Problems setting up my GL-MT6000

Hello everyone,
I bought a GL-MT6000 for my new fiber-optic connection. This is my first OpenWRT-based router, and so far I haven't been able to get the internet connection working. I’ve tried to follow the instructions in the OpenWRT User Guide ( https://openwrt.org/docs/guide-user/network/wan/isp-configurations#vodafone ) for my ISP as closely as possible. But the device can’t establish a connection.

I would be very grateful if someone with experience with this device could help me out.

Here is some information that I think is necessary for troubleshooting. If I’ve left out any important details (which is likely!), please let me know and I’ll try to provide them.

My ISP: Vodafone Germany via the "Deutsche Telekom" network
Router: GL-MT6000, firmware 4.8.4, based on OpenWrt 21.02-SNAPSHOT

Status of interfaces in the Luci UI:

My /etc/config/network (sensitive data replaced with '***'):

config interface 'loopback'
	option device 'lo'
	option proto 'static'
	option ipaddr '127.0.0.1'
	option netmask '255.0.0.0'

config globals 'globals'
	option ula_prefix 'fd29:****:****::/48'

config device
	option name 'br-lan'
	option type 'bridge'
	list ports 'lan1'
	list ports 'lan2'
	list ports 'lan3'
	list ports 'lan4'
	list ports 'lan5'
	option macaddr '**:**:**:**:**:**'

config device
	option name 'lan1'
	option macaddr '**:**:**:**:**:**'

config device
	option name 'lan2'
	option macaddr '**:**:**:**:**:**'

config device
	option name 'lan3'
	option macaddr '**:**:**:**:**:**'

config device
	option name 'lan4'
	option macaddr '**:**:**:**:**:**'

config device
	option name 'lan5'
	option macaddr '**:**:**:**:**:**'

config interface 'lan'
	option device 'br-lan'
	option proto 'static'
	option ipaddr '192.168.8.1'
	option netmask '255.255.255.0'
	option isolate '0'
	option ip6assign '64'
	option ip6hint '0000'
	option ip6ifaceid '::1'
	option ip6class 'local'

config device
	option macaddr '**:**:**:**:**:**'
	option name 'eth1.7'

config interface 'wan'
	option proto 'pppoe'
	option password '********'
	option username 'vodafone-ftth.komplett/**********'
	option ipv6 '1'
	option metric '4'
	option device 'eth1.7'

config interface 'wan6'
	option proto 'dhcpv6'
	option reqaddress 'try'
	option reqprefix 'auto'
	option device 'pppoe-wan'
	option disabled '0'

config interface 'wan4'
	option proto 'dslite'
	option peeraddr '::'
	option encaplimit 'ignore'

config interface 'guest'
	option force_link '1'
	option type 'bridge'
	option proto 'static'
	option ipaddr '192.168.9.1'
	option netmask '255.255.255.0'
	option multicast_querier '1'
	option igmp_snooping '0'
	option isolate '0'
	option bridge_empty '1'
	option disabled '1'
	option ip6prefix '****:****:****::/48'
	option ip6assign '64'
	option ip6hint '0001'
	option ip6ifaceid '::1'
	option ip6class 'guest'

config rule 'policy_relay_lo_rt_lan'
	option lookup '16800'
	option in 'loopback'
	option priority '1'

config interface 'tethering6'
	option device '@tethering'
	option proto 'dhcpv6'
	option disabled '0'

config interface 'wwan6'
	option device '@wwan'
	option proto 'dhcpv6'
	option disabled '0'

config interface 'wwan'
	option proto 'dhcp'
	option classlessroute '0'
	option metric '2'

config interface 'secondwan'
	option ipv6 '0'
	option proto 'dhcp'
	option force_link '0'
	option classlessroute '0'
	option metric '1'

config interface 'secondwan6'
	option proto 'dhcpv6'
	option device '@secondwan'
	option disabled '1'

config rule 'novpn_to_main'
	option gl_vpn_rules '1'
	option mark '0x8000/0xf000'
	option priority '6000'
	option lookup 'main'
	option disabled '0'

config rule 'vpn_to_main'
	option gl_vpn_rules '1'
	option mark '0x0/0xf000'
	option priority '9000'
	option lookup 'main'
	option invert '1'
	option disabled '0'

