GL-INET Brume, GL-E750, GL-X750, MUDI, Spitz, Velica User Manual
Below you will find brief information for Router GL-X750. This user manual covers the setup and configuration of the GL.iNet Spitz (GL-X750) router, detailing how to connect to the Internet via various methods such as cable, repeater, 3G/4G modem, and tethering. It explains how to manage wireless settings, clients, and upgrade the firmware. The document also delves into firewall settings, VPN configuration (OpenVPN and WireGuard), and application features including file sharing, a DLNA server, DDNS, Cloud features, Tor, and a BLE MQTT Bridge. Troubleshooting and advanced settings are also covered.
Advertisement
Advertisement
Spitz
(GL-X750)
USER MANUAL
Table of Contents
Getting Started with GL.iNet Spitz
....................................................................................... 1
...................................................................................... 3
(1) Official OpenWrt/LEDE firmware
......................................................................... 18
................................................................................... 18
Page 1 | 4
................................................................................. 45
ChromeOS or ChromiumOS (Neverware CloudReady and others)
8.3.2. Use the DLNA server in GL.iNet Routers
......................................................... 63
Page 2 | 4
Page 3 | 4
Check connection/router's IP address
............................................................................ 160
................................................................................................ 160
Extensible Authentication Protocol (EAP)
........................................................... 161
How to fix if my device show "Deactivated"
................................................................. 167
Page 4 | 4
1. Getting Started with GL.iNet Spitz
Model:
GL-X750
1.1. Power on
Plug the power cable into the power port of the router. Make sure you are using a standard 12V/1.5A
power adapter. Otherwise it may cause malfunction.
Page 1 | 168
Note: Hot plug for SIM card and TF card is not supported. If you want to use, please insert before powering on the router.
1.2. Connect
You can connect to the router via Ethernet cable or Wi-Fi.
Note: This step only connects your devices to the local area network (LAN) of the router. You cannot access the Internet currently. In order to connect to the
Internet, please finish the setup procedures below and then follow Internet to set up an Internet connection.
(1) Connect via LAN
Connect your device to the LAN port of the router via Ethernet cable.
Page 2 | 168
(2) Connect via Wi-Fi
Search for the SSID of the router in your device and input the default password: goodlife .
Note: The SSID was printed on the bottom label of the router with the following formats:
• GL-X750-XXX-5G
•
GL-X750-XXX
1.3. Access the Web Admin Panel
Open a web browser (we recommend Chrome, firefox) and visit http://192.168.8.1
. You will be directed to the initial setup of the web Admin
Panel.
1) Language Setting
You need to choose the display language of the Admin Panel. Currently, our routers support English , 简体中文 , 繁體中文 , Deutsch , Français, Español and
日本語 .
Page 3 | 168
Note: If your browser always redirects to Luci (http://192.168.8.1/cgi-bin/luci), you can visit: http://192.168.8.1/index.html
instead of http://192.168.8.1
.
2) Admin Password Setting
There is no default password for the Admin Panel. You have to set your own password, which must be at least 5 characters long. Then, click Submit to proceed.
Page 4 | 168
Note: This password is for this web Admin Panel and the embedded Linux system. It will not change your Wi-Fi password.
3) Admin Panel
After the initial setup, you will enter the web Admin Panel of the router. It allows you to check the status and manage the settings of the router.
Page 5 | 168
2. INTERNET
There are total 4 types of connection method that you can use to access the
Internet: Cable , Repeater , 3G/4G Modem and Tethering .
Click INTERNET to create an Internet connection.
Page 6 | 168
2.1. Cable
Connect the router to the modem or main router via Ethernet cable to access the
Internet.
Before plugging the Ethernet cable into the WAN port of the router, you can click
Use as LAN to set the WAN port as a LAN port. That is useful when you are using
the router as a repeater . As a result, you can have one more LAN port.
Page 7 | 168
Plug the Ethernet cable into the WAN port of the router. The information of your connection will be shown on the Cable section. DHCP is the default protocol. You can click Modify to change the protocol.
(1) DHCP
DHCP is the default and most common protocol. It doesn't require any manual configuration.
(2) Static
Static is required if your Internet Service Provider (ISP) has provided a fixed IP address for you or you want to configure the network information such as IP address, Gateway, Netmask manually. Change it according to your needs and then click Apply .
Page 8 | 168
(3) PPPoE
PPPoE is required by many Internet Service Providers (ISP). Generally, your ISP will give you a modem and provide you a username & password that you needed when you are creating the Internet connection.
Under PPPoE protocol, enter your username and password, then click Apply .
2.2. Repeater
Using Repeater means connecting the router to another existing wireless network, e.g. when you are using free Wi-Fi in a hotel or cafe.
Page 9 | 168
It works in WISP (Wireless Internet Service Provider) mode by default, which means that the router will create its own subnet and act as a firewall to protect you from the public network.
In Repeater section, click Scan to search for the available wireless networks nearby.
Choose a SSID from the drop-down list and enter its password. You can also enable the Remember button to save the current chose wireless network.
Finally, click Join .
2.3. 3G/4G Modem
Spitz has a built-in 3G/4G modem which you can insert your SIM card directly.
Please insert the SIM card before powering on the router. Then, you should find the name of your carrier, click Auto Setup to create the connection.
Page 10 | 168
You can also click Manual Setup to set up manually.
In General, you can set up by the three basic parameters below. Click Apply to connect.
•
Device : Please choose /dev/cdc-wdm0 (qmi) or /dev/ttyUSB3 .
• Service Type : indicate the service of your SIM card.
• APN : Confirm with your SIM card carrier.
Advanced Settings:
• Dial Number : Generally, it is a default value and you don't need to set it manually. However, if you have this info, please input it.
•
Pincode, Username and Password: Generally, these are not necessary for an unlocked SIM card. However, if you have a locked SIM card, please consult your service provider.
Page 11 | 168
It is connected when the IP address of your SIM card shows up.
AT Command
The built-in modem supports AT command for the management and configuration of the modem. In 3G/4G Modem section, Click AT Command .
Page 12 | 168
•
Shortcut: There are several pre-configured AT commands that you can use directly. If you want to run your own AT command, choose Manual command .
•
AT Command: The place where you can input AT command. For the list of
AT command, please refer to the AT command manual of the built-in modem.
•
Port: The default port for AT command is /dev/ttyUSB2 .
2.4. Tethering
Using USB cable to share network from your smartphone to the router is called
Tethering.
Page 13 | 168
Connection your smartphone to the USB port of the router and click Trust to continue when the message pops up on your smartphone.
After plugging in your device, the Tethering section will update and your device will be shown on the device list. The device name will begin with eth or usb such as eth2 , usb0 . Choose your device and click Connect .
EasyTether
Some carriers prohibit the sharing of the data so that you may not be able to use tethering. However, you can try easytethering .
Note: Easytether is not a free service and we have no affiliation with them.
3. WIRELESS
In WIRELESS , you can check the current status and change the settings of the wireless network created by the router. The wireless network can be turned on or off by switching the ON/OFF button.
Wi-Fi Name (SSID) : The name of the Wi-Fi. It is not suggested to use unicode characters such as Chinese .
Wi-Fi Security : The encryption method of the Wi-Fi.
Wi-Fi Key : The password of the Wi-Fi, which must be at least 6 characters long.
We suggest you to change it when you receive the router.
Hide SSID : Show or hide the SSID.
Channel : The router will not choose the best channel itself. You need to choose a channel manually. If your router is used as a Wi-Fi repeater, the channel will be fixed according to the connected wireless network.
Speed : The wireless speed of the router.
Page 14 | 168
TX Power (dBm) : It specifies the signal strength. The default value is 20
(Strongest).
Click Modify to change the settings of the wireless network.
Page 15 | 168
4. CLIENTS
You can manage all connected clients in CLIENTS .
You can see their name, IP, MAC address and connection type.
Click the button on the right to block any unwanted client.
5. UPGRADE
Click UPGRADE to check any available update and upgrade the firmware.
Page 16 | 168
5.1. Online Upgrade
You can find the current firmware version here. If your router is connected to the
Internet, it will check for the newer firmware version available for download.
Note: It is suggested to uncheck Keep setting. If you keep the settings and encounter problems after the upgrade, please reset the router.
5.2. Upload Firmware
Click Local Upgrade to upload a firmware file to the router. Simply drag and drop your firmware file to the area indicated.
Page 17 | 168
(1) Official OpenWrt/LEDE firmware
You can download the official firmware from our website .
•
Spitz: http://download.gl-inet.com/firmware/x750/
Find the available firmwares from the folder according to your device model, and they are located in different sub-folders: release : Official GL.iNet OpenWrt/LEDE firmware. clean : Clean versions of OpenWrt/LEDE firmware with Luci admin page only. testing : Beta version of GL.iNet OpenWrt/LEDE firmware.
(2) Compile your own firmware
You can compile your own firmware and flash to the router. Please refer to github.com/domino-team/openwrt-cc .
(3) Third party firmware
You may also try other firmwares such as DDWRT.
Note: If you uploaded an incompatible firmware thus bricked the router, please use Uboot to re-install the correct firmware.
