Station Mode

From DD-WRT Wiki

(Difference between revisions)
Jump to: navigation, search
Revision as of 04:46, 6 December 2017 (edit)
Ian5142 (Talk | contribs)
(Client Mode Setup)
← Previous diff
Current revision (20:21, 19 December 2023) (edit) (undo)
Kernel-panic69 (Talk | contribs)

 
(14 intermediate revisions not shown.)
Line 1: Line 1:
-You are here: '''[[Main_Page|DD-WRT wiki mainpage]] / [[Linking_Routers|Linking Routers]] / Client Mode'''+'''''Wiki Path''''': [[Main_Page|DD-WRT Wiki Main]] / [[Tutorials]] / [[Linking Routers]] / '''Client Mode'''
---- ----
 +[[image:Client_Bridge.jpg|660px]]<br>
 +The secondary (station) router is unbridged in a different subnet (with NAT), while a [[Client_Bridge|Station Bridge]] or [[Client_Bridged|Station Bridge (Routed)]] is the same subnet as the host.
==Introduction== ==Introduction==
 +This mode is NOT for WIRED connections between two routers, like an Access Point. It is a wireless connection between two routers only, usually to the primary gateway router. A Station Mode router connects to a Wireless Access Point (WAP) wireless connection as the WAN interface, and shares the internet connection only to the LAN ports, or a separate WAP for multi-radio routers. It is not seen as a WAP, nor accepts wireless connections by other client devices.
-This mode is NOT for WIRED connections between two routers! It is a wireless connection between two routers only.+The primary (host) router is not required to be running DD-WRT firmware. The primary and secondary (Station Mode) routers must be on separate subnets, and NAT is used between them. Thus, when port forwarding is needed it must be configured at both routers - not just on the host router.
- +
-A router in Client Mode connects to another wireless Access Point (the host router). It uses its wireless connection as the WAN interface, and shares the internet connection only to the LAN ports. It is not seen as an access point by laptops or other computers scanning for AP's and does not accept wireless connections from client devices. The AP is not required to be running DD-WRT firmware. +
- +
-The main router and secondary router (DD-WRT client mode) are on separate subnets. NAT is used between the routers. Thus, when port forwarding is needed it must be configured at both routers not just on the main (host) router.+
-The router in Client Mode must use its own DHCP server to give out IP numbers, Gateway and DNS server to the devices connected to its LAN ports. +A Station Mode router uses its own DHCP server for IP Address, Gateway, and DNS server to connected devices. To have computers connected to both routers (main and secondary) and co-exist in the same subnet, set up DD-WRT as a [[Client_Bridge|Station Bridge]](Broadcom), [[Client_Bridged|Station Bridge (Routed)]], [[Repeater Bridge]], or use [[WDS_Linked_router_network|WDS]]. Further explanation of bridging modes is at [[Linking_Routers|Linking Routers]].
-To have computers connected to both routers (main and secondary) and co-exist in the same subnet, set up DD-WRT as a [[Client Bridged|Client Bridge]], [[Repeater Bridge]] or use [[WDS_Linked_router_network|WDS]]. Further explanation of bridging modes is in the [[Glossary]].+*'''<font color=darkred>If using a multi-band router, do not set more than one band to CB.</font>''' The other radio(s) would normally be set as ''AP''. For example, the 2.4GHz radio can a CB while the 5GHz is an AP, or vice versa.
-==Client Mode Setup==+==Station Mode Setup==
-The Router/AP that you are trying to connect to is the primary router. The Router you are configuring is the client router. You don't need to worry about the primary router as long as you set your client LAN IP address to a different subnet. What this means is, if the primary router has an IP of 192.168.'''A'''.x, you need to set the client router to an IP of 192.168.'''B'''.x. Most primary routers will be at 192.168.1.1, or 192.168.0.1. So, when you are configuring your client router, set it to 192.168.2.x.+The secondary station router will be on a different subnet than the primary host router. For example, if the host router IP address is 192.168.1.1, configure the station router to 192.168.2.1.
