Client Bridge + Separate Isolated LANs with Shared WAN

Post new topic   Reply to topic    DD-WRT Forum Index -> Advanced Networking
Author Message
nonmagnetic
DD-WRT Novice


Joined: 12 Apr 2018
Posts: 2

PostPosted: Thu Apr 12, 2018 6:09    Post subject: Client Bridge + Separate Isolated LANs with Shared WAN Reply with quote
I have a Netgear R6400 running v3.0-r35030M kongac (02/19/1Cool


I get my internet from a landlord who gives me access to his wireless AP.

I'd like to configure my router to setup a private LAN and WLAN that's isolated from the landlord, but still allows internet access to the isolated LAN.


So far I've done this:

0) Setup the router on the landlords subnet (192.168.1.42)
1) Setup the 5GHz radio (eth1) in Client Bridge Mode (including setting Operating Mode to Router, disabling DHCP and SPI firewall)
2) Setup the 2.4GHz radio (eth2) in AP mode.
3) Edited bridge (br0) to link eth1, vlan1 (my router's WAN port, so I can still get access to my landlord's LAN if needed)
4) Created a bridge (br1,192.168.42.1) to link eth2, vlan2 (4 switch ports)
5)Setup DHCPD for br1 for the 192.168.42.x clients

So far:

I can connect to the WAN port and get internet access and I'm assigned an IP on the 192.168.1.x subnet

I can connect to the Switch ports, and my new AP, and I'm assigned an IP on the 192.168.42.x subnet - But - There is no internet connection. - What's also weird is that I can still access the router configuration at 192.168.1.42 but that shouldn't be possible with what I'm trying to do.


Does anyone have any suggestions? I'm not sure if I'm making a mistake in the configuration, or is there another method I should be using?
Sponsor
Per Yngve Berg
DD-WRT Guru


Joined: 13 Aug 2013
Posts: 6870
Location: Romerike, Norway

PostPosted: Thu Apr 12, 2018 13:09    Post subject: Reply with quote
Did you enter a static route to 192.168.42.0 on your landlord's router?

As you have put your router in router mode and not gateway, there is not nat. Your landlord's router must know how to route back to 192.168.42.x
egc
DD-WRT Guru


Joined: 18 Mar 2014
Posts: 12917
Location: Netherlands

PostPosted: Thu Apr 12, 2018 13:57    Post subject: Reply with quote
Or pherhaps add a firewall rule to nat like:
Code:
iptables -t nat -A POSTROUTING -j MASQUERADE

or a more specific one like:
Code:
WAN_IF="$(route -n | awk '/^0.0.0.0/{wif=$NF} END {print wif}')"
iptables -t nat -I POSTROUTING -s 192.168.42.1/24 -o $WAN_IF -j MASQUERADE)

There is a WAN interface so I assume the specific rule also works not sure though.

Alternatively leave router in gateway mode and use Client instead of Client Bridge

_________________
Routers:Netgear R7000, R6400v1, R6400v2, EA6900 (XvortexCFE), E2000, E1200v1, WRT54GS v1.
Install guide R6400v2, R6700v3,XR300:https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=316399
Install guide R7800/XR500: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=320614
Forum Guide Lines (important read):https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=324087
nonmagnetic
DD-WRT Novice


Joined: 12 Apr 2018
Posts: 2

PostPosted: Fri Apr 13, 2018 5:36    Post subject: Reply with quote
Quote:
Alternatively leave router in gateway mode and use Client instead of Client Bridge


This broke the internet connection on the bridged switch ports that had been working and did not allow for the AP connected users to access the internet.


Quote:
Did you enter a static route to 192.168.42.0 on your landlord's router?


How should I set these options (see attachment) on the WAN connected router?
Display posts from previous:    Page 1 of 1
Post new topic   Reply to topic    DD-WRT Forum Index -> Advanced Networking All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You cannot download files in this forum