5.3. Auto Upgrade
You can enable auto upgrade. The router will search for available update and upgrade automatically according to the time that you set.
Page 18 | 168
6. FIREWALL
In FIREWALL , you can set up firewall rules like port forwarding , open port and
DMZ .
6.1. Port Forwards
Port Forwarding allows remote computers to connect to a specific computer or service behind the firewall in the local LAN (such as web servers, FTP servers, etc).
To set up port forwarding, click Port Forwards and input the required parameters or click Add a New One .
Name: The name of the rule which can be specified by the user.
Internal IP: The IP address assigned by the router to the device which needs to be accessed remotely.
External Ports: The numbers of external ports. You can enter a specific port number or a range of service ports (E.g 100-300 ).
Page 19 | 168
Internal Ports: The internal port number of the device. You can enter a specific port number. Leave it blank if it is same as the external port.
Protocol: The protocol used, you can choose TCP, UDP, or both TCP and UDP.
Status: Activate of Deactivate the rule.
6.2. Open Ports on Router
The router's services, such as web, FTP and so on, require their respective ports to be opened on the router in order to be publicly reachable.
To open a port, click Open Ports on Router and input the required parameters or click Add a New One .
Name: The name of the rule which can be specified by the user.
Port: The port number that you want to open.
Protocol: The protocol used, you can choose TCP, UDP, or both TCP and UDP.
Status: Activate of Deactivate the rule.
6.3. DMZ
DMZ allows you to expose one computer to the Internet, so that all the inbounds packets will be redirected to the computer you set.
Click DMZ and enable Open DMZ . Input the internal IP address (E.g.
192.168.8.100) of your device which is going to receive all the inbound packets.
Page 20 | 168
7. VPN
GL.iNet routers have pre-installed VPN server and client in OpenVPN and
WireGuard.
Shadowsocks is not a default function and you need to install packages in Plugins.
7.1. OpenVPN
GL.iNet routers have pre-installed OpenVPN server and client.
7.1.1. OpenVPN Client
OpenVPN client requires OpenVPN configuration file (.ovpn) to create the
OpenVPN connection. If you have your own VPN service provider but you don't know how to get the configuration file, please refer to Get your configuration file .
Click + Add a New VPN Configuration to upload the configuration file.
Page 21 | 168
(1) Upload your OpenVPN configuration file
Simply drag and drop your file to the pop up windows. It can be a single .ovpn file or a zip/tar.gz file which contains multiple .ovpn files.
Be careful that some .ovpn files use separated ca, cert, crl files. These files must be zipped together with the .ovpn file before upload.
Page 22 | 168
(2) Enter Description, Username and Password
Enter a description for your OpenVPN configuration file and then click Submit to finish the upload process. In some cases, it will ask you to enter your username and password.
Page 23 | 168
(3) Connect to the OpenVPN server
You can now click Connect to start the OpenVPN connection.
Once connected, you should find your IP address, data received/sent.
Page 24 | 168
(4) Manage configuration files
Click Management to check the list of configuration files. You can modify the
Description , User name or Password of each configuration file. You can also add, delete a configuration file or even purge all your uploaded configuration files.
If your configuration file is a zip/tar.gz file which includes multiple ovpn files, you can choose an individual .ovpn file that you would like to connect in Server .
Page 25 | 168
Get your configuration file
We have tested different VPN service providers. Therefore, if you don't know how to get the configuration file, you can follow the instruction below. However, you have to contact your service provider for the configuration file if they are not listed below.
If you have any problem in the setup of OpenVPN, please contact [email protected]
7.1.2. OpenVPN Server
You can set up an OpenVPN server on GL.iNet router. Click + Generate a configuration file .
Page 26 | 168
(1) Server configuration
There are preset OpenVPN server configurations. You can also click Modify to change them manually. Click Apply when you finish.
(2) Export OpenVPN configuration file
Click Export Config to download the OpenVPN configuration file which you need to upload when you are configuring your OpenVPN client.
Page 27 | 168
(3) Start the OpenVPN server
Click Start to start your OpenVPN server. Otherwise, you will not be able to connect to the OpenVPN server by using its configuration file.
Page 28 | 168
7.2. WireGuard
WireGuard is an extremely simple yet fast and modern VPN that utilizes state-ofthe-art cryptography . It aims to be faster , simpler , leaner, and more useful than
IPSec, while avoiding the massive headache. It intends to be considerably more performant than OpenVPN.
GL.iNet routers have pre-installed WireGuard server and client.
WireGuard Client
To set up a WireGuard client, please click + Add New Profiles .
(1) Specify the name of your server
Specify the name and then click Next .
Page 29 | 168
(2) Input the configurations
There are different methods to input the configurations.
You can copy the JSON or Plain Text configurations from your server to Configuration or input the settings manually.
Page 30 | 168
After copy the JSON or Plain Text from your server, you can paste it in the Configuration and then click Add to finish the WireGuard Client setup.
Page 31 | 168
WireGuard Providers
If you are using Azirevpn or Mullvad , you can click Others and use your
AzireVPN or Mullvad account to set up WireGuard client directly.
AzireVPN: Select AzireVPN as the provider, enter your User Name and Password and then click
"Add" finish the WireGuard Client setup. 
Mullvad: Select Mullvad as the provider, enter your Account Number and then click "Add" to finish the WireGuard Client setup. 
Waiting for the adding.
(3) Connect to the WireGuard server
Click Connect . You will see the upload and download traffic when it is connected successfully.
Page 32 | 168
WireGuard Server
You can set up a WireGuard server on GL.iNet router with firmware 3.0. Click +
Create a New User .
(1) Start a WireGuard server
You can simply use the default parameters of Local IP and Local Port , or you can set your own value. Then click Start to start your own WireGuard server.
Page 33 | 168
(2) Add a new client
You have to add a new user and apply the configurations when you are connecting to this WireGuard server.
Click Management tab and then Create a New User .
Specify the Name of the new client and then click Add .
Page 34 | 168
(3) Get the configuration details for your client
You can now check the list of the clients you added. You can Delete any unwanted client. Please click Configurations to find the configuration details which you need to use when you are setting up WireGuard client. We provide QRcode,
Plain Text and JSON configurations currently.
If you are using another GL.iNet router as a client, please copy the JSON configuration and paste it directly when you are setting up WireGuard client.
Page 35 | 168
Wireguard App Support
You can also use WireGuard App on other devices with various OS
• Please refer to WireGuard Official Website
： https://www.wireguard.com/install/
Visit Client’s LAN Subnet
Visit Client’s LAN Subnet from WireGuard Server LAN Subnet
1) Change WireGuard clients LAN IP to avoid IP confliction with Server
2) Modify Wireguard_Server Configuration
Page 36 | 168
WinSCP or SSH into your the WireGuard Server (router) find and modify the file
/etc/config/wireguard_server
Add a line to the end of the config file of clients you want to visit. list subnet '192.168.xxx.0/24'
Save and Exit
7.3. VPN Policies
Starting from firmware version 3.022, users can define VPN routing policies. For example, it is possible to use VPN for a specific website/IP while maintaining a normal Internet traffic without VPN for others.
7.3.1. Settings
Enable VPN Policy : Turn on/off VPN policies.
Use VPN for guest network : Turn on/off use VPN for guest network.
Page 37 | 168
Use VPN for all process on the router : Generally, the traffic of all processes running on the router such as GoodCloud will be routed through VPN if there is a connected VPN client (e.g. WireGuard, OpenVPN, Shadowsocks). In this case, these processes will lose Internet if VPN is disconnected. In order to ensure a proper operation of these processes, you can disable this option. As a result, they will not use VPN.
Please Choose Policy : The item can be either Domain/IP (e.g. gl-inet.com /
192.168.1.1 / 192.168.1.0/24) or Mac address (24:F0:94:5C:8E:F9).
7.3.2. Add VPN policy
You can only configure either Only allow the following use VPN or Do not use VPN for the following . Click the drop box to switch among Only allow the following use VPN and Do not use VPN for the following . To add a policy, enter the domain/IP or Mac address into the box and then click Add .
Finally, click Apply to activate the policy.
For example, if we want to route only the traffic of netflix.com
through VPN, we need to choose Policy Domain/IP , choose Rule Only allow the following use VPN , input netflix.com
and click Apply .
Page 38 | 168
However, if we want to route all traffic through VPN except gl-inet.com
, we need to add gl-inet.com
under Do not use VPN for .
Page 39 | 168
7.3.3. Clear DNS cache
If you are using domain-based policy, it may not work unless you clear your DNS cache. Please follow the instructions below to clear your DNS cache.
Windows : Press Win + R and run cmd . Execute command ipconfig /flushdns .
MacOS : Open Terminal and execute command sudo killall -HUP mDNSResponder .
Ubuntu : Open Terminal and execute command sudo service network-manager restart .
You may also need to clear DNS cache in your browser.
Chrome : Visit chrome://net-internals/#dns . Click Clear host cache .
Firefox : Open Firefox and press Ctrl + Shift + Delete . Select Time range to
Everything and check only Cache . Finally, click Clear Now .
