From DD-WRT Wiki

You are here: DD-WRT wiki mainpage / Web-GUI

[edit] Introduction

You can contol the settings of DD-WRT in two ways:

1. through the Web based Graphical User Interface (Web-GUI), which is explained on this page .
2. using a Linux style command line interface. See Telnet/SSH_and_the_Command_Line for more details.

NOTE: DD-WRT features a security mechanism that will lock out access to the router for 5 minutes after 6 failed login attempts whether by webUI, SSH, or Telnet. Please wait or continued attempts will increase the time of the lockout.

[edit] Access via a web browser

After installing DD-WRT Firmware you can access the DD-WRT Web-GUI using a web browser pointing to 192.168.1.1 on current releases for most supported devices. There may be some exceptions to this and it should be the same IP address as before you installed DD-WRT. These are some of the most common default IP addresses: 192.168.1.1 (most commonly used on Linksys and Asus), 192.168.2.1 (some Belkins), 192.168.11.1 (some Buffalos), 192.168.10.1 or 192.168.30.1 (some Motorolas), and there may be others.

[edit] Username and Password

The latest versions of DD-WRT will require you to set your own username and password when you first access the web interface. Because the SSH user is always root, it is critical that a strong password be used. These passwords should be a minimum of 12 characters and use numbers and valid non-alphabetic characters. 12 characters dramatically reduces the probability of a successful random attack and has a cost / time infeasible computational requirement.

~!@#$%&()-_=+[]{}\;,.<>/?

!"#%&'()*+,-./;<=>?@[\]^_`{|}~$

The default username is root and the default password is admin (from v23 SP1). Some earlier versions of DD-WRT did not require a username.

[edit] Elements of the Web-GUI

The Web-GUI has five main elements

1. The tabbed menu system

2. Main area

3. Action buttons

4. Help information

5. Some system essentials

Clicking these text buttons gives you access to furter information

1. More... (More Help)

2. Firmware details

Some notes about the screen elements.

• The default information screen is the same as menu selection: Status->Sys-Info
• To save changes you may have made to settings you need to press the Save button. Just moving to a new tab in the menu, will discard settings in the current menu tab.
• The time will count the time since the router has been powered up, until the router gets WAN access. By default the DD-WRT will automatically try to get the corrent time from a time server.

[edit] Menu Interface map

Select one of the menu points below for information about settings within that menu page.

• Setup
  • Basic Setup
  • IPv6
  • DDNS
  • MAC Address Clone
  • Advanced Routing
  • Switch Config
  • Networking
  • Tunnels
• Wireless
  • Basic Settings
  • Advanced Settings
  • Wireless Security
  • Roaming
  • MAC Filter
  • WDS
• Services
  • Services
  • FreeRadius
  • PPPoE Server
  • VPN
  • USB
  • NAS
  • Hotspot
  • Ad Blocking
  • SpeedChecker
• Security
  • Firewall
  • VPN Passthrough
• Access Restrictions
  • WAN Access
• NAT/QoS
  • Port Forwarding
  • Port Range Forwarding
  • Port Triggering
  • UPnP
  • DMZ
  • Quality of Service - QoS
• Administration
  • Management
  • Keep Alive
  • Sysctl
  • Commands
  • WOL
  • Factory Defaults
  • Firmware Upgrade
  • Backup
• Status
  • Router
  • WAN
  • LAN
  • Wireless
  • Bandwith
  • Syslog
  • Sys-Info
  • My Page (If installed. See My_Page (forum thread) for updated versions for current releases.)

[edit] Setting details about the Web-GUI

Under Administration -> Management you can set various details about the Web-GUI. Like:

• set Username and Password
• control Access to the Web-GUI locally/remotely and more
• select between different Router GUI styles

[edit] Regaining Access

[edit] Locally

If for some reason you completely lost web access to the router, the web server (HTTP daemon) may be shut down. To regain access try starting the web server. SSH or telnet into the router and enter the following commands:

httpd -h /www

To connect through secure HTTP, add the option -S at the end of the command. See the httpd man pages for more information about that command.

You can use this feature to get a more secure router by activating the web interface only when you need to configure it, and then closing the web server once you're done.

To shut down the web server, run the command kill `cat /tmp/var/run/httpd.pid` (note the backquotes) or kill `cat /tmp/var/run/httpsd.pid` if you ran the web server with the option -S to get secure HTTP.

[edit] Remotely

Method 1: See Enable Web Interface Over SSH?

Method 2: If you're at a remote location and have access to your router through SSH or telnet, but you'd like to enable remote web access, you may use the following command to allow access from one remote IP address:

iptables -I INPUT -p tcp -s <remote_location_ip> --dport 80 -j ACCEPT

This temporary remote web access will be disabled again when the router reboots (unless you turned Remote Administration on from the settings in the web interface or saved this as firewall script under Administration ->Commands).

[edit] Simulation

The old Alchemy interface of DD-WRT v22

The v24sp2-early beta web interface of DD-WRT

A setup simulation of v24-sp2 and early beta DD-WRT interface is here.
A setup simulation of current beta DD-WRT interface is here.