What WiFi mode do I use?

VirtualLarry

No Lifer
Aug 25, 2001
56,587
10,225
126
It depends, on which router(s) and what mode(s) they support.

Ideally, you would change the secondary router to client bridge mode. This can easily be done with DD-WRT, but not so much with most factory firmware.

Another mode is WDS mode. In that mode, generally, in each router, you would enable WDS mode, and enter the MAC address of the wifi radio in each router into the opposite router's config page.
 
Nov 26, 2005
15,194
403
126
It depends, on which router(s) and what mode(s) they support.

Ideally, you would change the secondary router to client bridge mode. This can easily be done with DD-WRT, but not so much with most factory firmware.

Another mode is WDS mode. In that mode, generally, in each router, you would enable WDS mode, and enter the MAC address of the wifi radio in each router into the opposite router's config page.

I did manage to find out that the secondary router supports DD WRT, and installed it. My main one connected to the cable modem is an Asus N66U.

Is DD WRT safe to use? Like are there any config settings that allow remote access? I thought I seen one. I just want the secondary router to run wired connections but get it's internet connection from the primary.

What's the simplest and safest mode to use?
 

postmortemIA

Diamond Member
Jul 11, 2006
7,721
40
91
are routers connected through Ethernet or WiFi?
If first, then you want to make second router be Access Point
If second, then you want to use Client Bridged mode.
 
Nov 26, 2005
15,194
403
126
Another mode is WDS mode. In that mode, generally, in each router, you would enable WDS mode, and enter the MAC address of the wifi radio in each router into the opposite router's config page.

If I did that would I be able to still have WiFi on the Asus to other devices, plus the DD? I thought I read no other devices could access either devices wifi capabilities? Hence needing the Asus to still offer wifi to other devices.
 

JackMDS

Elite Member
Super Moderator
Oct 25, 1999
29,553
430
126
Nov 26, 2005
15,194
403
126
The Wireless of the source is always available.

1. Secondary Wireless Router configured as Repeater/WDS Wireless computers can connect to it too.

http://www.dd-wrt.com/wiki/index.php/Repeater_Bridge

2. Secondary Wireless Router configured as Client Bridge. Computers has to be plugged into it with Wire.

Wireless Router as a Client Bridge is essentially a universal Wireless Card that does not need Drivers

http://www.dd-wrt.com/wiki/index.php/Client_Bridged



:cool:


Thanks, dude. Still working on getting things setup. I think I might run into some problems with the IP addresses. With the primary router I have the DHCP set to manual. I also have the Wireless MAC address set with an allow list. So for I'm confused on which address to allow on the MAC list. I see two. On the main DD WRT 'Wireless Status' window I see there is a Wireless MAC address, then in another section below there is a window called 'Wireless Nodes' and the sub category is 'Access Points' and there is a MAC address that I'm not sure if it needs to be allowed on my manually set DHCP list or allowed on the Wireless MAC access list. :hmm:
 

VirtualLarry

No Lifer
Aug 25, 2001
56,587
10,225
126
Is there some reason that you are using MAC white-listing on your main router? (I mean, other than to slow down your internet routing.)
 

VirtualLarry

No Lifer
Aug 25, 2001
56,587
10,225
126
Isn't it sort of a firewall? Any mac address NOT on the list couldn't access the router, right?

Are you afraid of any devices on your internal LAN accessing the internet? Because wireless intruders, once they get through your WPA2-PSK (AES) password (hard, depending on password), can just clone a MAC to get through (relatively easy).

Edit: Do you use non-broadcast SSIDs too? That's an equally non-effective security measure.
 
Nov 26, 2005
15,194
403
126
Are you afraid of any devices on your internal LAN accessing the internet? Because wireless intruders, once they get through your WPA2-PSK (AES) password (hard, depending on password), can just clone a MAC to get through (relatively easy).

Edit: Do you use non-broadcast SSIDs too? That's an equally non-effective security measure.

How do I monitor for such activity?
 

VirtualLarry

No Lifer
Aug 25, 2001
56,587
10,225
126
How do I monitor for such activity?

Monitoring for connections that get through a WPA2-PSK (AES) long password, and a MAC filter? I guess you could monitor and log IP flows with an L7 firewall. TBH, that's a bit above my pay grade.

I guess my point was, as long as you have other enabled wireless nodes that are active and associated with your router, then if someone gets through your WPA2 password, sniffing and cloning a MAC is relatively easy.
 

EvaCarey

Junior Member
Sep 23, 2014
18
0
0
www.networking-basics.net
A wireless distribution is a system that enables the different wireless internet connection of access points. Wireless clients cannot connect to the secondary router which usually configured as a standard bridge. There is a DD-WRT v24 repeater bridge mode which allows to connect a secondary router to the main Wi Fi.