8. APPLICATIONS
8.1. Plug-ins
Plug-ins allows you to manage OpenWrt packages. You can install or remove any package.
Remember to click Update whenever you access this packages repository.
Page 40 | 168
8.2. Internet Kill Switch
Internet Kill Switch feature is built-in from firmware version 3.100, please upgrade.
Note: With this option enabled, you need to set up the router as a VPN client for any of the router's clients to be able to connect to the internet.
After this setting is on, the router needs to run the VPN client all the time, if the VPN client is not running, the clients are Not Allowed to access the
Internet.
Page 41 | 168
Setup
1) Choose "Internet Kill Switch".
Choose "Internet Kill Switch" from "VPN".
2) Enable "Internet Kill Switch".
Switch on the "Enable" button in the middle of the page.
Page 42 | 168
3) Apply "Internet Kill Switch".
Click "Apply" in the upper right corner.
4) Wait for the "Success" notice
The “SUCCESS!” Message will pop-up if the Internet Kill Switch turn on correctly.
Page 43 | 168
8.3. File Sharing
You can use GL.iNet routers with external storage device such as USB stick,
MicroSD card, etc, thus the contents can be shared among all your connected clients. You can easily read or modify its contents.
8.3.1. Router settings
The contents of the external storage device are shared to LAN but not WAN and they are unwritable by default. Please click on your router model below to check how to change the file sharing settings of the router.
Supported external storage devices
Page 44 | 168
Router Model
GL-X750(Spitz)
USB Stick USB Hard Drive MicroSD Card
√ √ √
Note: The power consumption of USB hard drive is quite high. You should use it with an external power supply. Otherwise, it may cause malfunction.
8.3.2. Access the storage device
You can access the contents of the external storage device from your computer or smart phone. Please check the following guidance for the using of file sharing among different operating systems.
General Notes
You may be able to access the share via \\192.168.8.1\ or smb://192.168.8.1/ or with GL-modelXXX instead of 192.168.8.1
(eg \\GL-AR750S\ ) in your system's file explorer. Since sharing is enabled to the LAN by default (this includes both wired
AND wireless clients) and maps a "bad user" to Guest, then even if they don't supply a username and password or an invalid one, ANYONE connected to your router can access the files in the share in Read-Only mode. If you enable
Writable mode this applies to both Guests AND the default root user. If you enable write access, anybody can create or delete files and folders, if you disable write access, not even the root user can delete them via SMB (they can through the CLI though). We can hope that in a future revision there is a simple user management and that a named user (or root ) can read and/or write while Guests are limited by the Writable or a Public Write flag on a share (and having multiple shares would be great as well).
Windows
Method 1: Samba 2.0 (SMB2.0) Support
We suggest Samba 2.0 support for Windows 10 users.
Due to the security vulunerabilitiy of the Samba1.0 protocol, Samba1.0 is not enabled by default in Window 10. You may modify the router Samba configuration.
Page 45 | 168
1). SSH into your router, you can gain control of both the router and the network that the rotuer is controlling. You can refer to the following link: https://docs.glinet.com/en/3/app/ssh/
2). Modify the Samba configuration file, type the following command: sed -i 's/security = share/security = user/' /etc/samba/smb.conf.template
3). Restart the Samba service, type the following command:
/etc/init.d/samba restart
Page 46 | 168
4). Open 'This PC' and type \\your router IP Address , such as \\192.168.8.1
.
5). You can view files in your USB flash drive through GL.iNet router now.
Method 2: Samba 1.0 (SMB1.0) Support:
1) Your network must be Home/Private. Otherwise you may not be able to see your router in Network .
Page 47 | 168
3.0 firmware supports SMB2, and if you need SMB3, use WinSCP to router , edit /etc/samba/smb.conf.template
.
Change the "max protocol = SMB2" to
"min protocol = SMB1"
"max protocol = SMB3", then save and exit WinSCP.
Page 48 | 168
If you are using Windows 10, you also need to enable SMB 1.0.
• Windows 7
Go to Control panel -> Network and Internet -> Network and Sharing Center.
Find if your active network is Home network . If not, click it and change it to Home network .
• Windows 10
Change your network to private by this tutorial .
Go to Control Panel -> Programs and Features -> Turn Windows features on or off -> Find SMB 1.0/CIFS file sharing support, check all SMB1 related items, click apply and restart your computer.
Page 49 | 168
2) Open a Windows explorer, you can find Network in the folder directory.
Double click your router to access its contents.
Mac OS
Method 1
1) Open Finder, Menu -> Go -> Connect to Server...
Page 50 | 168
2) Input smb://192.168.8.1
, you need to change this if your router IP address is not
192.168.8.1
Page 51 | 168
3) Click Connect.
4) Input username and password, they are the same when you login Web Admin
Panel.
5) Then Finder will display files of USB disk.
Page 52 | 168
Method 2
1) Go to System Preferences -> Sharing -> File sharing. Click Options and then enable SMB.
2) Open Finder. You should be able to find your router under Shared. iOS
You have to use file manage app to access the contents of your external storage device.
You may use FE File Explorer :
1) Click + to create a Windows connection.
Page 53 | 168
Page 54 | 168
2) Enter the IP address of your router (192.168.8.1). The User Name is root and the Password is the one that you use to login the web Admin Panel. Finally, click Save .
Page 55 | 168
3) Click your newly created connection to access the contents.
Page 56 | 168
Linux
If you are using Linux you are probably comfortable with connecting to servers, and how to do this can vary greatly from distribution to distribution and largely depends on your window manager/display environment. Most systems come with
Gnome and it is the default on the very popular Ubuntu distribution, so we'll give an example using the Files tool (also called Nautilus). If you open the app you should have a "Connect to server" option, there you can enter either the \\servername\share or smb://servername/share format.
ChromeOS or ChromiumOS (Neverware CloudReady and others)
There is a built in Samba/SMB client in the Files app, but it doesn't really seem to work very well. Instead the most useful ChromeOS app to allow mounting Samba shares even though it doesn't have high ratings is "File System for Windows". It is open source and works far better than the built in version. https://chrome.google.com/webstore/detail/file-system-forwindows/mfhnnfciefdpolbelmfkpmhhmlkehbdf/related?hl=en
Page 57 | 168
Once you have installed the app you can launch it from that page, and if you want to access it again in the future, in the Files app if you go to the 3 dot menu at the top right and "Add new service" you then select "File System for Windows" from the list and it will give you the dialog to fill out with the server name and some other details, but only the server name/IP and share name are required.
You can click the gear icon to enable saving the password for a share indefinitely, and you can click the "Keep" button to save the share to easily mount again in the future.
Android
Most Android devices have file manager which you can use to access the contents of your external storage device. Or you can use ES file explorer :
1) Open the app and then click Network .
Page 58 | 168
2) Click Scan to find your network storage device.
Page 59 | 168
Page 60 | 168
Page 61 | 168
8.2. DLNA Server
Some of GL.iNet routers support DLNA Server, but this is not a default function.
You need to install a little plug-ins to make it workable.
Supporting List: GL-AR750S-Ext, GL-AR750, GL-MT300N-V2, GL-AR300M series, GL-AR150 series, GL-MiFi and GL-X750
8.3.1. Install Plug-ins
Go to APPLICATIONS , then Plug-ins . Install two apps:
1. luci-app-minidlna
2. miniDLNA
Page 62 | 168
8.3.2. Use the DLNA server in GL.iNet Routers
After Installation of two applications, you can now use your GL.iNet router as as
DLNA server.
1. Make suer you already has a TF card inserted into the card slot before you power up your router. Hot-plug is not supported on GL.iNET routers.
2. Or you can insert an USB drive into the USB port.
3. Connnet your PC, Laptop, tablet, smart TV or Smartphone to GL.iNET router's WiFi(SSID). Here is the sample: GL-AR750-xxx
4. Then you can find the OpenWrt DLNA Server in your devices.
Take Windows as example:
In Windows Media
Player:
Page 63 | 168
In Windows File Explorer ->
Network
IOS: Install VLC or UPNP Extreme in App Store:
Page 64 | 168
You can easily find the OpenWrt DLNA Sever in UPNP: UPNP Extreme and VLC
Installation | UPNP Setup - | -
Page 65 | 168
|
Page 66 | 168
Page 67 | 168
VLC Setup:
Step 1 ： Click the Traffic Cones Logo on the left top, select Local Network
Step 2: You can find the OpenWrt DLNA Server easily in Local Network. Step 1 |
Step 2 - | -
Page 68 | 168
|
Page 69 | 168
Page 70 | 168
Also other devices can easily find the OpenWrt DLNA Server easily.
Enjoy your media DLNA Server by GL.iNET routers.
8.3. DDNS
Dynamic Domain Name Service (DDNS) is a service used to map a domain name to the dynamic IP address of a network device.
Setup
DDNS requires firmware v3.010 or higher.
Download firmware file
Open this website to download the latest firmware https://docs.glinet.com/en/3/release_notes/
Local upgrade
Open a web browser (we recommend Chrome) to access router Web Admin
Panel(default url is http://192.168.8.1
).
