Use Home IP Address While Traveling with GL.iNet AX Slate, Opal, and WireGuard® VPN
ฝัง
- เผยแพร่เมื่อ 22 พ.ค. 2024
- In a previous video we looked at how we could use the GL.iNet Slate AX with NordVPN to change our location. This time we are using a second router to share our Home Internet using WireGuard® VPN Server so no matter where we travel the Slate AX will make it look like we are still home.
Previous video about Slate AX here: • Slate AX Travel Router...
Troubleshooting Tools: justinpruett.com/glinet-troub...
0:00 Intro
2:01 Setup Dynamic DNS on the Opal
4:14 Setup WireGuard® VPN Server on the Opal
5:15 Port Forwarding Basics
6:26 Port Forwarding on Frontier Residential Router
7:31 Start WireGuard® VPN Server on the Opal
9:53 Connect to the Slate AX that goes with us
10:36 Setup WireGuard® VPN Client on the Slate AX
12:37 Speed Test
13:36 Set the Custom Switch
Amazon Affiliate Links to Products in Video (I make a commission when you use these links)
GL.iNet Slate AX Router (Black): amzn.to/3IEkcEt
GL.iNet Opal Router (White): amzn.to/3vTd13L (Update: The Beryl AX was not released at the time of recording, for a little more money the Beryl AX is a better option than the Opal amzn.to/3qm5viL )
Cable ties to keep things neat: amzn.to/3J9g3sx
UPDATE: I don't have a video for this yet, but if you don't have a Public IP Address or if you otherwise cannot Port Forward, firmware version 4.2 has ZeroTier support! This service requires a free zerotier account but does not require port forwarding!
See the docs here: docs.gl-inet.com/en/4/tutoria...
The Opal does not have version 4.2 so it does not support ZeroTier! Here is a list of devices that do:
Unless you have a device that can run the VPN Server already such as an always on computer or NAS, then you will need two devices. Links are included but note they are affiliate links. As an Amazon Associate I earn from qualifying purchases.
The device that stays home could be:
Beryl AX - amzn.to/3qm5viL
Brume 2 - amzn.to/3DJ2VXd - (Doesn't have WiFi)
Flint - amzn.to/3OHbuIq - (Not made for travel)
Slate AX - Fastest Travel Router - amzn.to/3IEkcEt
Flint 2 - Fastest Home Router - amzn.to/3JOyi5L
The device you take with you could be
Beryl AX - amzn.to/3qm5viL
Slate AX - Fastest - amzn.to/3IEkcEt - วิทยาศาสตร์และเทคโนโลยี
Helpful Links
Port Forwarding Help: th-cam.com/video/LzBa6KsfG9A/w-d-xo.html
Captive Portal Tutorial: th-cam.com/video/46nG8mhm5og/w-d-xo.html
Test DDNS: justinpruett.com/glinet-troubleshoot.php
Update: Many cable routers seem to struggle with TCP, please select UDP only in the Port Forwarding rule instead of both.
Update: The Beryl AX came out right after this video was published, it is a much better option than the Opal in a price range that balances price and performance.
I just want to want to say MANY THANKS Justin! For your time and efforts you put together to make this video tutorial. I got my GL-INET routers talking to each other.
Great to hear! Thank you for the comment! Comments like this keep me going!
Hey Justin, just wanna say thank you. I can't imagine how much time this guide saved me. All up and running first go, who woulda thought?! You're a real chief!
Thank you! Comments like yours keep me motivated!
Could you please share how you got the public IP address?
Thank you Justin. This has been a great help. I travel for work and have always wanted to setup a VPN with my home network. Got the same two routers and the system works great!
Glad to hear! Thank you for watching and commenting! If there are any other tech things you have been wanting to do, let me know, I might be able to make a video about it!
I want to comment how Justin is very responsive and kind to answer questions. From all of us, Thank You
Thank you, I appreciate your support! 🙏
110% He's Awesome!!!
This is amazing! I was trying to find a step by step video and couldn’t find anything until this. This is perfect! Ty so much! The only reason I’m doing this is because my boyfriend is in a different state for 9 months and now I can be with him 💕
Glad it helped! Thank you!
Thanks a million, this is the only video that I found that made sense and was actually helpful with no added long talking.
Thank you!
Just re-watched and can't thank you enough! Got everything setup so now I can work on the go ;)
Any updates? How did it go?
@rickygabaj Did you have any IP detections from your company?
@@jonyvillanueva I only did it once and did not get caught. I work for a different company now where it’s no issue where I work and they actually encourage work from anywhere for up to 4 weeks a year!
It worked!! It took a while but only because of 2 majors issues #1, I didn't set up port forwarding correctly which required a call to my ISP (really take your time with this one). #2 I inadvertently put both routers on the same Wifi SSID. but switching one of the router to the 5G network, it worked like a charm! Thank you so much for uploading this Justin!
Port Forwarding is tricky and most ISP routers make it even harder, some even give it a different name! Glad you were able to get it all working though! Thanks for the comment!
This video is great. I use the Flint as my home router and Beryl AX as my travel router. Following your instructions made setup super easy.
Glad it helped!
Why did you use Flint?
How many travel routers can connect to flint?
@@karimlonguar5826 - The Flint has a better processor, more memory, more ethernet ports, and 4 antennas, therefore it's faster and better for only $100 bucks. They just came out with the Flint-2 ($149) as an upgraded version.
Jason, you are the best! I have different routers but the way you explained this makes it simpler to follow for other setups. I must admit I watched the videos 50 times during the last week, read through every comment and I was about to email you when I had a last idea and worked! the dot is green now!! thank you
Thank you! And thank you for increasing my view count! 😄 Feel free to comment or email if you do run into any problems!
How is everything working?
Really good. Not a problem at all. I have not had to do anything else after I set it up the first time
@@TitinaOF Hi! I am trying different ways to reach viewers from other countries on TikTok by changing the IP like this. What is your situation at the moment? What do you use that State AX and Opal setup for? What's your opinion? Could something like this that I am trying work with a setup like this?
First of all, wow thank you so much for this video! It’s taken me days to find something like this. Thank you for your responses to all questions asked as well. You’re awesome for doing this! I will be setting mine up the way you did it here and I’ll be back to let you know how it goes :)
Thank you! Let me know if you run into any problems!
Seriously I wouldn’t have been able to figure it out without this video and your help! Thank you so much
Glad it helped, thank you!
