Site Tools


basic-network

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision
Previous revision
basic-network [2025/10/16 18:11] – [Wireless (2.4 GHz / interface eth1)] -Add that FT uses classic method of Wifi channel selection (2.4 GHz) hogwildbasic-network [2026/07/03 04:45] (current) – Corrected the wireless client security settings hommeoursporc
Line 6: Line 6:
  
  \\  \\
- 
  
 ===== MultiWAN ===== ===== MultiWAN =====
Line 40: Line 39:
  
  \\  \\
- 
  
 ==== WAN(x) Settings ==== ==== WAN(x) Settings ====
Line 86: Line 84:
   * [4G/LTE]** **- enables support for 4th generation cellular USB modems.    * [4G/LTE]** **- enables support for 4th generation cellular USB modems. 
     * PIN code and APN fields appear in which you must enter settings.      * PIN code and APN fields appear in which you must enter settings. 
-    * To detect modems, enable USB and 3G/4G/5G modem support in [[nas-usb|USB Support]]. \\  (The latter applies to releases before r2025.3).\\+    * To detect modems, enable USB and 3G/4G/5G modem support in [[nas-usb|USB Support]]. \\  (The latter applies to releases before r2025.3).\\ \\
  
   * [Disabled]** **- disables the physical WAN port on the router.    * [Disabled]** **- disables the physical WAN port on the router. 
Line 391: Line 389:
  
  \\  \\
- 
  
 ===== LAN ===== ===== LAN =====
Line 414: Line 411:
 The default (off) is recommended, unless you are highly experienced. \\ \\ The default (off) is recommended, unless you are highly experienced. \\ \\
  
-**IP Address:** the IP Address to assign to the specified LAN interface. +**IP Address:** the IP Address to assign to the specified LAN interface.  \\  FreshTomato supports Class A/B/C networks. (Default: 192.168.1.1).\\ \\
- \\  +
-FreshTomato supports Class A/B/C networks. (Default: 192.168.1.1).\\ \\+
  
 **Netmask**:  the subnet mask associated with FreshTomato's LAN IP address. **Netmask**:  the subnet mask associated with FreshTomato's LAN IP address.
Line 430: Line 425:
 **Lease Time (//mins.//)**: the DHCP lease time, in minutes. (Default: 1440). \\ \\ **Lease Time (//mins.//)**: the DHCP lease time, in minutes. (Default: 1440). \\ \\
  
-**Automatic IP**: lets FreshTomato obtain a LAN IP via DHCP.  \\  Since release 2022.6, this option is supported in: \\   \\   \\+**Automatic IP**: lets FreshTomato obtain a LAN IP via DHCP.  \\  Since r2022.6, this option is supported in: \\   \\   \\
  
   - AP Mode   - AP Mode
Line 454: Line 449:
 (Default: On). \\ \\ (Default: On). \\ \\
  
-**Invert ports order:** displays port icons in the opposite order from where they are on the hardware.+**Invert ports order:**  changes whether Ethernet port numbers will match up physically/logically from left to right on your router.
  
-This is useful when the order of display icons doesn't match the physical locations on the router(Default: Off).+This does **not** actually change the ordering of any labels on the Ethernet Ports State graphic on the Overview menuThus, WAN0 will always display as the leftmost port on the page and LAN0, LAN1, LAN2, LAN3, etc will always show in that order.
  
