UnTangledRouter UI
RT-AX88U OpenWRT 24.10 · UnTangled 1.0-beta
Internet online
General

Network Map

Live view of your router, the internet connection, and every connected device.

Internet
Connected
203.0.113.42
Clients
8 online
CPU
14%
Memory
38%
Temp
54°C

Topology

192.168.1.0/24
Internet RT-AX88U
5 GHz 2.4 GHz Wired Tap a device for details

Device

Connected Clients

8 devices
DeviceIP AddressConnectionSignalDownload
Advanced Settings

Wireless

Configure your Wi-Fi networks. Changes apply after you press Apply.

Radios

live from iwinfo

5 GHz — Wireless Settings

radio on
Enable radio?Switches this Wi-Fi band on or off. Turning it off disconnects every device using it.Turn this band on or off
Network name (SSID)?The Wi-Fi name devices see when they scan. 1–32 characters.
Shown to devices
Hide SSID?Stops the name being broadcast, so devices must type it to join. Minor privacy only — not real security.Make network invisible
Security?How the Wi-Fi is encrypted. WPA3 is strongest; WPA2/WPA3 keeps older devices working. Avoid Open except for a captive guest network.
Password?The key devices need to join. Use at least 12 characters for a strong network.
Strong
Channel?The radio channel. Auto picks the clearest one; set it manually only to dodge a known busy channel. Width (20–160 MHz) trades range for speed.
Advanced radio settings
Country / region?Regulatory domain (e.g. US, DE, IN). Sets legal channels and power. Match where the router actually is.
Transmit power?Radio power in dBm. Leave blank for the driver maximum. Lower it only to reduce range/overlap between APs.
dBm
Fast roaming (802.11r)?Lets devices hand off between access points with the same SSID almost instantly. Useful with more than one AP; harmless on a single router.smoother multi-AP handoff
WMM / Wi-Fi QoS?Prioritises voice and video over bulk traffic on the air. Keep on — required for 802.11n/ac/ax speeds.
Client isolation?Stops devices on this network from talking to each other — only the internet is reachable. Good for a guest band; leave off at home.
General · Plugin

Mesh Wi-Fi

Blanket your home in one Wi-Fi name, with devices roaming smoothly between routers.

This router
Main router
Backhaul
wired
Routers
2

Seamless roaming

802.11r / k / v · dawn
Hand devices between routers automaticallyphones switch to the strongest router without dropping

Routers in this mesh

2
RouterRoleSignal
RT-AX88U192.168.1.1
Main routerthis router
Study-AP192.168.1.2
Mesh point-58 dBm

Role

Main router
This router leads the mesh. Add satellites with the code below.

Add another router

extend coverage
  1. Install UnTangled + untangled-mesh on the second router.
  2. Connect it to this one — by Ethernet (most reliable) or over Wi-Fi.
  3. On the new router, open Mesh Wi-Fi → Join an existing mesh, then paste this code.
Join code

Join an existing mesh

for a satellite router
Join codefrom the main router's Mesh screen
Matches this router's Wi-Fi name & password to the mesh and turns on roaming. To share one network, also connect it to the main router by Ethernet and switch it to Access Point mode on the LAN screen.
About this plugin
Mesh Wi-Fi is an UnTangled plugin (ships in the UI) driving the device-side untangled.mesh helper from the untangled-mesh package. The screen degrades to an "install the backend" prompt when that package isn't present, and the only live write (roaming) leaves SSID/password untouched so it can't lock you out.
General

Devices

Everything on your network. Give a device a fixed address, block its internet, or wake it up.

Connected & known devices

Device Connection Fixed IP?Always give this device the same local address. Useful for port forwarding, printers, servers and NAS. Block internet?Cuts this device off from the internet (it can still reach the router). Toggle back any time. Wake?Sends a Wake-on-LAN signal to power on a sleeping device. Needs the etherwake package on the router.
Advanced details
Fixed IP is a config host entry in /etc/config/dhcp (static lease by MAC). Block internet is a config rule in /etc/config/firewall (src lan → dest wan, src_mac, target REJECT). Wake runs etherwake on the router.
General

Guest Network

Give visitors internet access without sharing your main password or exposing your LAN.

Guest 1 · 5 GHz
Nebula-Guest
Clients 3Time left 18h 42mIsolation On
Access time?How long a guest device may stay connected before it must rejoin. Unlimited never expires.
Guest 2 · 2.4 GHz
Nebula-IoT
Clients 5Time left UnlimitedIsolation On
Access time?How long a guest device may stay connected before it must rejoin. Unlimited never expires.
Guest 3 · 5 GHz
Not configured
Turn on the toggle to enable a third guest network.
General

Traffic Monitor

Real-time throughput across your internet connection, updated every second.

