I could just cut out the Flint as the TP Link has its own VPN client/server support. I reset my travel router, and I did a quick wireguard configuration, vaguely following gl-inet forum instructions (which were for 2 gl routers and overlap with this vid) and....it works!! only took 5-10 minutes. I don't know if I did something wrong, as I didn't do any port forwarding (I think it may have automatically happen), etc.... but mobile network hotspot is showing as my ISP when VPN is enabled. I'll of course have to test it out more at another location, but I ran all the ip website checks and nothing was bleeding through.

[@justinreviewsandrepairs5246]

Yes, you can use anything that supports WireGuard ®️ but you will likely find that the performance of the Flint is greater than the TP-Link. You can change the Flint Server to a different Port (and redo the Client configuration as well) so you can run both at the same time. Then you can do a proper speed comparison.

[@sirtipsalot7320]

@@justinreviewsandrepairs5246 I don't know the full performance of the TP Link, but it's a fairly high end router, goes for $500-$600, got it $350 Black Friday. Model Tri-Band BE19000 WiFi 7 Router (Archer BE800). I would hope it competes with $100 Flint.

[@sirtipsalot7320]

@@justinreviewsandrepairs5246 So far so good, I'll still need to test away from home to ensure the site to site still works. I got a wifi 7 TP link that normally goes for over $500, so I'm hoping it's not any worse than the Flint at being a VPN server.

[@justinreviewsandrepairs5246]

So it does have WireGuard ®️? Their website does not even list it as having WireGuard ®️. I thought you were going to have to use the much older OpenVPN option.

[@sirtipsalot7320]

@@justinreviewsandrepairs5246 Yes, it has WireGuard. It's the BE19000 Tri-Band Wi-Fi 7 TP Link router.

[@miguelpetrarca5540]

Hi Justin, couple of question, 1) can someone set up the server in country A, and I set up the client in Country B ? (without leaking location, I have a VPN) or do I have to be in country A to set both up before leaving for country B 2) if we are on a work computer, wouldn't we still be getting internet from the local ISP ? hence that information can be available/retrieved

[@justinreviewsandrepairs5246]

1. Yes, they can send you the configuration profile and you simply load it into your travel router. 2. I am not sure what you mean, yes the travel router needs Internet itself before it can connect to the Server Router back home.

[@justinreviewsandrepairs5246]

2. If you are asking about the VPN, the VPN is on the Client Travel Router so no software is installed on the work device. The Travel Router basically creates a virtual cable back home.

[@IronFrosting]

At 8:29 you mentioned our phone could also use my residential IP, would that be something manually we would have to do after changing the plain text? Would that also mean I could use my phone on my normal cellular data plan, but everything would look like it was coming from my home IP?

[@justinreviewsandrepairs5246]

You can install the WireGuard ®️ Client on your phone, but it is not as full proof as using the router. Also, if you intend to use your phone as a HotSpot to share your Home IP, that was only briefly available in an older version of Android. play.google.com/store/apps/details?id=com.wireguard.android

[@Nobleflex101]

Hi justin thanks a lot appreciate your time and effort,one quick question which one of the travel router should i do the port forwarding on, should it be the stay at home router or the one we are traveling with.

[@justinreviewsandrepairs5246]

Hi, thank you! You should Port Forward from the ISP Router your Internet company provided to the Server Travel Router which stays home. This video may help explain: kzbin.info/www/bejne/gqulkmmBqMt6b6M

[@Seiluke]

Hi Justin thank you so much for all of the service that you're doing. I read your comment about them just wanting to make sure you have a secure connection, I agree I think most IT people don't have the time to dig any further really unless you give them a reason. I was wondering do you think if I buy the slate AX and install a residential VPN on it here at my home and then Ethernet into it, that would generally speaking be enough?

[@justinreviewsandrepairs5246]

A residential VPN from a third party service or running the server yourself? Not many third party services offer residential IP Addresses but there are some.

[@Yld.Thigertz]

Thank you so much 🙏🙏🙏🙏 this is amazinggg, so I just wanna confirm with this method we don’t need a VPN provider like Nord right??

[@justinreviewsandrepairs5246]

Correct, you do not need Nord. In this video you are basically running your own VPN company yourself.

[@judek3358]

Justin, your teaching is amazing. Super detailed and succinct.

[@justinreviewsandrepairs5246]

Thank you, Jude!

[@ashs8606]

Yep totally understandable. In the process I learned so not complaining glad you took the effort to put it together.

[@justinreviewsandrepairs5246]

Thank you 🙏

[@williamwallace2902]

Thank you, I found this informative. I did have a question about security though, is the information encrypted between the gli routers?

