Please do a detailed video on port-forwarding. I'm done with a site-to-site vpn setup using Flint 2 as a VPN server and MT3000 as a travel router. I think I'm stuck at the port-forwarding step so not sure if I need to do that on both the sides or just one one side. Please provide me with some detailed steps, I would highly appreciate that Justin. Thanks!
Because every ISP router is different, a detailed video would have to be made specifically for the model you have. Please try searching for the model number of your ISP router to see if a video exists.
Hi Justin! I hope all is well. When I tried to do port forwarding with my arris wifi modem I tried putting the gl-axt1800 IP address and it says invalid IP address. When I called the company they said it’s no way I can connect one router to another and that I should connect with Ethernet cable in which I did now I’m following your other video but I’m kind of lost since I didn’t do port forwarding I connected it through Ethernet cable. I really need some help I’m will to pay for further assistance. Please advice thank you so much
They lied, in my setup I was port forwarding from my ISP router to my Ubiquiti UDM Pro Router and then finally to the Opal. Using a cable is the preferred method. You should see an IP Address on the Ethernet connection in the GLiNet Dashboard and you will want to Port forward to that IP Address on your ISP router. Unfortunately I cannot provide live assistance but you can email support@JustinPruett.com with logs and or screenshots of any errors you encounter. Thank you!
Hi, having a issue with my eero router for the port forwarding. The ip address keeps changing for the list digit. When i change it to what the router has it assigned to but then a few hours later it changes again. Anyway to get it to stick?
Eero has something called "IP Reservation" that should happen automatically when you set up Port Forwarding using the eero app, if not you may need to update the firmware on your eero. Another workaround would be to use a cable from the LAN of your eero to the WAN port of the GLiNet router and manually set your private IP Address from the dashboard.
Yes, but be sure to create a new configuration profile for each one since it contains unique information. If you try to use the same configuration for both devices at the same time there will be issues. You also may want to consider the Flint 2 as the Server since it has the highest performance.
I’ve got my setup working fine at home, but when I’m traveling, the second one isn’t routing through my home Slate AXT1800 router. Instead, it’s showing the local network name, so it’s not connecting the way it should. I work in finance, so staying connected to my home router is really important-I try to avoid using random hotel or motel Wi-Fi. Could you help me figure out what’s going wrong and how to fix it? Thanks!
Hi, Justin! Awesome videos. I was recommended the Slate AX with the Flint 1 combo. I have to access company applications, Microsoft 365 applications among them, to do my job. Will a port-forwarding setup allow for remote work away from my city without system detection?
There are many other ways companies can track you, this only allows you to use your Home IP Address anywhere. If they use GPS tracking, this will not solve that. Be careful logging into work stuff from your phone for example which has GPS.
@@justinreviewsandrepairs5246 Awesome. Thanks for the heads up! Deleting all of those apps and resetting my phone. I’d appreciate any other tips you can think of. Thank you for being so responsive!
Hi Justin, I get the error: "The IP from DDNS domain resolution is not the same as the WAN IPs of the device. You need an Internet Public IP address to use the Dynamic DNS. If this router is behind NAT, you may need to set up port forward in your ISP router. If you have VPN Client enabled, please disabled "Services from GL.iNet Use VPN" in the global options." Even after I port forward on my AT&T provider router to my gl-ax1800, which make it unable to be a vpn server for my GL-MT3000 (as vpn client). Do you know go to fix the mis match between the IPv4 and WAN IP? ( when I do the DDNS test setting on the Gl-inet setup page)
That is not necessarily an error, since you are behind your ISP router the travel router does not know your WAN address. You can check your DDNS using the tool here: justinpruett.com/glinet-troubleshoot.php
Port Forwarding is required if the Server GLiNet Router is plugged into your ISP router. You do not need to Port Forward if you replace your ISP Router with the GLiNet router.
