I have several Linksys routers and I use one as DHCP server running Tomato and the rest as access points running stock firmware and DDWRT spread around my home office. To control bandwidth on certain APs I set a certain port on main router into a separate bridge and VLAN. Screenshot for reference.

VLAN setup bridge setup

Everything works fine and I can control bandwidth on anything connected on port 3. For some reason though I cannot access the web GUI of APs connected to port 3. I tried setting the AP's IP to 192.168.1.xxx and also 192.168.2.xxx per my bridge IP and none of them worked. Is there something wrong in my setting?

Thank you

  • 1
    Can you ping them?
    – qasdfdsaq
    Nov 9 '15 at 11:27
  • 1
    That suggests a basic connectivity problem, probably with your AP's IP address settings.
    – qasdfdsaq
    Nov 9 '15 at 12:26
  • 1
    Perhaps. Can you give ideas? As I have said I tried setting the AP settings to 192.168.1.xx and 192.168.2.xx with no luck. Bear in mind if I link Port 3 to br0 then everything works fine.
    – rabbid
    Nov 9 '15 at 15:54
  • 2
    If clients connected to the APs on VLAN3 can access the internet, it's probably a firewall setting on your APs.
    – qasdfdsaq
    Nov 9 '15 at 16:22
  • 1
    @doenoe that is what I thought. Not sure I understand the doc you linked to then. BUT with that doc I managed to solve this! Turns out I had to switch my AP's mode from Gateway to Router to disable NAT. Since you linked me to the doc I would be happy to give you the credit if you post an Answer. Thanks!
    – rabbid
    Nov 24 '15 at 9:14

Take a look at this link

Try the following:

With the routes configured it is now safe to disable NAT on Router2 and Router3 by switching their Operating Mode from 'Gateway' to 'Router' on the Setup->Advanced Routing page.


You said you are "setting the AP's IP to 192.168.1.xxx and also 192.168.2.xxx". Make sure you have netmask set to for them as well.

Also, make sure you are setting the LAN IP of the APs.

After you confirmed the above, if you login to your Tomato, you should be able to ping your APs. But if you ping from your PC connected to Tomato and it does not work, it is likely that the APs do not know the route back because your IP's address is an IP from a different LAN of the AP. Your APs need to have a default route correspond to and

  • Thanks for you your suggestion. I tried and can ping to from within Tomato. What does that tell me? Thank you @some-user
    – rabbid
    Nov 23 '15 at 14:05
  • You should always be able to ping from Tomato because I believe from your post that it is one of the IP addresses of your Tomato. You should verify if you can ping your AP IP (192.168.2.xxx in your post) from your Tomato.
    – some user
    Nov 23 '15 at 21:51
  • Very confused now. I swear yesterday I can ping to my AP to its IP which is Today I fiddled and changed it to because of an article I read and now I can't ping it from within Tomato. What is the correct IP I should use? .2.x or .1.x? Should I connect the ethernet cable to LAN or WAN? I have a suspicion that when I'm using .1.x I should use LAN, while on .2.x I should use WAN, although that's just a guess. Thank you
    – rabbid
    Nov 24 '15 at 2:07
  • You cannot just change your IP prefix without changing the LAN it is connected to. From your screen capture, you have 3 networks - LAN (br0), WAN and LAN1 (br1). If your AP is connected to LAN (br0) and you changed its IP from to, you won't be able to reach it again. You can however, remove the link to LAN1 (br1) and move LAN (br0) to LAN1 port and change the AP's IP back that way.
    – some user
    Nov 24 '15 at 7:12
  • That is correct, I am able to link Port 3 back to bro0 and connect to it again. I'm shooting blindly here, and instead of doing that perhaps you can suggest to me best settings to try instead? Thank you
    – rabbid
    Nov 24 '15 at 7:30

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.