Asus RT-N13U

From DD-WRT Wiki

(Difference between revisions)
Jump to: navigation, search
Revision as of 12:03, 31 January 2011 (edit)
Gouryella (Talk | contribs)
m (Automounting ext3/FAT/FAT32/NTFS)
← Previous diff
Revision as of 19:51, 1 February 2011 (edit) (undo)
Gouryella (Talk | contribs)
m (Automounting ext3/FAT/FAT32/NTFS)
Next diff →
Line 106: Line 106:
#### Get drivers, and extract to /tmp/root #### #### Get drivers, and extract to /tmp/root ####
mkdir /tmp/etc/config mkdir /tmp/etc/config
- echo "wget <nowiki></nowiki> -P /tmp/root" >> /tmp/etc/config/fs.wanup+ echo "wget <nowiki></nowiki> -P /tmp/root" >> /tmp/etc/config/fs.wanup
- echo "tar -xvzf /tmp/root/fs.gz -C /tmp/root" >> /tmp/etc/config/fs.wanup + echo "tar -xvzf /tmp/root/fs.gz -C /tmp/root" >> /tmp/etc/config/fs.wanup
#### Load ext3 filesystem support #### #### Load ext3 filesystem support ####
- echo "insmod /tmp/root/jbd.ko" >> /tmp/etc/config/fs.wanup+ echo "sh /tmp/root/ext3" >> /tmp/etc/config/fs.wanup
- echo "insmod /tmp/root/mbcache.ko" >> /tmp/etc/config/fs.wanup+
- echo "insmod /tmp/root/ext3.ko" >> /tmp/etc/config/fs.wanup +
#### Load NTFS filesystem support #### #### Load NTFS filesystem support ####
- #echo "insmod /tmp/root/fuse.ko" >> /tmp/etc/config/fs.wanup + #echo "insmod /tmp/root/fuse.ko" >> /tmp/etc/config/fs.wanup
#### Load FAT/FAT32 filesystem support #### #### Load FAT/FAT32 filesystem support ####
- #echo "insmod /lib/modules/" >> /tmp/etc/config/fs.wanup+ #echo "sh /tmp/root/fat" >> /tmp/etc/config/fs.wanup
- #echo "insmod /tmp/root/fat.ko" >> /tmp/etc/config/fs.wanup+
- #echo "insmod /tmp/root/vfat.ko" >> /tmp/etc/config/fs.wanup +
- #echo "insmod /tmp/root/nls_iso8859-1.ko" >> /tmp/etc/config/fs.wanup+
- #echo "insmod /tmp/root/nls_cp437.ko" >> /tmp/etc/config/fs.wanup+
#### Mounts, ext3, NTFS, FAT/FAT32 #### #### Mounts, ext3, NTFS, FAT/FAT32 ####
echo "mount /dev/discs/disc0/part1 -o noatime,nodiratime /opt" >> /tmp/etc/config/fs.wanup echo "mount /dev/discs/disc0/part1 -o noatime,nodiratime /opt" >> /tmp/etc/config/fs.wanup
#echo "ntfs-3g /dev/discs/disc0/part2 /mnt" >> /tmp/etc/config/fs.wanup #echo "ntfs-3g /dev/discs/disc0/part2 /mnt" >> /tmp/etc/config/fs.wanup
#echo "mount /dev/discs/disc0/part3 /jffs" >> /tmp/etc/config/fs.wanup #echo "mount /dev/discs/disc0/part3 /jffs" >> /tmp/etc/config/fs.wanup
- #### Clear RAM, make script executable, and final line is for samba/ftp ####+ #### Clean up trash (512KB RAM), make script executable, and final line is for ftp ####
- #echo "rm /tmp/root/*.ko /tmp/root/fs.gz" >> /tmp/etc/config/fs.wanup+ #echo "rm /tmp/root/*.ko /tmp/root/fs.gz /tmp/root/ext3 /tmp/root/fat" >> /tmp/etc/config/fs.wanup
chmod +x /tmp/etc/config/fs.wanup chmod +x /tmp/etc/config/fs.wanup
echo "nobody:*:65000:65000:nobody:/mnt:/bin/false" >> /etc/passwd echo "nobody:*:65000:65000:nobody:/mnt:/bin/false" >> /etc/passwd
Line 141: Line 135:
'''2. Reboot router with an ext3 formatted USB drive plugged in''' '''2. Reboot router with an ext3 formatted USB drive plugged in'''
-If the drive was successfully mounted (which may take some time), uncomment the last echo to save +-500 KB RAM. Uncomment other lines for FAT/FAT32/NTFS support.+If the drive was successfully mounted (which may take some time), uncomment the last echo to save +-512 KB RAM. Uncomment other lines for FAT/FAT32/NTFS support.
Debugging: Debugging:

