Site Tools


basic-network

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision
Previous revision
basic-network [2025/08/28 03:19] – [WAN(x) Settings] -Replace Disable Watchdog screenshot with: Basic-Network-disable watchdog to watchdog mode-default theme-2025.3" @ 350" hogwildbasic-network [2026/07/03 04:45] (current) – Corrected the wireless client security settings hommeoursporc
Line 84: Line 84:
   * [4G/LTE]** **- enables support for 4th generation cellular USB modems.    * [4G/LTE]** **- enables support for 4th generation cellular USB modems. 
     * PIN code and APN fields appear in which you must enter settings.      * PIN code and APN fields appear in which you must enter settings. 
-    * To detect modems, enable USB and 3G/4G/5G modem support in [[nas-usb|USB Support]]. \\  (The latter applies to releases before r2025.3).\\+    * To detect modems, enable USB and 3G/4G/5G modem support in [[nas-usb|USB Support]]. \\  (The latter applies to releases before r2025.3).\\ \\
  
   * [Disabled]** **- disables the physical WAN port on the router.    * [Disabled]** **- disables the physical WAN port on the router. 
Line 332: Line 332:
     * Max idle time - the maximum period of inactivity after which \\ the router disconnects from the internet if no LAN client \\ is requesting access.\\ \\     * Max idle time - the maximum period of inactivity after which \\ the router disconnects from the internet if no LAN client \\ is requesting access.\\ \\
   * [Keepalive] * - makes FreshTomato send keepalive packets at specified intervals. \\ Some ISPs drop the connection if they detect no Internet activity. \\ This option makes FreshTomato send [[https://en.wikipedia.org/wiki/Keepalive#TCP_keepalive|keepalive]] packets at brief, \\ specified intervals. The ISP "sees" this intermittent activity \\ when no clients request Internet and maintains the connection.  \\    * [Keepalive] * - makes FreshTomato send keepalive packets at specified intervals. \\ Some ISPs drop the connection if they detect no Internet activity. \\ This option makes FreshTomato send [[https://en.wikipedia.org/wiki/Keepalive#TCP_keepalive|keepalive]] packets at brief, \\ specified intervals. The ISP "sees" this intermittent activity \\ when no clients request Internet and maintains the connection.  \\ 
-    * Redial Interval - how often the router checks the WAN connection. \\ This minimizes Internet connection response time, as usually \\ the connection will be up. (Default: 10 seconds).+    * Redial Interval - how often FreshTomato checks the WAN connection. \\ This minimizes Internet connection response time, as usually \\ the connection will be up. (Default: 10 seconds).
  
  \\  \\
Line 354: Line 354:
   * The client modem will then drop the PPPoE link.    * The client modem will then drop the PPPoE link. 
   * LCP will then try to renegotiate a new PPPoE session.   * LCP will then try to renegotiate a new PPPoE session.
 +
 + \\
 +
 +{{::basic-network-disable_watchdog_to_watchdog_mode-2025.3.png?400}}
  
  \\  \\
Line 360: Line 364:
  
 Default: unchecked. Default: unchecked.
- 
- \\ {{::basic-network-disable_watchdog_to_watchdog_mode-default_theme-2025.3.png?350}} 
  
  \\  \\
Line 376: Line 378:
  \\  \\
  
-Watchdog mode is supported in the DHCP, PPPoE,  PPTP, L2TP, and 3G/4G/5G LTE following connection types.\\+Watchdog supports the following connection types:
  
 + \\
 +
 +  - DHCP
 +  - PPPoE
 +  - PPTP
 +  - L2TP
 +  - 3G/4G/5G LTE
 +
 + \\
  
 ===== LAN ===== ===== LAN =====
Line 408: Line 419:
 **DHCP**:  enables DHCP server functions in dnsmasq. (Default: Off) \\ \\ **DHCP**:  enables DHCP server functions in dnsmasq. (Default: Off) \\ \\
  
-**IP Range //(first/last)**//:  the range of IP addresses the DHCP server will assign to LAN clients.+**IP Range //(first/last)//**:  the range of IP addresses the DHCP server will assign to LAN clients.
  
