Frequently asked questions about the Anon 4g+ router (GL-E750/GL-E750V2)

Question: Does VPN work on a 4g router now due to the blocking of OpenVPN and Wireguard protocols in the Russian Federation?
Answer: For the Russian Federation, we have added the Xray Passwall client, it can run VLESS, TROJAN and SOCKS5 Proxy, these protocols are not blocked by RKN and allow you to use the Internet safely.

Question: I have a router version 2 (EM060 chip), how can I run eSIM on it?
Answer: On the GL-E750V2 (version 2) with a 4G EM060 chip, you can use eSIM, but to do this, you need to update the router to one of the latest firmware versions and buy a physical physical eSIM adapter, it supports the import of 3 eSIMs. Firmware versions 4.3.19 and 4.3.26 support eSIM on GL-E750V2 via a physical eSIM adapter. Please note that the eSIM settings manager in the admin panel appears only when a physical eSIM adapter is inserted into the router. (before that, it is not visible, even after updating the firmware).

Question: How to run eSIM on a router version 1 (EP06-E chip)?
Answer: On GL-E750 (version 1) with a 4G EP06-E chip, you can use eSIM, but this requires the latest firmware version of the EP06-E chip. Please note that in firmware version EP06ALAR02A08M4G, the manufacturer has implemented a sanction restriction that prohibits the chip from operating in Russia and Iran. If you are using GL-E750 (version 1) with 4G chip EP06-E in other countries, you can update the firmware of the EP06-E chip by following this instruction.

Question: Where to buy a physical eSIM?
Answer:
- Aliexpress (relevant for Russia)
- Amazon
- Official website of the eSIM manufacturer
- Official website of the GL.iNet manufacturer

Question: Will the 4G router work on Dubai SIM cards?
Answer: It works on almost all continents. The first version of the router has a 4G module Quectel EP06-E, designed to work in Europe, the Middle East, Africa, Brazil and some countries in the Asia-Pacific region. It supports all mobile Internet standards used in Russia, providing a stable connection. The second version uses the global Quectel EM060 module, which is compatible with most telecom operators and also supports all modern Internet standards. Both modules are suitable for use in an international environment, including Dubai, provided that there have been no significant changes in the network.

Question: Is it possible to connect a 4g router to a home or public Wi-Fi network? So that it receives Internet not from a SIM card, but from a third-party Wi-Fi.
Answer: Yes. This router can receive Internet from several sources:

• From a SIM card inside itself
• From Wi-Fi of any third-party device in Repeater mode
• From an Ethernet network cable in WAN mode
• From a USB port from any device that can distribute Internet via USB

More details in the instructions that we send after purchase.

Question: It turns out that before connecting to the router's admin panel, the Internet must be connected to it?
Answer: No, the Internet on the router is not needed for this.

Question: I can't log into the router's admin panel without the Internet, what should I do, how can I connect to the Internet?
Answer: No, this is not the case; you don't need the Internet on the router to log into the admin panel. Common reasons why you can't log into the router's admin panel:

• Incorrect connection - the router's network cable is incorrectly inserted or incorrectly connected via WiFi to the router.
  Solution: see the instructions, check the connection.
• HTTPS Everywhere or similar - all browsers have a function/setting or plugin, so the browser opens pages only via the httpS protocol, and 99% of routers in the world work only via the HTTP protocol.
  Solution: disable (temporarily) the function in the browser - go to pages only via HTTPS. Or download another browser that does not have this setting by default.
• Working mobile Internet on a smartphone - if you are trying to log into the router's admin panel from a smartphone in which the mobile Internet from a SIM card is working in parallel.
  Solution: temporarily disable the Internet from the SIM card in your smartphone.
• Working Wi-Fi on your computer - if you are trying to log into the router's admin panel from your computer, connected via a network cable, in which a third-party working Wi-Fi with the Internet is running in parallel.
  Solution: temporarily disable the third-party Wi-Fi in your computer.
• Working VPN - if you are trying to log into the admin panel from any device in which a VPN is running in parallel.
  Solution: temporarily disable the VPN on your device.
• Working Firewall - if you are trying to log into the admin panel from any device in which a Firewall is running in parallel.
  Solution: temporarily disable the Firewall in your device.
  

Question: Does the 4G router data change completely when you switch the slider on the side? If not, how do you reset the router data to random ones?
Answer: When switching the slider on the router case (according to the instructions), the following changes:

• IMEI of the 4g module to a random one

But with each reboot of the router, the following additionally change:

• Host name
• Manufacturer
• Model
• Architecture (CPU)
• Platform (Target Platform)
• MAC address
• BSSID addresses of Wi-Fi modules (2.4 GHz and 5 GHz)

In general, these are all unique identifiers, at least those that we managed to get to, if we find something else, we will add it and inform all users.