Download
0.0 Mbps
Upload
0.0 Mbps
Peak download
0.0 Mbps
Today total
42.6 GB

Throughput

last 60 s · Mbps

Top Talkers

by download today
DeviceDownloadUploadShare
General

Usage History

How much data your internet and your devices have used over time.

Internet usage

br-wan
Today
14.8 GB
↓ 12.1 GB · ↑ 2.7 GB
This month
312 GB
↓ 268 GB · ↑ 44 GB

By device?Data used per device for the current period. Needs the nlbwmon package, which records per-device totals on the router.

nlbwmon
DeviceDownloadUploadTotal
Living Room TV192.168.1.110
84.2 GB1.1 GB85.3 GB
MacBook Pro192.168.1.102
61.0 GB12.4 GB73.4 GB
PlayStation 5192.168.1.133
48.7 GB3.2 GB51.9 GB
iPhone 15 Pro192.168.1.145
22.3 GB4.8 GB27.1 GB
Work Desktop192.168.1.101
9.6 GB6.1 GB15.7 GB
Advanced details
Internet totals come from vnstat --json (per-interface, persistent). Per-device figures come from nlbw -c json (nlbwmon). Both are read-only; UnTangled stores nothing itself.
General

Parental Controls

Set internet schedules and content filtering per device. Backed by nftables time rules and a DNS filter.

Devices

Advanced Settings

Internet Setup

Connect UnTangled to your internet provider. Interfaces are detected live from the router.

1Interface
2Protocol
3Details
4DNS & IPv6
5Review
Detected WAN interfaces · live from ubus network.device
DNS servers?The servers that turn names like example.com into addresses. Automatic uses your ISP's; a public resolver such as Cloudflare can be faster or more private.Who resolves domain names
Enable IPv6?Turns on the newer internet addressing alongside IPv4. Safe to leave on; disable only if your ISP has no IPv6 or it causes trouble.Dual-stack if your ISP supports it
MTU?Largest packet size on the link, in bytes. 1500 suits most connections; some PPPoE/DSL lines need 1492.
Leave at 1500 unless your ISP says otherwise

You're online

Internet settings were applied and the connection is up. This is a prototype, so nothing was written to a real router.

System

Software

Firmware and packages. Everything here runs on the router itself — no cloud account, no external store.

Firmware · UnTangled 1.0-beta
OpenWRT 24.10.0 · r28427 · kernel 6.6.73
Up to date
Installed
147 packages
Updates
4 available
Storage
12.4/104 MB

Package manager

apk · on-device
PackageVersionSizeAction
General

Network Protection

Simple safety switches for everyone on your network. Turn on what you want.

Status
Protected
Ads blocked today
12,480
Threats blocked
37
Advanced details
These switches drive on-device services: ad and tracker blocking via adblock, malicious-site and threat-feed blocking via banIP, and Safe Search / adult-content filtering via DNS rewrites in dnsmasq. No traffic is sent to a cloud filter.
Advanced Settings

Access home while away

Create a private, secure link so your phone or laptop can reach your home network from anywhere.

Advanced Settings

Dynamic DNS

Reach your router by name even when your internet provider changes its IP address.

Hostnames

1 configured
myhome.duckdns.orgDuckDNS
Advanced details
Each hostname is a config service in /etc/config/ddns (ddns-scripts), checking the wan address every 10 minutes over HTTPS and updating the provider when it changes.
Advanced Settings

QoS (Smart Queue)

Keep video calls, gaming and browsing smooth when the connection is busy, by taming bufferbloat.

Turn on Smart Queue?Shapes your traffic just below your real line speed so no single download can hog the link. Greatly reduces lag during heavy use.
Download speed?Your plan's download speed in Mbps. Set it to about 90–95% of your measured speed for best results.
Mbps
Upload speed?Your plan's upload speed in Mbps (about 90–95% of measured). Correct upload is the biggest factor for call/gaming lag.
Mbps
Mode?Simple shares the link fairly between devices. Prioritised also gives interactive traffic (calls, games, DNS) a head start.
Advanced details
WAN interface

Shaper cake via sqm-scripts, stored as a config queue in /etc/config/sqm.

Advanced Settings

Dual WAN

Use a second internet connection for automatic backup, or share the load across both.

Mode?Failover: use the backup only when the primary goes down. Load balance: use both at once. Off: single connection as normal.
Primary?The connection used first. Health is checked by pinging 8.8.8.8 and 1.1.1.1.
Backup?Used only when the primary fails (failover) or shares traffic (load balance).
Advanced details
Writes a clean mwan3 config in /etc/config/mwan3: two tracked interfaces (ping health check), two members (equal metric = balance, stepped = failover), a policy and a catch-all rule.
Advanced Settings

UPnP

Let games and apps open the ports they need automatically — no manual port forwarding.

