GL-INET Spitz Operation & User’s Manual

Text of the manual

Page 1 | 4

Table of Contents 1. Getting Started with GL.iNet Spitz ....................................................................................... 1 1.1. Power on ................................................................................................................................. 1 1.2. Connect ................................................................................................................................... 2 (1) Connect via LAN ............................................................................................................ 2 (2) Connect via Wi-Fi .......................................................................................................... 3 1.3. Access the Web Admin Panel ...................................................................................... 3 1) Language Setting ................................................................................................................... 3 2) Admin Password Setting ..................................................................................................... 4 3) Admin Panel .............................................................................................................................. 5 2. INTERNET ...................................................................................................................................... 6 2.1. Cable ........................................................................................................................................ 7 (1) DHCP................................................................................................................................... 8 (2) Static .................................................................................................................................... 8 (3) PPPoE ................................................................................................................................. 9 2.2. Repeater ................................................................................................................................. 9 2.3. 3G/4G Modem................................................................................................................... 10 AT Command .............................................................................................................................. 12 2.4. Tethering .............................................................................................................................. 13 EasyTether ................................................................................................................................... 14 3. WIRELESS ................................................................................................................................... 14 4. CLIENTS ....................................................................................................................................... 16 5. UPGRADE .................................................................................................................................... 16 5.1. Online Upgrade ................................................................................................................ 17 5.2. Upload Firmware.............................................................................................................. 17 (1) Official OpenWrt/LEDE firmware ......................................................................... 18 (2) Compile your own firmware ................................................................................... 18 (3) Third party firmware ................................................................................................... 18 5.3. Auto Upgrade .................................................................................................................... 18 6. FIREWALL ................................................................................................................................... 19 6.1. Port Forwards .................................................................................................................... 19 6.2. Open Ports on Router ................................................................................................... 20 6.3. DMZ ....................................................................................................................................... 20

Page 2 | 4

7. VPN ................................................................................................................................................. 21 7.1. OpenVPN ............................................................................................................................ 21 7.1.1. OpenVPN Client ..................................................................................................... 21 7.1.2. OpenVPN Server ................................................................................................... 26 7.2. WireGuard ........................................................................................................................... 29 WireGuard Client ....................................................................................................................... 29 WireGuard Providers ................................................................................................................ 32 WireGuard Server ..................................................................................................................... 33 Wireguard App Support ............................................................................................................... 36 Visit Client’s LAN Subnet ............................................................................................................ 36 7.3. VPN Policies ...................................................................................................................... 37 7.3.1. Settings ....................................................................................................................... 37 7.3.2. Add VPN policy ....................................................................................................... 38 7.3.3. Clear DNS cache ................................................................................................... 40 8. APPLICATIONS ......................................................................................................................... 40 8.1. Plug-ins ................................................................................................................................. 40 8.2. Internet Kill Switch ........................................................................................................... 41 Setup ............................................................................................................................................... 42 8.3. File Sharing ........................................................................................................................ 44 8.3.1. Router settings ........................................................................................................ 44 8.3.2. Access the storage device ................................................................................. 45 Windows ........................................................................................................................................ 45 Mac OS .......................................................................................................................................... 50 iOS ................................................................................................................................................... 53 Linux ................................................................................................................................................ 57 ChromeOS or ChromiumOS (Neverware CloudReady and others) ................... 57 Android ........................................................................................................................................... 58 8.2. DLNA Server ...................................................................................................................... 62 8.3.1. Install Plug-ins ............................................................................................................... 62 8.3.2. Use the DLNA server in GL.iNet Routers ......................................................... 63 8.3. DDNS .................................................................................................................................... 71 8.4. Cloud ..................................................................................................................................... 78 Introduction ................................................................................................................................... 78

Page 3 | 4

Setup ............................................................................................................................................... 79 Manage your devices ............................................................................................................... 87 Site to Site ..................................................................................................................................... 93 Batch Setting ............................................................................................................................. 102 Template Management ......................................................................................................... 105 Task List ....................................................................................................................................... 107 BLE MQTT Bridge ................................................................................................................... 108 GoodCloud and VPN ............................................................................................................. 108 Disable .......................................................................................................................................... 109 8.5. Tor ......................................................................................................................................... 112 8.7 BLE MQTT Bridge ................................................................................................................ 122 Introduction ................................................................................................................................. 123 Hardware Required ................................................................................................................. 123 BLE Tools .................................................................................................................................... 124 MQTT ............................................................................................................................................ 125 Application and Demo ........................................................................................................... 141 9. MORE SETTINGS .................................................................................................................. 142 9.1. Admin Password ............................................................................................................ 142 9.2. LAN IP ................................................................................................................................. 143 9.3. Time Zone ......................................................................................................................... 143 9.4. MAC Clone ....................................................................................................................... 144 9.5. Custom DNS Server ..................................................................................................... 145 9.6. Network Mode ................................................................................................................. 145 9.7. Revert Firmware ............................................................................................................. 146 9.8. Advanced ........................................................................................................................... 147 10. Troubleshooting ......................................................................................................................... 148 10.1 LED Indicators................................................................................................................. 148 LED Customization ...................................................................................................................... 149 10.2 Repair or Reset ............................................................................................................... 150 10.3 Debrick via Uboot ........................................................................................................... 151 10.4 Change WAN to LAN ................................................................................................... 154 10.5 Captive Portal .................................................................................................................. 156 10.6 GL.iNet app ....................................................................................................................... 158

