FreshTomato Wiki

2fa

anonymous@undisclosed.example.com (Anonymous) — Wed, 13 Aug 2025 03:51:31 +0000

Setting up 2FA for SSH using Google Authenticator This content was taken from a Tomato forum thread: HOWTO - Set up 2FA openssh with google authenticator . These are simple configuration notes, and not intended to be a complete HOWTO. This setup uses openssh with google-authenticator as 2-Factor Authentication. Only the

about_wiki

anonymous@undisclosed.example.com (Anonymous) — Thu, 28 Apr 2022 23:11:50 +0000

About FreshTomato FreshTomato is a firmware project based on Linux, targeting home and SOHO routers. FreshTomato is distributed on the GPL license GPL license. FreshTomato supports Broadcom based systems. Features a particularly friendly interface, which can be used by even inexperienced users.

about

anonymous@undisclosed.example.com (Anonymous) — Mon, 28 Oct 2024 22:06:11 +0000

About The About page displays the Name and the version number of the FreshTomato firmware as well as: * A copyright statement. * The build date of the FreshTomato build running. * The Linux kernel version and wireless drivers used in the build.

access_restrictions

anonymous@undisclosed.example.com (Anonymous) — Thu, 26 Oct 2023 16:20:24 +0000

Scripting Access Restrictions Access Restriction rules are coded as strings separated by pipe ( | ) symbols. These are stored in NVRAM as variables named rrule0, rrule1, rrule2 and so on. To see what's in the first rule, we can issue the following command at a FreshTomato shell prompt:

adblock_dns_filtering

anonymous@undisclosed.example.com (Anonymous) — Thu, 09 Apr 2026 11:23:45 +0000

Adblock (DNS filtering) lists The two tables below contain the standard Adblock/DNS filtering lists that can be used in current Freshtomato versions. The first table contains frequently-updated lists. The bottom table contains outdated blocklists and lists that haven't been updated for a long time. These are only the standard lists. You can, of course, use other lists of your choice.

admin_access

anonymous@undisclosed.example.com (Anonymous) — Sat, 15 Nov 2025 20:04:17 +0000

Admin Access This menu contains settings to configure who is allowed to administer the router, access the network, how those users connect, and more. The menus sections include Web Admin, SSH Daemon, Telnet Daemon, Admin Restrictions and Username/Password.

admin-access

anonymous@undisclosed.example.com (Anonymous) — Thu, 29 Jan 2026 15:06:23 +0000

Admin Access Settings here specify who will be allowed to administer the router and access the network, how those users connect, and more. Sections in this menu include: Web Admin, SSH Daemon, Telnet Daemon, Admin Restrictions and Username/Password.

admin-buttons

anonymous@undisclosed.example.com (Anonymous) — Mon, 21 Oct 2024 00:13:42 +0000

Buttons/LED The Buttons/LED menu allows you to assign scripts to be run when certain hardware buttons are pressed. It also allows you to assign which events will trigger the router LEDs to illuminate. The buttons/LEDs listed for these functions may depend on the make and model of your router.

admin-bwm

anonymous@undisclosed.example.com (Anonymous) — Sat, 22 Nov 2025 01:05:58 +0000

Bandwidth Monitoring This menu contains settings for Bandwidth Monitoring features. The menu sections include Bandwidth Monitoring, Backup (of monitoring statistics in rstats format) and Restore. Bandwidth Monitoring Enable: turns on the Bandwidth Monitoring feature.

admin-cifs

anonymous@undisclosed.example.com (Anonymous) — Mon, 21 Oct 2024 00:38:46 +0000

CIFS Client This menu enables and configures FreshTomato's CIFS Client function. This lets your FreshTomato router read / write to CIFS network shares. CIFS, the Common Internet File System is an older implementation of Microsoft's SMB networking protocol. Among other things, CIFS originally provided filesharing to Windows computers. However, in time, other systems, including FreshTomato, grew to be able to access CIFS network / SMB shares.

admin-config

anonymous@undisclosed.example.com (Anonymous) — Mon, 21 Oct 2024 01:00:29 +0000

Configuration This menu contains settings for backing up and restoring default and custom configurations. It is divided into sections, including Backup Configuration, Restore Configuration and Restore Default Configuration. Do not restore configuration settings made within previous FreshTomato releases, builds or hardware models. Configuration files aren't compatible across FreshTomato release, builds or hardware models. Changes in variables and other settings can cause a great number of probl…

admin-debug

anonymous@undisclosed.example.com (Anonymous) — Thu, 25 Dec 2025 20:21:50 +0000

Debugging The Debugging page lets you tweak some parameters to allow better troubleshooting of router issues. Avoid performing an NVRAM commit - stops configuration settings from permanently saving to NVRAM until this is disabled again.

admin-iptraffic

anonymous@undisclosed.example.com (Anonymous) — Sat, 02 Nov 2024 20:03:55 +0000

IP Traffic Monitoring IP Traffic Monitoring lets you record and graphically display bandwidth usage. IP Traffic Monitoring is similar to Bandwidth Monitoring, but it categorizes the data by individual LAN IP address. IPT uses FreshTomato's cstats module to function. By default, data are stored in:

admin-jffs2

anonymous@undisclosed.example.com (Anonymous) — Thu, 29 May 2025 16:35:39 +0000

JFFS The JFFS menu contains settings and information used to create, prepare and view the status of a JFFS2 partition used for permanent storage. Common routers contain two types of permanent storage: Flash - is the storage area where the FreshTomato firmware image is uploaded, stored and executed. At boot time, the image is loaded into a read-only squash filesystem. Flash size is measured in Megabytes (

admin-log

anonymous@undisclosed.example.com (Anonymous) — Sun, 09 Mar 2025 15:11:04 +0000

Logging The Logging Page contains two sections. The Syslog section has settings to enable and configure settings for Syslog, the main function that logs system events. Web Monitoring contains settings to enable/configure the function to let you monitor log/monitor web searches and which domains have been visited.

admin-nfs

anonymous@undisclosed.example.com (Anonymous) — Mon, 21 Oct 2024 18:49:48 +0000

NFS Server FreshTomato's NFS server lets you create and modify fileshares to NFS clients (mainly Unix-like systems). Network File System (NFS) is a distributed file system protocol. It allows users on a client device to access files over a network, similar to the way local storage is accessed.

admin-sched

anonymous@undisclosed.example.com (Anonymous) — Tue, 22 Oct 2024 17:17:03 +0000

Scheduler The scheduler menu lets you schedule tasks to execute periodically. The web interface is a front end for cru, a front-end script for BusyBox's version of crontab (crond). Reboot The reboot function lets you schedule a periodic reboot of the device.

admin-scripts

anonymous@undisclosed.example.com (Anonymous) — Wed, 23 Oct 2024 23:44:30 +0000

Scripts Here, you can define certain commands to be run upon specific events. These events are predefined. Each event condition has its own tab. INIT: a script entered here is run at boot time, before any connections are established. Halt:

admin-snmp

anonymous@undisclosed.example.com (Anonymous) — Mon, 21 Oct 2024 19:16:03 +0000

SNMP In this menu you can configure Simple Network Management Protocol settings. The Simple Network Management Protocol is used for network monitoring and management. It allows you to collect and organize information about devices on IP networks, and can even allow you to modify that information to change device behavior.

