Posted: Mon Nov 22, 2021 13:45 Post subject: DD-WRT in Accesspoint-Mode and Repeater-Bridge
Hi guys,
I'm learning to Setup DD-WRT following some tutorials.
Therefore I have some questions for my understanding:
My main Router is 192.168.7.1, connected to Internet, DHCP enabled.
I have a DD-WRT (192.168.7.2) running behind it
- running as Access Point
- connected via ethernetcable to 192.168.7.1
- WAN Connection Type > Disabled
- DHCP Type is "DHCP Server" > "Disabled"
# Question 1:
Some Tutorials say it must be "DHCP Forwarder" + 192.168.7.1
But for me, it still works right now with "Disable".
what would be the benefits if setting to "DHCP Forwarder"?
What problems could happen with the current setting?
# Question 2:
Tutorials say Setup > Advanced Routing > Operating Mode:
must be Router (not Gateway)
Right now it is "Gateway" and I still have no problems...
Whats the difference when changing to "Router"?
I have a second DD-WRT (192.168.7.3)
- running as Repeater-Bridge
- connected via Wifi to 192.168.7.2
Setup > Basic Setup > Network Setup > Router IP
Local IP Address 192.168.7.3
Subnet Mask 255 255 2255 0
Gateway 0.0.0.0
Local DNS 0.0.0.0
# Question 3:
It somehow still works with 0.0.0.0, some tutorials say it must be
either 192.168.7.1 or 192.168.7.2...
whats correct?
# Question 4:
Since I upgraded the 192.168.7.2 to DD-WRT v3.0-r47656 std (11/18/21)
I'm not able to get its host name via IP.
When I do: cmd > nslookup 192.168.7.2 it says "Non-existent domain"
It worked before the upgrade
Joined: 18 Mar 2014 Posts: 12881 Location: Netherlands
Posted: Mon Nov 22, 2021 13:52 Post subject:
DHCP should be disabled (There is no DHCP forwarding in this case, that is between subnets)
Leave the router in Gateway mode.
(I know not everybody agrees, so this is my personal opinion)
Router mode disables NAT. It also disables the stateful firewall and connection tracking. And that can cause all kinds of headaches if for any reason you create dependencies (directly or indirectly) on either NAT or the stateful firewall/ connection tracking. For example, most of the additional featured offered (VPNs, proxies, captive portals, access restrictions, etc.) all create firewall rules and need connection tracking.
hey, thank you for your tipps.
So I will leave the settings just like they are.
I just found out, why "nslookup 192.168.7.2" doesn't work.
It seems that either the main router (192.168.7.1) or
the DD-WRT gives IPv6-Addresses to clients.
When I do "ipconfig /all" on my PC, I see that it has a lot of IPv6-Information.
But: IPv6 is disabled on both routers (definitely)
In Basic Setup > IPv6 Support is Disabled...
Are there some other hidden IPv6-Settings in DD-WRT?
It seems to me, that since the last firmware update, IPv6 is somehow still active.