How to set up a router firmware dd wrt. Knowledge Base - Powered by the Kayako system. Setting up a Wi-Fi connection in Linksys WRT54GL with DD-WRT firmware

Free alternative firmware DD-WRT for routers will help turn even a budget router into a real ace with rich functionality, and completely free of charge. It will also allow you to change your Wi-Fi signal strength settings and use new security protocols. In addition, unlike standard firmware, DD-WRT-based routers can act not only as VPN clients, but also as servers. The only drawback: it is not always clear which settings need to be activated, so we will tell you about the most basic parameters.

Initial settings

SuperFirmware is installed on the router in the same way as a regular firmware update. The installation file must be downloaded from the dd-wrt.com website in the "Router Database" section by selecting your router model. If you ever want to go back to the original firmware, you will need a firmware file from the device manufacturer. To install DD-WRT on your router, usually with the update dialog provided by the original firmware. After rebooting, log into the web interface (192.168.1.1) by entering the login "root" and the password "admin".

Configuring network connections

When the DD-WRT interface opens, you will be prompted to set a new password and username to access the router - everything is the same as in regular firmware, except that some models of routers do not allow changing the username. However, changing the default username increases security. Login and password can then be changed in the section "Administration | Management | Router Password ".

Further on the tab “Administration | Management ", you can switch the standard language from English to Russian: scroll down the page to the bottom third, in" Language Selection "select" Russian "and save the settings by clicking" Save "at the very bottom of the page. The WAN (Wide Area Network) connection that provides Internet access is usually set up by the router itself. But just in case, before updating the firmware, go to the appropriate section of the router's web interface and write down the old settings.

The problem can only arise if you are using a different modem router for the WAN connection, that is, the Internet connection does not come directly from a device with DD-WRT firmware. It consists in the fact that within the range of IP addresses of a local network, an address conflict may occur when the IP address of one of the network users repeats an existing one.

In this case, the menu “Setup | Basic Setup | WAN Connection Type ”, you need to register a static IP address for the DD-WRT router. To do this, you need to change the last part of the specified IP address by adding one to the number. Do not forget to save each change by clicking "Save" and finally click the "Apply" button.

Optimal wireless setting

The WAN connection is followed by the WLAN queue. DD-WRT allows you to deploy more than just a wireless home network. You can, for example, create separate networks for guests, for multimedia devices, or for something else. The advantage of this approach is that devices that enter the Internet of Things and are most at risk of being compromised will operate on their own network, from which there will be no access to the rest of the home networks. Then it will be possible to set the priority of individual networks in terms of bandwidth (see the section "Performance Optimization" below).

First of all, you need to configure the parameters of the physical wireless networks. For routers supporting the modern 802.11ac standard, there are three: one each for the 2.4 GHz and 5 GHz bands and a combined Dualband network for 2.4 and 5 GHz. For these networks in the menu “Wireless | Basic Settings | Wireless Network Name ”, you need to set one name to ensure optimal connection of all home devices to the router. For the IoT network, use the 2.4 GHz band. To create an additional network, click in the "Virtual Interfaces" section on the "Add" button and set an individual name for the network.

Security

In addition to creating ideal wireless security, you should take advantage of DD-WRT's advanced features to, for example, be able to connect to the Internet over an encrypted VPN connection or restrict certain users or devices from accessing your home network. Next, we will tell you how to protect your network from possible attacks by hackers.

Wireless Security

Make your home wireless network invisible and protect it from hacking. If attackers cannot even detect it, it will not be able to become the target of an attack. In order not to display the network name, open the “Wireless | Basic Settings ”, which displays all the networks of the router - as a rule, this is one 2.4 GHz and one 5 GHz network.

For both, switch the "Wireless SSID Broadcast" option to "Disable". Your network is now invisible to other users besides you. To connect to a network using Windows, open the list of wireless networks, select the network with a hidden name (SSID), and enter the network name and password.

Next, you need to specify which devices have access to the network by selecting MAC addresses from the list of network devices. These addresses are whitelisted by the router. To activate the white list in the menu “Wireless | MAC Filter "for the desired network, select the" Enable "value and then" Permit only clients listed to access the wireless network ". This setting is responsible for the WLAN MAC addresses for which the wireless network is available.