[@justinreviewsandrepairs5246]

Yes, you'll notice in the configuration file that there is a Public and Private Key which is used for encryption.

[@maureenkoffi1178]

Thank you so much for the instructions however, it looks like I am having an issue with my port forwarding setting and I call Comcast. They still are not able to do it correctly. I'll try to telenet command to see if my port was being forwarded. But it's not working.

[@justinreviewsandrepairs5246]

Feel free to email me screenshots of what you have for Port Forwarding. For cable you will need to select UDP only instead of TCP or BOTH. Also, did you use a second Internet connection for the Client Travel Router? You cannot connect while already connected to the same Internet as the Server. Email: [e-mail]

[@zeezgunners]

Hi Justin, I followed your tutorial to set up my glinet router, but I'm having trouble connecting. I'm not sure where I went wrong. Do you offer paid appointments to help with setup? Thanks!

[@justinreviewsandrepairs5246]

Are you using a second Internet connection for the Client Travel Router you will be taking with you? You cannot test from the same connection. If you are it is likely a port forwarding problem. Feel free to email me at [e-mail]

[@zeezgunners]

Will shoot you an email. Thanks so much!@@justinreviewsandrepairs5246

[@imhof7142]

Thank you Justin for the informative video! GL-iNet is now version 4.5.16 and options are rearranged (a lot) but your video still hits all the major points. On your remote client router, Slate AX in your example, did I miss where you can specify a split router? In an ideal world what two GL-iNet routers would you recommend for 2024? Another question I can not find a definitive answer; I want my Client(s) to access location A and location B. I would like to be able to reach all devices in BOTH locations. If location A, HOME devices are 192.168.1.x/24, do devices on location B, OFFICE have to be on a different sub net 192.168.2.x/24 (NOT be the same as 192.168.1x/24)?

[@justinreviewsandrepairs5246]

Thank you, I guess it is time to make an updated video. For your use case I would highly recommend considering the Ubiquiti UniFi UDM Pro to establish the site-to-site connection. They have some cheaper options as well, but in general Ubiquiti is very expensive because it makes that type of advanced network set up easy. The GLiNet routers are great but they are not intended for your use case. I will need to upgrade my firmware to see what you are seeing as far as the split "router", could you explain what you mean by that?

[@aminekt9736]

Thank you for the video I want to ask you if I enabled DDNS on the GL.iNet router, do I still need to enable it on the first router, for example, by taking the DDNS address and putting it somewhere in the first router's menu . Note that my ist router has a dynamic ip

[@justinreviewsandrepairs5246]

DDNS should be enabled on the router that is acting as the Server (the one that stays home).

[@achimsul5225]

Hello Justin! So I think I’ve got most of it setup now, but I’m just really confused about a few things. So for my travel router, I wanted to make sure everything is a wired connection with my MacBook so I never need to turn WiFi on, but noticed I can’t access the admin portal unless I connect to the router via WiFi through my MacBook. So each time I want to connect to a network I would need to: connect to the slateAX via WiFi, tether to a network through the admin portal, then turn off WiFi and connect with Ethernet? Also confused about the MTU in the config that I pasted to the travel router, and an option to select, “services from gl.inet use vpn” Thank you for your wisdom

[@justinreviewsandrepairs5246]

You should be able to connect from either connection, are you using the WAN port? You may have an IP Conflict preventing you from accessing the portal.

[@justinreviewsandrepairs5246]

MTU is an advanced topic, you should leave the defaults in place unless you want to run multiple tests and fine tune the setting.

[@HitTheInfo]

Thank you! Currently working from Ghana, West Africa! To increase internet speeds should I use an ethernet cable for the travel router or will it be the same speed as the wifi option?

[@justinreviewsandrepairs5246]

Wired is preferred, it should have lower latency versus WiFi. Africa has been plagued with multiple infrastructure problems recently that have degraded the Internet there. Having a Fiber Optic Internet connection at home and Starlink in Africa might be the best way to improve speeds right now until they repair everything.

[@Airklenan]

Will the Two-Routers Setup Work with a Company Laptop Using Cloudflare Warp Zero Trust?

[@justinreviewsandrepairs5246]

I don't know about that one in specific, but in general it works with every company VPN because the routers create a virtual connection back to your house. Your work computer will just connect as normal. The thing you need to worry about is exposing your location when using company apps on your personal phone which has GPS and other tracking methods.

[@jjjjjut]

Thank you for the in depth video! I'm wondering if you can use 2 of the flint 2 routers for both the router you connect to your home router and the router you travel with? I'm hoping it will increase internet speeds and help with latency?

[@justinreviewsandrepairs5246]

Yes you can, but it is a bit large to travel with. The Slate AX should be fine, in all cases you want Fiber Optic Internet on both sides for the best results.

