GL.iNet Beryl AX + Surfshark WireGuard: Full Setup in 10 Minutes
Generate a Surfshark WireGuard key, download a location config and load it on the Beryl AX (GL-MT3000) with kill switch and auto-start.
The short answer
- 1.Surfshark's manual setup page generates a WireGuard key pair and per-location .conf files.
- 2.Upload the file in the Beryl AX panel under VPN → WireGuard Client.
- 3.Turn on 'Block non-VPN traffic' and 'Auto connect' so the tunnel is always up.
Step 1: Get the config from Surfshark
- 01Log in to your Surfshark account on the web and open VPN → Manual setup → Router → WireGuard.
- 02Choose 'I don't have a key pair' and generate one. Save the private key somewhere safe — it's shown once.
- 03Pick a location and download its .conf file.
Step 2: Load it on the Beryl AX
- 01Connect to the Beryl AX and open 192.168.8.1.
- 02Go to VPN → WireGuard Client → Add Manually (or Upload Configuration File).
- 03Name the profile, upload the .conf, save, then click Start.
- 04Open VPN Dashboard → global options, enable 'Block Non-VPN Traffic'.
- 05Enable auto-connect so the tunnel returns after a reboot or hotel Wi-Fi change.
Hotel login pages (captive portals)
With the kill switch on, the hotel's sign-in page can't load. Temporarily pause the VPN, accept the portal on one device, then turn the VPN back on. The router remembers the hotel network after that.
Questions people also ask
+The tunnel connects but there's no internet.
The key may have been deleted on Surfshark's side, or the location is down. Download a fresh file and try another location.
+Will the Beryl AX run my full fiber speed through WireGuard?
It depends on your line. Check GL.iNet's published WireGuard throughput for the GL-MT3000 and compare.
Provider features, prices and streaming compatibility change often. We don't run lab benchmarks; confirm details on the provider's own site before buying. Read our responsible-use stance.
Keep reading
Best VPN for a GL.iNet Travel Router (WireGuard): What Actually Matters
How to choose a VPN for a GL.iNet travel router: WireGuard config export, server choice, key rotation and the features that matter more than brand.
Dual Router Setup for Travel: Router-Behind-Router Done Right
Connect a VPN travel router behind a hotel or Airbnb router. Learn about double NAT, the right Wi-Fi/Ethernet mode and which VPN features make it smooth.