Hello,
first of all, i am completely new to this whole OpenWRT and OpenSource software/hardware stuff, but i am willing to get into it.
The first project for me as an webdeveloper was to create a home-webserver environment (Ubuntu Server 18.04). Went well so far, but on my way throught a lot of forums an other articles i went deeper an deeper and now i want to build up a secure homenetwork for my family.
Specs:
I live in Germany
I have a 400mbit/s internet connection with cable router/modem (compal ch7466ce) from Vodafone
1 Desktop (LAN/Gigabit)
1 Webserver (LAN/Gigabit)
1 TV (LAN/Gigabit)
1 Laptop (WLAN/2,4Ghz)
2 iPhones (WLAN/5Ghz)
What i want to to.
Replace Routerfunction of CH7466CE in Bridgemode
Buy and integrate new router with OpenWRT
Run DNS for home domain
4, Run DHCP for WLAN Devices
Run OpenSource firewall
Use VPN Service for all my homenetwork devices
Create WLAN for 2,4/5GHz Devices (perhaps guest network)
My questions:
Since i am new to this OpenWRT World i thought an easy to manage device (like Archer C7 AC1750) would fit my purpuse but then i came across some issues
Is it correct that the nat performance of this type of routers cannot handle 400MBit WAN to LAN without any "snapshot stuff" being done? (I picked up those info while reading alot of stuff and didn't have the time get in deeper)
Is the Archer C7 capable of running vpn service with a good downspeed?
I read alot about hardware the last 2 days and assume that i need a stronger router then ARCHER C7 to get the most out of my 400MBit bandwidth aspecialy when using VPN. So hardware whise i stumbled upon Linksys WRT3200ACM-EU.
Pretty expansive i think, but if it fits all my need i will go for this device.
What downspeed is to be expected when using VPN service link NordVPN or others on WRT3200ACM-EU?
Is there a free posibility to use vpn servers? or are all of them monthly paid?
Last question for now:
Firewalls. Is the fw3 Firewall integrated in OpenWRT a good and secure one or is something like pfsense better?
Yes you will want more CPU than the Archer C7 has. VPN at 400 Mb almost demands an x86. If it weren't for that, one of the WRT3200 / 32X would be suitable.
Your webserver is probably just sitting there most of the time, you could certainly consider running OpenWrt x86 version in a VM on that machine (assuming it's an x86 not a RPi or similar), that should handle 400Mbps routing and even SQM.
If you go this way, it would be good obviously to have an access point for wifi... the Archer C7 you mention would work fine for a "Dumb AP" setup (no routing / NAT, just wifi) you can get them used, but there are also good more modern devices, such as the gl-inet b-1300 or similar.
I like the gs1900 series from them but don't know anything about the 1200 series. The tl-sg108e from tp-link would work, I bet it's comparable to this one. Features you need are multiple tagged vlans, and QoS would be good too.
Hello again,
here i am a few steps later.
I now have set up an VirtualBox OpenWRT on my ubuntu server 18.04 LTS and bought an Zyxel gs1900-8HP (used) for 50€ on Ebay waiting to be delivered.
Better Wifi will be next step when lan is finished.
Now my server (IP 192.168.0.1) is able to connect to ssh root@192.168.56.2.
But the other devices in my testing-lan-setup (desktop/ip:192.168.0.10) don't.
Can you give me a quick hint why?
Probably it's easy but i don't get it. maybe to much new stuff for today.
Thanks.
A router is inherently a device which has multiple IP addresses on multiple different networks.
The two networks you mention are, I assume,
192.168.0.0/24 and 192.168.56.0/24
Which one is "wan" and which one is "lan" is my next question.
Furthermore, your router has just one physical interface, so it must use VLAN tags to tell the switch which network the packets belong to... So the openwrt should use eth0.1 and eth0.2 as the tagged VLANs to talk to the switch. You can not do that with an unmanaged switch, you must have a managed switch that understands vlan tags.
So, given that information, can you help us understand how you're setting up vlans and how you're numbering your networks on the VM?
My managed switch is not delivered yet.
I wanted to play along with OpenWRTs WebInterface before it arrives, but as i now assume i need to wait to get things going.
I just wanted to connect throught my client since the server does not have a UI installed. i will wait and come back when my hardware is complete.
I am not sure VM software you are using but on VMware workstation if you want you VM on the same subnet as the host you set the network to "bridged" in settings