config rule 'vpn_leak_block'
	option gl_vpn_rules '1'
	option mark '0x0/0xf000'
	option priority '9910'
	option action 'blackhole'
	option invert '1'
	option disabled '0'

config rule 'vpn_block_lan_leak'
	option gl_vpn_rules '1'
	option in 'lan'
	option priority '9920'
	option action 'blackhole'
	option disabled '0'

config rule 'vpn_block_guest_leak'
	option gl_vpn_rules '1'
	option in 'guest'
	option priority '9920'
	option action 'blackhole'
	option disabled '0'

config rule 'vpn_block_wgserver_leak'
	option gl_vpn_rules '1'
	option in 'wgserver'
	option priority '9920'
	option action 'blackhole'
	option disabled '0'

config rule 'vpn_block_ovpnserver_leak'
	option gl_vpn_rules '1'
	option in 'ovpnserver'
	option priority '9920'
	option action 'blackhole'
	option disabled '0'

config interface 'tethering'
	option proto 'dhcp'
	option metric '3'
	option device 'usb0'
	option disabled '1'

config rule6 'novpn_to_main_6'
	option gl_vpn_rules '1'
	option mark '0x8000/0xf000'
	option priority '6000'
	option lookup 'main'
	option disabled '0'

config rule6 'vpn_to_main_6'
	option gl_vpn_rules '1'
	option mark '0x0/0xf000'
	option priority '9000'
	option lookup 'main'
	option invert '1'
	option disabled '0'

config rule6 'vpn_leak_block_6'
	option gl_vpn_rules '1'
	option mark '0x0/0xf000'
	option priority '9910'
	option action 'blackhole'
	option invert '1'
	option disabled '0'

config rule6 'vpn_block_lan_leak_6'
	option gl_vpn_rules '1'
	option in 'lan'
	option priority '9920'
	option action 'blackhole'
	option disabled '0'

config rule6 'vpn_block_guest_leak_6'
	option gl_vpn_rules '1'
	option in 'guest'
	option priority '9920'
	option action 'blackhole'
	option disabled '0'

config rule6 'vpn_block_wgserver_leak_6'
	option gl_vpn_rules '1'
	option in 'wgserver'
	option priority '9920'
	option action 'blackhole'
	option disabled '0'

config rule6 'vpn_block_ovpnserver_leak_6'
	option gl_vpn_rules '1'
	option in 'ovpnserver'
	option priority '9920'
	option action 'blackhole'
	option disabled '0'

config rule 'main_static_net'
	option gl_vpn_rules '1'
	option suppress_prefixlength '0'
	option priority '800'
	option lookup '9910'
	option disabled '0'

config rule6 'main_static_net_6'
	option gl_vpn_rules '1'
	option suppress_prefixlength '0'
	option priority '800'
	option lookup '9910'
	option disabled '0'

My /etc/config/firewall :

config defaults
	option input 'ACCEPT'
	option output 'ACCEPT'
	option forward 'REJECT'
	option synflood_protect '1'

config rule 'wan_drop_leaked_adgdns'
	option name 'wan_drop_leaked_adgdns'
	option src 'wan'
	option proto 'udp'
	option dest_port '3053'
	option mark '0x0/0xf000'
	option target 'DROP'
	option enabled '0'

config rule 'wan_drop_leaked_dns'
	option name 'wan_drop_leaked_dns'
	option src 'wan'
	option proto 'udp'
	option dest_port '53'
	option mark '!0x8000/0xf000'
	option target 'DROP'
	option enabled '0'

config rule 'guest_drop_leaked_dns'
	option name 'guest_drop_leaked_dns'
	option src 'guest'
	option proto 'udp'
	option dest_port '53'
	option mark '!0x8000/0xf000'
	option target 'DROP'
	option enabled '0'

config rule 'guest_drop_leak_adgdns'
	option name 'guest_drop_leak_adgdns'
	option src 'guest'
	option proto 'udp'
	option dest_port '3053'
	option mark '0x0/0xf000'
	option target 'DROP'
	option enabled '0'

config zone
	option name 'lan'
	list network 'lan'
	option input 'ACCEPT'
	option output 'ACCEPT'
	option forward 'ACCEPT'

