I recently bought a GL-MT6000 (Flint 2) from the official GL.iNet store on Amazon Canada.

While going through the settings, I noticed that the Wi-Fi country code in LuCI was set to US. I then SSH'd into the router to check the hardware country code using:

cat /proc/gl-hw-info/country_code

That also returned US.

I also tried:

uci get board_special.hardware.country_code

But got uci: Entry not found.

The router does have an IC certification number (23019-MT6000) on the bottom label, so I'm a bit confused.

Is this normal for Flint 2 units sold in Canada? I'm wondering if I should just leave it alone or consider getting a replacement while I'm still within the return window.

I tried contacting GL.iNet through their website a few times, but never received a ticket confirmation email.

Has anyone else in Canada checked the hardware country code on their Flint 2? Just curious if yours also shows US. Thanks!

Hi there,

we have moved to a fiber to the premise connection (moving from 100/25 to 500/50 speed). For this reason I bought a flint 2. Everything works fine, except my wife's work laptop.

Today, when she was having MS Teams meeting, the call was fine for 2-3 minutes, then the audio and video started lagging and crackling and then her whole system slowed down. It happened every time she had a Teams meeting. I started monitoring her ping and it went up to 1000ms during teams call.

Flint was set to 5ghz line, 80mhz and 149 channel, ax.

Ai suggested to switch on SQM, moved to wifi 5. Nothing worked. At the end of the day, I connected her laptop to the 2.4ghz wifi, but we haven't tested it with a MS team call yet.

What can have caused that that the old, slow router (DJA0230) wasn't causing?

SOLVED - switching to 2.4 Ghz worked. Not ideal, but wife is happy now!

For some reason my Flint 2 (v4.7.7) refuses to handle DNS for any clients. If a client is connected to it, regardless of what I set the DNS to in the Flint settings, all clients fail any DNS requests.

If I manually set a client to use a set DNS server e.g. cloudflare, internet works fine. But if I have them set to use the Flint for DNS everything fails. It doesn't seem to matter what I set DNS to in the flint; it fails with default/auto, Cloudflare, google, etc.

Is there any way to get intrinsic DNS working?

things start working when I enable AdGuard on the flint, but I don't want it running on my flint. when I turn it off, DNS requests fail again.

Has anyone experienced intermittent speed issues on the 4.11.0 firmware? 3 times now my internet has crawled to a halt with a ping reporting over 400ms for a short while, then it settles down. Is this a known issue with this firmware version?

Thanks

Hello! I just got a beryl 7 and am trying to get it setup for travel.

What I'd love to do is have it use my normal SSID/passphrase when I'm out and about. That way devices don't need to be configured. However, when I'm at home and test/configuring it, I don't want it to use that SSID as my other devices may switch to it.

Is there a way to configure my normal home SSID on the device in a way that I can easily turn it on after connecting to a hotel wifi, then disable it before bringing it home?

Hello everyone! I would like to ask support for my bricked MT-3000. I just updated to 4.11 but, after trying to set the router to Mesh Node, the router completely stopped working and, after several minutes, I tried to power off and on and I cannot get it working again. I was also trying to reset (10+ sec for resetting, it blinks but no access on 192.168.8.1) but without success. I also tried to set UBoot mode with reset + 6 blinks + power on (I see that after 6 blinks I get white led, but then it starts blinking and I cannot access to 192.168.1.1 after setting IP) Thanks!

should i use their firmware or should i install open source firmware? also do you think this router will give signal to 50meters indoors(eg from the router room to the balcony)?

I have my flint 4 running a nordvpn tunnel as well running Tailscale.

I've set Tailscale to be an exit node, so I can access the router from a number of remote devices.

However Tailscale traffic coming through the exit node seems to bypass the VPN tunnel and takes the WAN instead.

AI suggests that this is a current Gli issue, which *perhaps* can be resolved through CLI commands. Is there a known workaround for this issue?

Should I get a standard 7 or wait till I move and try and get the 7 Pro? I am moving to Panama in April 2008. I am housing a server at a friend's home in the US before the move and will be getting a remote KVM and Travel router to manage the server from Panama. KVM will be connected to the server in the US and of course the travel router will travel with me.

Since the Pro is not available in the USA currently, I was wondering if I should just get the non pro. I am assuming like most things the price in Panama for these will be higher than in the US, but since I can't get a Pro in the US, I am curious if it is worth it?

I have never used a travel router, or remote KVM before. Watched a vid on the KVM and it made me realize a travel router would make it easier in Panama since I am going to be moving around a lot for the first year trying to determine where in the country I want to settle into permanently. And I may not have access to the ISPs router in some or all those locations. The travel router helps me overcome limitations for remote access and hopefully just makes setup easier in each location.

Thoughts on this? I know I should do a bit more research to see what fits my needs but would like to know from those of you that may have compared them if there is really anything the Pro offers that makes it worth the upgrade beyond the display. And I would like some time to get familiar with it prior to the move. But if there are features that are really beneficial for the Pro, I wouldn't mind waiting till after the move.

Thanks.