Page 4 | 4

10.7 Access Web Panel ........................................................................................................ 160 Check connection/router's IP address ............................................................................ 160 Your IP address is incorrect ................................................................................................ 160 Your IP address is correct.................................................................................................... 160 10.8 Extensible Authentication Protocol (EAP) ........................................................... 161 Introduction ................................................................................................................................. 161 Connect via web panel .......................................................................................................... 162 Connect via Luci ....................................................................................................................... 165 10.9 GoodCloud issues ......................................................................................................... 167 How to fix if my device show "Deactivated" ................................................................. 167

Page 1 | 168

1. Getting Started with GL.iNet Spitz Model: GL-X750 1.1. Power on Plug the power cable into the power port of the router. Make sure you are using a standard 12V/1.5A power adapter. Otherwise it may cause malfunction.

Page 2 | 168

Note: Hot plug for SIM card and TF card is not supported. If you want to use, please insert before powering on the router. 1.2. Connect You can connect to the router via Ethernet cable or Wi-Fi. Note: This step only connects your devices to the local area network (LAN) of the router. You cannot access the Internet currently. In order to connect to the Internet, please finish the setup procedures below and then follow Internet to set up an Internet connection. (1) Connect via LAN Connect your device to the LAN port of the router via Ethernet cable.

Page 3 | 168

(2) Connect via Wi-Fi Search for the SSID of the router in your device and input the default password: goodlife. Note: The SSID was printed on the bottom label of the router with the following formats: • GL-X750-XXX-5G • GL-X750-XXX 1.3. Access the Web Admin Panel Open a web browser (we recommend Chrome, firefox) and visit http://192.168.8.1. You will be directed to the initial setup of the web Admin Panel. 1) Language Setting You need to choose the display language of the Admin Panel. Currently, our routers support English, 简体中文, 繁體中文, Deutsch, Français, Español and 日本語.

Page 4 | 168

Note: If your browser always redirects to Luci (http://192.168.8.1/cgi-bin/luci), you can visit: http://192.168.8.1/index.html instead of http://192.168.8.1. 2) Admin Password Setting There is no default password for the Admin Panel. You have to set your own password, which must be at least 5 characters long. Then, click Submit to proceed.

Page 5 | 168

Note: This password is for this web Admin Panel and the embedded Linux system. It will not change your Wi-Fi password. 3) Admin Panel After the initial setup, you will enter the web Admin Panel of the router. It allows you to check the status and manage the settings of the router.

Page 6 | 168

2. INTERNET There are total 4 types of connection method that you can use to access the Internet: Cable, Repeater, 3G/4G Modem and Tethering. Click INTERNET to create an Internet connection.

Page 7 | 168

2.1. Cable Connect the router to the modem or main router via Ethernet cable to access the Internet. Before plugging the Ethernet cable into the WAN port of the router, you can click Use as LAN to set the WAN port as a LAN port. That is useful when you are using the router as a repeater. As a result, you can have one more LAN port.

Page 8 | 168

Plug the Ethernet cable into the WAN port of the router. The information of your connection will be shown on the Cable section. DHCP is the default protocol. You can click Modify to change the protocol. (1) DHCP DHCP is the default and most common protocol. It doesn't require any manual configuration. (2) Static Static is required if your Internet Service Provider (ISP) has provided a fixed IP address for you or you want to configure the network information such as IP address, Gateway, Netmask manually. Change it according to your needs and then click Apply.

Page 9 | 168

(3) PPPoE PPPoE is required by many Internet Service Providers (ISP). Generally, your ISP will give you a modem and provide you a username & password that you needed when you are creating the Internet connection. Under PPPoE protocol, enter your username and password, then click Apply. 2.2. Repeater Using Repeater means connecting the router to another existing wireless network, e.g. when you are using free Wi-Fi in a hotel or cafe.

Page 10 | 168

It works in WISP (Wireless Internet Service Provider) mode by default, which means that the router will create its own subnet and act as a firewall to protect you from the public network. In Repeater section, click Scan to search for the available wireless networks nearby. Choose a SSID from the drop-down list and enter its password. You can also enable the Remember button to save the current chose wireless network. Finally, click Join. 2.3. 3G/4G Modem Spitz has a built-in 3G/4G modem which you can insert your SIM card directly. Please insert the SIM card before powering on the router. Then, you should find the name of your carrier, click Auto Setup to create the connection.

Page 11 | 168

You can also click Manual Setup to set up manually. In General, you can set up by the three basic parameters below. Click Apply to connect. • Device: Please choose /dev/cdc-wdm0 (qmi) or /dev/ttyUSB3. • Service Type: indicate the service of your SIM card. • APN: Confirm with your SIM card carrier. Advanced Settings: • Dial Number: Generally, it is a default value and you don't need to set it manually. However, if you have this info, please input it. • Pincode, Username and Password: Generally, these are not necessary for an unlocked SIM card. However, if you have a locked SIM card, please consult your service provider.