At the left side, UPGRADE -> Local Upgrade, select the firmware file you have downloaded, you can turn off "Keep Settings" for a clean install and more stable, click "Install" button. It takes several minutes to install.
1) Install gl-cloud-ui plug
(If your firmware version is equal or greater than v3.021, please jump to Step 2 )
Access to router Admin Panel (default is http://192.168.8.1
), at the left sidebar,
APPLICATIONS -> Plug-ins, click "Update" button to update Plug-ins, then input
"gl-cloud-ui" and click "Install" button. After installation, press "F5" to refresh
Admin Panel, a new item "Remote Access" will appear inside APPLICATIONS.
Page 71 | 168
2) Enable DDNS
At the left sidebar, APPLICATIONS -> Remote Access, toggle "Enabled DDNS", agree Terms of Services & Privacy Policy, click "Apply" button. Generally, it takes several minutes to take effect.
Move mouse to hover the icon besides "Enabled DDNS", it will display the DDNS url of your device.
The DDNS domain printed on the back label of router has changed. If your
DDNS url is xxxxxxx.gl-inet.com
on the back of router, new DDNS url will be xxxxxxx.glddns.com
.
3) Check if DDNS is enabled
Use nslookup command to check if your DDNS is enabled. You need to change xx5007c.glddns.com
to your DDNS url when use nslookup command.
Page 72 | 168
nslookup xx5007c.glddns.com 8.8.8.8
The output above means the DDNS url has maped to a IP address.
4) HTTP Remote Access
This function requires a public network IP.
If your router is behind NAT, you may need to set up port forward in higher level router. It use port 80.
Follow the steps above, to enable HTTP Remote Access.
HTTP is not encrypted, use at your own risk.
Page 73 | 168
After you enable HTTP Remote Access, you can access Admin Panel anywhere by your DDNS url of http, e.g. http://xxxxxxx.glddns.com
. If you use port forward, you should be access like http://xxxxxxx.glddns.com:YourExternalPort .
5) HTTPS Remote Access
This function requires a public network IP.
If your router is behind NAT, you may need to set up port forward in higher level router. It use port 443.
This function use self-signed certificates, so the browers will indicate that "Your connection is not private". I will show you how to use it anyway on Chrome iOS.
Other browers are the similar process.
Page 74 | 168
Page 75 | 168
As show above, click "Advanced
Page 76 | 168
As show above, click "Processed to xxxxxxx.glddns.com (unsafe)".
After you enable HTTPS Remote Access, you can access Admin Panel anywhere by your DDNS url of https, e.g. https://xxxxxxx.glddns.com
. If you use port forward, you should be access like https://xxxxxxx.glddns.com:YourExternalPort .
6) SSH Remote Access
This function requires a public network IP.
If your router is behind NAT, you may need to set up port forward in higher level router. It use port 22.
Follow the steps above, to enable SSH Remote Access, then you can ssh to your router anywhere.
7) Turn Off
If you don't want to use DDNS, just disable it.
Page 77 | 168
After disable DDNS, the interface is like above.
8.4. Cloud
Introduction
GL.iNet GoodCloud cloud management service provide an easy and simple way to remotely access and manage routers.
Check live router status
•
•
Live online offline status check
Live RAM and Load Average check
Page 78 | 168
•
•
LTE Signal
Email alarm about online offline status update
Set up routers remotely
• Set up routers (e.g. SSID and Key) remotely
Monitoring clients on routers remotely
• Check who is on your network
• Realtime traffic monitoring and block clients
• Email alarm about new client and block
Operate routers in batch
• Set up config templates and configure routers in batch
• Reboot or upgrade routers in batch
Manage routers in groups
• Divide devices in different groups
• Manage devices in one page
Site to Site
•
•
•
Virtual Office: extend your office network to other offices
Business Travel: remote access office's OA, CRM, MySQL systems
Smart Home: remote access IP camera, NAS and other devices at home
Setup
GoodCloud only support firmware v3.021 and above right now, we recommend to upgrade to the latest testing version(Pre-release) for better cloud experience.
This document is based on the latest testing firmware.
Download firmware file
Choose the Pre-release column of this url https://docs.glinet.com/en/3/release_notes/
For GL-USB150, it can use GoodCloud too, but it only can be binded to
GoodCloud by "Auto discover". ( about Add device )
Page 79 | 168
Local upgrade
Open a web browser (we recommend Chrome) and to access router Web Admin
Panel (default url is http://192.168.8.1
).
At the left side, UPGRADE -> Local Upgrade, select the firmware file you download, you can turn off "Keep Settings" for more stable, click "Install" button.
It takes several minutes to install.
If you want to learn more about upgrade, please scroll top -> Setup -> Choose the model -> Upgrade
Enable Cloud Manage on router Web Admin Panel
Open a web browser (we recommend Chrome) and to access router Web Admin
Panel (default url is http://192.168.8.1
).
Page 80 | 168
Follow the steps above, to enable cloud management feature, choose the Data
Server which is nearest your devices located. There are three Data Server,
'Global', 'America' and 'Europe'. If your devices are neither in America nor in
Europe, just select 'Global'. Global Data Server is at Japan.
Create GoodCloud account
Visit https://www.goodcloud.xyz
to access GoodCloud web site by Chrome or your favorite browser.
Sign up an account, and sign in. If you don't find the verify email, look in spam or check email later.
If you have any difficulty with sign up, please send email to [email protected]
for help.
Select region
At the first time when you sign in, it will pop up a dialog to let you select the region, select the region that your device selected Data Server on the Web
Admin Panel ( Step 1.2
).
You can change the region on the top right corner at anytime.
Page 81 | 168
Add a new group
On the left side -> Groups List -> Add group.
Follow the steps below to add a new group.
Set the group name, company, description and location.
Each device must belong to a group.
Page 82 | 168
Add device
On the left side -> Devices List -> Add Device. There are three methods to bind device to GoodCloud, "Auto discover", "Manually add" and "Bulk import".
Auto discover
Follow the steps below to add your device.
If the router and PC(which opened goodcloud.xyz page) are at the same public
IP ， it will be automatically discovered, and can be found when click "Device" list.
DDNS or Device ID can be found on the back of your router.
PS: Input "DDNS" / "Device ID" here just to verify that the router is really original/valid. DDNS feature and the Cloud feature are separate things.
For most models, it is "DDNS" on the back, but for some new models, it is "Device ID" on the back.
If you haven't added a group before, it will automatically create a default group.
Click "Refresh" to force auto discover devices again.
Page 83 | 168
Manually add
If it can't discover automatically, try "Manually add". All information that need to input can be found on the back of the router.
PS: Input "MAC", "SN" and "DDNS" / "Device ID" here just to verify that the router is really original and valid. DDNS feature and the Cloud feature are separate things.
Page 84 | 168
For some new models, DDNS has been changed to Device ID on the back of router.
Bulk import
"Bulk import" is for user who have a great number of devices to add. By "Bulk import" you can import many devices by a Microsoft excel file.
Page 85 | 168
Binded info on router Web Admin Panel
After you seccessfully add router to GoodCloud, go back to router Web Admin
Panel,
APPLICATION -> Remote Access -> Cloud Management, press 'F5' to refresh this page, It will display the binded GoodCloud username, hover the username it will show the corresponding GoodCloud email account.
Click 'View Logs' will show api call logs by GoodCloud.
Page 86 | 168
Unbind router
If you want to unbind router, click Unbind button.
If you have any difficulties, please send email to [email protected]
for help.
Manage your devices devices info and status
Sign in Goodcloud , check at left side -> Device List
Page 87 | 168
there is icon at the first column of this table,
means this device is online.
means this device is offline.
means this device is deactivated, it has never connected to GoodCloud before.
Page 88 | 168
Select the column you want to display.
"Online time" is the latest time when device connected GoodCloud.
"Offline time" is the latest time when device disconnected GoodCloud.
"Update time" is the latest time when device connected or disconnected
GoodCloud.
IP, if your router run VPN client, this IP will be your VPN IP by default. Learn
More
LTE Signal
Only available for 4G devices, e.g. GL-MiFi, GL-X750
Toggle the column on Device List page.
Page 89 | 168
It will show Signal strength, Type, and relavant parameters.
Device detail info
At left side -> Device List, click the name of a online device, it will open a page to manage this device of WiFi, Clients and view router info, memory usage, up time, load average and log.
Page 90 | 168
Device info
WiFi
Modify all WiFi settings.
Page 91 | 168
Router status
Client list
Timeline
Timeline tab display the activities of router, and messages uploaded by the router's associated IoT device.
Set email alarm
You can set email alarm when a device is online, offline, and new client connected.
At left side -> Setting -> Alarm Setting, create alarm rules
Page 92 | 168
Then set the email you want to receive notification. To ensure you get email successful, please add [email protected] to your email address book.
Site to Site
Site to Site only support firmware v3.026 and above.
Page 93 | 168
Introduction
Site to Site allows offices in multiple locations to establish secure connections with each other over internet. It extends the company's network, making computers resources from one location available to employees at other locations.
Senerio 1: A company has dozens of branch offices that they wish to join in a single private network to share resources.
