Multi Wlan in Repeater Mode on RT-N66U / no LAN connection

Post new topic   Reply to topic    DD-WRT Forum Index -> Broadcom SoC based Hardware
Goto page 1, 2  Next
Author Message
Kurt T.
DD-WRT Novice


Joined: 10 Aug 2015
Posts: 26

PostPosted: Tue Aug 11, 2015 11:23    Post subject: Multi Wlan in Repeater Mode on RT-N66U / no LAN connection Reply with quote
Hey all, I am completely new and need help becouse i would like to realise an isolated network. I hope i give you enough information:

1: What router-model is it?


ASUS RT-N66U

2: What firmware version is used?

I decided for: dd-wrt.v24-26138_NEWD-2_K3.x-big-RT-N66U and it works good. I found a newer one (dd-wrt.v24-27506_NEWD-2_K3.x-big-RT-N66U); should i update?

3: : How did i flash the router? -> 30/30/30 sec. wrt.com/wiki/index.php/Multiple_WLANs Reset ?

Exaktly to this guide http://www.dd-wrt.com/wiki/index.php/Asus_RT-N66U

4: What ist the network used for?

I would like to share one internet connection with my neighbour.

5:how is the Router connected to the Internet?

Der Router is connected with Repeater Mode with the WIFI from the cablemodem.

5: What do i want to create / Whats the problem?

The N66U should make a 2.4Ghz + 5ghz Wifi Network which is isolated from original network (192.168.1.X). 2,4 + 5 ghz are necessary becouse not all my devices can use 5 ghz.
In the following pictures you can see the settings i made . I was reading this guide http://www.dd-wrt.com/wiki/index.php/Multiple_WLANs .

Router got IP 192.168.2.1
The settings for the two Wifi networks were done and on br0 it works but is not isolated.

http://abload.de/img/01qolvl.jpg

http://abload.de/img/02galf9.jpg

Now i created br1 for isolating (192.168.3.1) and assigned wl0.1 und eth2 to it. Multiple DHCP on br1 got activated. But then the Problem is: no internet access on wl0.1 and eth2.

http://abload.de/img/03imlri.jpg

I tried more settings but don´t know if they are correct

http://abload.de/img/04bdl0f.jpg

Next problem is: Under administration/commands there is no firewall option for iptables???

http://abload.de/img/055sadm.jpg

Ok I found it I added this tables from a guest tutorial:

http://abload.de/img/09b4qxx.jpg



I think there are missing some Iptables or Firewall settings? Or is my request not possible?
I was reading a few guides about „GUEST-Network“ to find the right settings…

For testing i only assigned wl0.1 on br1 and now i get no connection:

http://abload.de/img/06hmpd2.jpg

Another Problem is: with LAN cabel direct to one LAN Port from Router i get General no access/no ip:

http://abload.de/img/07m1q96.jpg

WHY? What Settings are still wrong/missing?

Thx for help. Hope my english is enough Wink


Last edited by Kurt T. on Fri Aug 14, 2015 17:49; edited 1 time in total
Sponsor
Kurt T.
DD-WRT Novice


Joined: 10 Aug 2015
Posts: 26

PostPosted: Fri Aug 14, 2015 17:38    Post subject: Reply with quote
Hello everybody,

I tried now another few settings an have been reading through the internet:

Network setting:

http://abload.de/img/01lbr2n.jpg

ADDED:
Additional DNSMasq Options
interface=br1
dhcp-option=br1,3,192.168.3.1
dhcp-range=br1,192.168.3.100,192.168.3.150,255.255.255.0,24h
interface=br2
dhcp-option=br2,3,192.168.4.1
dhcp-range=br2,192.168.4.100,192.168.4.150,255.255.255.0,24h

ADDED:
Firewall
iptables -t nat -I POSTROUTING -o `get_wanface` -j SNAT --to `nvram get wan_ipaddr`
iptables -I FORWARD -i br1 -d br0 -m state --state NEW -j DROP
iptables -I FORWARD -i br0 -o br1 -m state --state NEW -j DROP


Are this both commands necessary? or influence LAN Port connectivity?


