User Tools
basic-network
Differences
This shows you the differences between two versions of the page.
| Both sides previous revisionPrevious revisionNext revision | Previous revision | ||
| basic-network [2024/02/19 09:58] – [WAN(x) Settings] rs232 | basic-network [2025/05/10 23:21] (current) – [Wireless (2.4 GHz / interface eth1)] -Formatting hogwild | ||
|---|---|---|---|
| Line 1: | Line 1: | ||
| ====== Network ====== | ====== Network ====== | ||
| - | The Network | + | This page includes most basic settings needed to configure the network. It' |
| ===== MultiWAN ===== | ===== MultiWAN ===== | ||
| - | {{: | + | {{: |
| \\ | \\ | ||
| - | **Number of WAN ports**: | + | **Number of WAN ports**: lets you select the number of WAN ports to be used on the device. |
| - | On routers | + | On models |
| \\ | \\ | ||
| - | **Tune route cache**: | + | **Tune route cache**: is used for MultiWAN configurations with load balancing. |
| - | This setting is advised | + | Recommended |
| - | **Check Connections Every: **This is an easy way for FreshTomato to automatically test WAN connection reliability. (Default: Disabled). Choosing any setting but [Disabled] will execute the Watchdog script. This sets how often the router pings to check it is still connected to the Internet. | + | For details, see the [[basic-network# |
| - | The Watchdog script uses ping or traceroute to test WAN connection status. | + | **Check Connections Every: **makes FreshTomato automatically |
| - | Choosing a setting other than Disabled | + | It sets how often the router tests its Internet connection. Any option but Disabled |
| - | | + | Watchdog uses ping/ |
| - | * Target 2 - Here, enter the address of the second host to ping regularly | + | |
| + | Any option but Disabled makes " | ||
| + | |||
| + | \\ | ||
| + | |||
| + | | ||
| + | * Target 2 - the address of the second host to ping \\ (Default: Microsoft.com)\\ | ||
| ==== WAN(x) Settings ==== | ==== WAN(x) Settings ==== | ||
| - | Settings | + | Settings |
| - | Depending on the type selected, other settings | + | Depending on the selected |
| - | **Type: **This sets the connection mode the WAN interface will use to connect to your ISP. (Default: DHCP). | + | \\ |
| - | | + | **Type: |
| - | * DHCP does not use authentication. \\ \\ | + | |
| - | | + | \\ |
| - | * This is most often used for DSL networks. | + | |
| - | * This stores in FreshTomato the PPPoE username | + | |
| - | * If authentication succeeds, the PPPoE server allows logon to the ISP network, and a DHCP server assigns you a WAN IP lease. | + | |
| + | |||
| + | | ||
| + | * Usually | ||
| + | * FreshTomato | ||
| + | * If authentication succeeds, the PPPoE server allows logon to the ISP network, | ||
| * Leave the //Service Name// field blank. | * Leave the //Service Name// field blank. | ||
| - | * Starting with release 2021.3, support for Baby Jumbo Frames (RFC 4638) was added in the [[advanced-misc|Miscellaneous]] menu. | + | * Starting with release 2021.3, support for Baby Jumbo Frames (RFC 4638) \\ was added to the [[advanced-misc|Miscellaneous]] menu. |
| - | * When using Baby Jumbo Frames, set MTU to 1500, consistent with the Baby Jumbo Frames change. (See [[https:// | + | * When using Baby Jumbo Frames, set MTU to 1500, to be consistent with the \\ Baby Jumbo Frames change. (See [[basic-network# |
| - | * **Static | + | * **Static **- will configure your WAN port with a static IP. |
| - | * You must manually enter the following | + | * You must manually enter these settings in FreshTomato, |
| * Static IP address | * Static IP address | ||
| * Subnet mask | * Subnet mask | ||
| * Gateway address | * Gateway address | ||
| * DNS server addresses | * DNS server addresses | ||
| - | * This mode is commonly | + | * This mode is usually |
| - | * **PPTP | + | * **PPTP **- configures the WAN port to use Microsoft' |
| - | * This section | + | * This section |
| * a username | * a username | ||
| * password | * password | ||
| * gateway server settings (given by your ISP). \\ \\ | * gateway server settings (given by your ISP). \\ \\ | ||
| - | * **L2TP | + | * **L2TP **- configures the WAN port to connect using Layer Two Tunneling |
| - | * FreshTomato | + | * FreshTomato |
| * L2TP username | * L2TP username | ||
| * Password | * Password | ||
| Line 70: | Line 80: | ||
| * Gateway setting \\ \\ | * Gateway setting \\ \\ | ||
| - | * **3G modem - **This setting will enable | + | * **3G modem - **enables |
| - | * Ensure | + | * To detect modems, enable |
| - | * **4G/LTE - **This enables support for fourth | + | * **4G/LTE - **enables support for 4th generation cellular/ |
| - | * When choosing | + | * When using 4G, PIN code and APN fields appear. |
| - | * Check USB and 3G/4G/5G modem support | + | * To detect modems, enable |
| - | * **Disabled - **This disables the physical WAN port on your router. | + | * **Disabled - **disables the physical WAN port on the router. |
| - | * This effectively | + | * This makes your device function only as a switch (if it has that function) and/or; |
| - | * It may effectively make your device function as a WiFi access point (if it has that function). \\ \\ | + | * It may effectively make your device function as a WiFi A/P (if capable). \\ \\ |
