Convexa-S (GL-S1300) USER MANUAL
Table of Contents 1. Getting Started with GL.iNet Convexa-S ................................................................................ 1 1.1. Power on ............................................................................................................. 1 1.2. Connect ............................................................................................................... 2 (1) Connect via LAN ..........................................................................................
7.1.1. OpenVPN Client........................................................................................................ 21 7.1.2. OpenVPN Server ....................................................................................................... 26 7.2. WireGuard......................................................................................................... 29 7.2.1. WireGuard Client ....................................................................................................
BLE MQTT Bridge ....................................................................................................................108 GoodCloud and VPN .................................................................................................................108 Disable ...........................................................................................................................................109 8.5. Tor ................................................................................
1. Getting Started with GL.iNet Convexa-S Model: GL-S1300 1.1. Power on Plug the power cable into the power port of the router.
1.2. Connect You can connect to the router via Ethernet cable or Wi-Fi. Note: This step only connects your devices to the local area network (LAN) of the router. You cannot access the Internet currently. In order to connect to the Internet, please finish the setup procedures below and then follow Internet to set up an Internet connection. (1) Connect via LAN Connect your device to the LAN port of the router via Ethernet cable.
(2) Connect via Wi-Fi Search for the SSID of the router in your device and input the default password: goodlife. Note: The SSID was printed on the bottom label of the router with the following formats: • GL-S1300-XXX • GL-S1300-XXX-5G 1.3. Access the Web Admin Panel Open a web browser (we recommend Chrome, firefox) and visit http://192.168.8.1. You will be directed to the initial setup of the web Admin Panel.
(1) Language Setting You need to choose the display language of the Admin Panel. Currently, our routers support English, 简体中文, 繁體中文, Deutsch, Français, Español and 日本語. Note: If your browser always redirects to Luci (http://192.168.8.1/cgi-bin/luci), you can visit: http://192.168.8.1/index.html instead of http://192.168.8.1. (2) Admin Password Setting There is no default password for the Admin Panel. You have to set your own password, which must be at least 5 characters long.
Note: This password is for this web Admin Panel and the embedded Linux system. It will not change your Wi-Fi password. (3) Admin Panel After the initial setup, you will enter the web Admin Panel of the router. It allows you to check the status and manage the settings of the router.
2. INTERNET There are total 4 types of connection method that you can use to access the Internet: Cable, Repeater, 3G/4G Modem and Tethering. Click INTERNET to create an Internet connection.
2.1. Cable Connect the router to the modem or main router via Ethernet cable to access the Internet. Before plugging the Ethernet cable into the WAN port of the router, you can click Use as LAN to set the WAN port as a LAN port. That is useful when you are using the router as a repeater. As a result, you can have one more LAN port.
Plug the Ethernet cable into the WAN port of the router. The information of your connection will be shown on the Cable section. DHCP is the default protocol. You can click Modify to change the protocol. (1) DHCP DHCP is the default and most common protocol. It doesn't require any manual configuration. (2) Static Static is required if your Internet Service Provider (ISP) has provided a fixed IP address for you or you want to configure the network information such as IP address, Gateway, Netmask manually.
(3) PPPoE PPPoE is required by many Internet Service Providers (ISP). Generally, your ISP will give you a modem and provide you a username & password that you needed when you are creating the Internet connection. Under PPPoE protocol, enter your username and password, then click Apply.
2.2. Repeater Using Repeater means connecting the router to another existing wireless network, e.g. when you are using free Wi-Fi in a hotel or cafe. It works in WISP (Wireless Internet Service Provider) mode by default, which means that the router will create its own subnet and act as a firewall to protect you from the public network. In Repeater section, click Scan to search for the available wireless networks nearby. Choose a SSID from the drop-down list and enter its password.
2.3. USB 3G/4G Modem You can connect to the Internet using a USB 3G/4G modem. Insert your SIM card into the USB modem Plug the USB modem into the USB port of the router. Once it has been detected, the 3G/4G modem section will be activated and you will be able to set up your USB modem. Be aware that some modems work in host-less mode, which will be configured through Tethering but not 3G/4G modem. Click Auto Setup to create the connection. You can also click Manual Setup to set up manually.
More: • Dial Number: Generally, it is a default value and you don't need to set it manually. However, if you have this info, please input it. • Pincode, Username and Password: Generally, these are not necessary for an unlocked SIM card. However, if you have a locked SIM card, please consult your service provider. It is connected when the IP address of your SIM card shows up.
Compatible Modems Here is a list of supported modems that we had tested before. Model Quectel EC20-E, EC20-A, EC20-C Quectel EC25-E, EC25-A, EC25-V, EC25-C Quectel UC20-E ZTE ME909s-821 Huawei E1550 Huawei E3276 TP-Link MA260 ZTE M823 3G/4G Tested Tested by 4G Yes GL.iNet 4G Yes GL.iNet 3G 4G 3G 4G 3G 4G Yes Yes Yes Yes Yes Yes ZTE MF190 3G Yes Huawei E3372 Pantech UML290VW (Verizon) 4G 4G Yes Yes GL.iNet GL.iNet GL.iNet GL.iNet GL.iNet Arnas Risqianto Arnas Risqianto anonymous GL.