iptables -I FORWARD -i br1 -d `nvram get wan_ipaddr`/`nvram get wan_netmask` -m state --state NEW -j DROP
iptables -I INPUT -i br1 -p udp --dport 67 -j ACCEPT
iptables -I INPUT -i br1 -p udp --dport 53 -j ACCEPT
iptables -I INPUT -i br1 -p tcp --dport 53 -j ACCEPT

iptables -I FORWARD -i br2 -d `nvram get wan_ipaddr`/`nvram get wan_netmask` -m state --state NEW -j DROP
iptables -I INPUT -i br2 -p udp --dport 67 -j ACCEPT
iptables -I INPUT -i br2 -p udp --dport 53 -j ACCEPT
iptables -I INPUT -i br2 -p tcp --dport 53 -j ACCEPT

WLAN network works now! Very Happy Very Happy Very Happy

But I think there are maybe some small mistakes in the configuration. Can someone PRO check it?

But there is still the Problem with the LAN Ports. With cable it is not possible to get a an ip or a connection. WHY Rolling Eyes

Please Help

I would be grateful for help because it took me lots hours to come until HERE. THX
b-man
DD-WRT User


Joined: 09 May 2010
Posts: 107

PostPosted: Sat Aug 15, 2015 11:17    Post subject: Reply with quote
im no pro by any means. and dont understand much about them

http://www.dd-wrt.com/wiki/index.php/Linking_Routers

i have set my router up as repeater before and didnt have an issue.

do you need to bridge your vlan with eth2 and wl0.1?


whats your vlan page look like?
you shouldnt need to bridge anything

a straight repeater setup with some ip tables should be fine? thats all mine was
then had my own wifi signal broadcast.
Kurt T.
DD-WRT Novice


Joined: 10 Aug 2015
Posts: 26

PostPosted: Sat Aug 15, 2015 16:39    Post subject: Reply with quote
Hi

I think Repeater Mode without bridge is the right way because all (LAN, WIFI 2,4 and WIFI 5 GHZ) should be independent from WAN Network.

Quote:
clients on different subnet from host AP (primary router). Computers connected to one router can not see computers connected to other routers in Windows Network.


whats your vlan page look like? ]

It is "original":

http://abload.de/img/vlan9zppg.jpg

Quote:
do you need to bridge your vlan with eth2 and wl0.1?


maybe. Becouse my Printer is in 2,4ghz wl0.1 and computer 5ghz eth2. But the problem is: if wl0.1 and eth2 are on the same bridge (br1 or br2) there are connection problems Rolling Eyes

thx for you answer.
Quote:
Per Yngve Berg
DD-WRT Guru


Joined: 13 Aug 2013
Posts: 6866
Location: Romerike, Norway

PostPosted: Sat Aug 15, 2015 20:04    Post subject: Reply with quote
On the VLAN Page in the GUI, set "None" to VLAN0.

Assign VLAN0 to br1 in the Bridging Page.
Kurt T.
DD-WRT Novice


Joined: 10 Aug 2015
Posts: 26

PostPosted: Sun Aug 16, 2015 17:04    Post subject: Reply with quote
Hello DD-WRT GURU Very Happy ,

I tried to add vlan0 to br1 and also to br2 but Ethernet-Ports are still not working and there are still connection Problems Rolling Eyes :
http://abload.de/img/11bjqel.jpg

http://abload.de/img/12d5pe0.jpg

Now tried to clear NVRAM with Putty. But next Problem is after typing the Login-Name I am not able to enter the password and I can´t send the NVRAM Clear code. I tried to ignore what I see and type the password but regardless it say´s: Login incorrect Rolling Eyes . WHY?

http://abload.de/img/13hergs.jpg

Now I restored Factory-Defaults by GUI and try again...


Last edited by Kurt T. on Sun Aug 16, 2015 17:30; edited 1 time in total
Per Yngve Berg
DD-WRT Guru


Joined: 13 Aug 2013
Posts: 6866
Location: Romerike, Norway

PostPosted: Sun Aug 16, 2015 17:27    Post subject: Reply with quote
The login name is "root"

Post the output of:

nvram show | grep vlan.*ports
Kurt T.
DD-WRT Novice


Joined: 10 Aug 2015
Posts: 26

PostPosted: Sun Aug 16, 2015 18:33    Post subject: Reply with quote
Quote:
The login name is "root"


If I changed it to "admin" and password "s********1" too?