Encrypted web surfing

A stable VPN connection is required to surf the web safely anonymously. First you need to get access to the VPN service. We took NordVPN as an example; with other services, the setup is similar. In the menu “Setup | Basic Setup | Network Address Server Settings (DHCP) "for" Static DNS 1 "enter the address of the DNS server - in our case it is 162.242.211.137. Then for "Static DNS 2" enter "78.46.223.24". The required server addresses will be provided by the VPN service provider.

Then check the boxes next to Use DNSMasq for DHCP, Use DNSMasq for DNS and DHCP-Authoritative. Save the parameters, go to the “Setup | IPV6 "and click" Disable "here. After saving the settings, open the menu “Services | VPN ". Enable the OpenVPN client by clicking "Start OpenVPN Client" and set the "Server IP / Name" parameter to "nl1-ru1.nordvpn.com" for the Russian IP address. For "Encryption Cipher" use "AES-256-CBC" encryption, for "Hash Algorithm" use "SHA1".

Next, enable the "nsCertType verification" user password authentication function and open "Advanced Options". Enter your NordVPN login as your username and password. Then set the "Use LZO Compression" parameter to "Enable" and activate the "NAT" option. For the "Additional Config" parameter, enter the following commands, one below the other, without quotes: "persist-key", "persist-tun", "tlsclient" and "remote-cert-tls server".

In conclusion, you need to configure the certificates for the VPN, which the provider must provide - in our case with NordVPN, they are available on the page https://nordvpn.com/profile, which will become available after registration and authorization. Extract the certificates from the ZIP archive and copy the contents of the CA.CRT file into the "CA Cert" field in the router settings. Transfer the contents of the TLS.KEY file to "TLS Auth Key" and save the changes.

DNS Hacking Protection

One of the new methods of hacking using spoofing of the IP addresses of DNS servers, leading to the invisible redirection of requests from a real site to a phishing site disguised as it, is to convert the domain name to IP. To exclude the possibility of such manipulations, only certain DNS servers should be allowed. On the Services | Services "in the" DNSMasq "section, activate the" DNSMasq "and" Local DNS "options. For Additional DNSMasq Options, enter the following four lines: no-resolv, strict-order, server = 208.67.222.222, and server = 208.67.222.220. Then save the settings by clicking “Save” and activate the configuration (“Apply Settings”).

Optimizing performance

Correct performance settings will allow you to find the best home network channel, optimize the power of the radio module, and therefore increase the data transfer rate. In addition, you can extend the wireless network to areas of the apartment that were still outside of its coverage area.

Coverage to the last corner

To improve network coverage, you need to accurately set the transmitter power of the router. In the menu “Wireless | Basic Settings "for the desired network, select" Advanced Settings ". Here, to increase the signal strength in the "TX Power" option, you can enter the desired value in decibels relative to milliwatt (dBm). In Russia, the ceiling for 802.11ac devices is 23 dBm, in the US - 30 dBm. For safety reasons, the default values ​​are set below the maximum allowable, which affects the transmitted signal strength. Set the maximum values ​​for the best network coverage.

Connecting old WLAN devices to a new network

Modern routers have a security mechanism that allows even older 802.11b devices to work optimally on the network - for example, in cases where 802.11b and 802.11g devices simultaneously send data to the router over the same channel. Before starting traffic, the 802.11b device sends a short request to send (RTS) signal, and the router sends a clear to send (CTS) signal. This mechanism prevents conflicts in the access of two devices to the third, but reduces the speed.

If you are not using 802.11b devices on your home network, you can completely disable it in the “Wireless | Basic Settings ”DD-WRT protection function. To do this, set the "Protection Mode" function to "None" in the additional settings. However, you can optimize the speed even if you are using 802.11b devices. Set Protection Mode to RTS / CTS and enable the RTS Threshold option by setting it at 2340.

Optimal bandwidth allocation

The NAT / QoS tab allows you to define the available bandwidth for different networks and devices. For example, you can cut the bandwidth for the IoT network, and set the priority for the smartphone. Start the QoS service by clicking on the "QoS" section on the "NAT / QoS" tab, and set the "Start QoS" option to "Enable". Set “Port” to “WAN”, “Packet Scheduler” to “HTB”. Set flow control "Queueing Discipline" to "FQ_CODEL".