Pantech UML295 (Verizon) Novatel USB551L (Verizon) Verizon U620L (Verizon) 4G 4G 4G Yes Yes Yes GL.iNet/steven GL.iNet/steven Host-less QMI Host-less *QMI: This modem supports QMI mode. Please choose /dev/cdc-wdm0 in the Device list. *Host-less: This modem supports tethering mode, please set up by using Tethering but not 3G/4G modem. You can also refer to http://ofmodemsandmen.com/supported.html for a well-supported modem list. 2.4.
Wi-Fi Name (SSID): The name of the Wi-Fi. It is not suggested to use unicode characters such as Chinese. Wi-Fi Security: The encryption method of the Wi-Fi. Wi-Fi Key: The password of the Wi-Fi, which must be at least 6 characters long. We suggest you to change it when you receive the router. Hide SSID: Show or hide the SSID. Channel: The router will not choose the best channel itself. You need to choose a channel manually.
4. CLIENTS You can manage all connected clients in CLIENTS. You can see their name, IP, MAC address and connection type. Click the button on the right to block any unwanted client. 5. UPGRADE Click UPGRADE to check any available update and upgrade the firmware.
5.1. Online Upgrade You can find the current firmware version here. If your router is connected to the Internet, it will check for the newer firmware version available for download. Note: It is suggested to uncheck Keep setting. If you keep the settings and encounter problems after the upgrade, please reset the router. 5.2. Upload Firmware Click Local Upgrade to upload a firmware file to the router. Simply drag and drop your firmware file to the area indicated.
(1) Official OpenWrt/LEDE firmware Only the testing version of 3.x firmware is available for GL-S1300 currently. You can download the official firmware from our website. • GL-S1300: https://dl.gl-inet.com/firmware/s1300/ Find the available firmwares from the folder according to your device model, and they are located in different sub-folders: V1/release: Official GL.iNet OpenWrt/LEDE firmware. testing: Beta version of GL.iNet OpenWrt/LEDE firmware.
6. FIREWALL In FIREWALL, you can set up firewall rules like port forwarding, open port and DMZ. 6.1. Port Forwards Port Forwarding allows remote computers to connect to a specific computer or service behind the firewall in the local LAN (such as web servers, FTP servers, etc). To set up port forwarding, click Port Forwards and input the required parameters or click Add a New One.
Name: The name of the rule which can be specified by the user. Internal IP: The IP address assigned by the router to the device which needs to be accessed remotely. External Ports: The numbers of external ports. You can enter a specific port number or a range of service ports (E.g 100-300). Internal Ports: The internal port number of the device. You can enter a specific port number. Leave it blank if it is same as the external port. Protocol: The protocol used, you can choose TCP, UDP, or both TCP and UDP.
Protocol: The protocol used, you can choose TCP, UDP, or both TCP and UDP. Status: Activate of Deactivate the rule. 6.3. DMZ DMZ allows you to expose one computer to the Internet, so that all the inbounds packets will be redirected to the computer you set. Click DMZ and enable Open DMZ. Input the internal IP address (E.g. 192.168.8.100) of your device which is going to receive all the inbound packets. 7. VPN GL.iNet routers have pre-installed VPN server and client in OpenVPN and WireGuard.
(1) Upload your OpenVPN configuration file Simply drag and drop your file to the pop up windows. It can be a single .ovpn file or a zip/tar.gz file which contains multiple .ovpn files. Be careful that some .ovpn files use separated ca, cert, crl files. These files must be zipped together with the .ovpn file before upload.
(2) Enter Description, Username and Password Enter a description for your OpenVPN configuration file and then click Submit to finish the upload process. In some cases, it will ask you to enter your username and password.
(3) Connect to the OpenVPN server You can now click Connect to start the OpenVPN connection. Once connected, you should find your IP address, data received/sent.
(4) Manage configuration files Click Management to check the list of configuration files. You can modify the Description, User name or Password of each configuration file. You can also add, delete a configuration file or even purge all your uploaded configuration files. If your configuration file is a zip/tar.gz file which includes multiple ovpn files, you can choose an individual .ovpn file that you would like to connect in Server.
Get your configuration file We have tested different VPN service providers. Therefore, if you don't know how to get the configuration file, you can follow the instruction below. However, you have to contact your service provider for the configuration file if they are not listed below. If you have any problem in the setup of OpenVPN, please contact support@gl-inet.com 7.1.2. OpenVPN Server You can set up an OpenVPN server on GL.iNet router. Click + Generate a configuration file.
(1) Server configuration There are preset OpenVPN server configurations. You can also click Modify to change them manually. Click Apply when you finish. (2) Export OpenVPN configuration file Click Export Config to download the OpenVPN configuration file which you need to upload when you are configuring your OpenVPN client.