 +#These instructions assume a reset router. '''Broadcom routers:''' read the [http://www.dd-wrt.com/phpBB2/viewtopic.php?t=51486 Peacock thread]
 +#Connect a cable from your computer to the LAN port on your router.
 +#''(Optional)'' Set your computer to a static IP address (e.g. 192.168.1.7, subnet 255.255.255.0)
 +#Connect to the DD-WRT GUI at 192.168.1.1 in a browser
 +#Set a username and password - if not asked for this, do a proper [[Reset_And_Reboot|reset]]!
 +#Go to ''Wireless'': '''these settings must match the primary host router - '''Check spelling and case!'''
 +#*In ''Wireless->Basic Settings'' and change the ''Wireless Mode'' to "Station"
 +#*Set the ''Wireless Network Name (SSID)'' to exactly match the primary router. Click ''Save'' ('''not''' ''Apply'')
 +#**If multiple routers broadcast the same SSID, to connect to a specific one (i.e. the primary router, instead of a repeater), enable MAC Filtering on the Wireless Tab, and add the specific device's MAC Address.
 +#**MAC Address can be found on the "Site Survey" page, linked from the ''Wireless'' tab in ''Status''
 +#*''Wireless Security'': set the ''Security Mode'' and other information same as primary router. Click ''Save'' ('''not''' ''Apply'')
 +#''(Optional)'' If available, in ''Wireless'' tab (or under ''Advanced''), set (or disable) the Ack Timing in meters
 +#Go to ''Setup->Basic Setup'': if needed, change ''Connection Type'' to ''Static IP'' from "Automatic Configuration - DHCP"
 +#*Static IP allows easier access remote GUI, SSH, or telnet access is enabled under ''Administration''
 +#*If the station router requires external management, go to ''Setup->Basic Setup'', set the WAN port protocol as needed and enter info provided by your ISP. This is the setting that is bonded to the wireless interface.
 +#In ''Network Setup'' set the Local IP Address '''to a different subnet''' from the primary host router (e.g. 192.168.2.1)
 +#Set the ''Gateway'' address to the '''primary host router gateway''' or internet will not work (e.g. 192.168.1.1)
 +#*The device should be in GATEWAY ''Advanced Routing'' mode, not ROUTER, or Masquerade/NAT does not happen.
 +#''(Optional)'' Set your local DNS to the IP address of your station router
 +#''(Optional)'' Set Static DNS servers in ''Network Address Server Settings (DHCP)'' if not provided or wanted from WAN
 +#''(Recommended)'' Change the Time Zone and DST settings as needed.
 +#''(Optional)'' Set a "Server IP/Name" in ''Time Setting'' section for NTP (blank uses a default server)
 +#Click ''Save'' ('''not''' ''Apply'')
 +#''(Optional)'' In ''Security->Firewall'', disable ''SPI Firewall'' '''if security between AP & Station is not needed'''
 +#Click ''Apply'', then change the computer back to auto IP/DNS if needed (replug the LAN cable if not working)
 +#Let the station router reboot and connect to the host, then configure '''on the new Station IP address''' as needed
 +#If not working, unplug the router for 30sec and retry
-With that in mind, here is how to configure it (all on the secondary router):+==Station Mode Restrictions==
- +To allow internet access but prevent ''192.168.1.x'' clients from seeing each other on ''br0'', use this firewall script (iptables):
-# Download the '''current''' recommended build for your router. Check the forum for your chipset to find recommended builds and general information related to your hardware. If you are using a Broadcom based router, read the [http://www.dd-wrt.com/phpBB2/viewtopic.php?t=51486 peacock thread] prior to starting. DO NOT USE SP1!+ iptables -I FORWARD -i br0 -d 192.168.1.0/24 -j DROP
-# Do a HARD reset on your router.+
-# Connect a cable from your computer to the LAN port on your router.+
-# Set your computer to a static IP address (e.g. 192.168.1.7)+
-# Open a web browser and connect to 192.168.1.1 to view the DD-WRT GUI.+
-# You should be asked to change your password and username. Carefully type these in. If you aren't asked for a password and username, do a hard reset, this time doing it properly! Hit change password.+
