The Network page includes most basic settings needed to configure the network. It is divided into sections including MultiWAN, WAN Settings, Ethernet Ports Configuration, LAN and Wireless setttings.
Number of WAN ports: This lets you select the number of WAN ports to be used on the device.
On routers with only one physical WAN interface, options with WAN ports larger than one will be greyed out. This allows you to select only “1 WAN” on such devices.
Tune route cache: This is intended for Multiwan configurations with load balancing.
This setting is recommended if two or more WANs have a weight larger than 0. Essentially, this uses kernel tweaks to improve workload sharing.
Specifically, enabling this option does the following:
# 2018-01-19 # Reduce and flush the route cache to ensure a more synchronous load-balancing across multi-wan # https://vincent.bernat.im/en/blog/2011-ipv4-route-cache-linux /bin/echo 1 > /proc/sys/net/ipv4/route/flush /bin/echo 1 > /proc/sys/net/ipv4/route/secret_interval /bin/echo 0 > /proc/sys/net/ipv4/route/min_delay /bin/echo 1 > /proc/sys/net/ipv4/route/max_delay /bin/echo 1 > /proc/sys/net/ipv4/route/gc_interval /bin/echo 1 > /proc/sys/net/ipv4/route/gc_elasticity /bin/echo 1 > /proc/sys/net/ipv4/route/gc_min_interval_ms /bin/echo 0 > /proc/sys/net/ipv4/route/gc_min_interval /bin/echo 1 > /proc/sys/net/ipv4/route/gc_thresh /bin/echo 1 > /proc/sys/net/ipv4/route/gc_timeout #Causes connectivity issues if this value is too small, use defaults or tune accordingly /bin/echo 512 > /proc/sys/net/ipv4/route/max_size
Check Connections Every: This makes it easy for FreshTomato to automatically test your WAN connection reliability. (Default: Disabled). Choosing any setting except [Disabled] will execute the Watchdog script. This setting specifies how often the router sends ICMP ping packets to check it is still connected to the Internet.
The Watchdog script uses ping or traceroute to test WAN connection status.
Choosing a setting other than Disabled will make the “Target 1” and “Target 2” fields appear.
Settings in this section are used to configure the WAN interface. These setting depends on your ISP.
Depending on the type selected, other settings specific to that type of connection will be shown or hidden.
Type: This sets the connection mode the WAN interface will use to connect to your ISP. (Default: DHCP).
Wireless Client Mode: This enables FreshTomato's Wireless Client mode.
Wireless client mode allows the FreshTomato router to act as a client and connect to another router/AP. This is similar to how a normal WiFi adapter connects to a router/AP. (For details, see Wireless Mode tables below).
Modem device: Here, you specify the 3G modem's Linux device path/filename.
To get device details, you could also log on to FreshTomato via Telnet/SSH and use the lsusb or dmesg commands .
PIN Code: This is the 3-digit PIN code for the SIM card associated with your cell account.
Modem init string: Here, enter the modem's default initialization string.
APN: The access point name (provided by your carrier).
Username: Here you enter the username to access your cell carrier's APN (provided by your cell carrier) gateway.
Password: Here, enter the password to authenticate to your cell carrier's APN (provided by your cell carrier) gateway.
Network Type: This menu appears when WAN type is set to 4G/LTE. (Default setting: 4G/3G/2G).
DNS Server:
Manually-chosen DNS servers are useful if your ISP's DNS servers are slow or unreliable. They can also be used for content filtering.
MTU: This sets the Maximum Transmission Unit, or maximum Ethernet frame size for traffic between WAN and LAN.
This is only for the WAN interface and won't affect LAN traffic. However, different MTU sizes among devices can cause problems.
Use DHCP: This function is rarely used, and it is recommended you leave it disabled.
Single Line MLPPP: This is similar to Multilink PPP (MLPPP).
Multilink PPP is a PPP version that allows you to bond two or more physical connections to increase apparent bandwidth. Single Line MLPPP is a version which lets you use one modem, and bond the bandwidth of multiple PPPoE sessions. A side effect of using this is that it bypassed some Internet Providers' bandwidth throttling. This is rarely used these days.