(3) Start the OpenVPN server Click Start to start your OpenVPN server. Otherwise, you will not be able to connect to the OpenVPN server by using its configuration file.
7.2. WireGuard WireGuard is an extremely simple yet fast and modern VPN that utilizes state-of-the-art cryptography. It aims to be faster, simpler, leaner, and more useful than IPSec, while avoiding the massive headache. It intends to be considerably more performant than OpenVPN. GL.iNet routers have pre-installed WireGuard server and client. WireGuard Client To set up a WireGuard client, please click + Add New Profiles. (1) Specify the name of your server Specify the name and then click Next.
(2) Input the configurations There are different methods to input the configurations. You can copy the JSON or Plain Text configurations from your server to Configuration or input the settings manually.
After copy the JSON or Plain Text from your server, you can paste it in the Configuration and then click Add to finish the WireGuard Client setup.
WireGuard Providers If you are using Azirevpn or Mullvad, you can click Others and use your AzireVPN or Mullvad account to set up WireGuard client directly. AzireVPN: Select AzireVPN as the provider, enter your User Name and Password and then click "Add" finish the WireGuard Client setup.  Mullvad: Select Mullvad as the provider, enter your Account Number and then click "Add" to finish the WireGuard Client setup.
WireGuard Server You can set up a WireGuard server on GL.iNet router with firmware 3.0. Click + Create a New User. (1) Start a WireGuard server You can simply use the default parameters of Local IP and Local Port, or you can set your own value. Then click Start to start your own WireGuard server.
(2) Add a new client You have to add a new user and apply the configurations when you are connecting to this WireGuard server. Click Management tab and then Create a New User. Specify the Name of the new client and then click Add.
(3) Get the configuration details for your client You can now check the list of the clients you added. You can Delete any unwanted client. Please click Configurations to find the configuration details which you need to use when you are setting up WireGuard client. We provide QRcode, Plain Text and JSON configurations currently. If you are using another GL.iNet router as a client, please copy the JSON configuration and paste it directly when you are setting up WireGuard client.
Wireguard App Support You can also use WireGuard App on other devices with various OS • Please refer to WireGuard Official Website： https://www.wireguard.
WinSCP or SSH into your the WireGuard Server (router) find and modify the file /etc/config/wireguard_server Add a line to the end of the config file of clients you want to visit. list subnet '192.168.xxx.0/24' Save and Exit 7.3. VPN Policies Starting from firmware version 3.022, users can define VPN routing policies. For example, it is possible to use VPN for a specific website/IP while maintaining a normal Internet traffic without VPN for others. 7.3.1.
Use VPN for all process on the router: Generally, the traffic of all processes running on the router such as GoodCloud will be routed through VPN if there is a connected VPN client (e.g. WireGuard, OpenVPN, Shadowsocks). In this case, these processes will lose Internet if VPN is disconnected. In order to ensure a proper operation of these processes, you can disable this option. As a result, they will not use VPN. Please Choose Policy: The item can be either Domain/IP (e.g. gl-inet.com / 192.168.1.1 / 192.
However, if we want to route all traffic through VPN except gl-inet.com, we need to add gl-inet.com under Do not use VPN for.
7.3.3. Clear DNS cache If you are using domain-based policy, it may not work unless you clear your DNS cache. Please follow the instructions below to clear your DNS cache. Windows: Press Win + R and run cmd. Execute command ipconfig /flushdns. MacOS: Open Terminal and execute command sudo killall -HUP mDNSResponder. Ubuntu: Open Terminal and execute command sudo service network-manager restart. You may also need to clear DNS cache in your browser. Chrome: Visit chrome://net-internals/#dns.
8.2. Internet Kill Switch Internet Kill Switch feature is built-in from firmware version 3.100, please upgrade. Note: With this option enabled, you need to set up the router as a VPN client for any of the router's clients to be able to connect to the internet. After this setting is on, the router needs to run the VPN client all the time, if the VPN client is not running, the clients are Not Allowed to access the Internet.
Setup 1) Choose "Internet Kill Switch". Choose "Internet Kill Switch" from "VPN". 2) Enable "Internet Kill Switch". Switch on the "Enable" button in the middle of the page.
3) Apply "Internet Kill Switch". Click "Apply" in the upper right corner. 4) Wait for the "Success" notice The “SUCCESS!” Message will pop-up if the Internet Kill Switch turn on correctly.
8.3. File Sharing You can use GL.iNet routers with external storage device such as USB stick, MicroSD card, etc, thus the contents can be shared among all your connected clients. You can easily read or modify its contents. 8.3.1. Router settings The contents of the external storage device are shared to LAN but not WAN and they are unwritable by default. Please click on your router model below to check how to change the file sharing settings of the router.
Router Model USB Stick USB Hard Drive MicroSD Card GL-S1300 (Convexa S) √ √ - Note: The power consumption of USB hard drive is quite high. You should use it with an external power supply. Otherwise, it may cause malfunction. 8.3.2. Access the storage device You can access the contents of the external storage device from your computer or smart phone. Please check the following guidance for the using of file sharing among different operating systems.
