Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
Next revisionBoth sides next revision
docs:guide-user:network:wifi:dumbap [2023/12/19 09:34] – turn of wifi will configuring wirelss AP mopszadocs:guide-user:network:wifi:dumbap [2024/02/01 19:55] – [Wireless Access Point (aka "Dumb" Access Point)] intro should be concise palebloodsky
Line 1: Line 1:
 ====== Wireless Access Point (aka "Dumb" Access Point) ====== ====== Wireless Access Point (aka "Dumb" Access Point) ======
  
-**Summary:** This document describes how to create and add a //wireless access point (AP)//, sometimes called a //"dumb AP"//to an existing network with a single main router.  The term //dumb// is used since the router provides no routing, DHCP or DNS services.+This page describes how to configure your device as a //wireless access point (AP)//, sometimes called a //"dumb AP"// connected to an existing network with a single main router. The term //dumb// is used since the AP will not provide administrative duties such as routing, firewall, DHCPor DNS, as these will be performed by the main router or other device.
  
-//In truth though, a Wireless AP is anything but dumbit just does not provide IP routing services.//+One common reason for this is to add additional wireless coverage to an existing networkmaybe on different floor or to cover a wireless dead spot. This setup is sufficient for small home or office networkbut for larger networks a more sophisticated approach is often used.
  
-One of the most common reasons for creating a Wireless Access Point is to add additional wireless coverage to an existing network, maybe on a different floor or to cover some other wireless dead spot.  Adding a wireless AP will do exactly that. 
- 
-The end result of following the instructions below will be a bridged LAN with no internal subnets.  Devices connected to either router will "see" each other, and will be connected to the Internet through the main router.  This setup is sufficient for small office or home networks but for larger networks a more sophisticated approach is often used. 
 <WRAP box> <WRAP box>
-**TL;DR** Here are the important configurations for a Wireless AP router+Summary of configuration for a Wireless AP: 
-  - The wireless AP is connected LAN-to-LAN to the main router by some means eg an ethernet cable, an 802.11s mesh, etc..  +  - The wireless AP is connected LAN-to-LAN to the main router by some means e.g. ethernet cable, 802.11s mesh, etc.  
-  - The wireless AP bridges its SSID wireless interface onto its LAN bridge interface. Wireless traffic on the wireless AP goes to its bridge LAN interface, and then to the main router. +  - The wireless AP bridges its SSID wireless interface onto its LAN bridge interface. Wireless traffic on the wireless AP goes to its bridge LAN interface, then to the main router. 
-  - The wireless AP bridge LAN can have a static or DHCP address on the same subnet as the main router'bridge LAN interface, depending upon the detail of the configuration+  - The wireless AP bridge LAN may have either a static or DHCP address on the same subnet as the main router bridge LAN interface. 
-  - The wireless AP'gateway ip address is set to the address of the main router, either in the configuration or by DHCP.+  - The wireless AP gateway IP address is set to the address of the main router, either in the configuration or by DHCP.
   - The wireless AP does not provide DHCP service, DNS resolution, or a firewall.   - The wireless AP does not provide DHCP service, DNS resolution, or a firewall.
 </WRAP> </WRAP>
Line 21: Line 18:
 ===== External Videos for Reference ===== ===== External Videos for Reference =====
  
-Several external videos are available on the topic which may be useful. These provide some background and context, but bare in mind they may have become somewhat outdated and generally do not take into account anything other than an ethernet backhaul.+Several videos are available on the topic which may be useful for background information.\\ 
 +Bare in mind they are somewhat outdated and generally do not take into account everything.
  
- +Using OpenWrt v21 with DSA example:
-Using OpenWRT v21 with DSA example:+
  
 {{youtube>qeuZqRqH-ug?}} {{youtube>qeuZqRqH-ug?}}
  
- +Two videos which are outdated but explain firewall and APs:
-Two-part older videos which are considerably outdated but give some background information:+
  
 {{youtube>UvniZs8q3eU?}} {{youtube>UvniZs8q3eU?}}
 {{youtube>4t_S2oWsBpE?}} {{youtube>4t_S2oWsBpE?}}
  
- +WiFi roaming is much improved in newer mobile devices so configuring Fast Roaming, aka 802.11r, may not be required.\\ 
-WiFi roaming is much improved in more up to date mobile devicesso configuring Fast Roaming, aka 802.11r, may not be required. +This video can be misleading as 802.11r has nothing to do with mesh networking.
-This video can be very misleading as 802.11r has nothing whatsoever to do with mesh networking. +
-Nevertheless it may provide some background information:+
 {{youtube>kMgs2XFClaM?}} {{youtube>kMgs2XFClaM?}}
  
