Differences
This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision Next revisionBoth sides next revision | ||
| docs:guide-user:network:wifi:vlan-multiple-wifi-ssid-repeater [2019/01/19 12:40] – unitelife | docs:guide-user:network:wifi:vlan-multiple-wifi-ssid-repeater [2020/09/05 13:21] – spelling, links vgaetera | ||
|---|---|---|---|
| Line 1: | Line 1: | ||
| - | ====== | + | ====== |
| --- // | --- // | ||
| - | The purpose of this wiki is to show users how to configure a main router and multiple access points to repeat multiple SSIDs through the use of tagged | + | |
| + | The purpose of this article | ||
| + | |||
| + | This example contains one main router that will supply the Wi-Fi SSIDs and DHCP service and two routers configured as access points. In this example, the Linksys WRT 3200acm router with OpenWrt 18.01 was used for all devices. | ||
| + | |||
| + | These procedures can be done primarily on the LuCI web interface but due to me not being able to attach screenshots, | ||
| It is recommended to be familiar with the following wiki articles to perform this task. | It is recommended to be familiar with the following wiki articles to perform this task. | ||
| - | * [[docs: | + | * [[docs: |
| - | * [[docs: | + | * [[docs: |
| * [[docs: | * [[docs: | ||
| * [[docs: | * [[docs: | ||
| - | ===== Use-Case Scenario | + | ===== Use-case scenario |
| This is a network topology for this example: | This is a network topology for this example: | ||
| [[https:// | [[https:// | ||
| + | ==== Wi-Fi and VLAN Configuration Breakdown ==== | ||
| + | The SSIDs were created and bridged to their respective Network interface. Each Network interface was added to their own specific VLAN ID. | ||
| - | This example contains one main router that will supply the WiFi SSIDs and DHCP service and two routers | + | The two APs were configured |
| - | List of WiFi SSIDs: | + | It becomes a matching game to ensure the VLAN ID number that is attached to each of the Wi-Fi interfaces are consistent on all devices i.e. private is on VLAN1 (eth0.1), guest is on VLAN3 (eth0.3), tor is on VLAN4 (eth0.4), etc. so that each router knows the existence of the VLANs. |
| + | |||
| + | List of Wi-Fi SSIDs: | ||
| + | |||
| + | * Private: SSID = Magick Mushroom, Gaming | ||
| + | * Guest: SSID = Slave | ||
| + | * Tor: SSID = tor | ||
| - | * Private | ||
| - | * Guest | ||
| - | * Tor | ||
| ==== Main Router Configuration Procedures: ==== | ==== Main Router Configuration Procedures: ==== | ||
| - | - First, create extra vlans. This can be done via the Luci Gui>Network>Switch or the config file located in /etc/config/ | + | === Switch details === |
| - | <hidden onHidden=" | + | |
| + | ^ VLAN ID ^ Upstream side:HW switch ↔ eth1 driver^^ Downstream side:HW switch↔physical ports^^^^^ | ||
| + | | | CPU (eth0) | ||
| + | | | ||
| + | | | ||
| + | | | ||
| + | | | ||
| + | |||
| + | *//Tip: To determine your routers WAN CPU when there are multiple CPUs listed is to use the LuCI web interface and navigate to Network> | ||
| + | |||
| + | 1. Create extra VLANs to match the table above. The LAN4 interface | ||
| + | <hidden onHidden="/ | ||
| config interface ' | config interface ' | ||
| option ifname ' | option ifname ' | ||
| Line 104: | Line 123: | ||
| option ports '0t 5t' | option ports '0t 5t' | ||
| - | config interface ' | + | </ |
| - | option proto ' | + | |
| - | option ifname ' | + | |
| - | config interface ' | + | 2. Create Wi-Fi interfaces. |
| - | option proto ' | + | |
| - | option ifname ' | + | |
| - | config interface ' | + | :!: Be sure to make the SSID names and passwords identical to what is configured on the main router |
| - | option proto ' | + | |
| - | option ifname ' | + | |
| - | + | ||
| - | </ | + | |
| - | Create WiFi interfaces | ||
| <hidden onHidden="/ | <hidden onHidden="/ | ||
