GL-INET Opal User Manual
  1. Manuals
  2. Brands
  3. GL-INET Manuals
  4. Network Router
  5. Opal
  6. User manual

GL-INET Opal User Manual

Hide thumbs
Table of Contents

Advertisement

Quick Links

Opal
(GL-SFT1200)
USER MANUAL

Advertisement

Table of Contents
loading

Related Manuals for GL-INET Opal

Summary of Contents for GL-INET Opal

  • Page 1 Opal (GL-SFT1200) USER MANUAL...

  • Page 2: Table Of Contents

    Table of Contents Getting Started with GL.iNet Opal..................1 1.1. Power on ..........................1 1.2. Connect ........................... 2 Connect via LAN ......................2 Connect via Wi-Fi ......................3 1.3. Access the Web Admin Panel .................... 3 Language Setting ......................4 Admin Password Setting ....................
  • Page 3 6.3. DMZ ............................28 VPN ..............................29 OpenVPN ..........................29 7.1. OpenVPN Client ...................... 29 7.1.1. OpenVPN Server ..................... 37 7.1.2. 7.2. WireGuard ........................... 41 7.2.1. WireGuard Client ..................... 41 7.2.2. WireGuard Providers ..................... 44 7.2.3. WireGuard Server ....................47 7.2.4.
  • Page 4 Task List ............................121 BLE MQTT Bridge........................122 GoodCloud and VPN ....................... 122 Disable ............................123 MORE SETTINGS ........................126 9.1. Admin Password ......................126 9.2. LAN IP ..........................127 9.3. Time Zone ......................... 127 MAC Clone ........................128 9.4. Custom DNS Server ......................
  • Page 5 10.9 GoodCloud issues ......................152 How to fix if my device show "Deactivated" ..............152 Page 4 | 4...

  • Page 6: Getting Started With Gl.inet Opal

    1. Getting Started with GL.iNet Opal Model: GL-SFT1200 1.1. Power on Plug the Micro USB power cable into the power port of the router. Make sure you are using a standard 5V/3A power adapter. Otherwise, it may cause malfunction. Page 1 | 153...

  • Page 7: Connect

    Note: Hot plug for TF card is not supported. If you want to use TF card, please insert before powering on the router. 1.2. Connect You can connect to the router via Ethernet cable or Wi-Fi. Note: This step only connects your devices to the local area network (LAN) of the router.

  • Page 8: Connect Via Wi-Fi

    (2) Connect via Wi-Fi Search for the SSID of the router in your device and input the default password: goodlife. Note: The SSID was printed on the bottom label of the router with the following formats: • GL-SFT1200-XXX • GL-SFT1200-XXX-5G 1.3.

  • Page 9: Language Setting

    (1) Language Setting You need to choose the display language of the Admin Panel. Currently, our routers support English, 简体中文, 繁體中文, Deutsch, Français, Españ ol and 日本 語, 한국어, русский. Note: If your browser always redirects to Luci (http://192.168.8.1/cgi-bin/luci), you can visit: http://192.168.8.1/index.html instead of http://192.168.8.1.

  • Page 10: Admin Panel

    Note: This password is for this web Admin Panel and the embedded Linux system. It will not change your Wi-Fi password. (3) Admin Panel After the initial setup, you will enter the web Admin Panel of the router. It allows you to check the status and manage the settings of the router.

  • Page 11: Internet

    2. INTERNET There are total 4 types of connection method that you can use to access the Internet: Cable, Repeater, 3G/4G Modem and Tethering. Page 6 | 153...
  • Page 12 Click to create an Internet connection. INTERNET Page 7 | 153...

  • Page 13: Cable

    2.1. Cable Connect the router to the modem or main router via Ethernet cable to access the Internet. Before plugging the Ethernet cable into the WAN port of the router, you can click to set the WAN port as a LAN port. That is useful when you are using Use as LAN the router as a repeater.

  • Page 14: Dhcp

    (1) DHCP DHCP is the default and most common protocol. It doesn't require any manual configuration. (2) Static Static is required if your Internet Service Provider (ISP) has provided a fixed IP address for you or you want to configure the network information such as IP address, Gateway, Netmask manually.

  • Page 15: Pppoe

    (3) PPPoE PPPoE is required by many Internet Service Providers (ISP). Generally, your ISP will give you a modem and provide you a username & password that you needed when you are creating the Internet connection. Under PPPoE protocol, enter your username and password, then click Apply Page 10 | 153...

  • Page 16: Repeater

    2.2. Repeater Using Repeater means connecting the router to another existing wireless network, e.g. when you are using free Wi-Fi in a hotel or cafe. It works in WISP (Wireless Internet Service Provider) mode by default, which means that the router will create its own subnet and act as a firewall to protect you from the public network.