Next, enter for "Downlink" and "Uplink" a value equal to 95% of the maximum bandwidth of the Internet connection. The remaining five percent should be left in case of failures if the connection becomes overloaded. Otherwise, when the connection is fully loaded, you will not be able to download anything or change the settings.

You can measure the incoming and outgoing speed using the corresponding online services, such as, for example, speedtest.net/ru. And to set the bandwidth for the wireless network, in the "Services Priority" section, select the desired network, click "Add Service" and enter the desired speed values.

To set a specific bandwidth for a specific device, use the "MAC Priority" option. Enter the required MAC addresses and set the required values. The MAC addresses of the devices are located in the “Status | Wireless | Wireless Nodes ".

Additional functions

In addition to managing external drives and multimedia server functions, DD-WRT can do one more thing that routers with factory settings do not offer: block tracking scripts for advertising services.

File server from router

To connect external drives and USB-sticks to your home network using a router with DD-WRT, in the menu “Services | USB ”, enable the options“ Core USB Support ”,“ USB Storage Support ”and“ Automatic Drive Mount ”. After saving and applying the configuration, insert external drives into the USB port of the router.

Then open the menu “Services | NAS ”and enable the“ Samba ”option. For the server string "Server String" specify the name of the router's network of your choice, for "Workgroup", respectively, the name of the workgroup. For “File Sharing | Path to Files ”select the external storage and give the object a name.

Shared files can be found in Windows 10 Explorer by going to My Computer. Left-clicking on the option in the top menu "Map network drive", you can assign a drive letter to a folder with open access. By the way, the amount of disk space can be seen from a smartphone or smartwatch: the DD-WRT application is available for download in the official Apple and Google app stores.

DD-WRT can provide access to data stored on external drives as a DLNA server - that is, a server for broadcasting multimedia. Smart TVs thus receive content directly from the drive.

Block ads for all devices

Now you no longer need a third-party ad blocker to disable aggressive ads - this will be done by a router. In the menu “Services | Adblocking ", activate the" Privoxy "and" Transparenter Mode "options and whitelist the sites on which you do not need to block ads (for example, ichip.ru), and then save the configuration and apply the created changes by clicking" Apply ". To make sure ad blocking works as expected, enter the URL config.privoxy.org into your browser. If the blocker page opens, then everything is in order.

As a member of the Dom.ru Club affiliate program, you can use your accumulated points to pay for Dom.ru services. This can be done in the Personal Account of the Affiliate Program: Go to the "Spend points" section and select the replenishment section ...

As a member of the Dom.ru Club affiliate program, you can use your accumulated points to pay for Dom.ru services.

To find out which router you have, see the model on the underside of the case. Instruction OR FROM THE OFFICIAL SITE ES ...

To view the history of payments and charges, log in to your Personal Account. You can find out how to log in to your Personal Account here. Select the menu item "Payments" - "Balance history". O...

There are two ways to increase the speed of Internet access: * Activate the "Increase Speed" service. * Change your tariff plan to a faster one. HOW TO CONNECT THE SPEED INCREASE SERVICE: Go to your Personal Account. Learn how to log in ...

To configure PPPoE, open your browser and enter 192.168.1.1 in the address bar. Enter your authorization data: Username SuperUser Password Beeline $ martB0x Press the "Continue" button. Click the "Advanced Settings" button. ... In expanded us ...

APPEARANCE OF THE REMOTE REMOTE CONTROL POSSIBILITIES A universal remote control (RC) is a universal device that can replace two remote controls, namely, with this remote control you can control a subscriber set-top box (STB) and a TV (T ...

To find out which router you have, see the model on the underside of the case. Route setup instructions ...

Choosing a home router usually comes down to the fact that you go to the store and buy what they recommend to you, and preferably for a small price. Then there are variations on the theme whether you need WiFi or not, printer support, and perhaps that's all. And now I have a Dlink DIR-320 in my hands. To be honest, I needed the DIR-320 for flashing it into a completely different device. But before starting my experiments with him, I decided to test it, so to speak, for its intended purpose.

It makes no sense to give the technical characteristics of Dlink DIR-320, whoever needs it can easily find them.
I would like to dwell on its interesting features and types of firmware for it with subsequent testing.
As you can imagine, there are both official and non-official.

