Thank you! 🙏

Hello 1. Is your phone connected to the travel router? You may want to put your phone into Flight Mode so it can only use WiFi. 2. The choice is yours, most people want there to be No Internet connection if your VPN Server fails, but you can choose to have it expose your IP Address here: docs.gl-inet.com/router/en/4/faq/block_no_vpn_traffic/

Absolutely, if they have full access to your computer they could just turn on your webcam and watch you. If your company is out to get you, they will get you. These methods are designed to provide a secure connection back to your home so you can work without compromising security. If your company does not respect your privacy there are many ways they can violate it.

Hello, it is possible, just leave a comment or email if you run into any problems. The description has a list of routers sorted by price. Two Beryl AX is cheap and fast for most people.

If you cannot Port Forward then you will need to use TailScale or ZeroTier. Both are in Beta and are missing the ability to set the "Exit Node" from the GUI. So at this point in time you have to be comfortable with command line to complete the setup. Another option would be to use a computer that stays on 24/7 to be the exit node and connect to it using a single travel router.

The Flint and Beryl AX would work, there is a list of a few more options in the description. Thank you!

@@justinreviewsandrepairs5246 thank you very much, Sir!!

Interestingly, another comment today was how two Slate AX have been working for four months in Thailand. Let's take a look at your setup and discover the problem. Email me your error log (View Log on the Client) at [email protected]

In general, dropped connections are due to poor Internet. Use Ethernet when possible and Fiber Optic Internet on both ends for the best results. Please send me an email with your setup [email protected]

Great to hear! Thanks for sharing!

Wow! Thank you for sharing! Thailand doesn't have the best Internet infrastructure according to WonderShare Latency data so it is good to hear it is working there! Thank you!

Thank you!

Hi Jeff, can the GL-A1300 reach the Internet while the VPN is off? And is the Client connected to a second Internet connection?

It is possible, but please consider getting the newer Beryl AX instead of the Opal. It is much faster for not much more money.

Yes, you could use GLiNet, Asus, Ubiquiti, etc. anything that supports WireGuard ®️. You could even use a computer as the Server side of things. GLiNet is typically the cheapest option with the most features out of the 3 brands listed. There are other brands that are even cheaper, but you don't want to go too cheap because you want the company to be able to afford to release firmware upgrades.

Exactly, most people need the computer with them to use video conferencing, but if you don't need the physical then the IP KVM is a nice option.

@@justinreviewsandrepairs5246 Gotcha, does that mean video conferencing isn't possible over KVM? Or spotty/slow?

I am not aware of any that support a remote webcam.

@@justinreviewsandrepairs5246 would forwarding meeting invites to my personal email and signing into meetings on Microsoft Teams or Zoom from there be an option? Or does the KVM disable the camera on the laptop I'm using (and would it be detectable by the IT department that I'm joining meetings from a different IP address?)?

You would expose yourself doing that since your personal computer would have a different GUID, IP Address, and more.

You will be using his Download bandwidth as if you were there in person, but this also uses a significant amount of Upload bandwidth to send the traffic to your remote location. The Opal is the oldest and slowest option in the list (in the description) and would use about 15 Mbps Upload Bandwidth at full use. The only change to the network is forwarding a single port to the VPN Server so you can connect. For the best results, get Fiber Optic Internet which has fast Download and Upload speeds as well as Low Latency. I would not recommend getting the Opal anymore, for a little more money you can get the Beryl AX with the latest features and increased speeds. Feel free to email me if you run into any problems or have more questions. [email protected]

@@justinreviewsandrepairs5246 Thanks! Sorry if this is a dumb/obvious question, but am I replacing his existing router with the Beryl or piggybacking the Beryl off his Zyxel (you said forwarding a single port to the VPN server, I think that means I leave his existing router as is and forward one port from it to the Beryl or Slate which act as the VPN server, right? (I'll likely shoot you an email as well! Thank you so much!!)

Exactly, you can keep his setup the same, just plug a cable from his LAN port to your WAN port and add a Port Forwarding rule on his router.

Hi, since the router can run a VPN, you can still run your work VPN on the PC as usual. Here is a video that covers the setup and you can choose the combination of routers from the description that fits your needs and budget. kzfaq.info/get/bejne/gr6Sd8pi25yZgac.html I think the Beryl AX is the best compromise between speed and price. Let me know if you have any questions.