  • Page 17: Usb 3G/4G Modem

    2.3. USB 3G/4G Modem You can connect to the Internet using a USB 3G/4G modem. Insert your SIM card into the USB modem Plug the USB modem into the USB port of the router. Once it has been detected, the 3G/4G modem section will be activated and you will be able to set up your USB modem.
  • Page 18 You need to choose the correct one based on the modem spec. We suggest you to try ttyUSB0 first. • Service Type: Indicate the service type of your SIM card. • APN: Confirm with your SIM card carrier. Advanced Settings: •...

  • Page 19: Compatible Modems

    Compatible Modems Here is a list of supported modems that we had tested before. Model 3G/4G Tested Tested by Comments* Quectel EC20-E, EC20-A, GL.iNet EC20-C Quectel EC25-E, EC25-A, GL.iNet EC25-V, EC25-C Quectel UC20-E GL.iNet ZTE ME909s-821 GL.iNet Huawei E1550 GL.iNet Huawei E3276 GL.iNet TP-Link MA260...

  • Page 20: Tethering

    *QMI: This modem supports QMI mode. Please choose /dev/cdc-wdm0 in the Device list. *Host-less: This modem supports tethering mode, please set up by using Tethering but not 3G/4G modem. You can also refer to http://ofmodemsandmen.com/modems.html for a well- supported modem list. 2.4.
  • Page 21 Go to web Admin Panel, on the left side bar, choose "INTERNET" and click "Connect" in the middle of the page. It will show connected information on the top of your phone screen and the web Admin Panel once you connect successfully. Page 16 | 153...

  • Page 22: Easytether

    EasyTether Some carriers prohibit the sharing of the data so that you may not be able to use tethering. However, you can try easytethering. Note: Easytether is not a free service and we have no affiliation with them. 3. WIRELESS In WIRELESS, you can check the current status and change the settings of the wireless network created by the router.
  • Page 23 Bandwidth: The channel frequency coverage range of the Wi-Fi. It is suggested to use default parameter. Channel: The router will not choose the best channel itself. You need to choose a channel manually. If your router is used as a Wi-Fi repeater, the channel will be fixed according to the connected wireless network.
  • Page 24 Page 19 | 153...
  • Page 25 Click to change the settings of the wireless network. Modify Guest WiFi: You can switch on/off Guest WiFi in Wireless, the Guest WiFi will create a different subnet to your visitors to prevent any un-authority visiting to your other devices in the network. Page 20 | 153...

  • Page 26: Clients

    4. CLIENTS You can manage all connected clients in CLIENTS You can see their name, IP, MAC address and connection type. Page 21 | 153...
  • Page 27 Click the button on the right to block any unwanted client. After you turn on Enable real-time speed and traffic statistics. You can see all devices' traffic and speed information, click the button on the right to block any unwanted clients. Page 22 | 153...
  • Page 28 You can set tech QoS for certain clients by click Set, a speed limitation range window will pop-up, set the speed and click Apply. Page 23 | 153...

  • Page 29: Upgrade

    There is an yellow "exclamation mark" besides speed limited client. 5. UPGRADE Click to check any available update and upgrade the firmware. UPGRADE 5.1. Online Upgrade You can find the current firmware version here. If your router is connected to the Internet, it will check for the newer firmware version available for download.

  • Page 30: Official Openwrt/Lede Firmware

    (1) Official OpenWrt/LEDE firmware You can download the official firmware from our website. • GL-MT1300(Beryl): https://dl.gl-inet.com/firmware/mt1300/ Find the available firmwares from the folder according to your device model, and they are located in different sub-folders: V1/Release: Official GL.iNet OpenWrt/LEDE firmware.

  • Page 31: Compile Your Own Firmware

    (2) Compile your own firmware You can compile your own firmware and flash to the router. Please refer to https://github.com/gl-inet/openwrt https://github.com/gl-inet/imagebuilder (3) Third party firmware You may also try other firmwares such as DDWRT. Note: If you uploaded an incompatible firmware thus bricked the router, please use Uboot to re-install the correct firmware.

  • Page 32: Firewall

    6. FIREWALL , you can set up firewall rules like port forwarding, open port and FIREWALL DMZ. 6.1. Port Forwards Port Forwarding allows remote computers to connect to a specific computer or service behind the firewall in the local LAN (such as web servers, FTP servers, etc).

  • Page 33: Open Ports On Router

    External Ports: The numbers of external ports. You can enter a specific port number or a range of service ports (E.g 100-300). Internal Ports: The internal port number of the device. You can enter a specific port number. Leave it blank if it is same as the external port. Protocol: The protocol used, you can choose TCP, UDP, or both TCP and UDP.