1). SSH into your router, you can gain control of both the router and the network that the rotuer is controlling. You can refer to the following link: https://docs.glinet.com/en/3/app/ssh/ 2). Modify the Samba configuration file, type the following command: sed -i 's/security = share/security = user/' /etc/samba/smb.conf.template 3). Restart the Samba service, type the following command: /etc/init.
4). Open 'This PC' and type \\your router IP Address, such as \\192.168.8.1. 5). You can view files in your USB flash drive through GL.iNet router now. Method 2: Samba 1.0 (SMB1.0) Support: 1) Your network must be Home/Private. Otherwise you may not be able to see your router in Network.
3.0 firmware supports SMB2, and if you need SMB3, use WinSCP to router, edit /etc/samba/smb.conf.template. Change the "max protocol = SMB2" to "min protocol = SMB1" "max protocol = SMB3", then save and exit WinSCP.
If you are using Windows 10, you also need to enable SMB 1.0. • Windows 7 Go to Control panel -> Network and Internet -> Network and Sharing Center. Find if your active network is Home network. If not, click it and change it to Home network. • Windows 10 Change your network to private by this tutorial. Go to Control Panel -> Programs and Features -> Turn Windows features on or off -> Find SMB 1.0/CIFS file sharing support, check all SMB1 related items, click apply and restart your computer.
2) Open a Windows explorer, you can find Network in the folder directory. Double click your router to access its contents. Mac OS Method 1 1) Open Finder, Menu -> Go -> Connect to Server...
2) Input smb://192.168.8.1, you need to change this if your router IP address is not 192.168.8.
3) Click Connect. 4) Input username and password, they are the same when you login Web Admin Panel. 5) Then Finder will display files of USB disk.
Method 2 1) Go to System Preferences -> Sharing -> File sharing. Click Options and then enable SMB. 2) Open Finder. You should be able to find your router under Shared. IOS You have to use file manage app to access the contents of your external storage device. You may use FE File Explorer: 1) Click + to create a Windows connection.
Page 54 | 150
2) Enter the IP address of your router (192.168.8.1). The User Name is root and the Password is the one that you use to login the web Admin Panel. Finally, click Save.
3) Click your newly created connection to access the contents.
Linux If you are using Linux you are probably comfortable with connecting to servers, and how to do this can vary greatly from distribution to distribution and largely depends on your window manager/display environment. Most systems come with Gnome and it is the default on the very popular Ubuntu distribution, so we'll give an example using the Files tool (also called Nautilus). If you open the app you should have a "Connect to server" option, there you can enter either the \\servername\share or smb://serve
and "Add new service" you then select "File System for Windows" from the list and it will give you the dialog to fill out with the server name and some other details, but only the server name/IP and share name are required. You can click the gear icon to enable saving the password for a share indefinitely, and you can click the "Keep" button to save the share to easily mount again in the future.
2) Click Scan to find your network storage device.
Page 60 | 150
Page 61 | 150
8.4. DLNA Server GL.iNet routers support DLNA Server, but this is not a default function. You need to install a little plug-ins to make it workable. 8.4.1. Install Plug-ins Go to APPLICATIONS, then Plug-ins. Install two apps: 1. luci-app-minidlna 2.
8.5.2. Use the DLNA server in GL.iNet Routers After Installation of two applications, you can now use your GL.iNet router as as DLNA server. 1. Make suer you already has a TF card inserted into the card slot before you power up your router. Hot-plug is not supported on GL.iNET routers. 2. Or you can insert an USB drive into the USB port. 3. Connnet your PC, Laptop, tablet, smart TV or Smartphone to GL.iNET router's WiFi(SSID). Here is the sample: GL-AR750-xxx 4.
In Windows File Explorer -> Network IOS: Install VLC or UPNP Extreme in App Store: Page 64 | 150
You can easily find the OpenWrt DLNA Sever in UPNP: UPNP Extreme and VLC Installation | UPNP Setup - | - Page 65 | 150
| Page 66 | 150
Page 67 | 150
VLC Setup: Step 1： Click the Traffic Cones Logo on the left top, select Local Network Step 2: You can find the OpenWrt DLNA Server easily in Local Network.
| Page 69 | 150
Page 70 | 150
Also other devices can easily find the OpenWrt DLNA Server easily. Enjoy your media DLNA Server by GL.iNET routers. 8.5. DDNS Dynamic Domain Name Service (DDNS) is a service used to map a domain name to the dynamic IP address of a network device. Setup DDNS requires firmware v3.010 or higher. Download firmware file Open this website to download the latest firmware https://docs.glinet.
cloud-ui" and click "Install" button. After installation, press "F5" to refresh Admin Panel, a new item "Remote Access" will appear inside APPLICATIONS. 2) Enable DDNS At the left sidebar, APPLICATIONS -> Remote Access, toggle "Enabled DDNS", agree Terms of Services & Privacy Policy, click "Apply" button. Generally, it takes several minutes to take effect. Move mouse to hover the icon besides "Enabled DDNS", it will display the DDNS url of your device.
