Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
To reach your home network while you’re away, set up a WireGuard server on a compatible home router, create a separate client profile for each device, and connect from a different network to test it. First confirm that the router can be reached from the internet: a server behind another router may need port forwarding at each router, and an internet connection without a publicly reachable address may not accept incoming connections.
This guide covers remote access back to your home network. A router running a WireGuard client to send its traffic through a commercial VPN service is a different configuration. WireGuard is peer-to-peer; “server” and “client” here describe the practical roles of the home router and the device connecting to it.
Check your router and internet connection first
WireGuard setup depends on the router’s model, firmware, interface, and network position. GL.iNet’s instructions below apply to its firmware 4 interface; they are not the standard OpenWrt menu steps. For OpenWrt, use its separate WireGuard peer documentation and follow the instructions that match your device and firmware.
- Confirm server support. Check that your exact router model and installed firmware include a WireGuard server feature. Do not assume a router supports hosting a server just because it can run a VPN client.
- Map the router’s place in the network. Determine whether it is the primary router connected to the internet or sits behind an ISP gateway or another router.
- Check inbound reachability. GL.iNet’s documented server setup requires a public IP. If the router has no publicly reachable address—for example, because the ISP uses carrier-grade NAT—the ordinary setup may not be reachable from outside. Ask the ISP whether a public address is available or consider another network design that provides inbound reachability.
- Choose the listening port and protocol in the router. Make sure any forwarding rules use the same protocol and port as the server configuration. The port-forwarding interface’s relevant fields include protocol, external port, internal zone or address, and internal port; consult the router’s documentation rather than assuming one universal port. See GL.iNet’s port-forwarding guide.
An ISP may block a chosen port, and local rules or regional restrictions may also prevent a connection. These are separate from whether the router’s WireGuard settings are correct.
Free tools Windows power users keep installed
One-click scans. No signup required.
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
#1 Best Overall
GL.iNet GL-SFT1200 Opal Travel Router, AC1200 Dual-Band Wi-Fi
- 【AC1200 Dual-band Wireless Router】Simultaneous dual-band with wireless speed up to 300 Mbps (2.4GHz) + 867 Mbps (5GHz). 2.4GHz band can handles some simple tasks like emails or web browsing while bandwidth intensive tasks such as gaming or 4K video streaming can be handled by the 5GHz band.*Speed tests are conducted on a local network. Real-world speeds may differ depending on your network configuration.*
- 【Easy Setup】Please refer to the User Manual and the Unboxing & Setup video guide on Amazon for detailed setup instructions and methods for connecting to the Internet.
- 【Pocket-friendly】Lightweight design(145g) which designed for your next trip or adventure. Alongside its portable, compact design makes it easy to take with you on the go.
- 【Full Gigabit Ports】Gigabit Wireless Internet Router with 2 Gigabit LAN ports and 1 Gigabit WAN ports, ideal for lots of internet plan and allow you to connect your wired devices directly.
- 【Keep your Internet Safe】IPv6 supported. OpenVPN & WireGuard pre-installed, compatible with 30+ VPN service providers. Cloudflare encryption supported to protect the privacy.
Forward traffic through upstream routers
If the WireGuard router is downstream of an ISP gateway or another router, incoming traffic must be passed through those upstream devices to reach it. Configure a forwarding rule on the upstream router that directs the WireGuard server’s listening port and protocol to the WireGuard router. With multiple router layers, each intervening router may need a corresponding rule.
Use the internal address assigned to the WireGuard router on the upstream network, and verify the rule’s external port, internal port, and protocol against the server settings. A forwarding rule on the inner router alone cannot make a server reachable if an outer gateway still blocks the incoming traffic.
Rank #2
GL.iNet GL-MT6000 Flint 2 Wi-Fi 6 Gaming Router Dual 2.5G Ports
- Please update the firmware upon initial setup of the router, as it greatly enhances the device's performance and ensures a superior user experience.*** 【WiFi 6 Standard with ultra-low latency】Wi-Fi 6 speeds up to 6 Gbps to let you enjoy smoother 4K streaming, gaming, video calls and more, DDR4 1GB / eMMC 8GB
- 【High Speed Gaming Router】Dominate with uninterrupted performance with the ultimate MT6000 gaming internet router, equipped with 8-stream Wi-Fi 6 technology, the Flint 2 delivers blazing speeds, ensuring a stable and high-speed connection during intense multiplayer battles.
- 【Rapid OpenVPN & Wireguard speed】Wireguard VPN and OpenVPN speeds up to 900Mbps and 880Mbps respectively, giving you complete control over your gaming, streaming and working bandwidth. Actual speed may differ depending on internet service provider, network environment, VPN server location, VPN service provider, etc.
- 【AdGuard Home Supported】Enabling the use of a DNS server for blocking unwanted tracking and offers a convenient web interface for filtering selected digital advertisements. Users can take full control of their online experience and enjoy a clutter-free browsing environment with ease.