 In the top field, enter the first valid address in the subnet. Enter the the last address in the bottom field. \\ \\ In the top field, enter the first valid address in the subnet. Enter the the last address in the bottom field. \\ \\
Line 414: Line 425:
 **Lease Time (//mins.//)**: the DHCP lease time, in minutes. (Default: 1440). \\ \\ **Lease Time (//mins.//)**: the DHCP lease time, in minutes. (Default: 1440). \\ \\
  
-**Automatic IP**: lets FreshTomato obtain a LAN IP via DHCP.  \\  Since release 2022.6, this option is supported in: \\   \\   \\+**Automatic IP**: lets FreshTomato obtain a LAN IP via DHCP.  \\  Since r2022.6, this option is supported in: \\   \\   \\
  
   - AP Mode   - AP Mode
Line 438: Line 449:
 (Default: On). \\ \\ (Default: On). \\ \\
  
-**Invert ports order:** displays port icons in the opposite order from where they are on the hardware.+**Invert ports order:**  changes whether Ethernet port numbers will match up physically/logically from left to right on your router.
  
-This is useful when the order of display icons doesn't match the physical locations on the router(Default: Off).+This does **not** actually change the ordering of any labels on the Ethernet Ports State graphic on the Overview menuThus, WAN0 will always display as the leftmost port on the page and LAN0, LAN1, LAN2, LAN3, etc will always show in that order.
  