| - | **Wireless Client Mode: **This enables FreshTomato' | + | |
| - | This mode lets the router act as a client to connect to another router/AP, similar to how a WiFi adapter would. \\ (For details, see Wireless Mode tables below). | + | This lets the router act as a client |
| - | * Disabled - Wireless Client mode will be disabled. | + | \\ |
| - | * 2.4 GHz - Wireless Client mode will be enabled on the 2.4 GHz interface. | + | |
| - | * 5 GHz - Wireless Client mode will enabled on the 5 GHz interface. | + | |
| - | \\ {{::basic-network-wan_settings-2023.2.jpg?805}} | + | * Disabled |
| + | * 2.4 GHz - wireless Client mode will be enabled on the 2.4 GHz band. | ||
| + | * 5 GHz - wireless Client mode will enabled on the 5 GHz band. | ||
| \\ | \\ | ||
| - | **Load Balance Weight: | + | {{:: |
| + | |||
| + | | ||
| + | |||
| + | **Load Balance Weight: | ||
| + | |||
| + | {{: | ||
| + | |||
| + | In a MultiWAN configuration, | ||
| - | A very important concept to digest when setting up your device in MultiWAN is the fact that this is a load-sharing of links. A load share is intentionally performed on a session basis this is to prevent issues with interactive traffic like real-time voice/ | ||
| - | \\ | ||
| - | Load Balance Weight: 0\\ | ||
| - | Does not actively route traffic but will be " | ||
| - | \\ | ||
| - | Load Balance Weight: 1\\ | ||
| - | Any value higher than 0 makes the interface actively route packed. a weight of 1 doesn' | ||
| - | \\ | ||
| - | Load Balance Weight: 5\\ | ||
| - | An interface set with e.g. weight 5 would essentially handle 5 new sessions before any other interface is to be used.\\ | ||
| - | \\ | ||
| - | In a practical example let's say we have 3WANs:\\ | ||
| - | '' | ||
| - | WAN1 = 1 | ||
| - | WAN2 = 5 | ||
| - | '' | ||
| - | In this scenario WAN0 is to be used only if both WAN1 and WAN2 are both in failed state (can't route packets). WAN1 will handle the very 1st LAN client new session going through the router, where WAN2 is to handle the 2nd, | ||
| \\ | \\ | ||
| - | **Modem device: **Here, you specify the 3G modem' | + | - Real-time voice |
| + | - Video | ||
| + | - RDP. | ||
| - | | + | \\ |
| - | * To ensure your modem is detected, | + | |
| - | * When 3G modem or 4G/ | + | Per-packet loadsharing isn't recommended in cases where link speeds vary. It would generate out-of-order packets, and in doing so, could make interactive traffic unusable. |
| + | |||
| + | \\ \\ //**Example: Load Balance Weight: 0 (Failover)**// | ||
| + | |||
| + | \\ \\ If " | ||
| + | |||
| + | \\ | ||
| + | |||
| + | For example, let's say: | ||
| + | |||
| + | \\ | ||
| + | |||
| + | * There are 2 WANs | ||
| + | * WAN0=" | ||
| + | * WAN1=" | ||
| + | |||
| + | \\ | ||
| + | |||
| + | In this example, routing would proceed as follows: | ||
| + | |||
| + | \\ | ||
| + | |||
| + | - When the failure of WAN1 is detected, WAN0 will activate \\ (assigned with weight: " | ||
| + | - Later, WAN1 recovers its connectivity. As soon as FreshTomato \\ notices, (seconds/ | ||
| + | |||
| + | \\ | ||
| + | |||
| + | Recovery back to the originally-active interface is called // | ||
| + | |||
| + | \\ Any value > " | ||
| + | |||
| + | A weight of " | ||
| + | |||
| + | A good way to understand this is: | ||
| + | |||
| + | \\ | ||
| + | |||
| + | * " | ||
| + | * " | ||
| + | * Thus, if WAN0=“weight 0” and WAN1=“weight 1”, WAN1 would handle 100% of the traffic. | ||
| + | |||
| + | \\ \\ // | ||
| + | |||
| + | \\ \\ Basically, an interface set to weight: " | ||
| + | |||
| + | * WAN0 = weight 0 | ||
| + | * WAN1 = weight 1 | ||
| + | * WAN2 = weight 5 | ||
| + | |||
| + | \\ \\ In this example, routing would proceed as follows: | ||
| + | |||
| + | \\ | ||
| + | |||
| + | - WAN0 would be used only if WAN1 and WAN2 are failing/ | ||
| + | - WAN1 would handle the first new LAN client session through the router. | ||
| + | - WAN2 is set to handle the second, third, fourth, fifth and sixth sessions. | ||
| + | - The seventh new session would be treated as another, first new LAN client, \\ so would start again from WAN1. | ||
| + | - WAN2 would then handle the next five new sessions, (eighth through twelfth).\\ | ||
| + | |||
| + | \\ **These settings affect only outbound traffic.** Return traffic tries to return via the WAN interface it came from. | ||
| + | |||
| + | Allocation of a new session to a WAN is dynamic. You can set which traffic gets allocated to which Interface (" | ||
| + | |||
| + | \\ | ||
| + | |||
| + | **Modem device: **here, specify the 3G/4G/5G modem' | ||
| + | |||
| + | \\ | ||
| + | |||
| + | * If unsure, check the modem is listed in [[dongle_compatibility|3G/ | ||
| + | * If it isn' | ||
| + | * If WAN type is 3G or 4G/LTE, fields appear | ||
| * The Default device filename is the first serial device on the first USB port: (/ | * The Default device filename is the first serial device on the first USB port: (/ | ||
| - | | + | |
| - | * The “USB0” | + | * “USB0” |
| - | * Devices listed as "/ | + | * Devices listed as "/ |
| - | * This device type uses Linux' | + | * “ACM” |
| - | * If the interface lists: “/ | + | |
| - | * ACM modems let the modem hardware perform analog functions. | + | \\ |
