[andycpp]

I'm trying to setup dual WAN (based on Wiki articles) but have no luck (errors during ip route add defaults part RTNETLINK: No such process).

What I have:
RT-N16 (10.0.0.1)
WAN Modem1 (82.1.1.1 - dhcp based)
WAN Modem2 (192.1.1.1 - static)
Comp1 (10.0.0.10)
Comp2 (10.0.0.20)
Comp3 (10.0.0.30)
DD-WRT v24-sp2 (02/03/10) big - build 13832

What I want:
1) route WAN traffic from Comp2 & Comp3 through Modem1
2) route WAN traffic from Comp1 through Modem2
3) pressing EZSetup button - either all traf through Modem 1 or previous mode
4) adjust firewall rules through Web GUI (80 port to Comp2, 25/443 port to Comp3, 1234 port to Comp1)

Kindly ask to provide me with the full script :)

p.s. I've made such a config (except button) under Oleg's firmware & wl-550gE... But have troubles with dd-wrt & n16

[phuzi0n]

You can't change the VLAN port assignments for gigabit switches.

[andycpp]

[andycpp]

Please, optimize it :)

-- on time commands

[Fonel]

I have a Asus RT-N16 and I have also been trying to get dual-WAN working without much luck. Now my situation is that I have fast a cable line that is really unstable and a slow ADSL line that is really stable, so what I want to do is to use both lines simultaneously and when the cable line stops working I do not lose the Internet only lose the speed until the cable line starts working.

Alternatively another setup that might work would be using the cable line all the time until it stops working and then automatically fail over the the ADSL line until the cable line comes back up then it starts using the cable line again. Could you suggest how I might accomplish this?

[Masterman]

[andycpp]

- One time commands -----
nvram set vlan3ports=1 8
nvram set vlan2ports=0 8
nvram set vlan1ports=4 3 2 8*
nvram commit
nvram save

- Startup script -----
#!/bin/sh
ifconfig vlan3 down
ifconfig vlan3 hw ether E0:CB:EE:92:F5:88
ifconfig vlan3 192.1.1.5 netmask 255.255.255.0 broadcast 192.1.1.255 up

- Firewall script -----
#!/bin/sh
iptables -I FORWARD 5 -j logdrop -i ! br0 -o vlan3

iptables -t nat -F POSTROUTING
iptables -t nat -A POSTROUTING -j SNAT -o vlan2 -s 10.0.0.0/24 --to-source 82.1.1.1
iptables -t nat -A POSTROUTING -j SNAT -o vlan3 -s 10.0.0.0/24 --to-source 192.1.1.5
iptables -t nat -A POSTROUTING -j MASQUERADE -o br0 -s 10.0.0.0/24 -d 10.0.0.0/24

iptables -t nat -I PREROUTING -j DNAT -p udp --dport 44044 -d 192.1.1.5 --to 10.0.0.10:44044
iptables -t nat -I PREROUTING -j DNAT -p tcp --dport 44044 -d 192.1.1.5 --to 10.0.0.10:44044


iptables -I FORWARD -j logaccept -p udp --dport 44044 -d 10.0.0.10
iptables -I FORWARD -j logaccept -p tcp --dport 44044 -d 10.0.0.10


ip route add 82.1.1.0/25 dev vlan3 table 82
ip route add 10.0.0.0/24 dev br0 table 82
ip route add default via 82.1.1.129 prio 82 table 82

ip rule del from 10.0.0.20
ip rule del from 10.0.0.30
ip rule add from 10.0.0.20 table 82 prio 82
ip rule add from 10.0.0.30 table 82 prio 82

ip route delete default
ip route add default via 192.1.1.1
----------------------------------

Remark about 44044 port - for the torrent client. Other ports opened for the Comp2 & Comp3 through Web GUI.

p.s. how to change port/bind of Web GUI?? I wanna run Squid/Pound on 10.0.0.1:80, but GUI already there

[kmb]

I have rt-n16 and firmware rev 15230

vlan2 - wan-port (ISP1)
vlan0 - lan4-port (ISP2)

[phuzi0n]

Don't use VLAN 0 on gigabit models and whichever VLAN you add needs to have vlan#hwname=et0 set.

http://www.dd-wrt.com/wiki/index.php/Switched_Ports

[kmb]

phuzi0n, Thanks for you answer. Change vlan0 on vlan3 it's works!

[ramsundaram]

[mnour.tamer]

Hello,

when I try to do any nvram command , then reboot I can't access the router not any more . I can't ping

please I need help for this problem .

[LOM]

[mnour.tamer]

Hello

I have Asus N-16 I am using the latest firmware of DD-WRT mega 19519 .

I am testing dual wan using two ports
The first one is a DHCP client to other device which is directly connected to the Modem.
The Second one is connected though RG-45 to a router that has 3G USB stick connected.

I am using this Tutorial
http://www.darkhawk.net/dd-wrt/scripts/_readme-first.txt

of course there is some differences , lets go step by step .

-----------------------------------------------------

1. Make sure nothing is connected to port 4 on the router (will hook 2nd WAN device here later).

2. Log into router gui and goto Setup > VLANS and change port 4 to vlan 3, click save and then apply settings.

3. Make sure your sshd or telnet and jffs is enabled and you have at least 180k free space.

4. Log into router using your favorite ssh or telnet client (I use Putty).

5. type mkdir /jffs/scripts if it doesn't complain it worked.

6. type cd /jffs and hit enter then type wget http://www.darkhawk.net/dd-wrt/scripts/iptables and enter.
(This downloads iptables to jffs folder).

7. Type cd scripts and enter then type the following:
wget http://www.darkhawk.net/dd-wrt/scripts/firewall.firewall
wget http://www.darkhawk.net/dd-wrt/scripts/routes.firewall
wget http://www.darkhawk.net/dd-wrt/scripts/udhcpc-wan2.script

8. Type chmod -R a+x /jffs and enter.

9. Next type the following:

nvram set vlan1ports="1 2 3 8*"
nvram set vlan3ports="4 8"
nvram set vlan3hwname=et0
nvram set rc_startup="udhcpc -s /jffs/scripts/udhcpc-wan2.scripts -i vlan3 /jffs/scripts/routes.firewall"
nvram set rc_firewall="/jffs/scripts/routes.firewall /jffs/scripts/firewall.firewall"
nvram commit
reboot

-----------------------------------------------------

until now everything is OK.

10. Router should reboot now and come back up calling the scripts. Plug 2nd WAN device into port 4.

11. Log into router via ssh or telnet and type ifconfig. You should see vlan1 and vlan2 and both should have an ip address.

--- there is no IP address for the Wan2

-----------------------------------------------------

12. If you don't see vlan2 you didn't do something right so start over. If vlan2 doesn't have an ip address run:
udhcpc -s /jffs/scripts/udhcpc-wan2.script -i vlan2 and see what happens. (If it throws an error or hangs
something is wrong with the file maybe. If it shows an ip then you are golden.

---- Done

-----------------------------------------------------

Next run
/jffs/scripts/routes.firewall and then /jffs/scripts/firewall.firewall and if neither show errors then you are good to go.

---- it throw me an error

-sh: /jffs/scripts/routes.firewall: not found

and by the way I changed vlan1 to vlan2 and vlan2 to vlan3 in the file firewall.firewall


so any Help please???

[mnour.tamer]

so any good news about this situation ???