Route Modem IP: This function lets you access a modem “behind a router” with a simple configuration change. (Default: Off)
Query Hilink Modem IP: This function is only for Huawei USB modems supporting Hilink mode. (Default: Disabled).
Some Huawei modems have a mode of operation called HiLink mode. Enabling this setting allows you communicate with a modem in HiLink mode which is connected to a device elsewhere on the network (not attached to the local FreshTomato device). This is useful, for example, when monitoring LTE statistics, or signal strength.
Call Custom Status Script: TBD.
Connect Mode: This chooses the method used to keep the router connected to the Internet provider. (Default: Keepalive).
Redial Interval: When PPPoE dialling fails, the Redial Interval is used to delay each attempt for the defined number of seconds.
LCP Echo Interval: The Link Control Protocol sends and receives frames between two peers to check if they're still connected.
LCP Echo Link fail limit: This is the number of times LCP echo requests can fail between LCP peers before the status is deemed to be dead.
The LAN section includes information and settings to configure FreshTomato's LAN interface functions.
This includes FreshTomato's:
Bridge: Selects the bridge whose LAN settings will be modified
STP: Checking this enables Spanning Tree Protocol. This is used primarily to prevent forwarding loops in switches. The recommended setting is off, unless you are highly experienced with networking. (Default: Off).
IP Address: Here you enter the IP Address you want to assign to the specified LAN interface. (Default: 192.168.1.1)
Netmask: The (sub)netmask associated with FreshTomato's LAN IP address. (Default: 255.255.255.0 - a class C netmask).
DHCP: Checking this enables DHCP server functions in dnsmasq. (Default: Off)
IP Range (first/last) : In the top field, enter the first allowable address in the subnet. In the bottom field, enter the last address. This will form the range of IP addresses FreshTomato's DHCP server will assign to LAN clients.
Lease Time (mins.): This is the DHCP lease time, in minutes. (Default: 1440 = one day).
Automatic IP: Starting in release 2022.6, the user can select this option if the router is in Access Point Mode or Wireless Ethernet Bridge Mode or Media Bridge Mode. This option will allow FreshTomato to obtain a LAN IP via DHCP.
Note: After saving the settings, the router's new IP address is 192.168.1.1 (default) while waiting for DHCP Server Infos. IP address will change to a.b.c.d (obtained IP via DHCP).
This section has settings for the Ethernet Ports State graphic in the Overview menu. The graphic shows the status, link speed, and other diagnostic information for each Ethernet port on the router.
Enable Ports State: Checking this enables the Ethernet Ports State graphic on the Overview page. (Default: On).
Show Speed Info: Checking this displays the link speed of each Ethernet port, (such as 1GB/100MB/10MB). (Default: On).
Invert ports order: Checking this option displays the port icons in the Ethernet Ports State graphic in the opposite order of the default where they are located on the switch. This is useful in when the sequence of icons on the Ethernet Ports State does not match the actual port locations on the router's switch. (Default: Off).
Options:
With Wireless Band Steering enabled, FreshTomato can assess, for each dual- or tri-band client, on which band the client device should try to connect and “nudge” it towards that band.
To achieve this, for all WiFi interfaces, enter the same:
Remember that client devices can also try to switch bands on their own, without the influence of Wireless Band Steering.
Wireless Band Steering is available starting with release 2020.8 (only for ARM hardware).
This example shows the default parameters to steer clients from the 2.4 GHz band to the 5 GHz band:
Steer Policy: max=0 period=5 cnt=3 rssi=-52 phyrate_high=110 phyrate_low=0 flags=0x22 state=3 Rule Logic: OR RSSI: Greater than VHT: Allowed NON VHT: Allowed NEXT RF: NO PHYRATE (HIGH): Greater than or Equal to LOAD BALANCE: NO STA NUM BALANCE: NO PHYRATE (LOW): Less than N ONLY: NO
This example shows default parameters to steer clients from the 5 GHz band to the 2.4 GHz band:
Steer Policy: max=80 period=5 cnt=3 rssi=-82 phyrate_high=0 phyrate_low=0 flags=0x20 state=2 Rule Logic: OR RSSI: Less than or Equal to VHT: Allowed NON VHT: Allowed NEXT RF: NO PHYRATE (HIGH): Greater than or Equal to LOAD BALANCE: NO STA NUM BALANCE: NO PHYRATE (LOW): Less than N ONLY: NO
For more details, see:
https://www.smallnetbuilder.com/wireless/wireless-howto/32653-asus-rt-ac3200-smart-connect-the-missing-manual?start=0
The Wireless (2.4 GHz) section displays information and settings for the wireless network interface on the 2.4 GHz WiFi band.