| - | To get device | + | To get modem details, log on to FreshTomato via Telnet/SSH and use the "lsusb" |
| \\ | \\ | ||
| - | **PIN Code: **This is the 3-digit PIN code for the SIM card associated with your cell account. | + | **PIN Code: **the 3-digit PIN code for the SIM card associated with your cell account. |
| * Leave this blank if your SIM card code was deactivated. \\ \\ | * Leave this blank if your SIM card code was deactivated. \\ \\ | ||
| - | **Modem init string: **Here, enter the modem' | + | **Modem init string: **enter the modem' |
| - | * This will come from your cell provider, or the modem manufacturer. (Default: *99#). \\ \\ | + | * Your cellular |
| - | **APN: **The access point name (provided by your cell carrier). | + | **APN: **the access point name (provided by your cell carrier). |
| - | * This specifies | + | * Sets a gateway to route data between |
| - | **Username: **Here, enter the (carrier-provided) username to access your cell carrier' | + | **Username: **the (carrier-provided) username to access your cell carrier' |
| - | * Some carriers don't require this info. \\ \\ | + | * Some carriers don't require this. \\ \\ |
| - | **Password: **Here, enter the (carrier-provided) password to authenticate to your cell carrier' | + | **Password: **the (carrier-provided) password to authenticate to your cell carrier' |
| - | * Some carriers do not require this info. \\ \\ | + | * Some carriers do not require this. \\ \\ |
| - | **Network Type: **This menu appears when WAN type is set to 4G/LTE. (Default | + | **Network Type: **appears when WAN type is set to 4G/LTE. (Default: 4G/3G/2G). |
| - | * The default | + | * The default |
| - | **DNS Server: ** | + | **DNS Server:** |
| - | * AUTO - FreshTomato uses DNS server addresses included in your Internet Provider' | + | \\ |
| - | * Manual - Enables the DNS server function (dnsmasq). This makes "DNS 1" and "DNS 2" fields appear. | + | |
| - | * DNS 1 - Enter the first DNS server address here (if DNS Server is set to Manual). | + | |
| - | * DNS 2 - Enter the second DNS server address here (if DNS Server is set to Manual). | + | |
| - | \\ Manually-set DNS servers are useful if your ISP' | + | * AUTO - FreshTomato uses DNS server addresses in your ISP' |
| + | * Manual - enables DNS server functions in dnsmasq. "DNS 1" | ||
| + | * DNS 1 - enter DNS server 1 address here. | ||
| + | * DNS 2 - enter DNS server 2 address here. | ||
| - | **MTU: | + | \\ Manually-set DNS servers can be helpful if your ISP's DNS servers are slow/ |
| - | This is only for the WAN interface. It won't affect | + | **MTU: |
| - | * (Default: 1500) - This is typical | + | This is for the WAN interface only and won't affect LAN traffic. |
| - | * Manual - Choosing this lets you to enter a custom number in the field beside it. Jumbo Frame sizes start at 2000 bytes. \\ \\ | + | |
| - | **Use DHCP:** This function is rarely used, and you are advised to leave it disabled. | + | |
| + | | ||
| - | * On a few Internet providers, addressing is separated from PPPoE functionality. \\ \\ | + | \\ |
| - | **Single Line MLPPP**: This is outdated, and rarely used nowadays. | + | Different MTU sizes across devices may cause issues.\\ |
| - | Multilink PPP is a version of the PPP protocol that lets you bond two or more physical connections to increase apparent bandwidth. \\ Single Line MLPPP is similar, but lets you use one modem to bond the bandwidth of multiple PPPoE sessions. \\ A side effect of using this is that it bypassed some Internet Providers' | + | \\ |
| - | **Route Modem IP: **This function lets you access a modem " | + | **Use DHCP:** is rarely used. Usually, |
| - | * When using a separate | + | * A few Internet providers |
| - | * That means you can't easily access the modem' | + | |
| - | * The router' | + | |
| - | * Private addresses aren't routable, so by default, FreshTomato blocks LAN > WAN > MODEM PRIVATE IP traffic. | + | |
| - | * Route Modem IP adds a simple static route to the routing table, giving the modem a private IP on a /32 subnet. | + | |
| - | * This makes the private address reachable via the WAN interface. | + | |
| - | * The mask allows only one host, so only the modem is reachable on that subnet.\\ \\ | + | |
| - | **Query Hilink Modem IP:** This function | + | **Single Line MLPPP:** is outdated, and rarely used now. |
| - | Some Huawei modems have a " | + | This Multilink PPP version lets a modem bond the bandwidth of multiple PPPoE sessions. |
| + | |||
| + | A side effect of it was that it bypassed some ISPs' bandwidth throttling.\\ \\ \\ | ||
| + | |||
| + | **Route Modem IP: **lets you access | ||
| \\ | \\ | ||
| + | |||
| + | * When using separate modem and router, usually the modem is in bridge mode or \\ PPPoE passthrough mode. This makes it hard to access the modem' | ||
| + | * The router' | ||
| + | * Private addresses aren't routable, so by default, FreshTomato blocks any traffic\\ on a path of: LAN ---> WAN ---> (MODEM with PRIVATE IP). | ||
| + | * Route Modem IP adds a static route to the routing table, giving the modem a\\ private address on a /32 subnet. This makes the private address reachable via \\ the WAN interface, and thus via the LAN. | ||