Question: Does the router save the history of device connections? If so, how do I clear it?
Answer: No, it does not, you can see this by going to the "Clients" tab in the Admin Panel. In our case, it is empty, usually (with the standard factory firmware) it can contain a dozen connected devices, both in real time and in the past.

Question: How do I disable logging? Through the extended panel Luci status → system log or kernel log, all logs of devices connected to the router are visible. Answer: In the router itself, logging of devices connected to it (receiving the Internet from it) is disabled. Except for access points, if they distribute the Internet to this router. It is logical that access points distributing to the router should be saved, otherwise after each start of the router you will have to reconnect to the access point and enter the password. And devices that receive the Internet from this router are not saved.

These logs are displayed only in real time (when the router is running) and are cleared after each reboot. In general, if you need to clear them urgently, just disconnect/reboot the router.

P. S. Naturally, in order for a specific device(s) to disappear from the router logs after a reboot, you must first disconnect this (and) the device(s) from the Wi-Fi router so that it (they) do NOT reconnect after the router restarts. Otherwise, if you do not do this, then after rebooting and checking you will think that nothing is cleared from the logs.

Question: You installed VLESS VPN as a bonus, how do I manage it? VPN off is set in the admin panel.
Answer: Yes, the VLESS tunnel is installed in the Xray Passwall client. It is configured in the second (engineering) admin panel.

Here are detailed instructions: https://cyberfantomo.org/xray_passwall_openwrt

VPN off is set in the admin panel — because this indicator applies to OpenVPN and Wireguard clients.

Question: What is the fundamental difference between the router mode (Router) and the access point (Access Point) in the router?
Answer: Using the "Access Point mode" (Access Point), the router connects via a patch cord (network cable) to the main router or directly to the cable from the provider (in general, directly to any source of the global Internet) and then distributes it to devices, that's all. Using the "router mode" (Router) it can be both an "access point" (Access Point), that is, perform its function, and also perform the function of a repeater (receive global Internet from another Wi-Fi point or from a smartphone via USB), while filtering traffic through VPN, and in our case, the 4G module is also available. In general, we can say that the "router mode" (Router) works as all modes in one.

Question: What 4G router data does the provider see when connecting directly? Answer: The provider sees the external IP address of the router, which it assigns to it. Also TTL, BSSID addresses, IMEI and MAC addresses. Most likely, it also sees the Host name of the router, but we have not yet been able to verify this for sure. In any case, the host name, manufacturer, architecture, model and platform of the processor were still made changeable with each reboot, we hope that this will get ahead of the spying technologies of curious third parties.

P. S. Regarding TTL, most mobile operators often limit the distribution of Internet traffic from a smartphone to other devices or are available only for an additional fee. To track such connections, mobile operators use the TTL (Time To Live) indicator, which may differ depending on the type of device, but for most smartphones the initial TTL is 64 units.

In general, in our case, the TTL indicator is transmitted to the operator as 64 units, so it looks like a smartphone that does not distribute the Internet to anyone.

Question: How to authorize a router in Wi-Fi repeater mode in hotels/airports, for example? I mean when there is an authorization page with an SMS, etc.
Answer: It is not yet known for sure, most clients use it with a SIM card, so there is no information on this issue yet. But I think it is quite possible that an authorization page should pop up just like on a smartphone. In general, you need to test it in practice to understand and see for sure.

Question: Why are there big drops in internet speed with your bonus VLESS VPN? What can be done to increase the speed?
Answer: Firstly, this VLESS is provided and configured so that you can immediately insert a SIM card and work, access the resources you need without any hassle. Although we use high-speed servers and try not to load a large number of users so that everyone is comfortable. But speeds for 4K and streaming are not promised.

Secondly, there are still many factors that can affect the speed with VPN:

• Your physical distance to the VPN server country. For example, if you are in Vladivostok, and the server is in Argentina, then no matter how powerful the server is, in this example, you most likely will not be able to load anything at all
• There may be drops on the server itself (without taking into account the load of users of this server)
• Maybe due to the load of users (for example, if several people decided to download something heavy at the same time)
• Maybe maintenance work on the server
• Maybe maintenance work at the server provider (after all, in the country of our VPN server there is some kind of its own analogue of "Rostelecom", for example)
• There may also be drops at your local provider (for example, our VPN digests and gives you 50 megabits, and your MTS gives you only 5 megabits, naturally, these 50 megabits cannot be obtained out of thin air, claims to your provider)
• Even the weather sometimes affects
• And also RKN with its blocking experiments can very well affect the quality of work of foreign servers
• Or, in general, several different factors from the list above can simultaneously load the server and reduce its throughput
  
  Solution:
• Check your internet speed without a VPN to rule out problems with your internet provider or your device, and then start looking for a solution
• Make or order your own personal server that only you will use (to be sure that no other server users are consuming your speed) and choose the closest country to your region so that the ping is lower and the speed is higher

Question: How do identifiers on a 4G router change?
Answer: Due to scripts written and configured in various programming languages (bash, python, etc.), some identifiers change every time the router is rebooted, the other part + IMEI changes when the physical switch on the router case is switched, after which it automatically turns off and is turned on manually by a new device.

