D-Link DIR-868L

From DD-WRT Wiki

Revision as of 21:21, 23 January 2015 by Beta990 (Talk | contribs)
Jump to: navigation, search

Contents

Hardware

Delivering Wi-Fi AC1750 dual band speeds with AC SmartBeam technology to your home network, the DIR-868L is the perfect solution for those looking to enjoy online gaming, multiple HD video streams, and fast file transfers – all with less wireless interference for maximum throughput.

Specifications

CPU Broadcom BCM4708X
RAM 256 MB
Flash 128 MB
Switch In BCM4708X
Radio (2.4 GHz) BCM4331
Radio (5 GHz) BCM4360
Antenna Type External (Dual Band)
  • Specifications found on Smallnetbuilder.net [1]

Installation Instructions

Step-by-step instructions from out-of-the-box factory firmware

DD-WRT can be flashed directly on the D-Link DIR-868L by using the D-Link webinterface:

  1. Download the needed latest beta firmware files (dir868-webflash.bin & factory-to-ddwrt.bin): http://www.dd-wrt.com/site/support/other-downloads?path=betas (e.g. betas › 2015 › 01-20-2015-r25974 › dlink-dir868l)
  2. Open the D-Link web-interface in your web browser (address: http://192.168.0.1), Log In, and go to Tools -> Firmware *Warning: only flash over an Ethernet-cable
  3. Select factory-to-ddwrt.bin and click the "Upload"-button
  4. After flashing successfully, the router address should be changed into http://192.168.1.1
  5. Upgrade the router (again) by using the dir-868-webflash.bin firmware
  • Note: The router doesn't support Hard Reset (aka 30/30/30 reset), use the Erasing NVRAM method instead.

Common Problems

OpenVPN

If using the inbuilt OpenVPN-server in tunnel-mode, you may need to use the following firewall rules:

iptables -A INPUT -i vlan2 -m state --state NEW -p udp --dport 1194 -j ACCEPT
iptables -A INPUT -i tun2 -j ACCEPT
iptables -A FORWARD -i tun2 -j ACCEPT
iptables -A FORWARD -i tun2 -o vlan2 -m state --state RELATED,ESTABLISHED -j ACCEPT
iptables -A FORWARD -i vlan2 -o tun2 -m state --state RELATED,ESTABLISHED -j ACCEPT
iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o vlan2 -j MASQUERADE
  • Note 1: Verify that the interfaces are correct by running the ifconfig command
  • Note 2: You may need to adjust the above IP-address (& netmask)

The following Additional DNSMasq Options may also be needed, to stop DHCP(-service) on the tunnel-port:

interface=tun2 
no-dhcp-interface=tun2