Thousands of people have chained VPNs using their home IP Address and WireGuard ®️ using this video: kzfaq.info/get/bejne/gr6Sd8pi25yZgac.html or you could use a commercial VPN provider such as WindScribe which offers WireGuard ®️. Here is a referral link for WindScribe: windscribe.com/yo/0bzxgfqu and here is the WireGuard ®️ page: windscribe.com/getconfig/wireguard let me know if you have any other questions! Thanks!

@@justinreviewsandrepairs5246 Thanks very much!

The Opal is the cheapest option (that still works for most tasks) while the Slate AX is the most expensive travel router (there are more expensive non-travel routers). You can choose any of the combinations of routers from the Description of the video or you can even use other brands such as Ubiquiti. For most people, the Beryl AX is a nice balance between performance and price. Your connection speed is limited by the routers you choose, the Internet connection on both ends, and the latency between those connections. For the Home Server, you should get Fiber Optic Internet for the best performance. Feel free to email me if you need any help. Thank you!

You can connect to the Hotel WiFi using your travel router. If they have a "Captive Portal" you will need to agree to their portal before you will have Internet, but here is a video for that: kzfaq.info/get/bejne/apyeepuezdOZn5s.htmlsi=9GUeQ1LE6QFOYNfb

Xfinity does require an extra step because their IP Address range is the same as WireGuard ®️. Send me an email and let's walk through it. [email protected]

For this video, Yes. In this video you are using a commercial VPN Provider which handles the Port Forwarding for you.

The minimum depends on what you are doing, video conferencing will need the most, but because latency is also important you should always get Fiber Optic Internet which is cheap, reliable, and fast.

For regular web browsing, 10mbps would be the minimum but keep in mind your remote connection is also a factor.

The Flint 2 is the best value right now. You can use any brand, such as the Ubiquiti UDM Pro, but it is significantly more expensive and currently has lower VPN Speeds. If you want maximum speeds you should either get professional networking equipment or consider running the VPN Server on an actual server. With that being said, you will always be limited by your slowest Internet connection which is usually your remote connection. I have Fiber Optic for the server but when I travel I am typically using my 5G HotSpot which typically isn't as fast as Fiber Optic.

@@justinreviewsandrepairs5246 Thank you for the respond and for your useful tips/videos!

If you run into any issues or have any other questions feel free to comment or email, thanks!

@@justinreviewsandrepairs5246 Hey Justin when I was setting up my Port forwarding my ISP gave me a "reserved IP address" should that be the IP address I add to the Wireguard server config?

The reserved IP Address should be the same one you see on the Internet page of the dashboard under Ethernet IP Address. If it is, then that is where you should Port Forward.

This method is hiding your use of a VPN by using your actual Home IP Address. Your other option would be to buy expensive hardware to remotely control a computer, but this has its own challenges.

I am not familiar with inscribe, but if they offer OpenVPN or WireGuard ®️ you can simply load the configuration file into the travel router.

You can use a commercial VPN provider with an IP Address based in the United States. NordVPN and WindScribe both work well.

Yes, but change them one at a time (2.4 and 5) so you don't get WiFi stuck in the off position: docs.gl-inet.com/router/en/4/interface_guide/wireless/

Hi, the Xfinity routers use an uncommon IP Address range that happens to be the same as WireGuard ®️. You will have to change WireGuard ®️ so it has a unique address range. Please see "Local IP Address Conflicts" on this page: justinpruett.com/glinet-troubleshoot.php

@@justinreviewsandrepairs5246 I'm finding it a bit difficult with my current modem. Do you suggest I buy a new modem for my Xfinity internet provider? If so, which one would you recommend? Thank you!

Please send me an email at [email protected] Xfinity has a few things that are problems but are easy to fix.

Thank you! Let me know if you run into any problems!

@@justinreviewsandrepairs5246 thanks brother. Would you recommend running a Tplink archer ac1750 for home openvpn server or go with a newer portable GLINET one? I already have beryl AX for the portable side

It is possible, but OpenVPN simply isn't as fast as WireGuard ®️. The Beryl AX goes on sale often, maybe just upgrade when you can.

No, you get to save all that money! 💰 It is good to have a commercial VPN as a backup, but you could simply buy it when you needed it.

@@justinreviewsandrepairs5246 thank you! i will be setting this up next week. Hopefully i wont have any issues!

Great! If you do run into any issues, feel free to reach out! There are also some common troubleshooting tips here: justinpruett.com/glinet-troubleshoot.php

You could use any device to do the spoofing, such as a laptop, but most phones can use fake MAC Addresses easily to prevent collisions on your network. If your laptop and travel have the same MAC Address you could run into problems.