Question: How to change root name in advanced settings?
Answer: You can't change or delete root account because it is an administrator account in linux based system (just like you can't delete or change administrator account in windows for example).

Question: I changed the IP address of the router for logging in, will this affect privacy?
Answer: Changing the IP address of the router to a non-standard one will increase security even a little. For example, within a range different from the standard one (for example, "192.168.100.1" or "10.0.0.1"), it will complicate the task of an intruder when scanning the network and reduce the likelihood of a successful attack on your router.

Question: Can you help me set up a VPN-TOR-VPN bundle in a router?
Answer: At the moment, no, in theory it is possible to do this in a router, but you will need to rewrite the firmware and it may not have enough RAM for such a load. And it will drain the battery much faster. VPN + TOR can be done later on it.

The best solution would be to do this, for example, on a PC using Whonix virtual machines. It will turn out like this: 4G router (or mini) + VPN → PC + Whonix Gateway (Tor) → Whonix Workstation + VPN (VPN-TOR-VPN)

Here, with proper configuration, almost any leaks are excluded, the scheme is decent.

Question: Can I see the source code? And what is it written in?
Answer: There are no closed components, it's OpenWRT. Different languages are used there: C++, Shell, HTML, Python, etc. Everything is here: https://github.com/gl-inet/

Question: What could be the problem? My internet stopped working in the browser, only WhatsApp and Telegram work, although there is money on the SIM card account Answer: Most likely in the SIM card tariff. It is recommended to use a SIM card/tariff for smartphones, and not for 4G routers, because the router disguises itself as a smartphone.

Question: How to enable VPN+TOR on the router?
Answer: So far, no way.

Question: Do I need to enable the kill switch? If it is not OpenVPN or WireGuard that is running, but VLESS in the advanced admin panel.
Answer: No, you do not need to enable the kill switch for the Xray Passwall client, it is built into the Passwall client, but it does not work for about the first 3 minutes when the router starts (your real IP address is transmitted during these first 3 minutes).

Question: Why does it give the error "You need to stop other VPN services" when trying to turn on TOR?
Answer: Because 2 clients don't work at the same time, only one. Either TOR, or OpenVPN, or WireGuard, or Passwall.

Question: What else needs to be configured in the router to start after receiving it?
Answer: We sent you access to a closed group with manuals for the router, there are relevant sections there.

Question: Is the router updated? Does the firmware need to be updated?
Answer: No, it does not. The latest adequate firmware for the tasks it performs is installed there, if a newer firmware appears, we will inform you in the channel.

Question: I noticed that the router gets quite hot, is this normal?
Answer: Yes, this is a normal operating temperature for the router. The case is small, after all, and inside there are as many as three powerful chips (two Wi-Fi chips and one 4G chip), as well as a powerful battery. To reduce heating, it is recommended to turn the router with the display down. In addition, do not place it on a blanket or other textile surfaces; it is better to choose harder bases to ensure more efficient heat dissipation.

Question: How does a router work? Who is the provider there?
Answer: A simple question, of course, but okay. Most likely, what was meant here was: where does the router get the Internet from?

This router can receive the Internet from several sources:

• From the SIM card inside yourself
• From Wi-Fi of any third-party device in Repeater mode
• From an Ethernet network cable in WAN mode
• From a USB port from any device that can distribute the Internet via USB
  

Question: How to properly charge the router so that the battery lasts longer? Should it be completely discharged before recharging or can it be kept on charge all the time?
Answer: The router can be kept on charge all the time, as it has an overcharge protection system. It is not recommended to completely discharge the battery to 0-1%. To make the battery last longer, it is best to maintain the charge level between 20% and 80%.

Question: Why does the router discharge so quickly? I just charged it, and today the charge has already dropped to 1%.
Answer: Hello! Perhaps the router was not initially charged to 100%. You should also make sure that the charging cable was inserted correctly and all the way into the connector until you hear a click. This ensures that charging is proceeding properly.

Question: Everyone writes that if the router is not flashed for TTL, it will not work! What kind of SIM card do I need? Can we flash it for a smartphone?
Answer: The router is flashed and imitates the IMEI and TTL of a smartphone, so you need a regular SIM card, like for a smartphone.