Part one - official

At the time of this writing, the latest firmware was downloaded from the official site under the number: 1.21
Supported protocols for working with providers: Static IP, DHCP, PPPoE, L2TP, PPTP.
This means that you can connect DIR-320 to almost any provider. And the most interesting thing is the support of the MPPE128 encryption protocol, but only for PPTP, it is not possible to persuade the router to connect via L2TP using encryption by standard means.
The wireless standard for WiFi is 802.11g with its 54Mbps.
USB port for connecting a printer. For fun, I tried it with my MFP Cannon MP600 - printing occurs immediately and without any problems. The scanner did not check.
Now the actual topic of the question.
What real speed can DIR-320 provide? And here's what I did.

I think the organization of the table will be clear to everyone. Now let's talk about meanings.
LAT - LAN - 95 Mbps means that there are no internal restrictions in the 4-port switch.
LAN - WiFi - 27 Mbps at a distance of half a meter. Many will ask, where are the promised 54? There was no, no and never will be.
Understand there is a big difference between the theoretical peak and what it actually is, this applies to all devices with WiFi, and the DIR-320 is no exception in this regard.
Walking around the apartment with a laptop, the speed did not drop below 20 Mbps, which is a very good result.
Connecting to an ISP via a regular IP (without add-ons like PPTP or L2TP) gives excellent results and connecting even the fastest Internet tariffs with such a scheme makes sense.
But PPTP, through which regional providers are so fond of connecting, does not indulge in speed at all - only 12 Mbps.
This suggests that if your tariff plan gives you the right to a speed of more than 10 Mbit / s, then you simply will not be able to enjoy access to the worldwide network at full speed. In fact, the router will not pass more than 10 Mbps through itself.
The speed drops even more if you enable MPPE encryption, but as a rule, providers do not support it, and by the way, it’s in vain!
L2TP looks a little better, so if your ISP supports PPTP and L2TP connections, then you should give preference to the second protocol.
Now I will try to summarize the standard firmware and the device as a whole.
The functionality is really rich, the organization of the settings is quite simple, the wireless connection also works fine. An excellent device for its very little money.
If your ISP only supports PPTP or L2TP connections,
and you want to surf the network at speeds of more than 10 Mbps, then you need a more serious router. In other cases, this is a great choice.

Part two - official but for some reason forgotten Yota>

Some time ago, under DIR-320 at the office. the site had a firmware version for the router to work with Yota. I was very surprised when I did not find her website ...
The guys from Dlink, they really refused to comment on Yota, they say yes it was before, now it is not and will not be. And in vain, many people need a cheap router with support for Yota USB modems. I don’t know who and with whom didn’t share what, but in general, the company's policy is now as follows ...
By truth and not quite by truth, I managed to get the latest firmware version that was on the Dlink website (links at the end of the review).
So: generic-2.0.130 with Yota support.
Unfortunately, I did not find a Yota USB modem, so I will limit myself to testing without it.

In general, the indicators are worse, and this is saddening.
Only L2TP has significantly improved throughput. But MPPE encryption is not available in general.
And a few words about the interface. Unlike the official firmware 1.21, where the interface looks very clear and user-oriented, this web interface can frighten even experienced system administrators with its indistinctness and confusion.
So, if you don't need Yota support, then my advice to you is to stay on the official firmware 1.21.

Part three - not official or DD-WRT

Immediately to get a clear answer what is hidden behind this abbreviation, I did not succeed, so I will say it in my own words.
DD-WRT is an alternative firmware that expands the functionality of a number of devices, including the DIR-320.
There are various types of it, slightly differing in the functionality wired into them. For example, there are firmwares that allow you to turn your DIR-320 into a VPN server, or make a file storage out of it. Those interested can always experiment.
Coming back to Yota, initially there is no support for it in DD-WRT!
You will not be able to flash DD-WRT from the built-in Web interface; here you have to act a little differently.
There are instructions on how to flash it on the net. I offer you my version, which will provide you with the result in the shortest possible time.