config zone
	option name 'wan'
	option output 'ACCEPT'
	option forward 'REJECT'
	option mtu_fix '1'
	option input 'REJECT'
	list network 'wan'
	list network 'wan6'
	list network 'wan4'
	list network 'wwan'
	list network 'secondwan'
	list network 'tethering'
	option masq '1'

config forwarding
	option src 'lan'
	option dest 'wan'
	option enabled '1'

config rule
	option name 'Allow-DHCP-Renew'
	option src 'wan'
	option proto 'udp'
	option dest_port '68'
	option target 'ACCEPT'
	option family 'ipv4'

config rule
	option name 'Allow-IGMP'
	option src 'wan'
	option proto 'igmp'
	option family 'ipv4'
	option target 'ACCEPT'

config rule
	option name 'Allow-DHCPv6'
	option src 'wan'
	option proto 'udp'
	option dest_port '546'
	option family 'ipv6'
	option target 'ACCEPT'

config rule
	option name 'Allow-MLD'
	option src 'wan'
	option proto 'icmp'
	option src_ip 'fe80::/10'
	list icmp_type '130/0'
	list icmp_type '131/0'
	list icmp_type '132/0'
	list icmp_type '143/0'
	option family 'ipv6'
	option target 'ACCEPT'

config rule
	option name 'Allow-ICMPv6-Input'
	option src 'wan'
	option proto 'icmp'
	option limit '1000/sec'
	option family 'ipv6'
	option target 'ACCEPT'
	list icmp_type 'destination-unreachable'
	list icmp_type 'packet-too-big'
	list icmp_type 'time-exceeded'
	list icmp_type 'bad-header'
	list icmp_type 'unknown-header-type'
	list icmp_type 'router-solicitation'
	list icmp_type 'neighbour-solicitation'
	list icmp_type 'router-advertisement'
	list icmp_type 'neighbour-advertisement'

config rule
	option name 'Allow-ICMPv6-Forward'
	option src 'wan'
	option dest '*'
	option proto 'icmp'
	list icmp_type 'echo-request'
	list icmp_type 'echo-reply'
	list icmp_type 'destination-unreachable'
	list icmp_type 'packet-too-big'
	list icmp_type 'time-exceeded'
	list icmp_type 'bad-header'
	list icmp_type 'unknown-header-type'
	option limit '1000/sec'
	option family 'ipv6'
	option target 'ACCEPT'

config rule
	option name 'Allow-IPSec-ESP'
	option src 'wan'
	option dest 'lan'
	option proto 'esp'
	option target 'ACCEPT'

config rule
	option name 'Allow-ISAKMP'
	option src 'wan'
	option dest 'lan'
	option dest_port '500'
	option proto 'udp'
	option target 'ACCEPT'

config rule
	option name 'Support-UDP-Traceroute'
	option src 'wan'
	option dest_port '33434:33689'
	option proto 'udp'
	option family 'ipv4'
	option target 'REJECT'
	option enabled 'false'

config include
	option path '/etc/firewall.user'

config zone
	option name 'guest'
	option network 'guest'
	option forward 'REJECT'
	option output 'ACCEPT'
	option input 'REJECT'

config forwarding
	option src 'guest'
	option dest 'wan'
	option enabled '1'

config rule
	option name 'Allow-DHCP'
	option src 'guest'
	option target 'ACCEPT'
	option proto 'udp'
	option dest_port '67-68'

config rule
	option name 'Allow-DNS'
	option src 'guest'
	option target 'ACCEPT'
	option proto 'tcp udp'
	option dest_port '53'

config include 'nat6'
	option path '/etc/firewall.nat6'
	option reload '1'

config include 'dns_order'
	option type 'script'
	option path '/etc/firewall.dns_order'
	option reload '1'
	option enabled '1'

config include 'vpnclient'
	option type 'script'
	option path '/usr/bin/rtp2.sh'
	option reload '0'

config include 'glblock'
	option type 'script'
	option path '/usr/bin/gl_block.sh'
	option reload '1'

config include 'dmz_exclude'
	option type 'script'
	option path '/etc/firewall.dmz.exclude'
	option reload '1'

config include 'security'
	option type 'script'
	option path '/etc/firewall.security'
	option reload '0'

config rule 'lan_drop_leaked_dns'
	option name 'lan_drop_leaked_dns'
	option src 'lan'
	option proto 'udp'
	option dest_port '53'
	option mark '!0x8000/0xf000'
	option target 'DROP'
	option enabled '1'