The most useful video on internet! thank you so much Justin!! I'm going to order Slate AX X2. Saludos desde Argentina!
Glad it was helpful! Thank you!
Hi @@justinreviewsandrepairs5246 ! I was able to create my own VPN at home, thanks again!! I wanted to ask you about this: I have a friend in Spain who set up a VPN using Open VPN, but on Linux. He shared an OVPN file (server), but it's not working on my Slate AX (client). Do you think it is possible to make it work?
Hey man thank you so much been working for a week from Colombia .. I'm like the happiest man alive 😂
Hola gorge, soy también colombiano y necesito hacer este puente, podrías ayudarme a hacer el set up de los routers, ta compre los dos pero no se como se instalan, cualquier ayuda le agradecería! Bendiciones, si algo nos comunicaremos por WhatsApp
Perdona q insista es q me urge ir a Colombia y mantener mi trabajo, cualquier ayuda y si hay algún cobro por el tutorialme hace saber, quedo atento. Thank you
Just wanted to leave a note incase anyone runs into the same issues I had getting this setup running. I have a Brune2 as the VPN Server and the Slate take with me. I followed all the same steps, including the port forwarding on my main ISP router, except changed the IP to 10.1.0.x/24 instead of the default. After I was able to run the Server on the Brune2 I tested the connection with the Wireguard app, important to note when you're testing the connection turn off wifi and use a separate network like 4G/5G.
Once I uploaded the Client config file to the Slate it initially wasn't getting a handshake and connect but I was trying on the same network. Once I had everything configured and I turned on the client outside my home network and the Slate and Brune started to talk to each other as intended. Still need to test more outside my home office but this video is the best tutorial I found on this after reading through many other pages, forum posts and documentation. THANK YOU Justin!!!
Thank you! Glad it helped!
I noticed more ISP routers are using 10.0.0.x as their Local IP range which can lead to problems with the default WireGuard ®️ IP range, good job catching that!
Thanks Justin for the comment. Let me give it a try. I exchanged a few msgs with nord, but not getting anywhere with them. I will definitely look up the port forwarding for the xfinity router/modem.
Here is the video that shows how to get your IP Address or MAC Address from your travel router for port forwarding: th-cam.com/video/LzBa6KsfG9A/w-d-xo.htmlsi=bpljRVvc_0LTJpt8
Hey Justin! I just got this setup working using the Slate AX for the client and Brume 2 as the server. Thanks for putting this together, of all the resources online this video was the most helpful. The biggest headache for me was actually getting the port forwarding to work on my ISP modem because apparently its software sucks lol. Anyways, I just wanted to say thanks for this super comprehensive video. If you ever need a testimonial or advice with anything data/software engineering related (that's what I do) don't hesitate to ask.
Thank you! I am a software engineer too! Email me your discord or Google Hangouts if you want to talk shop, I am full stack. Work@JustinPruett.com
Hey @ZahScr , any tips for getting the port forwarding to work?
@@josieicaza7031 for me it was just crappy software in the modem. Make sure that you’re setting up port forwarding on the correct device. For example, I had a modem which was the internet gateway and a separate router for wifi, which meant I needed to set up port forwarding on the gateway modem and connect the gl.Uber to that.
The other thing is try restarting whichever device is doing the port forwarding after you set it up and give it a few minutes. If that doesn’t work then do a factory reset (make sure you can recreate whatever configurations you had) and then try setting up the port forwarding again - also with a restart after.
Hope you get it working!
Thank you!!
@@zahscr did it need a public Ip ? Thanks
I used Brume 2 for Wireguard Server and Beryl AX for travel router, works like a charm. Like others said here - use UDP instead of TCP/UDP, just UDP.
Thank you for sharing!
I have the same setup. Can you access the Brume Admin page while being connected to the berry client? Because I don't know how to make that work
Hello Thanks for sharing.. how about your work phone? Any ideas of how to use your work phone ?
Hello Justin. Thank you for this very useful, step-by-step guide. I appreciate your style of teaching. With your help on the nuts and bolts of this operation, my wife won't feel like she's missing out on any of her favorite streaming things while we're visiting Europe.
Thank you! Yes, that is another use for the VPN! But I was pleasantly surprised by some of the shows available in other countries as well! Back at home you can also use it to share streaming service accounts by using one IP Address at two places.
@@justinreviewsandrepairs5246 Unfortunately, I'm running into the same issue as many of the other recent commenters. Unable to start the VPN client on the 1800. The log shows the same errors others are having. 🙄I'll have to call GL Support to see if they can help.
Feel free to email me at Support@JustinPruett.com if they are unable to help. The most common problem is the Port Forwarding step which is different for everyone based on who their Internet Service Provider is. The second most common problem is trying to test using the same Internet connection as the server, which is not possible since both devices are already on the home network.
Thanks for this great tutorial. I purchased both of the items you used in your demo and the WireGuard service works perfectly. I have used it both domestically in the US and internationally with no problems. I updated the firmware on the home Opal device today, and was warned that the process would remove custom settings, so I had to reconfigure the WireGuard server. The update added a nice feature to the configuration process where you can choose to "Use DDNS Domain" so that it generates the script including the DDNS address, so you no longer need to cut and paste that information manually.
That's great to hear! GLiNet does a great job making things easier to use! Thanks for sharing!
Thank you thank you thank you! You made what was quite a complex challenge (for my low technical aptitude) so so easy to follow! I got hung up on setting the port forwarding for AT&T because I missed a step bit after that it worked like a charm
Port forwarding is tricky because every ISP router is different, glad the video helped though!
Can you PM me how you did port forwarding with AT&T because I wasn't able to set it up?
this is how we work from NorthAmerica while living in Thailand
How is it working for you buddy all.smooth
How the internet speed?
Internet speed sucks when having two router hotspot
@@b.n.y.a1599 i made a tutorial on my channel - how to set up a vpn server and vpn router.
in that video towards the end, i show a button that ensures your connection stops working whenever the VPN stops working for whatever reason.
Do you work from your own computer or one provided by your employer?
Thank you! Exactly what I needed. I was a bit overwhelmed until I found this video.
Glad it helped! If you need help with anything else just let me know!
I tried your setup and you were very good at explaining things, it appears to be working with the VPN dashboard showing up and down traffic. Since it is going to a Beryl at the "home" location which also gives the 192.168.8.xx IP it was hard to determine if it really was working. So while doing the speed test I disconnected the client and it stopped the speed test, but I sure can't tell by the IP address. You did very well to help someone actually make this work that is far from qualified. Thanks. I am still questioning my success!
