Updated 2020: Switched to another Router some time ago, need to update some info.

Hardware

• GL.iNet GL-MT6000 (Flint 2)

  • https://www.gl-inet.com/products/gl-mt6000/
  • https://openwrt.org/toh/gl.inet/gl-mt6000/

• Netgear Nighthawk X4S R7800

  • https://netgear.de/home/products/networking/wifi-routers/R7800.aspx (Archive)
  • https://openwrt.org/toh/netgear/r7800 (Archive)

• TP-LINK Archer C7 AC1750 Version 2.0

  • https://openwrt.org/toh/tp-link/archer-c7-1750

• BananaPi BPi-R3

  • https://openwrt.org/toh/sinovoip/bananapi_bpi-r3

Installation

• Download correct image from: https://firmware-selector.openwrt.org/

Simply upload OpenWrt firmware using the firmware-upgrade page.

BPi-R3

• Get SD Card image, flash using e.g.RPi Imager

• Boot in SD mode, with NOR active (Switches: 1,1,0,1)

• Connect via ssh, execute fw_setenv bootcmd "env default bootcmd ; saveenv ; run nor_init ; bootmenu 0", then reboot

• Wait, power-off

• Boot in NOR mode (Switches 0,0,0,0)

• https://docs.banana-pi.org/en/BPI-R3/GettingStarted_BPI-R3 (Archive)

• https://oopflow.medium.com/how-to-setup-banana-pi-r3-with-openwrt-d958514b47a5 (Archive)

• https://www.computerbase.de/forum/threads/openwrt-mit-dem-bananpi-bpi-r3.2129506/ (Archive)

Setup

• SSH Access: Interface "lan"

• NTP: 0.openwrt.pool.ntp.org

• Set admin password, change timezone, limit SSH Access to LAN,

ToDo

Routing

The WAN port and a single of the other ethernet ports should be in seperate VLANs

• Switch (VLAN): VLAN enabled

  ID	Desc	CPU(eth0)	CPU(eth1)	LAN 1	LAN 2	LAN 3	LAN 4	WAN
  1	Local	off	tagged	off	untagged	untagged	untagged	off
  2	Inet	tagged	off	off	off	off	off	untagged
  3	Guest	off	tagged	untagged	off	off	off	off

• Wireless

  • radio0 (5Ghz/AC)
    • Device
      • Frequency: AC
      • CountryCode: default or own country.
    • Interfaces:
      • SSID: MYWIFI-AC: Access Point, Network(lan), WMM Mode, WPA2PSK
  • radio1 (bgn)
    • Device
      • Frequency: N
      • CountryCode: default or own country.
    • Interfaces:
      • SSID: MYWIFI: Access Point, Network(lan), WMM Mode, WPA2PSK
      • SSID: MYGUEST: Access Point, Network(guest), WMM Mode, WPA2PSK, Isolate Clients

• Devices

  • Bridge br-lan (eth1.1)
  • Bridge br-guest (eth1.3)

• Interfaces:

  • LAN: device(br-lan), Static 192.168.0.1/255.255.255.0, DHCP 150-200,1h
  • WAN/WAN6: eth0.2
    DHCP client, use default gatway, use dns servers advertised, DHCP ignore interface
  • Guest: device(br-guest), Static 192.168.11.1/255.255.255.0, DHCP 100-150,1h

• Firewall:

  • General: Input accept, Output accept, Forward reject
  • Zones:
    • lan: accept, accept, accept, network(lan), forwarddest(wan/wan6)
    • wan: reject, accept, reject, masquerading, mss clamping, network(wan/wan6), forwardfrom(guest,lan)
    • guest: reject, accept, reject, network(guest), forwarddest(wan/wan6)
  • Traffic Rules: Allow-DNS/DHCP-Guest Incoming IPv4 and IPv6 From guest To this device, port 53, 67, 68

• Port Forwarding:

  • wan incoming 443 -> NAS 8443
  • wan incoming 80 -> NAS 8080

• DHCP Static Leases

  • mypc 192.168.0.55
  • [...]

• HostNames

  • router.lan 192.168.0.1
  • [...]

USB Printer

• Install

    opkg update
    opkg install p910nd luci-app-p910nd kmod-usb-printer

• Config
  Webinterface: Services > p910nd - Printer Server

        Enable: Yes
        Device: /dev/usb/lp0
        Interface: lan
        Port: 9100
        Bidirectional mode: Yes

Adblock

After playing around with various Adblockers on my mobile devices and PCs as well as the PiHole project, I found that there is actually a similar solution available for OpenWrt routers.

• Install

    opkg update
    opkg install adblock luci-app-adblock libustream-mbedtls

DDNS

• Install (wget for ssl)

    opkg update
    opkg install ddns-scripts luci-app-ddns wget

• Config:

    mydns_ipv4
    home.domain.tld
    IPv4
    <ddns-service-url>
    <username>
    <password>
    Use https
    IP Address source: Network

Usage Overview/Stats

List Usage by devices (when searching for the hungry devices that disturb your experience)

• Download

  • latest .ipk file from: https://github.com/pyrovski/wrtbwmon/releases (0.3.6 in my case)
  • latest .ipk file from: https://github.com/Kiougar/luci-wrtbwmon/releases (0.8.3 in my case)

• Install

    opkg install wrtbwmon_*_all.ipk
    /etc/init.d/wrtbwmon enable
    /etc/init.d/wrtbwmon start
    opkg install luci_wrtbwmon_*_all.ipk

• Alternatively: luci-app-statistics

Mobile (LTE/4G) WAN

Onboard:

• BPI-4G LTE Module SIM
• https://openwrt.org/docs/guide-user/network/wan/wwan/ltedongle (Archive)

Surfstick

• https://openwrt.org/docs/guide-user/network/wan/wwan/modemmanager (Archive)
• https://forum.banana-pi.org/t/bpi-r3-bpi-4g-lte-module-sim/16518
• https://gist.github.com/bjoern-r/1345e8a17f4acf41006330e688af1441 (Archive)

Connectivity values:

• RSRP (-50 -> -140): https://www.lte-anbieter.info/technik/rsrp.php
• RSRQ (-3 -> -20): https://www.lte-anbieter.info/technik/rsrq.php

References

• https://www.tp-link.com/de/home-networking/wifi-router/archer-c7/

• https://www.tp-link.com/de/support/download/archer-c7/v2/

• https://openwrt.org/toh/tp-link/archer-c7-1750

• https://openwrt.org/docs/guide-user/services/print_server/p910nd.server

• https://openwrt.org/docs/guide-user/services/ad-blocking

• https://github.com/openwrt/packages/blob/master/net/adblock/files/README.md

• https://github.com/Kiougar/luci-wrtbwmon

• https://forum.openwrt.org/t/top-ten-routers-currently-in-use/30199/4

• https://forum.openwrt.org/t/r7800-performance/15780/283

• https://forum.openwrt.org/t/ipq806x-nss-build-netgear-r7800-tp-link-c2600-linksys-ea8500/82525/3051

• https://forum.openwrt.org/t/slow-r7800-2-4ghz-transmits/148282