Page 12 | 168

It is connected when the IP address of your SIM card shows up. AT Command The built-in modem supports AT command for the management and configuration of the modem. In 3G/4G Modem section, Click AT Command.

Page 13 | 168

• Shortcut: There are several pre-configured AT commands that you can use directly. If you want to run your own AT command, choose Manual command. • AT Command: The place where you can input AT command. For the list of AT command, please refer to the AT command manual of the built-in modem. • Port: The default port for AT command is /dev/ttyUSB2. 2.4. Tethering Using USB cable to share network from your smartphone to the router is called Tethering.

Page 14 | 168

Connection your smartphone to the USB port of the router and click Trust to continue when the message pops up on your smartphone. After plugging in your device, the Tethering section will update and your device will be shown on the device list. The device name will begin with eth or usb such as eth2, usb0. Choose your device and click Connect. EasyTether Some carriers prohibit the sharing of the data so that you may not be able to use tethering. However, you can try easytethering. Note: Easytether is not a free service and we have no affiliation with them. 3. WIRELESS In WIRELESS, you can check the current status and change the settings of the wireless network created by the router. The wireless network can be turned on or off by switching the ON/OFF button. Wi-Fi Name (SSID): The name of the Wi-Fi. It is not suggested to use unicode characters such as Chinese. Wi-Fi Security: The encryption method of the Wi-Fi. Wi-Fi Key: The password of the Wi-Fi, which must be at least 6 characters long. We suggest you to change it when you receive the router. Hide SSID: Show or hide the SSID. Channel: The router will not choose the best channel itself. You need to choose a channel manually. If your router is used as a Wi-Fi repeater, the channel will be fixed according to the connected wireless network. Speed: The wireless speed of the router.

Page 15 | 168

TX Power (dBm): It specifies the signal strength. The default value is 20 (Strongest). Click Modify to change the settings of the wireless network.

Page 16 | 168

4. CLIENTS You can manage all connected clients in CLIENTS. You can see their name, IP, MAC address and connection type. Click the button on the right to block any unwanted client. 5. UPGRADE Click UPGRADE to check any available update and upgrade the firmware.

Page 17 | 168

5.1. Online Upgrade You can find the current firmware version here. If your router is connected to the Internet, it will check for the newer firmware version available for download. Note: It is suggested to uncheck Keep setting. If you keep the settings and encounter problems after the upgrade, please reset the router. 5.2. Upload Firmware Click Local Upgrade to upload a firmware file to the router. Simply drag and drop your firmware file to the area indicated.

Page 18 | 168

(1) Official OpenWrt/LEDE firmware You can download the official firmware from our website. • Spitz: http://download.gl-inet.com/firmware/x750/ Find the available firmwares from the folder according to your device model, and they are located in different sub-folders: release: Official GL.iNet OpenWrt/LEDE firmware. clean: Clean versions of OpenWrt/LEDE firmware with Luci admin page only. testing: Beta version of GL.iNet OpenWrt/LEDE firmware. (2) Compile your own firmware You can compile your own firmware and flash to the router. Please refer to github.com/domino-team/openwrt-cc. (3) Third party firmware You may also try other firmwares such as DDWRT. Note: If you uploaded an incompatible firmware thus bricked the router, please use Uboot to re-install the correct firmware. 5.3. Auto Upgrade You can enable auto upgrade. The router will search for available update and upgrade automatically according to the time that you set.

Page 19 | 168

6. FIREWALL In FIREWALL, you can set up firewall rules like port forwarding, open port and DMZ. 6.1. Port Forwards Port Forwarding allows remote computers to connect to a specific computer or service behind the firewall in the local LAN (such as web servers, FTP servers, etc). To set up port forwarding, click Port Forwardsand input the required parameters or click Add a New One. Name: The name of the rule which can be specified by the user. Internal IP: The IP address assigned by the router to the device which needs to be accessed remotely. External Ports: The numbers of external ports. You can enter a specific port number or a range of service ports (E.g 100-300).

Page 20 | 168

Internal Ports: The internal port number of the device. You can enter a specific port number. Leave it blank if it is same as the external port. Protocol: The protocol used, you can choose TCP, UDP, or both TCP and UDP. Status: Activate of Deactivate the rule. 6.2. Open Ports on Router The router's services, such as web, FTP and so on, require their respective ports to be opened on the router in order to be publicly reachable. To open a port, click Open Ports on Router and input the required parameters or click Add a New One. Name: The name of the rule which can be specified by the user. Port: The port number that you want to open. Protocol: The protocol used, you can choose TCP, UDP, or both TCP and UDP. Status: Activate of Deactivate the rule. 6.3. DMZ DMZ allows you to expose one computer to the Internet, so that all the inbounds packets will be redirected to the computer you set. Click DMZ and enable Open DMZ. Input the internal IP address (E.g. 192.168.8.100) of your device which is going to receive all the inbound packets.