Thank you! You can use a website like www.whatismyip.com/ to see what your Public IP Address is before and after connecting to the VPN.
Hi Justin, thank you for the information! I am planning on buying this router, but I have a quick question.
I need to travel to South America for three weeks, but my employer does not allow me to work from there, and my computer also has a VPN set up.
Can I use this VPN router to set up a US location and connect to my work VPN from there?
I am new to this information, so I am trying to understand how I can do it.
Thank you!
Yes, the two routers basically make a bridge from wherever you are back to your house. However, there are some speed and latency issues with video calls or anything high bandwidth like that. Also, if your home Internet goes down while you are away, you are out of luck. So be sure to test as much as you can before you go. Safe travels and thanks for watching!
@@justinreviewsandrepairs5246this is the same question I had ! So even if I my work computer has its own company built in vpn…I can still by pass this by telling the vpn that my IP address is in my “ home address “ by following your instructions? Just wanted to double confirm this information !!! Please let me know !!! And thanks once again you are the best !!!
@@ratimes8k yes, you can bypass it this way.
@@zahscr aye how can I set up the vpn using a web link from the hotel I am staying at…for some reason I can’t get it done any help
Hi Justin! I got everything set up just like in this video. However, when I connect my client Slate AX to a public WiFi network outside the home (Starbucks, the library etc.) I get the message " The interface is connected, but the Internet can't be accessed with IPv4 protocol." It works perfectly when I use my mobile hotspot to connect to the client router. Is there something wrong with my configuration? I am worried because I have an out-of-state trip to go on in 2 days, and need this system up and running. Thank you so much for your help!
Best regards,
Jennifer
Hi Jennifer, sometimes public WiFi networks require you to accept terms of use and things like that, it makes the process a lot more time consuming but it can be done: docs.gl-inet.com/en/4/tutorials/connect_to_a_hotspot_with_captive_portal/
@@justinreviewsandrepairs5246 Thank you so much, I realized that this might be the case. For anyone else, I fixed it by updating my client router to version 4.2, which has a new feature that essentially lets you spoof your MAC address by using a custom mac address. I went through the login page on my iPhone and then went into settings, clicked the wifi network I connected to, and then copied down the "Wifi Address". Then I copied that MAC address into the router, and then the wifi connected to the router perfectly. I hope this is helpful for someone!
Thank you for sharing!
@@justinreviewsandrepairs5246 Hey Justin, I am having the same problem and do not quite understand what to do. I tried to follow the directions that you posted but I was still having issues. It no longer gave me the error message of the internet being accessed, and said that it was connected, however, it did not load any web pages. I also tried to get on my phone hot spot to try that out and it said it was connected but then again, wouldn't load web pages saying that it was not connected to the internet. Could you possibly make a video of you using this system to connect to a phone hotspot or a different wifi network? Just so I could see it visually? Or if not, do you have any guidance? I appreciate this video and your responses so much!! If I can get it working it will be the best thing in the world (and I won't lose my job lol)!
This video helped me a ton and I'm using the same set up. Thanks for making this.
Glad it helped!
Hi Justin, we did all the steps but we cant get the VPN client connected with Wireguard. The log file keeps telling us that is reloading firewall du to the IFUP of modem.
Someone else is having the same problem, I am going to check if new firmware is causing it. If it's not then I wonder if you both have the same ISP causing the problem. I will try to post an update soon.
@@justinreviewsandrepairs5246 We fixed the isuue with support from GL. Instead of choosing "both" in port forwarding, we needed to choose UDP and connect the 1800 in another network than the 1200. Thank you
@@nickkoutris4873 Hi Nick, I think I hit the same problem as you did. On my Client router, the yellow light is always on the "WireGuard® Client" sign of the admin website. Per your solution, is changing port forwarding from 'Both' to 'UDP' the only change you made to solve the problem?
@@nickkoutris4873 this worked for me! I switched the port forwarding from both to UDP. I also connected the repeater with the client wireguard to a different network than the network i was forwarding on (where i had my repeater with the wireguard server). I just used my hotspot to test.
@@chyfsam Any update on this? I'm having the same issue and changing from 'both' to 'UDP' didn't fix the issue
This is a great video and was exactly what I was looking for! Thank you!
Glad it was helpful! Thanks for watching!
Awesome tutorial, I wish I found this sooner. Thank you
Thank you so much! 🙏
Yow from Jamaica here, worked exactly like you said thanks
Awesome video Justin! I emailed him because I was having some port forwarding issues and he got back to me very quickly. Wonderful channel!!! Thank you so much, dude!
Hi Justin. I am experiencing port forwarding issues with my Virgin Sagecom FST5250 device. I can’t find good videos on the internet and when I set up the conditions similar to yours it says it’s not valid. Is port forwarding absolutely necessary for the extra security with opal? What can I do? Thanks in advance- you are a life saver
Precisely the issue I encounter when I type “51820” in the port forwarding rules is “you must enter either a number or a range between 1 and 65535. With a range, put the larger number at the end”
whats his email , i wanna reach him too , thanks in advance
You are a lifesaver. Thank you so much
Thank you so much, you now made this thing very clear for me . I did not know what the whole set up is and how i would hide my location while working abroad.
Glad it helped, let me know if you have any other questions.
hey any updates? is it still working fine?
Hi Justin, amazing video, very accurate and valuable. Saludos desde República Dominicana
Thank you! 🙏
Man this GOLD keep doing Lord work!!!
Nice review Justin, keep it up :P
Thank you! Is there anything you would like to see reviewed or a problem you need help solving?
@@justinreviewsandrepairs5246 Port forwarding piece please :)
You are my hero ! Biggest THANK to you on Thanksgiving
Thank you! Happy Thanksgiving! 🦃
Thank you for this 🙌.
Very detailed thank you
Great video! huge plus to Author!
Hi Justin thank you so much for all of the service that you're doing. I read your comment about them just wanting to make sure you have a secure connection, I agree I think most IT people don't have the time to dig any further really unless you give them a reason. I was wondering do you think if I buy the slate AX and install a residential VPN on it here at my home and then Ethernet into it, that would generally speaking be enough?
A residential VPN from a third party service or running the server yourself? Not many third party services offer residential IP Addresses but there are some.