-# FIRST go to Wireless -> Wireless Security and enter the Security Mode and other key information that matches your primary router that you will be connecting to over wireless.+
-# Hit SAVE (not apply) +
-# NEXT go to the Wireless -> Basic Settings and change the Wireless Mode to Client. +
-# On that same tab set the Wireless Network Name (SSID) to exactly the same SSID as your primary router you will be connecting to over wireless. Make sure spelling and capitalization match. ''Note: If there are multiple routers broadcasting the same SSID, and you would like to connect to a specific one (IE, the primary router, instead of the repeater), enable MAC Filtering on the Wireless Tab, and add the MAC Address of the correct Access Point. The MAC Address can be found on the "Site Survey" page, linked from the "Wireless" Sub-tab of the "Status" Tab.'' - Conjur+
-# ''(Optional)'' Set the correct ack timing in meters. (Wireless Advanced tab or Advanced tickbox)+
-# Hit SAVE (not apply)+
-# NEXT go to Setup -> Basic Setup and change Connection Type to Automatic Configuration - DHCP (most likely, but see NOTE below).+
-# On that same tab in the Network Setup section set the Local IP Address to 192.168.2.1 (Your Client subnet '''MUST''' differ from the Primary Router subnet!).+
-# Set your gateway to the IP address of your client router e.g. 192.168.2.1+
-# ''(Optional)'' Set Static DNS servers in the Network Address Server Settings section if your WAN type does not provide them or you want to use different ones than the AP provides.+
-# ''(Recommended)'' Change your Time Zone and DST to match where you are.+
-# ''(Optional)'' Set a Server IP/Name for in Time Setting section for NTP (it will use a hidden default server if you leave it blank).+
-# Hit SAVE (not apply)+
-# ''(Optional)'' Go to Security -> Firewall and disable the SPI Firewall if you do not need to worry about security between the AP and Client router.+
-# Hit Apply.+
-# Set your computer back to auto IP and auto DNS if you like. You will get a DHCP address from the router.+
- +
-You are done and the Client router should connect to the AP within a minute or so. You may need to unplug the router for 17 seconds if the router doesn't reset. After you ensure that it does connect and work properly then you may configure any other settings you wish to (Virtual Interface for wireless connection for example).+
- +
-NOTE: If the client router is externally managed, such as in a college dorm etc., you should Go to Setup -> Basic Setup and set the WAN port protocol to what you need for the AP (mostly static, dhcp or pppoe). This is the setting that is bonded to the Wifi interface. Fill in the needed info provided by your ISP if this AP is externally managed. Note: This is what a computer (wired or wireless) connected to the ROUTER would use to gain access to the network, not to be confused with the settings required to gain access to the WAN by the ROUTER. Also note that the device should be in GATEWAY MODE instead of ROUTER mode, otherwise Masquerade/NAT does not happen.+
==Troubleshooting== ==Troubleshooting==
 +If the preceding instructions do not work, it is usually an encryption or password problem. Disable encryption on the primary router and retry the setup. Using proper encryption and the correct case-sensitive password is key. Do a reset and start over. Note: WPA2-AES (aka CCMP) ''is required for 802.11N (and newer) devices''.
-If following the instructions does not seem to work, in 90% of the cases, it is a problem with encryption. Disable encryption on the primary router and try the setup again to see if this is the case. Use WPA2-AES encryption only with dd-wrt. WEP will often work as well, but it is not a secure form of encryption. Using proper encryption and following the instructions WILL work, so if it doesn't you need to re-exxamine the instructions and see what you have done incorrectly. Do a hard reset and start over. 
- 
-==External Links== 
-*http://www.dd-wrt.com/wiki/index.php?title=Client_Mode&oldid=34051 - Old wiki instructions. 
-*http://www.wi-fiplanet.com/tutorials/article.php/3639271 graphical representation 
-[[Category:Wlan]]+[[Category:Wlan]][[Category:Linking Routers]]
-[[Category:Basic tutorials]]+