| + | * The mask allows only one host, so only the modem is reachable on that subnet. | ||
| + | |||
| + | \\ . | ||
| + | |||
| + | (Default: Off)\\ | ||
| + | |||
| + | **Query Hilink Modem IP:** is for Huawei USB modems with Hilink mode. | ||
| + | |||
| + | It lets you communicate with a modem in Hilink mode connected to a LAN device other than the router. | ||
| + | |||
| + | It can be used to monitor modem statistics/ | ||
| **Call Custom Status Script: ** TBD. | **Call Custom Status Script: ** TBD. | ||
| Line 199: | Line 287: | ||
| \\ | \\ | ||
| - | **Connect Mode: **This chooses the method | + | **Connect Mode: **chooses the method to keep the router connected to the Internet provider. |
| - | | + | \\ |
| + | |||
| + | | ||
| * Some ISPs drop a connection if their router detects no Internet activity. | * Some ISPs drop a connection if their router detects no Internet activity. | ||
| - | * Keepalive - Selecting this makes FreshTomato send small [[https:// | + | * Keepalive |
| - | * Redial Interval - Here, enter how often the router | + | * Redial Interval - how often the router |
| \\ | \\ | ||
| - | **Redial Interval: ** When PPPoE dialling fails, the Redial Interval is used to delay attempts for the defined number of seconds. \\ This allows more time for the PPPoE server or network gear to restart proper functioning before trying a PPPoE connection again. \\ (Default: | + | (Default: |
| - | **LCP Echo Interval: **The Link Control Protocol | + | \\ |
| + | |||
| + | **Redial Interval: **if PPPoE dialing fails, this delays attempts for a defined number of seconds. | ||
| + | |||
| + | This allows more time for the PPPoE server/ | ||
| + | |||
| + | **LCP Echo Interval: **Link Control Protocol | ||
| - | * LCP Echo Interval is the period | + | * LCP Echo Interval is the time between these signals. |
| + | * Usually used to check a DSL modem' | ||
| * (Default: 10 seconds). | * (Default: 10 seconds). | ||
| \\ | \\ | ||
| - | **LCP Echo Link fail limit: **This is the number of times LCP echo requests | + | **LCP Echo Link fail limit: **how many failed |
| - | | + | \\ |
| + | |||
| + | | ||
| + | * LCP will then try to renegotiate a new PPPoE session. | ||
| \\ | \\ | ||
| - | **Disable Watchdog: | + | **Disable Watchdog: **disables the Watchdog function, |
| \\ | \\ | ||
| - | **Watchdog Mode: **This regularly checks | + | **Watchdog Mode: **regularly checks a given WAN connection is up. |
| + | |||
| + | This chooses the method used to test the connection. | ||
| + | |||
| + | \\ | ||
| * Traceroute * | * Traceroute * | ||
| * Ping | * Ping | ||
| + | |||
| + | \\ | ||
| + | |||
| + | The Watchdog function supports connection types: | ||
| + | |||
| + | \\ | ||
| + | |||
| + | - DHCP | ||
| + | - PPPoE | ||
| + | - PPTP | ||
| + | - L2TP | ||
| + | - 3G/4G/5G LTE | ||
| + | |||
| + | \\ | ||
| ===== LAN ===== | ===== LAN ===== | ||
| + | The LAN section includes information and settings to configure FreshTomato' | ||
| + | | ||
| + | {{:: | ||
| - | The LAN section includes information and settings to configure FreshTomato' | + | \\ |
| - | This includes | + | This includes: |
| - | | + | |
| - | | + | |
| - | | + | |
| - | | + | |
| - | \\ {{: | + | \\ |
| - | **Bridge: | + | **Bridge:** lets you selects |
| - | **STP**: | + | **STP**: |
| - | **IP Address: | + | The default |
| - | **Netmask**: The subnet mask associated with FreshTomato' | + | **IP Address:** the IP Address to assign to the specified |
| - | **DHCP**: | + | FreshTomato supports Class A/B/C networks. (Default: |
| - | **IP Range // | + | **Netmask**: the subnet |
| - | **Lease Time (// | + | (Default: 255.255.255.0 - class " |
| - | **Automatic IP**: | + | **DHCP**: |
| - | After saving settings, | + | **IP Range // |
| - | \\ | + | In the top field, enter the first valid address in the subnet. Enter the the last address in the bottom field. \\ \\ |
| - | {{:pasted:20220907-091646.png}} | + | **Lease Time (// |
| - | \\ | + | **Automatic IP**: lets FreshTomato obtain a LAN IP via DHCP. |
| + | |||
| + | Since release 2022.6, this option is supported in: \\ | ||
| + | \\ | ||
| + | - AP Mode | ||
| + | - Wireless Ethernet Bridge (WEB) Mode | ||
| + | - Media Bridge Mode.\\ \\ | ||
| + | |||
| + | After saving settings, the router' | ||
| ===== Ethernet Ports State - Configuration ===== | ===== Ethernet Ports State - Configuration ===== | ||
| - | [[https:// | + | Settings here are for the Ethernet Ports State graphic in the [[status-overview|Overview]] menu. Link status, Link speed and Diagnostic information are shown for each port, . |
| - | | + | \\ |
| - | **Enable Ports State: | + | {{basic-network-ethernet_ports_state_configuration-2024.1.png?291}} |
| - | **Show Speed Info: | + | \\ |
| + | |||
| + | **Enable Ports State:** enables the Ethernet Ports State graphic. (Default: On). \\ \\ | ||
| + | |||
| + | **Show Speed Info: | ||
| + | |||
| + | (Default: On). \\ \\ | ||
| + | |||
| + | **Invert ports order:** displays port icons in the opposite order from where they are on the hardware. | ||
| - | **Invert ports order: | + | This is useful when the order of display icons doesn' |
| ===== Wireless Band Steering ===== | ===== Wireless Band Steering ===== | ||
