1. Router Name [ASUS-DD-WRT]
2. Hostname [sdc]
3. Domain Name [blueprint.home]  (I use this as a local domain name - as its WAN is connected to another NAT router)
   
4. Local IP  [10.0.11.1]
5. Subnet [255.255.255.0]
6. Gateway - leave set to 0.0.0.0 (for DNSMasq to work)
   
7. Local DNS - leave set to 0.0.0.0 (for DNSMasq to work)
   
8. Static DNS 1 [10.0.11.1]  (Router itself, for DNSMasq Local DNS)
   
9. Static DNS 2 [8.8.8.8]  (Google DNS)
   
10. Static DNS 3 [8.8.4.4]
11. Use DNSMasq for DHCP [checked]
12. Use DNSMasq for DNS [checked]
13. DHCP-Authoritative [checked]
14. Time Zone Location Pull down to your location
15. Click Save, Check Over Your Local IP Again -  then Apply Settings
16. Reset your browser's computer's IP address from 192.168.1.x to 10.0.11.x using a fixed IP (.e.g.  10.0.11.5) or via a DHCP on/off cycle, then connect using browser pointing to http://10.0.11.1
    

---

Set up SSH Key

Services | Services tab, Secure Shell Section, Edit:

1. SSHd: Enable
2. SSH TCP Forwarding: Enable
3. Password Login: Enable
4. Authorized Keys: [provide your ~/.ssh/id_rsa.pub pasted in box]
5. Telnet: Disable
   
6. Click Save, then Apply Settings.

Disallow Remote Access to the Router (Through the WAN).

Administration | Management tab, Remote Access Section, Edit:

1. Web GUI Management: Disable
2. SSH Management: Disable
3. Telnet Management: Disable
4. Allow any Remote IP: Enable
5. Click Save, then Apply Settings.

1. JFFS2: Enable.
2. Click Save at the bottom. Wait a few seconds.
3. Once the screen refreshes, click Apply at the bottom and wait again.
4. Find the same JFFS2 Support section again, click the Clean JFFS2 Enable Button (this is temporary)
5. Click Apply to format the available space.
6. Find the same JFFS2 Support section again, click the Clean JFFS2 Disable Button (done formatting).
7. Click Save at page bottom.
8. Now you can SSH into the machine and find a writeable filesystem under /jffs/
9. For DNS, make a /jffs/etc directory:

cd /jffs
mkdir etc

Using the DD-WRT Web Interface, add vlan4 to port 4, vlan3 to port 1

Setup | VLAN tab - Edit:

1. Uncheck port 4.
2. Place port 4 into VLAN4.
3. Uncheck port 1
4. Place port 1 into VLAN3.
   
5. Click Save, then Apply Settings.

Configure vlan3 and vlan4 network

Setup | Networking tab, Port Setup section - Edit:

1. Set Vlan3 to unbridged
2. Set the IP address to 10.0.1.1
3. Set the Subnet Mask to 255.255.255.0
4. Set Vlan4 to unbridged
5. Set the IP addess to 10.0.10.1
6. Set the Subnet Mask to 255.255.255.0
   
7. Click Save, then Apply Settings

Add script to bring up the vlan3 & vlan4 interfaces on boot

Administration | Commands tab

1. Enter the following in the commands text box:

Reconnect to the Router Web UI, then set up the firewall rules for vlan3 and vlan4

Administration | Commands tab

1. Enter the following in the commands text box:

iptables -I FORWARD -i vlan2 -o vlan+ -j ACCEPT
iptables -I FORWARD -i vlan+ -o vlan2 -j ACCEPT
iptables -I FORWARD -i br0 -o vlan+ -j ACCEPT
iptables -I FORWARD -i vlan+ -o br0 -j ACCEPT
iptables -I INPUT -i vlan+ -j ACCEPT

  2. Click on Save Firewall - the router will reset its firewall, give it a moment.

1. Use JFFS2 for client lease DB: [checked]
2. Used Domain: [LAN & WLAN LAN]
3. LAN Domain: [blueprint.home]
4. Under DNSMasq heading:
5. DNSMasq: [Enable]
6. Local DNS: [Enable]
7. No DNS Rebind: [Enable]
8. Additional DNSMasq Options: [Paste the following commands into the box]

interface=vlan4
dhcp-option=net:vlan4,3,10.0.10.1
dhcp-option=net:vlan4,6,10.0.10.1,8.8.8.8,8.8.4.4
interface=vlan3
dhcp-option=net:vlan3,3,10.0.1.1
dhcp-option=net:vlan3,6,10.0.1.1,8.8.8.8,8.8.4.4
local=/blueprint.home/
expand-hosts
domain-needed
addn-hosts=/jffs/etc/hosts.home
strict-order

     9. Click Save, then Apply Settings then Reboot Router.

You can test local DNS by using an SSH connection to the Router, and vi to create an appended hosts file:

/jffs/etc/hosts.home
10.0.10.5    ubuntubox.blueprint.home ubuntubox

When you make changes to this, use the DD-WRT Web UI  Setup | Basic Setup  - Apply Settings button to reset the hosts file to include the new changes.

(adapted from: http://unfinishedbitness.info/2013/03/26/using-dd-wrt-for-local-dns-and-dhcp/)