@ appreciate the quick response. I’m using 2 berylax’s. There’s data to show that data is flowing between the two but when I go back and ddns test, its says the ddns domain resolution is not the same as the wan ip of the device. I’m wondering if thats just a warning and not a hey, something is wrong
How can I access the admin page one I plug the router in but before it is connected to the home network ? my computer does not have an ethernet court either
I have tried everything possible, but my GL AX1800 with Wireguard VPN server cannot comunicate with Slate AX client. There is nothing to do and my IP is public opening the port 51820 is not bring any effect, probably it's all about trying to select the right internal IP but I am not sure.
Are you using a second Internet connection for the Client Travel Router? You won't be able to connect while already connected to the same Internet. Feel free to email me a screenshot of your Port Forwarding settings and one of the IP Address shown in the Internet page under Ethernet of the Server Router: support@JustinPruett.com
SurfShark is not a GLiNet service, it sounds like your company may be blocking the Commercial VPN Service. You will likely want to try using your Home IP Address instead: ua-cam.com/video/LXbDg1v65Qs/v-deo.html
Hi Justin. For the ip address used for port forwarding, is it the router that stays home or the one you travel with? I followed all the steps from your main video, but when I try to connect in the last step I’m the vpn client it just stays at “The client is starting, please wait…”. I set up port forward with the information from the router that stays at home so I’m thinking that”s what I did wrong. Please confirm. Thanks! Also, I connected the router that stays at home via Ethernet, my router, nvg599, does not have a lan port. Just 4 Ethernet ports so I plugged into one of those. Is that okay?
Hello, you will be port forwarding to the server which is the travel router that stays home. Are you testing from a second Internet connection such as a HotSpot? Testing from the same Internet connection won't work. You can click View Logs and send the error log to support@JustinPruett.com if you would like me to look. Yes, plug into the LAN port of your ISP nvg599 router into the WAN port of the gl.iNet travel router.
Hey Justine, your reply is a little confusing. The port forward is on the router that stays home or the one we travel with ? I have posted in your other video before finding this video. My issue may be same as OP. I am port forwarding the GL that is staying home and is used as vpn server
Hi Justin, I was able to configure my router and my NodVPN, it was only one laptop that was able to connect to the internet via my GL-AXT1800, it was the one with which I was able to configure the router. The other computers for my family, were unable to connect. Could you help me. Even if I have to buy you some things because we're going on a trip in 3 days? Thank you so much!
@Justin, thank you so much for your guide. However I am still unable to get my client vpn travel router to come on. I am trying to set up site-to-site vpn connection between my home router(Flint2) and my travel router(Beryl AX MT3000). I am not able to get the vpn client to connect(light still orange). My ISP is COX and I think there is an issue with port forwarding.Is there a way for you to assist me on this via email or video call ? I will pay for your service.
Please click View Log on that page and send me the errors to support@JustinPruett.com Also please send a screenshot of your Port Forwarding rule on the ISP router and the Internet page of the VPN Server router which includes the IP Address under the Ethernet connection. You can also find additional troubleshooting videos here: justinpruett.com/glinet-troubleshoot.php
Hi @Justin, my Wireguard Server auto generated configuration file's (Endpoint Value) differs from my WAN IP Address. Is there a way I can manually change the (Endpoint Value of the Wireguard Server) directly? Thanks
@@justinreviewsandrepairs5246 thanks for your response Justin. I tried using DDNS address, still not connecting. Think it could be my router? Which type do you use?
@@justinreviewsandrepairs5246how safe is the wireguard set up and port fording? Is it prone to being attacked? I saw a clip on YT that port fowarding is allways geting. attacked so they can by pass the fire wall and have acess to your network.
Hi Justin, I need to know what I do if my connection gets disconnected. My ISP service is Fiber/Coaxal, and apparently, they have outages. What can I do to restore the connection to the client once my service is restored or will it reconnect automatically? Also, is it possible to have a VPN running while port forwarding, in case my home Internet service does go out?
