Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
Next revisionBoth sides next revision
docs:guide-user:network:wan:access.modem.through.nat [2021/03/10 05:15] – [Web interface] vgaeteradocs:guide-user:network:wan:access.modem.through.nat [2024/10/30 00:44] – [Web interface instructions] Easier to assign the "modem" interface to the "wan" zone. lastedit
Line 3: Line 3:
  
 ===== Introduction ===== ===== Introduction =====
-  * DSL/DOCSIS modems can operate in the bridge mode and provide internet to your OpenWrt router. +  * This how-to describes the method for accessing the modem connected to your OpenWrt router. 
-  * To access the modem administrative interface, you need to find out its IP address and the port/protocol it is using+  * It helps to reach the administrative interface of a DSL/DOCSIS modem operating in the bridge mode
-  * You may also need the correct username/password to gain access or apply changes.+  * The prerequisite is to know the modem's IP address, port/protocol and username/password.
  
 ===== Goals ===== ===== Goals =====
   * Access the modem operating in the bridge mode through the router.   * Access the modem operating in the bridge mode through the router.
  
-===== Web interface ===== +===== Web interface instructions ===== 
-Assuming your modem's IP address is ''192.168.100.1''.+Assuming your modem's IP address is ''192.168.100.1'' and it is connected to the router's WAN interface.
  
   - Navigate to **LuCI -> Network -> Interfaces**.   - Navigate to **LuCI -> Network -> Interfaces**.
Line 22: Line 22:
     * IPv4 address: ''192.168.100.2''     * IPv4 address: ''192.168.100.2''
     * IPv4 netmask: ''255.255.255.0''     * IPv4 netmask: ''255.255.255.0''
-  - On the **Firewall Settings** tab specify:+  - On the **Firewall Settings** tab assign the ''modem'' interface to the ''wan'' zone:
     * Create / Assign firewall-zone: ''wan''     * Create / Assign firewall-zone: ''wan''
-  - Click **Save** and **Save & Apply**.+  - Click **Save**, then **Save & Apply**.
  
 At this point the modem should be reachable from any host in the LAN. At this point the modem should be reachable from any host in the LAN.
  
-===== Command-line interface ===== + 
-Assuming your modem's IP address is ''192.168.100.1''.+=== NOTE === 
 + 
 +If you are using the BanIP package, make sure to add the IP to the allowlist. Ex. ''192.168.100.0/24'' 
 + 
 + 
 +===== Command-line instructions ===== 
 +Assuming your modem's IP address is ''192.168.100.1'' and it is connected to the router's WAN interface.
  
 Set up a static WAN [[docs:guide-user:network:network_interface_alias|alias]] and assign it to the WAN zone. Set up a static WAN [[docs:guide-user:network:network_interface_alias|alias]] and assign it to the WAN zone.
  
 <code bash> <code bash>
-# Configure firewall 
-uci add_list firewall.@zone[1].network="modem" 
-uci commit firewall 
-/etc/init.d/firewall restart 
- 
 # Configure network # Configure network
-uci -q delete network.modem+uci -q del network.modem
 uci set network.modem="interface" uci set network.modem="interface"
-uci set network.modem.ifname="@wan" 
 uci set network.modem.proto="static" uci set network.modem.proto="static"
 +uci set network.modem.device="@wan"
 uci set network.modem.ipaddr="192.168.100.2" uci set network.modem.ipaddr="192.168.100.2"
 uci set network.modem.netmask="255.255.255.0" uci set network.modem.netmask="255.255.255.0"
 uci commit network uci commit network
-/etc/init.d/network restart+service network restart 
 + 
 +# Configure firewall 
 +uci del_list firewall.@zone[1].network="modem" 
 +uci add_list firewall.@zone[1].network="modem" 
 +uci commit firewall 
 +service firewall restart
 </code> </code>
  
Line 56: Line 63:
 uci set network.lan.ipaddr="192.168.2.1" uci set network.lan.ipaddr="192.168.2.1"
 uci commit network uci commit network
-/etc/init.d/network restart+service network restart
 </code> </code>
  
-In some cases, you may need to disable IP masquerading, or use the physical device name for the modem interface.+If the WAN L2 device doesn't match L3 device like in case of PPPoE, change the modem interface.
  
 <code bash> <code bash>
-Configure firewall +Fetch WAN L2 device 
-uci set firewall.@zone[1].masq_dest="!modem" +. /lib/functions/network.sh 
-uci commit firewall +network_flush_cache 
-/etc/init.d/firewall restart+network_find_wan NET_IF 
 +network_get_physdev NET_L2D "${NET_IF}"
  
 # Configure network # Configure network
-uci set network.modem.ifname="eth0.2:1"+uci set network.modem.device="${NET_L2D}"
 uci commit network uci commit network
-/etc/init.d/network restart+service network restart
 </code> </code>
  
  • Last modified: 2024/10/30 06:14
  • by lastedit