Page 21 | 168

7. VPN GL.iNet routers have pre-installed VPN server and client in OpenVPN and WireGuard. Shadowsocks is not a default function and you need to install packages in Plug- ins. 7.1. OpenVPN GL.iNet routers have pre-installed OpenVPN server and client. 7.1.1. OpenVPN Client OpenVPN client requires OpenVPN configuration file (.ovpn) to create the OpenVPN connection. If you have your own VPN service provider but you don't know how to get the configuration file, please refer to Get your configuration file. Click + Add a New VPN Configuration to upload the configuration file.

Page 22 | 168

(1) Upload your OpenVPN configuration file Simply drag and drop your file to the pop up windows. It can be a single .ovpn file or a zip/tar.gz file which contains multiple .ovpn files. Be careful that some .ovpn files use separated ca, cert, crl files. These files must be zipped together with the .ovpn file before upload.

Page 23 | 168

(2) Enter Description, Username and Password Enter a description for your OpenVPN configuration file and then click Submit to finish the upload process. In some cases, it will ask you to enter your username and password.

Page 24 | 168

(3) Connect to the OpenVPN server You can now click Connect to start the OpenVPN connection. Once connected, you should find your IP address, data received/sent.

Page 25 | 168

(4) Manage configuration files Click Management to check the list of configuration files. You can modify the Description, User name or Password of each configuration file. You can also add, delete a configuration file or even purge all your uploaded configuration files. If your configuration file is a zip/tar.gz file which includes multiple ovpn files, you can choose an individual .ovpn file that you would like to connect in Server.

Page 26 | 168

Get your configuration file We have tested different VPN service providers. Therefore, if you don't know how to get the configuration file, you can follow the instruction below. However, you have to contact your service provider for the configuration file if they are not listed below. If you have any problem in the setup of OpenVPN, please contact support@gl- inet.com 7.1.2. OpenVPN Server You can set up an OpenVPN server on GL.iNet router. Click + Generate a configuration file.

Page 27 | 168

(1) Server configuration There are preset OpenVPN server configurations. You can also click Modify to change them manually. Click Apply when you finish. (2) Export OpenVPN configuration file Click Export Config to download the OpenVPN configuration file which you need to upload when you are configuring your OpenVPN client.

Page 28 | 168

(3) Start the OpenVPN server Click Start to start your OpenVPN server. Otherwise, you will not be able to connect to the OpenVPN server by using its configuration file.

Page 29 | 168

7.2. WireGuard WireGuard is an extremely simple yet fast and modern VPN that utilizes state-of- the-art cryptography. It aims to be faster, simpler, leaner, and more useful than IPSec, while avoiding the massive headache. It intends to be considerably more performant than OpenVPN. GL.iNet routers have pre-installed WireGuard server and client. WireGuard Client To set up a WireGuard client, please click + Add New Profiles. (1) Specify the name of your server Specify the name and then click Next.

Page 30 | 168

(2) Input the configurations There are different methods to input the configurations. You can copy the JSON or Plain Text configurations from your server to Configuration or input the settings manually.

Page 31 | 168

After copy the JSON or Plain Text from your server, you can paste it in the Configuration and then click Add to finish the WireGuard Client setup.

Page 32 | 168

WireGuard Providers If you are using Azirevpn or Mullvad, you can click Others and use your AzireVPN or Mullvad account to set up WireGuard client directly. AzireVPN: Select AzireVPN as the provider, enter your User Name and Password and then click "Add" finish the WireGuard Client setup. ![Configuraion](https://static.gl- inet.com/docs/en/3/app/wireguard/Wire2.PNG) Mullvad: Select Mullvad as the provider, enter your Account Number and then click "Add" to finish the WireGuard Client setup. ![Configuraion](https://static.gl- inet.com/docs/en/3/app/wireguard/Wire3.PNG) Waiting for the adding. (3) Connect to the WireGuard server Click Connect. You will see the upload and download traffic when it is connected successfully.

Page 33 | 168

WireGuard Server You can set up a WireGuard server on GL.iNet router with firmware 3.0. Click + Create a New User. (1) Start a WireGuard server You can simply use the default parameters of Local IP and Local Port, or you can set your own value. Then click Start to start your own WireGuard server.

Page 34 | 168

(2) Add a new client You have to add a new user and apply the configurations when you are connecting to this WireGuard server. Click Management tab and then Create a New User. Specify the Name of the new client and then click Add.

Page 35 | 168

(3) Get the configuration details for your client You can now check the list of the clients you added. You can Delete any unwanted client. Please click Configurations to find the configuration details which you need to use when you are setting up WireGuard client. We provide QRcode, Plain Text and JSON configurations currently. If you are using another GL.iNet router as a client, please copy the JSON configuration and paste it directly when you are setting up WireGuard client.