admin-tomatoanon

anonymous@undisclosed.example.com (Anonymous) — Fri, 25 Oct 2024 17:11:20 +0000

TomatoAnon This menu lets you enable/disable collection of certain anonymous installation data for the TomatoAnon project. The project collects and reports on Tomato installations worldwide. If enabled, FreshTomato runs a script to collect these data.

admin-upgrade

anonymous@undisclosed.example.com (Anonymous) — Tue, 22 Oct 2024 17:18:55 +0000

Upgrade This menu lets you upgrade/downgrade the firmware on your FreshTomato router to another (Fresh)Tomato build. You can find details and step-by-step flashing instructions on the InstallingFreshTomato wiki page. Clicking the Browse... button, will allow you to select a suitable firmware file to flash (write).

advanced_scenarios

anonymous@undisclosed.example.com (Anonymous) — Sat, 28 Feb 2026 21:05:24 +0000

Advanced Scenarios Advanced Wireless-Only Operations In most cases, a traditional consumer router works best in only one scenario. It connects your wired/wireless LAN clients to an Internet provider via a single physical WAN port on the router. In FreshTomato, this concept has been abstracted. Each physical or wireless router interface can be customized to work as WAN or

advanced-access

anonymous@undisclosed.example.com (Anonymous) — Thu, 08 Jan 2026 23:03:09 +0000

LAN Access This menu allows you to define LAN-to-LAN traffic where it otherwise would be blocked. For example, let's say we have two LANs, a primary one (LAN0/br0) and a secondary one (LAN1/br1). If you want devices on LAN0 to communicate with devices on LAN1 (and vice versa), you could use these settings:

advanced-adblock

anonymous@undisclosed.example.com (Anonymous) — Wed, 04 Mar 2026 19:44:40 +0000

Adblock (DNS filtering) This menu contains settings to configure FreshTomato's ad blocker-DNS filtering. This feature can block ads, some malware, crypto miners, privacy-invading scripts and more, depending on the lists you use. You are strongly advised to read the How Adblock Works section to understand its functioning.

advanced-ctnf

anonymous@undisclosed.example.com (Anonymous) — Fri, 05 Dec 2025 19:31:36 +0000

Conntrack / Netfilter Settings here let you control some advanced network parameters. In most cases, default settings are fine. Think carefully before changing the settings from defaults. You should only change these settings if you have advanced networking knowledge.

advanced-dhcpdns

anonymous@undisclosed.example.com (Anonymous) — Wed, 20 Aug 2025 14:38:17 +0000

DHCP/DNS/TFTP Here, you can configure advanced settings for the DHCP, DNS and TFTP services for both LAN and WAN. Most of this functionality is provided by dnsmasq. DHCP Client (WAN) The DHCP Client (WAN) section includes a dhcpc (dhcp client) options field. Here you can set parameters for your router's DHCP client.

advanced-firewall

anonymous@undisclosed.example.com (Anonymous) — Wed, 27 Nov 2024 00:42:08 +0000

Firewall The Firewall page allows you to configure options to protect or facilitate various types of network communications. Firewall WAN interfaces respond to ping and traceroute: lets your device reply to ping/traceroute request packets from Internet hosts.

advanced-mac

anonymous@undisclosed.example.com (Anonymous) — Tue, 18 Nov 2025 05:52:43 +0000

MAC Address This menu has settings to let you electronically change (or “spoof”) the MAC Address of various network interfaces. This function does not change the factory-assigned MAC Address in the device's chip. It just overlays a different address in software.

advanced-misc

anonymous@undisclosed.example.com (Anonymous) — Thu, 12 Mar 2026 01:42:08 +0000

Miscellaneous In this menu, you can tweak some secondary, less critical settings. These settings rarely need to be modified. If you change them, make sure you understand the consequences of those changes. Boot Wait Time *: the period during which you can access the router via its CFE webserver.

advanced-pbr

anonymous@undisclosed.example.com (Anonymous) — Wed, 27 Nov 2024 01:23:47 +0000

MultiWAN Routing While somewhat similar to the Routing menu, the MultiWAN Routing menu allows you to direct outbound traffic in multiwan scenarios. Here, you can define advanced parameters to make a connection bind to a specific WAN interface. Where outbound traffic is directed will implicitly affect the corresponding (inbound) return traffic. A packet going to WAN0 should return only via the same interface.

advanced-routing

anonymous@undisclosed.example.com (Anonymous) — Sat, 12 Oct 2024 23:41:41 +0000

Routing In this menu, you can view the current routing table. You can also define the output interface for specific routing destinations (IP addresses and Subnets). Current Routing Table The Current Routing Table displays the output from the

advanced-tor

anonymous@undisclosed.example.com (Anonymous) — Wed, 27 Nov 2024 01:27:40 +0000

TOR What is Tor? Tor (“The Onion Router”) is a security protocol that increases the anonymity of Internet traffic. Tor's “Onion” routing is implemented at the OSI application layer. The Tor network is a free, worldwide, volunteer-run overlay network of more than 7,000 relays.

advanced-vlan

anonymous@undisclosed.example.com (Anonymous) — Thu, 08 Jan 2026 16:30:26 +0000

VLAN (IEEE 802.1Q) FreshTomato supports Virtual LAN (VLAN) configurations that conform to the 802.1Q standard. The user can create up to 16 VLANs. A VLAN can use a VID between 1 and 4094. If you are new to VLANs, here is an excellent introductory video:

advanced-wireless

anonymous@undisclosed.example.com (Anonymous) — Fri, 09 Jan 2026 17:20:57 +0000

Wireless This menu contains settings for advanced tuning of WiFi interfaces. Changing the settings from defaults isn't recommended unless you are experienced with advanced WiFi settings. Default menu settings are noted with an asterisk ( * ) or listed in brackets below the setting name. For basic WiFi settings, see the

advanced-wlanvifs

anonymous@undisclosed.example.com (Anonymous) — Wed, 27 Nov 2024 01:34:22 +0000

Virtual Wireless Here, you can create and modify virtual wireless interfaces for virtual wireless networks. This is useful for creating things like guest networks (for questionable/unfamiliar users). You can also create separate networks for IoT (Internet of Things) devices. IoT devices are often untrusted in terms of security. Some infringe upon your privacy.

aria

anonymous@undisclosed.example.com (Anonymous) — Wed, 05 Jan 2022 12:58:21 +0000

Tutorial to install Aria2 + Web Front-end (webui-aria2 OR AriaNG) on FreshTomato. | LinksysInfo.org

ash_history

anonymous@undisclosed.example.com (Anonymous) — Thu, 31 Oct 2024 21:52:48 +0000

Make command line history persistent By default, the command line history is stored as long as you don't reboot/power off the router. However, You can make it persistent by using permanent storage, such as JFFS or USB attached storage. The command history is kept in:

backup_script

anonymous@undisclosed.example.com (Anonymous) — Mon, 01 Dec 2025 12:45:50 +0000

Backup Script Goals * You want to schedule a backup to be done via a cron job. * You want the script initiated from, and stored in a safe location on a server on the network (not on the router). * You do not wish to install SFTP just for these backups.

