What's new

How can configure RT-AC86U to access ONT in WAN Port?

  • SNBForums Code of Conduct

    SNBForums is a community for everyone, no matter what their level of experience.

    Please be tolerant and patient of others, especially newcomers. We are all here to share and learn!

    The rules are simple: Be patient, be nice, be helpful or be gone!

antoniorodc

New Around Here
I have the following setup to access Internet:

FTTH <----> ONT Router <----> (WAN Port) RT-AC86U <----> LAN
Internet <---------------------> VLAN <----------------> LAN
Internet <---------------------> Public IP <-----------> 192.168.1.1/24
---------- 192.168.100.1/24 <--------------------------> 192.168.1.1/24


I want to access to IP of ONT router (192.168.100.1) from local network RT-AC86U (192.168.1.x)

I tried to create one new vlan:

vlanctl --mcast --if-create eth0 1
vlanctl --if eth0 --rx --tags 0 --set-rxif eth0.v1 --rule-append
vlanctl --if eth0 --tx --tags 0 --filter-txif eth0.v1 --rule-append
ifconfig eth0.v1 allmulti up
ifconfig eth0.v1 192.168.100.2 netmask 255.255.255.0 up

iptables -t nat -I POSTROUTING -o eth0.v1 -j MASQUERADE


This way I can access to Ont Router but broken Internet traffic.

Can you help me? Some different idea?
 
Last edited:
If your wan port is in the same subnet as the ONT, then you should not have to configure anything.

Morris
 
If your wan port is in the same subnet as the ONT, then you should not have to configure anything.

Correctly. What I want is access from LAN to ONT. Now, I can access to Internet through ONT with VLAN without problems.

I "redraw" scheme of my config in first post.
 
Last edited:
Correctly. What I want is access from LAN to ONT. Now, I can access to Internet through ONT with VLAN without problems.

I "redraw" scheme of my config in first post.

Then you have a route to the ONT's. subnet. If you can't access it, the ONT is not allowing the access.
 
This page on the dd-wrt website may help:

https://forum.dd-wrt.com/wiki/index.php/Access_To_Modem_Configuration

It really applies to pppoe connections when you need access to the modem gui. To get this to work with Merlin f/w I had to create two scripts:

WAN-Start (now WAN-event):

#!/bin/sh
ifconfig `nvram get wan0_ifname`:0 192.168.2.2 netmask 255.255.255.0

NET-Start:

#!/bin/sh
iptables -t nat -I POSTROUTING -o `nvram get wan0_ifname` -j MASQUERADE

You need to replace 192.168.2.2 in WAN-Start with your specific IP as per the instructions on the linked page.
 
Thank you so much, that's the easy solution.

This page on the dd-wrt website may help:

https://forum.dd-wrt.com/wiki/index.php/Access_To_Modem_Configuration

It really applies to pppoe connections when you need access to the modem gui. To get this to work with Merlin f/w I had to create two scripts:

WAN-Start (now WAN-event):

#!/bin/sh
ifconfig `nvram get wan0_ifname`:0 192.168.2.2 netmask 255.255.255.0

NET-Start:

#!/bin/sh
iptables -t nat -I POSTROUTING -o `nvram get wan0_ifname` -j MASQUERADE

You need to replace 192.168.2.2 in WAN-Start with your specific IP as per the instructions on the linked page.
 

Sign Up For SNBForums Daily Digest

Get an update of what's new every day delivered to your mailbox. Sign up here!
Top