Updated 2020: Switched to another Router some time ago, need to update some info.

Hardware

• Netgear Nighthawk X4S R7800
  • https://netgear.de/home/products/networking/wifi-routers/R7800.aspx (Archive)
  • https://openwrt.org/toh/netgear/r7800 (Archive)

Actually, I've been running OpenWrt for a while now, just now have some time to write some notes down.

• (previously) TP-LINK Archer C7 AC1750 Version 2.0
  • https://openwrt.org/toh/tp-link/archer-c7-1750

Installation

Simply upload OpenWrt firmware using the firmware-upgrade page.

Setup

• Hostname: OpenWrt

• SSH Access: Interface "lan"

• NTP: 0.openwrt.pool.ntp.org

• Set admin password, change timezone, limit SSH Access to LAN,

ToDo

Routing

The WAN port and a single of the other ethernet ports should be in seperate VLANs

• Switch (VLAN): VLAN enabled

  ID	Desc	CPU(eth0)	CPU(eth1)	LAN 1	LAN 2	LAN 3	LAN 4	WAN
  1	Local	off	tagged	off	untagged	untagged	untagged	off
  2	Inet	tagged	off	off	off	off	off	untagged
  3	Guest	off	tagged	untagged	off	off	off	off

• Wireless

  • radio0 (5Ghz/AC)
    • Device
      • Frequency: AC
      • CountryCode: default or own country.
    • Interfaces:
      • SSID: MYWIFI-AC: Access Point, Network(lan), WMM Mode, WPA2PSK
  • radio1 (bgn)
    • Device
      • Frequency: N
      • CountryCode: default or own country.
    • Interfaces:
      • SSID: MYWIFI: Access Point, Network(lan), WMM Mode, WPA2PSK
      • SSID: MYGUEST: Access Point, Network(guest), WMM Mode, WPA2PSK, Isolate Clients

• Devices

  • Bridge br-lan (eth1.1)
  • Bridge br-guest (eth1.3)

• Interfaces:

  • LAN: device(br-lan), Static 192.168.0.1/255.255.255.0, DHCP 150-200,1h
  • WAN/WAN6: eth0.2
    DHCP client, use default gatway, use dns servers advertised, DHCP ignore interface
  • Guest: device(br-guest), Static 192.168.11.1/255.255.255.0, DHCP 100-150,1h

• Firewall:

  • General: Input accept, Output accept, Forward reject
  • Zones:
    • lan: accept, accept, accept, network(lan), forwarddest(wan/wan6)
    • wan: reject, accept, reject, masquerading, mss clamping, network(wan/wan6), forwardfrom(guest,lan)
    • guest: reject, accept, reject, network(guest), forwarddest(wan/wan6)

• Port Forwarding:

  • wan incoming 443 -> NAS 8443
  • wan incoming 80 -> NAS 8080

• DHCP Static Leases

  • mypc 192.168.0.55
  • [...]

• HostNames

  • router.lan 192.168.0.1
  • [...]

USB Printer

• Install

    opkg update
    opkg install p910nd luci-app-p910nd kmod-usb-printer

• Config
  Webinterface: Services > p910nd - Printer Server

        Enable: Yes
        Device: /dev/usb/lp0
        Interface: lan
        Port: 9100
        Bidirectional mode: Yes

Adblock

After playing around with various Adblockers on my mobile devices and PCs as well as the PiHole project, I found that there is actually a similar solution available for OpenWrt routers.

• Install

    opkg update
    opkg install adblock luci-app-adblock libustream-mbedtls

DDNS

• Install (wget for ssl)

    opkg update
    opkg install ddns-scripts luci-app-ddns wget

• Config:

    mydns_ipv4
    home.domain.tld
    IPv4
    <ddns-service-url>
    <username>
    <password>
    Use https
    IP Address source: Network

Usage Overview/Stats

List Usage by devices (when searching for the hungry devices that disturb your experience)

• Download

  • latest .ipk file from: https://github.com/pyrovski/wrtbwmon/releases (0.3.6 in my case)
  • latest .ipk file from: https://github.com/Kiougar/luci-wrtbwmon/releases (0.8.3 in my case)

• Install

    opkg install wrtbwmon_*_all.ipk
    /etc/init.d/wrtbwmon enable
    /etc/init.d/wrtbwmon start
    opkg install luci_wrtbwmon_*_all.ipk

• Alternatively: luci-app-statistics

References

• https://www.tp-link.com/de/home-networking/wifi-router/archer-c7/

• https://www.tp-link.com/de/support/download/archer-c7/v2/

• https://openwrt.org/toh/tp-link/archer-c7-1750

• https://openwrt.org/docs/guide-user/services/print_server/p910nd.server

• https://openwrt.org/docs/guide-user/services/ad-blocking

• https://github.com/openwrt/packages/blob/master/net/adblock/files/README.md

• https://github.com/Kiougar/luci-wrtbwmon

• https://forum.openwrt.org/t/top-ten-routers-currently-in-use/30199/4

• https://forum.openwrt.org/t/r7800-performance/15780/283

• https://forum.openwrt.org/t/ipq806x-nss-build-netgear-r7800-tp-link-c2600-linksys-ea8500/82525/3051