Senerio 2: A company has a close relationship with a partner company, the Site to Site allows the companies to work together in a secure, shared network environment while preventing access to their separate internets.
Senerio 3: A family has IP camera and when they are not at home, the Site to
Site allows to remote access the IP camera.
What conditions do I need to create Site to Site?
One of the loations has a public static(or dynamic) ip, and two or more GL-iNet devices with latest testing firmware.
Steps to build a Site to Site network.
1. Upgrade your GL.iNet devices to latest testing firmware and binded to Goodcloud.xyz
. ( how )
2. Follow the steps below to create a Site to Site network.
Page 94 | 168
Defaul port is 51830, if you want to use another port, find the Advanced option at the lower left corner.
Due to device's performance, each Site to Site network can have up to 10 devices.
After you had chosen the devices, click Continue.
Then, it will test each device if it can be set as the Main Node of Site to Site.
Page 95 | 168
We suggest that the router with strong performance and best network speed to be the Main Node.
If none of the devices can be used as the Main Node, make sure that:
• One of routers has a public IP, either static public IP or dynamic public IP.
• Port is open, default is 51830.
• If the router is behind NAT, you may need to set up port forwading.
You can also change port and try again.
Page 96 | 168
If there are more than one device can be set as the Main Node, you need to choose one to continue.
Page 97 | 168
If there is only one device can be set as the Main Node, it will go to the Site to
Site detail page directly.
The network is stopped by default, check the LAN IP, if it is OK then you need to click Start button, otherwise click Setting to change LAN IP.
Page 98 | 168
Wait a few minutes, the node's connect status will display as lines. Solid line means connected, dashed line means disconnected.
Page 99 | 168
Testing the Site to Site connection
Now the Site to Site network is created and started, let's test the connection.
Use your PC or Phone to connect to one of the Node of this Site to Site, and use browser to access another Node's LAN ip, if you see the login page, the connection between these two nodes is worked.
For example, my PC connect to Node 1 device, and then I use browser to access
Main Node's LAN IP (192.168.48.1), if I see the login page, it means the connection between Node1 and Main Node is worked.
Route and other options
You can change each device's LAN IP and routes.
By default, each node can access other's LAN, based on security, we recommend only open the corresponding service IPs.
E.g. There is a Server A(172.30.97.100) in Node 1's subnet, if you want other
Site to Site nodes only can access Node 1's Service A, you can set it like below:
Page 100 | 168
You can add node's parent routes too.
Each sub Node build an encrypted tunnel netwrok to Main Node, if you want to change the IP of tunnel subnet. Click 'IP Address Range'.
Page 101 | 168
Batch Setting
You can use this feature to configure multiple parameters for a single device, or you can configure multiple parameters for multiple devices.
PS: This feature is only available to business users.
Batch Setting of Single Device
To configure single device, as show below.
The left side of image below is correct. If your interface is like the right side of image below, please upgrade to latest testing firmware.
Page 102 | 168
Check the configuration that needs to be modified and input value.
The checked configuration is required, and only the configuration that conforms to the rule can be filled out. After the configuration is delivered, it does not take effect immediately. The configuration takes effect and the device needs to be restarted. You can check the Restart now option in the lower right corner of the above figure. After the configuration is completed, the device will restart immediately.
Preview the configuration and confirm the delivery.
Page 103 | 168
Unchecked Restart now option will prompt.
Batch Setting of Mutiple Device
Select the devices you want to configure.
Page 104 | 168
Other operations are the same as when operating a single device.
Other Batch Operations
Other Batch Operations: Move to other group, upgrade, restart, delete.
Template Management
Save frequently used configurations as templates and quickly apply them when you modify configurations in batches.
PS: This feature is only available to business users.
Add a Template
Check the configuration that needs to be modified and input value.
Page 105 | 168
Give the template a name and description.
Page 106 | 168
Task List
At task list page, it shows the execution result of the configuration template.
PS: This feature is only available to business users.
You can view the execution result of each device and configuration.
Page 107 | 168
BLE MQTT Bridge
Bluetooth Low Energy (BLE) is widely used for smart home, wearable and
IoT sensors. This feature is for GL.iNet BLE gateway, GL-X750 Spitz and
GL-S1300 convexa S which has built-in BLE modules. Read this to learn how to use them forward your BLE data to the cloud based on MQTT protocol, including GL.iNet GoodCloud and AWS IoT.
GoodCloud and VPN
If you enable GoodCloud feature on router and also use it as VPN client, there is something important you need to know.
At default, GoodCloud process use VPN if you enable VPN client(eg. WireGuard,
OpenVPN, Shadowsocks), this bring a problem that if you VPN is configured incorrectly, GoodCloud will not work properly. In order to ensure the normal use of GoodCloud, we suggest you to follow the steps below to enable VPN Policies and disable "Use VPN for all process on the router". After you've done these steps, GoodCloud precess will not use VPN.
Page 108 | 168
Disable
To stop GoodCloud service, turn it off on router Web Admin Panel. Please follow the steps below. No action needed on the GoodCloud website.
Page 109 | 168
After disable Cloud, the interface is like above.
Turn on Captive Portal
Open a web browser (we recommend Chrome) and to access router Web Admin
Panel(default url is http://192.168.8.1).
At the left sidebar, APPLICATIONS -> Portal, follow the steps below to enable
Captive Portal.
Page 110 | 168
1) Turn on one-click Internet access
2) Choose the network that you want to use Portal. LAN is for LAN clients, include wired clients. Guest is for Guest clients which access by Guest Wi-Fi.
3) Set free internet time.
4) Certification URL is the default page that clients will force redirect to when they are connected, e.g. https://www.gl-inet.com
5) Apply the configuration.
For wired desktop client, please use browser to access a http(not https) website, e.g. http://neverssl.com
or http://apple.com/?
, then you will see the portal.
Below is the Portal on iPhone, click the "GET CONNECTED" button to access the internet. On Android and desktop platform, it's a similar interface.
Page 111 | 168
Change the default page
The default page is located /etc/nodogsplash/htdocs/ , use SSH or WinSCP to change this page. For more information about how to use SSH and WinSCP, please access this. You may need basic HTML and CSS knowledge to change this page, please learn these from w3school or other sites.
If you want to change the picture on the default page, just replace the image on
/etc/nodogsplash/htdocs/portal_login.png
.
After you had change the page, it need to disable Portal and enable Portal again to enable the modified default page.
Disable Captive Portal
Follow the steps below to disable Captive Portal.
8.5. Tor
Using Tor in OpenWrt and GLi Routers
Tor feature is builded in from V3.100, please upgrade.
Page 112 | 168
If you don't want to upgrade, please read below.
Free Tor firmware for all
!!! Note
This Tor firmware is totally free and no warranty.
Refer to the forum for help!
To use the Tor firmware:
1. Download the correct firmware for your router.
2. Flash it to the router, DO NOT reserve settings.
If you brick your router after flashing the wrong firmware or wrong way, please use uboot failsafe to debrick the router.
Versions and supported devices
We have several version of Tor firmware and here is the summary.
Version 2.264:
We have upgrade Tor firmware for the following models to v2.264 on 2017-11-
24.
AR150, AR300M, AR300M Nand, MT300N, MT300A, MT300N-V2
Page 113 | 168
Now Tor firmware is generally by imagebuilder and you will be able to install from standard GLi software repositories using opkg. The source code is on github now.
To modify and compile the Tor firmware by yourself, please refer to the following imagebuilders.
• imagebuilder for AR150, AR300M, MiFi, 6416 based on OpenWrt CC 1505
• imagebuilder for AR300M Nand based on OpenWrt CC 1505
• imagebuilder for MT300N, MT300A based on OpenWrt CC 1505
• imagebuilder for MT300N-V2 based on LEDE 17.01.4
Version 1.4:
Only support GL-AR150 , GL-AR300M , GL-MT300N , GL-MT300A , which has a switch button controlling whether you traffice should go through Tor or not.
Most of these instructions are for version 1.4.
Version 1.3:
Support GL-AR150 , GL.iNet6416
, GL-AR300 . This firmware create two ssid: OpenWrt and Tor. If you conenct to OpenWrt you will have normal Internet. If you connect to Tor, you will be connect to Tor network. This firmware has a built-in UI based on Domino Pi which you can manage two SSIDs.
Version 1.0 with Luci:
Support GL-MT300A and GL-MT300N . This is the firmware created for MT300A and
MT300N with Luci. This firmware create two ssid: OpenWrt and Tor. If you conenct to OpenWrt you will have normal Internet. If you connect to Tor, you will be connect to Tor network. Connection from LAN port will always have Tor. Luci is installed but there is no Domino Pi UI.
!!! Note
If you have questions about versions, please ask here or in the forum.
Download and Flashing the firmware to the device
All the firmwares is available at https://dl.gl-inet.com/firmware/ Find your device name and then "tor" folder. Download the newest firmware.
You need to refer to Setup for instructions to flash the firmware to the router.
