Travel VPN Router for China: Setup and Who Needs One

It sits behind the hotel’s or apartment’s network and broadcasts its own Wi‑Fi. The route is built on the router, and your devices simply join the Wi‑Fi.

• Devices that cannot run a client are covered: a streaming stick, a TV box, a game console, an e-reader, a company laptop that does not allow new software.
• People travelling with you just join. Colleagues and family connect to the Wi‑Fi and need no instructions. The router uses one device slot on the account, and everything behind it is not counted separately.
• Moving on needs no reconfiguration. Each device remembers one Wi‑Fi. At the next hotel you bring the router online again and everything reconnects.
• A device that must stay direct simply stays off it. A work laptop that needs the corporate VPN, for example, joins the hotel’s or apartment’s own network instead.
• You still want a client on the phone. Outside the room the phone is on mobile data or someone else’s Wi‑Fi, and the router is not involved. Phone preparation is in setting up for business trips and travel.

A room with an Ethernet socket is the simple case: plug the cable into the router’s WAN port and the router is on the hotel network. In a Wi‑Fi-only room, a travel router can usually join the hotel Wi‑Fi as a client and rebroadcast its own. That depends on the model and its firmware, so try it once at home before you travel.

A login page (the captive portal that asks for a room number or phone number) is generally handled like this:

• A few hotels limit each room to one connected device or do not allow routers. On such a network, go back to a client on each device.
• Hotel and airport networks often restrict UDP. If the router will not connect or is slow, the Cisco (AnyConnect) client on your phone and laptop is the ready fallback: it runs over TLS and is unaffected by that restriction. See Does Cisco AnyConnect work in China?

1. Connect the router to the hotel network. It is not yet authorised, so nothing loads.
2. Switch the router to direct mode. With the route on, the login page often fails to appear.
3. On a phone or laptop joined to the router, open any web page and complete the login when the portal appears. The hotel sees the router as one device, so one login covers everything behind it.
4. Once normal browsing works, switch the router back to split mode.
5. Hotel logins usually expire after a while. If everything stops at once, repeat these steps before suspecting the route.

In China, half the apps on your phone are local: payments, maps, ride-hailing, food delivery, messaging. If all traffic leaves the country and comes back, those apps slow down, and some ask you to verify again because they see a foreign IP address. Split routing prevents that: traffic that needs the route takes it, and the rest goes direct.

• Our firmware splits by default, and the direction follows the region you pick. With an overseas region, Chinese sites and apps go direct and blocked foreign sites use the route.
• Lists are built per whole website. A page travels together with the video, image and login sources it uses, so you do not get a page that opens with a video that will not play.
• Every device on the router follows the same rules, and the lists update automatically when the router boots, with no reflashing.
• When one device ignores the rules, it usually has Private DNS or Secure DNS switched on. Turn that off and retry. How it works and how to check it yourself: how split routing works on a VPN router.
• The same router is still useful back home. Pick a China region and the direction reverses: Chinese video and apps use the route and local sites go direct. For the living-room setup, see for the TV and the grandparents at home.

We sell four models with the firmware installed. GL-MT3000: portable, Wi‑Fi 6, one 2.5G port, our first recommendation and the one that serves both home and travel. GL-AXT1800: portable, Wi‑Fi 6, a gigabit WAN port plus two gigabit LAN ports, for wiring two devices on the road. GL-MT3600BE: portable, Wi‑Fi 7, two 2.5G ports. GL-MT6000: desktop, the most ports and processing power of the four, for a posting where it stays in the apartment or a small office. Choosing between them is covered in choosing a VPN router, and ordering is on the router page.

• Power: most pocket routers run from USB power, so a phone charger or a power bank can drive them, which is why they are often called USB routers. The connector and the power a given model needs are stated by its manufacturer, and carrying the supplied adapter is the safe choice.
• Size: a portable model is slightly larger than a palm and fits in a laptop bag. A desktop model has external antennas and suits a fixed spot in an apartment.
• Ports: to take a cable from the hotel network you need a WAN port. To wire a laptop or a TV box as well, count the LAN ports.
• Wireless: match the Wi‑Fi generation your phone and laptop support. Anything newer goes unused.
• Processing power: the router’s processor does the encryption. More people online at once and faster broadband both ask more of it.

If you already run stock OpenWrt and prefer to configure it yourself, you can import an .ovpn profile as described in how to use OpenVPN. Split-routing rules and upkeep are then yours to maintain. The difference between the two paths is explained in What is OpenWrt?

1. Buy one pre-installed: choose a model on the router page. When it arrives, power it, connect it and log in with your account on its admin page. Delivery takes time, so order well ahead of the trip.
2. Or flash a router you own: if it is supported by OpenWrt (we support over 600 models), build the firmware for your model on this site and flash it with the flashing guide. The firmware is generated for your account, so after flashing the router connects by itself.
3. Run it at home for a few days. Confirm every device takes the route, and change the admin and Wi‑Fi passwords, because the factory defaults are public.
4. Install a client on your phone as a fallback, and note how to reach support: how to reach us and stay in touch.
5. On first power-up after arrival, connect the cable and let the router go online once. The firmware sets radio power to the rules of the country it is in, and a weak signal before that first connection is normal.

• For the router: set up once for every device, covers devices that cannot run a client, one set of split-routing rules, and companions need no preparation.
• For apps: nothing extra to carry, they work outside the room, and switching connection method on a difficult network is quickest in an app, with six methods on one account.
• Use both: the router where you stay and a client on the phone when you go out. Each counts as one device.

• One person, one phone, a few days: a client on the phone is enough, perhaps with a roaming eSIM. See eSIM vs VPN in China.
• Only one laptop to cover: install a client on it. On a company laptop that takes no new software, use the web proxy.
• A different hotel every night: each stop means reconnecting and another login page, which costs more effort than it saves.
• Accommodation that forbids routers or allows one connected device.
• No wish to manage hardware: use clients only, and consider a router once you have settled in.