basic_hardening

anonymous@undisclosed.example.com (Anonymous) — Fri, 09 Jan 2026 23:50:06 +0000

Basic Steps to Harden FreshTomato This HOWTO will provide some basic steps toward hardening your Freshtomato router. It is not intended to be a thorough or complete reference on securing your network. It is only a starting point. Each small step will reduce your network's

basic-ddns

anonymous@undisclosed.example.com (Anonymous) — Tue, 26 Nov 2024 23:33:30 +0000

DDNS The Dynamic DNS function allows you to have a private domain linked to a dynamic IP address. When the IP address changes, a client module updates the binding between the domain name and IP address. In simple terms, Dynamic DNS lets you have your own domain/subdomain, and know the IP address associated with it at all times.

basic-ident

anonymous@undisclosed.example.com (Anonymous) — Wed, 27 Nov 2024 00:02:29 +0000

Identification The Identification page allows you to specify various name parameters for your FreshTomato device. Router Name: here, enter a nickname for the FreshTomato device for your own reference. The router name display on the Overview page and in the title of the router's web interface pages. This is

basic-ipv6

anonymous@undisclosed.example.com (Anonymous) — Sat, 20 Dec 2025 02:18:06 +0000

IPv6 (Configuration) This menu has settings for configuring basic IPv6 routing functionality. Settings here affect only routed packets. Generally, IPv6 packets always travel through a FreshTomato router's switch on the LAN, regardless of these settings.

basic-network

anonymous@undisclosed.example.com (Anonymous) — Thu, 22 Jan 2026 16:27:21 +0000

Network This page includes most basic settings needed to configure a network. Its sections include MultiWAN, WAN Settings, Ethernet Ports Configuration, LAN and Wireless settings. Default settings are denoted with an asterisk (“ * ”) MultiWAN

basic-static

anonymous@undisclosed.example.com (Anonymous) — Tue, 18 Nov 2025 05:56:58 +0000

DHCP Reservation The DHCP Reservation menu has settings to configure DHCP Reservations, Static ARP bindings and IP Traffic monitoring for clients with the above mappings. Basic Concepts Since r2020.8, what was called “Static DHCP” is now more accurately named

basic-time

anonymous@undisclosed.example.com (Anonymous) — Wed, 27 Nov 2024 00:09:06 +0000

Time The Time page displays and allows configuration of various time, time zone and NTP (Network Time Protocol) settings. Router Time: displays the router's current date, time and time zone. These are expressed as offset from UTC (Universal Time Coordinated) standard.

basic-wfilter

anonymous@undisclosed.example.com (Anonymous) — Wed, 27 Nov 2024 00:05:32 +0000

Wireless Filter In this menu, you can specify the MAC addresses of the only devices to be allowed to connect to FreshTomato WiFi networks. It is effectively a MAC Address whitelist for wireless access. (Default: Disabled). MAC Address: the 12-character MAC address of the device to allow access to the WiFi network.

bwlimit

anonymous@undisclosed.example.com (Anonymous) — Sat, 15 Nov 2025 18:41:04 +0000

Bandwidth Limiter To begin with, Bandwidth Limiter is not QoS. Bandwidth Limiter limits the bandwidth used by one or more client devices on the network. Bandwidth Limiter does not prioritize one type of traffic over another type. It prioritizes one

bwm-24

anonymous@undisclosed.example.com (Anonymous) — Thu, 16 Oct 2025 18:07:49 +0000

Bandwidth - Last 24 Hours The Bandwidth - Last 24 Hours menu displays bandwidth usage from the last 24 hours. The time window is 24 hours and data resolution is 2 minutes. It displays a maximum of 24 hours of data sampled a maximum of every 2 minutes.

bwm-daily

anonymous@undisclosed.example.com (Anonymous) — Wed, 06 Nov 2024 22:48:20 +0000

Bandwidth Monitor - Daily The Bandwidth - Daily menu displays daily traffic across the WAN interface, from 00:00:00 AM to 23:59:59 PM each day. When FreshTomato is in MultiWAN configurations, it will display only traffic on the primary WAN. ]]

bwm-monthly

anonymous@undisclosed.example.com (Anonymous) — Wed, 06 Nov 2024 22:49:09 +0000

Bandwidth - Monthly The Bandwidth - Monthly menu displays bandwidth volume over a one month period. This starts the first day at 00:00:00 and ends the last day at 23:59:59. The display is split into Download, Upload and Total (combined) volumes.

bwm-realtime

anonymous@undisclosed.example.com (Anonymous) — Wed, 06 Nov 2024 22:44:55 +0000

Bandwidth - Real-Time The Bandwidth - Real-Time menu shows live monitoring of any router interface in graph form. Data are reset when the page first loads, and the display draws gradually. The maximum display window is 10 minutes, with 2-second data resolution. Ten minutes of data can be displayed at a time, with data sampled at most, every 2 seconds.

bwm-weekly

anonymous@undisclosed.example.com (Anonymous) — Wed, 06 Nov 2024 22:43:34 +0000

Bandwidth Monitor - Weekly The Bandwidth - Weekly menu displays the amount of data transferred weekly through the WAN interface. Data are divided into Download, Upload and Total (combined) volumes. When FreshTomato is in a MultiWAN configuration,

clearing_iptables

anonymous@undisclosed.example.com (Anonymous) — Thu, 31 Oct 2024 21:09:04 +0000

Clearing iptables custom commands prior to applying new ones As an example, let's say that you wanted to use some custom iptables commands in a script, such as the firewall script. (Actually, the following principles would apply to any recurring script, such as

connectivity_watchdog

anonymous@undisclosed.example.com (Anonymous) — Sat, 02 Mar 2024 18:03:56 +0000

Connectivity Watchdog For various reasons, you might want to monitor your Internet connectivity. The simplest way to do this is to run a custom task script. The basic command structure might look something like this: For example, in the Scheduler menu, in the

crash_log

anonymous@undisclosed.example.com (Anonymous) — Sat, 23 Mar 2024 20:44:47 +0000

Log a Crash The crashlog feature is used to log crashes. In order to use the crashlog feature, your hardware must have an AIO firmware build installed. VPN firmware build files do not include crashlog. (You can also create a custom image with CRASH_LOG=y)

credits

anonymous@undisclosed.example.com (Anonymous) — Wed, 12 Feb 2025 03:11:36 +0000

Credits Special Thanks We would like to express our gratitude to all the people who, over time, have helped to develop FreshTomato, add support for new hardware, identify and fix bugs, and add new features. While it would be impossible to mention everyone, below is a short list of some major contributors:

custom_ssl_cert_local_cert_authority

anonymous@undisclosed.example.com (Anonymous) — Wed, 26 Nov 2025 00:15:45 +0000

Set up a Custom SSL Cert using Local CA & Cert-Signing Request This HOWTO takes you through all the steps needed to create: * A root certificate authority (CA) * An intermediate certificate authority (ICA) * An SSL key, certificate request (CS)

device_filtering

anonymous@undisclosed.example.com (Anonymous) — Mon, 03 Mar 2025 18:09:51 +0000

Block devices via script/Scheduler The easiest way to filter WiFi devices is to use the Wireless Filter menu. However, there are times you want to block specific devices via a script. This is especially true when you need to manage device blocking for many devices. Scripting also lets you schedule blocking/filtering on or off, as needed.