| - | [[https:// | + | This feature makes FreshTomato assess on which band a client device should connect, and then " |
| - | With Wireless Band Steering enabled, FreshTomato can assess on which band the client device should try to connect. It then " | + | \\ |
| - | * Disable * | + | {{:: |
| - | * Enable | + | |
| - | To achieve this, for all WiFi interfaces, enter the same: | + | \\ |
| - | * SSID name | + | When enabled, these settings |
| - | * Security | + | |
| - | * Password | + | |
| - | * Other settings (see picture below) | + | |
| - | Remember that client devices can also try to switch bands on their own, without the influence of Wireless Band Steering. | + | \\ |
| - | Wireless Band Steering is available starting with release 2020.8 (and only for ARM hardware). See the Notes section below for more details on how it works. | + | - SSID |
| + | - Broadcast | ||
| + | - KEY1-4 | ||
| + | - Shared Key | ||
| + | - Encryption | ||
| + | - Radius Key | ||
| + | - Radius Port | ||
| + | - Radius IP | ||
| \\ | \\ | ||
| + | (Visibility depends on the wireless security selected) | ||
| - | ==== Wireless (2.4 GHz / interface eth1) ==== | + | Among the wireless settings that will NOT be replicated are: |
| - | The Wireless (2.4 GHz) section displays information and settings for the 2.4 GHz wireless network interface. | + | \\ |
| - | Your device may show a different device name than eth1. FreshTomato hardware device numbers begin at " | + | * Channel |
| + | * Channel Width | ||
| + | * Wireless Network Mode | ||
| + | * Band (2.4 / 5 GHz) | ||
| + | * Country Code/Rev | ||
| + | * Beamforming | ||
| - | **Enable Wireless:** When checked, this turns on the 2.4 GHz WiFi interface. When unchecked, the 2.4 GHz WiFi interface is off. \\ \\ | + | \\ |
| - | **MAC Address:** This displays | + | Client devices also may try to switch bands on their own, without |
| - | **Wireless | + | This feature is available since release 2020.8 (for ARM hardware only). See the [[https:// |
| + | |||
| + | \\ | ||
| + | |||
| + | |||
| + | ===== Wireless (2.4 GHz / interface eth1) ===== | ||
| + | |||
| + | The Wireless (2.4 GHz) section displays information and settings for the 2.4 GHz wireless interface. | ||
| + | |||
| + | Your device may show a different device name than eth1. Hardware device numbers begin at " | ||
| + | |||
| + | The first Ethernet device might be called " | ||
| + | |||
| + | \\ | ||
| + | |||
| + | **Enable | ||
| + | |||
| + | **MAC Address:** displays the MAC address of the 2.4 GHz WiFi interface. | ||
| + | |||
| + | Clicking this takes you to the [[: | ||
| + | |||
| + | **Wireless Mode:** here, choose | ||
| \\ | \\ | ||
| Line 323: | Line 490: | ||
| ^ | ^ | ||
| | **Wireless Mode** | | **Wireless Mode** | ||
| - | | \\ Access Point | \\ The (default) setting, | + | | \\ Access Point | \\ The (default) setting, |
| - | | \\ Access Point WDS | \\ Sets the router in " | + | | \\ Access Point WDS | \\ Sets the router in " |
| - | | \\ Wireless Client | + | | \\ Wireless Client |
| - | | \\ Wireless Ethernet Bridge | + | | \\ Wireless Ethernet Bridge |
| - | | \\ Media Bridge Mode | \\ Configures FreshTomato to connect to another router/ | + | | \\ Media Bridge Mode | \\ Configures FreshTomato to connect to another router/ |
| | \\ WDS | \\ Serve as a [[https:// | | \\ WDS | \\ Serve as a [[https:// | ||
| | //Table derived from (Creative Commons) Wikibooks - “Tomato Firmware/ | | //Table derived from (Creative Commons) Wikibooks - “Tomato Firmware/ | ||
| - | \\ **Wireless Network Mode: **This lets you choose which 802.11 WiFi protocol(s) to make available to clients. | + | \\ \\ |
| - | The network modes available | + | **Wireless Network Mode: **selects which 802.11 WiFi protocols to make available |
| - | * Auto: * FreshTomato and WiFi client devices negotiate the best protocol automatically. | + | The network modes available here will depend on your hardware. |
| - | * Auto is recommended, | + | |
| - | * Compatibility issues can create many problems. | + | |
| - | * B Only: This allows WiFi clients to connect using only the 802.11b protocol. | + | |
| - | * G Only: This allows WiFi clients to connect using only the 802.11n protocol. | + | |
| - | * B/G Mixed: | + | |
| - | * N only: This allows clients to connect using only the 802.11n protocol. | + | |
| - | These apply only to the 2.4 GHz band interface. There are separate Wireless Network Mode settings for any 5 GHz interface. | + | \\ |
| - | \\ | + | * Auto: * - router/WiFi clients automatically negotiate the best protocol. |
| + | * Recommended, | ||
| + | * Incompatibilities may exist. | ||
| + | * The best settings may not be obvious. | ||
| + | * B Only - allows WiFi clients to connect using only 802.11b. | ||
| + | * G Only - allows WiFi clients to connect using only 802.11n. | ||
| + | * B/G Mixed - allows clients to connect using 802.11b/ | ||
| + | * N only - allows clients to connect using only the 802.11n. | ||
| - | **SSID: | + | \\ |
| - | **Broadcast: | + | These apply only to the 2.4 GHz interface. Any 5 GHz interface will have separate Mode settings. |
| - | **Channel: **Selects the channel on which the 2.4 GHz radio interface will operate. Generally, it's best to choose a different channel than your neighbours are using. (Default: Auto). | + | \\ |