| config wifi-device ' | config wifi-device ' | ||
| Line 135: | Line 145: | ||
| option ssid ' | option ssid ' | ||
| option encryption ' | option encryption ' | ||
| - | option key 'P@5sword' | + | option key 'supersecretpassword' |
| option wpa_disable_eapol_key_retries ' | option wpa_disable_eapol_key_retries ' | ||
| Line 154: | Line 164: | ||
| option ssid ' | option ssid ' | ||
| option encryption ' | option encryption ' | ||
| - | option key 'P@5sword' | + | option key 'supersecretpassword' |
| option wpa_group_rekey ' | option wpa_group_rekey ' | ||
| Line 174: | Line 184: | ||
| </ | </ | ||
| - | Create firewall rules | + | 3. Create firewall rules |
| <hidden onHidden="/ | <hidden onHidden="/ | ||
| Line 310: | Line 320: | ||
| option network ' | option network ' | ||
| option input ' | option input ' | ||
| - | |||
| - | config forwarding | ||
| - | option dest ' | ||
| - | option src ' | ||
| config rule | config rule | ||
| Line 375: | Line 381: | ||
| option target ' | option target ' | ||
| - | config | + | config |
| - | option | + | option |
| - | option src '*' | + | option src 'lan' |
| - | option dest_port ' | + | |
| - | option proto 'tcp udp' | + | |
| - | option target ' | + | |
| - | config | + | config |
| - | option | + | option |
| - | option | + | option |
| - | option masq ' | + | |
| - | option output ' | + | |
| - | option input ' | + | |
| - | option forward ' | + | |
| - | option mtu_fix '1' | + | |
| - | config | + | config |
| - | option name 'Allow-SLAVE-OpenVPN' | + | option dest ' |
| - | option | + | option src ' |
| - | option | + | |
| - | option | + | config forwarding |
| - | option | + | option dest ' |
| + | option src ' | ||
| + | |||
| + | </ | ||
| + | |||
| + | 4. Create DHCP configurations | ||
| + | <hidden onHidden="/ | ||
| + | config dnsmasq | ||
| + | option domainneeded ' | ||
| + | option localise_queries ' | ||
| + | option rebind_protection ' | ||
| + | option rebind_localhost ' | ||
| + | option local '/ | ||
| + | option domain ' | ||
| + | option expandhosts ' | ||
| + | option authoritative ' | ||
| + | option readethers ' | ||
| + | option leasefile '/ | ||
| + | option resolvfile '/ | ||
| + | option nonwildcard ' | ||
| + | option localservice ' | ||
| + | option serversfile '/ | ||
| + | list server ' | ||
| + | list server ' | ||
| + | |||
| + | config dhcp ' | ||
| + | option interface ' | ||
| + | option leasetime ' | ||
| + | option dhcpv6 ' | ||
| + | option ra ' | ||
| + | option start ' | ||
| + | option limit ' | ||
| + | option ra_management ' | ||
| + | |||
| + | config dhcp ' | ||
| + | option leasetime ' | ||
| + | option interface ' | ||
| + | option start ' | ||
| + | option limit ' | ||
| + | |||
| + | config dhcp ' | ||
| + | option leasetime ' | ||
| + | option interface ' | ||
| + | option start ' | ||
| + | option limit ' | ||
| + | |||
| + | config dhcp ' | ||
| + | option interface ' | ||
| + | option ignore ' | ||
| + | |||
| + | config odhcpd ' | ||
| + | option maindhcp ' | ||
| + | option leasefile '/ | ||
| + | option leasetrigger '/ | ||
| + | option loglevel ' | ||
| + | |||
| + | </ | ||
| + | |||
| + | ==== 2nd, Mid Range AP ==== | ||
| + | === Switch details === | ||
| + | ^ VLAN ID ^ Upstream side:HW switch ↔ eth1 driver^^ Downstream side:HW switch↔physical ports^^^^^ | ||
| + | | | CPU (eth0) | ||
| + | | 1 | tagged | ||
| + | | 2 | off | off |off|off|off|off|off| | ||
| + | | 3 | tagged | ||
| + | | 4 | tagged | ||
| + | |||
| + | 1. Create extra VLANs to match the table above. The WAN and LAN4 interfaces were configured to be tagged with VLAN ID numbers. The WAN is receiving the uplink from the main router and LAN4 is rebroadcasting the uplink to the next router (the Rear range AP router). | ||
| + | <hidden onHidden="/ | ||
| + | config interface ' | ||
| + | option ifname ' | ||
| + | option proto ' | ||
| + | option ipaddr ' | ||