  • Page 34: Vpn

    7. VPN GL.iNet routers have pre-installed VPN server and client in OpenVPN and WireGuard. 7.1. OpenVPN GL.iNet routers have pre-installed OpenVPN server and client. 7.1.1. OpenVPN Client OpenVPN client requires OpenVPN configuration file (.ovpn) to create the OpenVPN connection. If you have your own VPN service provider but you don't know how to get the configuration file, please refer to Get your configuration file.
  • Page 35 (1) Upload your OpenVPN configuration file Simply drag and drop your file to the pop up windows. It can be a single .ovpn file or a zip/tar.gz file which contains multiple .ovpn files. Be careful that some .ovpn files use separated ca, cert, crl files. These files must be zipped together with the .ovpn file before upload.
  • Page 36 (2) Enter Description, Username and Password Enter a description for your OpenVPN configuration file and then click Submit finish the upload process. In some cases, it will ask you to enter your username and password. Page 31 | 153...
  • Page 37 (3) Connect to the OpenVPN server You can now click to start the OpenVPN connection. Connect Page 32 | 153...
  • Page 38 If your configureation file is an archive file, like .zip, you can switch server at the cog icon. Page 33 | 153...
  • Page 39 Once connected, you should find your IP address, data received/sent. Page 34 | 153...
  • Page 40 Note: It can't running VPN Client and Server at the same time, and also can't running OpenVPN Client and WireGuard Client at the same time. (4) Manage configuration files Click to check the list of configuration files. You can modify the Management Description, User name or Password of each configuration file.
  • Page 41 Get your configuration file We have tested different VPN service providers. Therefore, if you don't know how to get the configuration file, you can follow the instruction below. However, you have to contact your service provider for the configuration file if they are not listed below.

  • Page 42: Openvpn Server

    If you have any problem in the setup of OpenVPN, please contact support@gl- inet.com 7.1.2. OpenVPN Server You can set up an OpenVPN server on GL.iNet router. Click + Generate a configuration file (1) Server configuration There are preset OpenVPN server configurations. You can also click Modify change them manually.
  • Page 43 Allow Access Local Network: Enable this will allow every client that connect to this OpenVPN Server be able to access your LAN. Please use with caution. Note that you can't running VPN Client and Server at the same time, and also can't running OpenVPN Client and WireGuard Client at the same time.
  • Page 44 (3) Start the OpenVPN server Click to start your OpenVPN server. Otherwise, you will not be able to Start connect to the OpenVPN server by using its configuration file. Page 39 | 153...
  • Page 45 It started. Page 40 | 153...

  • Page 46: Wireguard

    7.2. WireGuard WireGuard is an extremely simple yet fast and modern VPN that utilizes state-of- the-art cryptography. It aims to be faster, simpler, leaner, and more useful than IPSec, while avoiding the massive headache. It intends to be considerably more performant than OpenVPN.
  • Page 47 (1) Specify the name of your server Specify the name and then click Next (2) Input the configurations! There are different methods to input the configurations. Page 42 | 153...
  • Page 48 You can copy the configurations from your server JSON Plain Text or input the settings manually. Configuration After copy the from your server, you can paste it in JSON Plain Text and then click Add to finish the WireGuard Client setup. Configuration Page 43 | 153...

  • Page 49: Wireguard Providers

    7.2.2. WireGuard Providers If you are using Azirevpn or Mullvad, you can click and use your AzireVPN Others or Mullvad account to set up WireGuard client directly. AzireVPN: Select AzireVPN as the provider, enter your User Name and Password and then click "Add"...
  • Page 50 Mullvad: Select Mullvad as the provider, enter your Account Number and then click "Add" to finish the WireGuard Client setup. Waiting for the adding. Page 45 | 153...
  • Page 51 Other recommended WireGuard provider, please click this link. (3) Connect to the WireGuard server Click . You will see the upload and download traffic when it is connected Connect successfully. Page 46 | 153...

  • Page 52: Wireguard Server

    7.2.3. WireGuard Server You can set up a WireGuard server on GL.iNet router with firmware 3.0. Click Create a New User (1) Start a WireGuard Server You can simply use the default parameters of Local IP and Local Port, or you can set your own value.
  • Page 53 (2) Add a new client You have to add a new user and apply the configurations when you are connecting to this WireGuard server. Click tab and then Management Create a New User Specify the Name of the new client and then click (3) Get the configuration details for your client You can now check the list of the clients you added.

  • Page 54: Wireguard App Support

    If you are using another GL.iNet router as a client, please copy the JSON configuration and paste it directly when you are setting up WireGuard client. 7.2.4. Wireguard App Support You can also use WireGuard App on other devices with various OS Page 49 | 153...

  • Page 55: Visit Client's Lan Subnet

    Please refer to WireGuard Official Website： • https://www.wireguard.com/install/ 7.2.5. Visit Client’s LAN Subnet Visit Client’s LAN Subnet from WireGuard Server LAN Subnet 1) Change WireGuard clients LAN IP to avoid IP confliction with Server 2) Modify Wireguard_Server Configuration WinSCP or SSH into your the WireGuard Server (router) find and modify the file /etc/config/wireguard_server Add a line to the end of the config file of clients you want to visit.

  • Page 56: Settings

    As a result, they will not use VPN. Please Choose Policy: The item can be either Domain/IP (e.g. gl-inet.com / 192.168.1.1 / 192.168.1.0/24) or Mac address (24:F0:94:5C:8E:F9). Page 51 | 153...