Revision as of 19:51, 1 February 2011

The original hardware version (not B1, see Notes below) is now supported and quite stable.

This device continues to be one of the lowest-cost (reported min $18 USD) wireless-N alternatives with USB connectivity, supporting:

  • Network printer
  • USB-connected HDDs and flash drives, ext2/ext3/FAT/FAT32/NTFS
  • Second or multiple wireless LAN(s)
  • Optware Light*
    • Samba (FTP and file sharing)
    • Transmission (torrent client)
    • Asterisk (PBX, VoIP gateway)
    • Other Optware packages
  • Sound card* (not yet functional; drivers needed)

*With attached USB flash device (and hub if any other connections)

Hardware Revision B1 Notes:

  • Current firmware images will NOT work on hardware version B1!
  • Identify by "B1" clearly printed on bottom panel of router
  • Want to see rev B1 unleashed with DD-WRT? Donate a router!

For discussion or comments, see RT-N13U thread.

Many thanks to those who got DD-WRT working on the RT-N13U!


Device Specifications

  • Power Supply = 12VDC 1,0A
  • Ethernet Ports = 1x WAN RJ-45 10/100 Base T, 4x LAN RJ-45 10/100 Base T
  • Antennas = 3x internal antennas
  • USB ports = 1x USB2.0
  • Wireless standards supported: 802.11b (max. 11 Mbit/s), 802.11g (max. 54 Mbit/s), 802.11n (max. 300 Mbit/s, 2.4 GHz only)
  • RAM = 32 MB (64 MB in rev B1)
  • Flash = 4 MB (8 MB in rev B1)
  • CPU = Ralink RT3052F clocked at 384 MHz

Flashing DD-WRT to a Stock Asus RT-N13U

This procedure places the router in recovery mode, then uses Asus' Firmware Restoration utility to upload the DD-WRT image. Subsequent updates, if any, are much easier!

1. Preparation for Initial DD-WRT Install

1. Download latest DD-WRT Firmware Image
  • Browse to firmware repository and select/open most current directory, Ex. 12-24-10-r15962/
  • Open 'Asus-RTN13U' directory and download 'asus-to-ddwrt.trx'
2. Download latest version of the Asus Utility
  • Browse to
  • In the three dropdown menus, select 'Wireless', 'AP/Router', 'RT-N13U', and click 'Search'
  • Select OS in popup menu
  • Click '+' next to 'Utilities' and skip down to the most current non-B1 version, now dated 2010/01/06. In that box, click 'Global' and save the file. (Also see next step, download firmware.)
  • Within that zip file, navigate to the UT4063/Utility folder and run 'setup' to install.
  • Be sure there is access to the Firmware Restoration utility
3. Download safety copy of Asus firmware
  • Do same as previous step, except click '+' next to 'Firmware' and download latest non-B1 version, now dated 2010/01/06.
  • Note that this file should not be needed; use only to restore Asus FW to router if later desired.
4. Last few checks
  • If not already directly wired, connect Ethernet cable from one of the router's LAN ports to client PC.
  • Be sure router's other three LAN ports and WAN port are open (nothing connected)
  • On PC, disable all other network adapters: wireless, modem, etc.
  • On PC, disable any firewall (Ex. Windows Firewall)
  • Optional: Set PC to use a static IP, Ex., netmask, gateway
  • If possible, use uninterruptable power supply (UPS) for both PC and router. A power failure while flashing, though not likely, will probably brick the router.
  • Note: Early on, some had problems using Firefox. Consider using Internet Explorer or Chrome.
  • Final warning: Installing this firmware on a B1 version will brick the device. (See note at top of page.)

