Ethernet
Each physical Ethernet port on the StartWRT router maps to a Security Profile. The port a device plugs into determines its profile — no manual configuration is needed on the device itself.
How It Works
When a device is plugged into an Ethernet port, the router assigns it to the profile mapped to that port. The device receives an IP address on that profile’s subnet and is subject to that profile’s firewall rules, VPN routing, and schedule restrictions.
Behind the scenes, StartWRT uses bridge VLAN filtering to isolate traffic between ports. Each port tags traffic with a different VLAN ID, ensuring devices on different profiles cannot communicate at Layer 2 unless explicitly allowed.
WAN Port
One Ethernet port is designated as the WAN port, which connects to your ISP modem or upstream network. The WAN port is shown with a “WAN” badge in the port list and cannot be assigned a Security Profile.
Assigning Profiles to Ports
-
Navigate to
Points of Entry > Ethernet. -
For each non-WAN port, select the desired Security Profile from the dropdown.
-
Click “Save”.
Note
Changes take effect immediately. A device currently plugged into a port will be reassigned to the new profile without needing to unplug and replug.
Note
If you connect a network switch to an Ethernet port, all devices on that switch share the same Security Profile. StartWRT cannot differentiate between devices beyond its onboard Ethernet ports. Those devices still appear individually in the Devices list — including hosts with static IPs or only IPv6 addresses — because the router learns them from the bridge forwarding table even without a DHCP lease.
Changing the WAN Port
If you need to use a different physical port for your ISP connection:
-
Navigate to
Points of Entry > Ethernet. -
Click “Change WAN Port”.
-
Select the new port.
-
Confirm the change.
Warning
Changing the WAN port restarts the network and may briefly interrupt your Internet connection. Ensure your modem cable is connected to the new port before confirming.
Example
| Port | Profile | Use Case |
|---|---|---|
| Port 1 | (WAN) | Connected to ISP modem |
| Port 2 | Admin | Desktop computer with full LAN and Internet access |
| Port 3 | Admin | StartOS server with full LAN and Internet access |
| Port 4 | Guest | Guest-accessible Ethernet jack in the living room |