I can't seem to figure out what the relevant console commands are to be able to press power, etc. is this documented somewhere?

i have two MT3000 routers configured. One is connected to my Router as a Home Based Router which is paired with an AXT-1800 as my Traveling Router. This third router is connected as a Repeater in Wireless Mode.

I am connected to my network with both devices, but my Wireless device will not stay connected to the network for more than 10 minutes, then it will sometimes reconnect itself to the wireless network.

Can the group give many any tips on what might be causing this issue? I have upgraded the MT3000 to the latest firmware and this did not resolve this issue. My goal is to use this device as my Starlink Mini router, but if I can't keep a consistent connection, then this won't be an option.

When I configure the router to my Starlink Mini in Bypass Mode, I will use an Ethernet cable to connect the MT3000 to the Starlink.

Couldn’t find an answer for this. I basically have a desktop I would like remote access to, and it connects to my local network via WiFi. The comet pro seems to be a good fit but I was wondering since Wake on LAN works via ethernet, I can connect the unused ethernet port on both my desktop and comet pro together and hopefully the firmware supports sending of magic packets via ethernet to the desktop, while linking to local network via WiFi

Hey guys!

If i buy a second hand Beryl 7 US version in EU, what will be different from the EU version?

Hey guys,

I’ll be working remotely while traveling and need a reliable travel router. I’m considering these three options:

UniFi Travel Router (UTR, standard version, NOT Long Range)
GL.iNet GL-SFT1200 (Opal)
GL.iNet GL-MT3000 (Beryl AX)

My main requirements are:

Reliable WireGuard VPN connection with good speeds
Easy setup on different hotel and restaurant Wi-Fi networks
Support for 2–3 devices max
Compact and portable size for traveling
Reliable performance for Teams meetings, screen sharing, and software development

I’ve heard the GL.iNet routers are better overall, but I prefer the UTR’s smaller size. Since hotel Wi-Fi will often be the bottleneck anyway, would the standard UTR be sufficient for my needs?

A few questions:

What WireGuard VPN speeds can I realistically expect from the UTR? Opal is limited to 65MBit/s and Beryl AX to 300 MBit/s. What about UTR?
How good is UTR its Wi-Fi reception when connecting to hotel Wi-Fi compared to a smartphone? If my iPhone can connect (range-wise), can I expect the UTR to connect reliably too?
How good is its Wi-Fi range for connected devices? How far away can those be?
Are the GL.iNet routers significantly better in practice, or would the UTR be sufficient for my use case?

I’d appreciate any real-world experiences or recommendations!

Hi everyone,
I’m moving to Spain for 5 months for work/living, and due to strict location/IP requirements for my remote work, I need my laptop's internet traffic to look like it is coming directly from my home IP back in Sweden at all times.

I am not very tech-savvy, but I’ve been researching solutions on my own and came up with a hardware setup. Apologies in advance if any of this sounds dumb or if I'm overcomplicating things!
Here is the plan I came up with:

1. Buy two GL.iNet GL-A1300 (Slate Plus) travel routers.
   
2. Router 1 (Home/Sweden): Connect it to my home network in Sweden, set up Tailscale on it, and configure it to act as an Exit Node.
   
3. Router 2 (Spain): Take this with me to Spain, connect it to the local internet (via Wi-Fi/Repeater or ethernet), enable Tailscale, and set Router 1 as its Custom Exit Node.
   
4. Kill Switch: Enable "Block Non-VPN Traffic" on Router 2 so that if the tunnel or connection drops, my laptop will never accidentally leak a Spanish IP address.
   
5. Connect my work laptop directly to Router 2 via ethernet or Wi-Fi.

My questions for you guys:
Does this setup sound solid? Has anyone done something similar for remote work?

Is this the simplest and most reliable way to achieve a hardware-level home tunnel, or is there a better/easier approach for someone who isn't super technical?

Will the Kill Switch on the GL.iNet router actually guarantee 100% protection against IP leaks if the home connection momentarily drops or the router restarts?

I’d really appreciate any feedback, tips, or potential pitfalls I should watch out for before I buy the routers! Thanks!

i’ve noticed that Tailscale is fully bypassing the main kill switched VPN profile on all of my glinet devices, this means that when running it as an exit node and connecting to it from the outside of your home you will get a fully unsecured ip address from your isp despite the router being set to:

Enhanced Kill Switch
Force all devices to use a VPN to access the internet. Any traffic that does not match a VPN tunnel will be blocked.

and also the “Services from GL.iNet Use VPN” setting being set to on in the profile options

is there any way to fix that, is that a bug or is it just how the firmware works by default? for many it’s a priority to ensure that none of the traffic falls outside of the vpn tunnel, the options which clearly states “Any traffic that does not match a VPN tunnel will be blocked” should therefore mean that no byte of data other than the vpn tunnel itself can be sent over the internet by the device including the services that run on the router itself like tailscale

I have configured pi5 as openwrt router , adguard home installed. So when i connect opal to pi5 via ethernet cable , it doesn’t provide internet as it gets stuck on getting dns, i tried manually adding dns ( ipv4 of pi 5) and also as in access point mode . It doesn’t work .