Page 114 | 168
Model Tor firmware path Newest
Version
GL.iNet6416 https://dl.gl-inet.com/firmware/6416/tor/ 1.3
AR150 https://dl.gl-inet.com/firmware/ar150/tor/ 2.264
AR300M https://dl.glinet.com/firmware/ar300m/nand/tor/
2.264
AR300M-
Nor https://dl.glinet.com/firmware/ar300m/tor/
MT300N https://dl.glinet.com/firmware/mt300n/tor/
2.264
2.264
MT300A https://dl.glinet.com/firmware/mt300a/tor/
GL-MiFi
2.264 https://dl.gl-inet.com/firmware/ar150/tor/ 1.3
Note
.rar is for web upgrade .img is for uboot upgrade
GL-AR300 https://dl.gl-inet.com/firmware/ar300/tor/
GL-MT750 Not supported yet
AR750 Not supported yet
1.3
MiFi don't have a Tor firmware itself. Use AR150
1.3 instead
Using the firmware UI
After you flash the firmware to your device, when it reboots you need to set up the device at http://192.168.8.1
.
If you need to connect via WiFi, the default wifi password is goodlife .
!!! NOTE
You need to move the hardware switch to the right side if you want to access the UI . Otherwise you are connecting to the Tor network and will not be able to access the UI. This is for security reasons.
First time setup
The first time you acess the setting UI, you will be asked to setup a new password immediatelly. Just choose a password and your TimeZone and submit.
The device will NOT reboot in firmware 1.4.
NOTE: This doesn't change your WiFi password. Change it later.
Page 115 | 168
Login
You will be asked to login using your NEW password now.
Homepage
The UI is based on Domino Pi. It is quite simple. In your homepage you will be displayed with:
1. Your network status
2. Tor status. Please note if your tor reconnects this information may not be accurate.
3. Usage of your flash
Page 116 | 168
System and firmware upgrade
You can click the SYSTEM button from the left sidebar to view the system information, including:
1. Your router's name
2. Change your password
3. Change your timezone
4. Check your firmware version and upgrade it, from online or mannually.
Page 117 | 168
If the firmware on our website is newer, you can click Download and follow the instructions to upgrade the firmware.
Network Settings
Click the NETWORK button on the left sidebar to view and change the network settings, including:
Page 118 | 168
1. Internet protocol: dhcp , static , pppoe , 3g , tethering or repeater . Tethering only works in Android phones.
2. Wireless parameters: ssid , encryption and passsword
3. LAN IP
3G 4G settings
If you connect a 3G or 4G USB modem, you can set the internet to the modem.
You need to choose 3G as protocol, choose modem device, usually /dev/ttyUSBx , choose umts or evdo , then input your apn etc.
Page 119 | 168
Repeater settings. It will search for available ssid automatically. You need to choose ssid and type your password.
!!! NOTE
This firmware don't have repeater manager as our stock firmware.
If you move to another location, your wifi maybe not work and you need to re-setup.
Refer to the button action section in this page.
Luci
Click the LUCI button on the left sidebar you can have the LUCI UI. You can go back to Domino UI by clicking the Domino Web Panel link on the bottom right corner.
Page 120 | 168
Reset button and hardware switch usage
Reset button and switch is assigned special functions.
Page 121 | 168
Reset
1. When you press down the reset button, the middle LED will start to flash once per second. Release your finger if the LED just flashed once (1 seconds), the Tor will try to change a new Exit node.
2. If you keep the button pressed for 3 seconds, it will flash quicker, twice per second. Now release your finger your network will reset, including disable repeater, set lanip back to 192.168.8.1 and enable dhcp. Use this function if your repeater cannot connect which causes your wifi down
3. When you keep holding the reset button for 8 seconds, the middle LED will start to flash even quicker, 4 times per seconds. Release your finger now, your firmware will revert to factory status and reboot.
Switch
1. Left side: You will be connected to Tor network . You cannot access the admin UI.
2. Rigth side: Normal Internet . You will be able to access the admin UI.
8.7
BLE MQTT Bridge
Page 122 | 168
Introduction
Bluetooth Low Energy (BLE) is widely used for smart home, wearable and IoT sensors. This guide provide a simple but useful tool that send your BLE data to MQTT servers, which is the underling mechanism for popular IoT solution.
In this guide we will introduce two GL.iNet BLE gateway, GL-X750
Spitz and GL-S1300 convexa S which has built-in BLE modules and how to use them to forward your BLE data to the cloud based on
MQTT protocol, including GL.iNet GoodCloud and AWS IoT .
Hardware Required
Both GL-X750 and GL-S1300 comes with a Silicon BLE 5.0 module with the following specs. It connects to the main board using UART . The same module support BLE and Zigbee. However you need to change the firmware on the module (not the gateway).
There is no way to change the firmware from BLE to Zigbee or vice versa on the air. So you have to select the correct module when you purchase the correct product.
Item Specification
Product Name
Model
CPU
Protocol
Bluetooth & Zigbee Module
GL-EFR32S/GL-EFR32H
Silicon Labs EFR32MG1P232F256GM48-CR0
Support Zigbee 、 BLE
Storage
Tx Power
Antenna
Internal Interface
RAM:32KB/ Flash:256KB
19 dBm
On-board antenna (external antenna IPEX reserved)
17*GPIO (could be configured to UART 、 SPI 、 JTAG 、 I2C, etc.)
Module Interface Type Stamp interface/Pin interface
Supply Voltage
Power Consumption
3.3 V support low power consumption, standby power ＜ 50uW
Page 123 | 168
Item
Module Dimenstion
Specification
25mm*20mm
Operation Temperature 0℃~75℃
Storage Temperature 40℃~85℃
Operating Humidity 10%~90%
You must use the gateway with BLE devices.
There are two kinds of BLE devices. One kind of BLE device use beacons to send data, e.g a BLE thermometer. Another kind of device need to pair first, e.g. BLE smart watch.
For BLE beacon device, you can just scan the beacon and get the data. The data is generally encrypted. It is depends on you to decrypted the data. You can decrypt locally on the gateway or just send the encrypted data to your cloud to decrypt there.
For BLE devices that needs to pair first, you need to know how they can pair with the gateway. Generally this is provided by the device maker. There are a lot of devices that accept standard connection so you can pair without problem.
A list of compatible devices will be collected and posted here.
TBD: a list of compatible BLE device.
BLE Tools
Both GL-X750 and GL-S1300 come with OpenWrt and our BLE tools.
In your current firmware for S1300, there may be a BLE tool which comes with a UI. But we are further developing this and you need to use the new BLE tool. root@GL-S1300:~# opkg remove gl-ble-daemon gl-ble-api root@GL-S1300:~# opkg install bletool
Installing bletool (1-2) to root...
Downloading http://download.gl-inet.com/releases/packages-
3.x/ipq40xx/glinet/bletool_1-2_ipq806x.ipk.
Page 124 | 168
Configuring bletool.
Now you can use the bletool to test your BLE function. root@GL-S1300:~# bletool on root@GL-S1300:~# bletool discovery_type 1 1
OK root@GL-S1300:~# bletool discovery 1 1 0
OK af000045d1e43df801ff1f0201061bff570100a0c931e781473f364824a724d7d338040
2f83de4d1 4500 af040045d1e43df801ff0f0a094d492042616e6420320302e0fe d0009238c444f07001ff0e02011a0aff4c001005031802dcbd d0049238c444f07001ff00
You can find a detailed documentation about bletool https://github.com/gl-inet/ble2mqtt .
MQTT
MQTT is a machine-to-machine (M2M)/"Internet of Things" connectivity protocol. You can find official document in mqtt.org
.
This guide will give you a step to step guide of how to send message to GL.iNet GoodCloud and AWS.
Send Data to GoodCloud
GoodCloud is our Cloud based on MQTT under development. Now you can use it for demo purpose related to BLE. You can contact us if you have any suggestions by sending an email to [email protected].
All you need to do is to register an account in GoodCloud.xyz and bind your X750 or S1300 to your account.
Register your device on GoodCloud.xyz
Follow this docs to add devices on GoodCloud.
Where is the config file
The config file for cloud is in UCI. You will need to modify this directly if you want to connect to your own MQTT cloud. root@GL-S1300:~# cat /etc/config/glconfig
....
Page 125 | 168
config service 'cloud'
option enable '1'
option check_status '1'
option serverzone 'gslb-jp.goodcloud.xyz'
option username 'your name'
option email '[email protected]'
option bindtime '1558928701947'
Forward data to GoodCloud
To forward data to GoodCloud, you can use simple shell script.
After your device is connected to your cloud account, you can SSH to the router, try the following command. root@GL-S1300:~# ubus call mqtt pub '{"api":"/user/data", "data":"hello from S1300"
}'
{
"code": 0
} root@GL-S1300:~#
Login the GoodCloud ， find the registered device in "device list", click the device name and you will find your message in timeline.
Page 126 | 168
Send Data to AWS IoT
Amazon AWS IoT is a good choice for business applications. AWS seems to have good security and privacy protection. Here we will give an example of how to send your data to AWS IoT platform. It is a little complicated but still OK for IT specialist.
1. Setting up your AWS IoT environment
1) On the Welcome to the AWS IoT Console page, in the navigation pane, choose Manage->Things , then Register a thing .
Page 127 | 168
2) On the Creating AWS IoT things page, choose Create a single thing .