 +===== Configuration via LuCI =====
  
-===== Configuration via LuCI, the OpenWrt Web Interface ===== +These instructions refer to the interface found in OpenWrt 23.05. The interface of v21 upwards differs in significant ways from earlier versions of OpenWrt which we try to account for... but no guarantees.
- +
-These instructions were up to date as of Dez 19, 2023, and refer to the interface found in OpenWrt version 23.05.0.  The interface of v21 upwards differs in some significant ways from earlier version of OpenWrt which we try to account for... but no guarantees.+
  
 This setup requires two routers, a computer with an Ethernet port, and an Ethernet cable.  We refer to the routers as the //main router// and the //wireless AP// and we assume default settings on both.  The main router should already be properly configured and connected to the Internet. This setup requires two routers, a computer with an Ethernet port, and an Ethernet cable.  We refer to the routers as the //main router// and the //wireless AP// and we assume default settings on both.  The main router should already be properly configured and connected to the Internet.
  
 Disconnect the wireless AP from your network.\\ Disconnect the wireless AP from your network.\\
-Use an Ethernet cable to connect your computer (notebook?to one of the LAN ports (not the //Internet/////WAN// port) of the wireless AP.\\ +Use an Ethernet cable to connect your computer to one of the LAN ports (not the //Internet/////WAN// port) of the wireless AP.\\ 
-If you use a notebook, consider to turn of WiFi while configuring your AP to only have one IP connection, a wired one,  to your "to be" configured wirelss AP.\\ +If you use a notebook, turn off WiFi while configuring your AP to only have one IP connection, a wired one, to your "to be" configured wireless AP.\\ 
-From a browser on your computer, navigate to the LuCI interface by going to http://192.168.1.1.  Login.\\ +From a browser, navigate to LuCI by going to http://192.168.1.1. Login. Change the admin password if necessary.\\
-Change the admin password if necessary.  \\+
      
-{{:media:docs:howto:dumbap_1_interface_overview.jpg?direct&900|}}  +{{:media:docs:howto:dumbap_1_interface_overview.jpg?750|}}  
    
 Go to //Network -> Interfaces// and click on the **Edit** button of the LAN interface.  Ensure you are on the //General Settings// tab. Go to //Network -> Interfaces// and click on the **Edit** button of the LAN interface.  Ensure you are on the //General Settings// tab.
  
-{{:media:docs:howto:dumbap_2_interface_changed.jpg?direct&900|}}+{{:media:docs:howto:dumbap_2_interface_changed.jpg?750|}}
    
 It is best to configure the wireless AP to use DHCP to obtain an address from the main router,\\ It is best to configure the wireless AP to use DHCP to obtain an address from the main router,\\
-but HERE we will configure a static ip address. Give the wireless AP an IP address "next to" your main router.\\ +but this guide will show how to do it the alternative way - by configuring a static IP address.\\ 
-By default, the main router will have an address of 192.168.1.1, so use 192.168.1.2. (or something like that. \\+ 
 +Give the wireless AP an IP address "next to" your main router.\\ 
 +By default, the main router will have an address of 192.168.1.1, so use 192.168.1.2. (or something like that.\\
 The address should be on the same subnet as your main router but out of the DHCP range used when assigning addresses to connected devices.\\ The address should be on the same subnet as your main router but out of the DHCP range used when assigning addresses to connected devices.\\
-By default, that means the wireless AP router IP should be between 192.168.1.2 and 192.168.1.100.)\\ +By default, that means the wireless AP router IP should be between 192.168.1.2 and 192.168.1.100.\\ 
-If you're adding multiple wireless AP routers, you could use 192.168.1.3, 192.168.1.4, etc. for additional routers.\\+If you're adding multiple wireless APs, you could use 192.168.1.3, 192.168.1.4, etc.\\
 Save and apply the new IP address. Save and apply the new IP address.
      
-{{:media:docs:howto:dumbap_3_connectivity.jpg?direct|}}+{{:media:docs:howto:dumbap_3_connectivity.jpg?750|}}
          
-A warning screen will apear because you changed the routers IP to 192.168.1.2. Press "Apply and keep settings"+A warning screen will apear because you changed the routers IP to 192.168.1.2. Press "Apply and keep settings".
            