 ===== Wireless Band Steering ===== ===== Wireless Band Steering =====
Line 530: Line 525:
 |  \\ Access Point*  | \\ The (default) setting, that allows clients to connect to FreshTomato WiFi networks. \\ \\ -  IPv4 & IPv6 communication work for both MIPS and ARM. \\ | |  \\ Access Point*  | \\ The (default) setting, that allows clients to connect to FreshTomato WiFi networks. \\ \\ -  IPv4 & IPv6 communication work for both MIPS and ARM. \\ |
 |  \\ Access Point WDS  | \\ Sets the router in "repeater mode". Clients can connect via WiFi while \\ the router also acts as a [[https://en.wikipedia.org/wiki/Wireless_Distribution_System|Wireless Distribution System]] base station. \\ \\ | |  \\ Access Point WDS  | \\ Sets the router in "repeater mode". Clients can connect via WiFi while \\ the router also acts as a [[https://en.wikipedia.org/wiki/Wireless_Distribution_System|Wireless Distribution System]] base station. \\ \\ |
-|  \\  \\  \\  \\  \\   \\ \\ \\ Wireless Client  | \\ The router connects to another router/AP as any other WiFi client would. \\ \\ -  Wireless Client mode works for:\\    -  MIPS devices (SDK5: RT and RT-N images)\\    -  ARM devices (SDK6 & SDK7 & SDK714) starting with r2021.5\\ -  This mode does not yet work on SDK6 MIPS RT-AC builds. \\     (The option was removed from the GUI starting with r2024.3) \\ \\ -  Only one WiFi radio can be used in this mode. \\    -  Other radio modules present can be used in AP mode. \\ \\ -  Disable band steering when in this mode, (at least for initial setup). \\    Advanced users may adjust NVRAM values for band steering. \\ \\ -  The recommended WiFi security for this mode is WPA2 Personal/AES. \\    -  If no connection is possible using the above, try those settings.\\    -  This is especially true for MIPS SDK5 (RT and RT-N) wireless client mode). \\ \\ |+|  \\  \\  \\  \\  \\   \\ \\ \\ Wireless Client  | \\ The router connects to another router/AP as any other WiFi client would. \\ \\ -  Wireless Client mode works for:\\    -  MIPS devices (SDK5: RT and RT-N images)\\    -  ARM devices (SDK6 & SDK7 & SDK714) starting with r2021.5\\ -  This mode does not yet work on SDK6 MIPS RT-AC builds. \\     (The option was removed from the GUI starting with r2024.3) \\ \\ -  Only one WiFi radio can be used in this mode. \\    -  Other radio modules present can be used in AP mode. \\ \\ -  Disable band steering when in this mode, (at least for initial setup). \\    Advanced users may adjust NVRAM values for band steering. \\ \\ -  The recommended WiFi security for this mode is WPA2 Personal/AES. \\    -  If no connection is possible using the above, try with WPA / WPA2 Personal/AES.\\    -  This is especially true for MIPS SDK5 (RT and RT-N) wireless client mode). \\ \\ |
 |  \\  \\  \\  \\  \\   \\  \\  \\ \\ Wireless Ethernet Bridge  | \\ Configures FreshTomato to connect to another router. \\ All clients connected to both routers remain in the same subnet. \\ \\ -  Since WEB v1.19, this mode must have security set to WPA2 to work. \\ \\ -  IPv4 communication works for MIPS and ARM builds. \\ -  IPv6 communication will be blocked. \\    -  A bug in the Linux wl driver may cause crashes. \\    -  For IPv6 support, use Media Bridge Mode. \\ \\ -  ARM SDK7 is not working/will never be possible. \\    - The option was removed from the GUI since r2024.3.