| + | option netmask ' | ||
| + | |||
| + | config globals ' | ||
| + | option ula_prefix ' | ||
| + | |||
| + | config interface ' | ||
| + | option type ' | ||
| + | option ifname ' | ||
| + | option proto ' | ||
| + | option netmask ' | ||
| + | option ip6assign ' | ||
| + | option ipaddr ' | ||
| + | option gateway ' | ||
| + | option broadcast ' | ||
| + | option dns ' | ||
| + | |||
| + | config interface ' | ||
| + | option ifname ' | ||
| + | option proto ' | ||
| + | option hostname ' | ||
| + | |||
| + | config interface ' | ||
| + | option ifname ' | ||
| + | option proto ' | ||
| + | |||
| + | config switch | ||
| + | option name 'switch0' | ||
| + | option reset ' | ||
| + | option enable_vlan ' | ||
| + | |||
| + | config switch_vlan | ||
| + | option device ' | ||
| + | option vlan ' | ||
| + | option vid ' | ||
| + | option ports '0t 1 2 3 5t' | ||
| + | |||
| + | config switch_vlan | ||
| + | option device ' | ||
| + | option vlan ' | ||
| + | option ports '4 6t' | ||
| + | option vid ' | ||
| + | |||
| + | config interface ' | ||
| + | option type ' | ||
| + | option proto ' | ||
| + | option ipaddr ' | ||
| + | option netmask ' | ||
| + | option ifname ' | ||
| + | option gateway ' | ||
| + | option broadcast ' | ||
| + | |||
| + | config interface ' | ||
| + | option proto ' | ||
| + | option ipaddr ' | ||
| + | option netmask ' | ||
| + | option type ' | ||
| + | option ifname ' | ||
| + | |||
| + | config switch_vlan | ||
| + | option device ' | ||
| + | option vlan ' | ||
| + | option vid ' | ||
| + | option ports '0t 5t' | ||
| + | |||
| + | config switch_vlan | ||
| + | option device ' | ||
| + | option vlan ' | ||
| + | option vid ' | ||
| + | option ports '0t 5t' | ||
| + | |||
| + | </ | ||
| + | |||
| + | 2. Create Wi-Fi interfaces. | ||
| + | |||
| + | :!: Be sure to make the SSID names and passwords identical to what is configured on the main router | ||
| + | <hidden onHidden="/ | ||
| + | config wifi-device ' | ||
| + | option | ||
| + | option | ||
| + | option | ||
| + | option | ||
| + | option htmode ' | ||
| + | option country ' | ||
| + | option legacy_rates ' | ||
| + | |||
| + | config wifi-iface ' | ||
| + | option device ' | ||
| + | option network ' | ||
| + | option mode ' | ||
| + | option ssid ' | ||
| + | option encryption ' | ||
| + | option key ' | ||
| + | option wpa_disable_eapol_key_retries ' | ||
| + | |||
| + | config wifi-device ' | ||
| + | option type ' | ||
| + | option hwmode ' | ||
| + | option path ' | ||
| + | option country ' | ||
| + | option legacy_rates ' | ||
| + | option distance ' | ||
| + | option channel ' | ||
| + | option htmode ' | ||
| + | |||
| + | config wifi-iface ' | ||
| + | option device ' | ||
| + | option network ' | ||
| + | option mode ' | ||
| + | option ssid ' | ||
| + | option encryption ' | ||
| + | option key ' | ||
| + | option wpa_group_rekey ' | ||
| + | |||
| + | config wifi-iface | ||
| + | option device ' | ||
| + | option mode ' | ||
| + | option encryption ' | ||
| + | option ssid ' | ||
| + | option isolate ' | ||
| + | option network ' | ||
| + | |||
| + | config wifi-iface | ||
| + | option device ' | ||
| + | option mode ' | ||
| + | option encryption ' | ||
| + | option ssid ' | ||
| + | option network ' | ||
| + | |||
| + | </ | ||
| + | |||
| + | 3. Create firewall rules | ||
| + | <hidden onHidden="/ | ||
| + | |||
| + | config defaults | ||
| + | option syn_flood ' | ||
| + | option input ' | ||
| + | option output ' | ||
| + | option forward ' | ||
| config zone | config zone | ||
| - | option name 'slavevpn' | + | option name 'lan' |
| - | option | + | list network 'lan' |
| - | option masq '1' | + | |
| option input ' | option input ' | ||
| option output ' | option output ' | ||
| option forward ' | option forward ' | ||
| + | |||
| + | config zone | ||
| + | option name ' | ||