Thank you again for doing this!!!
No problem, let me know if you have any questions or other videos you would like me to make.
Thank you so much.
I wanted to highlight one thing: I followed the whole video and still faced an error when I was trying to connect(turn on) the VPN client. The reason behind that was my second router was not connected to the internet. So, if you are facing an error when you turn on the client after configuration, make sure your device is connected to the internet (similar to how you connected the first device to your home internet).
Thanks.
Great and informative video man, thanks
Thank you!
Fiz aqui e funcionou perfeitamente, melhor que eu esperava. Muito obrigado.
Estou feliz que funcionou perfeitamente! Obrigado por assistir!
God bless you. You're the man
Thank you, comments like yours keep me motivated to make more videos!
Hi Justin,
First, I want to thank you so much for the detailed step by step tutorial. Like most people here I happen to encounter the most common issue - I can’t start the VPN WireGuard Client on the travel router despite setting up the server/port forwarding.
Some background, I have Verizon and even after setting up port forwarding, I run the DDNS Test I still have 2 different IP Address and the same warning - from DDNS Domain Resolution is the same as my ISP Public IP, but the WAN Interface Ethernet is still the same one it was assigned initially.
Look forward to hearing from you and thanks once again!
Edit: Turned out I changed from TCP to Both in the process of Port Forwarding set up and everything started to pick up and worked out fine now.
Yes, some people have to select UDP only, but "Both" works for many. Glad everything is working now!
@@justinreviewsandrepairs5246 Just a follow up question - I expect a big drop in connection speed but what would you estimate the speed to be if I were to be in very long distance (thinking US-Asia Pacific)?
You can estimate using the latency values from wondernetwork.com/pings between two cities. If it is above 300 your speeds will drop significantly
@khanhly-courtleveltennis how were you able to set the port forwarding in Verizon? I'm also using both in the process of port forwarding but it doesn't seem to work .... did you call verizon?
Hey Justin thank you for your detailed explanation setting up these routers. However, I ran into an issue, but I was able to fix it by reading the comments. I wanted to share this in case someone else encounters the same problem and needs some help. If you have a Xfinity router at home, please DO NOT use the default IP address for the Wireguard server which is 10.0.0.1. Instead, you canchange it to 10.20.0.X/24. After I did this, my network became more stable with no drops, and it's working smoothly.
Thank you for sharing! This is correct! Xfinity routers use a private IP Address range typically used in a corporate environment. You will also need to change your default LAN if your ISP Router is using 192.168.8.1/24
Hi @abelulloa3979, I have Xfinity as well and when running DDNS Test and it says that the DNS record for this DDNS domain could not be found. Would you be kind to help me?
Thank you for this great information.
Glad it was helpful!
These are the best "step-by-step" instructions out there. Thank you you taking the time to explain everything and making this seem much easier. Is it common for connection speeds through the VPN to be pretty low? I have a 500mbs connection in the US. 1GB in the UK but regularly register 20mb speeds through the wireguard VPN. However im using 2 Beryl AX routers.
Thank you! Are your connections Fiber Optic and have 500mbps Download AND Upload? Upload speeds are also important.
In general the connection between New York and London is good: wondernetwork.com/pings/New%20York/London
If you set up your Home Server with WiFi instead of Ethernet, you should switch to Ethernet for improved latency. Keep in mind doing so will require you to update the Port Forwarding rule as well to the Ethernet IP Address listed in the Dashboard.
This is super exciting. I ordered 2 gl flint 1's and can't wait to hook them up. I'm trying to create a tunnel from the inlaws to our house for netflix.
I was so mad when they started charging extra when my plan supposedly allowed more than 1 device to stream that I cancelled. Setting up a tunnel is definitely an option, but I hate that we have to.
Thank you so much for this video! You did an amazing job breaking everything down! I am getting stuck on the last part of the video, do you have to log into you home router i.e AT&T and changing the firewall (Port forwarding info) I am getting a little confused when it comes to the Froniter Communications part. I have two Slate 1800s and I am trying to set up the home one that is connected via wifi and ethernet and I am running into an issue at the end when you paste the Interface info, it just keeps saying Connecting please wait for hours. Any suggestions or recommendations would be greatly appreciated! Thank you
Thank you! Are you testing using the same network? The Client Travel Router should be on a different network such as a hot spot. If that is not the problem, please click Show Logs and email them to support@JustinPruett.com and I will see if anything stands out and we will troubleshoot together. Thank you!
Thank you so much for this, because of you I’m able to spend time with my girlfriend abroad where otherwise we would’ve been apart for months
Glad it helped! Feel free to name your children after me! 😜
Thank you!!!
Sir you are a GODSEND. Thank you so much!
Thank you!
Great video 👍
Thank you!
This is a great video Justin. I am planning on purchasing both as you have recommended in this video. Do you think Opal would be fast enough to use as wireguard vpn server leaving it home and have 2 or 3 connection to it from Slate that both me and my wife would use it for work while traveling and working remotely. I just wanted to make sure it is still the good solution or anything have changed since you have published this video. I am thinking Opal instead of two Slate as Opal is much cheaper but want to make sure for two person to have connection back home at the same time is still a good choice. Would there be any performance issue with Opal assuming that the internet speed is decent at the remote location. My home is ATT and 300mbs plan.
And one last and important question. Is there any issue using work laptop that uses cisco any connect to vpn to work server but for it's internet connection it would connect to Slate that would then vpn back home using wiregurad ?
Thank you! Two Opal would be fine for light use like Email and browsing the web, but if you need to do more then the Beryl AX or Slate AX would be better suited because they have more processing power. The VPN connection is actually encrypting and decrypting messages as fast as it can so over time all of the models should heat up and possibly slow down if it gets hot enough, but the Slate AX has a built in fan.
So far this solution seems to work with every Work VPN since the router itself is providing a VPN connection back home that your Work VPN can use to connect as it would at home. The only unsolved mystery is how to decrease latency, which is highly dependent on your Internet connection on both ends.
@@justinreviewsandrepairs5246 so you are saying the work laptop should be just fine if it needs vpn (cisco any connect) and then the vpn that Slate (wireguard) would provide. Meaning vpn over vpn. This inherently would be little slow but if the internet speed is fast enough it should work. right?
Thank you sooooooo much!!! Love this!
Thank you!