Page 36 | 168

Wireguard App Support You can also use WireGuard App on other devices with various OS • Please refer to WireGuard Official Website : https://www.wireguard.com/install/ Visit Client’s LAN Subnet Visit Client’s LAN Subnet from WireGuard Server LAN Subnet 1) Change WireGuard clients LAN IP to avoid IP confliction with Server 2) Modify Wireguard_Server Configuration

Page 37 | 168

WinSCP or SSH into your the WireGuard Server (router) find and modify the file /etc/config/wireguard_server Add a line to the end of the config file of clients you want to visit. list subnet '192.168.xxx.0/24' Save and Exit 7.3. VPN Policies Starting from firmware version 3.022, users can define VPN routing policies. For example, it is possible to use VPN for a specific website/IP while maintaining a normal Internet traffic without VPN for others. 7.3.1. Settings Enable VPN Policy: Turn on/off VPN policies. Use VPN for guest network: Turn on/off use VPN for guest network.

Page 38 | 168

Use VPN for all process on the router: Generally, the traffic of all processes running on the router such as GoodCloud will be routed through VPN if there is a connected VPN client (e.g. WireGuard, OpenVPN, Shadowsocks). In this case, these processes will lose Internet if VPN is disconnected. In order to ensure a proper operation of these processes, you can disable this option. As a result, they will not use VPN. Please Choose Policy: The item can be either Domain/IP (e.g. gl-inet.com / 192.168.1.1 / 192.168.1.0/24) or Mac address (24:F0:94:5C:8E:F9). 7.3.2. Add VPN policy You can only configure either Only allow the following use VPN or Do not use VPN for the following. Click the drop box to switch among Only allow the following use VPN and Do not use VPN for the following. To add a policy, enter the domain/IP or Mac address into the box and then click Add. Finally, click Apply to activate the policy. For example, if we want to route only the traffic of netflix.com through VPN, we need to choose Policy Domain/IP, choose Rule Only allow the following use VPN, input netflix.com and click Apply.

Page 39 | 168

However, if we want to route all traffic through VPN except gl-inet.com, we need to add gl-inet.com under Do not use VPN for.

Page 40 | 168

7.3.3. Clear DNS cache If you are using domain-based policy, it may not work unless you clear your DNS cache. Please follow the instructions below to clear your DNS cache. Windows: Press Win + R and run cmd. Execute command ipconfig /flushdns. MacOS: Open Terminal and execute command sudo killall -HUP mDNSResponder. Ubuntu: Open Terminal and execute command sudo service network-manager restart. You may also need to clear DNS cache in your browser. Chrome: Visit chrome://net-internals/#dns. Click Clear host cache. Firefox: Open Firefox and press Ctrl + Shift + Delete. Select Time range to Everything and check only Cache. Finally, click Clear Now. 8. APPLICATIONS 8.1. Plug-ins Plug-ins allows you to manage OpenWrt packages. You can install or remove any package. Remember to click Update whenever you access this packages repository.

Page 41 | 168

8.2. Internet Kill Switch Internet Kill Switch feature is built-in from firmware version 3.100, please upgrade. Note: With this option enabled, you need to set up the router as a VPN client for any of the router's clients to be able to connect to the internet. After this setting is on, the router needs to run the VPN client all the time, if the VPN client is not running, the clients are Not Allowed to access the Internet.

Page 42 | 168

Setup 1) Choose "Internet Kill Switch". Choose "Internet Kill Switch" from "VPN". 2) Enable "Internet Kill Switch". Switch on the "Enable" button in the middle of the page.

Page 43 | 168

3) Apply "Internet Kill Switch". Click "Apply" in the upper right corner. 4) Wait for the "Success" notice The “SUCCESS!” Message will pop-up if the Internet Kill Switch turn on correctly.

Page 44 | 168

8.3. File Sharing You can use GL.iNet routers with external storage device such as USB stick, MicroSD card, etc, thus the contents can be shared among all your connected clients. You can easily read or modify its contents. 8.3.1. Router settings The contents of the external storage device are shared to LAN but not WAN and they are unwritable by default. Please click on your router model below to check how to change the file sharing settings of the router. Supported external storage devices

Page 45 | 168

Router Model USB Stick USB Hard Drive MicroSD Card GL-X750(Spitz) √ √ √ Note: The power consumption of USB hard drive is quite high. You should use it with an external power supply. Otherwise, it may cause malfunction. 8.3.2. Access the storage device You can access the contents of the external storage device from your computer or smart phone. Please check the following guidance for the using of file sharing among different operating systems. General Notes You may be able to access the share via \\192.168.8.1\ or smb://192.168.8.1/ or with GL-modelXXX instead of 192.168.8.1 (eg \\GL-AR750S\) in your system's file explorer. Since sharing is enabled to the LAN by default (this includes both wired AND wireless clients) and maps a "bad user" to Guest, then even if they don't supply a username and password or an invalid one, ANYONE connected to your router can access the files in the share in Read-Only mode. If you enable Writable mode this applies to both Guests AND the default root user. If you enable write access, anybody can create or delete files and folders, if you disable write access, not even the root user can delete them via SMB (they can through the CLI though). We can hope that in a future revision there is a simple user management and that a named user (or root) can read and/or write while Guests are limited by the Writable or a Public Write flag on a share (and having multiple shares would be great as well). Windows Method 1: Samba 2.0 (SMB2.0) Support We suggest Samba 2.0 support for Windows 10 users. Due to the security vulunerabilitiy of the Samba1.0 protocol, Samba1.0 is not enabled by default in Window 10. You may modify the router Samba configuration.

