Configure OpenWRT in a apartment building?

Installing and Using OpenWrt
1

Hello,

I’ve moved into an apartment building where the fiber optic internet is shared among four parties. I don’t have access to the main router. Currently, I have the LAN cable coming from the main router plugged into a LAN port on my own router (running OpenWRT).

How can I ensure that my own network is completely isolated and secure from the other three parties in the house? I read about this a few weeks ago but can’t remember the correct term for it. I believe I need to plug the LAN cable into the WAN port, but how do I correctly configure OpenWRT?

I appreciate any help!

Best regards

2

What kind of router you have?
Basic setup would be 4 guest networks leaving management wired.
How to fairly share pipe - depends on the router, on slower ones tbf-limit traffic per "customer" on the greater one use whichever QoS framework to slow abusers torrents.

3

Nobody here has access to the main router; only the management company does. That's why I want to set up my own network using my own router.

I just found out that at my old place, my router had the IP 192.168.0.2. Now, in this network, I can't access its web interface anymore unless I manually assign my Windows PC a static IP like 192.168.0.xx—only then can I reach the LuCI interface...

Currently, all other devices are getting IPs in the 172.26.181.xxx range.

Unbenannt
Unbenannt1033×1239 42.8 KB

4

Why not WAN (as would normally be suggested)?

Because you plugged your apartment's network into your LAN for some reason. I'm not sure why you wouldn't use the WAN interface.

  • Plug the apartment network into WAN
  • Create other networks on thr OpenWrt for the other parties - the other user has offered suggestions
1 Like
5

As @Lleachii mentioned, why can't you configure your router and use its WAN interface?

In that case, you would create your local network isolated from the main network, you would just have a double NAT along the way.
If the double NAT isn't a problem for you, I believe you could at least try using this configuration.
Remember, using the WAN interface, you create your local network isolated from the main router's network, but you end up with double NAT...
If you use the LAN port, your network will be part of the main router's network, at least, of course, if whoever configured it took the care to at least isolate the networks in the main router's firewall.

Guys, if I wrote nonsense, please correct me.

6

Thank you for your answers.

I wrote that I will be using the WAN interface, but I thought I would have to configure several things to ensure that my network is isolated.

Does double NAT have any disadvantages? Or do I just have to make sure that the ports are also open on the main router in the case of port forwarding?

LG

7

In your situation unlikely, since you can not configure the primary router's port forwarding and access rules anyways...
Typically the main argument against double NAT is that you need to always implement matched port forwarding rules and it is a bit of busy work to do so. Now

BTW consider updating your router OpenWrt23 is a bit outdated, 25.12 just was released...

2 Likes
8

thank your for your answer.
Now I upgraded the firmware 24.10.

I put the cable into WAN port and configured the router so:

pictures

1
11032×685 43.5 KB

2
2896×508 20.5 KB

3
3889×1100 48.4 KB

4
4897×218 13.4 KB

5
5894×262 8.72 KB

6
6889×653 23.6 KB

7
7903×217 12.2 KB

8
8964×766 27 KB

Is there everything right configured?

Thank you!

9

There was no need to redact the WAN IP, as it's a private RFC1918 address. Additionally, you already told us:

Looks good. I assume you kept [most of] the defaults anyway?

1 Like