[@Dedobasic]

These are the best "step-by-step" instructions out there. Thank you you taking the time to explain everything and making this seem much easier. Is it common for connection speeds through the VPN to be pretty low? I have a 500mbs connection in the US. 1GB in the UK but regularly register 20mb speeds through the wireguard VPN. However im using 2 Beryl AX routers.

[@justinreviewsandrepairs5246]

Thank you! Are your connections Fiber Optic and have 500mbps Download AND Upload? Upload speeds are also important. In general the connection between New York and London is good: wondernetwork.com/pings/New%20York/London If you set up your Home Server with WiFi instead of Ethernet, you should switch to Ethernet for improved latency. Keep in mind doing so will require you to update the Port Forwarding rule as well to the Ethernet IP Address listed in the Dashboard.

[@jiniyo0000]

Hi Justin, thank you for the video, it's really helpful. I just had a question would really appreciate your insight on this. So I am basically using a personal computer for work and my company had WireGuard installed as the VPN and the remote desktop. Would I need to use this method, or could I just install another commercial VPN on my device and run it together with WireGuard, would that work as well if I plan on traveling internationally?

[@justinreviewsandrepairs5246]

Typically the computer can only run one VPN at a time. The router can run its own VPN to achieve your goal.

[@luvShante]

Hi Justin! Regarding your comments in the updated description box, if I get the Beryl AX and the Slate AX, which should I leave at home and which should I take with me? Also how much does the MT1300 differ from the MT3000? I am an absolute novice so apologies if these are really basic questions… I want to make sure I buy the right devices. Thanks in advance!

[@justinreviewsandrepairs5246]

Hello, the Opal is no longer receiving updated features, so that is why I now recommend the Beryl AX. The original Beryl may or may not get updated, but the Beryl AX is significantly faster for WireGuard ®️. In the event that you find out that you cannot do the port forwarding step, the Beryl AX supports ZeroTier which is an alternative method that will allow you to complete the overall setup. As far as which device stays home, it can be either since the devices are extremely similar, but I prefer to take the Slate AX and leave the slower device.

[@csrt7]

Hi Justin, I appreciate you going through the motions and explaining every step for us. When I run a DNS test, it shows my real location. Is there a step or plug in to try and avoid the DNS leak? Thank you!

[@justinreviewsandrepairs5246]

Yes, the other video shows how to set your DNS to CloudFlare or whichever you like. It also needs to be changed in the configuration file that you use for the Client.

[@carnivorouswarm]

Suuuuper helpful video, thanks so much. Very new at this, so maybe this is a stupid question - is the second travel router left at home the most inexpensive way to do this? I have a netgear router which doesn't appear to support wireguard, just openVPN, so I suppose getting another gl.inet router is the cheapesr way to set up a wireguard server? Secondly, would plugging the home gl.inet router directly into the modem and bypassing the other home router obviate the need to set up port forwarding? Thank you!

[@justinreviewsandrepairs5246]

If you don't need the VPN to be fast, you can use OpenVPN on your existing router. Otherwise GLiNet is a very affordable way to host a server. If you have old computers you could use those as a server, but it would need to be left on 24/7 so the electricity cost may be a factor to consider as well since the GLiNet router uses about as much as an LED light bulb whereas an old desktop computer is like running a TV.

[@justinreviewsandrepairs5246]

Yes, if you plug a cable into your Modem (Or ONT if you have Fiber) and then the other end into the WAN port of the GLiNet router you can skip Port Forwarding. In this case, the Internet Page of the Dashboard should show your Public IP Address under the Ethernet connection instead of a Local IP. You can use ip.suzam.com/ to view your Public IP Address. Let me know if you have any other questions, Thanks

[@carnivorouswarm]

@justinreviewsandrepairs5246 Perfect, super helpful. Yeah the only pcs I have are electricity guzzling custom builds, so probably going to first try using openVPN with my existing g router, and then springing for another beryl ax to set up as a wireguard server if that proves too slow. Thanks so much, by far the most helpful video on the topic I could find!

[@justinreviewsandrepairs5246]

Thanks! If you run into any issues just let me know as a new comment or an email. KZbin doesn't always alert me of replies. [e-mail]

[@abdulfaisal9]

Hi Justin, After watching your video, I purchased both the GL routers to set up port forwarding and work from Canada, showing my home address in Dallas. However, I am unable to see the GL-MT 3000 device on my Xfinity network port forwarding devices 6:46 . Could you please help me with this issue as I am currently stuck? Thanks

[@justinreviewsandrepairs5246]

Hi, the Xfinity routers use an uncommon IP Address range that happens to be the same as WireGuard ®️. You will have to change WireGuard ®️ so it has a unique address range. Please see "Local IP Address Conflicts" on this page: justinpruett.com/glinet-troubleshoot.php

[@abdulfaisal9]

@@justinreviewsandrepairs5246 I'm finding it a bit difficult with my current modem. Do you suggest I buy a new modem for my Xfinity internet provider? If so, which one would you recommend? Thank you!

