GL.iNet Routers
Expert at configuring GL.iNet routers running firmware v4.x (OpenWrt-based).
Overview
- VPN Client/Server — WireGuard, OpenVPN with 10+ integrated providers, policy-based routing
- AdGuard Home — Built-in network-wide ad blocking on supported models
- Multi-WAN — Failover and load balancing across Ethernet, WiFi repeater, tethering, cellular
- Drop-in Gateway — Add VPN/AdGuard to existing network without replacing primary router
- Network Modes — Router, Access Point, Extender, Bridge, WDS
- Tailscale / ZeroTier — Mesh VPN integration for remote access
- Network Storage — USB/SD shared via Samba, WebDAV, DLNA
- LuCI — Full OpenWrt advanced configuration access
Quick Start
- Connect to router WiFi (SSID on bottom label, default key:
goodlife)
- Browse to
http://192.168.8.1
- Set admin password → configure internet connection
- Default ports: Web UI
80/443, DNS 53, WireGuard 51820
Core Concepts
VPN Dashboard — Central hub for managing VPN connections. Supports Global Mode (all traffic through one tunnel) and Policy Mode (up to 5 tunnels with per-device/per-domain routing rules). Kill switch blocks traffic if VPN drops.
Drop-in Gateway — Place GL.iNet router between existing router and devices. Adds VPN, AdGuard, encrypted DNS without changing existing network. Connect primary router LAN → GL.iNet WAN.
Network Modes — Router (default, full features), Access Point (wireless bridge, no NAT), Extender (wireless repeater), Bridge (transparent switch). Only Router mode supports VPN/AdGuard/firewall.
Documentation
- First Time Setup — Initial configuration guide
- Internet & WAN — Ethernet, repeater, tethering, cellular
- Wireless — WiFi bands, channels, security, mesh/MLO
- LAN & DNS — LAN settings, DHCP, DNS modes, encrypted DNS
- VPN Dashboard — Global/policy mode, kill switch, tunnels
- WireGuard — Client and server setup
- Tailscale — Mesh VPN remote access
- AdGuard Home — Built-in ad blocking setup
- Firewall & Security — Port forwarding, DMZ, firewall rules
- Network Modes — Router, AP, extender, bridge, WDS
- Drop-in Gateway — Add features to existing network
- Multi-WAN — Failover and load balancing
- Clients — Device management, speed limits, access control
- Network Storage — USB/Samba/WebDAV/DLNA
- Administration — Firmware upgrade, DDNS, LuCI, debrick
Common Workflows
Set up as drop-in gateway with AdGuard
- Connect primary router LAN → GL.iNet WAN
- Enable Drop-in Gateway in admin panel
- Set primary router DHCP gateway to GL.iNet WAN IP
- Enable AdGuard Home under Applications
Connect to VPN provider (WireGuard)
VPN → WireGuard Client → select provider (Mullvad, NordVPN, etc.) → enter credentials → select server → connect
Remote access via Tailscale
Applications → Tailscale → Enable → bind to Tailscale account → enable Allow Remote Access LAN → approve subnet routes in Tailscale admin
Upstream Sources
Sync & Update
When user runs sync: fetch latest from upstream, update docs/.
When user runs diff: compare current vs upstream, report changes.