Page 46 | 168

1). SSH into your router, you can gain control of both the router and the network that the rotuer is controlling. You can refer to the following link: https://docs.gl- inet.com/en/3/app/ssh/ 2). Modify the Samba configuration file, type the following command: sed -i 's/security = share/security = user/' /etc/samba/smb.conf.template 3). Restart the Samba service, type the following command: /etc/init.d/samba restart

Page 47 | 168

4). Open 'This PC' and type \\your router IP Address, such as \\192.168.8.1. 5). You can view files in your USB flash drive through GL.iNet router now. Method 2: Samba 1.0 (SMB1.0) Support: 1) Your network must be Home/Private. Otherwise you may not be able to see your router in Network.

Page 48 | 168

3.0 firmware supports SMB2, and if you need SMB3, use WinSCP to router, edit /etc/samba/smb.conf.template. Change the "max protocol = SMB2" to "min protocol = SMB1" "max protocol = SMB3", then save and exit WinSCP.

Page 49 | 168

If you are using Windows 10, you also need to enable SMB 1.0. • Windows 7 Go to Control panel -> Network and Internet -> Network and Sharing Center. Find if your active network is Home network. If not, click it and change it to Home network. • Windows 10 Change your network to private by this tutorial. Go to Control Panel -> Programs and Features -> Turn Windows features on or off -> Find SMB 1.0/CIFS file sharing support, check all SMB1 related items, click apply and restart your computer.

Page 50 | 168

2) Open a Windows explorer, you can find Network in the folder directory. Double click your router to access its contents. Mac OS Method 1 1) Open Finder, Menu -> Go -> Connect to Server...

Page 51 | 168

2) Input smb://192.168.8.1, you need to change this if your router IP address is not 192.168.8.1

Page 52 | 168

3) Click Connect. 4) Input username and password, they are the same when you login Web Admin Panel. 5) Then Finder will display files of USB disk.

Page 53 | 168

Method 2 1) Go to System Preferences -> Sharing -> File sharing. Click Options and then enable SMB. 2) Open Finder. You should be able to find your router under Shared. iOS You have to use file manage app to access the contents of your external storage device. You may use FE File Explorer: 1) Click + to create a Windows connection.

Page 55 | 168

2) Enter the IP address of your router (192.168.8.1). The User Name is root and the Password is the one that you use to login the web Admin Panel. Finally, click Save.

Page 57 | 168

Linux If you are using Linux you are probably comfortable with connecting to servers, and how to do this can vary greatly from distribution to distribution and largely depends on your window manager/display environment. Most systems come with Gnome and it is the default on the very popular Ubuntu distribution, so we'll give an example using the Files tool (also called Nautilus). If you open the app you should have a "Connect to server" option, there you can enter either the \\servername\share or smb://servername/share format. ChromeOS or ChromiumOS (Neverware CloudReady and others) There is a built in Samba/SMB client in the Files app, but it doesn't really seem to work very well. Instead the most useful ChromeOS app to allow mounting Samba shares even though it doesn't have high ratings is "File System for Windows". It is open source and works far better than the built in version. https://chrome.google.com/webstore/detail/file-system-for- windows/mfhnnfciefdpolbelmfkpmhhmlkehbdf/related?hl=en

Page 58 | 168

Once you have installed the app you can launch it from that page, and if you want to access it again in the future, in the Files app if you go to the 3 dot menu at the top right and "Add new service" you then select "File System for Windows" from the list and it will give you the dialog to fill out with the server name and some other details, but only the server name/IP and share name are required. You can click the gear icon to enable saving the password for a share indefinitely, and you can click the "Keep" button to save the share to easily mount again in the future. Android Most Android devices have file manager which you can use to access the contents of your external storage device. Or you can use ES file explorer: 1) Open the app and then click Network.

Page 62 | 168

8.2. DLNA Server Some of GL.iNet routers support DLNA Server, but this is not a default function. You need to install a little plug-ins to make it workable. Supporting List: GL-AR750S-Ext, GL-AR750, GL-MT300N-V2, GL-AR300M series, GL-AR150 series, GL-MiFi and GL-X750 8.3.1. Install Plug-ins Go to APPLICATIONS, then Plug-ins. Install two apps: 1. luci-app-minidlna 2. miniDLNA

Page 63 | 168

8.3.2. Use the DLNA server in GL.iNet Routers After Installation of two applications, you can now use your GL.iNet router as as DLNA server. 1. Make suer you already has a TF card inserted into the card slot before you power up your router. Hot-plug is not supported on GL.iNET routers. 2. Or you can insert an USB drive into the USB port. 3. Connnet your PC, Laptop, tablet, smart TV or Smartphone to GL.iNET router's WiFi(SSID). Here is the sample: GL-AR750-xxx 4. Then you can find the OpenWrt DLNA Server in your devices. Take Windows as example: In Windows Media Player:

Page 65 | 168

You can easily find the OpenWrt DLNA Sever in UPNP: UPNP Extreme and VLC Installation | UPNP Setup - | -

Page 68 | 168

VLC Setup: Step 1: Click the Traffic Cones Logo on the left top, select Local Network Step 2: You can find the OpenWrt DLNA Server easily in Local Network. Step 1 | Step 2 - | -