Thank you very much Justin for perfect explanation. The only issue is, when connected directly to internet my internet speed is 20MB download and 15MB upload (using my mobile hotspot), but when connecting to the wiregaurd server the internet speed reduces to 5 MB up and 5 down. I am using GLiNET AX-1800 for my server at home and the AXT-1800 for travel router. I appreciate your help
You will always be limited by your slowest connection, that's why if possible you should get Fiber Optic Internet for both ends.
Besides Upload and Download speeds, the third factor is Latency. Your HotSpot is likely adding latency which will reduce overall speeds.
@@justinreviewsandrepairs5246 Another question. I set this up at home and it worked well. Now I connected my server modem to my friend's home Xfinity modem via cable and I get internet on my server modem but as soon as I turn on the Wiregaurd server, internet get's disconnected. I even tried adding the portforwarding port to my friend's Xfinity app (and turning off advanced security, but the issue still persists). Do you know what could be the issue?
@@justinreviewsandrepairs5246 another question. I set this up at home and worked well connecting client to server. Then I connected server modem to my friend’s Xfinity via cable. The issue is I have internet on my server modem until I turn the wiregaurd server on. I soon as I turn wiregaurd server on, internet gets disconnected. I even tried adding the port to Xfinity app in my friend’s phone and turned off advaced security but still not working.
@@justinreviewsandrepairs5246 another question. I set this up at home and worked well connecting client to server. Then I connected server modem to my friend’s Xfinity via cable. The issue is I have internet on my server modem until I turn the wiregaurd server on. I soon as I turn wiregaurd server on, internet gets disconnected. I even tried adding the port to Xfinity app in my friend’s phone and turned off advaced security but still not working.
Xfinity uses a corporate network address by default which conflicts with the default local address for the WireGuard ®️ VPN Client. You will need to change the default from 10.0.0.1/24 to 10.1.0.1/24 on the WireGuard ®️ configuration as seen here: docs.gl-inet.com/router/en/4/interface_guide/wireguard_server/#setup-wireguard-server
Hi Justin, great video! Do we need also a kill switch to disallow any traffic to pass if the wireguard connection goes off? Thank you very much for your video and help!
It depends on the firmware version, for most it is on by default if the VPN is toggled on (even if it gets disconnected). If you disable VPN it would allow traffic to pass, so be mindful of that.
Hey Justin thanks for the amazing video. This is becoming a hobby for me. I’m still working out the kinks but learning along the way.
I do have a question. I’m port forwarding using xfinity s app. There is no place to enter in the IP address but it does have a drop down menu to select a device. However, using the drop down sets the IP as the (10) address. I’m not sure if this is the issue preventing me from connecting the client to the server.
So far I’ve tried bridge mode. I may try a Dmz soon. I read somewhere on the internet I have to turn off xfinitys build in security entirely. I don’t think it will come to that. That doesn’t make that much sense to me. Hopefully I’m not re asking a question. I’ll read back through the responses one more time
Is it the same IP Address you would see from the GL.iNet dashboard page that shows your connection information?
@@justinreviewsandrepairs5246 yes sir it is
And then are you testing by putting the travel router you take with you on a hotspot so it is not the same network?
@@justinreviewsandrepairs5246 I did that lol and it worked. I was trying to connect the client to the server with the same internet at the same time. Then I tried connecting the client to the server with no internet. But your way worked. Thank you very much. I'm very thankful. Last question I changed my server from being recognized by my modem/router as Reserved IP to DHCP. is that fine?
Awesome video and well explained - thank you. I'm looking at a setup to use my home IP and thought I might use a virtual machine running Linux and a VPN server along with DDNS at my home router with port forwarding would allow me to pretty much do the same with one GL.iNet GL-AR750S-Ext Gigabit Travel AC Router. But now I'm thinking 2 of those routers might do it easier instead looking at your video. Any thoughts on a VPN server running in a Linux VM and only one travel router?
Thank you! Depending on the speed of your server that route could be faster, using a VM instead of a bare box could slow down network traffic though.
@@justinreviewsandrepairs5246 Interesting, I hadn't thought of the speed. I do have a FreeBSD Unix server running Plex that does pretty much nothing when I'm away. Running a VPN server there in a jail might be an option. Thanks for the comment and great work on the videos - I've subscribed.
Thank you Sir
Hi Justin, I appreciate you going through the motions and explaining every step for us. When I run a DNS test, it shows my real location. Is there a step or plug in to try and avoid the DNS leak? Thank you!
Yes, the other video shows how to set your DNS to CloudFlare or whichever you like. It also needs to be changed in the configuration file that you use for the Client.
Hi Justin! Regarding your comments in the updated description box, if I get the Beryl AX and the Slate AX, which should I leave at home and which should I take with me? Also how much does the MT1300 differ from the MT3000? I am an absolute novice so apologies if these are really basic questions… I want to make sure I buy the right devices. Thanks in advance!
Hello, the Opal is no longer receiving updated features, so that is why I now recommend the Beryl AX. The original Beryl may or may not get updated, but the Beryl AX is significantly faster for WireGuard ®️. In the event that you find out that you cannot do the port forwarding step, the Beryl AX supports ZeroTier which is an alternative method that will allow you to complete the overall setup. As far as which device stays home, it can be either since the devices are extremely similar, but I prefer to take the Slate AX and leave the slower device.
Thank you Justin for the informative video! GL-iNet is now version 4.5.16 and options are rearranged (a lot) but your video still hits all the major points.
On your remote client router, Slate AX in your example, did I miss where you can specify a split router?
In an ideal world what two GL-iNet routers would you recommend for 2024?
Another question I can not find a definitive answer; I want my Client(s) to access location A and location B.
I would like to be able to reach all devices in BOTH locations.
If location A, HOME devices are 192.168.1.x/24, do devices on location B, OFFICE have to be on a different sub net 192.168.2.x/24 (NOT be the same as 192.168.1x/24)?
Thank you, I guess it is time to make an updated video.
For your use case I would highly recommend considering the Ubiquiti UniFi UDM Pro to establish the site-to-site connection. They have some cheaper options as well, but in general Ubiquiti is very expensive because it makes that type of advanced network set up easy. The GLiNet routers are great but they are not intended for your use case.
I will need to upgrade my firmware to see what you are seeing as far as the split "router", could you explain what you mean by that?
Hi Justin, first and foremost, fantastic video! I do have a few questions: 1) How would the Opal and the home modem setup look like? 2) Do you have the kill switch/block all non-vpn traffic on for both devices?
