Shadow (GL-AR300M Series) User Guide¶
Product overview¶
Shadow (GL-AR300M series) is a pocket-size mini router, designed to be Portable and Travel-Friendly, supporting up to 300Mbps wireless transmission rate. Shadow offers advanced security features, including support for OpenVPN, WireGuard®, and a DNS server. It not only allows you to convert a public network to a private Wi-Fi for secure surfing, but also allows you to upload vpn configuration files from over 30 VPN service providers, set it as vpn client, providing an added layer of privacy and security to create an encrypted traffic between your device and the VPN server.

Specifications¶
How to set up Shadow¶
To set up Shadow, you will use one of the four supported internet connection methods: Ethernet, Repeater, Tethering, and Cellular. Watch this setup video or follow the steps below.
(This video uses a different GL.iNet router to demonstrate the setup, but the steps are the same for Shadow and other router models.)
1. Power on Shadow¶
Plug the Micro USB power cable into the router's power port, then connect the other end to a 5V/2A power adapter (not included) and plug it into a power outlet.
2. Connect to Shadow¶
Connect a device (e.g., computer, laptop or smartphone) to the router using Wi-Fi or Ethernet.
-
Ethernet
Connect your device to the router's LAN port using an Ethernet cable.
-
Wi-Fi
On your device, go to Settings -> WLAN, locate your router's Wi-Fi network name in the available networks list and enter the password. You can find the default network name and password printed on the router's bottom label.
3. Log in to the WebGUI¶
Open a web browser, enter 192.168.8.1 in the address bar and log in. Choose your language and set your admin password, then click Apply.
Please note that if you change the Wi‑Fi information, you will need to reconnect your device to the router's Wi‑Fi using the updated credentials.
4. Connect Shadow to the Internet¶
Note: The following instructions apply to users configuring the router via the GL.iNet Web Admin Panel. If you prefer using the GL.iNet app, download the app and follow the on-screen instructions.
Configure your Shadow using one of the supported internet connection methods: Ethernet, Repeater, Tethering, and Cellular. If you want to use the Multi-WAN feature, please set up more than one internet connection.

Connect an ethernet cable between your router's WAN port and an upstream device such as a modem.
Once successfully connected to the internet, a green dot will appear in the Ethernet section on the INTERNET page.
Please refer to Connect to the Internet via an Ethernet cable for detailed instructions.

- On the INTERNET page of the web Admin Panel, locate the Repeater section and click Connect.
- Select a Wi-Fi network from the available networks.
- Enter the password, then click Apply.
Once successfully connected to the internet, a green dot will appear in the Repeater section on the INTERNET page.
Please refer to Connect to the Internet via an existing Wi-Fi network for detailed instructions.

- Connect your mobile device (e.g., smartphone or USB dongle) to the router's USB port via a USB cable.
- On your mobile device, go to Settings and enable USB Tethering.
- On the INTERNET page of the web Admin Panel, click Connect in the Tethering section.
Once successfully connected to the internet, a green dot will appear in the Tethering section on the INTERNET page.
Please refer to Connect to the Internet via USB tethering for detailed instructions.