-Unplug the network cable from your computer for 10 seconds (to get a new, free IP address), then navigate back to the address you assigned in the previous step (say, http://192.168.1.2).\\+Navigate back to the address you assigned in the previous step (say, http://192.168.1.2).\\
 Make sure your browser uses the new IP address you assigned in the previous step. \\ Make sure your browser uses the new IP address you assigned in the previous step. \\
- Why?  Because in the next step, the gateway needs to be changed to point to the main router, and LuCI will not allow you to change the gateway to 192.168.1.1 while the wireless AP router is using that IP address.\\ +Why?  Because in the next step, the gateway needs to be changed to point to the main router, and LuCI will not allow you to change the gateway to 192.168.1.1 while the wireless AP router is using that IP address.\\ 
-So login in your router and go back to //Network -> Interfaces//, **Edit** the //LAN interface//, //General Settings// tab.\\+If things are not working as expected, unplug the network cable from your computer for 10 seconds and plug in again. The currently still active DHCP Server on your wirless AP will then reasign a valid IP to you. \\ 
  
-{{:media:docs:howto:dumbap_4_gateway.jpg?direct|}}+Login in your router and go back to //Network -> Interfaces//, **Edit** the //LAN interface//, //General Settings// tab.\\ 
 + 
 +{{:media:docs:howto:dumbap_4_gateway.jpg?750|}}
      
 Change the IPv4 gateway to point to your main router, 192.168.1.1 by default.  This sets the wireless AP router to use the main router for Internet access.\\ Change the IPv4 gateway to point to your main router, 192.168.1.1 by default.  This sets the wireless AP router to use the main router for Internet access.\\
      
-{{:media:docs:howto:dumbap_5_dns.jpg?direct|}}+{{:media:docs:howto:dumbap_5_dns.jpg?750|}}
      
 Use the main router (192.168.1.1) for DNS.  Same page but the //Advanced Settings// tab.  Enter the IP of your main router in the //Use custom DNS servers// field and click //+//. Use the main router (192.168.1.1) for DNS.  Same page but the //Advanced Settings// tab.  Enter the IP of your main router in the //Use custom DNS servers// field and click //+//.
      
-{{:media:docs:howto:dumbAP_6_DHCP.jpg?direct|}}+{{:media:docs:howto:dumbAP_6_DHCP.jpg?750|}}
      
 Use the main router for DHCP (and disable DHCP for the Wireless AP).  Same page again, now the //DHCP Server// tab.  Ensure the //Ignore interface// checkbox is checked.\\ Use the main router for DHCP (and disable DHCP for the Wireless AP).  Same page again, now the //DHCP Server// tab.  Ensure the //Ignore interface// checkbox is checked.\\
      
-{{:media:docs:howto:dumbAP_7_DHCP_ip6.jpg?direct|}}+{{:media:docs:howto:dumbAP_7_DHCP_ip6.jpg?750|}}
      
 Disable IPv6 DHCP.  Same page, //DHCP Server// tab again, but click on the //IPv6 Settings// sub-tab.  Set the //RA-Service//, //DHCPv6-Service//, and //NDP-Proxy// dropdowns to //disabled//.\\   Disable IPv6 DHCP.  Same page, //DHCP Server// tab again, but click on the //IPv6 Settings// sub-tab.  Set the //RA-Service//, //DHCPv6-Service//, and //NDP-Proxy// dropdowns to //disabled//.\\  
Line 94: Line 90:
 Press "Save"  Press "Save" 
      
-{{:media:docs:howto:dumbAP_8_DHCP_sanda.jpg?direct|}}+{{:media:docs:howto:dumbAP_8_DHCP_sanda.jpg?750|}}
      
-On the "Interface" Screen press "Save & Apply" . Most important steps are done, your dumb AP works, review next steps to do some fine tuning enable WLAN+On the "Interface" screen, press "Save & Apply".\\ 
 +Most important steps are done, your wireless AP works!\\ 
 + 
 +Review next steps for some fine tuningenable WLAN or even add a Guest Network:\\ 
 + 
 +If you plan to add a "GUEST" network on your wireless AP (see this guide: [[:docs:guide-user:network:wifi:guestwifi:guestwifi_dumbap]]), \\ 
 +**do not** do the next steps regarding turning off services labeled //firewall//, //dnsmasq// and //odhcpd// because your GUEST network will need these.\\ 
 +Deleting the WAN / WAN6 interfaces is compatible with having a GUEST network on your wireless AP.
      