2. Flash to DD-WRT

1. Place router in Recovery mode
  • Disconnect power adapter plug from the RT-N13U
  • Push and hold the Restore button located on bottom panel. While continuing to hold down the Restore button, plug the power adapter back into router.
  • After five seconds, LED on front panel starts to blink, release the button.
2. Upload firmware image
  • On PC, open Asus' Firmware Restoration utility (installed earlier)
  • In Firmware Restoration window, click 'Browse' and select the DD-WRT image file, asus-to-ddwrt.trx (downloaded earlier)
  • Click 'Upload' to begin flash process that can take up to four minutes. Brick warning: Do not interrupt!
  • When message that router is rebooting appears, close Firmware Restoration utility.

3. Reboot, launch DD-WRT web interface, and cleanup

  • After a minute or two, disconnect power adapter plug from the RT-N13U
  • Wait at least ten seconds, then reconnect to power
  • If optional step of setting static IP was followed earlier, can reset to automatic
  • Browse to should bring up the DD-WRT web interface; set name/password for first access
  • Configure router as desired. Default connection is DHCP; for DSL check DSL with DD-WRT.
  • When satisfied that factory firmware will not be used again, uninstall Asus Utility from PC and delete Asus files.

Automounting ext3/FAT/FAT32/NTFS

The following tutorial is provided primarily by gouryella (taken from, also by calvin18 and others of the community. The RT-N13U has only 4 MB flash, which is almost full with DD-WRT installed. Ext3 needs an extra 200 KB of storage, and the driver is not present in the DD-WRT firmware yet [BrS]. Gouryella wrote a smart script that downloads the ext3 driver and mounts the 1st partition to /opt during boot (after WAN is up)

1. Just paste the following into the text box in Administration -> Commands and click Save Startup

[NOTE: Script supports ext3 as shown. To mount FAT/FAT32 or NTFS partitions, unsharp lines in the FAT/FAT32 section or the 1 line under NTFS respectively. Be sure one 'mount' line exists for each partition, drive or flash card to be accessed. {Existing 'mount' line can be copied/pasted and edited: /dev spec and mount point. Possible mount points are /mmc, /jffs, /mnt, and /opt. (Use /opt for Optware)} (Sharped lines do nothing, so may be omitted.)]

Note: Check revision number. Tested working with 15962.

#### Get drivers, and extract to /tmp/root ####
mkdir /tmp/etc/config
echo "wget -P /tmp/root" >> /tmp/etc/config/fs.wanup
echo "tar -xvzf /tmp/root/fs.gz -C /tmp/root" >> /tmp/etc/config/fs.wanup
#### Load ext3 filesystem support ####
echo "sh /tmp/root/ext3" >> /tmp/etc/config/fs.wanup
#### Load NTFS filesystem support ####
#echo "insmod /tmp/root/fuse.ko" >> /tmp/etc/config/fs.wanup
#### Load FAT/FAT32 filesystem support ####
#echo "sh /tmp/root/fat" >> /tmp/etc/config/fs.wanup
#### Mounts, ext3, NTFS, FAT/FAT32 ####
echo "mount /dev/discs/disc0/part1 -o noatime,nodiratime /opt" >> /tmp/etc/config/fs.wanup
#echo "ntfs-3g /dev/discs/disc0/part2 /mnt" >> /tmp/etc/config/fs.wanup
#echo "mount /dev/discs/disc0/part3 /jffs" >> /tmp/etc/config/fs.wanup
#### Clean up trash (512KB RAM), make script executable, and final line is for ftp ####
#echo "rm /tmp/root/*.ko /tmp/root/fs.gz /tmp/root/ext3 /tmp/root/fat" >> /tmp/etc/config/fs.wanup
chmod +x /tmp/etc/config/fs.wanup
echo "nobody:*:65000:65000:nobody:/mnt:/bin/false" >> /etc/passwd

