Looking for help setting up an isolated network within my apartment complex’s network. I have a Linksys router running OpenWrt, with the ethernet connection from my aprtment running to the uplink port on the router. When I SSH into the router, it has WAN access, but none of the LAN devices connected to it (by ethernet or wireless) do. Anyone have any experience with this?

  • halcyondays@midwest.socialEnglish
    2·
    1 year ago

    My guess is responses aren’t NATing properly with the double NAT. Make sure you have a source NAT masquerade rule set up for traffic out, you may also need a masquerade to replace your client’s IP with the LAN gateway address on the way out.

    Basically right now without masquerading as your LAN port the router loses the originating client’s IP when it src NATs, so the responses get delivered to the internal gateway address and never forwarded on to the client to establish the connection. Forcing it to masquerade will maintain that connection tracking.