1. Outages happen, but if they happen often you should get a better provider. 2. The client should reconnect automatically but be sure to test that your ISP router is still port forwarding after a power outage. Some cheap ISP routers will lose your settings. 3. Please rephrase this question. Are you asking what happens to your Client when your Server goes offline? If "Block non-VPN traffic" is enabled then your client will go offline until the server is back online. If you have unreliable Internet, you should consider using a commercial VPN provider. You won't be able to use your Home IP Address, but if you are always offline then you wouldn't be able to anyway.
No, You answered my question, I was asking about the Server, not the Client. But my other question was if I could use for instance my NordVPN as a backup should the Home Internet service have an outage the Nord would kick in so that the employer wouldn't see I'm not in my home state? So is enabling "Block non-VPN traffic" how I would do that?
You can load multiple profiles on to your Client Travel Router and switch as needed, but it is not automatic. From the dashboard you can toggle "Block Non-VPN Traffic" from the Global Options: docs.gl-inet.com/router/en/4/interface_guide/vpn_dashboard/#global-options-of-vpn-client
If you see your Public IP Address on the Internet Tab of the Server Travel Router for your connection type then probably not, but I am guessing you are still seeing a Private IP Address such as 10.0.x.x or 192.168.x.x?
Hi, I set up everything the way you said in your 15-minute video (I'm not too concerned about outages anymore). After I configured my client router I got a yellow by wireguard client on the admin panel, but there's no internet connection. My ISP says the port forwarding is done right, so I'm not sure what's wrong. If you have any idea what it could be, please let me know.
Are you testing from a second Internet connection such as a HotSpot? You cannot test the second travel router while it is already connected to your home network.
@@justinreviewsandrepairs5246 not sure if I understand the question, but I tested the DDNS and it says the the DDNS is different From wan. should I have connected the ethernet cable to the Flint routers LAN because I had it in the WAN. I can connect to the internet either way through the Flint SSID but I am not able to get anything through the Opal which is at a different location entirely.
Since every ISP has their own router, it is different for everyone. Many ISPs can help you with Port Forwarding on their router for free if you call their support. I can't do this for you, but if you run into any issues I can try to help you over email at support@JustinPruett.com
Please send me an email at support@JustinPruett.com Are you trying to connect via WiFi or by using a cable? The Ethernet cable should be plugged into the WAN port on the travel router and the LAN port of your ISP router.
I set this up and it works. Then my ethernet IP address seems to change every few hours, the Wireguard client goes down, and I have to edit the port forwarding on my ISP router for it to work again.
That is NOT a Help.. You say only what there stand. That the Glinet_Route has the 192.168.8.1 i know myself And that the ISP Router has the 192.168.0.1 i know too .... Is breaking my hear More than two minutes of my life for nothing
This fixed my issue, thank you! You're a lifesaver! You need add a paypal link so ppl outside America can send you tips.
Glad it helped! Thank you, the likes and comments are already so valuable, thanks for wanting to give more!
Please do a detailed video on port-forwarding. I'm done with a site-to-site vpn setup using Flint 2 as a VPN server and MT3000 as a travel router. I think I'm stuck at the port-forwarding step so not sure if I need to do that on both the sides or just one one side. Please provide me with some detailed steps, I would highly appreciate that Justin. Thanks!
Because every ISP router is different, a detailed video would have to be made specifically for the model you have. Please try searching for the model number of your ISP router to see if a video exists.
Hi Justin! I hope all is well. When I tried to do port forwarding with my arris wifi modem I tried putting the gl-axt1800 IP address and it says invalid IP address. When I called the company they said it’s no way I can connect one router to another and that I should connect with Ethernet cable in which I did now I’m following your other video but I’m kind of lost since I didn’t do port forwarding I connected it through Ethernet cable. I really need some help I’m will to pay for further assistance. Please advice thank you so much
They lied, in my setup I was port forwarding from my ISP router to my Ubiquiti UDM Pro Router and then finally to the Opal.