  • Page 57: Add Vpn Policy

    Policy Domain/IP, choose Rule Only allow the following use VPN, input netflix.com and click Apply However, if we want to route all traffic through VPN except , we need gl-inet.com to add gl-inet.com under Do not use VPN for. Page 52 | 153...

  • Page 58: Clear Dns Cache

    7.3.3. Clear DNS cache If you are using domain-based policy, it may not work unless you clear your DNS cache. Please follow the instructions below to clear your DNS cache. Windows: Press Win + R and run cmd. Execute command ipconfig /flushdns MacOS: Open Terminal and execute command sudo killall -HUP mDNSResponder...

  • Page 59: Plug-Ins

    8.1. Plug-ins Plug-ins allows you to manage OpenWrt packages. You can install or remove any package. Remember to click whenever you access this packages repository. Update 8.2. Internet Kill Switch Internet Kill Switch feature is built-in from firmware version 3.100, please upgrade.

  • Page 60: Setup

    Note: With this option enabled, you need to set up the router as a VPN client for any of the router's clients to be able to connect to the internet. After this setting is on, the router needs to run the VPN client all the time, if the VPN client is not running, the clients are Not Allowed to access the Internet.
  • Page 61 3) Apply "Internet Kill Switch". Click "Apply" in the upper right corner. 4) Wait for the "Success" notice The “SUCCESS!” Message will pop-up if the Internet Kill Switch turn on correctly. Page 56 | 153...

  • Page 62: File Sharing

    8.3. File Sharing You can use GL.iNet routers with external storage device such as USB stick, MicroSD card, etc, thus the contents can be shared among all your connected clients. You can easily read or modify its contents. Page 57 | 153...

  • Page 63: Router Settings

    8.3.1. Router settings The contents of the external storage device are shared to LAN but not WAN and they are unwritable by default. Please click on your router model below to check how to change the file sharing settings of the router. Page 58 | 153...
  • Page 64 Supported external storage models Router Model USB Hard MicroSD Internal Stick Drive Card Storage GL-MT3000 (Beryl √ √ GL-AXT1800 (Slate √ √ √ GL-A1300 (Slate √ √ Plus) GL-MT2500/GL- √ √ MT2500A (Brume 2) GL-SFT1200 √ √ GL-MT300N-V2 √ √ (Mango) GL-AR150 Series √...
  • Page 65 Router Model USB Hard MicroSD Internal Stick Drive Card Storage GL-AR750S-EXT √ √ √ (Slate) GL-B1300 √ √ (Convexa-B) GL-S1300 √ √ (Convexa-S) GL-X750 (Spitz) √ √ √ GL-X1200 (Amarok) √ √ √ GL-E750 (Mudi) √ √ √ GL-MV1000 (Brume) √...

  • Page 66: Access The Storage Device

    Router Model USB Hard MicroSD Internal Stick Drive Card Storage GL-X300B (Collie) GL-SF1200 microuter-N300 VIXMINI Note: The power consumption of USB hard drive is quite high. You should use it with an external power supply. Otherwise, it may cause malfunction. 8.3.2.
  • Page 67 are limited by the or a flag on a share (and having multiple Writable Public Write shares would be great as well). Windows Method 1: Samba 2.0 (SMB2.0) Support We suggest Samba 2.0 support for Windows 10 users. Due to the security vulunerabilitiy of the Samba1.0 protocol, Samba1.0 is not enabled by default in Window 10.
  • Page 68 4). Open 'This PC' and type , such as \\your router IP Address \\192.168.8.1 5). You can view files in your USB flash drive through GL.iNet router now. Method 2: Samba 1.0 (SMB1.0) Support: 1) Your network must be Home/Private. Otherwise you may not be able to see your router in Network.
  • Page 69 3.0 firmware supports SMB2, and if you need SMB3, use WinSCP to router, edit /etc/samba/smb.conf.template Change the "max protocol = SMB2" to "min protocol = SMB1" "max protocol = SMB3", then save and exit WinSCP. Page 64 | 153...
  • Page 70 If you are using Windows 10, you also need to enable SMB 1.0. Windows 7 • Go to Control panel -> Network and Internet -> Network and Sharing Center. Find if your active network is Home network. If not, click it and change it to Home network.
  • Page 71 2) Open a Windows explorer, you can find Network in the folder directory. Double click your router to access its contents. Mac OS Method 1 1) Open Finder, Menu -> Go -> Connect to Server... Page 66 | 153...
  • Page 72 2) Input , you need to change this if your router IP address is not smb://192.168.8.1 192.168.8.1 Page 67 | 153...
  • Page 73 3) Click Connect. 4) Input username and password, they are the same when you login Web Admin Panel. 5) Then Finder will display files of USB disk. Page 68 | 153...
  • Page 74 Method 2 1) Go to System Preferences -> Sharing -> File sharing. Click and then Options enable SMB. 2) Open Finder. You should be able to find your router under Shared. You have to use file manage app to access the contents of your external storage device.
  • Page 75 Page 70 | 153...
  • Page 76 2) Enter the IP address of your router (192.168.8.1). The User Name is root and the Password is the one that you use to login the web Admin Panel. Finally, click Save Page 71 | 153...
  • Page 77 3) Click your newly created connection to access the contents. Page 72 | 153...
  • Page 78 Linux If you are using Linux you are probably comfortable with connecting to servers, and how to do this can vary greatly from distribution to distribution and largely depends on your window manager/display environment. Most systems come with Gnome and it is the default on the very popular Ubuntu distribution, so we'll give an example using the Files tool (also called Nautilus).
  • Page 79 Once you have installed the app you can launch it from that page, and if you want to access it again in the future, in the Files app if you go to the 3 dot menu at the top right and "Add new service" you then select "File System for Windows" from the list and it will give you the dialog to fill out with the server name and some other details, but only the server name/IP and share name are required.
  • Page 80 2) Click to find your network storage device. Scan Page 75 | 153...
  • Page 81 Page 76 | 153...
  • Page 82 Page 77 | 153...