Your device may show a different device name than eth1. Note: FreshTomato hardware device numbers begin at 0. For example, the first Ethernet device might be called eth0. The second wireless device might be called wl1.
Enable Wireless: When checked, this turns on the 2.4 GHz WiFi network interface. When unchecked, the 2.4 GHz WiFi interface is off.
MAC Address: This displays the MAC address of the 2.4 GHz WiFi radio interface. Clicking on it takes you to the MAC Address page, where you can specify your own MAC address for this interface.
Wireless Mode: This allows you to select the wireless mode (function) of the 2.4 GHz WiFi network interface.
Wireless Mode | Description |
---|---|
Access Point | The (default) setting, which allows clients to connect to FreshTomato's wireless network(s). - IPv4 & IPv6 communication work for both MIPS and ARM. |
Access Point WDS | Sets the router in “repeater mode”, allowing clients to connect via wireless while simultaneously acting as a WDS Wireless Distribution System base station. |
Wireless Client | The router connects to another router/access point as any other wireless client device would. - Wireless Client mode works for: MIPS devices (SDK5: RT and RT-N images) ARM devices (SDK6 & SDK7) starting with release 2021.5 - This mode does not workyet on SDK6 MIPS RT-AC builds. - Only one wireless radio can be used in this mode. Other radio modules, (if present), can be used in Access Point mode. - Disable band steering if using this mode (at least for the initial setup. Advanced users may adjust nvram values for band steering). - The recommended security setup for WiFi connections is WPA2 Personal with AES. - If no connection is possible using the above, try WPA / WPA2 Personal + AES. - This is the recommended security setup for MIPS SDK5 (RT and RT-N) wireless client mode). |
Wireless Ethernet Bridge | Configures FreshTomato to connect to another router. All clients connected to both routers remain in the same subnet. - Since Wireless Ethernet Bridge 1.19, this mode must have security set to WPA2 to work properly. - IPv4 communication works for MIPS and ARM builds. - IPv6 communication will only work for FreshTomato 2021.1 SDK6 ARM Dual-Core and newer - SDK7 not working/possible. - Do not enable wireless band steering (BSD) while this mode is enabled. - Recommendation: Use Wireless Ethernet Bridge interface only to connect to your main AP (no virtual interfaces). Other radio modules present can be used, for example, in Access Point mode. |
Media Bridge Mode | Configures FreshTomato to connect to another router/access point. All clients connected to both routers remain in the same subnet. - Support for this mode is available starting with release 2021.6 . - This mode is similar to Wireless Ethernet Bridge mode for SDK6 and up (only for MIPS RT-AC images and all ARM images). - Recommendations: Use Wireless Ethernet Bridge mode for MIPS RT and RT-N builds (like the RT-N16, E4200v1). - This Mode is not supported in SDK5 (RT / RT-N) builds. - Both IPv4 and IPv6 communication function well. You don't need to enable IPv6 via the web interface. IPv6 traffic will work. - Do not enable wireless band steering (BSD) if this mode is enabled. - Use Media Bridge interface only to connect to your main AP (not to virtual interfaces). Other present radio modules can be used, for example, in Access Point mode. |
WDS | Serve as a Wireless Distribution System (WDS) base station only. |
Table derived from (Creative Commons) Wikibooks - “Tomato Firmware/Menu Reference” Wireless Mode Selections |
Wireless Network Mode: This lets you choose which 802.11 WiFi protocol(s) to make available to clients.
The network modes available in this dropdown will depend on your hardware.
These apply only to the 2.4 GHz band interface. There are separate Wireless Network Mode settings for any 5 GHz interface.
