TomatoUSB

I'm trying to configure my WNR3500L (with Tomato Firmware v1.28.9054 MIPSR2-beta K26 Std) as a router instead of the default gateway mode.

Im getting no connectivity between the WAN interface and the LAN interfaces though - the router itself is able to ping out both interfaces so IP connectivity is ok and the routing table is correct aswell. the router is however NOT routing packets between the interfaces :(

Has anyone managed to get it working (on any router running Tomato) ?

Perhaps you didn't add and configure routing tables. Why do you want to switch to router mode?

because I have no need for address translation between the 2 subnets - why else would you disable Gateway Mode / PAT ;-)

The routing table looks correctly after the change to Router Mode but I cannot even ping the router WAN interface from the client subnet hence my suspicion that no routing is taking place.

Did you ever get Router Mode (vs. Gateway) to work?

I'm having the same problem with the latest version of Toastman (7500.4) & I can't get router mode to route packets either direction. No connection at all, as far as I can tell.

The documentation (old) says that it disables the firewall, but I don't see this.

Setting in router mode just removes the masquerading/snat entries from the nat table. You still need to accept the incoming traffic in the filtering table. On my router I just disable all the rules all together. You can do this by setting this in administration->scripts->firewall:

# disable firewall
iptables -F
iptables -X
iptables -t nat -F
iptables -t nat -X
iptables -t mangle -F
iptables -t mangle -X
iptables -P INPUT ACCEPT
iptables -P FORWARD ACCEPT
iptables -P OUTPUT ACCEPT

-David

David,

Thanks for the help. Unfortunately, it's not working for me.

I ssh into the router and do a "iptables —list", and get
Chain X (policy ACCEPT) for x=INPUT, FORWARD, OUTPUT

but still no packets being forwarded. The routing table looks correct.
I can ping the router both from the LAN side and from the WAN side, and can ping both the LAN and WAN from SSH, but can't get packets through the router.

It's probably something simple, but any thoughts on what I'm doing wrong, or how to debug it?

My fault - your script is fine.

I forgot the that devices on the WAN side of the router need to know how to route back to the LAN.

Hi Mike,

You say you can ping the router from the wan side, are pinging its wan ip or lan? My guess is you pinged the wan ip.
I know you said that the routing table looks correct on your WNR3500L but never mentioned the routing table of your other router on the WNR3500L's wan side.
Can you provide the routing tables for both routers?
I'm currently using this setup on an rt-n16 with tomato and it's working fine.

-David

That's exactly where I was heading in this conversation. Glad you got it working. :)

For the first time I tried to use Router mode on a secondary 'slave' router recently.

Just didn't seem to work 'out of the box' at all. Maybe need a proxy for dhcp and upnp etc, but proxy_arp wasn't enabled, and just enabling it wasn't sufficient.

I ended up just disabling the wanport, and just using the router as a dumb access point, but this wastes a lot of the potential functionality.

Never tried this mode in original Linksys/Asus firmware - does it work as a 'managed switch' there without extensive manual configuration?