Enable the following under Services -> USB:

Core USB Support
USB 2.0 Support
USB Storage Support
Automatic Drive Mount

For NTFS read/write, additional driver must be installed after finishing optware guide, also line with fuse must be unsharped:

ipkg install ntfs-3g

2. Reboot router with an ext3 formatted USB drive plugged in

If the drive was successfully mounted (which may take some time), uncomment the last echo to save +-512 KB RAM. Uncomment other lines for FAT/FAT32/NTFS support.


ls /tmp/root
cat /tmp/etc/config/fs.wanup
ls /tmp/etc/config/

Installing Optware Light

The following tutorial is provided by Gouryella (taken from

1. Installing Optware (only to an ext3 partition; /opt MUST be empty)

wget -O - | tr -d '\r' > /tmp/
sh /tmp/
ipkg update
ipkg upgrade
wget -P /opt/bin
chmod +x /opt/bin/sort
ipkg install htop iperf libuclibc++ nano samba2 tftp-hpa vsftpd
killall xinetd
rm /opt/etc/samba/smb.conf
rm /opt/etc/vsftpd.conf
rm /opt/etc/xinetd.d/tftp
rm /opt/etc/init.d/S80samba
wget -P /opt/etc/samba/
wget -P /opt/etc/
wget -P /opt/etc/xinetd.d
wget -P /opt/etc/xinetd.d
wget -P /opt/etc/xinetd.d
wget -P /opt/etc/xinetd.d
wget -P /opt/etc/init.d
wget -P /opt/etc/init.d
chmod +x /opt/etc/init.d/S98iperf
sh /opt/etc/init.d/S10xinetd
chmod 777 /opt

You now should be able to access /opt/ through or through samba \\, swat.

Note: Change the gateway in, if you have different IP range.

2. My choices for basic testing:

htop - 0.8.3-1 - An interactive process viewer.
iperf - 2.0.4-1 - A tool for measuring TCP and UDP bandwidth performance.
nano - 2.2.4-1 - A pico like editor
samba2 - 2.2.12-2 - Lightweight Samba suite provides file and print services to SMB/CIFS clients.
tftp-hpa - 5.0-1 - A tftp package (for pxe booting)
vsftpd - 2.2.2-1 - ftp daemon with an emphasis on speed and security
xinetd - 2.3.14-9 - Highly configurable, modular and secure inetd

2.1 Samba Nameserver nmbd needs to have interface defined to work properly, Edit smb.conf

nano /opt/etc/samba/smb.conf

and add following code in to [global] section of the samba configuration file smb.conf

interfaces = 

3. Test results:

USB flash vsftpd speed:

dither 1-2,5MB/s write (checked also USB 2.5" HDD 3.5MB/s constant)
6MB/s read

USB flash samba2 speed:

1MB/s write
4MB/s read


67,6Mbit/s CPU usage near max

Transmission daemon running:

Installing a Transmission-daemon onto Asus RT-N13U

I have just successfully installed and running this Transmission Torrent thingy

and thanks to "Gouryella" for showing us the light

adopted with slight Modification from Transmission daemon kudos to anonymous code-angels--Capper 22:07, 25 August 2010 (CEST)

1. Make the following folders

cd /opt
mkdir -p /opt/data/torrents/.config              # -p to make directories at the same time

The plan is to have everything torrent go to the folder /opt/data/torrents

2. Install Optware Transmission

/opt/bin/ipkg-opt -verbose_wget install transmission
Note: I like to see the progress of the downloading process, so I know the right thing is happening. This is done with the -verbose_wget parameter.