(Default: Auto)
SSID: This is the network name (Service Set IDentifier) for the 2.4 GHz WiFi interface. For security reasons, it's recommended you don't include personal words or phrases which may indicate your identity, address, location, or equipment type here. For example, “HELENLIUNG” would not be a good choice, unless you want everyone on the street to know who owns the network. Dictionary words also make for poor security.
(Default: FreshTomatoXX, where “XX” is the two numbers in the frequency band.) On the 2.4 GHz network, for example, the default SSID is “FreshTomato24”.
Broadcast: Checking this enables SSID broadcasting. This “announces” the SSID on the air, so it's easy to find and connect to. Some argue that disabling SSID Broadcast provides more security. However, SSIDs names are easily sniffed using common software. Thus, disabling SSID Broadcast provides little increase in security.
Channel: Selects the channel on which the 2.4 GHz radio interface will operate. Generally, it's best to choose a different channel than your neighbours are using. (Default: Auto).
Channel Width: This menu lets you choose the width of the channel (in terms of frequency).
802.11n can use 40 MHz channel width, but to maintain compatibility with legacy systems, it uses one main 20 MHz channel plus a free adjacent channel 20 MHz above or below the main channel.
Control Sideband: This option is only available If the 20 or 40 Channel Width is selected. This menu allows you to choose whether the extra sideband channel used is above (Upper) or below (Lower) the main channelused. (Default: Upper).
Security: This menu lets you select the security protocol that will be used on the 2.4 GHz WiFi interface.
Shared Key: Here, enter the shared key which authenticates the WiFi client on the network. The field shows only asterisks until you click your cursor in it.
Group Key Renewal: This sets the interval for how often encryption keys used between client devices and the router/access point are rotated/changed. This is a part of the WPA protocol. (Default: 3600 seconds = 1 hour).
The Wireless (5 GHz) section displays information and settings for the wireless network interface on the 5 GHz WiFi band.
Your device may show a different device name than eth1. Note: FreshTomato hardware device numbers begin at 0.
For example, the first Ethernet device might be called eth0. The second wireless device might be called wl1.
Typically, the 5 GHz WiFi band has higher bandwidth, but shorter distance propagation than the 2.4 GHz band.
Enable Wireless: Checking this turns on the 5 GHz WiFi interface. When unchecked, the 5 GHz WiFi interface is turned off.
MAC Address: This displays the MAC (hardware) address of the 5 GHz WiFi interface.
Clicking on the MAC address takes you to the MAC Address page, where you can choose your own MAC address for this interface.
Wireless Mode: This lets you choose the wireless mode (function) of the 5 GHz WiFi interface.
Wireless Mode | Description |
---|---|
Access Point | The (default) setting, which allows clients to connect to FreshTomato's wireless network(s). - IPv4 & IPv6 communication work for both MIPS and ARM. |
Access Point WDS | Sets the router in “repeater mode”, allowing clients to connect via wireless while simultaneously acting as a WDS Wireless Distribution System base station. |
Wireless Client | The router connects to another router/access point as any other wireless client device would. - Wireless Client mode works for: MIPS devices (SDK5: RT and RT-N images) ARM devices (SDK6 & SDK7) starting with release 2021.5 - This mode is not working yet on SDK6 MIPS RT-AC images. - Only one wireless radio can be used in this mode. Other radio modules, (if present), can be used in Access Point mode. - Disable wireless band steering when using this mode (at least for the default setup; Advanced user can or could adjust nvram values for band steering). - The recommended security setup for wireless connections is WPA2 Personal with AES. - If no connection is possible using the above, please try WPA / WPA2 Personal + AES. - This is the recommended security setup for MIPS SDK5 (RT and RT-N) wireless client mode). |
Wireless Ethernet Bridge | Configures FreshTomato to connect to another router. All clients connected to both routers remain in the same subnet. - As of version 1.19, this mode must have security set to WPA2 to work properly. - IPv4 communication works for MIPS and ARM builds. - IPv6 communication will only work for FreshTomato 2021.1 SDK6 ARM Dual-Core and newer - SDK7 not working/possible. - Do not enable wireless band steering (BSD) while this mode is enabled. - Recommendation: Use Wireless Ethernet Bridge interface only to connect to your main AP (no virtual interfaces). Other radio modules (if present) can be used, for example, in Access Point mode. |