\\ -  ARM SDK6 & SDK714 work correctly\\ -  MIPS SDK5: RT and RT-N work correctly\\ -  MIPS SDK6 RT-AC not working/will never be possible \\    -  (The option was removed from the GUI starting with r2024.3) \\ \\ -  Do not enable wireless band steering (BSD) when using this mode.\\ \\ -  Use this interface to connect only to your main AP (no virtual interfaces). \\    Other radio modules present can be used, for example, in A/P mode.\\ \\ | |  \\  \\  \\  \\  \\   \\  \\  \\ \\ Wireless Ethernet Bridge  | \\ Configures FreshTomato to connect to another router. \\ All clients connected to both routers remain in the same subnet. \\ \\ -  Since WEB v1.19, this mode must have security set to WPA2 to work. \\ \\ -  IPv4 communication works for MIPS and ARM builds. \\ -  IPv6 communication will be blocked. \\    -  A bug in the Linux wl driver may cause crashes. \\    -  For IPv6 support, use Media Bridge Mode. \\ \\ -  ARM SDK7 is not working/will never be possible. \\    - The option was removed from the GUI since r2024.3.\\ -  ARM SDK6 & SDK714 work correctly\\ -  MIPS SDK5: RT and RT-N work correctly\\ -  MIPS SDK6 RT-AC not working/will never be possible \\    -  (The option was removed from the GUI starting with r2024.3) \\ \\ -  Do not enable wireless band steering (BSD) when using this mode.\\ \\ -  Use this interface to connect only to your main AP (no virtual interfaces). \\    Other radio modules present can be used, for example, in A/P mode.\\ \\ |
 |  \\  \\  \\  \\  \\  \\  \\  \\ Media Bridge Mode  | \\ Configures FreshTomato to connect to another router/access point.\\ All clients connected to both routers remain in the same subnet.  \\ \\ -  Support for this mode started with r2021.6.\\ -  Similar to Wireless Ethernet Bridge mode for SDK6 and up \\ -  (only for MIPS RT-AC images + ARM images). \\ \\ -  Use Wireless Ethernet Bridge mode for MIPS RT / RT-N builds, \\    like the RT-N16, E4200v1.\\ -  This Mode isn't supported in SDK5 (RT / RT-N) builds.\\ -  ARM SDK6 & SDK7 & SDK714 work properly.\\ -  MIPS SDK6 RT-AC work properly. \\ \\ -  Both IPv4 and IPv6 function well. \\    You don't need to enable IPv6 via the GUI. IPv6 traffic just works. \\ \\ -  Don't enable wireless band steering (BSD) with this mode enabled.\\    Use this interface only to connect to your main A/P (not to virtual interfaces). \\    -  Other radio modules can be used, for example, in A/P mode.\\ \\ | |  \\  \\  \\  \\  \\  \\  \\  \\ Media Bridge Mode  | \\ Configures FreshTomato to connect to another router/access point.\\ All clients connected to both routers remain in the same subnet.  \\ \\ -  Support for this mode started with r2021.6.\\ -  Similar to Wireless Ethernet Bridge mode for SDK6 and up \\ -  (only for MIPS RT-AC images + ARM images). \\ \\ -  Use Wireless Ethernet Bridge mode for MIPS RT / RT-N builds, \\    like the RT-N16, E4200v1.\\ -  This Mode isn't supported in SDK5 (RT / RT-N) builds.\\ -  ARM SDK6 & SDK7 & SDK714 work properly.\\ -  MIPS SDK6 RT-AC work properly. \\ \\ -  Both IPv4 and IPv6 function well. \\    You don't need to enable IPv6 via the GUI. IPv6 traffic just works. \\ \\ -  Don't enable wireless band steering (BSD) with this mode enabled.\\    Use this interface only to connect to your main A/P (not to virtual interfaces). \\    -  Other radio modules can be used, for example, in A/P mode.\\ \\ |
Line 563: Line 558:
 **SSID:** the network name (Service Set IDentifier) for the 2.4 GHz WiFi interface. **SSID:** the network name (Service Set IDentifier) for the 2.4 GHz WiFi interface.
  