First of all, download the firmware file by entering the name of the DIR-320 model into the search bar.
There will be several options for the ride to choose from. I chose the standard dd-wrt.v24_std_generic.bin
We put it, for example, in C: \ DIR-320
In the same directory, create a flash.bat file with the following content:

code:
@Echo Off
: BEGIN
arp -d
ping -n 1 -w 10 192.168.0.1
If errorlevel 1 Goto BEGIN
If errorlevel 0 Goto FLASH
Goto END

: FLASH
Echo *** Start Flashing ****
tftp -i 192.168.0.1 put dd-wrt.v24_std_generic.bin

I won't go into the details, it's just necessary and that's it :) Oh, if you don't have tftp in your Windows components, install it, there are plenty of instructions on the network.
In order for everything to go successfully, we do it exactly as I wrote.
We assign 2 addresses to the network card 192.168.0.10 and 192.168.1.10 mask 255.255.255.0 We connect our network card with a cable directly to LAN 1 port of DIR-320, everything else from the router must be disabled for the duration of the firmware.

Further point by point:

2. Run the flash.bat file as Administrator
3. Clamp RESET on the router
4. Turn on the power, while all the lights on the router should light up
5. We are waiting for them to go out and only LAN1 will remain on, wait for EXACTLY 4 seconds and only then release RESET.

The LAN1 indicator should blink intensively for 2-3 seconds, which will indicate that the filling has started.
Somewhere in 2-3 minutes you can knock on the new address 192.168.1.1 where you will be asked to SET the administrator login and password. Oh yeah, I almost forgot to say, you just lost your warranty :)

So I will not talk in detail about the functionality, who can be interested in seeing it for themselves, I can only say that it has become richer, but at what cost?

Are you surprised? I honestly say too. Not only did the router become slower in all respects, it also refused to connect via PPTP!
After I, so to speak, from personal experience, tested DD-WRT, I personally do not understand all the praise for flashing DIR-320 to DD-WRT. Personally, I just don't need all this functionality with such a drop in bandwidth in all respects.

Part four - back or return everything as it was

I did not succeed in flashing my native firmware via tftp in a similar way. Here you need to act a little differently.
Further point by point.

1. The router must be turned off.
2. Run the command arp -d
3. Run ping 192.168.0.1 -t
4. Clamp RESET on the router
5. Turn on the power, while all the lights on the router should light up
6. We are waiting for them to go out and only LAN1 will remain on, wait for EXACTLY 4 seconds and only then release RESET.
7. We go through the browser to the simplified Web interface where we select the file with the official firmware.

After a couple of minutes, the firmware will be completed.
Many other Dlink products can be brought back to life in a similar way. It is important to run ping 192.168.0.1 -t. For reasons that are not clear to me, if this is not done, then the bootloader simply flies, and the device will either reset its settings or continue to boot normally, depending on how much patience you will have to RESET.

Summarizing
If you just need a good home router, feel free to stop at the official firmware and do not invent it. If you need Yota support, then it makes sense to either try the office. firmware with Yota, or even choose another device, since Dlink has stopped all support for the combination of DIR-320 and Yota, which is extremely sad.
Masochists ... in the sense of enthusiasts, they can try third-party firmware like DD-WRT, but after testing it, using DD-WR for normal purposes seems much more harmful than useful.

The Dlink dir-300 wireless router is a kind of dinosaur among the routers of its class, suffice it to say that after the first model Dlink dir-300 became obsolete, various analogs of Dlink dir-300 B1, B2, B3, B5, B6, B7 began to appear which surpass in terms of speed and functionality of its prototype.

Before updating the firmware, be sure to check the hardware revision (H / W) of your router. To do this, take a look at the sticker on the bottom of the router. This sticker has an inscription that begins with "H / W Ver .:"

IMPORTANT NOTICE! DIR-300 H / W Revisions A1 and B1 are DIFFERENT devices with different SoCs (System-on-a-Chip), and, accordingly, incompatible firmware.

The Rev B1 router is based on the Ralink RT3050 SoC, and according to all reports including the "Dlink" s FCC test report, its PCBA (printed circuit board) is exactly the same as in the DIR-600.

By default, the router has an IP address of 192.168.0.1, login - "admin", with an empty password.

To install DD-WRT on your D-Link DIR-300 Revision B1-B3, you just need to flash it directly from the standard web interface.

