How do I use an OpenWRT device as both an extender (for the main router) as well as a firewall + NAT + DHCP box?

Submitted ⁨⁨8⁩ ⁨months⁩ ago⁩ by ⁨MigratingtoLemmy@lemmy.world⁩ to ⁨selfhosted@lemmy.world⁩

Conceptually, it’s fairly easy to understand - nftables, relayd, likely some firewall application.

However, is it as simple as configuring the WAN port as the WiFi interface and leaving it at that? Note that I’m not bothered about double NAT since I won’t be opening any ports, and the main router cannot be touched.

I do want my own SSIDs, my VLANs, control over the firewall etc. Basically, my own network space. If anyone has done this/has an idea of the problems I might run into, please do comment!

Appreciate the help!

source

Comments

Sort:hotnew top

anamethatisnt@lemmy.world ⁨8⁩ ⁨months⁩ ago
Pretend the “main router” is a hotel wifi and use the TravelMate package.
github.com/openwrt/packages/blob/…/README.md

source
- MigratingtoLemmy@lemmy.world ⁨8⁩ ⁨months⁩ ago
  Thank you! Could you explain a bit about what travelmate does under the hood? I’d like to know the basics of how it operates.
  
  source
  - anamethatisnt@lemmy.world ⁨8⁩ ⁨months⁩ ago
    The main config needed is AP+Sta mode, which is explained here:
    openwrt.org/docs/guide-user/network/wifi/ap_sta
    
    source
    -> View More Comments
avidamoeba@lemmy.ca ⁨8⁩ ⁨months⁩ ago
Do you even need relayd? I think relayd is for extending the existing NAT, i.e. a wireless bridge operation. If you want to have your own NAT, I think it’s enough to just connect to the upstream wireless network as a client. Not sure if you have to designate the wireless interface as WAN or not.

source
- MigratingtoLemmy@lemmy.world ⁨8⁩ ⁨months⁩ ago
  How would you do this? What would be the steps you take to create a double NAT + Firewall + DHCP server with the OpenWRT router behind the main router?
  
  source
  - avidamoeba@lemmy.ca ⁨8⁩ ⁨months⁩ ago
    I think you basically need to do this. I see it mentions the wifi interface becoming WAN too.
    
    source
    -> View More Comments
- pete@lemmy.world ⁨8⁩ ⁨months⁩ ago
  Depends if you want to assign IP addresses or not. If you don’t, you just want your own section of the same lan, I.e.all your devices connected to your router but let dhcp pass through then you can just set itnup as an extender
  
  source
  - ArbiterXero@lemmy.world ⁨8⁩ ⁨months⁩ ago
    He mentioned that he wants to create Second level Nat, that will require new IP addresses and DHCP in the subnet
    
    source
tagginator@utter.online [bot] ⁨8⁩ ⁨months⁩ ago
New Lemmy Post: How do I use an OpenWRT device as both an extender (for the main router) as well as a firewall + NAT box? (https://lemmy.world/post/12937515)
Tagging: #SelfHosted
(Replying in the OP of this thread (NOT THIS BOT!) will appear as a comment in the lemmy discussion.)
I am a FOSS bot. Check my README: https://github.com/db0/lemmy-tagginator/blob/main/README.md
source
Decronym@lemmy.decronym.xyz ⁨8⁩ ⁨months⁩ ago
Acronyms, initialisms, abbreviations, contractions, and other phrases which expand to something larger, that I’ve seen in this thread:

Fewer Letters More Letters

AP WiFi Access Point

IP Internet Protocol

NAT Network Address Translation

[Thread #585 for this sub, first seen 10th Mar 2024, 07:45] [FAQ] [Full list] [Contact] [Source code]

source

Fewer Letters	More Letters
AP	WiFi Access Point
IP	Internet Protocol
NAT	Network Address Translation