Page 128 | 168
3) On the Create a thing page, in the Name field, type a name for your thing, such as x750 . Choose Next .
4) On the Add a certificate for your thing page, choose Create certificate . This generates an X.509 certificate and key pair.
Page 129 | 168
5) On the Certificate created!
page, download your public and private keys, certificate, and root certificate authority (CA):
• Choose Download for your certificate.
• Choose Download for your private key.
• Choose Download for the Amazon root CA. This will display a new web page. Choose RSA 2048 bit key: Amazon Root CA
1 . This opens another web page with the text of the root CA certificate. Copy this text and paste it into a file named Amazon_Root_CA_1.pem
.
Most web browsers save downloaded files into a Downloads directory. You will copy these files to a different directory when you run the sample applications. Choose Activate to activate the X.509 certificate, and then choose Attach a policy .
Page 130 | 168
The RSA 2048 bit key: Amazon Root CA1 download web page:
6) Active your thing
Back to the previous site, click " Activate ", then click " Done ".
Page 131 | 168
2. Attach Policy
1) After you register your thing, you will need to create and attach a new policy to the certificate .
Page 132 | 168
2) Enter a Name for the policy,such as x750_policy, then Advance mode
3) Delete the automatically created policy code, then paste the policy below.
{
"Version": "2012-10-17",
"Statement": [
{
"Action": [
"iot:Publish",
"iot:Subscribe",
"iot:Connect",
"iot:Receive"
],
"Effect": "Allow",
"Resource": [
"*"
]
}
]
}
4) Create Policy after you pasted policy code.
Page 133 | 168
5) On the left side, Secure --> Certificates, Select the certificate you just created, Actions --> Attach policy
Page 134 | 168
6) Chose the policy you created(x750_policy) and choose Attach .
3. Config GL.iNet devices to connect to AWS IoT
1) Upload your certificate to the router
Rename the downloaded certificate files :
AmazonRootCA1.pem --> root_CA.crt xxxxxxxxxx.private.pem.key --> client.key xxxxxxxxxx. certificate.pem.crt --> client.crt
Windows User use SSH and WinScp to transfer these three certificate files to /etc/aws/ on router, please create new folder if you cannot find /etc/aws/ . mkdir /etc/aws/
2) Update mqtt package on GL.iNet routers.
You can check if your router comes with updated MQTT package.
If it is not, please upgrade it if you want to use AWS.
Page 135 | 168
Download the updated mqtt package , file name is ' gl-mqtt_3.0.37-
1_mips_24kc.ipk
‘
Use WinSCP/SSH to transfer the package to /tmp/ , then delete the old package. opkg remove gl-mqtt --force-depends
Then install the package: opkg install gl-mqtt_3.0.37-1_mips_24kc.ipk
3) Setup config file for your router
Edit /etc/config/glconfig
Add the following code to your glconfig file. config service 'cloud'
option enable '1'
option sub_topic '/a1rLNyG2VK5/mqtt_demo/user/get'
option pub_topic
'/sys/a1rLNyG2VK5/mqtt_demo/thing/event/property/post'
option service_pride '2'
option address 'ssl://xxxxxxxxxxxxxx-ats.iot.us-east-
1.amazonaws.com:8883'
option clientid 'iotconsole-xxxxxxxxxxxxxx'
option log '1'
The sample of glconfig file:
If you already setup GoodCloud on router before, just add the code at the end of config service 'cloud'
Page 136 | 168
option log '1' must be contained in the config file.
Note**
The topic ARN follows this format: arn:aws:iot:*your-region*:*your-aws-account*:topic/*<your/topic>*
For example: arn:aws:iot:us-east-1:123456789012:topic/my/topic
Topics
The message broker uses topics to route messages from publishing clients to subscribing clients. The forward slash (/) is used to separate topic hierarchy.
Note
We do not recommend using personally identifiable information in your topics.
The following table lists the wildcards that can be used in the topic filter when you subscribe.
Topic Wildcards
Wildcard Description
# Must be the last character in the topic to which you are subscribing. Works as a wildcard by matching the current tree and all subtrees. For example, a subscription to
Sensor/#
receives messages published
Page 137 | 168
Wildcard Description to
Sensor/
,
Sensor/temp
,
Sensor/temp/room1
, but not the messages published to
Sensor
.
+ Matches exactly one item in the topic hierarchy. For example, a subscription to
Sensor/+/room1
receives messages published to
Sensor/temp/room1
,
Sensor/moisture/room1
, and so on.
4) HTTP: API Endpoints add to router config file
The message broker supports clients connecting with the HTTP protocol using a REST API. Clients can publish by sending a POST message to *<AWS IoT
Endpoint>*/topics/*<url_encoded_topic_name>*?qos=1" .
At the left side of AWS IoT, Manage -> Things
You can find your AWT IoT endpoints at Interact .
Page 138 | 168
5) Connect your devices to AWS IoT Cloud
Start connect to AWS Cloud
/etc/init.d/gl_mqtt start
Restart the mqtt services if its process is running.
/etc/init.d/gl_mqtt restart
Check mqtt process status ps | grep gl_mqtt
4. MQTT Communication Testing
Test->Subscribe to a topic
The subscription and publish topics in glconfig file: option sub_topic '/a1rLNyG2VK5/mqtt_demo/user/get' option pub_topic '/sys/a1rLNyG2VK5/mqtt_demo/thing/event/property/post'
So the Subscription and Publish topic in AWS IoT Cloud shall be exchanged:
Page 139 | 168
Subscription Topic:
'/sys/a1rLNyG2VK5/mqtt_demo/thing/event/property/post'
Publish topic: '/a1rLNyG2VK5/mqtt_demo/user/get'
Try Subscribe to topic , a message published by your router will be received in few seconds.
Or Publish topic to your router a message :
Page 140 | 168
A message published by AWS IoT Cloud will be received on your router in few seconds. logread
Application and Demo
Read BLE Thermal Sensor
The following demo show how to read data from a thermal sensor, pack the data in JSON format and send to the GoodCloud.
#!/usr/bin/sh
. /usr/share/libubox/jshn.sh while true do sleep 5 bletool on bletool discovery_type 1 1 bletool discovery 1 1 0 | awk '/0d09536d6172745f426561636f6e02/{print
$0; exit}' >
Page 141 | 168
/tmp/blesniffer.log bletool end_procedure adv_data=`awk '{print $1}' /tmp/blesniffer.log` date=`date +"%Y%m%d%H%M%S"` json_init json_add_string "api" "/user/data" json_add_object "data" json_add_string "date" "$date" json_add_string "advertising data" "$adv_data" json_close_object json_close_object data=`json_dump` ubus call mqtt pub "$data" rm /tmp/blesniffer.log done
9. MORE SETTINGS
9.1. Admin Password
Change the password of the web Admin Panel, which must be at least 5 characters long. You have to input your current password in order to change it.
Page 142 | 168
9.2. LAN IP
LAN IP is the IP address that you use to connect to this router. The default IP address of GL.iNet router is 192.168.8.1. If it conflicts with the IP address of your main router, you can change it.
9.3. Time Zone
The time of the router's activities will be recorded according to the router time.
Therefore, choosing the time zone of your location is recommended.
Page 143 | 168
9.4. MAC Clone
Clone the MAC address of your current client to the router. It is used especially in hotel when the network checks your MAC address. For example, if you got your smartphone registered on the network, you can clone the MAC address of your smartphone to the router so that the router can also connect to the network.
Page 144 | 168
9.5. Custom DNS Server
You can configure the DNS server of the router in order to prevent DNS leak or other purposes.
DNS Rebinding Attack Protection : Some network may require authentication in captive portal. Disable this option if the captive portal of your network cannot be resolved.
Override DNS Settings for All Clients : Enabling this option will capture DNS request from all connected clients.
DNS over TLS from Cloudflare : Cloudflare DNS over TLS uses the TLS security protocol for encrypting DNS queries, which helps increase privacy and prevent eavesdropping.
Manual DNS Server Settings : Input a custom DNS server manually.
9.6. Network Mode
Change the network mode to cater your usage scenario. You may need to reconnect your client device whenever you change the network mode of the router.
Be aware that you may not be able to access the web Admin Panel with the default IP 192.168.8.1 if you use the router in Access Point , Extender or WDS
Page 145 | 168
mode. If you want to access the web Admin Panel in this case, you have to use the IP address assigned by the main router to the GL.iNet router.
Router : Create your own private network. The router will act as NAT, firewall and
DHCP server.
Access Point : Connect to a wired network and broadcast a wireless network.
Extender : Extend the Wi-Fi coverage of an existing wireless network.
WDS : Similar to Extender, please choose WDS if your main router supports
WDS mode.
9.7. Revert Firmware
Revert the router to factory default settings. All your settings, applications and data will be erased.
Page 146 | 168
9.8. Advanced
Click Advanced to direct to Luci which is the default web interface of OpenWrt.
You can check the detailed system log or conduct more advanced configurations there.
Note: The username is root. The password is same as the one that you use to access the web Admin Panel.