Using a cable is the preferred method. You should see an IP Address on the Ethernet connection in the GLiNet Dashboard and you will want to Port forward to that IP Address on your ISP router.
Unfortunately I cannot provide live assistance but you can email support@JustinPruett.com with logs and or screenshots of any errors you encounter.
Thank you!
Hi, having a issue with my eero router for the port forwarding. The ip address keeps changing for the list digit. When i change it to what the router has it assigned to but then a few hours later it changes again. Anyway to get it to stick?
Eero has something called "IP Reservation" that should happen automatically when you set up Port Forwarding using the eero app, if not you may need to update the firmware on your eero. Another workaround would be to use a cable from the LAN of your eero to the WAN port of the GLiNet router and manually set your private IP Address from the dashboard.
Hi @Justin, I am still having issues with my set up. Is there anyway I can book a virtual consultation with you to resolve this?
Sorry, I am not available for that, but if you send me an email with your error logs I can take a look: support@JustinPruett.com
Hello Justin, Can you have 2 travel routers at different locations connected to the server router at the same time?
Yes, but be sure to create a new configuration profile for each one since it contains unique information. If you try to use the same configuration for both devices at the same time there will be issues. You also may want to consider the Flint 2 as the Server since it has the highest performance.
I’ve got my setup working fine at home, but when I’m traveling, the second one isn’t routing through my home Slate AXT1800 router. Instead, it’s showing the local network name, so it’s not connecting the way it should.
I work in finance, so staying connected to my home router is really important-I try to avoid using random hotel or motel Wi-Fi. Could you help me figure out what’s going wrong and how to fix it?
Thanks!
From the VPN Client page please click View Log and email me those errors: support@JustinPruett.com
Hi, Justin! Awesome videos. I was recommended the Slate AX with the Flint 1 combo. I have to access company applications, Microsoft 365 applications among them, to do my job. Will a port-forwarding setup allow for remote work away from my city without system detection?
There are many other ways companies can track you, this only allows you to use your Home IP Address anywhere. If they use GPS tracking, this will not solve that. Be careful logging into work stuff from your phone for example which has GPS.
@@justinreviewsandrepairs5246 Awesome. Thanks for the heads up! Deleting all of those apps and resetting my phone. I’d appreciate any other tips you can think of. Thank you for being so responsive!
@@justinreviewsandrepairs5246 but some commercial VPN protect you from geolocation I guess..
Hi Justin, I get the error: "The IP from DDNS domain resolution is not the same as the WAN IPs of the device. You need an Internet Public IP address to use the Dynamic DNS. If this router is behind NAT, you may need to set up port forward in your ISP router. If you have VPN Client enabled, please disabled "Services from GL.iNet Use VPN" in the global options." Even after I port forward on my AT&T provider router to my gl-ax1800, which make it unable to be a vpn server for my GL-MT3000 (as vpn client). Do you know go to fix the mis match between the IPv4 and WAN IP? ( when I do the DDNS test setting on the Gl-inet setup page)
That is not necessarily an error, since you are behind your ISP router the travel router does not know your WAN address. You can check your DDNS using the tool here: justinpruett.com/glinet-troubleshoot.php
Did port forwarding work if the two devices can communicate? Or can they communicate regardless of if port forwarding was achieved or not?
Port Forwarding is required if the Server GLiNet Router is plugged into your ISP router. You do not need to Port Forward if you replace your ISP Router with the GLiNet router.
@ appreciate the quick response. I’m using 2 berylax’s. There’s data to show that data is flowing between the two but when I go back and ddns test, its says the ddns domain resolution is not the same as the wan ip of the device. I’m wondering if thats just a warning and not a hey, something is wrong
Correct, it is just a warning. You can test your DDNS from here instead: justinpruett.com/glinet-troubleshoot.php
How can I access the admin page one I plug the router in but before it is connected to the home network ? my computer does not have an ethernet court either
You can connect via WiFi, the information is on a sticker on the bottom of the device.
Please tell, in these video 'travel router' is the router You're taking on the trip, right?