 ===== Wireless Band Steering ===== ===== Wireless Band Steering =====
Line 514: Line 525:
 |  \\ Access Point*  | \\ The (default) setting, that allows clients to connect to FreshTomato WiFi networks. \\ \\ -  IPv4 & IPv6 communication work for both MIPS and ARM. \\ | |  \\ Access Point*  | \\ The (default) setting, that allows clients to connect to FreshTomato WiFi networks. \\ \\ -  IPv4 & IPv6 communication work for both MIPS and ARM. \\ |
 |  \\ Access Point WDS  | \\ Sets the router in "repeater mode". Clients can connect via WiFi while \\ the router also acts as a [[https://en.wikipedia.org/wiki/Wireless_Distribution_System|Wireless Distribution System]] base station. \\ \\ | |  \\ Access Point WDS  | \\ Sets the router in "repeater mode". Clients can connect via WiFi while \\ the router also acts as a [[https://en.wikipedia.org/wiki/Wireless_Distribution_System|Wireless Distribution System]] base station. \\ \\ |
-|  \\  \\  \\  \\  \\   \\ \\ \\ Wireless Client  | \\ The router connects to another router/AP as any other WiFi client would. \\ \\ -  Wireless Client mode works for:\\    -  MIPS devices (SDK5: RT and RT-N images)\\    -  ARM devices (SDK6 & SDK7 & SDK714) starting with r2021.5\\ -  This mode does not yet work on SDK6 MIPS RT-AC builds. \\     (The option was removed from the GUI starting with r2024.3) \\ \\ -  Only one WiFi radio can be used in this mode. \\    -  Other radio modules present can be used in AP mode. \\ \\ -  Disable band steering when in this mode, (at least for initial setup). \\    Advanced users may adjust NVRAM values for band steering. \\ \\ -  The recommended WiFi security for this mode is WPA2 Personal/AES. \\    -  If no connection is possible using the above, try those settings.\\    -  This is especially true for MIPS SDK5 (RT and RT-N) wireless client mode). \\ \\ |+|  \\  \\  \\  \\  \\   \\ \\ \\ Wireless Client  | \\ The router connects to another router/AP as any other WiFi client would. \\ \\ -  Wireless Client mode works for:\\    -  MIPS devices (SDK5: RT and RT-N images)\\    -  ARM devices (SDK6 & SDK7 & SDK714) starting with r2021.5\\ -  This mode does not yet work on SDK6 MIPS RT-AC builds. \\     (The option was removed from the GUI starting with r2024.3) \\ \\ -  Only one WiFi radio can be used in this mode. \\    -  Other radio modules present can be used in AP mode. \\ \\ -  Disable band steering when in this mode, (at least for initial setup). \\    Advanced users may adjust NVRAM values for band steering. \\ \\ -  The recommended WiFi security for this mode is WPA2 Personal/AES. \\    -  If no connection is possible using the above, try with WPA / WPA2 Personal/AES.\\    -  This is especially true for MIPS SDK5 (RT and RT-N) wireless client mode). \\ \\ |
 |  \\  \\  \\  \\  \\   \\  \\  \\ \\ Wireless Ethernet Bridge  | \\ Configures FreshTomato to connect to another router. \\ All clients connected to both routers remain in the same subnet. \\ \\ -  Since WEB v1.19, this mode must have security set to WPA2 to work. \\ \\ -  IPv4 communication works for MIPS and ARM builds. \\ -  IPv6 communication will be blocked. \\    -  A bug in the Linux wl driver may cause crashes. \\    -  For IPv6 support, use Media Bridge Mode. \\ \\ -  ARM SDK7 is not working/will never be possible. \\    - The option was removed from the GUI since r2024.3.\\ -  ARM SDK6 & SDK714 work correctly\\ -  MIPS SDK5: RT and RT-N work correctly\\ -  MIPS SDK6 RT-AC not working/will never be possible \\    -  (The option was removed from the GUI starting with r2024.3) \\ \\ -  Do not enable wireless band steering (BSD) when using this mode.\\ \\ -  Use this interface to connect only to your main AP (no virtual interfaces). \\    Other radio modules present can be used, for example, in A/P mode.\\ \\ | |  \\  \\  \\  \\  \\   \\  \\  \\ \\ Wireless Ethernet Bridge  | \\ Configures FreshTomato to connect to another router. \\ All clients connected to both routers remain in the same subnet. \\ \\ -  Since WEB v1.19, this mode must have security set to WPA2 to work. \\ \\ -  IPv4 communication works for MIPS and ARM builds. \\ -  IPv6 communication will be blocked. \\    -  A bug in the Linux wl driver may cause crashes. \\    -  For IPv6 support, use Media Bridge Mode. \\ \\ -  ARM SDK7 is not working/will never be possible. \\    - The option was removed from the GUI since r2024.3.\\ -  ARM SDK6 & SDK714 work correctly\\ -  MIPS SDK5: RT and RT-N work correctly\\ -  MIPS SDK6 RT-AC not working/will never be possible \\    -  (The option was removed from the GUI starting with r2024.3) \\ \\ -  Do not enable wireless band steering (BSD) when using this mode.\\ \\ -  Use this interface to connect only to your main AP (no virtual interfaces). \\    Other radio modules present can be used, for example, in A/P mode.\\ \\ |
 |  \\  \\  \\  \\  \\  \\  \\  \\ Media Bridge Mode  | \\ Configures FreshTomato to connect to another router/access point.\\ All clients connected to both routers remain in the same subnet.  \\ \\ -  Support for this mode started with r2021.6.\\ -  Similar to Wireless Ethernet Bridge mode for SDK6 and up \\ -  (only for MIPS RT-AC images + ARM images). \\ \\ -  Use Wireless Ethernet Bridge mode for MIPS RT / RT-N builds, \\    like the RT-N16, E4200v1.\\ -  This Mode isn't supported in SDK5 (RT / RT-N) builds.\\ -  ARM SDK6 & SDK7 & SDK714 work properly.\\ -  MIPS SDK6 RT-AC work properly. \\ \\ -  Both IPv4 and IPv6 function well. \\    You don't need to enable IPv6 via the GUI. IPv6 traffic just works. \\ \\ -  Don't enable wireless band steering (BSD) with this mode enabled.\\    Use this interface only to connect to your main A/P (not to virtual interfaces). \\    -  Other radio modules can be used, for example, in A/P mode.\\ \\ | |  \\  \\  \\  \\  \\  \\  \\  \\ Media Bridge Mode  | \\ Configures FreshTomato to connect to another router/access point.\\ All clients connected to both routers remain in the same subnet.  \\ \\ -  Support for this mode started with r2021.6.\\ -  Similar to Wireless Ethernet Bridge mode for SDK6 and up \\ -  (only for MIPS RT-AC images + ARM images). \\ \\ -  Use Wireless Ethernet Bridge mode for MIPS RT / RT-N builds, \\    like the RT-N16, E4200v1.\\ -  This Mode isn't supported in SDK5 (RT / RT-N) builds.\\ -  ARM SDK6 & SDK7 & SDK714 work properly.\\ -  MIPS SDK6 RT-AC work properly. \\ \\ -  Both IPv4 and IPv6 function well. \\    You don't need to enable IPv6 via the GUI. IPv6 traffic just works. \\ \\ -  Don't enable wireless band steering (BSD) with this mode enabled.\\    Use this interface only to connect to your main A/P (not to virtual interfaces). \\    -  Other radio modules can be used, for example, in A/P mode.\\ \\ |
Line 524: Line 535:
 **Wireless Network Mode: **selects which 802.11 WiFi protocols to make available to clients. **Wireless Network Mode: **selects which 802.11 WiFi protocols to make available to clients.
  