  • Page 83: Dlna Server

    8.4. DLNA Server Some of GL.iNet routers support DLNA Server, but this is not a default function. You need to install a little plug-ins to make it workable. Supporting List: GL-AR750S-Ext, GL-AR750, GL-MT1300, GL-MT300N-V2, GL- AR300M series, GL-AR150 series, GL-MiFi and GL-X750 8.4.1.

  • Page 84: Use The Dlna Server In Gl.inet Routers

    8.4.2. Use the DLNA server in GL.iNet Routers After Installation of two applications, you can now use your GL.iNet router as as DLNA server. 1. Make suer you already has a TF card inserted into the card slot before you power up your router.
  • Page 85 In Windows File Explorer -> Network IOS: Install VLC or UPNP Extreme in App Store: Page 80 | 153...
  • Page 86 You can easily find the OpenWrt DLNA Sever in UPNP: UPNP Extreme and VLC Installation | UPNP Setup: VLC Setup: Step 1： Click the Traffic Cones Logo on the left top, select Local Network Page 81 | 153...
  • Page 87 Page 82 | 153...
  • Page 88 Step 2: You can find the OpenWrt DLNA Server easily in Local Network. Page 83 | 153...
  • Page 89 Page 84 | 153...

  • Page 90: Ddns

    Also other devices can easily find the OpenWrt DLNA Server easily. Enjoy your media DLNA Server by GL.iNET routers. 8.5. DDNS Dynamic Domain Name Service (DDNS) is a service used to map a domain name to the dynamic IP address of a network device. Setup DDNS requires firmware v3.010 or higher.
  • Page 91 The DDNS domain printed on the back label of router has changed. If your DDNS url is on the back of router, new DDNS url will xxxxxxx.gl-inet.com xxxxxxx.glddns.com 3) Check if DDNS is enabled command to check if your DDNS is enabled. You need to...
  • Page 92 nslookup xx5007c.glddns.com 8.8.8.8 The output above means the DDNS url has maped to a IP address. 4) HTTP Remote Access This function requires a public network IP. If your router is behind NAT, you may need to set up port forward in higher level router.
  • Page 93 After you enable HTTP Remote Access, you can access Admin Panel anywhere by your DDNS url of http, e.g. . If you use port forward, you http://xxxxxxx.glddns.com should be access like http://xxxxxxx.glddns.com:YourExternalPort 5) HTTPS Remote Access This function requires a public network IP. If your router is behind NAT, you may need to set up port forward in higher level router.
  • Page 94 Page 89 | 153...
  • Page 95 As show above, click "Advanced Page 90 | 153...
  • Page 96 As show above, click "Processed to xxxxxxx.glddns.com (unsafe)". After you enable HTTPS Remote Access, you can access Admin Panel anywhere by your DDNS url of https, e.g. . If you use port forward, https://xxxxxxx.glddns.com you should be access like https://xxxxxxx.glddns.com:YourExternalPort 6) SSH Remote Access This function requires a public network IP.

  • Page 97: Cloud

    After disable DDNS, the interface is like above. 8.6. Cloud Introduction GL.iNet GoodCloud cloud management service provide an easy and simple way to remotely access and manage routers. Check live router status Live online offline status check • Page 92 | 153...