- 【Mass device connectivity】Experience enhanced online connectivity with our higher storage capacity, catering to over a hundred devices and fulfilling the requirements of DIY users seeking to install additional plugins. Enjoy stable and reliable connections, ensuring seamless performance and accommodating a wide range of digital needs.
Set up a WireGuard server on GL.iNet firmware 4
The following path is specific to GL.iNet’s firmware 4 documentation. Other brands and standard OpenWrt installations use different interfaces and instructions.
- Open the server page: sign in to the router’s web admin panel and go to VPN → WireGuard Server.
- Generate the initial configuration: create the server configuration and review its defaults. Change advanced settings only when your network or intended routing requires it.
- Set routes only as needed: add route rules for the use case you want. For example, reaching home-network devices and routing all client internet traffic through home are different traffic-routing choices.
- Create a client profile: add a profile for the phone, laptop, or compatible travel router that will connect back home. Export that profile as a QR code, plain text, or a
.conffile, then import it into the WireGuard app or compatible router. - Choose the server address in the exported profile: GL.iNet documents that, since firmware 4.8, the address can be selected from a public IP, DDNS domain, or current WAN IP. Use an address that remote clients can resolve and reach; if the home public IP changes often, a DDNS domain can help. Confirm the available options and behavior in the installed firmware.
- Start the server: enable the server in the router interface after reviewing the configuration and any necessary forwarding rules.
A client configuration contains the peer settings needed to connect. Keep exported profiles private, and share each only with the device or person meant to use it.
The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #3
GL.iNet GL-MT3000 Beryl AX Wi-Fi 6 Travel Router, 2.5G WAN, VPN, OpenWrt
- 【DUAL BAND AX TRAVEL ROUTER】Products with US, UK, EU Plug; Dual band network with wireless speed 574Mbps (2.4G)+2402Mbps (5G); 2.5G Multi-gigabit WAN port and a 1G gigabit LAN port; USB 3.0 port; Wi-Fi 6 offers more than double the total Wi-Fi speed with the MT3000 VPN Router.
- 【VPN CLIENT & SERVER】OpenVPN and WireGuard are pre-installed, compatible with 30+ VPN service providers (active subscription required). Simply log in to your existing VPN account with our portable wifi device, and Beryl AX automatically encrypts all network traffic within the connected network. Max. VPN speed of 150 Mbps (OpenVPN); 300 Mbps (WireGuard). *Speed tests are conducted on a local network. Real-world speeds may differ depending on your network configuration.*
- 【OpenWrt 21.02 FIRMWARE】The Beryl AX is a portable wifi box and mini router that runs on OpenWrt 21.02 firmware. It supports more than 5,000 ready-made plug-ins for customization. Simply browse, install, and manage packages with our no-code interface within Beryl AX's Admin Panel.
- 【PROTECT YOUR NETWORK SECURITY】Our pocket wifi, unlike other vulnerable portable wifi hotspot for travel purposes supports WPA3 protocol–Preventive measures against password brute-force attacks; DNS over HTTPS & DNS over TLS–Protecting domain name system traffic and preventing data eavesdropping from malicious parties; IPv6–Built-in authentication for privacy protection, eliminating the need for network address translation.
- 【VPN CASCADING AT EASE】Surpassing the mediocre performance of most VPN routers for home usage, the Beryl AX is capable of hosting a VPN server and VPN client at the same time within the same device, enabling users to remote access local network resources like Wi-Fi printers or local web servers, and accessing the public internet as a VPN client simultaneously.
Connect and test from outside your home
- On the phone or other client device, leave your home Wi-Fi. For a phone, turn Wi-Fi off and use cellular data; alternatively, connect from a different network.
- Import the profile you exported from the router into the WireGuard app or compatible router, then start the tunnel.
- Try to reach a resource on your home network. This checks access to the home LAN, not just whether a profile was imported.
- If the profile routes all internet traffic through home, check the client’s apparent public IP and confirm that it matches the expected home connection.
Testing on home Wi-Fi does not verify that the router is reachable from the internet. Use a genuinely separate connection for this check.
Troubleshoot a connection that will not start
Check the likely network and configuration failures in this order:
Rank #4
GL.iNet GL-MT3600BE Beryl 7 Dual-Band Wi-Fi 7 Travel Router
- 【DUAL BAND WIFI 7 TRAVEL ROUTER】Products with US, UK, EU, AU Plug; Dual band network with wireless speed 688Mbps (2.4G)+2882Mbps (5G); Dual 2.5G Ethernet Ports (1x WAN and 1x LAN Port); USB 3.0 port. Enjoy gaming and streaming across up to 120 devices.