Question: I lost access to the account from which I made purchases from you. Send me a link to the instructions for changing vless on the router. Write down the account, if there are any updates, write here
Answer: https://telegra.ph/Nastrojka-i-zapusk-Xray-klienta-PassWall-na-routere-OpenWRT-08-22

Question: I can't enter the menu, it says the password doesn't fit. Although the password is the same everywhere. How can I reset the password so that everything doesn't reset to 0?
Answer: Hello, the password itself doesn't change. Most likely, you type it with Caps Lock on, on a different layout, or, which also often happens, you changed it with Caps Lock or another layout, and are trying to enter it without.

It is impossible to reset the password for entering the admin panel without resetting to factory settings. If this were possible, there would be no point in the existence of such a security feature.

Question: Is the password on the dial not the password for entering?
Answer: No, it is the password for WiFi

Question: Do you sell SIM cards with the router? Maybe you know a good service? Answer: No, we don't. We can't tell you where to buy physical SIM cards, and if it's an eSIM, we recently tested it with the team from here https://silent.link/ (very good). eSIM cards with a physical adapter work in v2 routers.

Question: How can I tell which router I have, V1 or v2?
Answer: Externally, the routers are absolutely identical, only the 4g module for v1 is EP06, for v2 it is EM06.

Usually this is the version on a small white sticker on the case on the back of the router or inside the admin panel visible.

Question: And in 1 and 2, except for the modules, is there any difference in functionality?
Answer: From what was immediately noticed:

1. When connecting the charging cable to a disconnected router, it does not turn on
2. As if it heats up a little less (not exactly, long-term testing is needed)

Technically, except for the 4g module, it seems like there is no difference at all. (and it would be very necessary to add RAM memory)

Question: I have a question, I'm not sure if it's adequate, but still: Can special services, knowing the number of the SIM card that is in the router, control it, for example, turn it off?
Answer: It is impossible to completely exclude attacks on the SIM card - there is always a possibility of detecting zero-day vulnerabilities. It is important to understand that most known attacks on SIM cards are aimed at smartphones and are aimed at intercepting traffic and data. Some of the possible actions include sending messages, making calls, transmitting GPS data, opening malicious sites and installing applications bypassing the App Store and Google Play. In a router, as a rule, there is practically nothing to intercept, since most of what can be useful to an attacker is located directly on the device (smartphone/computer) and is encrypted there by additional tools (I mean entered logins/passwords, visited web pages of the browser, etc.)

Nevertheless, routers with OpenWRT firmware have a set of measures that significantly reduce the risks of attacks using known vulnerabilities of SIM cards.

Of the known and documented vulnerabilities of SIM cards to date, the following can be distinguished:

• SMS Interception: Vulnerabilities that allow interception of incoming and outgoing SMS messages. Example: SIMjacker
• Location Information: Ability to track the location of a device via a SIM card. Example: Using SS7/Diameter protocols
• DNS spoofing: Redirecting traffic through spoofed DNS servers
• DoS attacks: Disabling a SIM card by sending special commands
• Unauthorized access to contacts: Obtaining a list of contacts stored on the SIM card
• Executing arbitrary commands via SIM Toolkit: to perform unauthorized actions. It was through this vulnerability that it was possible to perform actions such as SHUTDOWN. However, exploitation of the SIM Toolkit vulnerability on an OpenWRT router is unlikely due to the lack of an API for managing the router's power supply and control delimitation. In general, the 3G/4G modem is physically controlled by the OpenWRT router, and not vice versa, and not in symbiosis

OpenWRT implements the following security measures:

• Protection against DNS interception and spoofing: OpenWRT allows you to configure DNS request filtering and protection against DNS spoofing. Configuration instructions can be found in our manuals.
• Restricted access to /dev/ttyUSB/*: Access to modem devices (/dev/ttyUSB) is strictly controlled. Only authorized processes have access to these devices, which significantly reduces the risk of unauthorized modem control. It is also difficult to gain local access to the router to change these settings remotely.
• GPS deactivation: The GPS module is deactivated in the router modem with our Privacy & Anonymity Patch v3 (https://codeberg.org/CyberFantomo/CBFAR-PAP) complex.
• with GPS enabled: location accuracy can reach several meters (3-10 meters under optimal conditions).
• with GPS turned off: location can only be determined by cell towers (Cell ID), which provides accuracy of up to several hundred meters (from 50 meters to several kilometers depending on the density of towers).
• Change IMEI, hostname and other identifiers: Our add-on Privacy & Anonymity Patch v3 (https://codeberg.org/CyberFantomo/CBFAR-PAP) allows you to change the router's IMEI and hostname, making it difficult to identify the device on the network and, so to speak, forcibly reset any malicious actions of third parties, if they were installed.
• VPN: and, as is well known, VPN protects against reading intercepted unencrypted traffic.