GL-MT3000 - tethered or repeater mode not routing

I’ve had GLI routers in past and work on NGFW in my day job.

My issue: tethered GL-MT3000 to a Verizon JetPack. According to GUI and LuCI, obtains an IP and can ping/traceroute from the router, but anything connected behind it cannot. Fairly default settings. It’s as if NAT or forwarding is not working? No firewall updates, just defaults here.

firmware. 4.5.0 release 8

From LuCI:

Mon Mar 25 17:20:11 2024 daemon.notice netifd: Interface ‘tethering’ is enabled
Mon Mar 25 17:20:11 2024 daemon.notice netifd: Network device ‘eth2’ link is up
Mon Mar 25 17:20:11 2024 daemon.notice netifd: Interface ‘tethering’ has link connectivity
Mon Mar 25 17:20:11 2024 daemon.notice netifd: Interface ‘tethering’ is setting up now
Mon Mar 25 17:20:11 2024 daemon.notice netifd: tethering (9513): udhcpc: started, v1.33.2
Mon Mar 25 17:20:11 2024 daemon.notice netifd: tethering (9513): udhcpc: sending discover
Mon Mar 25 17:20:11 2024 daemon.notice netifd: tethering (9513): udhcpc: sending select for 10.254.253.100
Mon Mar 25 17:20:11 2024 daemon.notice netifd: tethering (9513): udhcpc: lease of 10.254.253.100 obtained, lease time 86400
Mon Mar 25 17:20:11 2024 daemon.info avahi-daemon[6935]: Joining mDNS multicast group on interface eth2.IPv4 with address 10.254.253.100.
Mon Mar 25 17:20:11 2024 daemon.info avahi-daemon[6935]: New relevant interface eth2.IPv4 for mDNS.
Mon Mar 25 17:20:11 2024 daemon.info avahi-daemon[6935]: Registering new address record for 10.254.253.100 on eth2.IPv4.
Mon Mar 25 17:20:11 2024 daemon.notice netifd: Interface ‘tethering’ is now up
Mon Mar 25 17:20:11 2024 daemon.info dnsmasq[6296]: reading /tmp/resolv.conf.d/resolv.conf.auto
Mon Mar 25 17:20:11 2024 daemon.info dnsmasq[6296]: using only locally-known addresses for domain test
Mon Mar 25 17:20:11 2024 daemon.info dnsmasq[6296]: using only locally-known addresses for domain onion
Mon Mar 25 17:20:11 2024 daemon.info dnsmasq[6296]: using only locally-known addresses for domain localhost
Mon Mar 25 17:20:11 2024 daemon.info dnsmasq[6296]: using only locally-known addresses for domain local
Mon Mar 25 17:20:11 2024 daemon.info dnsmasq[6296]: using only locally-known addresses for domain invalid
Mon Mar 25 17:20:11 2024 daemon.info dnsmasq[6296]: using only locally-known addresses for domain bind
Mon Mar 25 17:20:11 2024 daemon.info dnsmasq[6296]: using only locally-known addresses for domain lan
Mon Mar 25 17:20:11 2024 daemon.info dnsmasq[6296]: using nameserver 10.254.253.1#53
Mon Mar 25 17:20:11 2024 user.notice firewall: Reloading firewall due to ifup of tethering (eth2)

I had a close problem https://forum.gl-inet.com/t/spitz-x3000-my-repeater-tethering-and-openvpn-client-setup/40183?u=mz54
and solution for me was to create a new zone: