Saturday, March 11, 2023

OpenWRT DMZ

What is DMZ besides Demilitarized Zone?  

The plainest and most understandable definition of DMZ that I've seen on Google is, a way to split untrusted traffic from your secured Private Network.  This seemed to be what I needed to run my AmprNet gateway on a Router/AP device installed with OpenWRT separate from my main Router, which is another Router/AP device also running OpenWRT.

I know I can have my household LAN and AmprNet Gateway on the same device because I recently accomplished that goal but again I like separation so I decided that I needed to create a DMZ on the main Router to serve the AmprNet Gateway and do all of the needed Firewall filtering there. But there isn't a DMZ shortcut to turn this function on and off in OpenWRT as with Routers with their original firmware installed.

Although MOST of the information I found searching Google and a few other sources were doing this by configuring "VLAN's", which seems to be the common practice, with this being a simple setup and my main Router having a number of physical LAN ports to choose from, "VLAN" filtering seemed unnecessary for this application or any other uses around my QTH.  Maybe one day it will show its need but in the meantime, it seems this setup is working, keeping the DMZ and the Private Networks separated.  So here is my solution for a totally open DMZ on my main OpenWrt Router using one of the physical LAN ports specifically for the DMZ

BTW, your comments are fully welcomed here because I am no pro at this stuff by any means and will never claim to be. 

Here we GO... <= Click

73