Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I want to use my Tomato based router as a WiFi gateway to the outside world, but also use the internal WLAN SSID.

The reason is that I have a couple of devices that I do not want to connect to the outside WiFi world directly: I want to have them behind NAT.

I know I could do this with an extra access point on the LAN0..LAN3 ports or a WiFi CLIENT device that connects to the WAN port, but I don't want to add extra hardware.

What steps should I take to make this kind of setup:

| WiFi access provider                   |  (for instance FON)
     |  SSID X (remote WiFi network)
   Wireless Interface eth1
| Tomato 1.28 based router               X WAN port (not connected)
| Asus RT-N66U                           X LAN0 port br0 (not connected)
|                                        X LAN1 port br0 (not connected)
|                                        X LAN2 port br0 (not connected)
|   NAT                                  X LAN3 port br0 (not connected)
   Wireless Interface eth2
     |  SSID Y (local WiFi network)
| Devices not having LAN connection      |
share|improve this question
It might not be possible to mix "Wireless Client" with "Virtual Access Point" after a reboot of the router in the Shibby TomatoUSB build that is needed for the ASUS RT-N66U, as it fails on the RT-N16: tomatousb.org/forum/t-576470 –  Jeroen Wiert Pluimers Jun 5 '13 at 7:17
It is possible to do this without NAT: forums.smallnetbuilder.com/showthread.php?t=8195 –  Jeroen Wiert Pluimers Jun 5 '13 at 8:05
It looks like with TomatoUSB, I need two devices linksysinfo.org/index.php?threads/… OpenWRT should be able to do it, but is not yet available for the N66U forum.openwrt.org/viewtopic.php?pid=201295#p201295 as the ticket is still open dev.openwrt.org/ticket/10852 –  Jeroen Wiert Pluimers Jun 5 '13 at 8:30
DD-WRT supports this for broadcomm, but only if the public WiFi is using WEP or WPA2: dd-wrt.com/wiki/index.php/Repeater_Bridge –  Jeroen Wiert Pluimers Jun 5 '13 at 8:38
DD-WRT requires the 1.0.3 version of the CFE bootloader to support 64k NVRAM properly perkussionswartung.com/dd-wrt-on-the-asus-rt-n66u using this guide forums.smallnetbuilder.com/showthread.php?t=8259 –  Jeroen Wiert Pluimers Jun 5 '13 at 8:53

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.