Skip to main content

Setup VPN protected Private Wifi out of Public Wifi

Setup VPN secured Private Wifi from Public Wifi

A word on Privacy

While you are travelling, it is essential that you connect your mobile phone or laptop to Public Wifi especially in Airports, Hotels, Cafe's, Malls etc. Remember quite a lot of your personal information is exposed by such direct connections and is quintessential you isolate your personal device from public Wifi even if you have VPN. It is recommended to turn-off WiFi , BlueTooth during the course of journey but until unless you need it.

What are we trying to do

So the aim of this article is to ensure that you detach your device from public network as below. 

So using the GL.inet device, we will 

  • Accept a Public Network connection (WAN) via wired or wireless
  • Apply VPN settings
  • Create a separate Private Network (LAN) which your personal devices can connect to


  • OpenWRT based devices (such as GL-MT300N, GL-MT1300 Beryl etc
  • LAN cable (for first time setup) is highly recommended
  • VPN connection (eg NORDVPN, SurfShark etc). Read about VPN reviews before you buy


  • Secure Connection before your device (laptop/mobile etc) is exposed to Public Wifi
  • Ability to put VPN on the router thus connecting multiple devices at same time securely
  • VPN means you can override content restrictions on all these multiple devices
  • Ability do do Chromecast/Miracast etc, thus securely watch streaming media
  • Can simulate to your device that you are based on specific country based on VPN information (especially if you want to work from Remote geography, but your Company disallow such locations)


The setup process is written for GL.inet device, but should work with any device with OpenWrt installed

Reset GLI device, for first time setup connected using LAN (wired) to laptop and disconnect any wifi from laptop for lesser confusion! It is better to do first time configuration at home before you travel
  • Login to (GL.inet devices usually have this IP) and create the credentials. Go to Main page.
  • Setup the Private Wifi LAN (you could retain the SSID if need be to be GL-xxx-xxx). This is a ONE off step. This means the GLI device assign you a separate LAN IP range than the Public WAN/wifi range.

Connect to Public Wifi

Final Look once setup is complete

  • Setup the Internet -> Repeater -> Connect to your Public Wifi with creds -> Ensure it connects. This step needs to be done every-time when you connect to NEW Public wifi
  • You can load up OpenVPN files (eg NORDVPN) if need be and the Private Wifi/LAN will load these settings.

Popular posts from this blog

Create your own Passport Photo using GIMP

This tutorial is for semi-techies who knows a bit of GIMP (image editing).   This tutorial is for UK style passport photo ( 45mm x 35 mm ) which is widely used in UK, Australia, New Zealand, India etc.  This is a quick and easy process and one can create Passport photos at home If you are non-technical, use this link   .  If you want to create United States (USA) Passport photo or Overseas Citizen of India (OCI) photo, please follow this link How to Make your own Passport Photo - Prerequisite GIMP - One of the best image editing tools and its completely Free USB stick or any memory device to store and take to nearby shop A quality Digital camera Local Shops where you can print. Normally it costs (£0.15 or 25 US cents) to print 8 photos Steps (Video Tutorial attached blow of this page) Ask one of your colleague to take a photo  of you with a light background. Further details of how to take a photo  yourself       Take multiple pictures so that you can choose from th

Syslog Standards: A simple Comparison between RFC3164 & RFC5424

Syslog Standards: A simple Comparison between RFC3164 (old format) & RFC5424 (new format) Though syslog standards have been for quite long time, lot of people still doesn't understand the formats in detail. The original standard document is quite lengthy to read and purpose of this article is to explain with examples Some of things you might need to understand The RFC standards can be used in any syslog daemon (syslog-ng, rsyslog etc.) Always try to capture the data in these standards. Especially when you have log aggregation like Splunk or Elastic, these templates are built-in which makes your life simple. Syslog can work with both UDP & TCP  Link to the documents the original BSD format ( RFC3164 ) the “new” format ( RFC5424 ) RFC3164 (the old format) RFC3164 originated from combining multiple implementations (Year 2001)

VS Code & Portable GIT shell integration in Windows

Visual Studio Code & GIT Portable shell Integration Summary Many of your corporate laptop cannot install programs and it is quite good to have them as portable executables. Here we find a way to have Portable VS Code and Portable GIT and integrate the GIT shell into VS Code Pre-Reqs VS Code (Install version or Portable ) GIT portable Steps Create a directory in your Windows device (eg:  C:\installables\ ) Unpack GIT portable into the above directory (eg it becomes: C:\installables\PortableGit ) Now unpack Visual Studio (VS) Code and run it. The default shell would be windows based Update User or Workspace settings of VS Code (ShortCut is:  Control+Shift+p ) Update the settings with following setting { "workbench.colorTheme": "Default Dark+", "git.ignoreMissingGitWarning": true, "git.enabled": true, "git.path": "C:\\installables\\PortableGit\\bin\\git.exe", ""