Posted: Wed Sep 20, 2023 16:52 Post subject: DD-WRT on Netgear R6300v2: Encrypt local traffic only
Thanks in advance
I have this router: Netgear R6300V2
I installed DD-WRT version on it which is: DD-WRT v24-sp2 (02/04/15) std - build 26138
I have it setup to repeat routers so I can use the repeated router as a gateway for internet traffic.
How do I encrypt the data between my above router and my devices, but keep the traffic unencrypted between my router and the main internet gateway? This is kind of like a VPN but would be hosted on my router rather than an internet router VPN service that costs money.
here's my basic setup:
Wireless Physical Interface wl0 [2.4 GHz] (this is the connection to the external router)
These are local LAN/WAN interfaces that I want to encrypt and allow all clients connecrted to these to be encrypted so the router above cannot know what sites I am visiting or snoop.
Posted: Wed Sep 20, 2023 16:57 Post subject: Re: DD-WRT on Netgear R6300v2: Encrypt local traffic only
Come to think of it:
I don't think what I propose will work right?
I would need a VPN to encrypt traffic between my router and the external right?
Otherwise if I encrypted traffic between my router and the external WAN, it would come out as gibberish right?
djddwrt19801 wrote:
Thanks in advance
I have this router: Netgear R6300V2
I installed DD-WRT version on it which is: DD-WRT v24-sp2 (02/04/15) std - build 26138
I have it setup to repeat routers so I can use the repeated router as a gateway for internet traffic.
How do I encrypt the data between my above router and my devices, but keep the traffic unencrypted between my router and the main internet gateway? This is kind of like a VPN but would be hosted on my router rather than an internet router VPN service that costs money.
here's my basic setup:
Wireless Physical Interface wl0 [2.4 GHz] (this is the connection to the external router)
These are local LAN/WAN interfaces that I want to encrypt and allow all clients connecrted to these to be encrypted so the router above cannot know what sites I am visiting or snoop.
Posted: Wed Sep 20, 2023 16:59 Post subject: Re: DD-WRT on Netgear R6300v2: Encrypt local traffic only
Maybe a comrpromise like free external DNS that I could use on my router so that the ISP couldn't easily look up what sites I am visiting?
djddwrt19801 wrote:
Come to think of it:
I don't think what I propose will work right?
I would need a VPN to encrypt traffic between my router and the external right?
Otherwise if I encrypted traffic between my router and the external WAN, it would come out as gibberish right?
djddwrt19801 wrote:
Thanks in advance
I have this router: Netgear R6300V2
I installed DD-WRT version on it which is: DD-WRT v24-sp2 (02/04/15) std - build 26138
I have it setup to repeat routers so I can use the repeated router as a gateway for internet traffic.
How do I encrypt the data between my above router and my devices, but keep the traffic unencrypted between my router and the main internet gateway? This is kind of like a VPN but would be hosted on my router rather than an internet router VPN service that costs money.
here's my basic setup:
Wireless Physical Interface wl0 [2.4 GHz] (this is the connection to the external router)
These are local LAN/WAN interfaces that I want to encrypt and allow all clients connecrted to these to be encrypted so the router above cannot know what sites I am visiting or snoop.
I would just use a vpn to stop the upstream router sniffing to much, although this is not 100% if they can use wireshark. _________________ Netgear R7800 PPPoE Main Router
Network IPV4 - Isolated Vlan's with IoT Devices. Unifi AC-Pro x 3 AP's, Router Wi-Fi Disabled. OVPN Server With Paid Commercial Wireguard Client's. Gateway Mode, DNSMasq, Static Leases & DHCP, Pi-Hole DNS & Running Unbound.
No one can build you the bridge on which you, and only you, must cross the river of life!
Last edited by foz111 on Wed Sep 20, 2023 17:18; edited 1 time in total
Joined: 18 Mar 2014 Posts: 12499 Location: Netherlands
Posted: Wed Sep 20, 2023 17:19 Post subject:
Upgrade to the latest build e.g 53469.
After upgrade reset to defaults and put settings in manually, never restore from a backup (to a different build), if you do it is garbage out garbage in.
Yes I am hoping I do not need to "de brick" if a failed upgrade ,but I am afraid of this potential seeing now I am in a foreign country with very limited access to buy another..
If the upgrade fails I cannot get back into the admin panel right?
Thanks for the "hand holding" for sure and re-assurance.
I am only mainly thinking about upgrading so I can use Proton VPN
Right now it doesn't seem to work.
Do you have any idea how to setup Proton VPN on my build successfully with the below config file?
It's in the attachment
Attachment here
# ==============================================================================
# Copyright (c) 2023 Proton AG (Switzerland)
# Email: contact@protonvpn.com
#
# The MIT License (MIT)
#
# Permission is hereby granted, free of charge, to any person obtaining a copy
# of this software and associated documentation files (the "Software"), to deal
# in the Software without restriction, including without limitation the rights
# to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
# copies of the Software, and to permit persons to whom the Software is
# furnished to do so, subject to the following conditions:
#
# The above copyright notice and this permission notice shall be included in all
# copies or substantial portions of the Software.
#
# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
# FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
# AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
# LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR # OTHERWISE, ARISING
# FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS
# IN THE SOFTWARE.
# ==============================================================================
# If you are a paying user you can also enable the ProtonVPN ad blocker (NetShield) or Moderate NAT:
# Use: "WExaSp5UBYUpui0s+f1" as username to enable anti-malware filtering
# Use: "WExaSp5UBYUpui0s+f2" as username to additionally enable ad-blocking filtering
# Use: "WExaSp5UBYUpui0s+nr" as username to enable Moderate NAT
# Note that you can combine the "+nr" suffix with other suffixes.
