Firewall in AP mode?

Firewall in AP mode?

Firewall in AP mode?
Firewall in AP mode?
2 weeks ago - last edited Monday
Model: Archer BE230  
Hardware Version: V1
Firmware Version: 1.1.3 build 20241211 tel. 47943(4555)

Hello. 

 

Does router set in AP mode have firewall enabled?

 

I cannot see that option in settings.

 

I cannot see devices connected via Archer in ISP router on "Connected devices list".

Also from this ISP router I cannot ping devices behind Archer.

 

I was thinking that in AP mode router is transparent and LAN in one 192.168.x.x/24 could be on both sides and  devices can communicate.

 

Does it mean that they cannot see each other?

 

AP isolation is turned off. 

  0      
  0      
#1
Options
2 Accepted Solutions
Re:Firewall in AP mode?-Solution
2 weeks ago - last edited a week ago

  @lemiel 

 

When a router is configured in AP mode its DHCP server should be turned off so only the main router DHCP server would provide IP addresses in your network - details.

When in AP mode the router firewall is not applicable - details.

In this scenario all devices IP addresses including the BE230 should be in the main router LAN subnet - 192.168.3.0/24 as you stated.

Here are some new AX53 features introduced in a pre-release FW.

 

If this was helpful click on the arrow pointing upward to make it blue. If this solves your issue, click the star to make it blue and mark the post as a "Recommended Solution".
Recommended Solution
  0  
  0  
#4
Options
Re:Firewall in AP mode?-Solution
a week ago - last edited a week ago

  @lemiel 

 

You can try the following:

Set BE230 in AP mode and connect the two AX53 as a satellite devices to the BE230 via ethernet backhaul,

EasyMesh Is available when BE230 works in AP mode as a controller - details.

Finally configure the adguard DNS in your main (ISP) router.

 

 

If this was helpful click on the arrow pointing upward to make it blue. If this solves your issue, click the star to make it blue and mark the post as a "Recommended Solution".
Recommended Solution
  0  
  0  
#6
Options
6 Reply
Re:Firewall in AP mode?
2 weeks ago - last edited 2 weeks ago

Hi@lemiel

May I know what is the model of your ISP router? 

 

Yes, as you can see, the firewall function is not applicable in Access Point mode.

Please check whether the client devices connected to BE230 are displayed normally under Connected Clients in the BE230 web interface?

Please confirm that AP isolation is turned off again. In addition, please check whether the DHCP server is turned off normally, go to Internet - DHCP server.

Please find the IP addresses of clients connected to BE230 and ISP router, check if the clients are in the same LAN. How to find IP address on your devices

 

 

  0  
  0  
#2
Options
Re:Firewall in AP mode?
2 weeks ago

  @Joseph-TP 

SDMC NE6037. CGNAT dual stack ipv6/ipv4.

AP isolation is off.

DHCP server is on on BE230. Should I disable it?

Clients are visible in BE230, also those connected via two AX53 mesh (via ethernet) satelittes.

ISP router is 192.168.3.1.

BE230 is 192.168.3.11, 

All other hosts are in 192.168.3.0/24.

 

You can refer to this - I did not thought then that it could be because of some firewall enabled...

https://community.tp-link.com/en/home/forum/topic/593722?replyId=1471850

  0  
  0  
#3
Options
Re:Firewall in AP mode?-Solution
2 weeks ago - last edited a week ago

  @lemiel 

 

When a router is configured in AP mode its DHCP server should be turned off so only the main router DHCP server would provide IP addresses in your network - details.

When in AP mode the router firewall is not applicable - details.

In this scenario all devices IP addresses including the BE230 should be in the main router LAN subnet - 192.168.3.0/24 as you stated.

Here are some new AX53 features introduced in a pre-release FW.

 

If this was helpful click on the arrow pointing upward to make it blue. If this solves your issue, click the star to make it blue and mark the post as a "Recommended Solution".
Recommended Solution
  0  
  0  
#4
Options
Re:Firewall in AP mode?
2 weeks ago

@terziyski I wanted to use adguard dns that is why I set DHCP on BE230 in AP mode.

Now after setting DHCP on main router from ISP it is not possible - no possibility to set DNS manually. Will try to use this adguard host also as DHCP server, maybe it will work that way.

My AX53 are v2 EU so not compatible with this update. Current 1.0.4 Build 20240306 rel.66339.

So many models...

And there is no possibility to update them manually when they are mesh sattelites.

 

But there is still possibility that Firewall is enabled when DHCP server is enabled.

  0  
  0  
#5
Options
Re:Firewall in AP mode?-Solution
a week ago - last edited a week ago

  @lemiel 

 

You can try the following:

Set BE230 in AP mode and connect the two AX53 as a satellite devices to the BE230 via ethernet backhaul,

EasyMesh Is available when BE230 works in AP mode as a controller - details.

Finally configure the adguard DNS in your main (ISP) router.

 

 

If this was helpful click on the arrow pointing upward to make it blue. If this solves your issue, click the star to make it blue and mark the post as a "Recommended Solution".
Recommended Solution
  0  
  0  
#6
Options
Re:Firewall in AP mode?
a week ago

  @terziyski 

I cannot set DNS servers on ISP router, that is the problem.

Will try to disable DHCP on both routers and set DHCP as active on adguarddns host. But did not have time to do it yet.

  0  
  0  
#7
Options