Server (AP - Access Point)
-
Wireless
- Mode: Access Point (AP)
- Enable WDS: Yes
- SSID: Set your preferred SSID
- Encryption: WPA2-PSK (recommended)
- Key: Set your Wi-Fi password
- Assign to network: LAN
-
Network → Interfaces
br-lan
: Interface for LAN- Static IP: e.g.,
192.168.1.1/24
- Firewall zone:
LAN
-
Firewall
- Ensure
LAN
zone allows input, output, and forwarding - Masquerading and MSS clamping: Disabled
- No need for NAT on LAN zone
- Ensure
Client (WDS Station)
-
Wireless
- Mode: Client (WDS)
- Scan → Join network (same SSID as AP)
- Encryption: Same as AP
- Assign to network: LAN
- Firewall zone: LAN
-
Network → Interfaces
br-lan
: Bridge including LAN ports and WLAN- Set protocol: Static IP (e.g.,
192.168.1.2/24
) or DHCP client - Gateway and DNS: Point to AP (e.g.,
192.168.1.1
) - Firewall zone:
LAN
-
Network → Devices
-
Add bridge:
br-lan
- Include:
wlan0
,eth0.1
(if VLAN used)
- Include:
- Disable:
wan
,wan6
,eth0.2
(if used for WAN)
I dont know why but dont forget to do this, because if not, the bridge is not working
-
Note: Disabling WAN may be required to prevent conflict
- Sometimes eth0 is split into VLANs (eth0.1 = LAN, eth0.2 = WAN), bridge only eth0.1
-
-
Firewall
- Remove/disable
WAN
zone if unused - Ensure only
LAN
zone is active and includesbr-lan
- Remove/disable
Notes
- Use the same channel and bandwidth for better WDS performance
- Avoid using DHCP server on client, let the server handle it
- Ensure MAC filter is off or includes the client's MAC
- Disable IPv6 if not used to simplify setup
- Bridging over wireless may introduce some latency