| + | list network ' | ||
| + | list network ' | ||
| + | option input ' | ||
| + | option output ' | ||
| + | option forward ' | ||
| + | option masq ' | ||
| option mtu_fix ' | option mtu_fix ' | ||
| config rule | config rule | ||
| - | option name ' | + | option name ' |
| - | option src '*' | + | option src 'wan' |
| - | option | + | option |
| - | option | + | option |
| option target ' | option target ' | ||
| + | option family ' | ||
| - | config | + | config |
| - | option name 'torvpn' | + | option name 'Allow-Ping' |
| - | option | + | option |
| - | option | + | option |
| - | option | + | option |
| - | option | + | option |
| - | option | + | option |
| - | option mtu_fix '1' | + | |
| - | config | + | config |
| - | option | + | option |
| - | option src 'slavevpn' | + | option src 'wan' |
| + | option proto ' | ||
| + | option family ' | ||
| + | option target ' | ||
| - | config | + | config |
| - | option | + | option |
| - | option src 'torvpn' | + | option src 'wan' |
| + | option proto ' | ||
| + | option src_ip ' | ||
| + | option dest_ip ' | ||
| + | option dest_port ' | ||
| + | option family ' | ||
| + | option target ' | ||
| - | config | + | config |
| - | option | + | option |
| - | option src 'lanvpn' | + | option src 'wan' |
| + | option proto ' | ||
| + | option src_ip ' | ||
| + | list icmp_type ' | ||
| + | list icmp_type ' | ||
| + | list icmp_type ' | ||
| + | list icmp_type ' | ||
| + | option family ' | ||
| + | option target ' | ||
| - | config | + | config |
| - | option | + | option |
| - | option src 'slavevpn' | + | option src 'wan' |
| + | option proto ' | ||
| + | list icmp_type ' | ||
| + | list icmp_type ' | ||
| + | list icmp_type ' | ||
| + | list icmp_type ' | ||
| + | list icmp_type ' | ||
| + | list icmp_type ' | ||
| + | list icmp_type ' | ||
| + | list icmp_type ' | ||
| + | list icmp_type ' | ||
| + | list icmp_type ' | ||
| + | list icmp_type ' | ||
| + | option limit ' | ||
| + | option family ' | ||
| + | option target ' | ||
| - | config | + | config |
| - | option | + | option |
| - | option src 'torvpn' | + | option src 'wan' |
| + | option dest ' | ||
| + | option proto ' | ||
| + | list icmp_type ' | ||
| + | list icmp_type ' | ||
| + | list icmp_type ' | ||
| + | list icmp_type ' | ||
| + | list icmp_type ' | ||
| + | list icmp_type ' | ||
| + | list icmp_type ' | ||
| + | option limit ' | ||
| + | option family ' | ||
| + | option target ' | ||
| - | config | + | config |
| + | option name ' | ||
| + | option src ' | ||
| option dest ' | option dest ' | ||
| - | option | + | option |
| + | option target ' | ||
| - | config | + | config |
| - | option | + | option |
| option src ' | option src ' | ||
| + | option dest ' | ||
| + | option dest_port ' | ||
| + | option proto ' | ||
| + | option target ' | ||
| - | config | + | config |
| - | option | + | option |
| - | option src 'lan' | + | |
| - | config | + | config |
| - | option | + | option type ' |
| - | option | + | option path '/ |
| + | option | ||
| + | option | ||
| - | config | + | config |
| - | option | + | option |
| - | option src 'wan' | + | option forward ' |
| + | option output ' | ||
| + | option network ' | ||
| + | option input ' | ||
| + | |||
| + | config rule | ||
| + | option target ' | ||
| + | option proto 'tcp udp' | ||
| + | option dest_port ' | ||
| + | option name 'Slave dns' | ||
| + | option src 'slave' | ||
| config rule | config rule | ||
| option target ' | option target ' | ||
| - | option dest_port ' | ||
| - | option name ' | ||
| - | option src ' | ||
| option proto ' | option proto ' | ||
| + | option dest_port ' | ||
| + | option name 'slave dhcp' | ||
| + | option src ' | ||
| + | |||
| + | config zone | ||
| + | option name ' | ||
| + | option forward ' | ||
| + | option output ' | ||
| + | option network ' | ||
| + | option input ' | ||
| + | option syn_flood ' | ||