config rule 'lan_drop_leak_adgdns'
	option name 'lan_drop_leak_adgdns'
	option src 'lan'
	option proto 'udp'
	option dest_port '3053'
	option mark '0x0/0xf000'
	option target 'DROP'
	option enabled '1'

config rule 'wgserver_drop_leaked_dns'
	option name 'wgserver_drop_leaked_dns'
	option src 'wgserver'
	option proto 'udp'
	option dest_port '53'
	option mark '!0x8000/0xf000'
	option target 'DROP'
	option enabled '1'

config rule 'ovpnserver_drop_leaked_dns'
	option name 'ovpnserver_drop_leaked_dns'
	option src 'ovpnserver'
	option proto 'udp'
	option dest_port '53'
	option mark '!0x8000/0xf000'
	option target 'DROP'
	option enabled '1'

config rule 'wgserver_drop_leaked_adgdns'
	option name 'wgserver_drop_leaked_adgdns'
	option src 'wgserver'
	option proto 'udp'
	option dest_port '3053'
	option mark '0x0/0xf000'
	option target 'DROP'
	option enabled '1'

config rule 'ovpnserver_drop_leaked_adgdns'
	option name 'ovpnserver_drop_leaked_adgdns'
	option src 'ovpnserver'
	option proto 'udp'
	option dest_port '3053'
	option mark '0x0/0xf000'
	option target 'DROP'
	option enabled '1'

config include 'ethernet_ttl'
	option type 'script'
	option reload '1'
	option path '/etc/firewall.ethernet_ttl'

config rule 'glipv6_guest_dhcp'
	option name 'Allow-DHCP-IPV6'
	option src 'guest'
	option target 'ACCEPT'
	option proto 'udp'
	option dest_port '546:547'
	option family 'ipv6'

config rule 'glipv6_guest_icmp'
	option name 'Allow-ICMP-IPV6'
	option src 'guest'
	option target 'ACCEPT'
	option proto 'icmp'
	option dest_port '58'
	option family 'ipv6'

A short excerpt from the log. Obviously there's something wrong with the wan6_4 interface, but I don't know what it is or where it's defined:

Fri Apr 17 22:31:14 2026 daemon.notice netifd: Interface 'wan6_4' is setting up now
Fri Apr 17 22:31:23 2026 daemon.notice netifd: Interface 'wan6_4' is now down
Fri Apr 17 22:31:23 2026 daemon.notice netifd: Interface 'wan6_4' is setting up now
Fri Apr 17 22:31:32 2026 daemon.notice netifd: Interface 'wan6_4' is now down
Fri Apr 17 22:31:32 2026 daemon.notice netifd: Interface 'wan6_4' is setting up now
Fri Apr 17 22:31:41 2026 daemon.notice netifd: Interface 'wan6_4' is now down
Fri Apr 17 22:31:41 2026 daemon.notice netifd: Interface 'wan6_4' is setting up now
Fri Apr 17 22:31:50 2026 daemon.notice netifd: Interface 'wan6_4' is now down
Fri Apr 17 22:31:50 2026 daemon.notice netifd: Interface 'wan6_4' is setting up now
Fri Apr 17 22:31:59 2026 daemon.notice netifd: Interface 'wan6_4' is now down
Fri Apr 17 22:31:59 2026 daemon.notice netifd: Interface 'wan6_4' is setting up now
Fri Apr 17 22:32:08 2026 daemon.notice netifd: Interface 'wan6_4' is now down
Fri Apr 17 22:32:08 2026 daemon.notice netifd: Interface 'wan6_4' is setting up now
Fri Apr 17 22:32:18 2026 daemon.notice netifd: Interface 'wan6_4' is now down
Fri Apr 17 22:32:18 2026 daemon.notice netifd: Interface 'wan6_4' is setting up now
Fri Apr 17 22:32:27 2026 daemon.notice netifd: Interface 'wan6_4' is now down
Fri Apr 17 22:32:27 2026 daemon.notice netifd: Interface 'wan6_4' is setting up now
Fri Apr 17 22:32:36 2026 daemon.notice netifd: Interface 'wan6_4' is now down
Fri Apr 17 22:32:36 2026 daemon.notice netifd: Interface 'wan6_4' is setting up now
Fri Apr 17 22:32:45 2026 daemon.notice netifd: Interface 'wan6_4' is now down
Fri Apr 17 22:32:45 2026 daemon.notice netifd: Interface 'wan6_4' is setting up now
Fri Apr 17 22:32:54 2026 daemon.notice netifd: Interface 'wan6_4' is now down
Fri Apr 17 22:32:54 2026 daemon.notice netifd: Interface 'wan6_4' is setting up now
Fri Apr 17 22:33:03 2026 daemon.notice netifd: Interface 'wan6_4' is now down
Fri Apr 17 22:33:03 2026 daemon.notice netifd: Interface 'wan6_4' is setting up now
Fri Apr 17 22:33:12 2026 daemon.notice netifd: Interface 'wan6_4' is now down