Use nslookup command to check if your DDNS is enabled. You need to change xx5007c.glddns.com to your DDNS url when use nslookup command. nslookup xx5007c.glddns.com 8.8.8.8 The output above means the DDNS url has maped to a IP address. 4) HTTP Remote Access This function requires a public network IP. If your router is behind NAT, you may need to set up port forward in higher level router. It use port 80. Follow the steps above, to enable HTTP Remote Access.
HTTP is not encrypted, use at your own risk. After you enable HTTP Remote Access, you can access Admin Panel anywhere by your DDNS url of http, e.g. http://xxxxxxx.glddns.com. If you use port forward, you should be access like http://xxxxxxx.glddns.com:YourExternalPort. 5) HTTPS Remote Access This function requires a public network IP. If your router is behind NAT, you may need to set up port forward in higher level router. It use port 443.
Page 75 | 150
As show above, click "Advanced Page 76 | 150
As show above, click "Processed to xxxxxxx.glddns.com (unsafe)". After you enable HTTPS Remote Access, you can access Admin Panel anywhere by your DDNS url of https, e.g. https://xxxxxxx.glddns.com. If you use port forward, you should be access like https://xxxxxxx.glddns.com:YourExternalPort. 6) SSH Remote Access This function requires a public network IP. If your router is behind NAT, you may need to set up port forward in higher level router. It use port 22.
After disable DDNS, the interface is like above. 8.6. Cloud Introduction GL.iNet GoodCloud cloud management service provide an easy and simple way to remotely access and manage routers.
• LTE Signal • Email alarm about online offline status update Set up routers remotely • Set up routers (e.g.
Local upgrade Open a web browser (we recommend Chrome) and to access router Web Admin Panel (default url is http://192.168.8.1). At the left side, UPGRADE -> Local Upgrade, select the firmware file you download, you can turn off "Keep Settings" for more stable, click "Install" button. It takes several minutes to install.
Follow the steps above, to enable cloud management feature, choose the Data Server which is nearest your devices located. There are three Data Server, 'Global', 'America' and 'Europe'. If your devices are neither in America nor in Europe, just select 'Global'. Global Data Server is at Japan. Create GoodCloud account Visit https://www.goodcloud.xyz to access GoodCloud web site by Chrome or your favorite browser. Sign up an account, and sign in.
Add a new group On the left side -> Groups List -> Add group. Follow the steps below to add a new group. Set the group name, company, description and location. Each device must belong to a group.
Add device On the left side -> Devices List -> Add Device. There are three methods to bind device to GoodCloud, "Auto discover", "Manually add" and "Bulk import". Auto discover Follow the steps below to add your device. If the router and PC(which opened goodcloud.xyz page) are at the same public IP，it will be automatically discovered, and can be found when click "Device" list. DDNS or Device ID can be found on the back of your router.
Manually add If it can't discover automatically, try "Manually add". All information that need to input can be found on the back of the router. PS: Input "MAC", "SN" and "DDNS" / "Device ID" here just to verify that the router is really original and valid. DDNS feature and the Cloud feature are separate things.
For some new models, DDNS has been changed to Device ID on the back of router. Bulk import "Bulk import" is for user who have a great number of devices to add. By "Bulk import" you can import many devices by a Microsoft excel file.
Binded info on router Web Admin Panel After you seccessfully add router to GoodCloud, go back to router Web Admin Panel, APPLICATION -> Remote Access -> Cloud Management, press 'F5' to refresh this page, It will display the binded GoodCloud username, hover the username it will show the corresponding GoodCloud email account. Click 'View Logs' will show api call logs by GoodCloud.
Unbind router If you want to unbind router, click Unbind button. If you have any difficulties, please send email to admin@goodcloud.xyz for help.
there is icon at the first column of this table, means this device is online. means this device is offline. means this device is deactivated, it has never connected to GoodCloud before.
Select the column you want to display. "Online time" is the latest time when device connected GoodCloud. "Offline time" is the latest time when device disconnected GoodCloud. "Update time" is the latest time when device connected or disconnected GoodCloud. IP, if your router run VPN client, this IP will be your VPN IP by default. Learn More LTE Signal Only available for 4G devices, e.g. GL-MiFi, GL-X750 Toggle the column on Device List page.
It will show Signal strength, Type, and relavant parameters. Device detail info At left side -> Device List, click the name of a online device, it will open a page to manage this device of WiFi, Clients and view router info, memory usage, up time, load average and log.
Device info WiFi Modify all WiFi settings.
Router status Client list Timeline Timeline tab display the activities of router, and messages uploaded by the router's associated IoT device. Set email alarm You can set email alarm when a device is online, offline, and new client connected.
Then set the email you want to receive notification. To ensure you get email successful, please add admin@goodcloud.xyz to your email address book. Site to Site Site to Site only support firmware v3.026 and above.