[@justinreviewsandrepairs5246]

Please send me an email at [e-mail] Xfinity has a few things that are problems but are easy to fix.

[@omarsabir8001]

I have 2 questions and would appreciate your help. 1: I work as a Cloud Engineer and need to be able to SSH into AWS/GCP services while using a company VPN(FortiClient). Is it possible to use this setup and then still be able to use Company VPN? 2: The Slate AX device would still need to be connected to local wifi/service to connect it to Beryl AX back home? Does it need to be ethernet or a wifi device from a local service provider would work? Thanks!

[@justinreviewsandrepairs5246]

1. The VPN is running on the travel router so you can continue to use your company VPN as normal. 2. Yes, the Slate AX will need Internet. Ethernet is preferred but the Slate AX has WiFi 6 which is very fast if the router you are connecting to also provides fast WiFi.

[@mlkmandela]

you learn something new everyday, thanks Justin

[@justinreviewsandrepairs5246]

Thank you!

[@FeLiZ4ngado]

Another quick question: Besides enabling the “Block Non-VPN traffic” option on the client, what else do you recommend for preventing DNS leaks and location tracking? Is it a good idea to enable Encrypted DNS with “DNS over HTTPS” on the client? How about enabling the AdGuard Home feature and checking WebRTC stuff on the browser?

[@justinreviewsandrepairs5246]

Those are all good suggestions, but also be sure to never share an account on your phone with the computer. If you are logged into an account on both it might share your GPS coordinates!

[@BitcoinBros]

Hi Justin, very easy to follow video thank you for this! I have one question though. I have two Gl.iNetSlate AX router's and it works perfectly with the example you showed in the video. But, with the Slate route (the one I plan to keep at home) when it is connected directly to my modem via Ethernet (and not Wifi) the VPN will not connect and it gets stuck on connecting (yellow dot) with some error messages in the logs. I checked the port that was forwarded and that did not seem to change. Any ideas? Thanks again.

[@justinreviewsandrepairs5246]

Thank you! Did you change your port forwarding when switching to wired? It will be a different IP and/or MAC address as seen in this video kzbin.info/www/bejne/gqulkmmBqMt6b6M you can also email your logs to [e-mail] if you would like me to take a look.

[@BitcoinBros]

@@justinreviewsandrepairs5246 Thanks for the quick reply! That fixed it! One last question. I am getting around 500 mbps download speeds per second on my home modem and around 50 mbps on the travel slate router. Anything I can do about this? Thanks again for all the help

[@justinreviewsandrepairs5246]

The Internet connection on both ends plays a role. With the VPN off, what are the speed test results of both connections? Upload, download, and latency.

[@BitcoinBros]

@@justinreviewsandrepairs5246 Seems it is around the same for both (VPN connected and not) around ~50MBPS download and ~5 MBPS for upload. Not sure how to check latency just running the google internet speed test

[@justinreviewsandrepairs5246]

5mbps is very slow for an upload speed which will severely limit your overall VPN speeds. The google speed test displays Latency after the test is complete right above the Server line. It should be presented in milliseconds (3 ms is mine for reference)

[@Wheelzofsteel794]

Justin - Thanks for this detailed step by step instruction. I am out of country at the moment, can my friend setup the server in his house in the US and can I order a separate router and set it up as a client remotely co-ordinating with him ? Will that work for the initial setup ?

[@justinreviewsandrepairs5246]

Thank you! Yes, they can set up the server and send you the configuration profile. The small text file includes the connection information so all you do is load it in and connect.

[@czpme]

Hi Justin! Thanks so much for this video. I'm currently in Puerto Rico, but want to sent this up with a router in Florida and then have a travel router. Is it possible to set this up without me being in the location where the main router is going to be? What's the best way to do that? Also, given that this video is a couple years ago is your rec to go with Flint 2 for home and slate AX for travel?

[@justinreviewsandrepairs5246]

Yes, someone can set up the server in Florida and send you the "profile" configuration to load into your Client Travel Router. Yes, the Flint 2 and Slate AX would be a great choice and they are both on sale for Prime Day today. If your remote location is your second home or something like that, you could also get a second Flint 2 for a more permanent installation. Let me know if you have any questions, - Justin

[@czpme]

@@justinreviewsandrepairs5246 Thanks Justin. I went for two Flint 2's since my other location is my permanent location. Would the process for setting it up to be more permanent be the same process as you have in the youtube video or would you do something different? Thanks!