  • Page 98: Setup

    Live RAM and Load Average check • LTE Signal • Email alarm about online offline status update • Set up routers remotely Set up routers (e.g. SSID and Key) remotely • Monitoring clients on routers remotely Check who is on your network •...
  • Page 99 Local upgrade Open a web browser (we recommend Chrome) and to access router Web Admin Panel (default url is http://192.168.8.1). At the left side, UPGRADE -> Local Upgrade, select the firmware file you download, you can turn off "Keep Settings" for more stable, click "Install" button. It takes several minutes to install.
  • Page 100 Follow the steps above, to enable cloud management feature, choose the Data Server which is nearest your devices located. There are three Data Server, 'Global', 'America' and 'Europe'. If your devices are neither in America nor in Europe, just select 'Global'. Global Data Server is at Japan. Create GoodCloud account Visit https://www.goodcloud.xyz...
  • Page 101 Add a new group On the left side -> Groups List -> Add group. Follow the steps below to add a new group. Set the group name, company, description and location. Each device must belong to a group. Page 96 | 153...
  • Page 102 Add device On the left side -> Devices List -> Add Device. There are three methods to bind device to GoodCloud, "Auto discover", "Manually add" and "Bulk import". Auto discover Follow the steps below to add your device. If the router and PC (which opened goodcloud.xyz page) are at the same public IP，it will be automatically discovered, and can be found when click "Device"...
  • Page 103 Manually add If it can't discover automatically, try "Manually add". All information that need to input can be found on the back of the router. PS: Input "MAC", "SN" and "DDNS" / "Device ID" here just to verify that the router is really original and valid.
  • Page 104 For some new models, DDNS has been changed to Device ID on the back of router. Bulk import "Bulk import" is for user who have a great number of devices to add. By "Bulk import" you can import many devices by a Microsoft excel file. Page 99 | 153...
  • Page 105 Binded info on router Web Admin Panel After you seccessfully add router to GoodCloud, go back to router Web Admin Panel, APPLICATION -> Remote Access -> Cloud Management, press 'F5' to refresh this page, It will display the binded GoodCloud username, hover the username it will show the corresponding GoodCloud email account.

  • Page 106: Manage Your Devices

    Unbind router If you want to unbind router, click Unbind button. If you have any difficulties, please send email to admin@goodcloud.xyz for help. Manage your devices devices info and status Sign in Goodcloud, check at left side -> Device List Page 101 | 153...
  • Page 107 there is icon at the first column of this table, means this device is online. means this device is offline. means this device is deactivated, it has never connected to GoodCloud before. Page 102 | 153...
  • Page 108 Select the column you want to display. "Online time" is the latest time when device connected GoodCloud. "Offline time" is the latest time when device disconnected GoodCloud. "Update time" is the latest time when device connected or disconnected GoodCloud. IP, if your router run VPN client, this IP will be your VPN IP by default. Learn More LTE Signal Only available for 4G devices, e.g.
  • Page 109 It will show Signal strength, Type, and relavant parameters. Device detail info At left side -> Device List, click the name of a online device, it will open a page to manage this device of WiFi, Clients and view router info, memory usage, up time, load average and log.
  • Page 110 Device info WiFi Modify all WiFi settings. Page 105 | 153...
  • Page 111 Router status Client list Timeline Timeline tab display the activities of router, and messages uploaded by the router's associated IoT device. Set email alarm You can set email alarm when a device is online, offline, and new client connected. At left side -> Setting -> Alarm Setting, create alarm rules Page 106 | 153...

  • Page 112: Site To Site

    Then set the email you want to receive notification. To ensure you get email successful, please add admin@goodcloud.xyz to your email address book. Site to Site Site to Site only support firmware v3.026 and above. Page 107 | 153...
  • Page 113 IP camera. What conditions do I need to create Site to Site? One of the loations has a public static(or dynamic) ip, and two or more GL-iNet devices with latest testing firmware. Steps to build a Site to Site network.
  • Page 114 Defaul port is 51830, if you want to use another port, find the Advanced option at the lower left corner. Due to device's performance, each Site to Site network can have up to 10 devices. After you had chosen the devices, click Continue. Then, it will test each device if it can be set as the Main Node of Site to Site.
  • Page 115 We suggest that the router with strong performance and best network speed to be the Main Node. If none of the devices can be used as the Main Node, make sure that: One of routers has a public IP, either static public IP or dynamic public IP. •...
  • Page 116 If there are more than one device can be set as the Main Node, you need to choose one to continue. Page 111 | 153...
  • Page 117 If there is only one device can be set as the Main Node, it will go to the Site to Site detail page directly. The network is stopped by default, check the LAN IP, if it is OK then you need to click Start button, otherwise click Setting to change LAN IP.
  • Page 118 Wait a few minutes, the node's connect status will display as lines. Solid line means connected, dashed line means disconnected. Page 113 | 153...
  • Page 119 Testing the Site to Site connection Now the Site to Site network is created and started, let's test the connection. Use your PC or Phone to connect to one of the Node of this Site to Site, and use browser to access another Node's LAN ip, if you see the login page, the connection between these two nodes is worked.
  • Page 120 E.g. There is a Server A(172.30.97.100) in Node 1's subnet, if you want other Site to Site nodes only can access Node 1's Service A, you can set it like below: You can add node's parent routes too. Each sub Node build an encrypted tunnel netwrok to Main Node, if you want to change the IP of tunnel subnet.