3. Started and stopped Transmission to get the basic work folders

/opt/bin/transmission-daemon -g /opt/data/torrents/.config/transmission-daemon
killall transmission-daemon

With the command above you get the basic folder structure of:

/opt/data/torrents/.config/transmission-daemon/settings.json  #file

4. Edit settings.json

nano /opt/data/torrents/.config/transmission-daemon/settings.json

5. Delete contents of settings.json and copy-paste following code into it.

     "blocklist-enabled": 1,
     "download-dir": "\/opt\/data\/torrents",
     "download-limit": 100,
     "download-limit-enabled": 1,
     "encryption": 2,
     "max-peers-global": 35,
     "peer-port": 25000,
     "pex-enabled": 1,
     "port-forwarding-enabled": 1,
     "rpc-authentication-required": 0,
     "rpc-password": "",
     "rpc-port": 9091,
     "rpc-username": "",
     "rpc-whitelist": "192.168.1.*",
     "upload-limit": 200,
     "upload-limit-enabled": 1

The file settings.json can also be downloaded from here (the wget command is one line):

 wget -O /opt/data/torrents/.config/transmission-daemon/settings.json 

but change to "download-dir": "\/opt\/data\/torrents", from "download-dir": "\/mnt\/data\/torrents",

6. Open listening port for WAN access

Go to your DD-WRT control panel and add the following to Administration - Commands - Firewall

iptables -t nat -I PREROUTING -p tcp -d $(nvram get wan_ipaddr) --dport 25000 -j DNAT --to 
iptables -I INPUT -p tcp -d --dport 25000 -j logaccept

You may change the value 25000 to whatever port you specified in the settings.json file for the value "peer-port"

7. Restart transmission

/opt/bin/transmission-daemon -g /opt/data/torrents/.config/transmission-daemon

8. Accessing Transmission web interface

Now you get web access to the Transmission page by going to That is, if your routers IP is

9. Autorun Transmission-daemon every time router reboot

I would not like to go to command shell and type to start the Daemon. so here is the autostart for couch potatoes like me.

cd /opt/etc/init.d
rm S99trans

This will remove old S99trans initializing file you might have in the directory . We will now create an autorun script for our Transmission-Daemon

nano S99trans

now type-in following lines in it

sleep 120
/opt/bin/transmission-daemon -g /opt/data/torrents/.config/transmission-daemon

Save it by presseing CTRL+O followed by CTRL+X , now we will Make it executable by...

chmod +x /opt/etc/init.d/S99trans

You are done. Enjoy downloadig sans PC.

10. How to get transmission to download torrent files?

     - In a web browser go to your favourite torrent site/tracker and download a "<myfile>.torrent" file
     - In a web browser go to to enter the Transmission web page.
     - click "open"
     - click the text field (or "select" button)
     - point out the "<myfile>.torrent"
     - click "upload"

     and the torrent'ed file should start downloading shortly.

The downloaded file will turn up in the /opt/data/torrents folder.

The full space of the file will be reserved from the start, so in a FTP, WinSCP or Explorer via Samba it may seem like the file is all there immediately, but it is not! It is fully downloaded when the line turns green in the Transmission web interface at

You can see details about any of the torrent files by clicking the Inspector button on the right in the Transmission web interface.

11. Another interface option

You might also want to check out a front-end (remote-GUI) for the rpc version of transmission.

transmission-remote-gui is an application written in Free Pascal to remotely manage Transmission See:

transmission-remote-dotnet is a .NET application written in C# to remotely manage Transmission. See:

"Try the latest one (beta is welcomed over here)"

Installing a Network Printer onto Asus RT-N13U

As of v24-PreSp2 (first versions to work on Asus RT-N13U) jffs was removed due to the lack of space available. However, Brainslayer put the support of network printing onto the firmware, enabling use of a network printer. Special Thanks for TimeKiller for figuring out most of the solution.

1. First enable USB support

Enable the following under Services -> USB:

Core USB Support
USB 1.1 Support (UHCI)
USB 1.1 Support (OHCI)
USB 2.0 Support
USB Printer Support

2. Startup Settings

Go to Administrations -> Commands, and add this:

sleep 4
mkdir -m 755 -p /dev/usb
mknod -m 660 /dev/usb/lp0 c 180 0
/usr/sbin/p910nd -f /dev/usb/lp0 1 

Save on the Startup.