Installing the firmware

1. http://dd-wrt.com/site/support/router-database by selecting the DIR-300 B1 model. There are two files, "" and "dir300-revb-ddwrt-webflash.bin". You only need factory-webflash, save it on your computer
2. We connect the computer's network card to any LAN port on the DIR-300 using an Ethernet cable. The cable must be used "straight"!
3. If you have set to automatically obtain IP addresses, the computer will receive an address from the DHCP server of the router, from the subnet range 192.168.0.0/24. Or assign an address from the specified subnet in the properties of the network interface by hand. For those who like to ask again: set the IP address 192.168.0.10, mask 255.255.255.0, gateway 192.168.0.1.
4. We launch the browser (it is best to use it) and type the address http://192.168.0.1/ - a standard form with a login / password will open to enter the web interface of the router.
   1. The default login is "admin", the password is empty; also type the confirmation code from the picture.
   2. Go to Maintenance -> Firmware Update.
   3. Click "browse" -> select the downloaded file " dlink-revb-factory-webflash.bin"-> click" Upload ".
   4. WAITING for 2-3 minutes while DIR-300 fills the image and updates. DURING THE FIRMWARE PROCESS, DO NOT DISCONNECT THE POWER, DO NOT CUT! It is best to generally sew a router by connecting it (and a computer) to a UPS.
   5. The router will go to reboot, and in the browser we will receive a response about a non-existent page (since DIR's address has changed). If the firmware is successful, the router will load DD-WRT and its LAN IP will change to 192.168.1.1.
5. We go to the address http://192.168.1.1/ (you may have to change the IP address on the computer, if it was set by hand, to the corresponding one from the 192.168.1.0/24 subnet) - the DD-WRT web interface should open. A little subtlety - at the first start, the router will ask you to change the default username / password (root / admin).
6. Next, we configure DD-WRT as you need, not forgetting to apply the changes.

How to update DD-WRT firmware

Download the latest firmware from http://dd-wrt.com/site/support/router-database by selecting the DIR-300 B1 model. There are two files, "dlink-revb-factory-webflash.bin" and "". You only need ddwrt-webflash, save it on your computer.

1. Open the DD-WRT web interface in a browser. By default, this is http://192.168.1.1/.
2. Go to Administration -> click "Firmware Upgrade"
3. Click "browse" -> select the saved file " dir300-revb-ddwrt-webflash.bin"-> click" Upgrade ".
4. We are waiting for about 1.5-2 minutes while the router fills the image and updates. Then the browser will refresh the page, so everything went well.

• After a successful flashing, it is imperative to reboot the power supply router (that is, turn it off and on)

DD-wrt supports Russian out of the box, which is very convenient.

I will give as an example the speed of downloading a torrent on the updated firmware.

How to return the official D-Link firmware

The firmware update procedure can also be used to return the original firmware to the router. Download the firmware from the official FTP D-Link (ftp://ftp.dlink.ru/pub/Router/DIR-300_NRU/Firmware/) and flash the router as indicated in the section "How to update the DD-WRT firmware" (of course, the official firmware). Also, in this case, you need to reset the router settings to factory settings by selecting the appropriate item in the firmware update menu.

Method number 2. Firmware recovery via Emergency Room.

1. Reset to factory reset our router, you can use the DD-WRT web interface.
2. We pull out the provider's cable (Internet), leaving only the connection to the computer - "straight" (blue from the kit), connecting the PC and the LAN1 port of the router.
3. We register on the network computer a static address 192.168.0.10, a subnet mask 255.255.255.0
4. We pull out the power supply, hold down the reset button and, without releasing the button, insert the power supply, wait for the router to load (15 seconds are enough, count to 25). Then release the button.
5. Open Firefox (IE, Opera failed to start, and did not understand why), go to http://192.168.0.1 - the Emergency room opens. Select the firmware file downloaded from the official FTP D-Link (let the path to the file be in English, like C: \ temp \ DIR300B1_v201_97rg.bin) and click "Upload Now". A message will appear that the file has been uploaded and stitched, and the countdown is going on. After rebooting the router, you get it in its original form.

• It is advisable to reset the router to factory settings after a successful flashing

Corresponding to your router model and its hardware version.

Download DD-WRT firmware to the router. How to do this for TP-Link routers is written. Instructions for changing the firmware for other router manufacturers can be found on the DD-WRT developer's website or on their forum.