- - To save resources on the wireless AP router, disable some now unneeded services.  Navigate to //System -> Startup// Disable the services labeled //firewall//, //dnsmasq// and //odhcpd// (Perhaps ironically, click **Enable** to toggle.)  //Note even though these services are now disabled, after you flash a new image to the device they will be re-enabled.//  For a more permanent fix see [[#Disable Daemons Persistently]].\\+ - To save resources on the wireless AP router, disable unneeded services.  Navigate to //System -> Startup// Disable the services labeled //firewall//, //dnsmasq// and //odhcpd// (Perhaps ironically, click **Enable** to toggle.)  //Note even though these services are now disabled, after you flash a new image to the device they will be re-enabled.//  For a more permanent fix see [[#Disable Daemons Persistently]].\\
  - Optionally, remove or disable the //WAN// and //WAN6// interfaces.  On the //Network -> Interfaces// page, **Edit** the //WAN// and //WAN6// interfaces to uncheck the //Bring up on boot// checkbox.  Or just delete the interfaces.    \\  - Optionally, remove or disable the //WAN// and //WAN6// interfaces.  On the //Network -> Interfaces// page, **Edit** the //WAN// and //WAN6// interfaces to uncheck the //Bring up on boot// checkbox.  Or just delete the interfaces.    \\
  - //Note that by default OpenWrt does not enable wireless access.//  So, from a default installation, at the very least you will need to review the wireless SSIDs, enable wireless security, and then enable the wireless networks from the //Network -> Wireless// page.  - //Note that by default OpenWrt does not enable wireless access.//  So, from a default installation, at the very least you will need to review the wireless SSIDs, enable wireless security, and then enable the wireless networks from the //Network -> Wireless// page.
 Click the //Save and Apply// button.\\ Click the //Save and Apply// button.\\
-   +
-  +
 Use an Ethernet cable to connect one of the LAN ports on your main router to one of the LAN ports (**not** the //WAN/////Internet// port) of the wireless AP router. Use an Ethernet cable to connect one of the LAN ports on your main router to one of the LAN ports (**not** the //WAN/////Internet// port) of the wireless AP router.
 You may need to reboot or power cycle either or both routers, the device connecting your main router to the Internet, and potentially any connected devices.  In many cases this will not be necessary. You may need to reboot or power cycle either or both routers, the device connecting your main router to the Internet, and potentially any connected devices.  In many cases this will not be necessary.
Line 141: Line 143:
 </code> </code>
  
-Switch configuration on WR1043ND (barrier breaker):+Switch configuration on WR1043ND (barrier breaker).
  
 <code> <code>
Line 170: Line 172:
         option proto    'dhcp'         # Change as appropriate         option proto    'dhcp'         # Change as appropriate
 </code> </code>
 +
 === Switch and dedicated WAN devices post 21.01 === === Switch and dedicated WAN devices post 21.01 ===
-The syntax is slightly different for these devices. You will notice that there is a config device which lists the ethernet port(s) assigned to an interface (in this case the br-lan). It will also list the assigned port under the "list ports" clause. The gotcha here is that you must add a separate line for each "list ports" added to a device. If you try to add them to one "list ports" entry space or comma separated it will not work properly. Finally you can remove/comment out any WAN interface settings identical to the above entries. +The syntax is slightly different for these devices. You will notice that there is a config device which lists the ethernet port(s) assigned to an interface (in this case the br-lan). It will also list the assigned port under the "list ports" clause. The gotcha here is that you must add a separate line for each "list ports" added to a device. If you try to add them to one "list ports" entry space or comma separated it will not work properly. Finally you can remove/comment out any WAN interface settings identical to the above entries.
 <code>config device <code>config device
  option name 'br-lan'  option name 'br-lan'
Line 184: Line 187:
  option ipaddr '192.168.1.1'  option ipaddr '192.168.1.1'
 </code> </code>
 +
 ==== Step 2: Change the existing wireless network ==== ==== Step 2: Change the existing wireless network ====
  