3. Reboot and Install Drivers

Reboot the router, then install drivers through tcp/ip (9101)

For Windows 7:

Go to Devices and Printers
Then, press Add a Printer
Got to Network Printers
Skip the detection, as Windows will not find anything
Go to "Add a printer using a tcp/ip address or hostname"
Device type: Autodetect
Hostname and ip address: your router's ip (default
Port Name: Anything (puts your router's ip by default)
After it says it could not detect a printer, select custom, then Advanced
Make sure the protocol is RAW and change the Port Number is 9101
Install your drivers and finish.

You should print a test page to see if it works.

4. Troubleshooting If the test page does not come, try these settings instead:

Go to Administrations -> Commands, and add this:

sleep 4
chmod +rwx /usr/sbin/p910nd 
mkdir -m 755 -p /dev/usb
mknod -m 660 /dev/usb/lp0 c 180 0
chmod +rwx /dev/usb/lp0
/usr/sbin/p910nd -b -f /dev/usb/lp0 0 

Save again on the Startup. Reboot then follow the steps above but instead of port 9101, put in 9100. You should print a test page again to see if it works. If it doesn't work, you somehow did not follow the instructions correctly.

Fire up a Second Wireless Network w/ Optional Bandwidth Throttling

A second (or even third) wireless network is useful for sharing the router's Internet connection. The new wireless network(s) is easily configurable:

  • Secure or open (hotspot)
  • Complete or partial isolation from the main network
  • Amount of bandwidth alloted

All setup is done in the DD-WRT web interface. (The following instructions should work for other Ralink-based routers as well.)

Browse to the router's home page and login, then:

1. Create Virtual Interface for New Wireless Network

On Wireless | Basic Settings page, under 'Virtual Interfaces' click Add

  • Key second SSID, the 'Wireless Network Name' preferred, Ex. BobNet, YoHotspot.
  • Check that 'Wireless SSID Broadcast' is Enable
  • Set 'AP Isolation' as preferred: Enable (default) for client-to-client communication on the new wireless network, Disable to isolate each.
  • Set 'Network Configuration' to Bridged
  • Be sure 'Wireless Mode' at top of page is set to AP (Access Point)
  • Click Apply Settings.

2. Set Security for New Wireless Interface

On the Wireless | Wireless Security page, under 'Virtual Interfaces ra1 SSID...' ("ra1" is the new wireless interface just created in step 1.), set parameters as desired for security. These setting work exactly the same as for the router's physical interface (shown at top of page), but apply only to the new wireless network.

  • For public access/hotspot, 'Security Mode' would be Disable.
  • A shared secure network would normally use WPA2 and AES.
  • When done, click Save.

3. Create Bridge for New Wireless Interface

On the Setup | Networking page, under 'Bridging' click Add.

  • In leftmost (unlabled) field that pops up, key "br1" (without quotes),
  • Set 'STP' to Off, and
  • Leave 'Prio' (Priority) and MTU as they are. Click Save.
  • New fields will appear for 'IP Address' and 'Subnet Mask'. Populate these (Typical values might be and, used in following examples.) and click Save.
  • Reboot.

4. Assign New Wireless Interface to New Bridge

Still on Setup | Networking page, under 'Assign to Bridge' click Add. On Assignment line that appears:

  • Select 'br1' in dropdown menu,
  • Pick 'ra1' in second dropdown menu (labled 'Interface'),
  • Set priority, 'Prio', as desired. Higher number = lower priority. The corresponding priority numbers (under 'Create Bridge' and 'Assign to Bridge') should be similar. Ex. 32768 and 32760.
  • Click Save and reboot.
  • Check in 'Current Bridging Table' that ra1 interface is assigned to br1 (they appear on same line). If not, edit any bad entries, possibly Delete and re-key, Save, reboot, and repeat this step.