dhcp_reservation

anonymous@undisclosed.example.com (Anonymous) — Thu, 12 Sep 2024 17:11:26 +0000

DHCP Reservation The DHCP Reservation menu contains settings to configure DHCP Reservations, Static ARP bindings and enabling/disabling of IP Traffic monitoring for clients with the above mappings. DHCP Reservation Since FreshTomato version 2020.8, what was previously called Static DHCP is now called DHCP Reservation. Please see

dns_flag_day_2020

anonymous@undisclosed.example.com (Anonymous) — Wed, 24 May 2023 03:17:14 +0000

DNS Flag Day October 1 was the date of DNS Flag Day in 2020. What is DNS Flag Day? DNS Flag Day is an initiative by several DNS vendors and operators to increase the compliance of implementations with DNS standards. The goal is to make DNS more secure, reliable and robust. Rather than a push for new features,

documentation

anonymous@undisclosed.example.com (Anonymous) — Tue, 25 Nov 2025 21:39:46 +0000

FreshTomato Interface Status Overview Device List Web Usage Logs Bandwidth Real-Time Last 24 Hours Daily Weekly Monthly IP Traffic Real-Time Last 24 Hours View Graphs Transfer Rates Daily Monthly Tools Ping Traceroute System Commands Wireless Survey WiFi QR Codes Wake on LAN IPerf Basic Network IPv6 Identification Time DDNS DHCP Reservation Wireless Filter Advanced Conntrack/Netfilter DHCP/DNS/TFTP Firewall Adblock-DNS filtering MAC Address Miscellaneous Routin…

donations

anonymous@undisclosed.example.com (Anonymous) — Sun, 15 Sep 2024 00:09:57 +0000

Support the project! If you enjoy FreshTomato and wish to see its development continue, please: Donate via Paypal: PayPal or Donate via Bitcoin: 1JDxBBQvcJ9XxgagJRNVrqC1nysq8F8B1Y Thank you very much for your support!

dongle_compatibility

anonymous@undisclosed.example.com (Anonymous) — Thu, 05 Jun 2025 15:45:13 +0000

3G/4G/5G Dongle compatibility Manufacturer Model Vendor 4G Standard 3G Standard Default Id Modem ID DefaultProtocol Bands supported Comments Alcatel Link Key IK40V Various LTE CAT4 1d6b:0195 (Czech T-Mobile)

enable_disable_ethernet_port

anonymous@undisclosed.example.com (Anonymous) — Wed, 24 May 2023 00:38:54 +0000

Enable/disable Ethernet port(s) You can enable/disable specific LAN ports via command line as follows: To identify the port, use the command: robocfg show port Once the physical port is identified, to disable it (replace x with relevant port number on your router):

enable_ssh

anonymous@undisclosed.example.com (Anonymous) — Thu, 31 Oct 2024 22:17:48 +0000

Enable SSH Server (daemon) Go to the Admin Access menu and locate the SSH Daemon section. There, check the Enable at Startup option and click Save. This will enable the SSH Daemon at each startup. If you wish to start the service just this once, click the Start Now

entware_installation_usage

anonymous@undisclosed.example.com (Anonymous) — Tue, 28 Oct 2025 01:12:45 +0000

Entware Installation and Usage Entware is a software repository for network attached storage, routers and other embedded devices. 2500+ packages are available for different platforms. Entware packages are full versions of programs/commands found in common Linux distributions. You can expand upon the BusyBox versions of commands included with FreshTomato and install packages not already installed. This allows you to push the limits of your router.

faq

anonymous@undisclosed.example.com (Anonymous) — Sat, 15 Nov 2025 18:13:22 +0000

Frequently Asked Questions Starting out Q: I'm new to FreshTomato. Where should I start? A: You're in the right place. * Check your device is supported by FreshTomato on the Hardware compatibility page. Read the HW revision and Notes columns there. * Overall, the installation process is quite safe. Depending on your hardware,

feature_matrix

anonymous@undisclosed.example.com (Anonymous) — Fri, 04 Jul 2025 16:29:22 +0000

Feature matrix Legend ✅ Fully supported 🖥️ GUI only (requires manual Entware installation) ⌨️ Supported but not within the GUI ❔ Support level unknown 1️⃣ Older service implementation (Version 1) 2️⃣ Current service implementation (Version 2)

file_sharing

anonymous@undisclosed.example.com (Anonymous) — Mon, 03 Jan 2022 12:48:13 +0000

tbd.

firmware_basics_procedures

anonymous@undisclosed.example.com (Anonymous) — Sun, 16 Nov 2025 00:42:10 +0000

Installing FreshTomato Basic Concepts What is Firmware and what do all those Terms Mean? What's “flashing firmware” Anyway? In short, flashing is installing new firmware. On a device like a router, firmware is most of the basic programming code which runs most of the major functions on the device. This is similar to the installed operating system and programs on a PC. Similar to a PC, firmware updates are released to fix bugs, add new features, and increase security. The device can …

forward-basic-ipv6

anonymous@undisclosed.example.com (Anonymous) — Tue, 14 Feb 2023 11:48:52 +0000

FIXME see for Example:

forward-basic

anonymous@undisclosed.example.com (Anonymous) — Sat, 23 Aug 2025 15:57:06 +0000

Port Forwarding - Basic When traffic is initiated from the Internet to FreshTomato's WAN IP on a specific port, it is either answered by FreshTomato (if a service is enabled for the port) or dropped. However, in some situations, you'll want WAN port traffic redirected to a specific

forward-dmz

anonymous@undisclosed.example.com (Anonymous) — Wed, 27 Nov 2024 01:48:14 +0000

DMZ On a sophisticated network, the DMZ (Demilitarized Zone) is a specific area of the network where services are provided in a secure way. However, in FreshTomato, DMZ has a simpler effect. When enabled, all unknown ports on FreshTomato's WAN are forwarded to the defined DMZ host IP address, instead of each being dealt with individually.