Line 258: Line 262:
  option reqprefix 'no'  option reqprefix 'no'
 </code> </code>
 +
 ===== Disable Daemons Persistently ===== ===== Disable Daemons Persistently =====
 Note that although the start-up of daemons such as firewall, dnsmasq, wpa_supplicant and optionally odhcpd have been set to disabled, when a new image is flashed to the device, they will be re-enabled.  To work-around this, simply add the following to ''/etc/rc.local'' on the device: Note that although the start-up of daemons such as firewall, dnsmasq, wpa_supplicant and optionally odhcpd have been set to disabled, when a new image is flashed to the device, they will be re-enabled.  To work-around this, simply add the following to ''/etc/rc.local'' on the device:
Line 270: Line 275:
  
 rm /usr/sbin/wpa_supplicant rm /usr/sbin/wpa_supplicant
-</code>  +</code> 
-===== Populate Host Names in Associated Stations ===== + 
-Dumb APs will not have the data to display the respective hostnames of the associated devices.  Only MAC addresses are known to it.  Users wanting to see the corresponding hostnames in the Associated Stations display in LuCI can manually populate ''/etc/ethers'' on the dumb AP to achieve this.+===== Populate Hostnames in Associated Stations ===== 
 +Dumb APs will not have the data to display hostnames of the associated devices.  Only MAC addresses are known to it.  Users wanting to see the corresponding hostnames in the Associated Stations display in LuCI can manually populate ''/etc/ethers'' on the dumb AP:
  
 On the router, one can extract this data with the following one-liner: On the router, one can extract this data with the following one-liner:
Line 287: Line 293:
 ===== Multicast ===== ===== Multicast =====
  
-DLNA and UPnP clients and printer or SMB discovery protocols on LANs tend to work by using multicast packets. For example PS3xboxTVs and stereos use DLNA to detect, communicate with and stream audio/video over the network. By default on bridged interfaces on OpenWrt (at least tested in 18.x series) multicast snooping is turned off. This means all network interfaces connected to a bridge (such as a WiFi SSID and ethernet VLAN) will receive multicast packets as if they were broadcast packets.+DLNA and UPnP clientsand printer or SMB discovery protocols tend to work by using multicast packets. For example PlayStationXbox, and TVs use DLNA to detect, communicate with and stream audio/video over the network. By default on bridged interfaces on OpenWrt multicast snooping is turned off. This means all network interfaces connected to a bridge (such as a WiFi SSID and ethernet VLAN) will receive multicast packets as if they were broadcast packets.
  
 On WiFi the //slowest// modulation available is used for multicast packets (so that everyone can hear them). If you have "enabled legacy 802.11b rates" on your WiFi (Advanced settings checkbox in LuCI under the WiFi settings, or ''option legacy_rates '1''' in /etc/config/wireless file) then 1Mbps is the rate that will be used. This can completely use up the WiFi airtime with even fairly light multicast streaming.  On WiFi the //slowest// modulation available is used for multicast packets (so that everyone can hear them). If you have "enabled legacy 802.11b rates" on your WiFi (Advanced settings checkbox in LuCI under the WiFi settings, or ''option legacy_rates '1''' in /etc/config/wireless file) then 1Mbps is the rate that will be used. This can completely use up the WiFi airtime with even fairly light multicast streaming. 
Line 295: Line 301:
 ==== Notes: ==== ==== Notes: ====
  
-  * //The Dumb AP wireless can be configured to control access as Open/WPA/WPA2/etc. MAC-based access control is controlled by the main router.//+  * //Dumb AP wireless can be configured to control access as Open/WPA/WPA2/etc. MAC-based access control is controlled by the main router.//
   * //'Static DHCP' is not covered here: this procedure creates an AP that provides wired/wireless access and won't interfere with Static DHCP.//   * //'Static DHCP' is not covered here: this procedure creates an AP that provides wired/wireless access and won't interfere with Static DHCP.//
   * //This recipe is similar to the "Bridged AP" recipe at [[docs:guide-user:network:wifi:BridgedAP|Bridged AP]]. These pages should probably be merged.//   * //This recipe is similar to the "Bridged AP" recipe at [[docs:guide-user:network:wifi:BridgedAP|Bridged AP]]. These pages should probably be merged.//
   * //Firewall bridge mode support in OpenWrt is provided by the [[packages:pkgdata:kmod-br-netfilter|kmod-br-netfilter]] module.//   * //Firewall bridge mode support in OpenWrt is provided by the [[packages:pkgdata:kmod-br-netfilter|kmod-br-netfilter]] module.//
  
  • Last modified: 2024/06/24 11:04
  • by bluewavenet