GL-X3000 - Bridge Mode WAN IP Passthrough

Routers Cellular, USB modems
251

  • Version4.0

  • Firmware Type0704release5

  • Update Time2025-03-17 09:47:44 (UTC+00:00)

Thanks for the quick response! Is this sufficient?

252

Worked great, thanks. I must have had formatting issues copying and pasting the script. The one line format without rollover worked perfectly.

1 Like
253

Can anyone confirm if using this script method will result in the public wan ip from the sim card service provider being presented to the device plugged into the lan port? or, will it still be double natted?

255

@bruce What IP address does the admin GUI (web) page respond to when the device is in pass through mode? I can’t seem to access it.

256

@jamster it is 192.168.8.1. if you did not change the default ip adress in the router mode.

257

Thanks - I’ve had a further look at this. I did change the default IP address, but cannot access it from behind my router (which is admittedly set up in a quite complex way).

However, I’ve found that the Spitz also responds on its gateway address:

  • In pass-through mode my carrier (EE, UK) gives the Spitz a /30 allocation in its private (CG-NAT) range.
  • The IP of that /30 taken by the Spitz is the one the Spitz web UI responds on - this is the gateway IP address. This address is also the DHCP server.
  • The client IP of the /30, i.e. the one remaining IP, is allocated by DHCP to my mikrotik and so is the one my mikrotik outer then uses for itself
  • I needed to change my firewall rules to allow routed access to the gateway IP from my (V)LAN

I use multiple routing tables on my Mikrotik router, so I have to update them all with the new gateway IP address via a script.

I’ve also noticed that my carrier occasionally updates the IP address but it does not look like this is picked up by the Mikrotik, and is causing the routing to fail an therefore my WAN failover to kick in to my other (non-Spitz) connection. Cycling the interface to cause (1) new IP and (2) route refresh seems to do the trick but I’ve not debugged this in detail yet.

1 Like
258

Present the IP (public or CG-NAT) provided by the operator to the device plugged into the LAN port. no double NAT.

259

Hello, Is it possible to add the IP passthrough option in the next firmware version? It would be easier to enable this option with no questions...

1 Like
260

Just wanted to reply here and say I was able to enable IP passthrough with zero issues.

It seems like most/all of the caveats/issues people were experiencing in this thread have been fixed at this point, save yourself the trouble of reading the entire thread as most of those are irrelevant.

Puli AX: plugged Puli LAN into Unifi gateway’s WAN port, visit 192.168.8.1, click to auto setup 5G (T-Mobile Business SIM), updated to latest firmware from the web UI, SSH’d in and ran the one line command from bruce’s latest message. SSH terminal will show lost connection, this is normal, wait ~30 seconds or so and check your router (Unifi in my case) and you should have the WAN IP from your ISP. I did not need to set manual DNS on my Unifi setup but I read that others may need to before they can load pages on their devices.

I am still able to access the GL.iNet interface from the original 192.168.8.1 with zero issues, and I can also still SSH into it at the same IP without any changes in the UI or Luci.

Big thanks to the GL.iNet team for all your firmware work and for helping people out in the thread.