{"id":74625,"date":"2026-10-15T21:11:56","date_gmt":"2026-10-15T18:11:56","guid":{"rendered":"https:\/\/lwallet.com.ua\/?p=74625"},"modified":"2026-10-15T21:11:56","modified_gmt":"2026-10-15T18:11:56","slug":"beryl-ax-openwrt-guide","status":"publish","type":"post","link":"https:\/\/lwallet.com.ua\/en\/beryl-ax-openwrt-guide\/","title":{"rendered":"Beryl AX setup guide: VPN and OpenWrt"},"content":{"rendered":"\r\n\r\n\r\n

Updated October 2026: GL.iNet firmware 4.9.0 and OpenWrt 25.12.5.<\/em><\/p>\r\n\r\n\r\n\r\n

This Beryl AX setup<\/strong> guide for the GL-MT3000 covers choosing firmware, installing OpenWrt, and creating a secure Wi-Fi network with VPN access for your laptop and phone. We will configure WireGuard, DNS and a kill switch \u2014 a rule that blocks direct internet access if the VPN connection drops. We will also connect the router to hotel Wi-Fi, set up USB tethering from a phone and, optionally, configure the switch on the case to change connection modes.<\/p>\r\n\r\n\r\n\r\n

This guide requires erasing the factory settings and using SSH<\/strong>, a secure connection to the router\u2019s terminal. If you want VPN access with minimal manual configuration, read the firmware comparison below first.<\/p>\r\n\r\n\r\n\r\n

Why use a VPN router with a hardware wallet?<\/h2>\r\n\r\n\r\n\r\n

A hardware wallet protects your private keys, while a VPN hides your home or hotel IP address from the servers your wallet app contacts<\/strong>. Wallet addresses included in those requests remain visible. You still need to check transaction details on your hardware wallet before signing<\/a> and protect your seed phrase, whether or not you use a VPN.<\/p>\r\n\r\n\r\n\r\n

With this connection, the hotel\u2019s network administrator can see that you are connected to a VPN server, but cannot read the traffic inside the tunnel. Your VPN provider becomes the intermediary you trust with that traffic; HTTPS content is also encrypted between the app and the website. Our guide to VPNs and privacy<\/a> explains these limits in more detail.<\/p>\r\n\r\n\r\n\r\n

Your laptop and phone can use the VPN without separate VPN apps: the router counts as the connected device for the VPN service<\/strong>.<\/p>\r\n\r\n\r\n\r\n

[vc_message color=”warning” message_box_style=”classic” message_box_color=”alert-warning” style=”rounded”]Do not use a VPN to bypass an exchange\u2019s restrictions.<\/strong> Doing so may breach its terms, and a mismatch between the country associated with your IP address and your identity verification (KYC) details may trigger additional checks or account restrictions.[\/vc_message]<\/p>\r\n\r\n\r\n\r\n

Beryl AX specifications and capabilities<\/h2>\r\n\r\n\r\n
\r\n
\"Rear<\/figure>\r\n<\/div>\r\n\r\n\r\n
Specification<\/strong><\/td>Value<\/strong><\/td><\/tr>
Processor<\/td>MediaTek MT7981B (Filogic 820), 2 Cortex-A53 cores, 1.3 GHz<\/td><\/tr>
RAM<\/td>512 MB DDR4<\/td><\/tr>
Flash storage<\/td>256 MB SPI-NAND<\/td><\/tr>
Wi-Fi<\/td>Wi-Fi 6, AX3000: up to 574 Mbps on 2.4 GHz and 2402 Mbps on 5 GHz<\/td><\/tr>
Ports<\/td>1\u00d7 2.5 Gbps WAN, 1\u00d7 1 Gbps LAN, USB 3.0<\/td><\/tr>
Power<\/td>USB-C, 5 V \/ 3 A<\/td><\/tr>
Cooling<\/td>Active: fan with adjustable speed (PWM)<\/td><\/tr>
Controls<\/td>Reset button and two-position switch on the case<\/td><\/tr><\/tbody><\/table><\/figure>\r\n\r\n\r\n\r\n

The router needs 5 V \/ 3 A from a single USB-C port<\/strong>, so check that your power bank supports this output. Use the supplied power adapter when flashing firmware: a power interruption can disrupt installation.<\/p>\r\n\r\n\r\n\r\n

GL.iNet advertises up to 300 Mbps with WireGuard and 150 Mbps with OpenVPN<\/strong>. These figures come from tests of the factory firmware; OpenWrt performance will depend on the software, VPN server and internet connection. Do not expect gigabit speeds over the VPN.<\/p>\r\n\r\n\r\n\r\n

There is no built-in battery or cellular modem<\/strong>, so you need external power and an internet connection over Ethernet, Wi-Fi or a phone. To connect several wired devices, you will need an Ethernet switch, as the router has only one LAN port.<\/p>\r\n\r\n\r\n\r\n