Page 147 | 168
10. Troubleshooting
10.1 LED Indicators
LED Status Indication
• Power : Solid green LED that indicates the router is powered up.
Page 148 | 168
• WAN : This router is connected to the Internet via Ethernet port. It will blink when the device has data transmission from Ethernet port
• 2G Wi-Fi : Solid white LED that indicates the router is broadcasting 2G Wi-Fi.
It will flash when there is wireless data transfer
• 5G Wi-Fi : Solid white LED that indicates the router is broadcasting 5G Wi-
Fi. It will flash when there is wireless data transfer
LED Customization
To configure the LED of GL.iNet routers, please login to Luci by clicking Advanced settings at the bottom-left corner of the web admin page.
Page 149 | 168
Then please choose System > LED Configuration .
10.2 Repair or Reset
How to Repair / Reset
All GL.iNet Routers have reset buttons, you can use them to repair your network or reset your routers to factory defult. If you can neither access the web-based setup page nor the router, you can press the reset button:
Repair
Press and hold for 4 seconds then release to repair your network.
Reset
Press and hold for 10 seconds then release to reset the router to factory settings. All user data will be cleared.
Page 150 | 168
Reset Button
10.3 Debrick via Uboot
Using Uboot to Debrick Your Router
You may have bricked your router if you were doing some DIY projects or flashed a wrong firmware. You may not be able to access your router but you can reinstall the firmware by using Uboot failsafe.
Please follow the procedures below to access the Uboot Web UI and re-install the firmware.
You can also refer to our video, How to Recover GL.iNet Mini Router by U-Boot
FailSafe .
Page 151 | 168
1. First you have to download firmware to your computer. You can download the firmware here . For GL-AR300M, GL-AR300M-Ext, GL-AR750S-Ext, please download the .img firmware file. For GL-B1300, GL-S1300, please download the .img firmware. Everyone else, download the .bin firmware file.
2. Connect your computer to the Ethernet port (either LAN or WAN) of the router. You MUST leave the other port unconnected .
3. Press and hold the Reset button firmly first, and then power on your device.
(If your device does not have a power button, plugging it in will power it on automatically.)
If you can not find the reset button, please refer to our page, How to Repair and Reset .
Release your finger when you see the LED has flashed:
4. The Power LED will light up. Then, other LEDs will start flashing.
5.
• 6 times for GL-MiFi, and then the LTE light will faintly flash twice.
• 5 times for GL-AR150, GL-AR300M, GL-USB150, GL-AR750, GL-
AR750S-Ext (Slate), GL-X750-Ext (Spitz), GL-MT300N-V2, GL-E750
(Mudi).
• 4 times for GL-S1300, GL-B1300.
The leftmost LED may stay on the whole time while the rightmost LED flashes 4 times, then the middle LED turns on and stays on.
(For some old GL-B1300, the leftmost LED stays on the whole time, and both the middle LED and the rightmost LED flash 5 times at the same time then they stay on.)
•
•
3 times for GL-MT300N, GL-MT300A.
No repeat LED flashes signal for GL-MV1000.
(Power and WAN LEDs will stay on the whole time.)
6. Set your computer’s IP address to 192.168.1.2
. Please check the step-bystep guide for different operating systems below:
Windows 7 / Windows 10Mac
Page 152 | 168
7. Use Firefox or Chrome to visit http://192.168.1.1
.
8. Click Choose File to find the firmware file. Then click Update firmware .
For GL-AR300M, GL-AR300M-Ext, GL-AR750S-Ext, please download the
.img firmware file and upload to the NAND
Page 153 | 168
flash.
9.
Wait for around 3 minutes. Don’t power off your device when updating. The router is ready when both power and Wi-Fi LED are on or you can find its
SSID on your device.
10. Revert the IP setting you did in step 6 and connect your device to the LAN or
Wi-Fi of the router. You will be able to access the router via 192.168.8.1 again.
10.4 Change WAN to LAN
You can configure the WAN port of the router so that it can be used as a LAN port. That's useful when you are using the router in repeater mode which the
WAN port is not required. As a result, you can have one more LAN port.
Especially for GL-AR300M-Lite , it only has one Ethernet port which works as
WAN by default. Therefore, you must connect to it via Wi-Fi. However, once you have connected to it, you can change its WAN port to LAN so that you can connect to it via an Ethernet cable.
Page 154 | 168
1. Leave the WAN port of the router unconnected.
2. Connect your device to the router and access the web Admin Panel.
3. Go to Internet , click Use as LAN under the Cable section.
4. Click Yes to confirm.
Page 155 | 168
You can simply revert the setting by repeating the above procedures. This time, it will show Use as WAN in step 3.
10.5 Captive Portal
Connect to a Hotspot with Captive Portal
Some public hotspots especially those in hotel, cafe or airport, require you to input your authentication information or agree the terms and conditions through a web page (Captive Portal) before you can connect to it or access the Internet.
However, you may find that you are not able to enter the captive portal so that you cannot connect to the hotspot or access the Internet. In this case, please follow the following procedures to disable the DNS rebind protection .
1. Connect to the public hotspot which requires authentication through captive portal.
Page 156 | 168
2. Go to Admin Panel -> MORE SETTINGS -> Custom DNS Server. Then, disable DNS Rebinding Attack Protection .
Page 157 | 168
3. Use your web browser to visit a webpage, it will be redirected to the captive portal of the hotspot automatically.
If you are using smartphone but your web browser doesn't redirect to the captive portal. Please turn off the Wi-Fi of your smartphone and then turn it on and reconnect to the Wi-Fi of your router again. The captive portal should be popped up directly after you entered the Wi-Fi password.
10.6 GL.iNet app
GL.iNet app requires router firmware version 3.100 and above. Please upgrade.
Click the Setup menu, choose your model.
Page 158 | 168
Then click the Upgrade on the left side.
Some models don't have V3.100 release firmware yet, please try testing(prerelease) firmware. Please find the download info at Firmware Release page.
Page 159 | 168
10.7 Access Web Panel
Sometimes you may be unable to access 192.168.8.1 to login web admin panel, please follow the guide below to solve this problem.
Check connection/router's IP address
Make sure your WAN/LAN port connection is correct. WAN port is connected to an internet source and LAN port is connected to devices. If connected by wifi, make sure the SSID is correct.
Then follow the steps below to check the router's IP address.
Windows 7 / Windows 10
Your ip address results determine the next step.
Your IP address is incorrect
If the IP address is incorrect, check your connection again.
1. Try Reset to back to factory default.
2. If the reset doesn't work, you can try Debrick via uboot .
Your IP address is correct
1. Make sure you are using Chrome/Firefox, then try to access 192.168.8.1 again.
2. In order to avoid problems caused by the cache, click ctrl+shift+n in
Chrome to enter the incognito mode. Then try to access 192.168.8.1 again.
Page 160 | 168
10.8 Extensible Authentication Protocol (EAP)
Introduction
You can connect to EAP (Extensible Authentication Protocol) Wi-Fi network which requires username and password authentication on GL.iNet routers.
This guide is how to connect an EAP Wi-Fi network via GL admin panel.
• All models are supported EAP EXCEPT GL-MT300N-V2, Microuter N300
Page 161 | 168
Connect via web panel
1. Visit the Admin Panel
Visit the Admin Panel and click “Scan” in the Internet -> Repeater.
You can find and connect to the EAP SSID to connect directly.
Page 162 | 168
2. SSID
Or choose “Other” in the drop-down list of SSID, then select EAP type in Wi-Fi
Security drop-down list.
3. Wi-Fi Security
Currently, we only support two types: 802.1X EAP/WAP and 802.1X EAP/WAP2.
Page 163 | 168
4. Type
Choose 2.4G or 5G.
5. User Name and Password
Enter your User Name and Password and then click join.
Page 164 | 168
Connect via Luci
Our web page only supports few EAP types for now so you may need to connect via Luci page in most situations.
1. Visit the Luci page
Go to MORE SETTINGS->Advanced.
Input your web password.
Then you will enter luci page.
Page 165 | 168
2. Connect to EAP wifi
Go to Network->Wifi(or Wireless).
Click 'Scan' on 2.4G section or 5G section.
Page 166 | 168
Join the network you want.
10.9 GoodCloud issues
How to fix if my device show "Deactivated"
The "Deactivated" mean the device never been connected to the server before.
Page 167 | 168
1. Make sure the router has connected to the Internet.
2. And try to disable and re-enable the GoodCloud on router's Admin Panel.
Don't forget to click "Apply" button.
3. Make sure to access to the right region of
GoodCloud.
Page 168 | 168
Download
Public link updated
The public link to your chat has been updated. You may view and manage your chat links after registration here.
Document public link
Advertisement
Key features
Multiple internet connection options
OpenVPN & WireGuard support
Built-in 3G/4G modem
File sharing capabilities
Internet Kill Switch
Cloud Management
Frequently asked questions
Search for the SSID of the router in your device and input the default password: goodlife.
http://192.168.8.1
Click UPGRADE to check any available update and upgrade the firmware.
Upload your OpenVPN configuration file (.ovpn) and click Connect.
This feature ensures that if the VPN client is not running, the router's clients are not allowed to access the Internet.