Media Bridge Mode | Configures FreshTomato to connect to another router/access point. All clients connected to both routers remain in the same subnet. - This new operation mode is similar to Wireless Ethernet Bridge mode for SDK6 and up (only for MIPS RT-AC images and all ARM images). - Recommendations: Use Wireless Ethernet Bridge mode for MIPS RT and RT-N images (like the RT-N16, E4200v1) - This Mode is not supported with SDK5 (RT / RT-N) builds - Both IPv4 and IPv6 communication are functioning. You do not need to enable IPv6 via the web interface. IPv6 traffic will work. - Support for this mode is available starting with release 2021.6. - Do not enable wireless band steering (BSD) while this mode is enabled. - Recommendation: Use Media Bridge interface only to connect to your main AP (no virtual interfaces). Other radio modules (if present) can be used, for example, in Access Point mode. |
WDS | Serve as a Wireless Distribution System (WDS) base station only. |
Table derived from (Creative Commons) Wikibooks - “Tomato Firmware/Menu Reference” Wireless Mode Selections |
Wireless Network Mode: This lets you choose which 802.11 WiFi protocol(s) to make available to clients.
Note that releases before 2021.8 do NOT have a separate setting for 802.11ac. That only arrived with 2021.8 .
Separate Wireless Network Mode settings will exist for any 2.4 GHz band interface. See the 2.4 GHz section.
(Default: Auto)
SSID: This the 5 GHz WiFi interface's network name, (Service Set IDentifier). For security purposes, it's recommended you don't include any personal words or phrases which might indicate your identity, address, location, or equipment type here. For example, “HELENLIUNG” would not be a good choice, unless you want everyone on the street to know who owns that network. Common dictionary words also make for poor security.
(Default: FreshTomatoXX, where “XX” is the two digits in the frequency band.) For example, on a 5 GHz network, the default SSID is “FreshTomato50”.
Broadcast: Checking this enables SSID broadcasting. This “announces” the SSID (network name) on the air, so it's easy to find and connect to. Some argue that disabling SSID Broadcast provides more security. However, SSIDs names can easily be sniffed with common software. Thus, disabling SSID Broadcast provides little increase in security.
Channel: Selects the channel on which the 5 GHz radio interface will operate.
Generally, it's a good idea to choose a different channel than the one your neighbours are using.
(Default: Auto).
Channel Width: This menu allows you to choose the width of the channel (in terms of frequency).
The 20 MHz channels on the 5 GHz band have no overlap. Therefore, the 5GHz band is less prone to interference and noise. Larger channel widths provide more speed/bandwidth if there's minimal interference. Interference is more common on the 2.4 GHz band than it on the 5 GHz band. It is usually fine to choose a wider channel width here. However, if you see effects, such as slow speeds or trouble authenticating/associating with the router, you may need to use a narrower channel width.
802.11N can use 40 MHz channel width, but to maintain compatibility with legacy systems, it uses one main 20 MHz channel plus a free adjacent channel 20 MHz above or below the main channel.
Control Sideband: This option is available only if the 40, 80 or 160 MHz Channel Width is selected. This menu allows you to choose whether the extra channel used is above (Upper) or below (Lower) the main channel being used. (Default: Upper).
Security: This menu lets you select the security protocol that will be used on the 2.4 GHz WiFi interface.
Shared Key: Here, enter the shared key which authenticates the WiFi client on the network. The field shows only asterisks until you click your cursor in it.
Group Key Renewal: This sets how often encryption keys used between clients and the router are rotated/changed. This is part of the WPA protocol.
(Default: 3600 seconds).
Support for Baby Jumbo Frames (RFC 4638) was added starting with release 2021.3. This function works only on gigabit routers. Not all ISPs support Jumbo Frames for PPPoE (RFC 4638).
To enable Baby Jumbo Frames:
nvram set tcp_clamp_disable=1
at a FreshTomato command prompt).