Nothing worked anymore.
I am trying to restart with Asus Firmware Restoration and DD-WRT Firmware:

http://abload.de/img/1467kq9.jpg
Per Yngve Berg
DD-WRT Guru


Joined: 13 Aug 2013
Posts: 6866
Location: Romerike, Norway

PostPosted: Sun Aug 16, 2015 18:48    Post subject: Reply with quote
That user name is for the Web GUI only.
The telnet/ssh username is "root"

ssh root@192.168.1.1 and enter the same password as for the web GUI.
Kurt T.
DD-WRT Novice


Joined: 10 Aug 2015
Posts: 26

PostPosted: Sun Aug 16, 2015 18:54    Post subject: Reply with quote
Now after firmware restoration no dd-wrt network is coming up Sad Rolling Eyes . Now I try to flash original ASUS Firmware. It worked and I am on original firmware now but I am not able to get back to DD-WRT Sad

Flashing to original Firmware always works but after that flashing to DD-WRT mini or big doesn´t work Sad

I am a few seconds before to throw it out the window because with DD-WRT it is not booting/coming up...

Is it possible to work with putty commands and ASUS-Firmware? ok I found the answer: no
Kurt T.
DD-WRT Novice


Joined: 10 Aug 2015
Posts: 26

PostPosted: Mon Aug 17, 2015 9:23    Post subject: Reply with quote
Ok now I am back with DD-WRT Big firmware and factory defaults. LAN Ports are not working/ not addressing.

Quote:
Post the output of:

nvram show | grep vlan.*ports


http://abload.de/img/15u0ufe.jpg
Kurt T.
DD-WRT Novice


Joined: 10 Aug 2015
Posts: 26

PostPosted: Mon Aug 17, 2015 9:41    Post subject: Reply with quote
Now I am using an easier configuration and it works except LAN-Ports:

http://abload.de/img/18j5qq2.jpg

http://abload.de/img/17gipu9.jpg

http://abload.de/img/168ircp.jpg

I added a USB-Storage with 32GB:

http://abload.de/img/19aaosh.jpg

Made settings for NAS

http://abload.de/img/20t7psk.jpg

but when I am connected in my WORKGROUP "Homenetwork" I can´t see it WHY?[/u]
This worked:
Quote:
Hi Bill
I have also done some DD-WRT (will start posting them at a later date so make sure you keep coming back as I’ll be including DLNA and torrenting too).
When I was doing mine I found that it doesn’t always register it for some reason so try the following:
1) Open file explorer
2) Enter the IP of your router in the address bar like so \\192.168.1.1 (or whatever your default IP is)
3) it should now appear with the different partitions you have (I have mine on two parties and you will find out why in a later article)
4) right click the partition and select mount as drive.
Kurt T.
DD-WRT Novice


Joined: 10 Aug 2015
Posts: 26

PostPosted: Wed Aug 19, 2015 12:39    Post subject: Reply with quote
@Per Yngve Berg

Quote:
Post the output of:

nvram show | grep vlan.*ports


http://abload.de/img/2160qm0.jpg
Kurt T.
DD-WRT Novice


Joined: 10 Aug 2015
Posts: 26

PostPosted: Fri Aug 28, 2015 19:17    Post subject: Reply with quote
Hello

LAN Port´s still not working Rolling Eyes . What can I do?
Per Yngve Berg
DD-WRT Guru


Joined: 13 Aug 2013
Posts: 6866
Location: Romerike, Norway

PostPosted: Sun Aug 30, 2015 8:28    Post subject: Reply with quote
You have a bogus vlan here.

nvram unset vlan0ports

It should only be vlan 1 and 2.
Goto page 1, 2  Next Display posts from previous:    Page 1 of 2
Post new topic   Reply to topic    DD-WRT Forum Index -> Broadcom SoC based Hardware All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum