# GL-AX1800 / FW 4.2.1 / WAN access to Router / LAN devices with VPN-client/server enabled **URL:** \ **Category:** VPN, DNS, Leaks\ **Created:** [June 7, 2023, 7:57am UTC](https://forum.gl-inet.com/t/gl-ax1800-fw-4-2-1-wan-access-to-router-lan-devices-with-vpn-client-server-enabled/30342 "2023-06-07T07:57:01Z")\ **Posts on this page:** 16\ **Page:** 2
**Author:** ![SpitzAX3000](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/spitzax3000/32/11018_2.png) [@SpitzAX3000](https://forum.gl-inet.com/u/SpitzAX3000)\ **Post date:** [June 8, 2023, 12:41pm UTC](https://forum.gl-inet.com/t/gl-ax1800-fw-4-2-1-wan-access-to-router-lan-devices-with-vpn-client-server-enabled/30342/21 "2023-06-08T12:41:27Z")
Keep it as default - unicast… ---
**Author:** ![SpitzAX3000](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/spitzax3000/32/11018_2.png) [@SpitzAX3000](https://forum.gl-inet.com/u/SpitzAX3000)\ **Post date:** [June 8, 2023, 12:48pm UTC](https://forum.gl-inet.com/t/gl-ax1800-fw-4-2-1-wan-access-to-router-lan-devices-with-vpn-client-server-enabled/30342/22 "2023-06-08T12:48:01Z")
> [@SpitzAX3000](#): > > ALWAYS disable/re-enable VPN connection after changes! ALWAYS disable/re-enable VPN connection after changes! ---
**Author:** ![dieterlind](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/d/a88e57/32.png) [@dieterlind](https://forum.gl-inet.com/u/dieterlind)\ **Post date:** [June 8, 2023, 3:49pm UTC](https://forum.gl-inet.com/t/gl-ax1800-fw-4-2-1-wan-access-to-router-lan-devices-with-vpn-client-server-enabled/30342/23 "2023-06-08T15:49:08Z")
Hi! I took the ip from the following screen ![image](https://forum-static.gl-inet.com/original/2X/f/fc35045aaa7bb195754e0db7994efe3a7eea5641.png) and created a rule like this: ![image](https://forum-static.gl-inet.com/original/2X/4/42e8aaac92486de1b61c7b74d23f26342e4e7be7.png) ISP-modem is connected to flint on WAN-Port. And yes, I did deactivate and reactive the VPN-client ---
**Author:** ![SpitzAX3000](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/spitzax3000/32/11018_2.png) [@SpitzAX3000](https://forum.gl-inet.com/u/SpitzAX3000)\ **Post date:** [June 8, 2023, 4:33pm UTC](https://forum.gl-inet.com/t/gl-ax1800-fw-4-2-1-wan-access-to-router-lan-devices-with-vpn-client-server-enabled/30342/24 "2023-06-08T16:33:48Z")
You need to set the local lan IP not the public one ! You can easily find these IPs by checking the routing tables and interfaces. It should be 192.168.0.xxx ---
**Author:** ![dieterlind](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/d/a88e57/32.png) [@dieterlind](https://forum.gl-inet.com/u/dieterlind)\ **Post date:** [June 9, 2023, 5:08am UTC](https://forum.gl-inet.com/t/gl-ax1800-fw-4-2-1-wan-access-to-router-lan-devices-with-vpn-client-server-enabled/30342/25 "2023-06-09T05:08:11Z")
Hello! Actually I am not sure which IP to set. It modified the rule now to look like ![image](https://forum-static.gl-inet.com/original/2X/2/2672874edab00b682c22cc29dd1556357db4405d.png) with 192.168.0.1 the IP of my router … But still no success … ---
**Author:** ![SpitzAX3000](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/spitzax3000/32/11018_2.png) [@SpitzAX3000](https://forum.gl-inet.com/u/SpitzAX3000)\ **Post date:** [June 9, 2023, 5:26am UTC](https://forum.gl-inet.com/t/gl-ax1800-fw-4-2-1-wan-access-to-router-lan-devices-with-vpn-client-server-enabled/30342/26 "2023-06-09T05:26:16Z")
> [@dieterlind](#): > > 192.168.0.1 the IP of my router … > But still no success … Incorrect. How did you find the IP of your gl router when configured the port forwarding? ---
**Author:** ![SpitzAX3000](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/spitzax3000/32/11018_2.png) [@SpitzAX3000](https://forum.gl-inet.com/u/SpitzAX3000)\ **Post date:** [June 9, 2023, 5:28am UTC](https://forum.gl-inet.com/t/gl-ax1800-fw-4-2-1-wan-access-to-router-lan-devices-with-vpn-client-server-enabled/30342/27 "2023-06-09T05:28:11Z")
> [@SpitzAX3000](#): > > You can easily find these IPs by checking the routing tables and interfaces. It should be 192.168.0.xxx Have read this please? ---
**Author:** ![dieterlind](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/d/a88e57/32.png) [@dieterlind](https://forum.gl-inet.com/u/dieterlind)\ **Post date:** [June 9, 2023, 5:51am UTC](https://forum.gl-inet.com/t/gl-ax1800-fw-4-2-1-wan-access-to-router-lan-devices-with-vpn-client-server-enabled/30342/28 "2023-06-09T05:51:38Z")
Yes, of course I read what you wrote and yes, 192.168.0.1 is the IP of my router also configured in my port forwarding rule … But obviously I don’t get what you mean with: You can easily find these IPs by checking the routing tables and interfaces. It should be 192.168.0.xxx Maybe you can clarify for me … thanks ---