This method is useful for sharing internet from a USB modem to all connected devices.
- Insert a cellular-enabled USB modem into the router's USB port.
- On the INTERNET page of the web admin panel, locate the Cellular section and click Connect.
- Once successfully connected to the internet, a green dot will appear in the Cellular section on the INTERNET page.
Please refer to Connect to the Internet via a USB modem for detailed instructions.
How to set up a VPN¶
A VPN (virtual private network) creates a secure, encrypted traffic between your device and the VPN server. It provides an added layer of privacy and security (VPN client) and allows you to access a remote network (VPN server). Shadow (and other GL.iNet routers) supports OpenVPN and WireGuard.
Shadow (and other GL.iNet routers) supports the OpenVPN protocol which offers strong security. To set up OpenVPN, follow these tutorials:
Shadow (and other GL.iNet routers) supports the WireGuard protocol which offers great speeds and convenience. To set up WireGuard, follow these tutorials:
Applications¶
Plug-ins are add-on features that enhance the functionality of your router.
To set up plug-ins, refer to Plug-ins.
Dynamic DNS (DDNS) automatically detects and updates the IP address associated with a domain in real-time. It is most useful for users who need a static IP address for accessing a remote network.
To set up dynamic DNS, refer to Dynamic DNS.
Network settings¶
The Firewall page provides essential security enhancements for your network. It includes features such as Port Forwarding, Open Ports, and DMZ. These tools allow you to manage and customize your network's traffic flow and enhance its security.
- Port Forwarding: Redirect specific traffic from the internet to designated devices within your network, enabling access to services like gaming servers or web servers.
- Open Ports: Monitor and control which ports on your router are open, helping to prevent unauthorized access and potential security threats.
- DMZ (Demilitarized Zone): Place a device outside the main firewall, allowing it to have unrestricted access to the internet while protecting the rest of your network from potential threats.
To set up firewall-related settings, refer to Firewall.
Multi-WAN is a networking feature that allows you to set up your router with multiple internet connections (e.g., cellular, repeater, and ethernet) at the same time. If your current internet connection fails, the router will automatically switch to another internet connection. This ensures smooth and uninterrupted internet access.
To set up multi-WAN, refer to Multi-WAN.
The LAN page allows you to manage and configure your router's local area network settings. Key features available on this page include:
- Router IP Address: Modify the IP address of your router to better fit your network configuration.
- Netmask: Set the subnet mask for your network, which determines the network's size and range of IP addresses.
- DHCP: Enable or configure the Dynamic Host Configuration Protocol, which automatically assigns IP addresses to devices on your network.
- Address Reservation: Reserve specific IP addresses for particular devices, ensuring they always receive the same IP address from the DHCP server.
To set up LAN, refer to Lan.
The DNS page provides options to customize your router's Domain Name System settings, enhancing both security and performance. Key features available on this page include:
- Encrypted DNS: Configure encrypted DNS to protect your browsing data from being monitored or tampered with, ensuring privacy and security.
- Manual DNS: Manually set DNS servers of your choice, allowing for customized control over DNS queries and potentially faster resolution times.
- DNS Proxy: Enable DNS proxy to route DNS requests from your devices through a specified DNS server, providing an additional layer of control over DNS traffic.
These settings allow you to optimize your network's DNS performance and security according to your specific needs.
To set up DNS, refer to DNS.
The Network Mode page allows you to configure your router to operate in different modes, providing flexibility to meet various networking needs. The available modes include:
- Router: Operate as a standard router, managing traffic between your local network and the internet, and providing features like NAT, firewall, and DHCP.
- Access Point: Function as an access point, extending your existing wired network by providing wireless connectivity without routing traffic.
- Extender: Work as a range extender, boosting the signal of your existing wireless network to cover a larger area and eliminate dead zones.
- WDS (Wireless Distribution System): Similar to Extender, please choose WDS if your main router supports WDS mode.
To set up network mode, refer to Network Mode.
The IPv6 page enables you to configure IPv6 settings for your network, providing support for the latest internet protocol. On this page, you can enable IPv6 and select from four different modes to suit your network requirements:
- Native: Obtain an IPv6 address directly from your ISP, allowing for straightforward and efficient native IPv6 connectivity.
- Passthrough: Allow IPv6 traffic to pass through the router to the devices on your network, effectively bridging the connection without the router handling IPv6 routing itself.
- NAT6: Utilize Network Address Translation for IPv6 (NAT6) to translate between internal and external IPv6 addresses, similar to how NAT works for IPv4.
- Static IPv6: Manually configure a static IPv6 address for your router, providing a fixed address for consistent connectivity and easier management of network services.
These settings help you leverage the benefits of IPv6, including improved address space, enhanced security features, and better performance.
To set up IPv6, refer to IPv6.
The MAC Address page allows you to view and manage the Media Access Control (MAC) addresses associated with your router. Key features available on this page include:
- Factory Default: Display the default MAC addresses for the router’s Ethernet and Repeater modes, providing a reference for original hardware settings.
- Clone: Clone the MAC address of a specific client device. This is particularly useful in scenarios where network access is restricted to certain devices.
- Manual: Manually specify a custom MAC address for your router. Additionally, you can use the Random button to generate a random MAC address, providing flexibility and enhanced privacy.