1---2name: glinet3description: Configure and manage GL.iNet routers — VPN (WireGuard, OpenVPN, Tailscale), AdGuard Home, DNS, multi-WAN failover, drop-in gateway, firewall, and network modes. Use when setting up or configuring a GL.iNet router, travel router, or OpenWrt-based networking. Triggers on mentions of GL.iNet, GL-iNet, Flint, Beryl, Slate, Brume, Spitz, Mudi, Marble, travel router, WireGuard router, drop-in gateway.4---56# GL.iNet Routers78Expert at configuring GL.iNet routers running firmware v4.x (OpenWrt-based).910## Overview1112- **VPN Client/Server** — WireGuard, OpenVPN with 10+ integrated providers, policy-based routing13- **AdGuard Home** — Built-in network-wide ad blocking on supported models14- **Multi-WAN** — Failover and load balancing across Ethernet, WiFi repeater, tethering, cellular15- **Drop-in Gateway** — Add VPN/AdGuard to existing network without replacing primary router16- **Network Modes** — Router, Access Point, Extender, Bridge, WDS17- **Tailscale / ZeroTier** — Mesh VPN integration for remote access18- **Network Storage** — USB/SD shared via Samba, WebDAV, DLNA19- **LuCI** — Full OpenWrt advanced configuration access2021## Quick Start22231. Connect to router WiFi (SSID on bottom label, default key: `goodlife`)242. Browse to `http://192.168.8.1`253. Set admin password → configure internet connection264. Default ports: Web UI `80/443`, DNS `53`, WireGuard `51820`2728## Core Concepts2930**VPN Dashboard** — Central hub for managing VPN connections. Supports Global Mode (all traffic through one tunnel) and Policy Mode (up to 5 tunnels with per-device/per-domain routing rules). Kill switch blocks traffic if VPN drops.3132**Drop-in Gateway** — Place GL.iNet router between existing router and devices. Adds VPN, AdGuard, encrypted DNS without changing existing network. Connect primary router LAN → GL.iNet WAN.3334**Network Modes** — Router (default, full features), Access Point (wireless bridge, no NAT), Extender (wireless repeater), Bridge (transparent switch). Only Router mode supports VPN/AdGuard/firewall.3536## Documentation3738- **[First Time Setup](docs/first-time-setup.md)** — Initial configuration guide39- **[Internet & WAN](docs/internet-wan.md)** — Ethernet, repeater, tethering, cellular40- **[Wireless](docs/wireless.md)** — WiFi bands, channels, security, mesh/MLO41- **[LAN & DNS](docs/lan-dns.md)** — LAN settings, DHCP, DNS modes, encrypted DNS42- **[VPN Dashboard](docs/vpn-dashboard.md)** — Global/policy mode, kill switch, tunnels43- **[WireGuard](docs/wireguard.md)** — Client and server setup44- **[Tailscale](docs/tailscale.md)** — Mesh VPN remote access45- **[AdGuard Home](docs/adguardhome.md)** — Built-in ad blocking setup46- **[Firewall & Security](docs/firewall-security.md)** — Port forwarding, DMZ, firewall rules47- **[Network Modes](docs/network-modes.md)** — Router, AP, extender, bridge, WDS48- **[Drop-in Gateway](docs/drop-in-gateway.md)** — Add features to existing network49- **[Multi-WAN](docs/multi-wan.md)** — Failover and load balancing50- **[Clients](docs/clients.md)** — Device management, speed limits, access control51- **[Network Storage](docs/network-storage.md)** — USB/Samba/WebDAV/DLNA52- **[Administration](docs/administration.md)** — Firmware upgrade, DDNS, LuCI, debrick5354## Common Workflows5556### Set up as drop-in gateway with AdGuard571. Connect primary router LAN → GL.iNet WAN582. Enable Drop-in Gateway in admin panel593. Set primary router DHCP gateway to GL.iNet WAN IP604. Enable AdGuard Home under Applications6162### Connect to VPN provider (WireGuard)63VPN → WireGuard Client → select provider (Mullvad, NordVPN, etc.) → enter credentials → select server → connect6465### Remote access via Tailscale66Applications → Tailscale → Enable → bind to Tailscale account → enable Allow Remote Access LAN → approve subnet routes in Tailscale admin6768## Upstream Sources6970- **Documentation**: https://docs.gl-inet.com/router/en/4/71- **Community**: https://forum.gl-inet.com72- **Firmware**: https://dl.gl-inet.com7374## Sync & Update7576When user runs `sync`: fetch latest from upstream, update docs/.77When user runs `diff`: compare current vs upstream, report changes.
zot24