**Author:** ![SpitzAX3000](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/spitzax3000/32/11018_2.png) [@SpitzAX3000](https://forum.gl-inet.com/u/SpitzAX3000)\ **Post date:** [June 9, 2023, 6:03am UTC](https://forum.gl-inet.com/t/gl-ax1800-fw-4-2-1-wan-access-to-router-lan-devices-with-vpn-client-server-enabled/30342/29 "2023-06-09T06:03:47Z")
> [@dieterlind](#): > > 192.168.0.1 This is the IP of your GL router which you configured for port forwarding on the ISP modem. Now you need to find the other IP end (192.168.0.xxx) to be able to add it in the static route on GL. If you go to Routing table on either your modems you can spot it easily. Alternatively you can login through ssh on gl and perform traceroute to find the isp IP. NOTE: if your not using VLANs on you’re isp modem, then the ip in question is the same one that you use for logging in into the web interface. ---
**Author:** ![SpitzAX3000](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/spitzax3000/32/11018_2.png) [@SpitzAX3000](https://forum.gl-inet.com/u/SpitzAX3000)\ **Post date:** [June 9, 2023, 6:26am UTC](https://forum.gl-inet.com/t/gl-ax1800-fw-4-2-1-wan-access-to-router-lan-devices-with-vpn-client-server-enabled/30342/30 "2023-06-09T06:26:33Z")
Looking at your previous screenshot, Why did you add the ip with **/0**??? ---
**Author:** ![dieterlind](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/d/a88e57/32.png) [@dieterlind](https://forum.gl-inet.com/u/dieterlind)\ **Post date:** [June 9, 2023, 6:55am UTC](https://forum.gl-inet.com/t/gl-ax1800-fw-4-2-1-wan-access-to-router-lan-devices-with-vpn-client-server-enabled/30342/31 "2023-06-09T06:55:08Z")
because it is required: ![image](https://forum-static.gl-inet.com/original/2X/e/e2af7e6be6dfb918950953b5a50a6c8b26995c1e.png) ![image](https://forum-static.gl-inet.com/original/2X/c/c761e86839c06688e1ebe311531bca788ce15247.png) ---
**Author:** ![SpitzAX3000](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/spitzax3000/32/11018_2.png) [@SpitzAX3000](https://forum.gl-inet.com/u/SpitzAX3000)\ **Post date:** [June 9, 2023, 7:21am UTC](https://forum.gl-inet.com/t/gl-ax1800-fw-4-2-1-wan-access-to-router-lan-devices-with-vpn-client-server-enabled/30342/32 "2023-06-09T07:21:33Z")
Once you find Your isp IP then add it in the static route with /32 ---
**Author:** ![dieterlind](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/d/a88e57/32.png) [@dieterlind](https://forum.gl-inet.com/u/dieterlind)\ **Post date:** [June 9, 2023, 7:29am UTC](https://forum.gl-inet.com/t/gl-ax1800-fw-4-2-1-wan-access-to-router-lan-devices-with-vpn-client-server-enabled/30342/33 "2023-06-09T07:29:21Z")
I actually already tried it with 192.168.0.1/32 … without success but I think you mean not the IP of the router itself in my LAN, or?? ---
**Author:** ![SpitzAX3000](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/spitzax3000/32/11018_2.png) [@SpitzAX3000](https://forum.gl-inet.com/u/SpitzAX3000)\ **Post date:** [June 9, 2023, 7:32am UTC](https://forum.gl-inet.com/t/gl-ax1800-fw-4-2-1-wan-access-to-router-lan-devices-with-vpn-client-server-enabled/30342/34 "2023-06-09T07:32:23Z")
I told you before what you did is incorrect. How can you add static route to itself ?!! You need the peer ip 192.168.0.xxx. Two devices connected by a cable meaning each end has an IP to communicate. You found your gl ip and set it on the isp modem port forwarding: now you need to do the opposite by finding the other ip end and add it to static route in gl. I repeated that you can find it in routing table or interfaces . I also told you to login ssh to your gl modem and perform traceroute to find it - there are tons of ways to find what’s your isp ip. ---
**Author:** ![dieterlind](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/d/a88e57/32.png) [@dieterlind](https://forum.gl-inet.com/u/dieterlind)\ **Post date:** [June 9, 2023, 11:48am UTC](https://forum.gl-inet.com/t/gl-ax1800-fw-4-2-1-wan-access-to-router-lan-devices-with-vpn-client-server-enabled/30342/35 "2023-06-09T11:48:02Z")
After further clarification of the topology the correct static route could be set. Interface: The one from your gl.device which is connected to your ISP-device Route Type: unicast Target: the IP-address from which you connect in the WAN-area followed by /32. E.g. xxx.yyy.zzz.aaa/32 Gateway: can be left blank (as derived from interface) or the gateway assigned by your ISP. It is now working as planned! Thanks SpitzAX3000 for your great support! ---
**Author:** ![bruce](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/bruce/32/35649_2.png) [@bruce](https://forum.gl-inet.com/u/bruce)\ **Post date:** [October 29, 2025, 4:22am UTC](https://forum.gl-inet.com/t/gl-ax1800-fw-4-2-1-wan-access-to-router-lan-devices-with-vpn-client-server-enabled/30342/36 "2025-10-29T04:22:27Z")
[Previous page](https://forum.gl-inet.com/t/gl-ax1800-fw-4-2-1-wan-access-to-router-lan-devices-with-vpn-client-server-enabled/30342.md?page=1)