Thank you in advance for any help.

Best regards,
Holger

This is the GL-inet vendor supplied firmware. It is not official OpenWrt -- it's a heavily modified fork which is only similar "in name only"..

The good news is that your device is well supported with the official project, so you can install OpenWrt 25.12 (latest) and we can help you here.

If you continue using the existing firmware, you need to direct your questions to the GL-inet support resources

I had already flashed the device to OpenWRT 25.12.2 but I couldn't find a way to activate ds-lite protocol.
Now I repeated flashing to 25.12.2 and I have the same problem. I changed my /etc/config/network and /etc/config/firewall according to the instructions under https://openwrt.org/docs/guide-user/network/wan/isp-configurations#vodafone
My /etc/config/network :

config interface 'loopback'
	option device 'lo'
	option proto 'static'
	list ipaddr '127.0.0.1/8'

config globals 'globals'
	option dhcp_default_duid '0004886f3285077749e48e925bb4e9c9bd09'
	option ula_prefix 'fd48:304f:e57::/48'

config device
	option name 'br-lan'
	option type 'bridge'
	list ports 'lan1'
	list ports 'lan2'
	list ports 'lan3'
	list ports 'lan4'
	list ports 'lan5'

config interface 'lan'
	option device 'br-lan'
	option proto 'static'
	list ipaddr '192.168.1.1/24'
	option ip6assign '60'

config interface 'wan'
	option device 'eth1.7'
	option proto 'pppoe'
	option username 'vodafone-ftth.komplett/vb**********'
	option password '********'
	option ipv6 '1'

config interface 'wan6'
	option proto 'dhcpv6'
	option reqaddress 'try'
	option reqprefix 'auto'
	option device 'pppoe-wan'

config interface 'wan4'
	option proto 'dslite'
	option peeraddr '::'
	option encaplimit 'ignore'

And my /etc/config/firewall :

config defaults
	option syn_flood	1
	option input		REJECT
	option output		ACCEPT
	option forward		REJECT
# Uncomment this line to disable ipv6 rules
#	option disable_ipv6	1

config zone
	option name		lan
	list   network		'lan'
	option input		ACCEPT
	option output		ACCEPT
	option forward		ACCEPT

config zone
	option name		wan
	list   network		'wan'
	list   network		'wan4'
	list   network		'wan6'
	option input		REJECT
	option output		ACCEPT
	option forward		REJECT
	option masq		1
	option mtu_fix		1

config forwarding
	option src		lan
	option dest		wan

# We need to accept udp packets on port 68,
# see https://dev.openwrt.org/ticket/4108
config rule
	option name		Allow-DHCP-Renew
	option src		wan
	option proto		udp
	option dest_port	68
	option target		ACCEPT
	option family		ipv4

# Allow IPv4 ping
config rule
	option name		Allow-Ping
	option src		wan
	option proto		icmp
	option icmp_type	echo-request
	option family		ipv4
	option target		ACCEPT

config rule
	option name		Allow-IGMP
	option src		wan
	option proto		igmp
	option family		ipv4
	option target		ACCEPT

# Allow DHCPv6 replies
# see https://github.com/openwrt/openwrt/issues/5066
config rule
	option name		Allow-DHCPv6
	option src		wan
	option proto		udp
	option dest_port	546
	option family		ipv6
	option target		ACCEPT

config rule
	option name		Allow-MLD
	option src		wan
	option proto		icmp
	option src_ip		fe80::/10
	list icmp_type		'130/0'
	list icmp_type		'131/0'
	list icmp_type		'132/0'
	list icmp_type		'143/0'
	option family		ipv6
	option target		ACCEPT

