Beryl AX MT3000 and WireGuard tunnel VPN

Routers VPN, DNS, Leaks
1

Hello everyone,

I have a router Beryl AX MT3000.
At home (place A), I have an internet connection with a fixed public IP number.

My goal is that when I’m abroad (place B) using a Beryl AX MT3000 router, I use a VPN gateway to pass all my traffic through the fixed IP I have at home (place A).

So that when using the Beryl AX MT3000 router (in Place B) , you can see as if I was at home and connecting through my fixed IP (Place A).

I’m thinking about an OpenVPN/Wireguard solution, setting up a VPN tunnel set up on Raspbery PI at home and uploading the configuration to the Beryl AX MT3000 router.

Do you think this will be the most optimal solution? What other suggestions do you have?

2

If I understand correctly what you want, I think you should use Wireguard in server mode on the Beryl AX MT3000 at place A and Wireguard in client mode on the Beryl AX MT3000 at place B

3

This is how I’ve got my VPN set up, except at home I’m using an Odroid C2 running Armbian, which also functions as a Pi-Hole. I use the Pi-Hole DNS for the VPN, so I get that benefit when I’m away from home as well.

Edit: I should add that I’ve using my Slate router while I’m away, my Beryl AX has got all sorts of problems, so I’ll wait until the firmware is sorted before I start using that one for travel.

4

Your setup is tottally OK, based on that you can set up your Pi VPN.

Pls note, the most of the problem of connect to home vpn is the server side.

1 Like
5

Hello,

Thanks for reply. So you mean that I need two Beryl AX device.

6

This is how it works for me:

[Beryl AX MT3000] ----VPN------> [home / wireguard]

My wireguard server is a raspberry pi with pivpn installed.

7

Came here from web search with a similar question, hoping somebody can point me in the right direction.

Existing equipment: Draytek router at home on fixed IP, acting as VPN (L2TP over IPSec) server. Various mobile devices and laptop configured as VPN clients using native OS functionality. Been working fine for years.

Want to accomplish: Use my new GL-MT3000 as the VPN client, so that it brings up a tunnel to my home network and any devices connected to the GL-MT3000 are automatically on my VPN without having to bring up their own VPN clients.

I'm sure this can be done, but while I'm fairly proficient in raw IP networking I'm not familiar with products like Wireguard or OpenVPN nor their native configuration formats. Can I just configure the GL-MT3000 with the endpoint address and authentication credentials?

Thanks in advance for any pointers!

8

It's easy, follow this: Build your own WireGuard Home Server with two GL.iNet Routers - GL.iNet Router Docs 4

9

I'd prefer to find a way of making the GL-MT3000 fit into my current environment rather than the other way around.

10

So what's the point then? You need to configure your Draytek then - I don't even know if it is able to use OpenVPN or WireGuard.