@@justinreviewsandrepairs5246interesting thanks

You cannot use OpenVPN and WireGuard ®️ at the same time, but assuming you used them one at a time and they still did not work I would double check your Port Forwarding. I have a list of troubleshooting tips here: justinpruett.com/glinet-troubleshoot.php or you can always email me your error logs

1. The one staying home should be wired with an Ethernet cable to the WAN port of the Travel Router. If you cannot use a wire, then 5 GHZ is preferred if you are close to the WiFi, if you are not close then use 2.4 GHZ (lower frequencies travel farther). 2. Yes, Wired is the fastest but the speed of the WiFi will depend on how far away you are from the WiFi and which band you choose. 5GHZ does not work as far away as 2.4 GHZ. 3. They are both great, the Slate AX is faster, but the Beryl is pretty close for typically a lower price. 4. It depends on what you are using it for, if you are trying to do video conferencing then it matters a lot. 5. I can't see the question, will answer in another comment

5. The video description has a list of the routers you can use at home and a list of routers you can travel with. Which one you choose depends on how much speed you need and what your budget will allow. Two Beryl AX would be fine for most people while still being affordable.

@@justinreviewsandrepairs5246 sounds good and thanks for the reply! Okay I’ll tell you my plan so you can put me in the right direction , 1. I will have my (router at home) plugged in my modem forsure and left alone since I am able to and can get the best connection. So what do you think for this part? 2.4ghz or 5? 2. Because I plan to go to Colombia without the job knowing and working there. So I’ll be FAR from home. So for the (travel router) what do you recommend 2.4ghz or 5GHz? Or it doesn’t matter? Or is it only for the house because it’s the server?

2.4 GHZ, 5GHZ, or 6GHZ mostly depends on how far you are from the WiFi signal, not how far you are from your house. So if the WiFi is on one side of the house and your workspace is on the other side of the house then you probably need to use 2.4 GHZ. If you are in the same room then you should use WiFi 6. Higher frequencies typically have faster speeds but do not work as far away. You should have Fiber Optic Internet at home for the best results. Fiber Optic has fast Download and Upload speeds along with low latency. Cable typically only has fast Download speeds. All three will be important for running the server.

@@justinreviewsandrepairs5246 ohhhh okok you explained it very good thank you a lot. Ok so I have the AT&T modem box in MY ROOM here at the house, and that’s where my future Glinet will be and CONNECTED by Ethernet wired so it will all be together in my room, and I plan to go to places like Asia , Latin America and etc. FAR countries. (With my potential travel router being a *slate ax or an beryl*) So what do you think?

Since the VPN is running on the Travel Router, you can still use the Government VPN on the furnished device. As far as tracking, this doesn't stop GPS, Triangulation, or any other tracking methods, so if you are being tracked you will need additional tools.

@@justinreviewsandrepairs5246 Thank you so much. Please one more question. When you set up the two routers (Opal and Slate AX) did you initially connect both to your ISP router to have them configured? I did this and for some reason when I switch to Slate AX and configure the wireguard client using the configuration I got from the opal, it is not working. kep saying the client is starting, please wait for too long.

You can set them up from the same connection but you must use a second Internet connection to actually test everything.

You cannot use the built in DDNS test while behind another router, you can ignore that test and use this one instead: justinpruett.com/glinet-troubleshoot.php

@@justinreviewsandrepairs5246 so I don't need to port forward port 443? I can just set up the Wireguard server like your instructions say?

No, you only need to Port Forward port 51820 for WireGuard ®️. You can change the port to 443 if your ISP blocks 51820, but that is not common. May I ask why you think you need to forward 443?

@@justinreviewsandrepairs5246 in the glinet manual it says "If your router is behind NAT, you may need to set up port forward in higher level router. It use port 443" so since my Brume is behind my home router I thought I had to set up port forwarding in order to access the UI

Oh, okay, because the Brume does not have WiFi you would potentially need to open port 443 to access the GUI from your ISP network, but you could also just plug into the LAN port of the Brume to access the GUI

Thank you! 1. In this video you are basically running your own VPN Service, you do not need Nord for this video. There is another video that covers using Nord. 2. Frontier is my Internet Service Provider, they provide me with a router and instead of replacing theirs I added the Opal. If you have Fiber Optic Internet you can probably get the Flint 2 router and replace the ISP router completely. If you have cable, you must use a modem which typically is bundled with a router these days. So unless the GLiNet router is the main router you will have to do the Port Forwarding step. Please let me know if you have any other questions Thank you - Justin

@@justinreviewsandrepairs5246 hey Justin, thank you so so so much for explaining. The set up worked out perfect for me. The two things that did the trick was first only enable UDP on the home router port forwarding and second change the default IP address 10.0.0.1 to 10.1.0.1 on the stay at home server router. Hope this helps others too. Again thank you!