| - | | + | **SSID:** the network name (Service Set IDentifier) for the 2.4 GHz WiFi interface. |
| - | * Channel: This menu lets you manually choose available channels on the band. Unavailable channels won't appear here. \\ \\ | + | |
| - | **Channel | + | For security, don't include personal identity/ |
| + | |||
| + | (Default: FreshTomatoXX, | ||
| + | |||
| + | **Broadcast: | ||
| + | |||
| + | This “announces” the SSID, so it's easy to find and connect to. | ||
| + | |||
| + | Common software can easily sniff SSIDs. Contrary to claims, disabling Broadcast provides little security increase.\\ \\ | ||
| + | |||
| + | **Channel: **the channel on which the 2.4 GHz interface operates. | ||
| + | |||
| + | Generally, choose a different channel than your neighbours' | ||
| + | |||
| + | \\ | ||
| + | |||
| + | * Auto* - this default is generally safe unless there' | ||
| + | * Channel - lets you manually | ||
| + | |||
| + | **Channel Width:** lets you choose | ||
| + | |||
| + | \\ | ||
| * 20 MHz | * 20 MHz | ||
| * 40 MHz | * 40 MHz | ||
| - | 802.11n can use 40 MHz channel width, but to maintain compatibility with legacy systems, it uses one main 20 MHz channel plus a free adjacent channel 20 MHz above or below the main channel. \\ \\ | + | \\ |
| - | **Control Sideband: | + | 802.11n can use 40 MHz channel |
| - | | + | **Control Sideband:** lets you choose whether the sideband channel used is above (Upper) or below (Lower) the main channel. |
| - | | + | |
| - | **Security**: This menu lets you select the security protocol that will be used on the 2.4 GHz WiFi interface. | + | (Default: Upper). This is only available If 20 or 40 Channel Width is selected. |
| - | * Disabled: | + | * Upper * |
| - | * This is a basically an unlimited security risk. | + | * Lower\\ \\ |
| - | | + | **Security**: here, choose the security |
| - | * WPA Personal: This enables WiFi Protected Access Protocol 1.x. WPA uses the RC4-based TKIP protocol. | + | \\ |
| - | * This lets hosts exchange pre-shared keys, for more security. | + | |
| - | * While more secure than WEP, WPA still has weaknesses, like lower encryption standards. | + | |
| - | * WPA2 is strongly encouraged instead of WPA. | + | |
| - | * WPA Enterprise: | + | |
| + | |||
| + | * WEP - enables Wired Equivalent Privacy protocol. Avoid this. It's obsolete \\ due to serious vulnerabilities, | ||
| + | |||
| + | * WPA Personal - enables WiFi Protected Access Protocol 1.x. | ||
| + | * Uses the RC4-based TKIP protocol. | ||
| + | * Lets hosts exchange pre-shared keys, for more security. | ||
| + | * More secure than WEP, but has weaknesses like lower encryption standards. | ||
| + | * WPA2 is strongly encouraged instead. | ||
| + | |||
| + | | ||
| * No common pre-shared key is used. | * No common pre-shared key is used. | ||
| - | * WPA Enterprise doesn't require a RADIUS server. Often, one is used anyway for compatibility/ | + | * Doesn't require a RADIUS server. |
| - | * WPA Enterprise is more secure against dictionary attacks on short passwords. | + | * Is more secure against dictionary attacks on short passwords. |
| - | * This is suitable for larger, more formal networks. | + | * Is suitable for larger, more formal networks. |
| - | * WPA2 Personal: WiFi Protected Access version 2 uses elements | + | * WPA2 Personal |
| - | * This supports | + | * Supports |
| - | * WPA2 Personal is recommended | + | * Recommended |
| - | * WPA2 Enterprise: This enables the Enterprise version of WPA2. | + | * WPA2 Enterprise |
| - | * This uses WPA2, but each user has their own WiFi username/ | + | * Uses WPA2, but each user has their own WiFi username/ |
| - | * WPA2 Enterprise is based on parts of 802.11i. | + | * Is based on parts of 802.11i. |
| - | * This does NOT require a RADIUS server, but one is often used for legacy purposes for compatibility/ | + | * Doesn' |
| - | * This is appropriate | + | * Appropriate |
| - | * WPA / WPA2 Personal: | + | * WPA / WPA2 Personal |
| - | * WPA / WPA2 Enterprise: | + | * WPA / WPA2 Enterprise |
| - | * RADIUS: Enables | + | * RADIUS |
| - | * This is designed | + | * Designed |
| - | * This uses a separate server to authenticate, permit | + | * Uses a separate server to authenticate/permit/track users. |
| - | * This supports | + | * Supports |
| - | * This is usually only for advanced users. \\ \\ | + | * Is usually only for advanced users. \\ \\ |
| - | **Shared Key: | + | **Shared Key: |
| - | **Group Key Renewal: | + | **Group Key Renewal: |
| - | Starting with release 2023.5 and newer the user can adjust rotation interval within the following limits: | + | \\ |
| - | 1 sec up to 2592000 sec [for mips RT-N / mips-RT-AC and all ARM routers] \\ | + | |
| - | 0 => disabled (not recommended) | + | |
| - | Releases up to 2023.4 can adjust this value within the following limits: | + | The following limits |
| - | 60 sec up to 7200 sec [all routers] | + | |
| + | \\ | ||
| + | |||
| + | * Release 2023.5 and later: From 1 second to 2592000 seconds \\ [for ARM-based and MIPS RT-N / MIPS-RT-AC hardware] \\ Where: 0 = disabled | ||
| + | |||
| + | * Releases 2023.4 and earlier (for all hardware): 60 - 7200 seconds. | ||
