User Tools

Site Tools




The Connection/Basic controls aren't “Basic” in the sense that they are simple, but rather that these settings control the most fundamental network configuration of the router and other more specialized Gargoyle features depend on these settings. For this reason, it is best to configure these options first and only change them when absolutely necessary.

Device Configuration


Gateway Configuration

The vast majority of the time you will want to select this option, and configure the router as a gateway. When this option is selected your local, LAN traffic is in a distinct subnet and protected from the WAN/internet with a firewall. This option must be selected in order to use firewall features including Quotas, QoS and Access Restrictions.

Wireless Bridge Configuration

When this option is selected, the router is put into a very specialized configuration in which the firewall is inactive, and the router connects via a wireless connection to another Access Point. It is possible to connect as a wireless client to another access point while in Gateway mode too, but what makes this configuration special is that the router and connected hosts will be in the same subnet as the upstream access point. Only activate this mode if you're sure you need it.

Internet / WAN

These controls specify how you connect to the internet. If these options are not set properly you will not be able to connect to anything outside your local network.


Connect Via

Select your connection protocol from this list. Most people will want to connect via the DHCP (wired) option, which is the default. If you have an ADSL connection you should select PPPoE, and put your ADSL modem in bridge mode. Below is a description of all connection options:

  • DHCP (Wired): Obtain WAN IP dynamically with DHCP via the ethernet WAN Port.
  • PPoE (Wired): Connect via PPPoE, which is suitable for ADSL connections. Your ADSL modem should be connected via an ethernet cable to the WAN port of the router.
  • Static IP (Wired): Specify the WAN IP address, subnet mask and gateway manually, and connect via the ethernet WAN port.
  • DHCP (Wireless): Connect to a wireless access point, and obtain an IP from it dynamically via DHCP. The WAN ethernet port will not be used.
  • Static IP (Wireless): Connect to a wireless access point, and specify the WAN IP address, subnet mask and gateway manually. The WAN ethernet port will not be used.
  • 3G (GSM): This option will only appear in the menu if you have a relatively modern router with (1) a USB port (2) 8+ MB of flash and 32+ MB of memory (3) Gargoyle 1.5.1+ (4) a 3G dongle currently attached to the router's USB port. This will allow you to configure a WAN connection via a 3G connection.
  • Disabled: No WAN connection is configured, router will behave like a switch.

Custom MAC Address

Set a custom MAC (hardware) address for the WAN interface. Note that some router models do not support this feature. If your router doesn't support this feature, nothing bad will happen if you try to activate it, it just won't set the MAC as you requested.

Custom MTU

The Maximum Transmission Unit (MTU) is the size of thelargest unit of data, in bytes, that is passed over the network. 1500, the default is usually a reasonable value, but if you are connecting via ADSL it is often a good idea to set this to 1470.


These settings control the Local Area Network (LAN), which consists of the router and the computers/devices that connect to it.


Router IP

This is the IP (IPv4) address of the router on the local network. is the default. Router IP addresses should be in the,, or subnets, which are reserved for local networks.

Subnet Mask

The LAN subnet mask. The default is It doesn't make much sense to use a larger subnet mask, as a subnet mask of this size contains addreses for 254 hosts, far more than any router running gargoyle can handle by itself.

DNS Servers

These controls are slightly different depending on whether you have a router running the newer Gargoyle 1.5.X+ series of releases, or the older versions. However, in both cases, Gargoyle will, by default, serve DNS requests from your default ISP DNS servers.

In older Gargoyle releases you can enter the IP addresses of your preferred DNS servers if you do not widh to use ISP servers.

In newer Gargoyle releases, in addition to specifying custom DNS servers individually, you can specify that you want to use either the Google DNS servers, or those provided by from a dropdown box. This means that if you wish to use one of these alternate servers you will not need to enter the IP addresses manually. If you use the OpenDNS filtering service you should select the OpenDNS servers from this dropdown, and then configure your account in the Dynamic DNS section so that it gets updated properly. On newer releases that will allow the resolution of specialized top-level domains. While most people will not need this feature, leaving this checked does not inhibit performance, and will permit access to websites you otherwise would not be able to resolve.

Force Clients To Use Router DNS Servers

By checking this box you can force all clients connected to the router to use the DNS servers you specify above. Under normal circumstances clients can configure alternate DNS servers if they wish. However, if you check this option all DNS requests will be redirected to the specified servers. This is especially useful if you are using the OpenDNS filtering service.


These settings control the wireless capabilities of your router.


Controls visible in both Client and AP mode

Wireless Mode

This option specifies how the wireless network should function. Most users will want to configure the router as an Access Point (AP), which means that the router will provide a unique wireless network to which clients can connect.