forward-triggered

anonymous@undisclosed.example.com (Anonymous) — Sat, 15 Nov 2025 17:48:58 +0000

Triggered Port Forwarding Port Triggering is a dynamic form of Port Forwarding. Ports are opened when they are needed and closed when not in use. As a result, triggered ports are more secure than static (manually configured) forwarded ports. With port triggering, an application on a

forward-upnp

anonymous@undisclosed.example.com (Anonymous) — Wed, 27 Nov 2024 01:54:46 +0000

UPnP/NAT-PMP UPnP Universal Plug and Play is a controversial protocol that allows fully dynamic (automatic) port mapping from LAN IP addresses onto the Internet. It has been criticized for its poor security. With UPnP, each network program maps its own ports automatically. In the screenshot below, WhatsApp has mapped certain ports on the WAN IP/Interface. UPnP is the original implementation of this protocol.

freshtomato_zerotier

anonymous@undisclosed.example.com (Anonymous) — Fri, 22 Aug 2025 23:06:53 +0000

Connecting FreshTomato to Zerotier ZeroTier lets you build modern, secure, multi-point virtualized networks of almost any type. From robust peer-to-peer networking to multi-cloud mesh infrastructure, you can achieve global connectivity as easily as setting up a local

halt

anonymous@undisclosed.example.com (Anonymous) — Tue, 18 Nov 2025 05:58:27 +0000

Halt The Halt command (called “shutdown” in earlier versions) does a controlled halting of the device's FreshTomato firmware. After halting, the FreshTomato device can be manually powered off. Essentially the halt command results in halting the machine only, leaving it powered on. You must power cycle the router to boot it up again. There is no other way to progress from a halted state.

hardware_compatibility

anonymous@undisclosed.example.com (Anonymous) — Fri, 26 Dec 2025 04:37:44 +0000

Hardware compatibility Does FreshTomato support your hardware? * Look for your device in the Hardware Compatibility Table below. It's the authoritative source for hardware support. Note your hardware revision. It too must be included there. If your device is in the table, it's

howtos

anonymous@undisclosed.example.com (Anonymous) — Wed, 22 Apr 2026 21:31:45 +0000

HOWTOs These guides step you through various procedures, including installing FreshTomato, setting configuration options, and other types of installations. Installing FreshTomato * Basic concepts and procedures Upgrading FreshTomato * Perform a Remote/Scripted Upgrade Scheduler * Schedule FreshTomato to "wake up" network devices Networking *

integrating_home_assistant_with_freshtomato

anonymous@undisclosed.example.com (Anonymous) — Wed, 10 Dec 2025 20:43:12 +0000

Integrate FreshTomato with Home Assistant Integrating Home Assistant with FreshTomato allows you to track devices connected to a wireless router running FreshTomato firmware. See this Home Assistant article for an example of how to configure a basic setup:

ip_script

anonymous@undisclosed.example.com (Anonymous) — Thu, 31 Oct 2024 21:36:31 +0000

Determine external IP for all MultiWAN interfaces and log to file This script will discover the WAN IP of all WAN interfaces in a MultiWAN configuration and log them in the file: “/tmp/WAN-IPs” : #!/bin/sh WAN="$(nvram get wan_ifname)" WAN2="$(nvram get wan2_ifname)" WAN3="$(nvram get wan3_ifname)" WAN4="$(nvram get wan4_ifname)" if [ "$WAN" != "" ] then if [ "$(ifconfig $WAN | grep -q UP; echo $?)" == "0" ] then echo "WAN IP address: $(curl -s --interface $WAN http://ip…

ipsec_on_freshtomato

anonymous@undisclosed.example.com (Anonymous) — Fri, 05 Dec 2025 18:28:24 +0000

Set up IPSEC IPSEC is an aging protocol. In many ways, it is inferior to many of the more current VPN protocols, such as OpenVPN and Wireguard. For these reasons, there is no official wiki page explaining how to configure it. However, these unofficial discussion threads and guides should help you get started with configuring IPSEC.

ipt-24

anonymous@undisclosed.example.com (Anonymous) — Wed, 06 Nov 2024 22:53:06 +0000

IP Traffic - Last 24 Hours The IP Traffic - Last 24 Hours menu displays bandwidth used on selected network IP addresses/ranges during the last 24 hours. Do not confuse this with the Bandwidth/Last 24 Hours function. IPs currently on graphic: allows you to select from which IP addresses/ranges you want to display bandwidth data.

ipt-daily

anonymous@undisclosed.example.com (Anonymous) — Wed, 06 Nov 2024 23:30:45 +0000

IP Traffic - Daily The IP Traffic - Daily menu shows details of daily bandwidth usage history per IP address. IP Traffic - Daily History Here, a table is displayed showing details of daily bandwidth usage history per address. The last line of the table shows total usage of the host listed on that line.

ipt-details

anonymous@undisclosed.example.com (Anonymous) — Wed, 27 Nov 2024 00:00:41 +0000

IP Traffic - Transfer Rates This menu displays detailed IP Transfer Rate data for each client IP address. The Transfer Rates section displays a table of detailed client transfer rate data, categorized in various ways. The Options section contains the configuration settings for the IP Traffic - Transfer Rates table.

ipt-graphs

anonymous@undisclosed.example.com (Anonymous) — Mon, 28 Oct 2024 15:52:58 +0000

IP Traffic - View Graphs This menu displays pie charts of the bandwidth used for each IP address. Each address's bandwidth displays in a different colour. Each chart sorts connections based on certain criteria. Each section in this menu has a corresponding table with more information.

ipt-monthly

anonymous@undisclosed.example.com (Anonymous) — Mon, 28 Oct 2024 16:30:48 +0000

IP Traffic - Monthly The IP Traffic - Monthly menu displays a table containing details of the monthly bandwidth usage history per IP address. The last table line shows total usage of the host listed on that line. IP Traffic - Monthly History The table shown here can be sorted in increments/decrements by [re]clicking on the header of your choice.

ipt-realtime

anonymous@undisclosed.example.com (Anonymous) — Wed, 06 Nov 2024 22:50:11 +0000

IP Traffic - Real-time The IP Traffic - Real-Time menu displays real-time bandwidth being used on selected network IP addresses/ranges. IP Traffic Monitoring is similar to Bandwidth Monitoring, but it categorizes the data by individual LAN IP address

jffs

anonymous@undisclosed.example.com (Anonymous) — Fri, 12 Nov 2021 00:57:48 +0000

JFFS The JFFS menu contains settings and information used to create, prepare and view the status of a JFFS2 partition used for permanent storage. Common routers contain two types of permanent storage: Flash - is the storage area where the FreshTomato firmware image is uploaded, stored and executed. At boot time, the image is loaded into a squash filesystem which means it's executed read-only. Flash size is measured in Megabytes (

logout

anonymous@undisclosed.example.com (Anonymous) — Sun, 04 Jun 2023 18:52:08 +0000

Logout Clicking Logout logs you out of FreshTomato's (Linux OS) firmware and clears your user session. This will take you back to the initial login screen, where you're prompted to enter your logon credentials. This sometimes causes confusion, as users believe that they

mac_address

anonymous@undisclosed.example.com (Anonymous) — Tue, 18 Nov 2025 06:05:08 +0000

MAC Address The MAC Address menu has settings to let you electronically change (or “spoof”) the MAC (Media Access Control) address of various network interfaces. Note that this function does not change the factory-assigned MAC Address in the device's chip. It just overlays the different address in software.