-The network modes available here will depend on your hardware.+Network modes available here will depend on your hardware.
  
  \\  \\
Line 537: Line 548:
   * N only - allows clients to connect using only the 802.11n. \\ \\   * N only - allows clients to connect using only the 802.11n. \\ \\
  
- \\+FreshTomato uses the classic/manual method of channel selection, not the Broadcom acsd (automatic channel selection daemon). 
 + 
 +\\
  
 These apply only to the 2.4 GHz interface. Any 5 GHz interface will have separate Mode settings. These apply only to the 2.4 GHz interface. Any 5 GHz interface will have separate Mode settings.
Line 545: Line 558:
 **SSID:** the network name (Service Set IDentifier) for the 2.4 GHz WiFi interface. **SSID:** the network name (Service Set IDentifier) for the 2.4 GHz WiFi interface.
  
-For security, don't include personal identity/address/location/equipment type. Avoid using single dictionary words.+For security, don't include personal words/phrases indicating your: 
 + 
 + \\ 
 + 
 +  * Name 
 +  * Identity 
 +  * Address 
 +  * Location 
 +  * Equipment type. 
 + 
 + \\ 
 + 
 +Single dictionary words also make for very poor security.\\
  
 (Default: FreshTomatoXX, where “XX” is the band numbers.)  For example: “FreshTomato24”. \\ \\ (Default: FreshTomatoXX, where “XX” is the band numbers.)  For example: “FreshTomato24”. \\ \\
Line 695: Line 720:
 |  \\ Access Point  | \\ The default setting that allows clients to connect to FreshTomato wireless networks. \\ \\ -   IPv4 & IPv6 communication work for MIPS and ARM. \\ | |  \\ Access Point  | \\ The default setting that allows clients to connect to FreshTomato wireless networks. \\ \\ -   IPv4 & IPv6 communication work for MIPS and ARM. \\ |
 |  \\ Access Point WDS  | \\ Sets the router in "repeater mode", letting clients to connect via WiFi while acting as a \\ WDS [[https://en.wikipedia.org/wiki/Wireless_Distribution_System|Wireless Distribution System]] base station. \\ \\ | |  \\ Access Point WDS  | \\ Sets the router in "repeater mode", letting clients to connect via WiFi while acting as a \\ WDS [[https://en.wikipedia.org/wiki/Wireless_Distribution_System|Wireless Distribution System]] base station. \\ \\ |
-|  \\ \\  \\  \\ \\  \\ Wireless Client  | \\ The router connects to another router/AP like any other wireless client would. \\ \\ -  This mode works for: \\      MIPS devices (SDK5: RT and RT-N images) and\\      ARM devices (SDK6 & SDK7) starting with r2021.5 \\ -  This mode doesn't yet work on SDK6 MIPS RT-AC images. \\ \\ -  Only one WiFi radio can be used in this mode. \\    -  Other radio modules present can be used in AP mode. \\ \\ -  Disable Wireless Band Steering with mode during initial setup. \\ (Advanced users can adjust band steering NVRAM values). \\ \\ -  WPA2 Personal with AES is the recommended security setup for WiFi connections, \\ especially for MIPS SDK5 (RT + RT-N) \\    -  Try these settings if you cannot establish a connection.\\ \\ |+|  \\ \\  \\  \\ \\  \\ Wireless Client  | \\ The router connects to another router/AP like any other wireless client would. \\ \\ -  This mode works for: \\      MIPS devices (SDK5: RT and RT-N images) and\\      ARM devices (SDK6 & SDK7) starting with r2021.5 \\ -  This mode doesn't yet work on SDK6 MIPS RT-AC images. \\ \\ -  Only one WiFi radio can be used in this mode. \\    -  Other radio modules present can be used in AP mode. \\ \\ -  Disable Wireless Band Steering with mode during initial setup. \\ (Advanced users can adjust band steering NVRAM values). \\ \\ -  WPA2 Personal with AES is the recommended security setup for WiFi connections, \\ especially for MIPS SDK5 (RT + RT-N) \\    -  If you cannot establish a connection, try with WPA / WPA2 Personal with AES.\\ \\ |