[@justinreviewsandrepairs5246]

It would be the same, but you will likely want to set up Good Cloud on both routers for Remote Management. This isn't part of the video and is not required, but it is a nice tool when both routers are staying connected for long periods of time so you can do a firmware upgrade or change settings from anywhere.

[@cc3814]

Thank you for this tutorial. I am interested in this setup, the choice of using the Opal as the receiving router. Was it chosen because there is no need to have two Slate routers for this setup and hence going with the lower priced Opal? I believe the Opal has a slower WireGuard speed does that effect the connection speed at all? Thank you

[@justinreviewsandrepairs5246]

The Opal is the cheapest option (that still works for most tasks) while the Slate AX is the most expensive travel router (there are more expensive non-travel routers). You can choose any of the combinations of routers from the Description of the video or you can even use other brands such as Ubiquiti. For most people, the Beryl AX is a nice balance between performance and price. Your connection speed is limited by the routers you choose, the Internet connection on both ends, and the latency between those connections. For the Home Server, you should get Fiber Optic Internet for the best performance. Feel free to email me if you need any help. Thank you!

[@davm1931]

Hi Justin. my Asus home router (ASUS RT-AX5400) has Wireguard built in and I set up both Open VPN and Wireguard with my travel router ( Beryl AX ). A question, do I need to turn on Dynamic DNS on Asus router? or/and Beryl AX router? and If yes, do I need to edit configuration file from Asus router the same way you did before I use it for Beryl AX client?......btw you were absolutely correct, Wireguard is 4 times faster than OpenVPN :)

[@justinreviewsandrepairs5246]

Yes, unless you have a Static IP Address from your Internet Service Provider (ISP), you will need to turn on Dynamic DNS so your Client Travel Router can connect using the DDNS name which will update automatically every time your Public IP Address changes. Otherwise you would have to change the address manually in the configuration every time it changed. Yes, OpenVPN is fast enough while still within the same Country, but every bit of speed helps when you are overseas. Latency is extremely difficult to manage over great distances.

[@davm1931]

Thanks for the reply. My DDNS on Asus router was actually on. I am going to be traveling soon to Brazil and will test it there. OpenVPN didn't work consistently in Costa Rica. In one place where internet was 100MB , I had 3mb download, but then another place where there was a fiber internet and speed was 300MB, I had less than 1mb. Strange@@justinreviewsandrepairs5246

[@BryanEcheverria-sh4nq]

hi Justin. quick question. I also have frontier and looking to buy a GL-MT3000 / Beryl AX (for travel). I want to connect to my home IP in USA from Ecuador. Do I need to buy a second travel router like you have in the video (because you have the OPAL for home) I was looking at the GL-MT6000 / Flint 2 for home to "" what frontier provides. That is my question. can I simply replace the frontier one or do I need 2 routers at the home like you have the OPAL and the one from frontier? I appreciate the time and effort you put into breaking down step by step how to move forward with setting up wireGuard to connect to our home IP.

[@justinreviewsandrepairs5246]

Frontier is great, it is Fiber Optic Internet so you can plug in any router to their ONT. So the Flint 2 would have a cable from the ONT to the WAN port of the Flint 2 and run your Server without the need to Port Forward. The Beryl AX would be your Client, but keep in mind you should still test your setup from a second Internet connection. In the video, I was actually port forwarding from the Frontier Router to an Ubiquiti UDM Pro router that was port forwarded to the Opal Travel Router that was running the Server. So there is a lot of flexibility with how you can set things up. Today, there are some other brands that offer WireGuard ®️ as well, so if you happen to have a supported Asus router or Ubiquiti UDM Pro, you could actually use that router as the Server. I used the Opal because it was the cheapest option that still provided decent speeds at the time. Today I would probably buy two Beryl AX for about the price of the Opal and Slate AX. The Flint 2 is designed for home use so it is larger, but it does provide the best WireGuard ®️ speeds you can get between the four routers we discussed.

[@BryanEcheverria-sh4nq]

@@justinreviewsandrepairs5246 thank you so much for the reply. Do you recommend I set up the DDNS? is that a must or I canuse it without that set up.

[@justinreviewsandrepairs5246]

If you have a Dynamic IP Address from your ISP, you must enable DDNS because your Public IP Address could change at any time. If you have a Static IP Address you can leave it off because your Public IP Address will never change. Most Residential ISP will have Dynamic Public IP Addresses so you will need to enable DDNS. The GLiNet DDNS service is provided for free so you might as well take advantage of it.