After updating the firmware, enter the address into the browser 192.168.1.1 ... You will see a page asking you to enter a new username and password. Enter them and be sure to write down.

Let's move on to configuring the router. Select from the menu Setup - Basic Setup... In chapter Network Setup in field Local IP Address write down 192.168.99.1 , this will be the new address for your router. We are changing it in order to exclude possible network conflicts with other routers in your network in the future. Which you most likely have.

In Local DNS prescribe DNS server ip address - 8.8.8.8

On the same page in the section Network Address Server Settings (DHCP) turn off 3 options Use DNSMasq for DHCP, Use DNSMasq for DNS, DHCP-Authoritative

Attention, after applying the parameters, the address of the router will change to 192.168.99.1

In order not to lose control over the router, we will configure remote access from the external network via the WAN port. Go to the page Administration - Management... In chapter RemoteAccess include in options Web GUI Management mark HTTP... After that, the router will be available at its external ip address and port 8080.

Let's move on to setting up a WiFi access point. Open the page Wireless - Basic settings... In field Wireless Network Name (SSID) enter the name of your WiFi hotspot, for example, the name of your establishment.

It is possible to use only English letters, numbers and symbols in the name of the hotspot. Cyrillic letters cannot be used.

Go to the page Wireless - Wireless Security, make sure the option Security Mode is in a state Disabled.

Now let's go directly to setting up the hotspot itself.

• Open the page Services - Hotspot
• In chapter Chillispot activate the option Chillispot, setting the mark Enable
• in field Primary Radius Server IP / DNS enter radius.site
• in field Backup Radius Server IP / DNS enter radius2.site
• v DNS Server IP enter 8.8.8.8
• v Redirect URL enter https: //auth.site/hotspotlogin
• v Shared Key enter key wfs123
• v Radius NAS ID enter your hostpot ID from your personal account
• in field Uam secret enter your hotspot password from your personal account
• in field UAM Allowed enter

95.167.165.64/27,195.14.118.0/23,91.229.116.0/22,213.59.200.64/28,91.200.28.0/24,91.227.52.0/24,198.241.128.0/17,66.211.128.0/17,216.113.128.0/17,paypal.com, paypalobjects.com, paymaster..paymaster.ru, www.paypal.com, www.paypalobjects.com, www..site, support.site, lk.site, account.site, s1.sites, s2.sites, s3. site, s4.site, s5.site, s6.site, s7.site, s8.site, s9.site, s10.site, s11.site, s12.site, s13.site, s14.site, s15.site, s16.site, s17.site, s18.site, s19.site, s20.site

For social networks, you must additionally specify the addresses:
103.4.96.0/22,104.108.32.0/20,104.244.40.0/21,107.20.0.0/14,157.240.0.0/16,173.194.0.0/16,173.252.64.0/18,184.84.0.0/14,185.16.244.0/22,185.29.130.0/24,185.32.248.0/22,185.45.4.0/22,188.166.114.0/24,192.133.76.0/22,199.16.156.0/22,199.201.64.0/22,199.59.148.0/22,199.96.56.0/21,2.20.254.0/24,2.21.7.0/24,204.15.20.0/22,212.30.134.0/24,213.180.193.119,217.20.144.0/20,217.69.128.0/20,23.64.227.0/24,31.13.0.0/16,34.192.156.0/24,34.194.135.0/24,34.194.67.0/24,34.198.69.0/24,34.200.158.0/24,34.200.33.0/24,45.64.40.0/22,46.101.169.0/24,5.61.16.0/21,52.0.0.0/11,54.144.0.0/9,54.88.138.0/24,54.88.208.0/24,64.233.160.0/19,66.220.144.0/20,69.171.224.0/19,69.63.176.0/20,74.119.76.0/22,74.125.0.0/16,8.25.195.0/21,87.240.128.0/18,87.250.250.0/23,93.158.134.0/24,93.186.224.0/20,95.142.192.0/20,95.167.165.90/24,95.213.0.0/18

Possible problems

Make sure you don't inadvertently enter extra spaces in the UAM Allowed field, or something might not work. In case you are using beta DD-WRT firmware, will need to be in the fields Primary Radius Server IP / DNS and Backup Radius Server IP / DNS write instead of names radius1.site and radius2.site their IP addresses 195.14.118.42 and 95.167.165.93