  • Page 121: Batch Setting

    Batch Setting You can use this feature to configure multiple parameters for a single device, or you can configure multiple parameters for multiple devices. PS: This feature is only available to business users. Batch Setting of Single Device To configure single device, as show below. Page 116 | 153...
  • Page 122 The left side of image below is correct. If your interface is like the right side of image below, please upgrade to latest testing firmware. Check the configuration that needs to be modified and input value. The checked configuration is required, and only the configuration that conforms to the rule can be filled out.
  • Page 123 above figure. After the configuration is completed, the device will restart immediately. Preview the configuration and confirm the delivery. Unchecked Restart now option will prompt. Batch Setting of Mutiple Device Select the devices you want to configure. Page 118 | 153...

  • Page 124: Template Management

    Other operations are the same as when operating a single device. Other Batch Operations Other Batch Operations: Move to other group, upgrade, restart, delete. Template Management Save frequently used configurations as templates and quickly apply them when you modify configurations in batches. PS: This feature is only available to business users.
  • Page 125 Give the template a name and description. Page 120 | 153...

  • Page 126: Task List

    Task List At task list page, it shows the execution result of the configuration template. PS: This feature is only available to business users. You can view the execution result of each device and configuration. Page 121 | 153...

  • Page 127: Ble Mqtt Bridge

    BLE MQTT Bridge Bluetooth Low Energy (BLE) is widely used for smart home, wearable and IoT sensors. This feature is for GL.iNet BLE gateway, GL-X750 Spitz and GL-S1300 convexa S which has built-in BLE modules. Read this to learn how to use them forward your BLE data to the cloud based on MQTT protocol, including GL.iNet GoodCloud and AWS IoT.

  • Page 128: Disable

    Disable To stop GoodCloud service, turn it off on router Web Admin Panel. Please follow the steps below. No action needed on the GoodCloud website. Page 123 | 153...
  • Page 129 After disable Cloud, the interface is like above. Turn on Captive Portal Open a web browser (we recommend Chrome) and to access router Web Admin Panel(default url is http://192.168.8.1). At the left sidebar, APPLICATIONS -> Portal, follow the steps below to enable Captive Portal.
  • Page 130 3) Set free internet time. 4) Certification URL is the default page that clients will force redirect to when they are connected, e.g. https://www.gl-inet.com 5) Apply the configuration. For wired desktop client, please use browser to access a http(not https) website, e.g.

  • Page 131: More Settings

    Change the default page The default page is located , use SSH or WinSCP to /etc/nodogsplash/htdocs/ change this page. For more information about how to use SSH and WinSCP, please access this. You may need basic HTML and CSS knowledge to change this page, please learn these from w3school or other sites.

  • Page 132: Lan Ip

    9.2. LAN IP LAN IP is the IP address that you use to connect to this router. The default IP address of GL.iNet router is 192.168.8.1. If it conflicts with the IP address of your main router, you can change it. 9.3.

  • Page 133: Mac Clone

    9.4. MAC Clone Clone the MAC address of your current client to the router. It is used especially in hotel when the network checks your MAC address. For example, if you got your smartphone registered on the network, you can clone the MAC address of your smartphone to the router so that the router can also connect to the network.

  • Page 134: Custom Dns Server

    9.5. Custom DNS Server You can configure the DNS server of the router in order to prevent DNS leak or other purposes. DNS Rebinding Attack Protection: Some network may require authentication in captive portal. Disable this option if the captive portal of your network cannot be resolved.

  • Page 135: Network Mode

    9.7. Network Mode Change the network mode to cater your usage scenario. You may need to reconnect your client device whenever you change the network mode of the router. Be aware that you may not be able to access the web Admin Panel with the default IP 192.168.8.1 if you use the router in Access Point, Extender or WDS mode.

  • Page 136: Revert Firmware

    9.8. Revert Firmware Revert the router to factory default settings. All your settings, applications and data will be erased. Page 131 | 153...

  • Page 137: Advanced

    9.9. Advanced Click to direct to Luci which is the default web interface of OpenWrt. Advanced You can check the detailed system log or conduct more advanced configurations there. Note: The username is root. The password is same as the one that you use to access the web Admin Panel.

  • Page 138: Troubleshooting

    10.Troubleshooting 10.1 LED Indicators LED Status Indication GL-MT1300/ SFT1200 Solid blue light: Device is powering up. • Solid white light: Network is connected. • Slowly growing blue light: Network disconnects/ No cable connection. • Fast flashing blue light: In reset process. •...

  • Page 139: Repair Or Reset

    Then please choose System > LED Configuration. 10.2 Repair or Reset How to Repair / Reset All GL.iNet Routers have reset buttons, you can use them to repair your network or reset your routers to factory defult. If you can neither access the web-based setup page nor the router, you can press the button: Repair reset...

  • Page 140: Debrick Via Uboot

    Reset Press and hold for 10 seconds then release to reset the router to factory settings. All user data will be cleared. Reset Button GL-SFT1200 Travel AC Router 10.3 Debrick via Uboot Using Uboot to Debrick Your Router You may have bricked your router if you were doing some DIY projects or flashed a wrong firmware.
  • Page 141 You can also refer to our video, How to Recover GL.iNet Mini Router by U-Boot FailSafe. 1. First you have to download firmware to your computer. You can download the firmware here. For GL-AR300M, GL-AR300M-Ext, GL-AR750S-Ext, GL-E750, GL-X1200, please download the .img firmware file.

