Sign up ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I want to use my Tomato based router as a WiFi gateway to the outside world, but also use the internal WLAN SSID.

The reason is that I have a couple of devices that I do not want to connect to the outside WiFi world directly: I want to have them behind NAT.

I know I could do this with an extra access point on the LAN0..LAN3 ports or a WiFi CLIENT device that connects to the WAN port, but I don't want to add extra hardware.

What steps should I take to make this kind of setup:

| WiFi access provider                   |  (for instance FON)
     |  SSID X (remote WiFi network)
   Wireless Interface eth1
| Tomato 1.28 based router               X WAN port (not connected)
| Asus RT-N66U                           X LAN0 port br0 (not connected)
|                                        X LAN1 port br0 (not connected)
|                                        X LAN2 port br0 (not connected)
|   NAT                                  X LAN3 port br0 (not connected)
   Wireless Interface eth2
     |  SSID Y (local WiFi network)
| Devices not having LAN connection      |
share|improve this question
It might not be possible to mix "Wireless Client" with "Virtual Access Point" after a reboot of the router in the Shibby TomatoUSB build that is needed for the ASUS RT-N66U, as it fails on the RT-N16: – Jeroen Wiert Pluimers Jun 5 '13 at 7:17
It is possible to do this without NAT: – Jeroen Wiert Pluimers Jun 5 '13 at 8:05
It looks like with TomatoUSB, I need two devices… OpenWRT should be able to do it, but is not yet available for the N66U as the ticket is still open – Jeroen Wiert Pluimers Jun 5 '13 at 8:30
DD-WRT supports this for broadcomm, but only if the public WiFi is using WEP or WPA2: – Jeroen Wiert Pluimers Jun 5 '13 at 8:38
DD-WRT requires the 1.0.3 version of the CFE bootloader to support 64k NVRAM properly using this guide – Jeroen Wiert Pluimers Jun 5 '13 at 8:53

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.