Thank you!
If you plug the Opal directly into the modem, you won't need to port forward.
The kill switch would only be on the Client (Slate AX) and was on by default in the version of the firmware I was using, it's always good to double check though from the dashboard.
Greate video Justin. I watched your previous video too. Question using port forwarding like this wouln't put my company on any risk rite ? I hope so:)
Thank you! Yes, using port forwarding means we are relying on the security of the GL.inet router so be sure it is up to date. There will always be the possibility that an exploit is used before they can patch it though.
Justin, I wanted to give you an update since you have been so helpful. First, the good news, I purchased both slate ax and the opal using your links. Second, I was able to set up and test the port forward with your guide and it is functioning as intended. However, yep some not so positive news, I am getting too great of a latency where just trying to use authenticator code for work vpn login it's timing out. Both routers are using the ethernet connections to isp routers. Both isp locations have 400+ mbs service. Unfortunately, I was unable to test with my laptop connecting to slate ax via ethernet cable. I was getting speeds of only 12mbs this way. I was able to eventually get into the work vpn and access it's servers, so it WILL work, but not with the reliability I was hoping for. Maybe, with Laptop connected via ethernet cable to slate ax it will get better... Fingers crossed. Anyway, thanks for the help. I am quite certain I would not have known how to set up without it.
Do you have 400mbps service both download AND upload? Upload speed is also important.
One other thing to check is if the country you are in just has a poor connection to the rest of the world. You can use this website to gauge the latency between two cities. If the latency is too high, like above 150 ms, you will encounter problems as well. wondernetwork.com/pings
Can you describe your authenticator? A traditional authenticator uses a time based 6 digit code or a code is sent over SMS to your phone.
nice video!! thanks for the info!
Thank you! Yes, I am afraid it is too late to remove it, but if I do get hacked at least I can make a video about it :-P
@@justinreviewsandrepairs5246 i edited my post so i dont give any ideas!
Haha thank you
Hey Justin, amazing tutorial and exactly what I was looking for - thanks!
Question - is it possible to do with two GL.iNet Opal routers?
(I see in the video's description you mentioned only the Beryl AX and Slate AX as the devices I can take with me, but it's not clear to me if the Opal is excluded, and if so - why)
My plan: to leave one Opal router connected directly to my home router, and to the the other with me so I can brows from my home IP
Thank you, yes you can use two Opal, but the Opal is no longer getting new features and it is the slowest device of the three.
The Beryl AX came out after this video was made and it often goes on sale for less than $100 and offers all of the latest features as well as a significant speed improvement!
I originally went with the Opal because the Slate AX was $150 so I got the cheapest device that could provide the speeds I needed for a total of about $190. Now with the coupon you can get two Beryl AX for about the same price. (Coupons can only be used once per order, but you could just make 2 orders 😉)
@@justinreviewsandrepairs5246 All right, thanks man! I'll get the Beryl then, used your links :)
Hello friend, thanks for making this great video. I've watched it a few times and loved it. That being said, I’ve setup port forwarding on my home router but I’m not seeing any traffic when I setup the WireGuard server at (7.31) . I’ve followed the steps slowly and tried multiple times but still no traffic. Any idea what might be causing this? Thanks for your time and any advice would be really appreciated. Pete.
Are you using a second Internet connection for the Client Travel Router? You cannot test from the same Internet because the devices would both already be on your local network.
Great video. Thanks.
How is the Network mode (router, AP, Bridge) configured in the Opeal and the Beryl?
The network mode is in Network -> Network Mode: docs.gl-inet.com/router/en/4/interface_guide/network_mode/
@@justinreviewsandrepairs5246 Right, but which one of the options did you choose after that?
For this video, both routers are set to router mode.
Thank youuuu
Really good comrade✊🏿✊🏿👍🏿
Thank you so much for putting this together! Instead of purchasing the Oval, would you advise purchasing another Slate so one serves as the client and one for the server? The purpose would be to increase video quality especially when it comes to watching TV and better video calls.
Yes, two Slate AX would be preferred since the Slate AX has more powerful hardware to encrypt and decrypt traffic on WireGuard ®️ but keep in mind that physical distance between the two devices and the latency will always play a role so be sure to test and/or have a backup plan. Thanks for watching!
@@justinreviewsandrepairs5246 So in this case, is it better to have a flint as server and slate plus a router? which is better as the distance will be far
Hey justin, Thanks for the vid really helpful I look forward to setting this up next week. Just had a question, if i have a static ipv4 ip do i still need to do the ddns?
If the case is "i dont need to complete the ddns" will i ever have trouble with the ip changing as its static? Sorry you can probably tell I'm not techy. Just trying to be sure. And would there be any harm in completing the ddns step anyway?
And one least question, Is there a firewall that i need to setup when doing this port forwarding?
Your static IP shouldn't change, but I would setup the DDNS anyways just as a precaution -- there is no harm in completing the step.
Some ISP routers might have a firewall or "advanced security" which may or may not need bypassed after setting up Port Forwarding. Many ISPs will guide you through the Port Forwarding step if you call them. Almost every ISP has their own unique software on the routers so it is hard to generally say what you will encounter.
Good day Justin! Hope all is well just asked you a quick question via email. Thank you always!
Question was a little confusing, feel free to ask again if it was not the answer you were looking for.
Hello Justin, I followed the steps and went thru perfect works great thank you. If I buy another travel router and copy the script on the router will work as well?
Great! Yes, you can have many VPN Clients connected to the one VPN Server, but be sure to make a new configuration for each one since each one gets assigned an IP Address. If you copy the same configuration to each one then you can only use one at a time.
OK got it and understand it. Thank you very much.
Thankyou for the detailed video Justin. If the opal is not available to purchase, can we just use the AX Slate on both ends ( in the home and in a roaming location as a vpn server /client respectively) ? Thanks again !
I have not tried, I know the firmware was still a work in progress when this video was recorded but it SHOULD be possible. Besides the Opal you could also get the Mango or Beryl to save some money and have a more complete firmware. Thanks for watching!
Hi Krishna Kishore have you tried with ax slate on both ends ? And how it it work need this setup ASAP please reply
Chris, you can use flint and opal as vpn client and server which works 💪
What is flint brother ?
Great video. We are wanting to travel abroad and allow me to do my daily remote working. Would this setup be recommended for this or is the Slate AX all I would really need to do that effectively? If this one is recommended, can I use my existing Orbi router instead of the Opal to use as the home IP?
