@groentjuh One question, how do you deal with data leak if add vpn interface to mwan3?
Certainly sounds like the community could benefit greatly from your knowledge, if you care to share more about your set up and fixes I (and probably many others) would like to read about it. @groentjuh,
The ability to select one or many ovpn configuration files and purge them (at the moment you can only purge all).
G
2 Likes
Added 
SECURITY IMPROVEMENTS
-
Wired client isolation toggle
-
Wireless client isolation toggle
(when router is used as extension access point with untrusted IoT devices)
-
Support DNScrypt / DNSSEC
Why:
https://dnsprivacy.org/wiki/display/DP/DNS+Privacy+-+The+Problem
- How:
- Support DNScrypt.NL (free secure DNS service)
https://dnscrypt.nl/
NLnet; DNS Security Fund
USABILITY IMPROVEMENTS
-
Display current change log in update panel of GUI
-
Support Wireguard VPN service auto-configuration API
What does it means that wireguard service auto-configuration api? Is there any detailed description?
It has supported.
We have integrated with cloudflare’s dns.
Do you mean vlan?
802.11r roaming with 802.11k/v assistant
1 Like
Added to the list
Same ssid for both 2.4ghz and 5ghz channel.
Clients can connect to the AP in different channel automatically according to the rssi and distance.
This function is called as ‘‘smart connect’’ in some asus routers.
Hi.
Thanks for your input.
MWan3 - causes some people problems, so a simple on/off button is more desirable than having to go into the guts of Luci.
IPV6 - yes, might be the future but is still very prone to leaking DNS (especially under Windows). So again, a simple on/off button (script) saves making a lot of editing when you upgrade firmware etc.
VPN Ping And Reconnect - many have reported that the VPN “hangs” even though saying “connected”. My bash script may be shitty but I am not a programmer and that was the best I could do.
No, I do not trust Google for DNS / anything important but I don’t mind pinging them (note: through the VPN, not using my ISP). If that is a bother then you can change 8.8.8.8 to something else!).
I hope this clarifies.
Added to the list @carrionlee
It is currently possible to do this already using Luci, but it would be really good if GL-iNet added it to the main interface so that basic users can use it too.
How to do this in luci? Just set the same ssid or any other options?
The design-as-I-say-it is like this: my mobile clients can connect to the 5ghz channel when I’m in the same room with the AP, and connect to the 2.4ghz channel when I’m in the other room. Once I come back to the AP’s room, the clients can also connect back to the 5ghz automatically.
Yup just set the same SSID and password for both. From a router perspective there is no difference than having them separated, all the magic happens at the clients. It’s up to their software to be smart and choose the right one. Older clients might just pick 2.4ghz each time even if 5ghz is stronger.
Thank you for your reply. I just test it with your advise. However, both my android phone (oneplus 5) and iphone 6s sticked to one channel and didn’t change to the other.
When I walked away from the AP, my phones sticked to the 5ghz. Only when the signal was almost disapear, then they changed to 2.4ghz. And when I walked back to the AP, my phones stick to the 2.4ghz and didn’t change to 5ghz channel.
By the way, I’m using the openwrt snapshot firmware
Yup that is how it will work. It’s up to the client to choose the right one. Check the performance using speetest.net for example too
OK, I’ll try gl-inet official firmware later.
The Gl-iNet firmware has some proprietary drivers that give better performance, so it’s always recommend you use that one if there is no need for something else
You can do this now; that’s how I set it up (just use the same SSID). Now, if you mean explicit “band steering” by the router, so far it hasn’t been strictly necessary, as dual-band-capable clients work that out well on their own.
any ETA for a stable v3 release?