Allow one single WAN device to connect to LAN

Installing and Using OpenWrt Network and Wireless Configuration
1

Hello everybody,

I have this configuration:

Internet
| 
L routerA (LAN 192.168.10.1) 
    |   |
    |   L PC1  192.168.10.198)
    |
    L routerB (OpenWRT-Wan:192.168.10.2-Lan:192.168.137.100)
         |
         L PC2 (192.168.137.9)

To provide more info: routerB's wifi is connected as a client to routerA's wifi, providing the bridge-lan internet connection. (routerB also as a guest-vlan on wan port, but this should not be important for this topic).

Basically what I want to do is to allow (only) PC1 to connect and use services provided by PC2, such as ping, mount network drives, connect to specific port...

I'm far from an expert, but playing with iptables (adviced by a more expert user) I managed to arrive at this point:

iptables -I INPUT -p icmp --icmp-type 8 -s 192.168.10.198 -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT
iptables -I OUTPUT -p icmp --icmp-type 0 -d 192.168.10.198 -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A INPUT -p all -s 192.168.10.198 -j ACCEPT
iptables -I FORWARD -i wlan0 -o br-lan  -j ACCEPT

But this doesn't work :frowning:

I hope I provided all info.

Thanks for any help

2

have you added a static route on each router to reach the other subnet ?

https://openwrt.org/docs/guide-user/network/routes_configuration

3

From routerB (and its subnet) I can by default reach routerA (and its subnet), so I guess a route for routerA is not needed (correct me if I'm wrong).

I'll read the doc provided to make a route for routerB and let you know, thankyou.

4

You are correct, my mistake

5

Ok, so I did what is in the link (I did from Luci, result should be the same)

config route
        option interface 'wwan'
        option target '192.168.10.198'
        option netmask '255.255.255.0'
        option gateway '192.168.10.1'

But this doesn't seem to work

6

You said it is working from routerB, you need to add static route to routerA like this, please double check it, I haven't tested example.

#network
config route
            option interface 'lan'
            option target '192.168.137.0'
            option netmask '255.255.255.0'   
            option gateway '192.168.10.2'

OR

#host
config route
            option interface 'lan'
            option target '192.168.137.9'   
            option gateway '192.168.10.2'
1 Like
7

Oh, right. The problem is routerA has not openwrt, since it's my isp's HG8245. I guess I'm stuck then... Any plan B?

8
  1. Add a static route to PC1

OR

  1. Double check RouterA doesn't have option for static route
9

Thanks for you patient.

  1. RouterA does have it...

1

but when I try to apply the route it fails:

2

  1. so as you adviced I tryied on PC1 sudo route add -net 192.168.137.0/24 gw 192.168.10.2 dev wlp2s0 and it does work.

Thankyou very very much!

1 Like
10

This topic was automatically closed 10 days after the last reply. New replies are no longer allowed.