Introduction Site to Site allows offices in multiple locations to establish secure connections with each other over internet. It extends the company's network, making computers resources from one location available to employees at other locations. Senerio 1: A company has dozens of branch offices that they wish to join in a single private network to share resources.
Defaul port is 51830, if you want to use another port, find the Advanced option at the lower left corner. Due to device's performance, each Site to Site network can have up to 10 devices. After you had chosen the devices, click Continue. Then, it will test each device if it can be set as the Main Node of Site to Site.
We suggest that the router with strong performance and best network speed to be the Main Node. If none of the devices can be used as the Main Node, make sure that: • One of routers has a public IP, either static public IP or dynamic public IP. • Port is open, default is 51830. • If the router is behind NAT, you may need to set up port forwading. You can also change port and try again.
If there are more than one device can be set as the Main Node, you need to choose one to continue.
If there is only one device can be set as the Main Node, it will go to the Site to Site detail page directly. The network is stopped by default, check the LAN IP, if it is OK then you need to click Start button, otherwise click Setting to change LAN IP.
Wait a few minutes, the node's connect status will display as lines. Solid line means connected, dashed line means disconnected.
Testing the Site to Site connection Now the Site to Site network is created and started, let's test the connection. Use your PC or Phone to connect to one of the Node of this Site to Site, and use browser to access another Node's LAN ip, if you see the login page, the connection between these two nodes is worked. For example, my PC connect to Node 1 device, and then I use browser to access Main Node's LAN IP (192.168.48.
You can add node's parent routes too. Each sub Node build an encrypted tunnel netwrok to Main Node, if you want to change the IP of tunnel subnet. Click 'IP Address Range'.
Batch Setting You can use this feature to configure multiple parameters for a single device, or you can configure multiple parameters for multiple devices. PS: This feature is only available to business users. Batch Setting of Single Device To configure single device, as show below. The left side of image below is correct. If your interface is like the right side of image below, please upgrade to latest testing firmware.
Check the configuration that needs to be modified and input value. The checked configuration is required, and only the configuration that conforms to the rule can be filled out. After the configuration is delivered, it does not take effect immediately. The configuration takes effect and the device needs to be restarted. You can check the Restart now option in the lower right corner of the above figure. After the configuration is completed, the device will restart immediately.
Unchecked Restart now option will prompt. Batch Setting of Mutiple Device Select the devices you want to configure.
Other operations are the same as when operating a single device. Other Batch Operations Other Batch Operations: Move to other group, upgrade, restart, delete. Template Management Save frequently used configurations as templates and quickly apply them when you modify configurations in batches. PS: This feature is only available to business users. Add a Template Check the configuration that needs to be modified and input value.
Give the template a name and description.
Task List At task list page, it shows the execution result of the configuration template. PS: This feature is only available to business users. You can view the execution result of each device and configuration.
BLE MQTT Bridge Bluetooth Low Energy (BLE) is widely used for smart home, wearable and IoT sensors. This feature is for GL.iNet BLE gateway, GL-X750 Spitz and GL-S1300 convexa S which has built-in BLE modules. Read this to learn how to use them forward your BLE data to the cloud based on MQTT protocol, including GL.iNet GoodCloud and AWS IoT. GoodCloud and VPN If you enable GoodCloud feature on router and also use it as VPN client, there is something important you need to know.
Disable To stop GoodCloud service, turn it off on router Web Admin Panel. Please follow the steps below. No action needed on the GoodCloud website.
After disable Cloud, the interface is like above. Turn on Captive Portal Open a web browser (we recommend Chrome) and to access router Web Admin Panel(default url is http://192.168.8.1). At the left sidebar, APPLICATIONS -> Portal, follow the steps below to enable Captive Portal.
1) Turn on one-click Internet access 2) Choose the network that you want to use Portal. LAN is for LAN clients, include wired clients. Guest is for Guest clients which access by Guest Wi-Fi. 3) Set free internet time. 4) Certification URL is the default page that clients will force redirect to when they are connected, e.g. https://www.gl-inet.com 5) Apply the configuration. For wired desktop client, please use browser to access a http(not https) website, e.g. http://neverssl.com or http://apple.
Change the default page The default page is located /etc/nodogsplash/htdocs/, use SSH or WinSCP to change this page. For more information about how to use SSH and WinSCP, please access this. You may need basic HTML and CSS knowledge to change this page, please learn these from w3school or other sites. If you want to change the picture on the default page, just replace the image on /etc/nodogsplash/htdocs/portal_login.png.
If you don't want to upgrade, please read below. Free Tor firmware for all !!! Note This Tor firmware is totally free and no warranty. Refer to the forum for help! To use the Tor firmware: 1. Download the correct firmware for your router. 2. Flash it to the router, DO NOT reserve settings. If you brick your router after flashing the wrong firmware or wrong way, please use uboot failsafe to debrick the router. Versions and supported devices We have several version of Tor firmware and here is the summary.