No, you will want to Port Forward to the Travel Router that is running the WireGuard ®️ VPN Server that stays home. Sorry for the confusion.
@@justinreviewsandrepairs5246 Thank You for the quick answer, Justin!
I have tried everything possible, but my GL AX1800 with Wireguard VPN server cannot comunicate with Slate AX client. There is nothing to do and my IP is public opening the port 51820 is not bring any effect, probably it's all about trying to select the right internal IP but I am not sure.
Are you using a second Internet connection for the Client Travel Router? You won't be able to connect while already connected to the same Internet. Feel free to email me a screenshot of your Port Forwarding settings and one of the IP Address shown in the Internet page under Ethernet of the Server Router: support@JustinPruett.com
Hi justin, I have global protect in my office laptop.. and using glinet surfshark.. but outlook not able to connect server… how to fix it
SurfShark is not a GLiNet service, it sounds like your company may be blocking the Commercial VPN Service. You will likely want to try using your Home IP Address instead: ua-cam.com/video/LXbDg1v65Qs/v-deo.html
Hi Justin. For the ip address used for port forwarding, is it the router that stays home or the one you travel with? I followed all the steps from your main video, but when I try to connect in the last step I’m the vpn client it just stays at “The client is starting, please wait…”. I set up port forward with the information from the router that stays at home so I’m thinking that”s what I did wrong. Please confirm. Thanks!
Also, I connected the router that stays at home via Ethernet, my router, nvg599, does not have a lan port. Just 4 Ethernet ports so I plugged into one of those. Is that okay?
Hello, you will be port forwarding to the server which is the travel router that stays home. Are you testing from a second Internet connection such as a HotSpot? Testing from the same Internet connection won't work. You can click View Logs and send the error log to support@JustinPruett.com if you would like me to look.
Yes, plug into the LAN port of your ISP nvg599 router into the WAN port of the gl.iNet travel router.
Hey Justine, your reply is a little confusing. The port forward is on the router that stays home or the one we travel with ? I have posted in your other video before finding this video. My issue may be same as OP. I am port forwarding the GL that is staying home and is used as vpn server
Hi Justin,
I was able to configure my router and my NodVPN, it was only one laptop that was able to connect to the internet via my GL-AXT1800, it was the one with which I was able to configure the router. The other computers for my family, were unable to connect. Could you help me. Even if I have to buy you some things because we're going on a trip in 3 days? Thank you so much!
You have a GL-AXT1800 that is being used as a Client to connect to NordVPN? Your laptop is connected via WiFi but theirs cannot connect via WiFi?
@Justin, thank you so much for your guide. However I am still unable to get my client vpn travel router to come on. I am trying to set up site-to-site vpn connection between my home router(Flint2) and my travel router(Beryl AX MT3000). I am not able to get the vpn client to connect(light still orange). My ISP is COX and I think there is an issue with port forwarding.Is there a way for you to assist me on this via email or video call ? I will pay for your service.
Please click View Log on that page and send me the errors to support@JustinPruett.com
Also please send a screenshot of your Port Forwarding rule on the ISP router and the Internet page of the VPN Server router which includes the IP Address under the Ethernet connection. You can also find additional troubleshooting videos here: justinpruett.com/glinet-troubleshoot.php
Hi @Justin, my Wireguard Server auto generated configuration file's (Endpoint Value) differs from my WAN IP Address. Is there a way I can manually change the (Endpoint Value of the Wireguard Server) directly? Thanks
It should be your DDNS address instead of an IP Address. So something like deviceid.glddns.com:51820
@@justinreviewsandrepairs5246 thanks for your response Justin. I tried using DDNS address, still not connecting. Think it could be my router? Which type do you use?
@@justinreviewsandrepairs5246how safe is the wireguard set up and port fording? Is it prone to being attacked? I saw a clip on YT that port fowarding is allways geting. attacked so they can by pass the fire wall and have acess to your network.