-For security, don't include personal identity/address/location/equipment type. Avoid using single dictionary words.+For security, don't include personal words/phrases indicating your: 
 + 
 + \\ 
 + 
 +  * Name 
 +  * Identity 
 +  * Address 
 +  * Location 
 +  * Equipment type. 
 + 
 + \\ 
 + 
 +Single dictionary words also make for very poor security.\\
  
 (Default: FreshTomatoXX, where “XX” is the band numbers.)  For example: “FreshTomato24”. \\ \\ (Default: FreshTomatoXX, where “XX” is the band numbers.)  For example: “FreshTomato24”. \\ \\
Line 683: Line 690:
  
   * r2023.4 and earlier (for all hardware): 60 - 7200 seconds.   * r2023.4 and earlier (for all hardware): 60 - 7200 seconds.
- 
  
 ===== Wireless (5 GHz / interface eth2) ===== ===== Wireless (5 GHz / interface eth2) =====
Line 714: Line 720:
 |  \\ Access Point  | \\ The default setting that allows clients to connect to FreshTomato wireless networks. \\ \\ -   IPv4 & IPv6 communication work for MIPS and ARM. \\ | |  \\ Access Point  | \\ The default setting that allows clients to connect to FreshTomato wireless networks. \\ \\ -   IPv4 & IPv6 communication work for MIPS and ARM. \\ |
 |  \\ Access Point WDS  | \\ Sets the router in "repeater mode", letting clients to connect via WiFi while acting as a \\ WDS [[https://en.wikipedia.org/wiki/Wireless_Distribution_System|Wireless Distribution System]] base station. \\ \\ | |  \\ Access Point WDS  | \\ Sets the router in "repeater mode", letting clients to connect via WiFi while acting as a \\ WDS [[https://en.wikipedia.org/wiki/Wireless_Distribution_System|Wireless Distribution System]] base station. \\ \\ |
-|  \\ \\  \\  \\ \\  \\ Wireless Client  | \\ The router connects to another router/AP like any other wireless client would. \\ \\ -  This mode works for: \\      MIPS devices (SDK5: RT and RT-N images) and\\      ARM devices (SDK6 & SDK7) starting with r2021.5 \\ -  This mode doesn't yet work on SDK6 MIPS RT-AC images. \\ \\ -  Only one WiFi radio can be used in this mode. \\    -  Other radio modules present can be used in AP mode. \\ \\ -  Disable Wireless Band Steering with mode during initial setup. \\ (Advanced users can adjust band steering NVRAM values). \\ \\ -  WPA2 Personal with AES is the recommended security setup for WiFi connections, \\ especially for MIPS SDK5 (RT + RT-N) \\    -  Try these settings if you cannot establish a connection.\\ \\ |+|  \\ \\  \\  \\ \\  \\ Wireless Client  | \\ The router connects to another router/AP like any other wireless client would. \\ \\ -  This mode works for: \\      MIPS devices (SDK5: RT and RT-N images) and\\      ARM devices (SDK6 & SDK7) starting with r2021.5 \\ -  This mode doesn't yet work on SDK6 MIPS RT-AC images. \\ \\ -  Only one WiFi radio can be used in this mode. \\    -  Other radio modules present can be used in AP mode. \\ \\ -  Disable Wireless Band Steering with mode during initial setup. \\ (Advanced users can adjust band steering NVRAM values). \\ \\ -  WPA2 Personal with AES is the recommended security setup for WiFi connections, \\ especially for MIPS SDK5 (RT + RT-N) \\    -  If you cannot establish a connection, try with WPA / WPA2 Personal with AES.\\ \\ |