[@TakeaGlimpseatCris]

Hi Justin - My use case is working remotely from other countries (outside the US) while using my home IP address in LA. At home, I currently have Spectrum cable with a separate router and modem. What gear from Gl.Inet should I buy to ensure that my zoom video calls have no lag. A: 2 Ax Slates (1 at home, 1 away from home) B: 1 Slate at home, 1 Beryl AX away from home C: 1 Beryl Ax at home, 1 Slate at away from home D: 2 Beryl Ax (1 at home, 1 away from home) E: 1 Flint 2 at home, 1 Beryl Ax away from home F: 1 Flint 2 at home, 1 Ax Slate away from home Given that Spectrum provided me a specific router and modem, does that mean that options E and F (using a Flint 2 router) is off the table? Thanks!! This is extremely helpful!!

[@justinreviewsandrepairs5246]

D would be your cheapest option, F would be your fastest option. All options will work. You will be limited by your cable connection which typically has low upload speeds and high latency. Upgrading to Fiber Optic Internet would be ideal to support video conferencing. For example, I have 500 download, 500 upload, and less than 4ms latency with Frontier Fiber and that allowed the Opal to achieve decent speeds for the price. The Beryl AX supports much higher speeds than the Opal.

[@TakeaGlimpseatCris]

@@justinreviewsandrepairs5246 Amazing! Thank you super helpful. I think I will go with F. just want to confirm my last question though: Given that Spectrum provided me a specific router and modem, does that mean that options E and F (using a Flint 2 router) is off the table?

[@justinreviewsandrepairs5246]

The Spectrum Modem and Router combo unit can be changed to modem only so that all traffic will be handled by the Flint 2. I believe they call this Bridge mode on the Spectrum Modem Router Combo.

[@justinreviewsandrepairs5246]

You can also just Port Forward to the Flint 2 as you would have done on the Beryl AX. The Flint 2 form factor may be different to provide better WiFi coverage but much of the setup is the same if you go the Port Forwarding route or the Router route.

[@TakeaGlimpseatCris]

@@justinreviewsandrepairs5246 Thank you!! Really appreciate you taking the time to respond. I owe you!

[@BitterClinger1947]

Thank you for this video. Question: for traveling to Europe or Asia (and or Australia), which travel router(s) should I buy? Looking at your picture, I see that you have two different GL routers. Can I connect the travel router to my xfinity router? Also, what kinds of download speeds (for iPhone photos, for example) can I expect by using my home ISP? Thank you again.

[@justinreviewsandrepairs5246]

Hello thank you 1. Please see the video description for a list of routers 2. Yes, but Xfinity requires an extra step because they happen to use the same IP Address range as WireGuard ®️. The 10.0.0.1/24 has to be changed to 10.1.0.1/24 as seen here: docs.gl-inet.com/router/en/4/interface_guide/wireguard_server/#setup-wireguard-server 3. Your speeds depend on which router you get and your Internet speeds at both locations. Even the Beryl AX is fast when paired with Fiber Optic Internet. Cable usually advertises fast speeds but they don't tell you that your upload speed is comparable to what we used 20 years ago! Your Home Server Router will have to Upload to your remote location so it is preferred to have Fiber Optic Internet.

[@rachelaeyo]

@@justinreviewsandrepairs5246 hey just reading through some comments here and had a quick question. I haven't had any issues without changing the Wireguard VPN server IP Address range for my Flint2 which i have hooked up to my xfinity home router - I haven't had any issues connecting to VPN. Am i missing something here?

[@sirtipsalot7320]

This is how you would use your home IP address in say America while you're in another country, so your employer would never know? Other remote work vloggers charge money for an installation but this guide is all I'd need? Seems straight forward enough.

[@justinreviewsandrepairs5246]

Yes, but keep in mind that most employers have full access to your work computer so it is not 100% full proof. For example they could open your webcam or microphone and this method does nothing to stop that. I do not offer installation services, but feel free to comment or email if you run into an issue.

[@sirtipsalot7320]

@@justinreviewsandrepairs5246 Thanks. Webcam/mic access wouldn't matter because there wouldn't be any tell tale signs if so, plus we rarely use webcams in day to day work (also webcam covers built into our work computers). As for the at home router, the Flint router works great and would have the same steps?

[@justinreviewsandrepairs5246]

Yes, the steps would be similar, the Flint is like the home version of the Slate AX with similar specifications. If you are using the Flint as your main router, such as plugging a cable from the Fiber Optic ONT into the WAN or a Cable Modem (Or a Cable Router in Bridge mode) to the WAN then you can skip the Port Forwarding Step. In the video I was only using the Opal as a VPN Server, not as a whole home router. If you want a little more power, the Flint 2 was just released and offers the highest performance. Although, I think for most people the latency between two locations will be the bottleneck rather than the performance of the device for anything faster than the Beryl AX. Having Fiber Optic Internet at both locations (with low latency) can really improve the overall performance of any two routers.