media_bridge

anonymous@undisclosed.example.com (Anonymous) — Sat, 15 Nov 2025 18:31:23 +0000

Configuring Media Bridge Mode Support for Media Bridge mode started with r2021.6. The initial setup can be done with the following steps: Wireless Mode and Settings * Go to the Network menu. * Scroll down to the section for whatever wireless module you wish.

monitor_connections

anonymous@undisclosed.example.com (Anonymous) — Fri, 17 Oct 2025 17:43:55 +0000

Actively monitor connections There are cases when you want to monitor a specific connection type going from/to/through the router. The following example (run via SSH) tracks DNS requests towards name servers: watch -tn5 “conntrack -L -p udp --

nas-bittorrent

anonymous@undisclosed.example.com (Anonymous) — Tue, 28 Oct 2025 01:03:43 +0000

BitTorrent client (Transmission) Transmission is an open source BitTorrent client. With is, you can download/upload torrents directly on your router. The result is that you won't have to leave a LAN device running, such as a PC, just to share Torrents. In order to share large files, you'll need some form of external storage, such as an external

nas-ftp

anonymous@undisclosed.example.com (Anonymous) — Wed, 27 Nov 2024 17:23:52 +0000

FTP Server The built-in File Transfer Protocol Server is an alternative way to transfer files to/from your router and its attached storage. This menu contains settings to configure that server. It's divided into sections including: FTP Server Configuration, Directories, Limits, Custom Configuration and User Accounts.

nas-media

anonymous@undisclosed.example.com (Anonymous) — Mon, 15 Sep 2025 14:13:24 +0000

Media / DLNA Server Here you can enable minidlna, an internal media server that lets you share media content. For example, you can share media files from USB storage connected to the router towards DLNA clients. Status Start Now/Stop Now: clicking this starts/stops the minidlna server, whichever is the opposite of its current state.

nas-samba

anonymous@undisclosed.example.com (Anonymous) — Fri, 11 Jul 2025 15:47:03 +0000

File sharing In this menu, you can enable and configure Samba filesharing. Samba is a Linux clone of Microsoft's SMB (Server Message Block) filesharing protocol. Samba allows FreshTomato to “speak” the same language as Windows for file sharing across a

nas-ups

anonymous@undisclosed.example.com (Anonymous) — Wed, 27 Nov 2024 18:00:48 +0000

UPS Monitor The UPS Monitor menu has settings and information to let you monitor your Uninterruptible Power Supply. Monitoring is available only for APC UPSes with a USB connection compatible with the APC smart protocol library. The UPS Monitor library is included only in the Mega-VPN and AIO

nas-usb

anonymous@undisclosed.example.com (Anonymous) — Tue, 22 Apr 2025 23:22:51 +0000

USB Support The USB Support menu includes sections for USB Support and Attached Devices. These sections include settings to enable or disable USB port support, configure USB-related printers and configure settings for USB-attached storage. There are also settings to support 3G/4G/5G USB modems.

one_off_reboot

anonymous@undisclosed.example.com (Anonymous) — Thu, 31 Oct 2024 21:41:25 +0000

Schedule a One-off Reboot (or any other command) What if you wanted to perform, for example, a restart of your hardware device? You might not want to perform that action until some conditions are met. For example, when users stop needing Internet connectivity.

onlinetests

anonymous@undisclosed.example.com (Anonymous) — Fri, 14 Nov 2025 23:17:13 +0000

Online testing sites Adblock tests (Simple) https://adblock.turtlecute.org (More thorough) (Simple) Browser/Ad tracking tests Bufferbloat rating tests Connection benchmark tests DNS (generic) tests

opendns_on_tomato

anonymous@undisclosed.example.com (Anonymous) — Sat, 13 Sep 2025 17:35:02 +0000

OpenDNS on FreshTomato OpenDNS offers an alternative your ISP's/organization's own DNS servers. Business and consumer-grade services are available for any budget. Why OpenDNS? Using OpenDNS servers for DNS resolution can have many benefits, depending on the plan you choose:

openvpn_extra_connection

anonymous@undisclosed.example.com (Anonymous) — Fri, 22 Aug 2025 23:08:38 +0000

Additional OpenVPN Server/Client connections There are rare situations when you might want to add more OpenVPN connections (Server/client) than are allowed in the Web interface. First, consider whether you're using the right technology. For multiple site-to-site connections, you'll probably find

qos-classify

anonymous@undisclosed.example.com (Anonymous) — Tue, 14 Feb 2023 11:49:53 +0000

FIXME

qos-ctrate

anonymous@undisclosed.example.com (Anonymous) — Tue, 14 Feb 2023 11:50:25 +0000

FIXME

qos-detailed

anonymous@undisclosed.example.com (Anonymous) — Thu, 31 Oct 2024 21:19:37 +0000

QoS Details View Details When QoS is running, and FreshTomato is routing packets, this menu displays a table containing: * A list of all active TCP and UDP connections managed by the router. * Each connection's source and destination IP address and ports.

qos-graphs

anonymous@undisclosed.example.com (Anonymous) — Tue, 14 Feb 2023 11:50:04 +0000

FIXME

qos-settings

anonymous@undisclosed.example.com (Anonymous) — Sat, 13 Sep 2025 13:52:30 +0000

QoS - Basic Principles Quality of Service (QoS) is a method to prioritize/penalize predefined types of traffic. QoS is a complex topic so this text will discuss only enough basic principles to help you configure an initial setup. QoS is not Bandwidth Limiter

reboot

anonymous@undisclosed.example.com (Anonymous) — Sat, 15 Nov 2025 18:09:13 +0000

Reboot The Reboot command restarts the router without changing/erasing any settings. If you enabled any logging functions, their history may be reset unless you used permanent storage. This varies for each configuration by location selection. A countdown timer appears, indicating the estimated time before the router finishes rebooting and the web interface is available again.

releases

anonymous@undisclosed.example.com (Anonymous) — Thu, 23 Apr 2026 13:05:40 +0000

Releases Version Release date Build Notes 2026.2 24 Apr 2026 AX + ARM + MIPS ChangeLog 2026.1 15 Feb 2026 AX + ARM + MIPS 2025.5 21 Dec 2025 AX + ARM + MIPS 2025.4 05 Oct 2025 ARM + MIPS 2025.3

remote_upgrade_poc

anonymous@undisclosed.example.com (Anonymous) — Sat, 19 Oct 2024 04:44:54 +0000

Remotely Upgrade FreshTomato This Wiki article originates from a thread on the Tomato Forums titled: Remotely upgrade FreshTomato initiated on Dec 28, 2022 by user: xixix@linksysinfo It describes requirements, use cases, preconditions, approach, facilitators, deal-breakers, and proof of concept.

