Recent Forum Posts
From categories:
page »

Did anyone find a solution for this issue? I am using Tomato 1.28.0000 MIPSR2-3.4-138 K26AC USB AIO-64K, and the bug is still present. 5GHZ won't turn off. Please help.

Re: RT-AC66U 5 GHz LED stays on by mupemupe, 23 May 2017 09:29

Do you have ping allowed ? Check the Web-GUI on Tomato Shibby:
- Advanced Settings > Firewall > Respond to ICMP ping: activate the check-box

If you want to configure your router from outside (from a WAN), you also need to allow the remote access. Check the Web-GUI on Tomato Shibby:
- Administration > Admin Access > Remote Access: set to "Enable"

Re: Cannot ping secondary router by s3n0s3n0, 22 May 2017 23:16

I am trying to set up a second router to connect through a VPN. I have it working 95% but it seems something in the setup is not quite right. The second router is set up and I can connect to the internet without any problems. The problems start when I try and connect to the VPN. If DHCP is disabled on the second router, it does not seem to connect through the VPN when it is running, I look up my IP and it is the same as the original. If I enable DHCP and set an IP range that is different from the first router I get the same results. But, if I set the range to be the same or to fall within the range of the first router it works, almost. For 99% of websites it will connect no problem, but when I tried to connect to some, I get an error that the "server's DNS address could be found." I am not too familiar with networking so I am not sure what further information you may need. Any help would be greatly appreciated.

Setting up Second Router For VPN by JTG22JTG22, 20 May 2017 07:22

When WAN connected router cannot boot. At the end of booting its reboot and cycle go again. When WAN is disconnected booting process is normal.

What can i do to fix it?

FW: Tomato Firmware 1.28.0000 -3.4-140 K26ARM USB AIO-64K

When my WAN port (from my cable modem) is plugged in after a shutdown (via power, not restart), the router seems to get stuck in a reboot loop. I unplug the WAN and it boots just fine, I then plugin the WAN and everything works correctly.

R8000, I instaled the tomato shibby firmware, disabled all wifi, and I'm using it just a a router. Disabled all possible other features, like monitoring or traffic control, no QoS. I have a Gigabit Internet connection, I don't expect the VPN PIA to support Gigabit speeds, but here is what I tested:

1) Setup the OpenVPN client on my R8000, and when connected to PIA I can get only speeds up to 45Mbps and the CPU (overclocked to 1.2Ghz) goes to 85%.

2) Setup the VPN client on ny QNAP NAS (it has a quad core celeron 2.0Ghz) and sharing the VPN tunnel to my network - with this setup I get 65Mbps.

3)PIA speeds are usually around 400Mbps when direclty connected to my PC (openVPN client on Mac) (i7 quad-core).

I read a lot about it and to be able to share a VPN conection to the network without losing bandwidth the router must have at least a i3 dual core 3.0Ghz to be able to process the NAT+VPN tunnel connetion - the only alternative is to build a router and use pfsense (or Linux).

Does anyone have a similar enviroment ?

Hi - I have a script that routes traffic from certain IPs through my VPN that is set up on my Tomato router. There is the option to have 2 VPNs configured in Tomato, my question is can I check if VPN1 is connected via a script and if it isn't route the IPs to the VPN2 connection?

If anyone could point me at some scripting docs that would be most helpful.

Thanks for any help.

I used IPtables to restrict access as my needs are bit more complex than what the built in Access Restriction section can do.

Essentially what I want to do is block a machines internet access M-F from 12am to 4pm. BUT I want to always allow access to 2 external ip addresses.

Is it possible to have an iptable rule that is only active during certain times and days of the week? Right now I use the script from this thread and just comment out the drop line manually every day:


I am currently using Shibby 1.28.0000 MIPSR2-138 K26 USB VPN. I am not opposed to using a different firmware if need be.

hi all,

I have flashed my e900 with the latest shibby v140 for the sole purpose of vlans.

I want to pass vlan 720 to my e900.

On my e3000 i have the option First 802.1Q VLAN tag which i set to 720 and i have vlans from 720 to 735.

On my e900 i do not have this option so does anyone know how can i do it on e900?

Any help highly appreciated.

e900 shibby tomato vlan>15 by mariosm1cymariosm1cy, 15 May 2017 08:58

Hello all

i have a problem flashing Linksys EA6700, i flash new firmware, everything ok, but after i restart the router, he reinstal the defalt image of his factory firmware.
After flashing with Shibby Tomato i erase nvram, but after restart, same result, default factory firmware, any ideea?

thank you.

