Setting up two GL.Net routers for VPN purposes

Magnum · 2022-10-21T01:01:41.758Z

Hello. I am traveling overseas from US to Europe. I need to connect to my home network in US in order to be able to work from EU. I have a 1gig download/upload speed and a public IP which is a dynamic IP. I purchased a GL-AX1800 / Flint and GL-A1300 / Slate Plus.

I replaced my main router with the Flint and set up the Wireguard Server. I changed the routers default IP from 192.168.8.1 to 192.168.0.1 because I had different security devices working on my old routers IP 192.168.0.x.
(I tested the Wireguard VPN with an android Wireguard app and it works, although the speed is usually 30-40 Mbps, when I disconnect from Wireguard, I am getting over 200Mbps on mobile data. Sometimes the speed while connected to Wireguard is less than 1Mbps)

Now, I was struggling with getting the Slate Plus router set up to work as a Wireguard Client.
I followed the steps from this link, up to point 6, I skipped 7-10, I have no idea how to do it and if it’s necessary:

Building a Site-2-Site network manually using two GL.iNet routers Technical Support for Routers

This post is to introduce the guide to config LAN to LAN VPN (Site-2-Site) based on WireGuard. Network Topology [image] 1.Login the web interface of AX1800, go to VPN > WireGuard Server and click on the Start button to enable the WireGuard Server. [image] Note: make sure the Allow Access Local Network button is enabled. 2.Go to Management and click on Add a New User. [image] 3.Click the file icon on Configurations to review the profile. [Interface] Address = 10.0.0.2/32 List…

So basically:

Started the Wireguard VPN server with DDNS (due to dynamic IP) on Flint
Created a new Wireguard client and copied the configuration on Flint
Connected to Slate Plus and changed the routers IP from 192.168.8.1 to 192.168.10.1
Created a manual Wireguard Client and paste the config
Connected to the Server

I also added both routers under GoodCloud and created a network with Flint as Main Node and Slate Plus as Node 1.

Then I unplugged the Slate Plus from the Flint and tried to see if it works. I unabled tethering on my phone, connected my it via USB to Slate Plus, opened Admin Console and connected to USB-Tethering Android. It showed as being connected. The IP Address was showing as 192.168.193.12, Gateway and DNS Server both showed the same IP 192.168.193.25. I tried to connect my laptop to the Slate Plus wifi but it was showing no internet. Then I opened the Slate Plus admin console again and went to WireGuard Client tab, the dot was yellow and would not connect to the WireGuard server, on top of the page it was showing “No internet connection! Find a network to reconnect.” The laptop still wouldn’t connect to Slate.

I would really appreciate if someone would help me get it set up because I am leaving in less than a week

yuxin.zou · 2022-10-21T04:42:41.733Z

Magnum:

I skipped 7-10, I have no idea how to do it

Here I am logging into the router via SSH to change the configuration. Do you have any knowledge of OpenWrt or Linux?
For non-technical people, we recommend GoodCloud’s Site to Site.

Magnum:

I also added both routers under GoodCloud and created a network with Flint as Main Node and Slate Plus as Node 1.

Then I unplugged the Slate Plus from the Flint and tried to see if it works. I unabled tethering on my phone, connected my it via USB to Slate Plus, opened Admin Console and connected to USB-Tethering Android. It showed as being connected. The IP Address was showing as 192.168.193.12, Gateway and DNS Server both showed the same IP 192.168.193.25. I tried to connect my laptop to the Slate Plus wifi but it was showing no internet. Then I opened the Slate Plus admin console again and went to WireGuard Client tab, the dot was yellow and would not connect to the WireGuard server, on top of the page it was showing “No internet connection! Find a network to reconnect.” The laptop still wouldn’t connect to Slate.

Sorry, I don’t understand here, are you referring to using the Site to Site feature provided by GoodCloud?

The working status of Site to Site is not currently displayed on the firmware UI. You should check its working status on GoodCloud.

alzhao · 2022-10-21T10:51:36.093Z

Pls post with images so that it is easy to follow.

Pls use the cloud managed solution which is much easiler

Magnum · 2022-10-21T15:26:19.037Z

For the SSH, I am stuck on #7 in the instructions, I am not sure how to add the subnet 192.168.10.0/24 to the client_ip

1111632×931 93 KB

Here is all my configuration:

Home Router/Server - Flint

For Travel Router/Client - Slate Plus

And this is GoodCloud:

Server Router:

Client Router:

yuxin.zou · 2022-10-22T02:42:41.160Z

Using Site to Site on GoodCloud does not require the VPN Client/Server to be enabled in the firmware UI. if I disable the VPN Client on Slate Plus, will it display online on GoodCloud?

Magnum · 2022-10-25T03:37:05.607Z

Yes, it is showing online when I disable the VPN Client. However the speed is extremely slow, and I am right next to the main router. I can only imagine how slow would it be if I’ll be over 5000 miles away.

Is it better to use Wireguard VPN setting or GoodCloud?

Does the client IP need to be changed in SSH?

