Slate 7 - State of firewall after reset

Routers
1

Hi team. I hope you are keeping well.

Apologies if this is a series of dumb questions. I've been battling my Slate 7 for a while now and I'm missing something simple I think, and I need your help please.

I have my Slate 7 wired into my 10.1.1.0/24 network and it picks up a reserved IP of 10.1.1.124.

(Q1) My first question. I've factory reset the Slate. By default should I expect to be able to ping it on its IP of 10.1.1.124? It has that IP and after a reset I can't ping it by default. Slate can ping LAN resources, but those resources cannot ping Slate.

(Q2) I've reset the Slate, created the admin password and I've connected to the Slate WiFi. I'm accessing the admin portal via 192.168.8.1. In order to SSH or ping the slate I have to go into Luci > Network > Firewall and under General Settings, by default, I have input set to reject, output set to accept, forward set to reject. If I change Input to accept I can ping/ssh and connect to the Slate via its lan ip 10.1.1.124. Is this normal for a freshly reset Slate?

I've attached a screenshot of the default settings after a reset.

(Q3) I've been trying to get Tailscale split tunnelling set up, and it was working great until a reboot removed some of the settings. I reset the Slate to start from scratch and it's almost like some orphaned firewall rules or routes or settings have carried over. I've upgraded and downgraded firmware, I've reset the unit. Is there a higher level of factory reset? Something which resets absolutely everything.

Thanks for your time everyone and I appreciate any comments or assistance.

Screenshot_20260107_141235_Chrome
Screenshot_20260107_141235_Chrome1080×2340 194 KB

2

Hi

Please find our responses below:

  • Q1: After restoring the device to factory settings, it will not respond to Ping requests from the WAN side (10.1.1.0/24 ) because the firewall will block them. You can enable "Allow Ping from WAN" under GL.iNet Admin Panel -> System -> Security .

    image
    image1087×818 36.8 KB

  • Q2: Yes, this is normal. Since you changed the WAN firewall zone, its default INPUT behavior to "Accept" , any request directed to the Slate 7 will be allowed—except for those specifically defined as "Drop" or "Reject" in LuCI -> Network -> Firewall -> Traffic Rules .

  • Q3: Theoretically, long-pressing the Reset button will restore the device to factory settings. However, you can also try re-flashing the firmware via U-Boot to ensure a clean status.
    What should I do if my router is bricked - GL.iNet Router Docs 4