Linksys EA6700 problems by nanubvnanubv, 14 May 2017 19:55

Hello All

Tomato newbie here, hope someone can please help, I have just installed Advanced Tomato on my Netgear R7000 then I set it up as an access point off my Verizon router, all was fine till this point but then I tried to setup guest access and double checked several guides available and all seem to be the same but I just can't get internet access from WiFi on the guest network, the original Tomato network wifi works fine and I can connect to it but whenever I connect to the new guest access one it says no internet access. Not sure what other information I can give here but I would really appreciate some help.

The only thing I have tried to do is turn on/off the bridge WAN option in basic setting but it made no difference. I have not made any changes to the firewall either.

Any ideas please?

Thank you very much


I did something like this recently, and wrote it up on SuperUser. I can't post links here, but you can find it under the title "Tomato Dual VLAN (where one of them is VPN tunnelled)".
Hope that helps!

I did something like this recently, and wrote it up on SuperUser. I can't post links here, but you can find it under the title "Tomato Dual VLAN (where one of them is VPN tunnelled)".
Hope that helps!

Re: Dedicated SSID for VPN? by mttsndrsmttsndrs, 12 May 2017 17:59

This is just a request. If ever there's a possibility that QoS would be fixed to work on multiwan it would be totally awesome! Thank you for the great builds shibby

Re: Shibby Builds by DarkbingDarkbing, 12 May 2017 02:46

I believe I'd definitely tracked it down to dnsmasq.

I went with a straight up IP, with only a two static IPs, and I'm seeing much better "up-time".

I'm still getting very laggy performance on both wired and wireless connections, which makes me think DNS as well. I've switched off of Google DNS with DNSSEC to see if that improves performance.

Router ASUS RT-N66U, firmware
When I configuring LAN1 as WAN2 with VLAN 3, after reboot LAN1 configered in both VALN 3 and VLAN 1 / vlans.jpg
(Remove spaces in link)

VLAN configuration by Konstantin SmirnovKonstantin Smirnov, 10 May 2017 14:03

I installed Shibby build 140 on an R8000, and once I get everything configured, the router will run for awhile, and I start getting a lot of rolling restarts.

Usually the WiFi Radios will come up, and immediately the box will restart. I'm seeing nothing "useful" in the logs, but once this rolling restart happens I usually have to do the full Serial-FTDI "nvram erase" to get it back, so don't really get access to the logs after it happens.

I've not been able to track it to down to any one point in the configuration. For awhile I thought it was the USB config, but I removed that (and unplugged the device) and before long I start seeing the same behavior again.

One thing I did notice is that before it started to "loop restart" it seems that the routing between the WiFi Access Points and the WAN fails first. Basically when connected via WiFi only, I'd lose internet access (can still ping/access the main router though).

A few things I always do, incase it matters in any testing:

I renumber my router to: [so no issue when connecting to a workplace via PPTP]
I setup my DHCP to give out:
I assign about 10 static IPs that are both inside and outside the DHCP range space.

I'm guessing that it's freaking out somewhere during the DNSMASQ config?

I just flash back to factory. I'm gonna save the config info off, the flash back to 140 (through "initial"), then just rename the 2.4 network SSID, so that my existing devices don't have to be reconfigured, and see if it will just "run" that way for awhile.

Just wanted to give an update, and see if there was any additional 140 feedback.

Also, ask when the AC protocol/speeds are going to become part of the build?


Getting ready to install Tomato Shibby on my RT-N66U and would like to understand the difference between the K26RT-N firmware vs the K26RT-AC firmware. Not sure which one to install, can anyone tell me the differences and advantages and disadvantages of each. Or point me to a location that will explain those differences.

Re: Shibby Builds by billsteinerbillsteiner, 09 May 2017 17:40

I have a router provided by my ISP which I have connected to a Tomato router and I can ping both these routers from a laptop connected via wifi to the Tomato router.

The Tomato router has a Powerline Adaptor going to an apartment downstairs. In the apartment I have added another router, but I can't ping this router.

They are all on their own IP range: - Tomato Router (Can ping) - ISP Router (Can ping) - Apartment Router (Cannot Ping)

On the apartment router it recognises the WAN as being Tomato ( However on the Tomato Router I cannot "see" the Apartment router.

I'd like to be able to see the apartment router as I need to be able to limit the bandwidth of that router using the Tomato Router. E.g. set a limit from the Tomato router for IP range

I can ping the Tomato Router (and the ISP router) when I'm connected to the Apartment Router, so it seems to be a one way thing. So something with the Tomato router setup maybe?

Any ideas why I can't see / ping the Apartment router, or suggestions of things to try would be much appreciated. I'm not a networking expert!

page »
Unless otherwise stated, the content of this page is licensed under Creative Commons Attribution-ShareAlike 3.0 License