Merlin features still work in AP mode?

[sickman]

I've been using a RT-AC68U as main router w/ Merlin and just upgraded to a Blue Cave, so now using the RT-AC68U as an AP.

2 awesome features of Merlin for me are (1) allow a different DNS for each device/computer and (2) Enable JFFS custom scripts. Is it possible for both features to still be used now that it is an AP?

Reason for this is the RT-AC68U will be in my kids room and I want to (1) use OPEN DNS for them only, and (2) create scripts to force google safesearch.

If it doesn't work in AP mode, possible to keep RT-AC68U in router mode & manually change settings without causing much issues?

TIA

 

[JDB]

Definitely the custom scripts still work as I’ve done it.
Not sure if you can enable the DNS/DHCP (dnsmasq) server from the GUI, but as you have access to the custom scripts you could also manually configure/start the services from there.


Sent from my iPhone using Tapatalk

 

[ColinTaylor]

(1) allow a different DNS for each device/computer

If you're referring to the DNSFilter function then that won't work in AP mode. It has to be in router mode for it to work.

If it doesn't work in AP mode, possible to keep RT-AC68U in router mode & manually change settings without causing much issues?

Yes you can leave it in router mode provided that you ensure all the kids stuff connects only to that router (i.e. different SSID's). Their devices will be behind a double-NAT but that might not be an issue for you.

 

[sickman]

Playing around with the RT-AC8U as an AP back in router mode and it seems to work OK, so think I will just set up like this. Thank you both for your assistance.

 

[RMerlin]

Make sure you disable the DHCP server in router mode, to avoid conflicting with the Blue Cave.

 

[ColinTaylor]

Make sure you disable the DHCP server in router mode, to avoid conflicting with the Blue Cave.

I think he's now just using it as a normal router (WAN port connected to upstream Blue Cave's LAN port). i.e. two different subnets, so he should be OK.

 

[sickman]

I connected the main router (Blue Cave) LAN port to the AP (RT-AC68U in router mode) LAN port as that is how I thought it should be? I did disable the RT-AC68U's DHCP server and changed it's IP address to one in the main router's list so its working fine. Should I use the AP's WAN port instead?

What I can't get to work are the Merlin options I wanted. I changed the DNS filter to enable open DNS, and tested a phone on wifi - it worked earlier but tried again now and it did not. Made sure I was using this router's wifi connection too.

Also, created scripts in WinSCP (as previously done when it was main router) to force google safesearch and that is not working.

Shouldn't both be working since it is considered in router mode? TIA

 

[ColinTaylor]

I connected the main router (Blue Cave) LAN port to the AP (RT-AC68U in router mode) LAN port as that is how I thought it should be? I did disable the RT-AC68U's DHCP server and changed it's IP address to one in the main router's list so its working fine. Should I use the AP's WAN port instead?

That's fine if you want to use it just as an access point but I thought you wanted to use DNSFilter. DNSFilter needs the router to be a router, i.e route traffic from the LAN ports to the WAN port.

 

[JDB]

DNS filtering is not going to work unless you at least make it your DNS server (requiring a change in the Blue Cave DHCP options). Even then I’m not sure this will work given the unusual setup - could probably be made to work with expert/advanced config but unlikely to be simple if simply making it your DNS server (and giving your Blue Cave to it as it’s DNS server) doesn’t do it.

I’m not sure how the force google safe search works, it may be that it NEEDS to be your default GW in your network (which it isn’t right now as it is not using the WAN port).


Sent from my iPhone using Tapatalk

 

[ColinTaylor]

DNS filtering is not going to work unless you at least make it your DNS server (requiring a change in the Blue Cave DHCP options). Even then I’m not sure this will work given the unusual setup - could probably be made to work with expert/advanced config but unlikely to be simple if simply making it your DNS server (and giving your Blue Cave to it as it’s DNS server) doesn’t do it.

DNSFilter works by using iptables to DNAT the IP address in the PREROUTING chain. So it's nothing to do with the router's DNS server, it's a routing issue.

 

[JDB]

DNSFilter works by using iptables to DNAT the IP address in the PREROUTING chain. So it's nothing to do with the router's DNS server, it's a routing issue.

Ah ok, well it’s gonna be a serious job to make it work in a non df gw position then!

I’d give up I think.


Sent from my iPhone using Tapatalk

 

[sickman]

That's fine if you want to use it just as an access point but I thought you wanted to use DNSFilter. DNSFilter needs the router to be a router, i.e route traffic from the LAN ports to the WAN port.

Yes, definitely want to use DNSFilter. Will try again - this time I will connect the AP (RT-AC68U in router mode) WAN port to the main router LAN port. Do I need to disable the DHCP server and change it's IP address to one in the main router's list too?

Also, since it will be working like a router, hopefully the script will work too!

 

[JDB]

Yes, definitely want to use DNSFilter. Will try again - this time I will connect the AP (RT-AC68U in router mode) WAN port to the main router LAN port. Do I need to disable the DHCP server and change it's IP address to one in the main router's list too?

Also, since it will be working like a router, hopefully the script will work too!

Dhcp needs to be on
LAN subnet needs to be different to the blue cave one
WAN IP needs to be in the Blue Cave LAN subnet (and Blue Cave IP as it’s DF GW and DNS server)

Keep in mind only devices attached to the 68U will be filtered and so if your kids manage to attach directly to the blue Cave they will not be filtered (so don’t make the blue cave Wi-fi password known to them and ensure the admin login(s) are also secure/not known).
If they router is in there room, they will also be able to physically take the cable from the WAN port and into the Ethernet port of their laptop etc and bypass filtering.


Basically, kids are smart! Don’t be surprised if they did away around this unless you are careful about how you set it up.


Sent from my iPhone using Tapatalk

 

[ColinTaylor]

Do I need to disable the DHCP server and change it's IP address to one in the main router's list too?

No you need to re-enable DHCP and make it a different subnet than the Blue Cave's. I think the router will tell you to do this anyway. So if your Blue Cave is using 192.168.1.x then you could use 192.168.2.x for the AC68U.

 

[RMerlin]

The only way you'll get DNSFilter working is if that router is your primary router in front of your clients. It won't work in AP neither in router/AP hybrid like you are trying to do.

 

[sickman]

The only way you'll get DNSFilter working is if that router is your primary router in front of your clients. It won't work in AP neither in router/AP hybrid like you are trying to do.

Yes, have now set this router up as the primary for those devices, while wired to the main router for rest of devices. DNS filter works perfect.

One last question - is there any way to access this router’s menu on a device that is not ‘behind’ it but connected to main router?

 

[JDB]

Yes, have now set this router up as the primary for those devices, while wired to the main router for rest of devices. DNS filter works perfect.

One last question - is there any way to access this router’s menu on a device that is not ‘behind’ it but connected to main router?

You can safely enable WAN Web access on it a sits behind the blue cave. Then you can access it from the blue cave LAN on the 68U WAN IP.


Sent from my iPhone using Tapatalk