These features enable you to manage your router's MAC addresses effectively, ensuring compatibility and flexibility within various network environments.
To manage MAC address, refer to MAC Address.
Drop-in Gateway extends the functionality of your main router with features it may not have, including AdGuard Home, encrypted DNS, and VPN.
To set up Drop-in Gateway, refer to How to set up Drop-in Gateway.
The IGMP Snooping page allows you to configure settings that optimize multicast traffic management within your network. IGMP Snooping listens to and extracts information from IGMP protocol packets, establishing and maintaining Layer 2 multicast forwarding tables. This ensures that multicast group data is forwarded only to hosts that have joined the multicast group, preventing unwanted multicast traffic from reaching other hosts.
These settings help optimize network performance and efficiency, particularly in environments with significant multicast traffic, such as streaming video or online gaming.
To set up IGMP snooping, refer to IGMP Snooping.
System settings¶
The Overview page provides a comprehensive snapshot of your router's current status and performance metrics. On this page, you can view:
- CPU Average Load: Monitor the average load on your router’s CPU, helping to assess performance and identify potential bottlenecks.
- Memory Usage: Check how much of your router's memory is in use, aiding in the management of resources.
- Flash Usage: View the utilization of the router's flash storage, ensuring there's sufficient space for firmware and configuration data.
- LED Control: Toggle the router's LED lights on or off, allowing for customization of the device's visual indicators.
- System Info: Access detailed information about your router's system, including firmware version, uptime, and network status.
These features provide essential insights and controls, helping you to effectively manage and monitor your router's operation.
Please refer to Overview for detailed instructions.
The Upgrade page is used to update your router's firmware to the latest version, ensuring enhanced performance, security, and new features. This page offers two options for upgrading:
- Online Upgrade: Automatically check for and install the latest firmware version directly from the manufacturer's server, simplifying the update process.
- Local Upgrade: Manually upload a firmware file from your computer to update the router, providing control over the upgrade version and timing.
These options allow you to keep your router up-to-date with the latest improvements and fixes.
Please refer to Upgrade for detailed instructions.
The Scheduled Tasks page allows you to automate various router functions based on a predefined schedule, enhancing convenience and efficiency. Key features on this page include:
- LED Display Schedule: Set a schedule to automatically turn the router's LED lights on or off, reducing light pollution during specific times.
- Schedule Reboot: Configure your router to reboot automatically at specified intervals, helping to maintain optimal performance and stability.
- 2.4GHz Wi-Fi Status Schedule: Set a schedule to control the 2.4GHz Wi-Fi band, allowing for better management of network availability and power consumption.
These scheduling options provide you with greater control over your router's operations, ensuring it meets your specific needs and preferences.
Please refer to Scheduled Tasks for detailed instructions.
The Admin Password page allows you to set or change the password for your router's administrative interface, ensuring that only authorized users can access and modify the router's settings. This password is crucial for maintaining the security and integrity of your network, protecting against unauthorized access and configuration changes.
Please refer to Admin Password for detailed instructions.
The Time Zone page allows you to set the correct time zone for your router, ensuring that all scheduled tasks, logs, and system events are accurately timestamped according to your local time. This setting is crucial for maintaining precise records and for the proper execution of time-based configurations.
Please refer to Time Zone for detailed instructions.
The Toggle Button Settings page allows you to configure the physical toggle button on your router, enabling you to assign specific functions to the button for quick access and control. This feature provides convenient shortcuts for common tasks and settings, enhancing the user experience and simplifying router management.
Please refer to Toggle Button Settings for detailed instructions.
The Log page provides access to various logs that record the router's activities and events, aiding in troubleshooting and performance monitoring. This page includes:
- System Log: Detailed logs of system-level events and activities.
- Kernel Log: Logs related to the kernel's operations and events.
- Crash Log: Records of system crashes and errors, useful for diagnosing critical issues.
- Cloud Log: Logs of interactions and activities related to GoodCloud services integrated with the router.
- Nginx Log: Logs from the Nginx web server, if used by the router, detailing web traffic and server operations.
Additionally, the page features an Export Log button, allowing you to export all collected logs for technical support analysis. This function is invaluable for diagnosing complex issues and obtaining professional assistance.
Please refer to Log for detailed instructions.
The Reset Firmware page allows you to reset your router's current firmware version to its default settings, erasing all custom configurations. This process will restore the router to the default settings of the currently installed firmware version. This can be useful for troubleshooting persistent issues or starting fresh with the current firmware's default configuration.
Please refer to Reset Firmware for detailed instructions.
The Advanced Settings page provides access to advanced configuration options through the OpenWrt LuCI interface, allowing experienced users to fine-tune their router's settings and functionalities beyond the basic interface options. This includes detailed network configurations, firewall settings, and other advanced system customizations.
Please refer to Advanced Settings for detailed instructions.