restrict-edit

anonymous@undisclosed.example.com (Anonymous) — Mon, 15 Sep 2025 14:16:35 +0000

Access Restriction The Access Restriction menu contains functions that let you block: * Access to the entire Internet. * Access to portions of the the Internet. * WiFi access to the network. Access Restriction rules only apply to HTTP (unencrypted) connections

restrict

anonymous@undisclosed.example.com (Anonymous) — Tue, 22 Feb 2022 15:18:50 +0000

retain_dhcp_lease_info_after_a_reboot

anonymous@undisclosed.example.com (Anonymous) — Thu, 31 Oct 2024 21:32:17 +0000

Retain DHCP Lease Information after a Reboot By default, dnsmasq stores DHCP lease data in (volatile) RAM. This means that operations such as a reboot will erase the lease database, forcing a new one to be created. This could be inconvenient, since client devices might receive a new IP address after DHCP renewal. For dnsmasq to maintain its DHCP lease information, the router needs persistent storage, (such as USB).

router_to_router_ssh

anonymous@undisclosed.example.com (Anonymous) — Fri, 17 Oct 2025 17:38:18 +0000

Enable Password-less Router-to-Router SSH Encryption Overview This setup allows a primary router, (the “SSH Client”) to control a secondary router (the “SSH Host”), from the command-line, through an encrypted (tunnel) connection. FreshTomato includes

schedule_wol

anonymous@undisclosed.example.com (Anonymous) — Thu, 31 Oct 2024 20:38:53 +0000

Schedule Tomato To "Wake Up" Network Devices FreshTomato includes a Wake-on-LAN (WoL) function under the Tools menu. While useful, this function must be performed manually every time you wish to wake a device. Instead, waking devices can be performed automatically using the Scheduler function.

sidebar

anonymous@undisclosed.example.com (Anonymous) — Tue, 15 Apr 2025 16:32:41 +0000

---------- freshtomato.org ---------- Wiki ▸ About ▸ Releases ▸ Hardware compatibility ▸ 3G/4G/5G compatibility ▸ Feature matrix ▸ Documentation ▸ HOWTOs ▸ FAQ ---------- Forum ---------- AX Download Changelog Development Bug track ARM Download Changelog Development Bug track MIPS Download Changelog Development Bug track ---------- TomatoAnon Style Guidelines ✔️ Help (WikiText Syntax) 🧑‍🤝‍🧑 Credits 💰 Donations ----------

speedtest

anonymous@undisclosed.example.com (Anonymous) — Sat, 23 Mar 2024 20:48:47 +0000

Run a Speedtest from the Command Line Interface Typically, you test connection speed by visiting sites like speedtest.net or fast.com. However, situations may arise when you need to test the FreshTomato device remotely or you just want to test from the command line instead of via the Web interface.

splashd

anonymous@undisclosed.example.com (Anonymous) — Tue, 01 Jul 2025 01:30:45 +0000

Captive Portal The Captive Portal works in a similar way to a WiFi hotspot in a public place. It presents WiFi users with a simple webpage, and prompts them to agree to terms before allowing them access to the network. If the user clicks on “OK, I agree!

start

anonymous@undisclosed.example.com (Anonymous) — Fri, 05 Dec 2025 18:00:44 +0000

Welcome to FreshTomato What's FreshTomato? FreshTomato is an open source, Linux-based firmware replacement project for home and SOHO WiFi routers. FreshTomato is distributed with the GPL license. Chipset Support FreshTomato supports systems based on

status-devices

anonymous@undisclosed.example.com (Anonymous) — Fri, 07 Nov 2025 16:47:10 +0000

Device List The Device List menu displays an overall view of the devices connected to your LAN. Information is gathered from several sources, including DHCP leases, ARP tables, and WiFi clients. Interface: lists the interface on which the router sees the device.

status-log

anonymous@undisclosed.example.com (Anonymous) — Wed, 20 Aug 2025 21:25:13 +0000

Logs This menu lets you view the last 25/50/100 lines in FreshTomato's system log, or even the entire contents of the log file (View All). The size of All is based on the Logging setting you manually configure. Clicking on the Scroll to bottom

status-overview

anonymous@undisclosed.example.com (Anonymous) — Wed, 27 Aug 2025 17:32:41 +0000

Overview This page summarizes data needed to verify status, basic configuration settings and hardware specifications. The Overview page is split into sections including System, Ethernet Ports State, WAN, LAN and Wireless. System This section displays hardware specifications and resource usage and information.

status-webmon

anonymous@undisclosed.example.com (Anonymous) — Fri, 22 Aug 2025 21:22:28 +0000

Web Usage This menu allows you to enable Web Usage monitoring between the LAN and the Internet, and view tables of both Recently Visited Websites and Recent Web Searches. This can be useful if you have concerns about users' Web browsing patterns. Parents often use this to monitor/supervise childrens' browsing habits, or just to gather statistics. (Default Disabled). Since release 2020.6, Web Monitoring also works for secure (https) websites.

style_guidelines

anonymous@undisclosed.example.com (Anonymous) — Mon, 09 Jun 2025 15:06:12 +0000

Style Guidelines (Wiki Editing) Wiki Editing Rights To edit the Wiki, you'll need to get new user credentials. You can request access by sending a personal message to user “@rs232” on the Tomato Forum. Make sure to include your email address and preferred username.

toggle_radio

anonymous@undisclosed.example.com (Anonymous) — Sun, 19 Oct 2025 20:22:21 +0000

Turn on/off WiFi Radio Elements from a Script Full Wireless Operation You can enable or disable WiFi from the command line using the following system commands: Toggle: /sbin/radio toggle Force radio off: /sbin/radio off Force radio on:

tools-iperf

anonymous@undisclosed.example.com (Anonymous) — Wed, 06 Nov 2024 23:34:08 +0000

iPerf IPerf is a tool that lets you measure and tune network performance. IPerf can be run in client or server mode. Generally, client mode is used. iPerf requires you to know of a reliable public server with which to use it. Currently, the official IPerf webpage hosts a short list of public iPerf servers:

tools-ping

anonymous@undisclosed.example.com (Anonymous) — Mon, 02 Mar 2026 21:10:44 +0000

Ping This menu provides a ping function in the web interface. Ping lets you send ICMP echo request messages to see if they're returned back. This allows you to test connectivity to another IP address directly from the router. Address: here, specify the domain name or IP address you wish to ping.

tools-qr

anonymous@undisclosed.example.com (Anonymous) — Fri, 15 Nov 2024 04:12:58 +0000

WiFi QR Codes Since release 2021.6, this menu makes it easy to produce and print QR codes to identify your WiFi network to client devices. Modern devices can connect to WiFi by simply pointing their camera at a QR code. The QR code contains the information needed to establish a connection, including SSID and password. This can be useful in venues like Internet cafes, hostels/hotels, or even at house parties. Basically, it's useful anywhere that sharing of WiFi credentials has to be easy.

