Routers and DD-WRT?

I picked up a dirt cheap Asus RT-N53 that's supposed to have OpenWRT support to have on hand as an emergency replacement for odd situations (e.g. this past week we've had 2 customers using hosted EMRs down due to a Comcast outage covering the area around a local hospital, and apparently it also hit a nearby former customer that after replacing us moved their EMR servers out to a data center.....), though it may become my home emergency replacement at some point instead so I can play with my home router without worrying about nuking it.

We're still working out the details for setting up failover options with their routers so in case of downtime they can tether to a cell phone, but odds are that's not going to require this router except at a few customers where we have older non-wireless Mikrotiks - and we're more likely to just replace those over the coming months.

I think the biggest headache may be the scripting capabilities on the Mikrotiks - I want to set up something with at least 3-4 remote IPs that are routed ONLY through the primary interface; if all of those are inaccessible and the wireless side is connected as a client, then change priorities to the wireless client but continue to check every minute or two to see if the primary has come back up. On OpenWRT or anything where I could do Bash scripting I don't think that'd be too bad, but Mikrotik scripts are a lot weaker.
 

This came in and I have been going through its capabilities in detail. Very, very nice for the $$$ (just over $50 business pricing on Amazon Prime)! Multiple WiFi SSIDs, multiple VLANs with assignable ranges, DHCP, etc. Took me awhile to get port forwarding to a VLAN ironed out but works great. No IPtables, but most of what I use the tables for is covered in other settings. I don't need VPN at the firewall but it's there and fairly comprehensive. All in all exactly what I was looking for.

Thanks again @altrenda
 
The only problem I'm having is that to allow port-forwarding into a VLAN, inter-VLAN routing must be enabled but then I lose the security of subnet isolation which is what I used to be able to use iptables for in DD-WRT. I'm still doing some testing, but if you see a way around this, give me a shout.

Thanks!
 
Back
Top