Current revision

Wiki Path: DD-WRT Wiki Main / Tutorials / Linking Routers / Client Mode



The secondary (station) router is unbridged in a different subnet (with NAT), while a Station Bridge or Station Bridge (Routed) is the same subnet as the host.

Contents

[edit] Introduction

This mode is NOT for WIRED connections between two routers, like an Access Point. It is a wireless connection between two routers only, usually to the primary gateway router. A Station Mode router connects to a Wireless Access Point (WAP) wireless connection as the WAN interface, and shares the internet connection only to the LAN ports, or a separate WAP for multi-radio routers. It is not seen as a WAP, nor accepts wireless connections by other client devices.

The primary (host) router is not required to be running DD-WRT firmware. The primary and secondary (Station Mode) routers must be on separate subnets, and NAT is used between them. Thus, when port forwarding is needed it must be configured at both routers - not just on the host router.

A Station Mode router uses its own DHCP server for IP Address, Gateway, and DNS server to connected devices. To have computers connected to both routers (main and secondary) and co-exist in the same subnet, set up DD-WRT as a Station Bridge(Broadcom), Station Bridge (Routed), Repeater Bridge, or use WDS. Further explanation of bridging modes is at Linking Routers.

  • If using a multi-band router, do not set more than one band to CB. The other radio(s) would normally be set as AP. For example, the 2.4GHz radio can a CB while the 5GHz is an AP, or vice versa.

[edit] Station Mode Setup

The secondary station router will be on a different subnet than the primary host router. For example, if the host router IP address is 192.168.1.1, configure the station router to 192.168.2.1.

  1. These instructions assume a reset router. Broadcom routers: read the Peacock thread
  2. Connect a cable from your computer to the LAN port on your router.
  3. (Optional) Set your computer to a static IP address (e.g. 192.168.1.7, subnet 255.255.255.0)
  4. Connect to the DD-WRT GUI at 192.168.1.1 in a browser
  5. Set a username and password - if not asked for this, do a proper reset!
  6. Go to Wireless: these settings must match the primary host router - Check spelling and case!
    • In Wireless->Basic Settings and change the Wireless Mode to "Station"
    • Set the Wireless Network Name (SSID) to exactly match the primary router. Click Save (not Apply)
      • If multiple routers broadcast the same SSID, to connect to a specific one (i.e. the primary router, instead of a repeater), enable MAC Filtering on the Wireless Tab, and add the specific device's MAC Address.
      • MAC Address can be found on the "Site Survey" page, linked from the Wireless tab in Status
    • Wireless Security: set the Security Mode and other information same as primary router. Click Save (not Apply)
  7. (Optional) If available, in Wireless tab (or under Advanced), set (or disable) the Ack Timing in meters
  8. Go to Setup->Basic Setup: if needed, change Connection Type to Static IP from "Automatic Configuration - DHCP"
    • Static IP allows easier access remote GUI, SSH, or telnet access is enabled under Administration
    • If the station router requires external management, go to Setup->Basic Setup, set the WAN port protocol as needed and enter info provided by your ISP. This is the setting that is bonded to the wireless interface.
  9. In Network Setup set the Local IP Address to a different subnet from the primary host router (e.g. 192.168.2.1)
  10. Set the Gateway address to the primary host router gateway or internet will not work (e.g. 192.168.1.1)
    • The device should be in GATEWAY Advanced Routing mode, not ROUTER, or Masquerade/NAT does not happen.
  11. (Optional) Set your local DNS to the IP address of your station router
  12. (Optional) Set Static DNS servers in Network Address Server Settings (DHCP) if not provided or wanted from WAN
  13. (Recommended) Change the Time Zone and DST settings as needed.
  14. (Optional) Set a "Server IP/Name" in Time Setting section for NTP (blank uses a default server)
  15. Click Save (not Apply)
  16. (Optional) In Security->Firewall, disable SPI Firewall if security between AP & Station is not needed
  17. Click Apply, then change the computer back to auto IP/DNS if needed (replug the LAN cable if not working)
  18. Let the station router reboot and connect to the host, then configure on the new Station IP address as needed
  19. If not working, unplug the router for 30sec and retry

[edit] Station Mode Restrictions

To allow internet access but prevent 192.168.1.x clients from seeing each other on br0, use this firewall script (iptables):

iptables -I FORWARD -i br0 -d 192.168.1.0/24 -j DROP

[edit] Troubleshooting

If the preceding instructions do not work, it is usually an encryption or password problem. Disable encryption on the primary router and retry the setup. Using proper encryption and the correct case-sensitive password is key. Do a reset and start over. Note: WPA2-AES (aka CCMP) is required for 802.11N (and newer) devices.