I only have 2 days to get it up and running, otherwise I’ll have to return to my old setup and just use Tailscale and Cloud VPN which is much faster than GliNet with my current settings.

yuxin.zou · 2022-10-25T09:51:56.307Z

Magnum:

However the speed is extremely slow

Are you referring to the slow access to the router’s administration page from GoodCloud, or the slow access between the two Site to Site? The data between Site to Site is not forwarded from GoodCloud, GoodCloud only sends the configuration. Please check the speed between Site to Site.

Magnum:

Is it better to use Wireguard VPN setting or GoodCloud?

GoodCloud also uses WireGuard to provide Site to Site, but with automatic settings. There should be no difference between the two.

Magnum · 2022-10-26T22:30:53.772Z

The speed is much faster with SitetoSite when I turned the WireGuard VPN off. However with this, I am not able to use my phone with the Wireguard app.

I there any way of adding a smartphone to S2S?

Can I use both, the WireGuard Server and SitetoSite?

Also, the USB tethering only works for a few minutes and then it is automatically disconnected in the Travel router settings.

yuxin.zou · 2022-10-27T09:03:45.439Z

Magnum:

I there any way of adding a smartphone to S2S?

Sorry, it was not supported yet.
If you must use your mobile phone to access it, you will have to use a manual configuration solution instead of S2S.

Magnum:

For the SSH, I am stuck on #7 in the instructions, I am not sure how to add the subnet 192.168.10.0/24 to the client_ip

The configuration file is usually edited with the vi command.

vi /etc/config/wireguard_server

If you are not familiar with vi, it is recommended that you change the ssh tool. Some ssh tools support opening and editing files in a graphical interface. For example MobaXterm.

Magnum:

Can I use both, the WireGuard Server and SitetoSite?

That requires the routing table to be set up manually. It is very complicated.

Magnum · 2022-10-28T02:13:15.635Z

Okay so I cannot use S2S with both the router and smartphone?
Also, I cannot use both S2S and WireGuard Client at the same time?

I am leaving in an hour so I won’t be able to configure it anymore, the instructions of setting it up are very unclear and almost impossible to do for a person that is not good with networking. I think I will skip Gl.iNet and go with my previous setup.

yuxin.zou · 2022-10-28T07:37:58.197Z

Yes, smartphone or other WireGuard Client can’t added S2S.
Sorry, S2S only support add router yet.

Magnum · 2022-10-30T22:03:05.067Z

I am already abroad and testing the router. It does not work with Good Cloud S2S, it worked while I tested it in US but it’s not working overseas. I am getting a message “The following two devices, the WAN IP of the first device is conflicted with the LAN IP of the second device”

The VPN works when I enablem the WireGuard Client on my travel routers. It also works with WireGuard VPN being enabled and S2S being enabled as well. Are you sure that I cannot use both S2S and VPN?

I did not add the client IP in SSH. What would I actualy need that for if it works without it?

alzhao · 2022-10-31T02:40:06.787Z

Magnum:

tested it in US but it’s not working overseas. I am getting a message “The following two devices, the WAN IP of the first device is conflicted with the LAN IP of the second device”

The message tell you to change the IP. If you have access to both routers, you need to change the LAN IP of the second device to others.

But I suggest that you post details of your setup, e.g. IP of each nodes, wan status of each nodes.

yuxin.zou · 2022-10-31T02:51:53.031Z

Magnum:

I am getting a message “The following two devices, the WAN IP of the first device is conflicted with the LAN IP of the second device”

Please check the LAN and WAN subnet of the two devices. For example, the IP of device 1 is 192.168.8.100 and the LAN range of device 2 is 192.168.8.0/24, which will be in conflict.

Magnum:

The VPN works when I enablem the WireGuard Client on my travel routers. It also works with WireGuard VPN being enabled and S2S being enabled as well. Are you sure that I cannot use both S2S and VPN?

WireGuard supports access to other clients, but S2S does not provide quick configuration for this. You have to modify the WireGuard configuration file manually.
In addition, mentioning that S2S has modified the WireGuard configuration after the configuration file has been manually modified may result in unintended consequences.

ejs190 · 2023-08-28T15:07:42.611Z

I have a guy that can set this all up in about 30 minutes. He sets everything up including both Modems and both routers. He charges $90usd. One thing I have found is that using Wireguard my speed is limited to the slowest UP/Down on either router. So if my Upload speed is 30mps that is the fastest speed I will get up or down. That is fast enough for what I need. If you need faster you need to talk to your ISP on both ends to increase that Upload speed. For some reason in the USA they tend to cap your Upload speeds and lure you in with insane download speeds.

genewebb35145 · 2024-11-06T17:57:24.145Z

I would be interested if you still have a guy that can do this

admon · 2024-11-06T17:58:21.386Z

It's not difficult, you can even do that by yourself.

Just follow Build your own WireGuard Home Server with two GL.iNet Routers - GL.iNet Router Docs 4 and make sure that you changed one of your routers to 192.168.10.x