tools-shell

anonymous@undisclosed.example.com (Anonymous) — Wed, 06 Nov 2024 23:06:00 +0000

System Commands This menu provides interactive access to FreshTomato's internal command shell from within the graphical web interface. Below are just a few of the many commands available in the System Commands shell: While limited in functionality, this can be handy if you want to perform a simple operation (like restarting a service). It's also useful when you are unable to access the device directly via remote protocols like ssh or telnet.

tools-survey

anonymous@undisclosed.example.com (Anonymous) — Sun, 27 Oct 2024 19:25:17 +0000

Wireless Survey This menu lets you visualize your own (“internal”) & other peoples' (“external”) WiFi networks with your router as the reference point. The graphics at the top display SSIDs as ellipses. Below that, a table displays detailed information on each internal and external WiFi network.

tools-trace

anonymous@undisclosed.example.com (Anonymous) — Wed, 06 Nov 2024 23:03:04 +0000

Traceroute This menu provides a traceroute function from in the web interface. Traceroute let you trace the route between the FreshTomato device and another device on the LAN or the Internet. This helps verify optimal paths and locate potential traffic bottlenecks/blockages.

tools-wol

anonymous@undisclosed.example.com (Anonymous) — Wed, 06 Nov 2024 23:29:19 +0000

Wake on LAN This function lets you a send a Wake-on-LAN signal (“magic packet”) to wired network devices to wake them/power them on. Wake-on-LAN is generally not supported by wireless devices. The list of devices on this menu includes:

usb_formatting_with_swap_partition

anonymous@undisclosed.example.com (Anonymous) — Thu, 31 Oct 2024 23:51:55 +0000

USB formatting with swap partition A swap partition can prevent several types of insufficient RAM symptoms, such as system instability, failing processes, and in severe cases, even reboots. All this depends largely on the network load and on FreshTomato's configuration. Some functions require much more RAM than others, and higher network traffic puts more load on the router and requires more RAM. USB storage is an excellent way to provide swap space.

virtual_wireless

anonymous@undisclosed.example.com (Anonymous) — Fri, 26 May 2023 05:33:39 +0000

* *Interface - The wireless VIF (Virtual Interface) name Enabled - If this VIF should be active and brought online SSID - The wireless Service Set Identifier Mode - Allows selection of Interface mode: Access Point, WDS, Wireless Client, etcetera

vpn-client

anonymous@undisclosed.example.com (Anonymous) — Sat, 23 Aug 2025 04:23:21 +0000

OpenVPN Client This menu contains all the settings for FreshTomato's OpenVPN client. Generally, settings required in this menu will depend on the external VPN provider you use. Many providers that support OpenVPN have help on their website explaining how to configure FreshTomato for use with their service. We recommend checking your provider's website for details.

vpn-pptp-online

anonymous@undisclosed.example.com (Anonymous) — Tue, 14 Feb 2023 11:51:06 +0000

FIXME

vpn-pptp-server

anonymous@undisclosed.example.com (Anonymous) — Tue, 14 Feb 2023 11:50:58 +0000

FIXME

vpn-pptp

anonymous@undisclosed.example.com (Anonymous) — Sat, 23 Aug 2025 04:25:07 +0000

PPTP Client This menu contains all the settings for FreshTomato's PPTP VPN client. PPTP is considered an outdated protocol, in both speed and security. You are advised to use OpenVPN or WireGuard instead. Both provide faster performance and higher security. If you still want to run PPTP, please continue on.

vpn-server

anonymous@undisclosed.example.com (Anonymous) — Wed, 19 Nov 2025 20:32:11 +0000

OpenVPN Server Here, you can view/configure settings for OpenVPN Servers via the web interface. A custom configuration area allows more settings customization. OpenVPN is an evolving VPN implementation using SSL/TLS security. It has several advantages over some older protocols, including:

vpn-tinc

anonymous@undisclosed.example.com (Anonymous) — Thu, 28 Nov 2024 23:27:23 +0000

Tinc Tinc is a newer VPN technology. Unlike with other protocols, it lets you create partial/full mesh VPN connections without having to define every endpoint. A minimum of configuration is needed for each site. It's the quickest way to develop a mesh VPN between network sites.

vpn-wireguard

anonymous@undisclosed.example.com (Anonymous) — Thu, 26 Mar 2026 10:42:48 +0000

WireGuard VPN Introduction WireGuard can be configured and run via the web interface, or at the command line. Either lets you configure WireGuard settings and generate configuration files. This page describes how to configure Wireguard through the web interface.

web-mysql

anonymous@undisclosed.example.com (Anonymous) — Tue, 14 Feb 2023 11:50:35 +0000

FIXME

web-nginx

anonymous@undisclosed.example.com (Anonymous) — Wed, 27 Nov 2024 02:12:31 +0000

Nginx & PHP This menu contains settings for FreshTomato's internal web server (Nginx) and optional support for PHP. Note that FreshTomato also has a built-in (httpd) web server used only for router administration. Httpd is based on a more modern version of Nginx.

wireguard_on_freshtomato

anonymous@undisclosed.example.com (Anonymous) — Wed, 12 Nov 2025 21:57:45 +0000

Wireguard Wireguard is a revolutionary VPN technology that allows for very fast throughput with low latency compared to traditional VPN technologies. Here are some rough benchmarks that illustrate the performance differences: Web interface or command-line configuration

wireless_ethernet_bridge

anonymous@undisclosed.example.com (Anonymous) — Sat, 15 Nov 2025 19:02:17 +0000

Configuring Wireless Ethernet Bridge Mode Wireless Ethernet Bridge Mode is an easy way to expand your network without having to run long Ethernet cable between devices. Limitations and Workarounds This mode is not available for all routers supporting FreshTomato. However, Media Bridge mode can serve as an alternative.

wireless_filter

anonymous@undisclosed.example.com (Anonymous) — Tue, 09 Mar 2021 23:58:39 +0000

Wireless Filter The Wireless Filter menu allows you to specify the MAC addresses of the only devices that will be allowed to connect on wireless interfaces. It is effectively a MAC Address whitelist for wireless access. (Default: Disabled). MAC Address:

wireless_filtering

anonymous@undisclosed.example.com (Anonymous) — Wed, 12 Feb 2025 03:21:23 +0000

Wireless MAC Address filtering via script/scheduler The easiest way to perform Wireless MAC address filtering is to use the controls in FreshTomato's Wireless Filter menu. However, there are occasions when you might prefer/need to block MAC addresses in a script.

wireless_interface_modes_table

anonymous@undisclosed.example.com (Anonymous) — Fri, 12 Sep 2025 07:31:38 +0000

Choosing a Wireless Interface Mode This table contains information to help you choose the appropriate Wireless Interface Mode for your network needs. AP Mode AP + WDS Mode Wireless Client Mode Wireless Ethernet Bridge Repeater

wireless_interoperability

anonymous@undisclosed.example.com (Anonymous) — Thu, 08 May 2025 04:33:42 +0000

Wireless Interoperability Table 🛜 = Given this setting 💡 = Possible 🚫 = Not possible Access Point Mode Interface Access Point WDS Wireless Client Wireless Ethernet Bridge WDS Media Bridge wl0 🛜