VPN Policy GL-iNet AC1200 Opal

I have a GL-iNet AC1200 Opal. I installed it in 7/2024 and installed Hotspot Shield as the VPN. I was able to select VPN Policies that used the VPN for my main SSIDs and the guest SSIDs did not go through the VPN.

Today, the router updated to firmware: 4.3.24, release 1. I had not used it in quite awhile, but I needed to remove Hotspot Shield because it no longer supports routers. I installed two Wireguard profiles for Proton. When I went to find the VPN Policy option, it was gone. I thought it might be because of Wireguard so I removed that and installed OpenVPN profiles for Proton. Still no VPN policy feature anymore.

How do I set a VPN policy? Or, why has it been removed?

Opal has not removed the VPN policy, please check whether your firmware is the official GL firmware.

Please try manually upgrading to beta v4.7.2 firmware.

GL GUI > VPN > Dashboard:

Thank you for the prompt reply.
Apparently I had the wrong model name. It is actually GL-SFT1200. Perhaps that is why you thought there is a more recent beta firmware? My router offered to update firmware when I logged into the admin page and that is how I got 4.3.24. Just in case, I've just downloaded the firmware update file and it yields the same thing. And I have no option for installing a beta firmware like I saw somewhere on your website. Here is what I see:
[image]
Your website blocked including an image!

Similarly, the owner's manual displays this VPN Policy view:
[image]

In place of VPN Policies on the left panel, it now shows Tor, just as in your screen shot.
[image]
Your website blocked including an image!

I can find nothing that vaguely resembles this VPN policy feature, using the new firmware. I found it useful to have my Guest network not use the VPN, but can't figure how to do that anymore.

I now have an even more important problem. I downloaded approx. 10 OpenVPN configuration files for Proton, both UDP and TCP. I installed them with the OpenVPN credentials from my Proton user account (not the credentials to login to the Proton user account) as instructed by Proton. None of the UDP configurations connect to the internet. A banner displays "The client is starting, please wait..." but never completes. The TCP configurations complete the "client is starting" but when I run an internet speed test, my ISP is shown, not Proton, so I assume the router is not actually using the VPN.

I also downloaded some Proton Wireguard configuration files. They connect quickly, but Wireguard is supposed to be fast. They cut my ISPs speed in half.

I have just found a partial solution to the issue of Proton UDP configurations not connecting. I had missed selecting "Router" style configurations. Both UPD and TCP now connect promptly, but the speed test shows the VPN is not active.

Hello,

Through the screenshot you posted, it looks like v3.x firmware.

.

Please confirm the current firmware version on the "UPGRADE" page or "SYSTEM -> Upgrade"

Please upgrade the firmware to v4.7.2 if currently is v3.x, and try to connect the VPN one more time.
https://dl.gl-inet.com/router/sft1200/beta

The reason it looked like v3.x is because it was from the owner manual. It shows the desired VPN Policy option which was no longer present on v4.3.24. For some reason that screenshot was not allowed. v4.3.24 showed the same options as in the screenshot that you sent.

When I used the router today, it offered v4.3.25 as an update. I skipped that since you wanted me to try the beta 4.7.2. I have installed v4.7.2 beta. It still does not offer the VPN Policy option. Tor is in the same place as that option used to appear.


So, the question remains: how can set a VPN policy to have the VPN active on my regular SSIDs but not on my Guest SSIDs?

VPN policy is in the GL GUI -> VPN -> Dashboard:

Thank you for your assistance. They sure managed to bury this feature in the newer version of firmware. But it works and I'm glad it is still there.

1 Like