[@sirtipsalot7320]

@@justinreviewsandrepairs5246 Thanks for your help. I'll be buying the routers and get things set up some time mid May.

[@justinreviewsandrepairs5246]

Great! Be sure to leave enough time before your trip to test your setup. If you run into any issues, feel free to email me at [e-mail]

[@richardmontoya6879]

Hello, Justin. Thank you for sharing this very informative video. I have the Slate (for travel) and the Opal (for home). ISSUE: When I copy/paste the manual configuration into the Slate router (under WireGuard Client), it will not allow me to save (i.e., Apply) the file. The input box turns red when clicking "Apply." Based on what I'm seeing, my copy/paste looks identical to yours (and the example on the GL-iNet page). Do you have any idea what I could possibly be doing wrong? Thanks.

[@richardmontoya6879]

Solved. Instead of copy/pasting, I "downloaded" the configuration file from the Slate and uploaded it to the Opal. That seemed to work.

[@justinreviewsandrepairs5246]

That is interesting, it should work either way. What operating system are you using?

[@richardmontoya6879]

@@justinreviewsandrepairs5246 MacOS Sonoma 14.5, not that it would matter since it was a simple copy/paste exercise. Oh, well. I'm glad I got passed this point. Hopefully someone experiencing a similar issue will do what I did. BTW... you replied to my comment within 6 minutes?! That's nuts! 😂 Awesome response time! 👍🏻

[@justinreviewsandrepairs5246]

Macs do some interesting things sometimes, not sure if it was a factor here, but they have something called "Smart Quotes" and "Smart Dashes" which will change characters such as ' and -- to Mac style quotes and dashes.

[@jeremiahison2511]

Hi Justine! Thanks for this video! I just have a few question. It was mentioned that your router is behind NAT. GLinet website says you wont be able to setup a server if you're behind NAT. Can you confirm if your router is actually behind NAT or they gave you dedicated public IP by checking WAN on your ISPs router and the ip you have on whatismyip? If they're not the same and indeed behind NAT, which ip address did you use for the DDNS? The one on the router or the one from whatismyip? Thanks!

[@justinreviewsandrepairs5246]

You might be referring to cgNAT? NAT is good, I have a dynamic IPv4 address from my ISP and DDNS automatically handles it. cgNAT is a common practice among 5g Internet providers and you share your IP with other customers so you cannot port forward.

[@joseserrano1758]

@@justinreviewsandrepairs5246 So if we cannot do port forwarding what other options do we have? I have the Opal router

[@picnicsponies]

Ok thanks Justin, back to the original set up then, assuming I can get into my eero and port forward, (was trying to avoid this approach in case I screw something up) -if i do port forward, I can still do slate for travel to opal at my original location? PS I have fiber at both locations.

[@justinreviewsandrepairs5246]

The eero supports port forwarding, but sometimes the security features need to be turned off due to false positives. The eero has an easy to use app. The Opal will work, but the Beryl AX is more powerful if you need video conferencing. Fiber is the best. Let me know if you run into any problems.

[@tuhtd]

Hello thanks for your email. It helps me alot. May I ask instead of setting port forwarding on my ISP router, can i just change wireguard server router to access point mode

[@justinreviewsandrepairs5246]

No, to run the Server the GLiNet Router must stay in router mode. You can change your ISP Router to Bridge Mode but then you would need to connect your devices to the GLiNet router instead of the ISP router. Another option if you cannot Port Forward is to use TailScale but this requires advanced knowledge and you will likely want to use the RemoteToHome service in the description to set it up for you.

[@shahd85454]

Thank you so much!!! I have been looking for this for too long....i have an urgent question please, will it be the same if I use AX1800 (Flint - connected to USP modem/router) and Beryl (as travel router)?

[@justinreviewsandrepairs5246]

The Flint and Beryl AX would work, there is a list of a few more options in the description. Thank you!

[@shahd85454]

@@justinreviewsandrepairs5246 thank you very much, Sir!!

[@bolao9]

Justin, good to know I was not rude. Ok, here is the quick scoop. Just arrived back home and used my phone's internet through the slate ax to see if it would talk to the opal. I got same thing "no internet". however, I unplugged the opal and plugged back in, waited a few minutes for it to cycle up (my term) and voila they found each other I have internet from "home ip address" where the opal sits. So, I guess the issue is leaving the opal on all the time without any traffic (my term again), it sort of goes to sleep/offline and not available for the slate to find. Going forward, I will leave it off until I travel. Do you know of any other way to wake it up besides physically unplugging it/turning off/on? It is a bummer that this is the case because it makes my logging into my work's network from my "home ip" while working remotely very difficult. Hope I made sense this time. As always, thank you for your guidance and expertise.