 |  \\  \\ \\  \\ Wireless Ethernet Bridge  | \\ Configures FreshTomato to connect to another router. \\ Clients connected to both routers remain in the same subnet. \\ \\ -  As of version 1.19, this mode must have security set to WPA2 \\ to work properly.-  IPv4 communication works for MIPS + ARM builds. \\ -  IPv6 will only work for r2021.1 SDK6 ARM Dual-Core and later. \\ \\ -  SDK7 does not work/will not ever work in this mode. \\ \\ -  Do not enable wireless band steering (BSD) with this mode enabled. \\ \\ -  Use Wireless Ethernet Bridge to connect only to your main AP (no virtual interfaces). \\    -  Other radio modules can be used, for example, in AP mode. \\ \\ | |  \\  \\ \\  \\ Wireless Ethernet Bridge  | \\ Configures FreshTomato to connect to another router. \\ Clients connected to both routers remain in the same subnet. \\ \\ -  As of version 1.19, this mode must have security set to WPA2 \\ to work properly.-  IPv4 communication works for MIPS + ARM builds. \\ -  IPv6 will only work for r2021.1 SDK6 ARM Dual-Core and later. \\ \\ -  SDK7 does not work/will not ever work in this mode. \\ \\ -  Do not enable wireless band steering (BSD) with this mode enabled. \\ \\ -  Use Wireless Ethernet Bridge to connect only to your main AP (no virtual interfaces). \\    -  Other radio modules can be used, for example, in AP mode. \\ \\ |
 |  \\  \\  \\  \\  \\  \\ Media Bridge Mode  | \\ Configures FreshTomato to connect to another router/AP. \\ All clients connected to both routers remain in the same subnet. \\ \\ -  This is similar to Wireless Ethernet Bridge mode for SDK6 \\ and up (for MIPS RT-AC and all ARM images).\\ -  Using Wireless Ethernet Bridge mode is recommended for \\ MIPS RT and RT-N images (like the RT-N16, E4200v1).\\ -  This Mode is not supported with SDK5 (RT / RT-N) builds \\ \\ -  Both IPv4 and IPv6 function properly. IPv6 traffic works without \\ needing to enable IPv6 in the web interface. \\  \\ -  Support for this mode started with r2021.6. \\ \\ -  Do not enable wireless band steering with this mode enabled.\\ -  Use Media Bridge interface to connect only to your main AP (no virtual interfaces). \\      -  Other radio modules can be used, for example, in AP mode. \\ \\ | |  \\  \\  \\  \\  \\  \\ Media Bridge Mode  | \\ Configures FreshTomato to connect to another router/AP. \\ All clients connected to both routers remain in the same subnet. \\ \\ -  This is similar to Wireless Ethernet Bridge mode for SDK6 \\ and up (for MIPS RT-AC and all ARM images).\\ -  Using Wireless Ethernet Bridge mode is recommended for \\ MIPS RT and RT-N images (like the RT-N16, E4200v1).\\ -  This Mode is not supported with SDK5 (RT / RT-N) builds \\ \\ -  Both IPv4 and IPv6 function properly. IPv6 traffic works without \\ needing to enable IPv6 in the web interface. \\  \\ -  Support for this mode started with r2021.6. \\ \\ -  Do not enable wireless band steering with this mode enabled.\\ -  Use Media Bridge interface to connect only to your main AP (no virtual interfaces). \\      -  Other radio modules can be used, for example, in AP mode. \\ \\ |
Line 738: Line 744:
 **SSID:**  the network name of the 5 GHz WiFi. **SSID:**  the network name of the 5 GHz WiFi.
  
-For security, don't include personal words/phrases indicating your name, identity, address, location, or equipment type. Single dictionary words also make for very poor security.\\ \\ (Default: FreshTomatoXX, where “XX” is the digits in the band.) On a 5 GHz network, the default SSID is “FreshTomato50”. \\ \\+For security, don't include personal words/phrases indicating your
 + 
 + \\ 
 + 
 +  * Name 
 +  * Identity 
 +  * Address 
 +  * Location 
 +  * Equipment type. 
 + 
 + \\ 
 + 
 +Single dictionary words also make for very poor security.\\ \\ (Default: FreshTomatoXX, where “XX” is the digits in the band.) On a 5 GHz network, the default SSID is “FreshTomato50”. \\ \\
  
 **Broadcast: **enables SSID broadcasting. **Broadcast: **enables SSID broadcasting.
Line 843: Line 861:
  
 (Default: 3600 seconds). (Default: 3600 seconds).
- 
  
 ===== Network Notes and Troubleshooting ===== ===== Network Notes and Troubleshooting =====
basic-network.1760634689.txt.gz · Last modified: by hogwild