Now Tor firmware is generally by imagebuilder and you will be able to install from standard GLi software repositories using opkg. The source code is on github now. To modify and compile the Tor firmware by yourself, please refer to the following imagebuilders. • imagebuilder for AR150, AR300M, MiFi, 6416 based on OpenWrt CC 1505 • imagebuilder for AR300M Nand based on OpenWrt CC 1505 • imagebuilder for MT300N, MT300A based on OpenWrt CC 1505 • imagebuilder for MT300N-V2 based on LEDE 17.01.
Model Tor firmware path GL.iNet6416 https://dl.gl-inet.com/firmware/6416/tor/ Newest Version Note 1.3 AR150 https://dl.gl-inet.com/firmware/ar150/tor/ 2.264 AR300M https://dl.glinet.com/firmware/ar300m/nand/tor/ 2.264 AR300MNor https://dl.glinet.com/firmware/ar300m/tor/ 2.264 MT300N https://dl.glinet.com/firmware/mt300n/tor/ 2.264 MT300A https://dl.glinet.com/firmware/mt300a/tor/ 2.264 GL-MiFi https://dl.gl-inet.com/firmware/ar150/tor/ 1.3 GL-AR300 https://dl.gl-inet.
Login You will be asked to login using your NEW password now. Homepage The UI is based on Domino Pi. It is quite simple. In your homepage you will be displayed with: 1. Your network status 2. Tor status. Please note if your tor reconnects this information may not be accurate. 3.
System and firmware upgrade You can click the SYSTEM button from the left sidebar to view the system information, including: 1. Your router's name 2. Change your password 3. Change your timezone 4. Check your firmware version and upgrade it, from online or mannually.
If the firmware on our website is newer, you can click Download and follow the instructions to upgrade the firmware.
1. Internet protocol: dhcp, static, pppoe, 3g, tethering or repeater. Tethering only works in Android phones. 2. Wireless parameters: ssid, encryption and passsword 3. LAN IP 3G 4G settings If you connect a 3G or 4G USB modem, you can set the internet to the modem. You need to choose 3G as protocol, choose modem device, usually /dev/ttyUSBx, choose umts or evdo, then input your apn etc.
Repeater settings. It will search for available ssid automatically. You need to choose ssid and type your password. !!! NOTE This firmware don't have repeater manager as our stock firmware. If you move to another location, your wifi maybe not work and you need to re-setup. Refer to the button action section in this page. Luci Click the LUCI button on the left sidebar you can have the LUCI UI. You can go back to Domino UI by clicking the Domino Web Panel link on the bottom right corner.
Reset button and hardware switch usage Reset button and switch is assigned special functions.
Reset 1. When you press down the reset button, the middle LED will start to flash once per second. Release your finger if the LED just flashed once (1 seconds), the Tor will try to change a new Exit node. 2. If you keep the button pressed for 3 seconds, it will flash quicker, twice per second. Now release your finger your network will reset, including disable repeater, set lanip back to 192.168.8.1 and enable dhcp. Use this function if your repeater cannot connect which causes your wifi down 3.
9.2. LAN IP LAN IP is the IP address that you use to connect to this router. The default IP address of GL.iNet router is 192.168.8.1. If it conflicts with the IP address of your main router, you can change it.
9.3. Time Zone The time of the router's activities will be recorded according to the router time. Therefore, choosing the time zone of your location is recommended.
9.4. MAC Clone Clone the MAC address of your current client to the router. It is used especially in hotel when the network checks your MAC address. For example, if you got your smartphone registered on the network, you can clone the MAC address of your smartphone to the router so that the router can also connect to the network.
9.5. Custom DNS Server You can configure the DNS server of the router in order to prevent DNS leak or other purposes. DNS Rebinding Attack Protection: Some network may require authentication in captive portal. Disable this option if the captive portal of your network cannot be resolved. Override DNS Settings for All Clients: Enabling this option will capture DNS request from all connected clients.
9.6. Button Settings Configure the function of the mode switch. It doesn't have any function by default. You can set it as a toggle to turn on or off Wireguard/OpenVPN client.
10. 9.7. Network Mode Change the network mode to cater your usage scenario. You may need to reconnect your client device whenever you change the network mode of the router. Be aware that you may not be able to access the web Admin Panel with the default IP 192.168.8.1 if you use the router in Access Point, Extender or WDS mode. If you want to access the web Admin Panel in this case, you have to use the IP address assigned by the main router to the GL.iNet router. Router: Create your own private network.
9.8. Revert Firmware Revert the router to factory default settings. All your settings, applications and data will be erased.
9.9. Advanced Click Advanced to direct to Luci which is the default web interface of OpenWrt. You can check the detailed system log or conduct more advanced configurations there.
Note: The username is root. The password is same as the one that you use to access the web Admin Panel. 10. Troubleshooting 10.1. LED Indicators LED Status Indication GL-S1300 • Power: Solid green LED that indicates the router is powered up.