| + | option conntrack ' | ||
| config rule | config rule | ||
| + | option src ' | ||
| + | option proto ' | ||
| + | option dest_port ' | ||
| option target ' | option target ' | ||
| + | option name 'tor DHCP' | ||
| + | |||
| + | config rule | ||
| + | option src ' | ||
| option proto ' | option proto ' | ||
| option dest_port ' | option dest_port ' | ||
| - | option | + | option |
| - | option | + | option |
| config rule | config rule | ||
| - | option | + | option |
| - | option target ' | + | |
| option proto ' | option proto ' | ||
| option dest_port ' | option dest_port ' | ||
| - | option | + | option |
| - | option | + | option |
| config redirect | config redirect | ||
| - | option | + | option |
| + | option src ' | ||
| + | option src_dip ' | ||
| option dest_port ' | option dest_port ' | ||
| - | option name ' | ||
| option proto ' | option proto ' | ||
| - | option | + | option |
| - | option src_dip ' | + | |
| - | option dest 'lan' | + | |
| config redirect | config redirect | ||
| - | option target ' | ||
| - | option proto ' | ||
| option name ' | option name ' | ||
| - | option src 'torvpn' | + | option src 'tor' |
| option src_dport ' | option src_dport ' | ||
| option dest_port ' | option dest_port ' | ||
| + | option proto ' | ||
| + | option target ' | ||
| + | |||
| + | config forwarding | ||
| + | option dest ' | ||
| + | option src ' | ||
| + | |||
| + | config forwarding | ||
| + | option dest ' | ||
| + | option src ' | ||
| + | |||
| + | config forwarding | ||
| + | option dest ' | ||
| + | option src ' | ||
| + | |||
| + | config forwarding | ||
| + | option dest ' | ||
| + | option src ' | ||
| </ | </ | ||
| - | Create DHCP configurations | + | 4. Create DHCP configurations |
| <hidden onHidden="/ | <hidden onHidden="/ | ||
| config dnsmasq | config dnsmasq | ||
| Line 555: | Line 863: | ||
| option loglevel ' | option loglevel ' | ||
| - | config host | + | </ |
| - | option name ' | + | |
| - | option dns ' | + | |
| - | option mac ' | + | |
| - | option ip ' | + | |
| - | config host | ||
| - | option name ' | ||
| - | option dns ' | ||
| - | option mac ' | ||
| - | option ip ' | ||
| - | config host | + | ==== 3rd, Rear Range AP ==== |
| - | option name ' | + | |
| - | option dns ' | + | |
| - | option mac ' | + | |
| - | option ip ' | + | |
| - | config host | + | === Switch details === |
| - | option name ' | + | |
| - | option dns ' | + | |
| - | option mac ' | + | |
| - | option ip ' | + | |
| - | config host | + | ^ VLAN ID ^ Upstream side:HW switch ↔ eth1 driver^^ Downstream side:HW switch↔physical ports^^^^^ |
| - | option name ' | + | | | CPU (eth0) |
| - | option dns '1' | + | | 1 | tagged |
| - | option mac ' | + | | 2 | off | off |off|off|off|off|off| |
| - | option ip ' | + | | 3 | tagged |
| + | | 4 | tagged | ||
| - | config host | ||
| - | option dns ' | ||
| - | option mac ' | ||
| - | option ip ' | ||
| - | option name ' | ||
| - | config host | + | 1. Create extra VLANs to match the table above. The WAN interface was configured to be tagged with VLAN ID numbers. The WAN is receiving the uplink from the mid router. |
| - | option name ' | + | <hidden onHidden="/ |
| - | option dns '1' | + | |
| - | option mac ' | + | |
| - | option ip '192.168.0.8' | + | |
| - | config | + | config |
| - | option | + | option |
| - | option | + | option |
| - | option | + | option |
| - | option | + | option |
| - | config | + | config |
| - | option name 'betas-iPhone.old' | + | option |
| - | option | + | |
| - | option mac 'CC:08:E0:C7:B7: | + | |
| - | option ip ' | + | |
| - | config | + | config |
| - | option | + | option |
| - | option | + | option |
| - | option | + | option |
| - | option | + | option netmask ' |
| + | option ip6assign ' | ||
| + | option ipaddr ' | ||
| + | option gateway ' | ||
| + | option | ||
| - | config | + | config |