[@justinreviewsandrepairs5246]

You shouldn't have to reboot it, I have been running my Opal for more than a year now without issue. Please reach out to GLiNet to see if they can do anything for you. Either way I would consider upgrading to the Beryl AX which is newer and more powerful than the Opal.

[@rwabukwandinapoleon2327]

Thanks so much for the detailed explanation, Justin-you’re the best! Quick question: when setting this up, do the routers need to be on the same WiFi network, like in the video? Or can they be set up separately? For example, could someone set up one router at home and then I set up the other router from a different location, and later connect mine to the one at home?

[@justinreviewsandrepairs5246]

They do not need to be in the same WiFi, in fact you cannot test while on the same Internet as the Server so using a second Internet connection is preferred. You can simply share the WireGuard ®️ Configuration File with whoever has the Client Travel Router. If you have multiple Client Travel Routers, be sure to make a new profile for each one since the file is unique.

[@rwabukwandinapoleon2327]

Thank you so much!

[@MTVEUROPEDEEPFAKES]

Thank you for your amazing step-by-step.

[@bharathijammala]

Hey Justin! This is a great video. Though I am not a software expert I was able to set my routers up. But I have been facing a problem and was looking if you could help me. I have configured a flint as my home router and beryl ax as my travel router. When I set the wire guard server up they both connected well and all was fine but as soon as I took my beryl remote with me it wasn’t connecting to the wire guard but again when I got it home it would connect to the flint. Is there something that I am Missing here?

[@justinreviewsandrepairs5246]

Usually people have the opposite problem 😆 It is likely that your configuration file is using your local IP Address instead of your DDNS address on the "Endpoint" line. Please double check that you see a domain instead of an IP Address on that line. If you prefer, you can email your configuration to [e-mail]

[@MariMari-ir3wp]

Hi Justin, thank you for sharing this. According to your videos I bought 2 these modems, Opal and Slate. I am a beginner and I have few short questions. As I understood we don''t need VPN service with two of these? Could you just explain do we need to fix as you did im the first video related to DNS, which means to put Enceypted DNS, DNS over TLS and Cloudflare? Must we use Cloudflare or it can be Next DNS, does that mean that business data go through some server of the manufacturer? Or is it slower with that? Thank you in advance.

[@justinreviewsandrepairs5246]

The idea is to speed up DNS queries to reduce overall latency, which CloudFlare does well. You can use any provider, I just prefer CloudFlare.

[@MariMari-ir3wp]

Thank you. Can my employer discover CloudFlare or other dns servis if I have it on the modem that I take wirh me as described? Company's VPN on the computer is Cisco anyconnect. Thank you.

[@justinreviewsandrepairs5246]

Since the employer has full control of your device, they could potentially, the general idea is to stay under the radar so they don't gain full control of your device and start snooping.

[@devopsdigital2834]

Hello Justine, Thanks for this video , I've recently purchased a GL-MT3000 / Beryl AX router and I'm attempting to configure it as a travel router. My current setup includes an ISP router that provides internet access. Is it feasible to set up the GL-MT3000 / Beryl AX as a travel router in this scenario? Or is it necessary to have two routers, with one being the home router working alongside the ISP router?

[@justinreviewsandrepairs5246]

If your ISP router has WireGuard ®️ built-in you can use it, otherwise you will need a second device to run the server.

[@devopsdigital2834]

@@justinreviewsandrepairs5246 Thank you for your prompt reply. I've ordered the GL-AXT1800 (Slate AX) to use as a travel router and plan to configure the GL-MT3000 / Beryl AX as my home router, following your suggestion in the video. I'll provide an update here once I receive my order from Amazon. I'll let you know if this setup works well. Thanks again!

[@devopsdigital2834]

Despite implementing the suggestions provided, including port forwarding on my ISP router and experimenting with "UDP", "both" options, and trying various combinations of IP configurations across two different internet connections, the setup still did not work for me, as I continued to encounter a JSON parser issue.

[@justinreviewsandrepairs5246]

Please email me a screenshot of your ISP router Port forward page and the Server Travel Router Internet page that shows the IP Address of your connection locally. [e-mail] I suspect your home router might be on the 10.0.0.x network which would cause a collision with the default WireGuard ®️ setup. The solution would be to change the WireGuard ®️ default network address range.