Shibby's TomatoUSB 140 MultiWAN configuration

[DominionZA]

Hey peeps,

I am stuck and reaching out to the networking gurus for some advice please.

My setup.
1. Linksys/Cisco WAG120N ADSL Router/Modem in Bridge Mode. IP: 192.168.10.1. Connected to WAN port of Asus.
2. ZTE 4G/LTE Router/Modem in Bridge Mode. 192.168.0.1. Connected to LAN1 port of ASUS (mapped to WAN2).
3. Asus RT-N66U flashed with latest version (140) of Shibby's TomatoUSB. IP: 192.168.1.1

Been running 1 and 3 above for a number of years now with no issue. With Telkom giving us cheap data on prepaid, I decided to pull my ZTE router out the cupboard and set it up. I want to use routing tables to direct traffic - but that is for another discussion. I need to reach this point first.

TomatoUSB connects to the net via the Linksys using PPPoE. No problems here. Got internet, game, etc... All works.

Then I begin the configuration.
In TomatoUSB, I setup a VLAN for WAN2, mapping LAN1. All good. Router reboots.
I then access the Basic / Network page to configure.
Change "Number of WAN ports from 1 to 2" and get access to WAN2 config.
Set Load Balancing Weight for WAN1 (ADSL) to 2, and for WAN2 (Telkom LTE) to 1.
WAN2 config, I setup Static IP and assign 192.168.0.2 to WAN2 with gateway 192.168.0.1 (IP of ZTE router). DNS I set to Google DNS.
Save settings.

At this point I lose internet on my PC. I can nslookup no problem, and I can ping the public IP of the ADSL connection no problem. But that's it.
If I ping a domain, it resolved to an IP, but then timeout thereafter.
Web pages etc... do not load.

I left all config in place, but disabled WAN 2 in Basic / Network. So system still configured for 2 WAN ports, but WAN2 disabled. No change RE browsing on my PC.
If I change back to 1 WAN port and leave everything else, all is restored and I have internet like normal.

I figured it may have something to do with the routing table, but see nothing out of the ordinary (to my knowledge).
Dest: ADSL Public IP
Gateway: *
Subnet Mask: 255.255.255.255
Metric: 0
Interface: ppp0(WAN).

Dest: 192.168.1.0.
Gateway: *
Subnet Mask: 255.255.255.0
Metric: 0
Interface: br0(LAN)

Dest: 127.0.0.1.
Gateway: *
Subnet Mask: 255.0.0.0
Metric: 0
Interface: lo

Dest: default
Gateway: ADSL Public IP
Subnet Mask: 0.0.0.0
Metric: 0
Interface: ppp0(WAN)

Keeping in mind I now have WAN2 disabled, but the router still configured to use 2 WAN Ports. I am just trying to get internet working through the ADSL in 2 WAN Port config before I start to fiddle with the LTE (WAN2).
When I toggle between 1 WAN port and 2 WAN ports, the only thing that changes in the routing table is the ADSL Public IP. All else remains the same, yet I lose browsing on my PC when configured for 2 WAN ports. Seems the router does not know how to direct the traffic.

PC is configured to use DHCP, with gateway and DNS server being the Asus (TomatoUSB) router.

Hope I have been clear enough with regards to my config and what I am trying to get right. If any networking gurus can assist, I would be forever in your debt!

 

[infscrtyrisk]

Hey peeps,

I am stuck and reaching out to the networking gurus for some advice please.

My setup.
1. Linksys/Cisco WAG120N ADSL Router/Modem in Bridge Mode. IP: 192.168.10.1. Connected to WAN port of Asus.
2. ZTE 4G/LTE Router/Modem in Bridge Mode. 192.168.0.1. Connected to LAN1 port of ASUS (mapped to WAN2).
3. Asus RT-N66U flashed with latest version (140) of Shibby's TomatoUSB. IP: 192.168.1.1

Been running 1 and 3 above for a number of years now with no issue. With Telkom giving us cheap data on prepaid, I decided to pull my ZTE router out the cupboard and set it up. I want to use routing tables to direct traffic - but that is for another discussion. I need to reach this point first.

TomatoUSB connects to the net via the Linksys using PPPoE. No problems here. Got internet, game, etc... All works.

Then I begin the configuration.
In TomatoUSB, I setup a VLAN for WAN2, mapping LAN1. All good. Router reboots.
I then access the Basic / Network page to configure.
Change "Number of WAN ports from 1 to 2" and get access to WAN2 config.
Set Load Balancing Weight for WAN1 (ADSL) to 2, and for WAN2 (Telkom LTE) to 1.
WAN2 config, I setup Static IP and assign 192.168.0.2 to WAN2 with gateway 192.168.0.1 (IP of ZTE router). DNS I set to Google DNS.
Save settings.

At this point I lose internet on my PC. I can nslookup no problem, and I can ping the public IP of the ADSL connection no problem. But that's it.
If I ping a domain, it resolved to an IP, but then timeout thereafter.
Web pages etc... do not load.

I left all config in place, but disabled WAN 2 in Basic / Network. So system still configured for 2 WAN ports, but WAN2 disabled. No change RE browsing on my PC.
If I change back to 1 WAN port and leave everything else, all is restored and I have internet like normal.