  • Page 142: Windows 7 / Windows 10

    • slowly, then light 5 times a bit quick and turn to white and stay on. For GL-SFT1200(Opal), the blue LED flashes 5 times • then turns white and stay on. For GL-B2200, the two LEDs are blue at first, then turn •...

  • Page 143: Mac

    a. Go to System Preferences -> Network. b. Chooose Ethernet -> Advanced -> TCP/IP. c. In Configure IPv4, choose Manually. d. Set the IPv4 Address to 192.168.1.2 manually. 6. Use Firefox or Chrome to visit http://192.168.1.1. 7. Click Choose File to find the firmware file. Then click Update firmware. For GL-AR300M, GL-AR300M-Ext, GL-AR750S-Ext, please download the .img firmware file and upload to the NAND Page 138 | 153...

  • Page 144: Change Wan To Lan

    flash. 8. Wait for around 3 minutes. Don’t power off your device when updating. The router is ready when both power and Wi-Fi LED are on or you can find its SSID on your device. 9. Revert the IP setting you did in step 6 and connect your device to the LAN or Wi-Fi of the router.
  • Page 145 1. Leave the WAN port of the router unconnected. 2. Connect your device to the router and access the web Admin Panel. 3. Go to Internet, click Use as LAN under the Cable section. 4. Click Yes to confirm. Page 140 | 153...

  • Page 146: Captive Portal

    You can simply revert the setting by repeating the above procedures. This time, it will show Use as WAN in step 3. 10.5 Captive Portal Connect to a Hotspot with Captive Portal Some public hotspots especially those in hotel, cafe or airport, require you to input your authentication information or agree the terms and conditions through a web page (Captive Portal) before you can connect to it or access the Internet.
  • Page 147 2. Go to Admin Panel -> MORE SETTINGS -> Custom DNS Server. Then, disable DNS Rebinding Attack Protection. Page 142 | 153...

  • Page 148: Gl.inet App

    3. Use your web browser to visit a webpage, it will be redirected to the captive portal of the hotspot automatically. If you are using smartphone but your web browser doesn't redirect to the captive portal. Please turn off the Wi-Fi of your smartphone and then turn it on and reconnect to the Wi-Fi of your router again.
  • Page 149 Then click the Upgrade on the left side. Some models don't have V3.100 release firmware yet, please try testing(pre- release) firmware. Please find the download info at Firmware Release page. Page 144 | 153...

  • Page 150: Access Web Panel

    10.7 Access Web Panel Sometimes you may be unable to access 192.168.8.1 to login web admin panel, please follow the guide below to solve this problem. Check connection/router's IP address Make sure your WAN/LAN port connection is correct. WAN port is connected to an internet source and LAN port is connected to devices.

  • Page 151: Extensible Authentication Protocol (Eap)

    10.8 Extensible Authentication Protocol (EAP) Introduction You can connect to EAP (Extensible Authentication Protocol) Wi-Fi network which requires username and password authentication on GL.iNet routers. This guide is how to connect an EAP Wi-Fi network via GL admin panel. Supported models: GL-AR300M Series, GL-USB150, GL-AR750, GL- •...

  • Page 152: Connect Via Web Panel

    Connect via web panel 1. Visit the Admin Panel Visit the Admin Panel and click “Scan” in the Internet -> Repeater. You can find and connect to the EAP SSID to connect directly. Page 147 | 153...
  • Page 153 2. SSID Or choose “Other” in the drop-down list of SSID, then select EAP type in Wi-Fi Security drop-down list. 3. Wi-Fi Security Currently, we only support two types: 802.1X EAP/WAP and 802.1X EAP/WAP2. Page 148 | 153...
  • Page 154 4. Type Choose 2.4G or 5G. 5. User Name and Password Enter your User Name and Password and then click join. Page 149 | 153...

  • Page 155: Connect Via Luci

    Connect via Luci Our web page only supports few EAP types for now so you may need to connect via Luci page in most situations. 1. Visit the Luci page Go to MORE SETTINGS->Advanced. Input your web password. Then you will enter luci page. Page 150 | 153...
  • Page 156 2. Connect to EAP wifi Go to Network->Wifi(or Wireless). Click 'Scan' on 2.4G section or 5G section. Page 151 | 153...
  • Page 157 Join the network you want. 10.9 GoodCloud issues How to fix if my device show "Deactivated" The "Deactivated" mean the device never been connected to the server before. Page 152 | 153...
  • Page 158 1. Make sure the router has connected to the Internet. 2. And try to disable and re-enable the GoodCloud on router's Admin Panel. Don't forget to click "Apply" button. 3. Make sure to access to the right region of GoodCloud. Page 153 | 153...

This manual is also suitable for:

Gl-sft1200

Table of Contents