| - | option | + | option |
| - | option | + | option proto ' |
| - | option | + | option netmask '255.255.255.0' |
| - | option | + | option |
| + | option | ||
| + | option | ||
| - | config | + | config |
| - | option dns '1' | + | option |
| - | option | + | option |
| - | option ip ' | + | |
| - | option | + | |
| - | config | + | config |
| - | option name 'amazon-f38b5496' | + | option name 'switch0' |
| - | option | + | option |
| - | option | + | option |
| - | option ip ' | + | |
| - | config | + | config |
| - | option | + | option |
| - | option | + | option |
| - | option | + | option |
| - | option | + | option |
| - | config | + | config |
| - | option | + | option |
| - | option | + | option |
| - | option | + | option |
| - | option name ' | + | |
| - | config | + | config |
| - | option | + | option |
| - | option | + | option |
| - | option | + | option |
| - | option | + | option |
| - | config | + | config |
| - | option | + | option |
| - | option | + | option |
| - | option | + | option |
| - | option | + | option |
| - | config | + | config |
| - | option | + | option |
| - | option | + | option |
| - | option | + | option |
| - | option | + | option gateway '172.16.0.1' |
| + | option | ||
| + | option type ' | ||
| + | option ifname 'eth0.3' | ||
| - | config | + | config |
| - | option name 'pivpn' | + | option |
| - | option | + | option |
| - | option | + | option |
| - | option | + | option type ' |
| + | option ifname ' | ||
| + | </ | ||
| + | |||
| + | 2. Create Wi-Fi interfaces. | ||
| + | |||
| + | :!: Be sure to make the SSID names and passwords identical to what is configured on the main router | ||
| + | <hidden onHidden="/ | ||
| + | |||
| + | config wifi-device ' | ||
| + | option type ' | ||
| + | option hwmode ' | ||
| + | option path ' | ||
| + | option htmode ' | ||
| + | option country ' | ||
| + | option legacy_rates ' | ||
| + | option channel ' | ||
| + | |||
| + | config wifi-iface ' | ||
| + | option device ' | ||
| + | option network ' | ||
| + | option mode ' | ||
| + | option ssid ' | ||
| + | option encryption ' | ||
| + | option key ' | ||
| + | option wpa_disable_eapol_key_retries ' | ||
| + | |||
| + | config wifi-device ' | ||
| + | option type ' | ||
| + | option hwmode ' | ||
| + | option path ' | ||
| + | option htmode ' | ||
| + | option country ' | ||
| + | option legacy_rates ' | ||
| + | option channel ' | ||
| + | |||
| + | config wifi-iface ' | ||
| + | option device ' | ||
| + | option network ' | ||
| + | option mode ' | ||
| + | option ssid ' | ||
| + | option encryption ' | ||
| + | option key ' | ||
| + | option wpa_disable_eapol_key_retries ' | ||
| + | |||
| + | config wifi-device ' | ||
| + | option type ' | ||
| + | option channel ' | ||
| + | option hwmode ' | ||
| + | option path ' | ||
| + | option htmode ' | ||
| + | option disabled ' | ||
| + | |||
| + | config wifi-iface ' | ||
| + | option device ' | ||
| + | option network ' | ||
| + | option mode ' | ||
| + | option ssid ' | ||
| + | option encryption ' | ||
| + | |||
| + | config wifi-iface | ||
| + | option device ' | ||
| + | option mode ' | ||
| + | option encryption ' | ||
| + | option ssid ' | ||
| + | option isolate ' | ||
| + | option network ' | ||
| + | |||
| + | config wifi-iface | ||
| + | option device ' | ||
| + | option mode ' | ||
| + | option encryption ' | ||
| + | option ssid ' | ||
| + | option isolate ' | ||
| + | option network ' | ||
| </ | </ | ||
| + | 3. Create firewall rules | ||
| + | <hidden onHidden="/ | ||
| - | ==== 2nd, Mid Range AP ==== | + | config defaults |
| + | option syn_flood ' | ||
| + | option input ' | ||
| + | option output ' | ||
| + | option forward ' | ||
| - | create a guest wireless interface | + | config zone |
| - | <hidden onHidden=" | + | option name ' |
| + | option input ' | ||
| + | option output ' | ||
| + | option forward ' | ||