Thank you! If your Netgear Orbi supports WireGuard ®️ you can use it to run the server, but from my quick search the Orbi does not have it built in. The implementation is standard so if you have another device such as a NAS that supports WireGuard ®️ you could use that. You could also use OpenVPN but the speeds would be slower.
Hi @Justin i've been watching this video more than you can imaging to understand every step to do it correctly I just have one question, both router must be connected on the network at the same time or I can configure the server first on my home network and then send the info to the user but in other network thank you much.
Yes, you can configure the server then send the WireGuard ®️ information to another user. Be sure to create a new configuration for each user, do not share the same configuration because it includes an IP Address that might not work for the second person if the first person is already connected.
Would love to see a video on how to use the Slate AX on public WiFi that has captive login portals, like airports or hotels for example. Sometimes they prevent me from internet access when using the slate ax.
Thanks for the suggestion! It is a huge pain connecting to some portals, luckily there are two ways to do it: docs.gl-inet.com/router/en/4/faq/connect_to_a_hotspot_with_captive_portal/
But in my experience their Internet is often slower than my own HotSpot anyways. AirBNB is usually the way to go when you need to work remotely since their Internet is usually good.
As far as HotSpots, the USA and Japan each have providers that offer Unlimited High Speed HotSpots.
Hello!! Thank you so much for this video!! Just one question lol ..if i purchased two beryls would the process essentially be the same? I'm a tad bit tech savvy and can follow directions very well. 😂
Yes, there are minor differences because the firmware is newer but the overall process is the same. Please don't hesitate to ask for help if you get stuck. Either post a new comment (I don't get alerts for replies to existing comments) or send me an email at support@JustinPruett.com
Thank you!
Is this possible without access to the router to setup port forwarding e.g. using tailscale or zerotier? If so, can you also make a video showing steps on how to setup. Thanks.
You could setup ZeroTier ahead of time and then have the person you ship it to plug in power and Ethernet and be good to go. I hope to start on a ZeroTier video soon.
Hi Justin - great video.
I've just set up a Slate router with VPN etc and tested at home tethered to my iPhone- working fine.
However, just wondering why you used the Opal as the second router to use for travel rather than something like a GL Mango or something which I believe can be charged with a USB? rather than the Opal which needs a standard plug connection?
Is there a second VPN router that can be USB charged that you have used or would recommend as the travel router? Just thinking that in Cafe's or whilst travelling in a car etc you may not be near a plug socket so would be useful if could be USB charged? Thanks
Actually, you can power them by USB, please see 3:19 in th-cam.com/video/xAh6nUXIM5A/w-d-xo.html The reason to use the Slate AX is speed versus a mango. If you want portability, gl inet actually makes routers with built in batteries now which sounds like what you want.
@@justinreviewsandrepairs5246 Great - thank you!
Hi Justin, great video !
I'm curious how this works with Microsoft Authenticator/ Okta installed on personal phones . Do I run the risk of leaking location?
Thanks!
Thank you! Yes, installing software on personal phones will allow them to track you via GPS, Cell Tower, or even the Camera. If you are logged into the same account on both devices your location could be shared with the computer as well. Whether or not a company is actually spying on you varies from company to company. I have heard of some companies that require you to be on webcam even when there is no meeting.
If you can use a tablet or old phone with GPS and everything disabled, you can connect it to the VPN and that would likely be safer.
Okay, you've been awesome, and this should be my "for real" final question, is it possible to connect a landline phone to the client router to take and receive calls from your home country (Digital Landline Connectivity)?
It wouldn't be part of the native functionality of the router, but if you could find a device that connects your phone to your network then you would be able to access it through the VPN. Using VOIP would probably be the easiest option if you have that ability.
hi Justin. quick question. I also have frontier and looking to buy a GL-MT3000 / Beryl AX (for travel). I want to connect to my home IP in USA from Ecuador. Do I need to buy a second travel router like you have in the video (because you have the OPAL for home) I was looking at the GL-MT6000 / Flint 2 for home to "" what frontier provides. That is my question. can I simply replace the frontier one or do I need 2 routers at the home like you have the OPAL and the one from frontier? I appreciate the time and effort you put into breaking down step by step how to move forward with setting up wireGuard to connect to our home IP.
Frontier is great, it is Fiber Optic Internet so you can plug in any router to their ONT. So the Flint 2 would have a cable from the ONT to the WAN port of the Flint 2 and run your Server without the need to Port Forward.
The Beryl AX would be your Client, but keep in mind you should still test your setup from a second Internet connection.
In the video, I was actually port forwarding from the Frontier Router to an Ubiquiti UDM Pro router that was port forwarded to the Opal Travel Router that was running the Server. So there is a lot of flexibility with how you can set things up.
Today, there are some other brands that offer WireGuard ®️ as well, so if you happen to have a supported Asus router or Ubiquiti UDM Pro, you could actually use that router as the Server. I used the Opal because it was the cheapest option that still provided decent speeds at the time. Today I would probably buy two Beryl AX for about the price of the Opal and Slate AX. The Flint 2 is designed for home use so it is larger, but it does provide the best WireGuard ®️ speeds you can get between the four routers we discussed.
@@justinreviewsandrepairs5246 thank you so much for the reply. Do you recommend I set up the DDNS? is that a must or I canuse it without that set up.
If you have a Dynamic IP Address from your ISP, you must enable DDNS because your Public IP Address could change at any time. If you have a Static IP Address you can leave it off because your Public IP Address will never change. Most Residential ISP will have Dynamic Public IP Addresses so you will need to enable DDNS. The GLiNet DDNS service is provided for free so you might as well take advantage of it.
Great video. Love it. Instead of the opal and slate AX I used two Slate Plus to set this up. I connect one Slate Plus to my FritzBox Router (My ISP Router) at home which then serves as the Wireguard Server and the other Slate Plus is then my Wireguard Client. So far so good. But for some reason when trying to enable DynamicDNS the DDNS Test, I get the following error message:
"The IP from DDNS domain resolution is not the same as the WAN IPs of the device. You need an Internet Public IP address to use the Dynamic DNS. If this router is behind NAT, you may need to set up port forward in your ISP router." ---------- (I did already forward the ports as described in your video as well on my ISP Router but that does not seem to do the trick.)