5. Enable DNSMasq as Sole DHCP Server

This has the added benefit of running the router more efficiently*. On Setup | Basic Setup page, see that:

  • 'DHCP Type' is DHCP Server
  • 'DHCP Server' is Enable
  • 'Use DNSMasq for DHCP' is checked
  • 'Use DNSMasq for DNS' is checked

On Services | Services page, set:

  • 'Used Domain' to 'LAN & WLAN"
  • 'LAN Domain' to some name (Ex. mylan, yourlan, lan1, alan etc.)
  • 'DNSMasq' to Enable
  • 'Local DNS' to Enable
  • In 'Additional DNSMasq Options' window, paste the following:
  • Edit the above pasted text to customize as needed:
    • Replace "mylan" with the name chosen for 'LAN Domain' if different; these must match.
    • Edit the "120" -- which allows 20 clients to connect simultaneously -- as desired.
    • Edit both occurences of "192.168.16." to match the address keyed in 'Create Bridge for New Wireless Interface', above.
  • Click Save and reboot.

 *(For details, see DNSMasq page.)

6. Set Level of Isolation for New Wireless Network

Unless the new network is secure and all connected clients trusted, some isolation is needed.

  • The easiest setup completely isolates the new network -- its clients have full access to the Internet, but not to the router or its wired or wireless clients. On the Administration | Commands page, under 'Command Shell', paste the following into the 'Commands' window:
iptables -I FORWARD -i br1 -o br0 -j DROP
iptables -I INPUT -s -d -j DROP
  • As above, edit the subnet addresses, 192.168.16 and 192.168.1, if customized. Click Run Commands and test/verify that everything works as expected. All pings or other attempts to connect between the two subnets should fail. Reboot if any problems.
  • When satisfied, with final iptables rules in 'Commands' window, click Save Firewall. Note: A click of this button with bad rules showing can lock everyone out of the router, necessitating a hard reset (and loss of all custom settings). Do not skip the previous test step.
  • If instead of total isolation it is desired to grant partial access to new networks' clients, determine which rules to modify and use (Ex. below), test and save as above.
iptables -I INPUT -i br1 -p tcp --dport www -j REJECT
iptables -I INPUT -i br1 -p tcp --dport telnet -j REJECT
iptables -I INPUT -i br1 -p tcp --dport ssh -j REJECT
iptables -I INPUT -i br1 -p tcp --dport https -j REJECT

7. Set Bandwidth Limits on New WLAN (Optional)

The maximum bandwidth taken by the new wireless network can be limited by following these steps. New WLAN clients will otherwise compete for bandwidth on equal footing with those on the main network.

  • Navigate to one or more speed test sites (Ex. Speakeasy) and note maximum Up- and Down-link speeds.
  • On NAT/QoS | QoS page, enable QoS ('Start QoS' Enable) and check that 'Port' is WAN and 'Packet Scheduler' is HTB.
  • In 'Uplink' and 'Donwlink' fields, key desired maximum throttled values in light of speed test results above. To convert, Ex. 5.8 Mbps from test=5800 kbps, and 0.57 Mbps=570 kbps.
  • Note: Settings below will make the throttled speeds just entered ('Uplink'/'Downlink') apply only to the new wireless network. While the help screen sets a guideline of "80%-100%" of maximum, these throttled values can be set to whatever the admin desires, perhaps as low as 10%. A setting of 50% could prove perfectly functional. Performance testing and tweaking is recommended.
  • Under 'Netmask Priority', key new wireless subnet address. Using same as above, Click Add.
    • On the line that appears, set 'Priority', Ex. Bulk. Click Save.
  • Repeat for main interface (Ex., click Add, set priority as desired, typically 'Exempt', click Save.
  • Reboot.

Note that throttling can also be applied based on application Service or MAC address.

If all steps were followed, the second SSID should appear to wireless clients in the area, their login and connection subject to the security and bandwidth settings made here. It is good to share with thy neighbor!

Sound Card

Waiting on drivers. See Audio Question.