Emit

Hardware VPN Setup for Remote Work

Cover Image for Hardware VPN Setup for Remote Work
Particledream
Particledream

This setup will allow you to be anywhere in the world, but have the same IP address as if you were at home. There are no VPN subscriptions or additional costs outside of the initial purchase of the recommended hardware.

At the time of writing, you will be able to purchase all the hardware for a total of $160. The following must be purchased:

  1. VPN Client (Mobile Router)

  2. VPN Gateway

Video walkthrough:

Steps to set up the VPN Gateway:

  1. Plug-in your VPN Gateway and allow about a minute for it to start up.

  2. Connect an ethernet cable from your computer to the VPN Gateway on the LAN port.

  3. Connect another ethernet cable from your modem to the VPN Gateway on the WAN port.

  4. Open the web browser on your computer and type in the following IP http://192.168.8.1

  5. Navigate to the VPN section and select your preferred protocol. For this setup, opt for WireGuard due to its superior speed compared to OpenVPN. VPN -> WireGuard Server

  6. Within the WireGuard Server settings, locate the field labeled "Listen Port". You may input any port number up to the maximum limit of 65535.

  7. After entering your chosen port number, finalize the process by clicking "Apply".

  8. You must now "Start" the WireGuard Server.

  9. Go to the "Profiles" tab and click the "+ Add" button to add a new unique client.

    1. For a mobile device, download the WireGuard app and scan the QR code.

    2. For our hardware configuration on the VPN Client, you will need to download the configuration file. If your browser complains about it being an "insecure file", select "keep" to proceed with the download.

Opening port on AT&T Fiber modem:

  1. Connect to your VPN Gateway with an ethernet cable.

  2. Locate your Gateway IP by visiting the Internet dashboard on your VPN Gateway.

  3. Copy the Gateway IP address and paste into your browser.

  4. Navigate to Firewall -> Security Options and enter the "Device Access Code" found on the back of your modem.

  5. Now that you have authenticated, navigate to Firewall -> NAT/Gaming.

  6. Click the "Custom Services" and enter the following for the "Service Entry":

    • Service Name: WireGuard (Brume 2)

    • Global Port Range: 10

    • Base Host Port: 10

    • Protocol: TCP/UDP

  7. Click "Add" button and then the "Return to NAT/Gaming" button.

  8. From the "Return to NAT/Gaming" UI select the following:

    • Service: WireGuard (Brume 2)

    • Needed by Device: GL-MT2500

  9. Click "Add" and now you can exit out of the modem.

Steps to set up the VPN Client (Mobile Router):

  1. Plug-in your VPN Client and allow about a minute for it to start up.

  2. Navigate to VPN -> WireGuard Client

  3. Select "New Provider" and upload your WireGuard config file that was downloaded from the VPN Gateway and click "Apply"

  4. You must start the WireGuard client by clicking the "..." and then selecting "Start".

Leave the VPN Gateway at home and you can now travel with your mobile router that is configured with the VPN Client.