The possible options are:

  • Access Point (AP): Router will provide a unique wireless network to which clients can connect.
  • Client: Router will connect to another wireless network, specified by user. This option is only available when WAN is configured to connect via DHCP (Wireless) or Static IP (Wireless)
  • Client+AP: Router will provide a unique wireless network to which clients can connect, and will connect to another wireless network, specified by user. This option is only available when WAN is configured to connect via DHCP (Wireless) or Static IP (Wireless)
  • AP+WDS: Router will provide a unique wireless network to which clients can connect, and allow WDS bridge connections by routers with compatible hardware/firmware.
  • Ad Hoc: This mode is typically used for mesh networks, a feature not currently implemented in Gargoyle. Only activate this mode if you know what you are doing.
  • Disabled: Disable the wireless functionality of the router.

Operation Mode

This option, which is only visible on wireless N routers, specifies the wireless specification and the frequency band to use on routers capable of dual band operation.

The possible options are:

  • N+G+B: Wireless N, 2.4 GHz operation mode
  • G+B: Wireless G/B only, 2.4 GHZ operation mode
  • B: Wireless B only, 2.4 GHZ operation mode (not recommended, very slow)
  • N+A: Wireless N, 5 GHz operation mode
  • Dual Band: Provide wireless N networks in both the 2.4 GHz and 5GHz bands, only visible when configuring an Access Point

Channel Width

This option is only visible on wireless N routers. It specifies whether to use the narrower 20MHz channels or wider 40MHz channels. In order to get maximum throughput you will need to use wider channel width, but this can result in conflicts/interference if there are a lot of wireless networks in your area. It is best to leave this setting at 20MHz if there are a lot of other wireless networks in your area, but if no other networks are around 40MHz will provide faster wireless speeds.

Transmit Power

You probably don't want to change this setting. Seriously… move along. By default, Gargoyle/OpenWrt enables the highest transmit power permitted by your hardware. Due to hardware differences the actual value reported in the interface may be slightly off… but the highest power possible is consistently enabled, anway. The only reason to change this value is if you want lower transmit power than what is possible. If you want better performance, buy a bigger antenna or try different wireless channels where there may be less interference. Tweaking this setting will not boost the performance of your router.

Wireless MAC Filter

These settings allow you to block or white-list wireless clients by MAC (hardware) address. Note that it isn't too dificult to clone MAC addresses, and therefore MAC filtering isn't a good substitute for proper wireless encryption, but rather should complement it.

Access Point Specfic Controls

These controls are only visible when the router is configured as a wireless Access Point (AP).

Access Point SSID

The name of the wireless network.

Wireless Channel

The channel (frequency) this network should operate on. No channel is any better than any other, but performance will be lower if there are neighboring networks that use the same channel. If there other wireless networks in your area you may want to try different channels, as you may get better performance on some channels than others due to interference.


It is strongly recommended that you encrypt your wireless network, otherwise anyone walking down the street outside will be able to connect. WPA2 PSK is the most secure, widely used encryption algorithm, and it is strongly advised that you configure your network with this encryption method.

The available options are:

  • None: No Encryption (very insecure)
  • WPA2 PSK: Strong Encryption with a password (recommended)
  • WPA PSK: Relatively strong encryption with a password
  • WEP: Weak, easily broken encryption, provided only for backwards compatibility (insecure, not recommended)
  • WPA RADIUS: WPA Encryption with RADIUS server authentication instead of password authentication. Most home networks don't have RADIUS authentication servers, so this option is mostly for business networks.
  • WPA2 RADIUS: WPA2 Encryption with RADIUS server authentication instead of password authentication. Most home networks don't have RADIUS authentication servers, so this option is mostly for business networks.


The password for your wireless network, only visible if you hve enabled encryption.

Broadcast SSID

When people scan the local area for wireless networks, do you want yours to show up? It is recommended that you leave this enabled so that your clients can scan for local networks find yours, and connect. If you disable this, you will have to manually enter the SSID (network name) on all clients – it won't be automatically detected. This option is enabled by default.

Wireless Client Isolation

If this is enabled, wireless clients will be able to interact with the router, but not other clients that have connected wirelessly. This option is disabled by default.

Client Specific Controls

SSID To Join

This is the name of the wireless network to which the router should connect


You can scan for wireless networks in your area if you press this button. You will be able to detect the Name/Channel/Encryption/Signal Strength of local networks automatically, and select your preferred network from a drop-down. This allows you to avoid entering the information manually.

Wireless Channel

The wireless channel (frequency) the AP to which you are connecting operates on.


The type of encryption the AP to which you are connecting is using


The password required to access the AP to which you are connecting. This field is only visible if the AP to which you are connecting uses some type of encryption.

basic.txt · Last modified: 2017/10/12 06:17 by ispyisail