# Allow essential incoming IPv6 ICMP traffic
config rule
	option name		Allow-ICMPv6-Input
	option src		wan
	option proto	icmp
	list icmp_type		echo-request
	list icmp_type		echo-reply
	list icmp_type		destination-unreachable
	list icmp_type		packet-too-big
	list icmp_type		time-exceeded
	list icmp_type		bad-header
	list icmp_type		unknown-header-type
	list icmp_type		router-solicitation
	list icmp_type		neighbour-solicitation
	list icmp_type		router-advertisement
	list icmp_type		neighbour-advertisement
	option limit		1000/sec
	option family		ipv6
	option target		ACCEPT

# Allow essential forwarded IPv6 ICMP traffic
config rule
	option name		Allow-ICMPv6-Forward
	option src		wan
	option dest		*
	option proto		icmp
	list icmp_type		echo-request
	list icmp_type		echo-reply
	list icmp_type		destination-unreachable
	list icmp_type		packet-too-big
	list icmp_type		time-exceeded
	list icmp_type		bad-header
	list icmp_type		unknown-header-type
	option limit		1000/sec
	option family		ipv6
	option target		ACCEPT

config rule
	option name		Allow-IPSec-ESP
	option src		wan
	option dest		lan
	option proto		esp
	option target		ACCEPT

config rule
	option name		Allow-ISAKMP
	option src		wan
	option dest		lan
	option dest_port	500
	option proto		udp
	option target		ACCEPT


### EXAMPLE CONFIG SECTIONS
# do not allow a specific ip to access wan
#config rule
#	option src		lan
#	option src_ip	192.168.45.2
#	option dest		wan
#	option proto	tcp
#	option target	REJECT

# block a specific mac on wan
#config rule
#	option dest		wan
#	option src_mac	00:11:22:33:44:66
#	option target	REJECT

# block incoming ICMP traffic on a zone
#config rule
#	option src		lan
#	option proto	ICMP
#	option target	DROP

# port redirect port coming in on wan to lan
#config redirect
#	option src			wan
#	option src_dport	80
#	option dest			lan
#	option dest_ip		192.168.16.235
#	option dest_port	80
#	option proto		tcp

# port redirect of remapped ssh port (22001) on wan
#config redirect
#	option src		wan
#	option src_dport	22001
#	option dest		lan
#	option dest_port	22
#	option proto		tcp

### FULL CONFIG SECTIONS
#config rule
#	option src		lan
#	option src_ip	192.168.45.2
#	option src_mac	00:11:22:33:44:55
#	option src_port	80
#	option dest		wan
#	option dest_ip	194.25.2.129
#	option dest_port	120
#	option proto	tcp
#	option target	REJECT

#config redirect
#	option src		lan
#	option src_ip	192.168.45.2
#	option src_mac	00:11:22:33:44:55
#	option src_port		1024
#	option src_dport	80
#	option dest_ip	194.25.2.129
#	option dest_port	120
#	option proto	tcp

Now my interfaces look like this:


When I click the link "Install protocol extensions" beside "wan4" all proposed packges ( luci-proto-ipv6 + luci-proto-ppp ) are already installed.

Can anyone help me out on how to enable ds-lite for wan4 ?

Best regards
Holger

You should be able to delete that wan4 interface. If not, just reset to defaults and it should be gone.

I deleted wan4 , but I can't access internet.
I think I need an interface wan4 with the protocol ds-lite because my internet-connection works with ds-lite .

Ooops, SOME internet adresses work now. So already a big THANKS for that.

But for example

Could this be a problem of IPv6 vs IPv4 ?

And I cannot connect to the other devices in my LAN . :frowning:

Could be an IPv6 thing or DNS.

Did you install the ds-lite package?
And luci-proto-ipv6 to get GUI support?

(In the real OpenWrt, I mean)

Hey, that was the right hint! I had searched for a package "ds-lite" directly after installing, but it was not available. Now - after an update of the lists of available packages - I could find an install this and after readding the wan4 interface as described in https://openwrt.org/docs/guide-user/network/wan/isp-configurations#vodafone the internet works!

Many thanks to all!

Regards
Holger

Just to be clear, you have to update lists before searching/installing packages.

Glad you found the package.