Can anyone help me with this? I would really really appreciate the help
What result do you get from this test? justinpruett.com/glinet-troubleshoot.php
@@justinreviewsandrepairs5246 Thanks so much for the fast response. When I enter my DDNS Name (the one given by the Slate Plus) and do the test, then it does show my public IP. So I would assume it works? But for some reason the DDNS Test on the GL.iNet Admin Panel does still not seem to work.
@@uppermost865 yeah that is strange but it seems it worked at least previously
Hey Justin! This is a great video. Though I am not a software expert I was able to set my routers up. But I have been facing a problem and was looking if you could help me. I have configured a flint as my home router and beryl ax as my travel router. When I set the wire guard server up they both connected well and all was fine but as soon as I took my beryl remote with me it wasn’t connecting to the wire guard but again when I got it home it would connect to the flint. Is there something that I am
Missing here?
Usually people have the opposite problem 😆
It is likely that your configuration file is using your local IP Address instead of your DDNS address on the "Endpoint" line. Please double check that you see a domain instead of an IP Address on that line.
If you prefer, you can email your configuration to support@JustinPruett.com
This is so helpful! Thank you so much. If I am setting this up from a family member's router, will their connection be impacted at all with me connecting remotely?
Yes, you will consume as much bandwidth as you would while you were there plus the bandwidth needed to send the data to your remote location. So if you plan to do things like video conference or watch videos you should consider a 500/500 fiber optic Internet plan.
Thank you so much, Justin! Amazingly helpful, luckily, it sounds like they will still be able to connect to the internet as normal, they just may experience somewhat reduced speeds@@justinreviewsandrepairs5246
Yes, but the flip side is YOU could also experience slower speeds while they are watching videos or video calling if the connection does not have enough bandwidth for both of you.
Hi Justin, thank you so much for the video! We are embracing on a journey of being digital nomads. My question is as our jobs are remote call customer support, I read some where that VPN router/client make it behind NAT and will slow down the VOIP service ( the company use Amazon Connect). We have a relative fast internet speed in Australia and we are looking to go South East Asia. Will this be a problem with the phone calls quality? Cheers
It's not so much that NAT as it is the latency. Your Internet traffic is going from wherever you are back to your house then to the Internet, then to your house, then back to wherever you are, so you want as much Fiber Optic Internet as possible. Some countries do not have as good of infrastructure as others and while you may have Fiber in a country, they might pass traffic through a country that doesn't have Fiber which will increase your latency and result in poor call quality. You can estimate latency between major cities using this tool: wondernetwork.com/pings
If the latency is over 200ms then you will likely have poor call quality.
Hi Justin, thanks for this vid, it’s awesome. Is there a significant advantage of using the OPAL router to maintain the user's US IP address (while overseas) over just using the SLATE 1800 VPN router to set your location to the US while overseas? which of these is a better option for hiding location for remote work? thank you, Sir.
Thank you! Ultimately it depends on your employer. If they don't care if you are using a VPN like NordVPN or WindScribe, that is the easiest way since they take care of keeping the server fast, online, and updated. Your company can tell if an IP Address is residential or not by looking it up at www.arin.net/ so if they care then you will have to setup a VPN Server on a Residential IP Address which is usually similar to the 2 router setup in this video.
@@justinreviewsandrepairs5246 Awesome, thanks for the explanation
Hi Justin. I was able to follow up and set everything just you explained. I wanted to explore connecting to other computers in the home network ( example - connect to a PC at home network via remote desktop) while using my mac on the go. Let me know if there is a way to get in touch with you to explore this option.
Yes that should be possible, you will need to know the local IP Address of the remote desktop computer such as 192.168.1.23
@@justinreviewsandrepairs5246 thanks is there a way to connect with you to discuss this further ?
Great video Justin! Thanks for sharing.
I have ASUS RT-AX3000 router and Arris S33 Modem. If I get the same travel routers you have (GL Slate and Opal), will the set up be similar or it's going to be different (more difficult) given that my modem(asus) and home router (arris) are different than yours? Just trying to see if this is something I can do it myself :) Thanks
Thank you! It should be similar, but this video is a bit old now, I recommend getting the Beryl AX instead of the Opal or two Beryl AX. The Opal is no longer getting new features. If you run into issues, just make a new comment or send me an email at support@JustinPruett.com
Thanks!
Thanks for the quick reply and explanation Justin. If I get Beryl X and regular Beryl (previous model), should I travel with Beryl X and keep regular Beryl at home or vice versa if I want to have higher VPN speed? Or it's better to get two Beryl X for higher speed?
My friend has Beryl and said he doesn't need it :) @@justinreviewsandrepairs5246
Hi Justin, thank you for your help. I followed your instructions and successfully completed the setup. My question is, how do I know My travel router is using my home network?. I will really appreciate your help. Thank you
If you connect the Client Travel Router to a second Internet connection, you should see your Home IP Address when you turn the VPN Client on and a different address when it is off.
This is how you would use your home IP address in say America while you're in another country, so your employer would never know? Other remote work vloggers charge money for an installation but this guide is all I'd need? Seems straight forward enough.
Yes, but keep in mind that most employers have full access to your work computer so it is not 100% full proof. For example they could open your webcam or microphone and this method does nothing to stop that.
I do not offer installation services, but feel free to comment or email if you run into an issue.
@@justinreviewsandrepairs5246 Thanks. Webcam/mic access wouldn't matter because there wouldn't be any tell tale signs if so, plus we rarely use webcams in day to day work (also webcam covers built into our work computers). As for the at home router, the Flint router works great and would have the same steps?
Yes, the steps would be similar, the Flint is like the home version of the Slate AX with similar specifications.
If you are using the Flint as your main router, such as plugging a cable from the Fiber Optic ONT into the WAN or a Cable Modem (Or a Cable Router in Bridge mode) to the WAN then you can skip the Port Forwarding Step. In the video I was only using the Opal as a VPN Server, not as a whole home router.
If you want a little more power, the Flint 2 was just released and offers the highest performance. Although, I think for most people the latency between two locations will be the bottleneck rather than the performance of the device for anything faster than the Beryl AX. Having Fiber Optic Internet at both locations (with low latency) can really improve the overall performance of any two routers.
@@justinreviewsandrepairs5246 Thanks for your help. I'll be buying the routers and get things set up some time mid May.
Great! Be sure to leave enough time before your trip to test your setup. If you run into any issues, feel free to email me at support@JustinPruett.com