I have the following setup in my network: My internet comes in through an ATT Uverse modem/router. The router is in bridge mode because that ATT Uverse modem/router connects to a second higher performance router I got from my company. That high performance router then connects to various internet network components (a switch, my TV, etc) as well as to a couple of Wireless Access Points so the house is filled with WIFI. What I want to do is to place an embedded device (like a Raspberry Pi or Banana Pi) running OpenWRT between my ATT Uverse Modem/Router and my high performance router and run intrusion detection/prevention software on this. In other words, internet signal comes in thru ATT Uverse modem/bridge router, goes through my OpenWRT embedded box, passes through to my high performance router and then into the rest of my network.

But I'm a little confused as to how to configure OpenWRT to make this happen. I found this link: http://computers.tutsplus.com/articles/installing-openwrt-on-a-raspberry-pi-as-a-new-home-firewall--mac-55984 but it looks like the "firewall" he is using actually ends up being a router. I don't want to eliminate my existing routers - I just want to place my embedded OpenWRT box between them. What do I have to do to make this happen?

If I place this box outside my router (in other words, between my router and modem) then is it the case that this box will no longer have an internal IP address? Must I instead place it behind my router to get an IP address?

Any help or suggestions would be appreciated.

  • You can forget using a Raspberry Pi for any meaningful ethernet throughput, as the "onboard" ethernet interface is a USB network adapter in reality. Besides that, all such firewalls actually perform as a router. The alternative is to use ebtables and setup the system as an ethernet bridge, but that's not how it's usually done. I'd expect your "high performance router" to be able to do firewalling; otherwise get rid of that and use some router supported by openwrt such as Netgear or TPlink to do routing and firewalling, which will perform a lot better than a Pi. – wurtel Feb 24 '15 at 10:56

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.