• Mesh: Flash green LED indicates that the router is pairing with another router. It will turn solid green when the Mesh network has been created. • Wireless: Solid green LED that indicates the router is broadcasting Wi-Fi. It will flash when there is wireless data transfer. LED Customization To configure the LED of GL.iNet routers, please login to Luci by clicking Advanced settings at the bottom-left corner of the web admin page. Then please choose System > LED Configuration.
10.2. Repair or Reset How to Repair / Reset All GL.iNet Routers have reset buttons, you can use them to repair your network or reset your routers to factory defult. If you can neither access the web-based setup page nor the router, you can press the reset button: Repair Press and hold for 4 seconds then release to repair your network. Reset Press and hold for 10 seconds then release to reset the router to factory settings. All user data will be cleared. Reset Button GL-S1300 Home AC Router 10.3.
You can also refer to our video, How to Recover GL.iNet Mini Router by U-Boot FailSafe. 1. First you have to download firmware to your computer. You can download the firmware here. For GL-AR300M, GL-AR300M-Ext, GL-AR750S-Ext, please download the .img firmware file. For GL-B1300, GL-S1300, please download the .img firmware. Everyone else, download the .bin firmware file. 2. Connect your computer to the Ethernet port (either LAN or WAN) of the router. You MUST leave the other port unconnected. 3.
7. Use Firefox or Chrome to visit http://192.168.1.1. 8. Click Choose File to find the firmware file. Then click Update firmware. For GL-AR300M, GL-AR300M-Ext, GL-AR750S-Ext, please download the .
flash. 9. Wait for around 3 minutes. Don’t power off your device when updating. The router is ready when both power and Wi-Fi LED are on or you can find its SSID on your device. 10. Revert the IP setting you did in step 6 and connect your device to the LAN or Wi-Fi of the router. You will be able to access the router via 192.168.8.1 again. 10.4. Change WAN to LAN You can configure the WAN port of the router so that it can be used as a LAN port.
1. Leave the WAN port of the router unconnected. 2. Connect your device to the router and access the web Admin Panel. 3. Go to Internet, click Use as LAN under the Cable section. 4. Click Yes to confirm.
You can simply revert the setting by repeating the above procedures. This time, it will show Use as WAN in step 3. 10.5. Captive Portal Connect to a Hotspot with Captive Portal Some public hotspots especially those in hotel, cafe or airport, require you to input your authentication information or agree the terms and conditions through a web page (Captive Portal) before you can connect to it or access the Internet.
2. Go to Admin Panel -> MORE SETTINGS -> Custom DNS Server. Then, disable DNS Rebinding Attack Protection.
3. Use your web browser to visit a webpage, it will be redirected to the captive portal of the hotspot automatically. If you are using smartphone but your web browser doesn't redirect to the captive portal. Please turn off the Wi-Fi of your smartphone and then turn it on and reconnect to the Wi-Fi of your router again. The captive portal should be popped up directly after you entered the Wi-Fi password. 10.6. GL.iNet app GL.iNet app requires router firmware version 3.100 and above. Please upgrade.
Then click the Upgrade on the left side. Some models don't have V3.100 release firmware yet, please try testing(pre-release) firmware. Please find the download info at Firmware Release page.
10.7. Access Web Panel Sometimes you may be unable to access 192.168.8.1 to login web admin panel, please follow the guide below to solve this problem. Check connection/router's IP address Make sure your WAN/LAN port connection is correct. WAN port is connected to an internet source and LAN port is connected to devices. If connected by wifi, make sure the SSID is correct. Then follow the steps below to check the router's IP address. Windows 7 / Windows 10 Your ip address results determine the next step.
10.8. Extensible Authentication Protocol (EAP) Introduction You can connect to EAP (Extensible Authentication Protocol) Wi-Fi network which requires username and password authentication on GL.iNet routers. This guide is how to connect an EAP Wi-Fi network via GL admin panel.
Connect via web panel 1. Visit the Admin Panel Visit the Admin Panel and click “Scan” in the Internet -> Repeater. You can find and connect to the EAP SSID to connect directly.
2. SSID Or choose “Other” in the drop-down list of SSID, then select EAP type in Wi-Fi Security drop-down list. 3. Wi-Fi Security Currently, we only support two types: 802.1X EAP/WAP and 802.1X EAP/WAP2.
4. Type Choose 2.4G or 5G. 5. User Name and Password Enter your User Name and Password and then click join.
Connect via Luci Our web page only supports few EAP types for now so you may need to connect via Luci page in most situations. 1. Visit the Luci page Go to MORE SETTINGS->Advanced. Input your web password. Then you will enter luci page.
2. Connect to EAP wifi Go to Network->Wifi(or Wireless). Click 'Scan' on 2.4G section or 5G section.
Join the network you want. 10.9. GoodCloud issues How to fix if my device show "Deactivated" The "Deactivated" mean the device never been connected to the server before.
1. Make sure the router has connected to the Internet. 2. And try to disable and re-enable the GoodCloud on router's Admin Panel. Don't forget to click "Apply" button. 3. Make sure to access to the right region of GoodCloud.