Page 71 | 168

Also other devices can easily find the OpenWrt DLNA Server easily. Enjoy your media DLNA Server by GL.iNET routers. 8.3. DDNS Dynamic Domain Name Service (DDNS) is a service used to map a domain name to the dynamic IP address of a network device. Setup DDNS requires firmware v3.010 or higher. Download firmware file Open this website to download the latest firmware https://docs.gl- inet.com/en/3/release_notes/ Local upgrade Open a web browser (we recommend Chrome) to access router Web Admin Panel(default url is http://192.168.8.1). At the left side, UPGRADE -> Local Upgrade, select the firmware file you have downloaded, you can turn off "Keep Settings" for a clean install and more stable, click "Install" button. It takes several minutes to install. 1) Install gl-cloud-ui plug (If your firmware version is equal or greater than v3.021, please jump to Step 2) Access to router Admin Panel (default is http://192.168.8.1), at the left sidebar, APPLICATIONS -> Plug-ins, click "Update" button to update Plug-ins, then input "gl-cloud-ui" and click "Install" button. After installation, press "F5" to refresh Admin Panel, a new item "Remote Access" will appear inside APPLICATIONS.

Page 72 | 168

2) Enable DDNS At the left sidebar, APPLICATIONS -> Remote Access, toggle "Enabled DDNS", agree Terms of Services & Privacy Policy, click "Apply" button. Generally, it takes several minutes to take effect. Move mouse to hover the icon besides "Enabled DDNS", it will display the DDNS url of your device. The DDNS domain printed on the back label of router has changed. If your DDNS url is xxxxxxx.gl-inet.com on the back of router, new DDNS url will be xxxxxxx.glddns.com. 3) Check if DDNS is enabled Use nslookup command to check if your DDNS is enabled. You need to change xx5007c.glddns.com to your DDNS url when use nslookup command.

Page 73 | 168

nslookup xx5007c.glddns.com 8.8.8.8 The output above means the DDNS url has maped to a IP address. 4) HTTP Remote Access This function requires a public network IP. If your router is behind NAT, you may need to set up port forward in higher level router. It use port 80. Follow the steps above, to enable HTTP Remote Access. HTTP is not encrypted, use at your own risk.

Page 74 | 168

After you enable HTTP Remote Access, you can access Admin Panel anywhere by your DDNS url of http, e.g. http://xxxxxxx.glddns.com. If you use port forward, you should be access like http://xxxxxxx.glddns.com:YourExternalPort. 5) HTTPS Remote Access This function requires a public network IP. If your router is behind NAT, you may need to set up port forward in higher level router. It use port 443. This function use self-signed certificates, so the browers will indicate that "Your connection is not private". I will show you how to use it anyway on Chrome iOS. Other browers are the similar process.

Page 77 | 168

As show above, click "Processed to xxxxxxx.glddns.com (unsafe)". After you enable HTTPS Remote Access, you can access Admin Panel anywhere by your DDNS url of https, e.g. https://xxxxxxx.glddns.com. If you use port forward, you should be access like https://xxxxxxx.glddns.com:YourExternalPort. 6) SSH Remote Access This function requires a public network IP. If your router is behind NAT, you may need to set up port forward in higher level router. It use port 22. Follow the steps above, to enable SSH Remote Access, then you can ssh to your router anywhere. 7) Turn Off If you don't want to use DDNS, just disable it.

Page 78 | 168

After disable DDNS, the interface is like above. 8.4. Cloud Introduction GL.iNet GoodCloud cloud management service provide an easy and simple way to remotely access and manage routers. Check live router status • Live online offline status check • Live RAM and Load Average check

Page 79 | 168

• LTE Signal • Email alarm about online offline status update Set up routers remotely • Set up routers (e.g. SSID and Key) remotely Monitoring clients on routers remotely • Check who is on your network • Realtime traffic monitoring and block clients • Email alarm about new client and block Operate routers in batch • Set up config templates and configure routers in batch • Reboot or upgrade routers in batch Manage routers in groups • Divide devices in different groups • Manage devices in one page Site to Site • Virtual Office: extend your office network to other offices • Business Travel: remote access office's OA, CRM, MySQL systems • Smart Home: remote access IP camera, NAS and other devices at home Setup GoodCloud only support firmware v3.021 and above right now, we recommend to upgrade to the latest testing version(Pre-release) for better cloud experience. This document is based on the latest testing firmware. Download firmware file Choose the Pre-release column of this url https://docs.gl- inet.com/en/3/release_notes/ For GL-USB150, it can use GoodCloud too, but it only can be binded to GoodCloud by "Auto discover". ( about Add device )

Page 80 | 168

Local upgrade Open a web browser (we recommend Chrome) and to access router Web Admin Panel (default url is http://192.168.8.1). At the left side, UPGRADE -> Local Upgrade, select the firmware file you download, you can turn off "Keep Settings" for more stable, click "Install" button. It takes several minutes to install. If you want to learn more about upgrade, please scroll top -> Setup -> Choose the model -> Upgrade Enable Cloud Manage on router Web Admin Panel Open a web browser (we recommend Chrome) and to access router Web Admin Panel (default url is http://192.168.8.1).

