8
Need Help Creating Isolated Network (OpenWrt) (sh.itjust.works)
submitted 1 year ago* (last edited 1 year ago) by zsnell02@sh.itjust.works to c/networking@sh.itjust.works
5 comments fedilink hide all child comments

Looking for help setting up an isolated network within my apartment complex's network. I have a Linksys router running OpenWrt, with the ethernet connection from my aprtment running to the uplink port on the router. When I SSH into the router, it has WAN access, but none of the LAN devices connected to it (by ethernet or wireless) do. Anyone have any experience with this?

you are viewing a single comment's thread
view the rest of the comments
[-] Boris_NotTooBadinoff@lemmy.world 1 points 1 year ago

Off the top of my head, this is low hanging fruit:

  • Verify your LAN devices are pulling dhcp or alternatively put a static IP on one of them
  • Verify the/a correct default gateway is set on the LAN side (should be the internal IP of your router)
  • Verify DNS (ping 1.1.1.1 from a LAN device, if you can, then make sure you've configured DNS servers for the LAN side within the router)
[-] zsnell02@sh.itjust.works 2 points 1 year ago

Yep ran all this.

  1. Did both of these
  2. It is
  3. Tried will all LAN devices. Router itself can ping 1.1.1.1 (and 8.8.8.8) but none of the LAN devices can reach the internet.
[-] Boris_NotTooBadinoff@lemmy.world 1 points 1 year ago

One other thing I forgot is to verify a LAN device can ping the router IP, but I'm guessing you've already verified that. This is starting to sound like a FW issue

It's been years since I setup my openwrt router, but here is some advice verifying your FW config

tl;dr Your WAN interface may be defined as 'wan' in your FW rules, since 'WAN' != 'wan' - correcting the case may solve the issue

this post was submitted on 05 Sep 2023
8 points (100.0% liked)

networking

2776 readers
1 users here now

Community for discussing enterprise networks and the ensuing chaos that comes after inheriting or building one.

founded 1 year ago
MODERATORS
manifex@sh.itjust.works