Setup VPN secured Private Wifi from Public Wifi
A word on Privacy
While you are travelling, it is essential that you connect your mobile phone or laptop to Public Wifi especially in Airports, Hotels, Cafe's, Malls etc. Remember quite a lot of your personal information is exposed by such direct connections and is quintessential you isolate your personal device from public Wifi even if you have VPN. It is recommended to turn-off WiFi , BlueTooth during the course of journey but until unless you need it.
What are we trying to do
So the aim of this article is to ensure that you detach your device from public network as below.
So using the GL.inet device, we will
- Accept a Public Network connection (WAN) via wired or wireless
- Apply VPN settings
- Create a separate Private Network (LAN) which your personal devices can connect to
Pre-Reqs
- OpenWRT based devices (such as GL-MT300N, GL-MT1300 Beryl etc
- LAN cable (for first time setup) is highly recommended
- VPN connection (eg NORDVPN, SurfShark etc). Read about VPN reviews before you buy
Advantages
- Secure Connection before your device (laptop/mobile etc) is exposed to Public Wifi
- Ability to put VPN on the router thus connecting multiple devices at same time securely
- VPN means you can override content restrictions on all these multiple devices
- Ability do do Chromecast/Miracast etc, thus securely watch streaming media
- Can simulate to your device that you are based on specific country based on VPN information (especially if you want to work from Remote geography, but your Company disallow such locations)
Setup
The setup process is written for GL.inet device, but should work with any device with OpenWrt installed
Reset GLI device, for first time setup connected using LAN (wired) to laptop and disconnect any wifi from laptop for lesser confusion! It is better to do first time configuration at home before you travel- Login to http://192.168.8.1 (GL.inet devices usually have this IP) and create the credentials. Go to Main page.
- Setup the Private Wifi LAN (you could retain the SSID if need be to be GL-xxx-xxx). This is a ONE off step. This means the GLI device assign you a separate LAN IP range than the Public WAN/wifi range.
Connect to Public Wifi |
Final Look once setup is complete |
Setup the Internet -> Repeater -> Connect to your Public Wifi with creds -> Ensure it connects. This step needs to be done every-time when you connect to NEW Public wifi- You can load up OpenVPN files (eg NORDVPN) if need be and the Private Wifi/LAN will load these settings.