| ===== Wireless (5 GHz / interface eth2) ===== | ===== Wireless (5 GHz / interface eth2) ===== | ||
| - | The Wireless (5 GHz) section displays information | + | The Wireless (5 GHz) section displays |
| - | Your device may show a different device name than eth1. Note: FreshTomato hardware device numbers begin at 0. \\ For example, the first Ethernet device might be called eth0. The second wireless device might be called wl1. | + | Your device may show a different device name than eth1. FreshTomato hardware device numbers begin at 0. |
| - | Typically, the 5 GHz WiFi band has higher bandwidth, but shorter distance propagation than the 2.4 GHz band. | + | \\ |
| - | **Enable Wireless: | + | For example, |
| - | **MAC Address: | + | |
| + | | ||
| - | **Wireless Mode: | + | \\ |
| + | |||
| + | Typically, the 5 GHz WiFi band has higher bandwidth, but shorter range than the 2.4 GHz band. | ||
| + | |||
| + | \\ | ||
| + | |||
| + | **Enable Wireless: | ||
| + | |||
| + | **MAC Address: | ||
| + | |||
| + | **Wireless Mode: | ||
| ^ | ^ | ||
| Line 437: | Line 644: | ||
| | \\ Access Point | \\ The (default) setting, which allows clients to connect to FreshTomato' | | \\ Access Point | \\ The (default) setting, which allows clients to connect to FreshTomato' | ||
| | \\ Access Point WDS | \\ Sets the router in " | | \\ Access Point WDS | \\ Sets the router in " | ||
| - | | \\ Wireless Client | + | | \\ Wireless Client |
| - | | \\ Wireless Ethernet Bridge | + | | \\ Wireless Ethernet Bridge |
| - | | \\ Media Bridge Mode | \\ Configures FreshTomato to connect to another router/ | + | | \\ Media Bridge Mode | \\ Configures FreshTomato to connect to another router/ |
| - | | \\ WDS | \\ FreshTomato will serve as a [[https:// | + | | \\ WDS | \\ FreshTomato will act only as a [[https:// |
| | //Table derived from (Creative Commons) Wikibooks - “Tomato Firmware/ | | //Table derived from (Creative Commons) Wikibooks - “Tomato Firmware/ | ||
| - | | + | |
| - | | + | **Wireless Network Mode: **Select |
| - | | + | |
| - | | + | |
| - | | + | |
| - | * N Only - allows clients | + | |
| - | * N/AC mixed - allows | + | |
| - | * AC Only - allows clients to connect using only the 802.11ac protocol. | + | |
| - | Note that releases before 2021.8 do NOT have a separate setting for 802.11ac. That only arrived with 2021.8. | + | \\ |
| - | Separate Wireless Network Mode settings will exist for any 2.4 GHz band interface. See the 2.4 GHz section. \\ (Default: Auto) \\ \\ | + | * Auto - FreshTomato/ |
| + | * Recommended unless you're highly experienced with WiFi. | ||
| + | * Compatibility issues may occur. The “logical” setting isn't always | ||
| + | * A Only - allows WiFi clients to connect using only 802.11a. | ||
| + | * N Only - allows WiFi clients to connect using only 802.11n. | ||
| + | * N/AC mixed - allows WiFi clients to connect using only 802.11ac or 802.11n. | ||
| + | * AC Only - allows WiFi clients to connect using only 802.11ac. | ||
| - | **SSID: | + | \\ (Default: |
| - | **Broadcast: | + | Only releases 2021.8 and later have have a separate setting for 802.11ac. |
| - | **Channel: **Selects the channel on which the 5 GHz radio interface will operate. (Default: Auto). | + | Any 2.4 GHz band interface will have separate Mode settings. See the 2.4 GHz section.\\ \\ |
| - | Generally, it's a good idea to choose a different channel than the one your neighbours are using. | + | **SSID: |
| - | * Auto: This default is generally safe unless there's significant interference from nearby | + | For security, don't include personal words/ |
| - | * On this setting, FreshTomato selects and uses the channel it believes has the least interference. | + | |
| - | * Channel: This lets you manually choose from available channels on the band. Unavailable channels won't appear here. \\ \\ | + | |
| - | **Channel | + | **Broadcast: |
| + | |||
| + | This “announces” the SSID, so it's easy to find. Contrary to claims, SSIDs are easily sniffed with common software. Disabling SSID Broadcast offers little security improvement. \\ \\ | ||
| + | |||
| + | **Channel: **selects the channel on which the 5 GHz WiFi interface will operate.. | ||
| + | |||
| + | Generally, you should choose a different channel than the one your neighbours use. | ||
| + | |||
| + | \\ | ||
| + | |||
| + | * Auto: This default is usually safe unless there' | ||
| + | * FreshTomato selects/ | ||
| + | * Channel: lets you manually | ||
| + | |||
| + | \\ | ||
| + | |||
| + | **Channel Width: | ||
| + | |||
| + | \\ | ||
| * 20 MHz | * 20 MHz | ||
| Line 476: | Line 699: | ||
| * 160 MHz (not yet supported. May be supported on some SDK714 models) | * 160 MHz (not yet supported. May be supported on some SDK714 models) | ||
| - | | + | |
| - | 802.11N can use 40 MHz channel width. However, to maintain legacy compatibility, | + | Larger |
| - | **Control Sideband: | + | The 5GHz band is less prone to interference and noise, because on that band, 20 MHz channels don't overlap. Interference |
| - | Starting with release 2023.3, this menu will allow you to choose the exact control | + | Usually, it's fine to choose |
| - | **Security: | + | 802.11n can use 40 MHz channel width. However, for legacy compatibility, |