Do you have Xfinity? For some reason their routers use the same IP Address range as WireGuard ®️ which is why you had to change it. Glad you got everything working! Thanks for sharing!

@@justinreviewsandrepairs5246 exactly I use Xfinity! Don’t mind this extra step and I noticed traceroute that it takes 1 step in my home city before routing to the next steps.

It works with Private or Public and Static or Dynamic IP Addresses. Obviously you won't be able to connect outside of your home with a Private Address but it will work within your Private Network if you for some reason have a need to do that. You wouldn't use the DDNS in that case since DDNS will provide your Public IP Address.

@@justinreviewsandrepairs5246 I see, thanks for ur reply! What would I use in this case if I wouldn’t use DDNS?

If you don't want to use the free DDNS service, then you would want a Static Public IP Address from your ISP.

I have not used it personally, but a Remote Desktop is actually running somewhere else and you are controlling it remotely. Your connection is used to connect to a Remote Desktop to view the screen and pass keyboard and mouse data, a remote Desktop should not be using your actual Internet connection for traffic.

@@justinreviewsandrepairs5246 I’m talking about the jobs program . It’s their own program/ software and once I’m in they become the administrator and I can’t turn off wifi or Bluetooth but I can be wired and get internet . So would this ruin the whole method for me? Since wifi and Bluetooth are on?

Sorry, I don't know anything about your company's software, I can only say in general that Remote Desktop is software that allows you to control a computer at another location and you should be able to use it with this router. You could probably test your WiFi before you travel.

@@justinreviewsandrepairs5246 so if I can’t turn off my blue tooth or wifi will this still work?

For increased privacy it would be better to turn it off, but it would still work with it on.

You can set your Time zone in the Travel Router. I don't know how your specific program is working, but it is typically a remote desktop connection which is not using WiFi.

Send me an email at [email protected] let's figure it out

thanks Justin! sent u an email

I sent you one back

Yes, I will start working on an updated video, thank you!

@@justinreviewsandrepairs5246 awesome thanks

@@justinreviewsandrepairs5246thank you! I’m in the process of connecting a Slate and a Beryl.

@@justinreviewsandrepairs5246 do you do any consulting work?

Thank you! You can do a lot, even with the cheap ones, but the newer ones with Version 4 Firmware make it easy to use. On version 3 you can go into the command line to enable additional features.

@@justinreviewsandrepairs5246 I'll definitely have to check that out! I've got a LOT to learn. I was trying to do a little bit of robotics with ROS and needed local connection between machines. And then I fell into the IT rabbit hole. 😄

Be sure to go down the Meshtastic rabbit hole as well! kzfaq.info/get/bejne/lc53qpVezbi8np8.html

Thank you! Glad it helped!

That's a new one! Typically it is the other way around. You likely have an IP Address conflict with your existing home network. What is the Local IP Address you see on the Internet page of the GLiNet router Dashboard? (On the router that caused the problems, is it the Server or Client?)

Could you explain more? You can run everything on your computer as usual, including a proxy.

@@justinreviewsandrepairs5246 I mean, let say I live in France but need to work for a company based in USA but in this case I dont have a home router set in the USA. How do i configure it to give an IP adress from the USA without being detected i am using vpn.

In that case you would only get one travel router as your Client and you would purchase a VPN Service from a Commercial VPN Provider that offers Residential IP Addresses.

@@justinreviewsandrepairs5246 thanks alot

The description has a list of routers ordered by speed, but your two choices are a good value. If they are not very technical, be sure to set up the Good Cloud service so you can remotely manage some parts of the router. Unfortunately you will still need them to do the Port Forwarding step on their ISP router.

@@justinreviewsandrepairs5246 thanks a million. Is it a better idea to order a new router , set it up and install that in their place? they are open to this as well but i didnt want to disturb their setup out of courtesy.

It depends on what they have now, you might be giving them a nice upgrade with a Flint 2

@@justinreviewsandrepairs5246 thanks a million for your response. I am gonna go and check what all they have and if Flint 2 is better than what they have, will get that. Thanks again for your help.

@@justinreviewsandrepairs5246 Hello Justin, I was doing the Brume 2 setup today and read somewhere that sometimes ISP blocks 51820 port so its better to setup lower number range like 445 etc. Do you know anything about it or should I just do the setup with 51820 which is default port? Appreciate your help.

NordVPN changed the login to be the "Service Credentials" in your NordVPN dashboard instead of the usual login.