I figured it may have something to do with the routing table, but see nothing out of the ordinary (to my knowledge).
Dest: ADSL Public IP
Gateway: *
Subnet Mask: 255.255.255.255
Metric: 0
Interface: ppp0(WAN).

Dest: 192.168.1.0.
Gateway: *
Subnet Mask: 255.255.255.0
Metric: 0
Interface: br0(LAN)

Dest: 127.0.0.1.
Gateway: *
Subnet Mask: 255.0.0.0
Metric: 0
Interface: lo

Dest: default
Gateway: ADSL Public IP
Subnet Mask: 0.0.0.0
Metric: 0
Interface: ppp0(WAN)

Keeping in mind I now have WAN2 disabled, but the router still configured to use 2 WAN Ports. I am just trying to get internet working through the ADSL in 2 WAN Port config before I start to fiddle with the LTE (WAN2).
When I toggle between 1 WAN port and 2 WAN ports, the only thing that changes in the routing table is the ADSL Public IP. All else remains the same, yet I lose browsing on my PC when configured for 2 WAN ports. Seems the router does not know how to direct the traffic.

PC is configured to use DHCP, with gateway and DNS server being the Asus (TomatoUSB) router.

Hope I have been clear enough with regards to my config and what I am trying to get right. If any networking gurus can assist, I would be forever in your debt!

I don't know any of the equipment that you use, or the firmware at all, but what appears to be interesting is that all of the "routes" appear to have the same metric.

What does "Gateway: *" mean?

 

[DominionZA]

I don't know any of the equipment that you use, or the firmware at all, but what appears to be interesting is that all of the "routes" appear to have the same metric.

What does "Gateway: *" mean?

Gateway is the TomatoUSB device its-self. IE: Any traffic hitting it destined for XYZ.
I also wondered about the metrics all being zero, but that table is auto configured by the firmware based on the LAN/WAN config, so don't fiddle with it. I do have options to add routes - but not fiddled here. Not sure if it is necessary, or what I would be doing.

 

[infscrtyrisk]

Gateway is the TomatoUSB device its-self. IE: Any traffic hitting it destined for XYZ.
I also wondered about the metrics all being zero, but that table is auto configured by the firmware based on the LAN/WAN config, so don't fiddle with it. I do have options to add routes - but not fiddled here. Not sure if it is necessary, or what I would be doing.

OK, so what is the reason that you would want two WAN connections then? Are you seeking redundancy (for when the DSL goes down)? If so, then the LTE interface would need a higher cost path. If they are both the same (equal cost paths) then the router would alternate between the two, sending every second packet to the LTE interface. Naturally this would be a VBT, because the source addresses (and therefore the return path) hitting the Internet would belong to different autonomous systems.

 

[DominionZA]

I want it more for splitting traffic. My download server must go via the LTE after midnight, but ADSL during the day, and will do similar stuff with the MultiWAN routing once I have the basics down.

I have set the ADSL interface with a weighting of 2, and the LTE 1, so traffic should primarily go via ADSL. Not done any routing yet. I am simply trying to get normal throughput from my PC - and failing.
Both WAN 1 and WAN 2 indicate successful connections to their respective devices. I can also ping fine on the gateway router its-self, but not from my PC.

I went as far as configuring for dual WAN, but disabling any kind of connection on WAN 2 - which in theory should leave my gateway running just as it does when configured for 1 WAN only. Doing this, the routing table looks identical to when I have it configured for 1 WAN port - and I still don't have any kind of web browsing from my PC.
I leave the WAN 1 config alone, switch the gateway back to single WAN - and I have internet again. Back to dual WAN, internet gone.

Excuse grammar and typo's. Been working through the night so brain not very functional right now.

EDIT: I understand that if I set the weighting for the LTE connection to 0, then TomatoUSB will not attempt to use the LTE unless the ADSL goes down (ADSL with a weighting of 1). I will go this route first before I start fiddling with MultiWAN routing. Need to ensure I actually have a connection first.

 

[infscrtyrisk]

OK, at this point I'd ask to see some screenshots of the VLAN config, the MultiWAN config and the MultiWAN routing table, but I appreciate that it is a public forum. Have you taken double checked the documentation, also the YouTube guidance? https://www.youtube.com/watch?v=Z5eE_6bhZbA

 

[DominionZA]

OK, at this point I'd ask to see some screenshots of the VLAN config, the MultiWAN config and the MultiWAN routing table, but I appreciate that it is a public forum. Have you taken double checked the documentation, also the YouTube guidance? https://www.youtube.com/watch?v=Z5eE_6bhZbA

I appreciate your perseverence with this!

Most IPs are internal so I don't mind doing screenies. Will just blank out those that are public.
Will do it in the AM though. Been working since 7 yesterday right through to now. Kinda buggered.

Will give the YouTube link a watch now.

 

[infscrtyrisk]

I appreciate your perseverence with this!

Most IPs are internal so I don't mind doing screenies. Will just blank out those that are public.
Will do it in the AM though. Been working since 7 yesterday right through to now. Kinda buggered.

Will give the YouTube link a watch now.

It's actually the internal ones that you would want to protect.

 

[DominionZA]

It's actually the internal ones that you would want to protect.

Could you elaborate?

 

[infscrtyrisk]

Could you elaborate?

It's akin to uploading a floorplan of your house to Shutterfly.