- 【HIGH SPEED VPN CLIENT & SERVER】Max. VPN speed of 1100 Mbps (WireGuard); 1000 Mbps (OpenVPN-DCO). OpenVPN and WireGuard are pre-installed, compatible with 30+ VPN service providers (active subscription required). Simply log in to your existing account with our portable wifi device, and Beryl 7 automatically encrypts all network traffic within the connected network. *Speed tests are conducted on a local network. Real-world speeds may differ depending on your network configuration.*
- 【OpenWrt 21.02 FIRMWARE】The Beryl 7 (GL-MT3600BE) is a high-performance Wi-Fi 7 travel router, built with OpenWrt 21.02 (Kernel 5.4.281) for maximum customization and advanced networking capabilities. With 512MB storage, total customization with open-source freedom and flexible installation of OpenWrt plugins.
- 【PERFECT PORTABLE WIFI ROUTER FOR TRAVEL】The Beryl 7 is an ideal international wireless portable wifi travel router. With its mini size and travel-friendly features, the pocket Wi-Fi router is the perfect companion for travelers in need of a secure internet connectivity on the go. portable wi-fi for traveling, hotels or cruise ships.
- 【PROTECT YOUR NETWORK SECURITY】Our pocket wifi, unlike other vulnerable portable wifi hotspot devices for travel purposes supports WPA3 protocol–Preventive measures against password brute-force attacks; DNS over HTTPS & DNS over TLS–Protecting domain name system traffic and preventing data eavesdropping from malicious parties; IPv6–Built-in authentication for privacy protection, eliminating the need for network address translation.
- Confirm public reachability. Make sure the home connection has an address reachable from the internet. If it does not, ordinary inbound forwarding may not work.
- Check the endpoint address. Verify that the public IP or DDNS name in the client profile points to the current home connection.
- Verify every forwarding rule. On each required upstream router, confirm the destination is the WireGuard router’s correct internal address and that the port and protocol match the server settings.
- Make sure the server is running. Check the router’s WireGuard server status.
- Refresh or re-import the client profile. Confirm the exported configuration is complete and current, and that the client is using the intended profile.
- Compare network subnets. Overlapping or conflicting LAN IP subnets between the home server network and the client’s current network can prevent access. GL.iNet lists this as a possible cause in its WireGuard server troubleshooting guide.
- Consider filtering or restrictions. If the configuration and routing are correct, the ISP may block the selected port, or local rules or regional restrictions may be interfering.
If your router cannot host WireGuard
A router with a built-in WireGuard server is one possible replacement or addition, but suitability depends on exact model and firmware compatibility, whether it will be the primary router or a downstream VPN appliance, and whether your internet connection permits inbound access. The official setup instructions establish this as a product category, not a model comparison; verify those requirements before choosing hardware.
Quick Recap
Bestseller No. 1
Bestseller No. 2
Bestseller No. 4
Best Value
Sale
GL.iNet GL-BE3600 Slate 7 Wi-Fi 7 Travel Router Touchscreen 2.5G
- 【DUAL BAND WIFI 7 TRAVEL ROUTER】Products with US, UK, EU, AU Plug; Dual band network with wireless speed 688Mbps (2.4G)+2882Mbps (5G); Dual 2.5G Ethernet Ports (1x WAN and 1x LAN Port); USB 3.0 port.
- 【NETWORK CONTROL WITH TOUCHSCREEN SIMPLICITY】Slate 7’s touchscreen interface lets you scan QR codes for quick Wi-Fi, monitor speed in real time, toggle VPN on/off, and switch providers directly on the display. Color-coded indicators provide instant network status updates for Ethernet, Tethering, Repeater, and Cellular modes, offering a seamless, user-friendly experience.
- 【OpenWrt 23.05 FIRMWARE】The Slate 7 (GL-BE3600) is a high-performance Wi-Fi 7 travel router, built with OpenWrt 23.05 (Kernel 5.4.213) for maximum customization and advanced networking capabilities. With 512MB storage, total customization with open-source freedom and flexible installation of OpenWrt plugins.
- 【VPN CLIENT & SERVER】OpenVPN and WireGuard are pre-installed, compatible with 30+ VPN service providers (active subscription required). Simply log in to your existing VPN account with our portable wifi device, and Slate 7 automatically encrypts all network traffic within the connected network. Max. VPN speed of 100 Mbps (OpenVPN); 540 Mbps (WireGuard). *Speed tests are conducted on a local network. Real-world speeds may differ depending on your network configuration.*
- 【PERFECT PORTABLE WIFI ROUTER FOR TRAVEL】The Slate 7 is an ideal portable internet device perfect for international travel. With its mini size and travel-friendly features, the pocket Wi-Fi router is the perfect companion for travelers in need of a secure internet connectivity on the go in which includes hotels or cruise ships.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
Recommended: PC Feels Slow? A Free Scan Shows What's Dragging Windows Down →Recommended: Crashes or Glitches? A Free Driver Scan Usually Finds the Culprit →
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