 |  \\  \\ \\  \\ Wireless Ethernet Bridge  | \\ Configures FreshTomato to connect to another router. \\ Clients connected to both routers remain in the same subnet. \\ \\ -  As of version 1.19, this mode must have security set to WPA2 \\ to work properly.-  IPv4 communication works for MIPS + ARM builds. \\ -  IPv6 will only work for r2021.1 SDK6 ARM Dual-Core and later. \\ \\ -  SDK7 does not work/will not ever work in this mode. \\ \\ -  Do not enable wireless band steering (BSD) with this mode enabled. \\ \\ -  Use Wireless Ethernet Bridge to connect only to your main AP (no virtual interfaces). \\    -  Other radio modules can be used, for example, in AP mode. \\ \\ | |  \\  \\ \\  \\ Wireless Ethernet Bridge  | \\ Configures FreshTomato to connect to another router. \\ Clients connected to both routers remain in the same subnet. \\ \\ -  As of version 1.19, this mode must have security set to WPA2 \\ to work properly.-  IPv4 communication works for MIPS + ARM builds. \\ -  IPv6 will only work for r2021.1 SDK6 ARM Dual-Core and later. \\ \\ -  SDK7 does not work/will not ever work in this mode. \\ \\ -  Do not enable wireless band steering (BSD) with this mode enabled. \\ \\ -  Use Wireless Ethernet Bridge to connect only to your main AP (no virtual interfaces). \\    -  Other radio modules can be used, for example, in AP mode. \\ \\ |
 |  \\  \\  \\  \\  \\  \\ Media Bridge Mode  | \\ Configures FreshTomato to connect to another router/AP. \\ All clients connected to both routers remain in the same subnet. \\ \\ -  This is similar to Wireless Ethernet Bridge mode for SDK6 \\ and up (for MIPS RT-AC and all ARM images).\\ -  Using Wireless Ethernet Bridge mode is recommended for \\ MIPS RT and RT-N images (like the RT-N16, E4200v1).\\ -  This Mode is not supported with SDK5 (RT / RT-N) builds \\ \\ -  Both IPv4 and IPv6 function properly. IPv6 traffic works without \\ needing to enable IPv6 in the web interface. \\  \\ -  Support for this mode started with r2021.6. \\ \\ -  Do not enable wireless band steering with this mode enabled.\\ -  Use Media Bridge interface to connect only to your main AP (no virtual interfaces). \\      -  Other radio modules can be used, for example, in AP mode. \\ \\ | |  \\  \\  \\  \\  \\  \\ Media Bridge Mode  | \\ Configures FreshTomato to connect to another router/AP. \\ All clients connected to both routers remain in the same subnet. \\ \\ -  This is similar to Wireless Ethernet Bridge mode for SDK6 \\ and up (for MIPS RT-AC and all ARM images).\\ -  Using Wireless Ethernet Bridge mode is recommended for \\ MIPS RT and RT-N images (like the RT-N16, E4200v1).\\ -  This Mode is not supported with SDK5 (RT / RT-N) builds \\ \\ -  Both IPv4 and IPv6 function properly. IPv6 traffic works without \\ needing to enable IPv6 in the web interface. \\  \\ -  Support for this mode started with r2021.6. \\ \\ -  Do not enable wireless band steering with this mode enabled.\\ -  Use Media Bridge interface to connect only to your main AP (no virtual interfaces). \\      -  Other radio modules can be used, for example, in AP mode. \\ \\ |
Line 719: Line 744:
 **SSID:**  the network name of the 5 GHz WiFi. **SSID:**  the network name of the 5 GHz WiFi.
  
-For security, don't include personal words/phrases indicating your name, identity, address, location, or equipment type. Single dictionary words also make for very poor security.\\ \\ (Default: FreshTomatoXX, where “XX” is the digits in the band.) On a 5 GHz network, the default SSID is “FreshTomato50”. \\ \\+For security, don't include personal words/phrases indicating your
 + 
 + \\ 
 + 
 +  * Name 
 +  * Identity 
 +  * Address 
 +  * Location 
 +  * Equipment type. 
 + 
 + \\ 
 + 
 +Single dictionary words also make for very poor security.\\ \\ (Default: FreshTomatoXX, where “XX” is the digits in the band.) On a 5 GHz network, the default SSID is “FreshTomato50”. \\ \\
  
 **Broadcast: **enables SSID broadcasting. **Broadcast: **enables SSID broadcasting.
basic-network.1756347598.txt.gz · Last modified: by hogwild