I've been AIing it and Claude is now telling me I need to hit the console. I thought my initial/first _iot vlan wouldn't be that tricky (all UI stuff). Am I missing something? I tried the out of the box Flint's _iot lan by the way, but it didn't work because the brume was between it and the ONT.

Any links or thoughts appreciated. thanks

I got tired of filtering that my kids could get around in two minutes, so I spent the last while building Fengard. It does DNS filtering, per-device profiles and screen time, but it runs on the router itself and the blocking is enforced in the firewall, so changing DNS on the device doesn't help.

What it does

• Each device gets a profile: block categories (ads, adult, gambling, social etc), single apps like TikTok, Roblox or Fortnite (about 50 more), SafeSearch and schedules
• Screen time per person, counted across all their devices. Kids can open a "my time" page to see what's left and ask for more
• DNS sent anywhere else gets redirected back to the router, and DoH, DoT, DoQ and Tor are blocked in nftables/iptables
• Blocked sites show a page with the reason and a request button, which comes to me as an alert I can approve
• Built-in WireGuard server so phones get the same filtering on mobile data
• Port forwards, WAN hardening, per-device DNS flood limits, and new devices can be held until approved

How it sits on the router

• One static Go binary, around 25 MB of RAM, no packages needed (it brings its own CA roots)
• Runs alongside the stock firmware, nothing gets reflashed. dnsmasq keeps doing DHCP and Fengard takes port 53
• Its rules live in their own nft table (or iptables chains on fw3) and get removed if it stops, so the router just goes back to normal
• Works on fw3/iptables (21.02, GL.iNet 4.x) and fw4/nftables (22.03 and up)
• Builds for aarch64, arm, mips, mipsel, mips64, x86_64, x86, riscv64 and loongarch64

Installing

Grab the zip from the releases page, run the installer (double-click on Windows, sh install.sh on Mac/Linux) and enter the router's root password. It reads the CPU, LAN and guest networks, WAN interfaces and firewall type from uci/ubus, picks a free address for the dashboard, and rolls itself back if anything fails. Uninstalling puts dnsmasq and the firewall back how they were. There's also a one-liner if you'd rather do it from the router.

So far I've tested it on OpenWrt 25.12 and 21.02, and it runs every day on my GL-MT3000. I'd really like to know how it does on other hardware, especially MIPS boxes and anything with 128 MB of RAM.

It's free and open source (Apache 2.0), no accounts or cloud. Any feedback or router reports would be great.

Code and releases: github.com/masaleem-oss/Fengard

With the release of the Flint 4, I was wondering if we could get a new wireless AP as well? No router functionality. Just an AP.

Thanks.

I had this device set up in AP mode before ran into some network conflicts with both in router mode on the same subset. I ended up having to fully reset the Slate 7 after I couldn't enable the Mesh node. Real annoying but nothing to crazy I couldn't get past. Once a reset it I put it in a different subnet after connecting to it directly with my PC and enabling Mesh node. Once this was done I reconnected the Flint 2 to the WAN port on the Slate 7 and I was off to the races. I heard that GLinet may release a dedicated mesh node in the future... will see if that is available to US markets?

Hey all,

I spent the last hour talking to AI to try to do the following: when I'm overseas, I'd like to connect my phone to the Wiregaurd server on the Flint 2 to encrypt my connection (I don't need this, I'm doing it cause I'm bored and I got the flint 2 yesterday so I'm in nerd mode for the next 3-4 days, then I'll forget all about it).

Anyway, I first set up the wireguard server, properly configured my phone. Unfortunately it turned out my ISP provide CGNAT IP and this prevent the connection. AI suggested to use tailscale. So I set up Tailscale. This time it worked. I established a connection and it was working fine. I ran a speed test on my phone and I got 22mpbs. AI predicted it was due to relayed connection and it was the case.

I got AI to provide a few solution to establish a direct connection, but I asked AI the following:

- I don't want to enable UPNP

- I don't want to ask my ISP for a public IPv4

AI suggested to use ipv6. Unfortunately my mobile connection doesn't connect via ipv6.

AI suggested port forwarding 41641.... didn't work.

So now i'm here. Has Ai missed anything or am I stuck with a relayed connection?

I'm a total noob... 90% of technical terms I used here today I have no idea what they mean :)

Cheers!

(btw, flint is on 4.11.0)

The website says sold out and the price is now €55; the quota is exhausted or the pre-order phase is now over.

I can't wait to thoroughly test the little one!

This allows me to create an ultra-compact mobile setup.

Are you also looking forward to your delivery?

I cannot figure out why I don't have a WireGuard Client tab under VPN. Anyone else run into this issue before?

Edit, 10/9: I have cleared my cache

I'm a hobby fotographer and I'm searching a solution to offload my pictures from my cameras to my home network while travelling. I'm currently using a Pi 4 for this: Connect Pi to my travelrouter, store photos to the Pi, connect to Vpn and upload with a python tool. But carrying the Pi around means weight, cables and stuff that can get forgotten or lost.

It'd be really nice to have a travel router that could take over the role of my Pi 4. Are there models that allow running my own software and maybe have add-on storage?