Configuring Firewall Rules

Oct 13, 2025 by recoveryshake.com 115 views

OpenWRT No SSH from WAN: A Step-by-Step Guide to Enabling Remote Access

As an OpenWRT user, you may have encountered issues with accessing your router remotely through SSH from the WAN (Wide Area Network) interface. This can be frustrating, especially when you need to troubleshoot or configure your router from a remote location. In this article, we will guide you through the process of enabling SSH access from the WAN interface on your OpenWRT router.

Understanding the Issue

By default, OpenWRT blocks incoming SSH connections from the WAN interface for security reasons. This is a good practice, as it prevents unauthorized access to your router. However, if you need to access your router remotely, you will need to configure the firewall rules to allow incoming SSH connections.

Configuring Firewall Rules

To enable SSH access from the WAN interface, you will need to configure the firewall rules on your OpenWRT router. Here's a step-by-step guide to do so:

Step 1: Access the Firewall Rules

To access the firewall rules, follow these steps:

Log in to your OpenWRT router using the LuCI web interface.
Navigate to Network > Firewall > Traffic Rules.
Scroll down to the "Open ports on router" section.

Step 2: Add a New Rule

To add a new rule, click on the + button at the top right corner of the page. This will open a new rule configuration page.

Step 3: Configure the Rule

In the new rule configuration page, enter the following details:

Chain: Select input as the chain.
Protocol: Select tcp as the protocol.
Destination Port: Enter 22 (the default SSH port).
Source: Select wan as the source.
Target: Select ACCEPT as the target.

Step 4: Save the Rule

Once you have entered the details, click on the Save button to save the new rule.

Enabling SSH Access

Now that you have configured the firewall rule, you can enable SSH access from the WAN interface. To do so, follow these steps:

Step 1: Enable SSH Server

To enable the SSH server, navigate to System > System > Administration > SSH.

Step 2: Configure SSH Server

In the SSH server configuration page, select Enabled as the status.

Step 3: Save the Configuration

Once you have enabled the SSH server, click on the Save button to save the configuration.

Testing SSH Access

Now that you have enabled SSH access from the WAN interface, you can test it by connecting to your router using an SSH client. Here's how to do it:

Step 1: Connect to Your Router

To connect to your router, use the following command:

ssh root@your-router-ip

Replace your-router-ip with the IP address of your OpenWRT router.

Step 2: Authenticate

Once you have connected to your router, you will be prompted to authenticate. Enter the root password to authenticate.

Troubleshooting

If you encounter any issues while enabling SSH access from the WAN interface, here are some troubleshooting tips:

Check Firewall Rules: Make sure that the firewall rule is enabled and configured correctly.
Check SSH Server Status: Ensure that the SSH server is enabled and running.
Check IP Address: Verify that the IP address of your OpenWRT router is correct.

Conclusion

Enabling SSH access from the WAN interface on your OpenWRT router is a straightforward process. By following the steps outlined in this article, you can configure the firewall rules and enable SSH access from the WAN interface. Remember to test your SSH connection to ensure that it is working correctly. If you encounter any issues, refer to the troubleshooting section for help.
OpenWRT No SSH from WAN: Frequently Asked Questions (FAQs)

In our previous article, we covered the steps to enable SSH access from the WAN interface on your OpenWRT router. However, we understand that you may still have some questions or concerns about the process. In this article, we will address some of the frequently asked questions (FAQs) related to enabling SSH access from the WAN interface on OpenWRT.

Q: Why is SSH access from WAN blocked by default?

A: SSH access from WAN is blocked by default for security reasons. This prevents unauthorized access to your router and reduces the risk of hacking or other security breaches.

Q: How do I know if my OpenWRT router supports SSH access from WAN?

A: Most modern OpenWRT routers support SSH access from WAN. However, it's always a good idea to check your router's documentation or manufacturer's website to confirm.

Q: What are the risks of enabling SSH access from WAN?

A: Enabling SSH access from WAN increases the risk of hacking or other security breaches. This is because SSH access from WAN allows remote access to your router, which can be exploited by malicious users.

Q: How do I secure my OpenWRT router after enabling SSH access from WAN?

A: To secure your OpenWRT router after enabling SSH access from WAN, follow these best practices:

Use a strong password for the root user.
Enable two-factor authentication (2FA) for SSH access.
Limit SSH access to specific IP addresses or networks.
Regularly update your OpenWRT firmware and packages.

Q: Can I enable SSH access from WAN on a specific port other than 22?

A: Yes, you can enable SSH access from WAN on a specific port other than 22. To do so, follow these steps:

Navigate to System > System > Administration > SSH.
Select Custom as the SSH port.
Enter the desired port number (e.g., 2222).
Save the changes.

Q: How do I troubleshoot SSH access issues from WAN?

A: To troubleshoot SSH access issues from WAN, follow these steps:

Check the firewall rules to ensure that SSH access is enabled.
Verify that the SSH server is running and configured correctly.
Check the IP address of your OpenWRT router to ensure that it is correct.
Try connecting to your router using a different SSH client or software.

Q: Can I enable SSH access from WAN on a specific interface other than WAN?

A: Yes, you can enable SSH access from WAN on a specific interface other than WAN. To do so, follow these steps:

Navigate to Network > Firewall > Traffic Rules.
Select the desired interface (e.g., LAN, VLAN, etc.).
Add a new rule to allow SSH access from the selected interface.
Save the changes.

Conclusion

We hope that this FAQ article has addressed some of the common questions and concerns related to enabling SSH access from the WAN interface on OpenWRT. Remember to always follow best practices for securing your OpenWRT router and to regularly update your firmware and packages to ensure the latest security patches.