Help with Setting Up Beryl AX (GL-MT3000) with Xfinity/Comcast Gateway

I have been trying to figure this out but I’m fairly new to the terminology and the more I read the more I feel like I am confusing myself.

I am looking to use the Beryl AX as a travel router to connect to my home internet in the US while traveling and working remotely, without my location being visible. I currently have Xfinity and their Gateway (XB7) and just purchased the Beryl AX. My work laptop uses Sophos SSL VPN.

Is this possible to do with the current setup? If so, could anyone point me in the direction to set it up properly? Do I need to buy a second travel router?

Any help would be greatly appreciated.

Hey. Xfinity user here as well. I personally use a Raspberry Pi 4B on the server side connected to my route via LAN port. I use the Beryl AX for my travel router. You can definitely do it. All you need to do is set a static IP on your server which is connected to your gateway (definitely via Ethernet, not wireless), and then run a Tailscale exit node. If you run into any bumps along the way feel free to message me and I’ll help out. Tailscale documentation is pretty good.

Note that you’re going to need a decent upload speed at the server (your Xfinity service) in order to achieve a good download speed at your client device. I upgraded to the Superfast tier which gives me 20 Mbps upload. Not great but definitely usable for anything I need given the primary house resident barely uses the internet.

Double VPNs in your case might be more of a burden though. Im lucky that they don’t enforce the use of our work VPN at all (for some reason idk).

I’ll have to look into the tailscale (not sure what it means yet) but thank you for responding. My xfinity service is the 1000mbps download speed (not sure what upload is but I know it pretty high).

Question - would I be able to just get another Beryl AX or different GL-inet router instead of the raspberry pi?

Also - is another person able to use the internet at the home at the same time while they are there but I’m away?

Xfinity is really bad about giving symmetric speeds (meaning a high upload).

Tailscale is your ticket 100%. Read up on that.

Theoretically you can use another GL.iNet router as the server but I would recommend against for two reasons. 1. Tailscale is still in beta on these devices so it’s not guaranteed to work always. 2. You can get a faster processor for equal or less value which you will want to help pass streaming and voice/video traffic.

As for someone being able to use the internet, it’s going to depend on what they’re doing and what you’re doing at the same time. But I would guess you’d be alright especially with gigabit speeds as you said.

Just checked upload speed (on my phone) and it was about 250mbps.

For the raspberry pi, is there a specific one on day Amazon I should get?

Damn you lucky duck.

Yes definitely get the Pi 4B, don’t settle for anything less. It might be tough to find one at a reasonable price because they are selling at a premium. If you can’t get a Pi, then I would try googling “Linux Thinclient” and try something like that. Or of course you could go with another GL.iNet product for the server. I think you’ll find many people are running that fine here (I think?).

Thanks again for all of the help. Should I get one of the starter kits?

No, all you need is the Pi, a power supply, an Ethernet cable, a microSD (32GB is fine), and maybe a heat sink and/or fan.

Awesome, thank you !

Yes and don’t forget you’ll need to be familiar with SSH in order to access the Pi via another computer to install the software.