@@lostcityzen9792 anything connected to the Internet is prone to attack, that is why it is important to keep devices and software updated.
Hi Justin, I need to know what I do if my connection gets disconnected. My ISP service is Fiber/Coaxal, and apparently, they have outages. What can I do to restore the connection to the client once my service is restored or will it reconnect automatically? Also, is it possible to have a VPN running while port forwarding, in case my home Internet service does go out?
1. Outages happen, but if they happen often you should get a better provider.
2. The client should reconnect automatically but be sure to test that your ISP router is still port forwarding after a power outage. Some cheap ISP routers will lose your settings.
3. Please rephrase this question. Are you asking what happens to your Client when your Server goes offline? If "Block non-VPN traffic" is enabled then your client will go offline until the server is back online.
If you have unreliable Internet, you should consider using a commercial VPN provider. You won't be able to use your Home IP Address, but if you are always offline then you wouldn't be able to anyway.
No, You answered my question, I was asking about the Server, not the Client. But my other question was if I could use for instance my NordVPN as a backup should the Home Internet service have an outage the Nord would kick in so that the employer wouldn't see I'm not in my home state? So is enabling "Block non-VPN traffic" how I would do that?
You can load multiple profiles on to your Client Travel Router and switch as needed, but it is not automatic.
From the dashboard you can toggle "Block Non-VPN Traffic" from the Global Options: docs.gl-inet.com/router/en/4/interface_guide/vpn_dashboard/#global-options-of-vpn-client
If my isp router is in bridge mode do i need to still port forward? Asking for a friend 😅
If you see your Public IP Address on the Internet Tab of the Server Travel Router for your connection type then probably not, but I am guessing you are still seeing a Private IP Address such as 10.0.x.x or 192.168.x.x?
Hi, I set up everything the way you said in your 15-minute video (I'm not too concerned about outages anymore). After I configured my client router I got a yellow by wireguard client on the admin panel, but there's no internet connection. My ISP says the port forwarding is done right, so I'm not sure what's wrong. If you have any idea what it could be, please let me know.
Are you testing from a second Internet connection such as a HotSpot? You cannot test the second travel router while it is already connected to your home network.
@@justinreviewsandrepairs5246 not sure if I understand the question, but I tested the DDNS and it says the the DDNS is different From wan. should I have connected the ethernet cable to the Flint routers LAN because I had it in the WAN. I can connect to the internet either way through the Flint SSID but I am not able to get anything through the Opal which is at a different location entirely.
I'm getting no client and 0 movement
I figured it out! Thanks for everything you're truly awesome!!!@@justinreviewsandrepairs5246
@@W.O.V.E.Nyou have to have your travel router and gl inet home router connected to different wifi networks, as they would be while you’re traveling
Hey Justin, would you help me connect mine? I will pay no problem 🙏
Since every ISP has their own router, it is different for everyone. Many ISPs can help you with Port Forwarding on their router for free if you call their support. I can't do this for you, but if you run into any issues I can try to help you over email at support@JustinPruett.com
@Justin, I need help with my Slate. Any way you can help?
Are you stuck at a particular step or is it just not working?
@@justinreviewsandrepairs5246 my device is not connecting to the internet
Please send me an email at support@JustinPruett.com
Are you trying to connect via WiFi or by using a cable? The Ethernet cable should be plugged into the WAN port on the travel router and the LAN port of your ISP router.
I set this up and it works. Then my ethernet IP address seems to change every few hours, the Wireguard client goes down, and I have to edit the port forwarding on my ISP router for it to work again.
Your ISP router may have an IP Reservation feature to help keep it the same. What is the make and model of your ISP Router?
Get a static IP
That is NOT a Help..
You say only what there stand.
That the Glinet_Route has the 192.168.8.1 i know myself
And that the ISP Router has the 192.168.0.1 i know too
....
Is breaking my hear
More than two minutes of my life for nothing
You won't be Port Forwarding to 192.168.8.1, you need to Port Forward to the address that was assigned by the ISP router.