OpenWrt Config Generator

1 · System

▾

Hostname

Root Password

AdGuardHome Password plain text → bcrypt on generate

SSH Public Key multiline supported

Disable SSH password login (key auth only) Recommended if SSH public key is set above

Timezone

Sets both ZONE_NAME and TIME_ZONE simultaneously

2 · WiFi

▾

LAN SSID default: hostname

LAN WiFi Password

Guest SSID default: Free_12345678

Guest WiFi Password

Country Code

Log Level 0=verbose 5=off

2.4 GHz Channel empty=auto

Wrong channel may prevent WiFi from appearing

5 GHz Channel empty=auto

Wrong channel may prevent WiFi from appearing

6 GHz Channel empty=auto · WiFi 6E/7 only

Wrong channel may prevent WiFi from appearing

Dense urban WiFi optimization Aggressive band steering & roaming — recommended for apartments / HCMC city

Enable IP Camera VLAN & WiFi Creates isolated camera network with DNS/NTP redirect and optional internet access

3 · LAN

▾

ℹ LAN IP is derived from NET_PREFIX.VLAN_ID.1, e.g. 192.168.10.1 with defaults.

LAN VLAN ID 1–254

LAN Network Prefix

Subnet Mask

Guest VLAN ID 1–254

DHCP Start

DHCP Limit

90 = assign .100–.254 statically · 190 = assign .200–.254

4 · WAN & Failover

▾

PPPoE Username leave empty to use DHCP

WAN VLAN ID 2–4093

WAN-B VLAN ID 2–4093

Tag WAN interface (DSA routers) Required for VLAN-tagged WAN ports — enabled by default

Enable backup WAN interface (wanb) Added to mwan3 load balancing / failover policy

Software NAT Offloading

Hardware NAT Offloading Requires software offload. Check router SoC support first.

4G/5G MBIM Modem failover Requires luci-proto-modemmanager + kmod-usb-net-cdc-mbim packages

USB Tethering failover (Android / iPhone) Requires kmod-usb-net-rndis + kmod-usb-net-cdc-ncm + kmod-usb-net-ipheth

5 · WireGuard Client

▾

ℹ Creates a dedicated VLAN + SSID routed through the tunnel. Regular LAN uses direct ISP. Clients choose by SSID.

Interface Name e.g. wg0, warp — leave empty to disable

No hyphens (UCI limitation) — use underscores

Private Key

Server Public Key

WireGuard IPv4 e.g. 10.0.0.2/32

WireGuard IPv6 e.g. fd00::2/128

Server Endpoint Host

Endpoint Port

WG SSID

WG WiFi Password

Preshared Key optional

Allowed IPs default: 0.0.0.0/0 ::/0

WG LAN VLAN ID 2–4093

WG LAN Gateway IP

WG LAN Subnet

6 · DDNS & Static Lease

▾

ℹ IPv6 DDNS requires no client-side updater — the router fetches the host's IPv6 address from DHCPv6 leases automatically via ipv6-fetcher.

Enable Cloudflare DDNS (IPv4 + IPv6)

Cloudflare API Token

Lookup Host e.g. openwrt.example.com

Domain e.g. [email protected]

Static Lease Last Octet

Host gets IP x.x.x.STATIC_LEASE_ID

Static Lease Hostname

DHCPv6 DUID set after first boot in Network › DHCP › Static Leases

Output

bcrypt ready

PACKAGES

—

SCRIPT PREVIEW (config section)

Copy packages → paste into Customize packages field
Copy script → paste into First boot script field
Open Firmware Selector → search your device
Request Build → download & flash