I don’t see why it is not possible to run a VPN Server on the MT300N-V2. As far as I read the thread, it is working well. It just can’t be reached, because of your infrastructure.
Put exact this device with exact this configuration at any router and add a simple port forwarding and you can use the Mango as VPN Server. Right?
Why can’t you just follow the advice and plug out the LAN? There is no DHCP running on WAN. And the VPN will be still available.
And depending on the setup you are able to reach the admin panel as well, within the VPN.
Or plug LAN behind the Eero direct on the router (the DHCP, I assume?). With a little luck the delay to the clients is big enough, that the router is ale to answer first.
DHCP requests are not subnet aware. Client asking FF:FF:FF:FF:FF:FF: “hey, has someone data for me?”, any DHCP which is first reply “hey, gotcha friend. here are your data” … And FF:FF:FF:FF:FF:FF (broadcast) is not part of any subnet, as we all know. Not a Mango issue, that’s how it works.
If you’ve hat a different VLAN and a managed switch, it could work. But with a normal switch, you’ll have a ‘race condition’ problem with two DHCP. And even if you’ve solved this, how will be the further routing? The Clients from subnet A won’t be able to easily reach subnet B…
But to make it easy:
Disable DHCP 1:
Put router in ‘Bridge Mode’. This should disable DHCP Server.
Disable DHCP 2:
- login to your router via ssh
- edit the file
/etc/config/dhcp - add
option ignore '1'at the end of blockconfig dhcp 'lan'
Disable DHCP 3:
- Open ‘LuCI’
- Network - Interfaces: LAN - Button: [Edit] - Tab: ‘DHCP Server’
- Subtab ‘General Setup’ - Option: ‘Ignore Interface [x]’
All not tested, because my Mango is on a roadtrip for 4 weeks. I’ve got only FW 4.x devices here.