Allow automatic port opening?Lets consoles and apps request inbound ports on demand. Convenient, but any app on your network can open a port — leave off if you don't need it.
Secure mode?A device may only open ports to itself, not redirect traffic to other devices. Recommended — keep this on.
Advanced details
Toggles miniupnpd-nftables (UPnP IGD + NAT-PMP) via /etc/config/upnpd, listening on lan and mapping to wan. This is the modern replacement for old-style “port triggering,” which current OpenWRT (nftables) doesn't support — for a fixed service, use Port Forwarding.
System

USB Storage

Share a USB drive with your devices and stream media from it.

Attached storage

1 mounted
/mnt/sda1/dev/sda1 · ext4

Network file sharing (SMB)

Share over the network?Makes the folder below reachable at \\router (SMB) from your computers and phones.
Folder

Media server (DLNA)

Stream media?Shares media to DLNA-capable TVs, consoles and apps on your network.
Media folder
System

Firmware

Install a new OpenWRT image on your router.

Current

ModelRT-AX88U
FirmwareOpenWrt 24.10.0 r28427
Flashing replaces the router's software. Use only an image built for RT-AX88U. A wrong image can brick the device. The network drops while it reboots — do not power off.
Firmware image?The sysupgrade image for your exact model (a .bin, often named *-sysupgrade.bin). Download it from the OpenWRT firmware selector for this device.
No file chosen
Advanced details
Uploads to /tmp/firmware.img via cgi-io, validates with rpc-sys upgrade_test, then runs rpc-sys upgrade_start (sysupgrade). Needs rpcd-mod-rpcsys and cgi-io.
Advanced Settings

Open access to a device

Let people on the internet reach something in your home, like a game console, camera or server.

Advanced details
Each item is a port-forwarding rule (DNAT) in the nftables firewall. Presets pick the usual external port and protocol; Custom lets you set them by hand. Your home address is 203.0.113.42.
Advanced Settings

Administration

Router name, time, password, and your saved configurations.

General

Router name?The hostname shown on your network and in the title bar.
Time zone?Sets the clock used for logs and schedules (like Parental Controls).

Router password

for signing in to UnTangled
New password?The router's admin login password (the same one SSH uses). Use at least 8 characters.
Confirm password

Scheduled reboot

optional
Reboot automatically?Restart the router on a regular schedule to keep it fresh. The network drops for about a minute when it runs.

Configuration profiles

Backup & restore

Export a backup file${""}?Downloads one file with all your settings. Keep it safe so you can restore this router, or set up a replacement exactly the same.A portable copy of the whole configuration.
Restore from a backup file?Loads settings from a backup you saved earlier. This replaces the current configuration and reloads services.
No file chosen

Recent changes

undo individual changes
Advanced details
Profiles and backups are UCI snapshots of /etc/config, packaged like sysupgrade -b. Restoring applies the saved UCI and reloads the affected services; the export is a portable .tar.gz of the same.
General

Extend Wi-Fi

Make your Wi-Fi reach further by connecting UnTangled to a network you already have.

Advanced Settings

Firewall

Control how traffic is allowed between your networks and the internet.

lan

192.168.1.0/24
Incoming?Traffic from this zone to the router itself.
Outgoing
Forward
Masquerade (NAT)?Off for internal zones; on for wan so your LAN shares one public address.

wan

internet
Incoming
Forward
Masquerade (NAT)

Zone forwarding

who can reach whom
lan → wanguest → wan
Advanced Settings

DMZ

Expose a single device directly to the internet. Use only when you understand the risk.

This removes the firewall's protection for one device. Every port reaches it from the internet. Prefer Port Forwarding for a single app.
Exposed device?All inbound internet traffic is forwarded to this device. It should have a fixed local address.
or
Advanced Settings

LAN

Your home network address and the range handed out to devices.

Router address?The router's own address, and the one you type to reach this page. Changing it disconnects you briefly.
Subnet mask
Hand out addresses (DHCP)?When on, the router automatically gives each device an address.
First address
Pool size
Lease time
Advanced Settings

IPv6

The newer internet addressing, alongside IPv4.

IPv6 on the internet connection?Turn off only if your ISP has no IPv6 or it causes trouble.
Hand out IPv6 to devices?Server: the router advertises IPv6 and runs DHCPv6. Relay: pass the ISP's IPv6 through. Off: no IPv6 on the LAN.
Advanced Settings

System Log

Live kernel and system messages from the router.

Log

Section

Section

Prototype shell · backend wiring comes in the on-device build