Page 81 | 168

Follow the steps above, to enable cloud management feature, choose the Data Server which is nearest your devices located. There are three Data Server, 'Global', 'America' and 'Europe'. If your devices are neither in America nor in Europe, just select 'Global'. Global Data Server is at Japan. Create GoodCloud account Visit https://www.goodcloud.xyz to access GoodCloud web site by Chrome or your favorite browser. Sign up an account, and sign in. If you don't find the verify email, look in spam or check email later. If you have any difficulty with sign up, please send email to [email protected] for help. Select region At the first time when you sign in, it will pop up a dialog to let you select the region, select the region that your device selected Data Server on the Web Admin Panel (Step 1.2). You can change the region on the top right corner at anytime.

Page 82 | 168

Add a new group On the left side -> Groups List -> Add group. Follow the steps below to add a new group. Set the group name, company, description and location. Each device must belong to a group.

Page 83 | 168

Add device On the left side -> Devices List -> Add Device. There are three methods to bind device to GoodCloud, "Auto discover", "Manually add" and "Bulk import". Auto discover Follow the steps below to add your device. If the router and PC(which opened goodcloud.xyz page) are at the same public IP,it will be automatically discovered, and can be found when click "Device" list. DDNS or Device ID can be found on the back of your router. PS: Input "DDNS" / "Device ID" here just to verify that the router is really original/valid. DDNS feature and the Cloud feature are separate things. For most models, it is "DDNS" on the back, but for some new models, it is "Device ID" on the back. If you haven't added a group before, it will automatically create a default group. Click "Refresh" to force auto discover devices again.

Page 84 | 168

Manually add If it can't discover automatically, try "Manually add". All information that need to input can be found on the back of the router. PS: Input "MAC", "SN" and "DDNS" / "Device ID" here just to verify that the router is really original and valid. DDNS feature and the Cloud feature are separate things.

Page 85 | 168

For some new models, DDNS has been changed to Device ID on the back of router. Bulk import "Bulk import" is for user who have a great number of devices to add. By "Bulk import" you can import many devices by a Microsoft excel file.

Page 86 | 168

Binded info on router Web Admin Panel After you seccessfully add router to GoodCloud, go back to router Web Admin Panel, APPLICATION -> Remote Access -> Cloud Management, press 'F5' to refresh this page, It will display the binded GoodCloud username, hover the username it will show the corresponding GoodCloud email account. Click 'View Logs' will show api call logs by GoodCloud.

Page 87 | 168

Unbind router If you want to unbind router, click Unbind button. If you have any difficulties, please send email to [email protected] for help. Manage your devices devices info and status Sign in Goodcloud, check at left side -> Device List

Page 88 | 168

there is icon at the first column of this table, means this device is online. means this device is offline. means this device is deactivated, it has never connected to GoodCloud before.

Page 89 | 168

Select the column you want to display. "Online time" is the latest time when device connected GoodCloud. "Offline time" is the latest time when device disconnected GoodCloud. "Update time" is the latest time when device connected or disconnected GoodCloud. IP, if your router run VPN client, this IP will be your VPN IP by default. Learn More LTE Signal Only available for 4G devices, e.g. GL-MiFi, GL-X750 Toggle the column on Device List page.

Page 90 | 168

It will show Signal strength, Type, and relavant parameters. Device detail info At left side -> Device List, click the name of a online device, it will open a page to manage this device of WiFi, Clients and view router info, memory usage, up time, load average and log.

Page 92 | 168

Router status Client list Timeline Timeline tab display the activities of router, and messages uploaded by the router's associated IoT device. Set email alarm You can set email alarm when a device is online, offline, and new client connected. At left side -> Setting -> Alarm Setting, create alarm rules

Page 93 | 168

Then set the email you want to receive notification. To ensure you get email successful, please add [email protected] to your email address book. Site to Site Site to Site only support firmware v3.026 and above.

Page 94 | 168

Introduction Site to Site allows offices in multiple locations to establish secure connections with each other over internet. It extends the company's network, making computers resources from one location available to employees at other locations. Senerio 1: A company has dozens of branch offices that they wish to join in a single private network to share resources. Senerio 2: A company has a close relationship with a partner company, the Site to Site allows the companies to work together in a secure, shared network environment while preventing access to their separate internets. Senerio 3: A family has IP camera and when they are not at home, the Site to Site allows to remote access the IP camera. What conditions do I need to create Site to Site? One of the loations has a public static(or dynamic) ip, and two or more GL-iNet devices with latest testing firmware. Steps to build a Site to Site network. 1. Upgrade your GL.iNet devices to latest testing firmware and binded to Goodcloud.xyz. (how) 2. Follow the steps below to create a Site to Site network.

Page 95 | 168

Defaul port is 51830, if you want to use another port, find the Advanced option at the lower left corner. Due to device's performance, each Site to Site network can have up to 10 devices. After you had chosen the devices, click Continue. Then, it will test each device if it can be set as the Main Node of Site to Site.

Other Wireless Router Manuals