| - | | + | **Control Sideband:** select whether |
| - | * This is a basically an unlimited security risk. | + | |
| - | * WEP: enables Wired Equivalent Privacy protocol. Avoid using this. | + | This is available only if 40/80/160 MHz Channel Width is selected. (Default: Upper).\\ \\ |
| - | * This is obsolete due to serious vulnerabilities, | + | |
| - | | + | **Security:** lets you choose the security |
| - | | + | |
| - | * While more secure than WEP, WPA still has weaknesses, like lower encryption standards. | + | |
| - | * WPA2 is strongly encouraged instead of WPA. | + | |
| - | | + | \\ |
| + | |||
| + | * Disabled - disables all security, leaving the network open to anyone. | ||
| + | * Avoid using this. It's basically an unlimited security risk. | ||
| + | |||
| + | * WEP - enables Wired Equivalent Privacy protocol. Avoid using this. | ||
| + | * Obsolete due to serious vulnerabilities, | ||
| + | |||
| + | * WPA Personal - enables WiFi Protected Access 1.x (with RC4-based TKIP protocol). | ||
| + | * Lets hosts exchange pre-shared keys, for more security. | ||
| + | * More secure than WEP, but problems include low encryption standards. | ||
| + | * Strongly encouraged instead of WPA. | ||
| + | |||
| + | | ||
| * No common pre-shared key is used. | * No common pre-shared key is used. | ||
| - | * WPA Enterprise doesn't require a RADIUS server. Often, one is used anyway for compatibility and security reasons. | + | * Doesn't require a RADIUS server. |
| - | * WPA Enterprise is more secure against dictionary attacks | + | * Is more secure against |
| - | * This is suitable for larger, more formal networks. | + | * Is suitable for larger, more formal networks. |
| - | * WPA2 Personal: WiFi Protected Access version 2 uses elements of the 802.11i standard. | + | * WPA2 Personal |
| - | * This supports | + | * Supports |
| - | * WPA2 Personal is recommended for small to mid-sized, informal networks. | + | * Is recommended for small/mid-sized informal networks. |
| - | * WPA2 Enterprise: This enables the Enterprise version of WPA2. | + | * WPA2 Enterprise |
| - | * This uses WPA2, but each user has their own WiFi username/ | + | * Uses WPA2, but each user has their own username/ |
| - | * WPA2 Enterprise is based on parts of 802.11i. | + | * Is based on parts of 802.11i. |
| - | * This does NOT require a RADIUS server, but one is often used for legacy purposes for compatibility and security. | + | * Doesn' |
| - | * This is appropriate for larger, more structured networks. | + | * Is appropriate for larger, more structured networks. |
| - | * WPA / WPA2 Personal: This uses WPA2 Personal, and if that fails, | + | * WPA / WPA2 Personal |
| - | * WPA / WPA2 Enterprise: This uses WPA2 Enterprise, | + | * WPA / WPA2 Enterprise |
| - | * RADIUS: Enables | + | * RADIUS |
| - | * This is designed for larger organizations. | + | * Is designed for larger organizations. |
| - | * This uses a separate server to authenticate, permit | + | * Uses a separate server to authenticate/permit/track users. |
| - | * This supports | + | * Supports |
| - | * This is usually only for advanced users. | + | * Suitable |
| \\ | \\ | ||
| - | **Shared Key: | + | **Shared Key: |
| + | |||
| + | **Group Key Renewal: | ||
| - | **Group Key Renewal: | + | This is part of the WPA protocol. See the first wireless radio unit for more details. |
| - | (Default: 3600 seconds). | + | (Default: 3600 seconds). |
| Line 564: | Line 797: | ||
| ==== Baby Jumbo Frames ==== | ==== Baby Jumbo Frames ==== | ||
| - | Support for Baby Jumbo Frames | + | Support for Baby Jumbo Frames |
| + | |||
| + | \\ | ||
| To enable Baby Jumbo Frames: | To enable Baby Jumbo Frames: | ||
| - | * Go the Miscellaneous menu. Check //Enable jumbo frame support// | + | * Go the [[advanced-misc|Miscellaneous]] menu. Check //Enable jumbo frame support// . \\ The router will reboot. |
| - | * In the Network menu, Set the MTU option | + | * In the [[basic-network|Network]] menu, Set MTU to manual. For PPPoE operation, |
| - | * Clamping can be manually disabled, if needed. | + | * Clamping can be manually disabled, if needed. |
| - | * Ping with packet size 1472 to verify | + | * Ping with packet size of 1472 to verify a working PPP MTU of 1500. |
| \\ | \\ | ||
| Line 577: | Line 812: | ||
| ==== Wireless Band Steering ==== | ==== Wireless Band Steering ==== | ||
| - | \\ | + | |
| - | This example shows the default parameters to steer clients from the 2.4 GHz band to the 5 GHz band: \\ | + | \\ This example shows the default parameters to steer clients from the 2.4 GHz band to the 5 GHz band: \\ |
| - | \\ | + | |
| <code -> | <code -> | ||
| Steer Policy: | Steer Policy: | ||
| Line 594: | Line 829: | ||
| N ONLY: NO | N ONLY: NO | ||
| </ | </ | ||
| - | \\ | + | |
| - | \\ | + | \\ |
| - | This example shows default parameters to steer clients from the 5 GHz band to the 2.4 GHz band: \\ | + | |
| - | \\ | + | This example shows default parameters to steer clients from the 5 GHz band to the 2.4 GHz band: \\ |
| <code -> | <code -> | ||
| Steer Policy: | Steer Policy: | ||
| Line 613: | Line 849: | ||
| </ | </ | ||
| - | \\ | + | \\ |
basic-network.1708336725.txt.gz · Last modified: by rs232
Page Tools