| + | option network ' | ||
| - | create a 3rd wireless interface | + | config zone |
| - | <hidden onHidden=" | + | option name ' |
| + | option input ' | ||
| + | option output ' | ||
| + | option forward ' | ||
| + | option masq ' | ||
| + | option mtu_fix ' | ||
| + | option network 'wan wan6' | ||
| - | <hidden onHidden=" | + | config forwarding |
| + | option src ' | ||
| + | option dest ' | ||
| - | ==== 3rd, Rear Range AP ==== | + | config rule |
| + | option name ' | ||
| + | option src ' | ||
| + | option proto ' | ||
| + | option dest_port ' | ||
| + | option target ' | ||
| + | option family ' | ||
| - | <hidden onHidden=" | + | config rule |
| + | option name ' | ||
| + | option src ' | ||
| + | option proto ' | ||
| + | option icmp_type ' | ||
| + | option family ' | ||
| + | option target ' | ||
| + | |||
| + | config rule | ||
| + | option name ' | ||
| + | option src ' | ||
| + | option proto ' | ||
| + | option family ' | ||
| + | option target ' | ||
| + | |||
| + | config rule | ||
| + | option name ' | ||
| + | option src ' | ||
| + | option proto ' | ||
| + | option src_ip ' | ||
| + | option dest_ip ' | ||
| + | option dest_port ' | ||
| + | option family ' | ||
| + | option target ' | ||
| + | |||
| + | config rule | ||
| + | option name ' | ||
| + | option src ' | ||
| + | option proto ' | ||
| + | option src_ip ' | ||
| + | list icmp_type ' | ||
| + | list icmp_type ' | ||
| + | list icmp_type ' | ||
| + | list icmp_type ' | ||
| + | option family ' | ||
| + | option target ' | ||
| + | |||
| + | config rule | ||
| + | option name ' | ||
| + | option src ' | ||
| + | option proto ' | ||
| + | list icmp_type ' | ||
| + | list icmp_type ' | ||
| + | list icmp_type ' | ||
| + | list icmp_type ' | ||
| + | list icmp_type ' | ||
| + | list icmp_type ' | ||
| + | list icmp_type ' | ||
| + | list icmp_type ' | ||
| + | list icmp_type ' | ||
| + | list icmp_type ' | ||
| + | list icmp_type ' | ||
| + | option limit ' | ||
| + | option family ' | ||
| + | option target ' | ||
| + | |||
| + | config rule | ||
| + | option name ' | ||
| + | option src ' | ||
| + | option dest ' | ||
| + | option proto ' | ||
| + | list icmp_type ' | ||
| + | list icmp_type ' | ||
| + | list icmp_type ' | ||
| + | list icmp_type ' | ||
| + | list icmp_type ' | ||
| + | list icmp_type ' | ||
| + | list icmp_type ' | ||
| + | option limit ' | ||
| + | option family ' | ||
| + | option target ' | ||
| + | |||
| + | config rule | ||
| + | option name ' | ||
| + | option src ' | ||
| + | option dest ' | ||
| + | option proto ' | ||
| + | option target ' | ||
| + | |||
| + | config rule | ||
| + | option name ' | ||
| + | option src ' | ||
| + | option dest ' | ||
| + | option dest_port ' | ||
| + | option proto ' | ||
| + | option target ' | ||
| + | |||
| + | config include | ||
| + | option path '/ | ||
| + | |||
| + | config zone | ||
| + | option name ' | ||
| + | option input ' | ||
| + | option forward ' | ||
| + | option output ' | ||
| + | option network ' | ||
| + | |||
| + | config zone | ||
| + | option name ' | ||
| + | option input ' | ||
| + | option forward ' | ||
| + | option output ' | ||
| + | option network ' | ||
| + | |||
| + | </ | ||
| + | |||
| + | 4. Create DHCP configurations | ||
| + | <hidden onHidden=" | ||
| + | |||
| + | config dnsmasq | ||
| + | option domainneeded ' | ||
| + | option boguspriv ' | ||
| + | option filterwin2k ' | ||
| + | option localise_queries ' | ||
| + | option rebind_protection ' | ||
| + | option rebind_localhost ' | ||
| + | option local '/ | ||
| + | option domain ' | ||
| + | option expandhosts ' | ||
| + | option nonegcache ' | ||
| + | option authoritative ' | ||
| + | option readethers ' | ||
| + | option leasefile '/ | ||
| + | option resolvfile '/ | ||
| + | option nonwildcard ' | ||
| + | option localservice ' | ||
| + | |||
| + | config dhcp ' | ||
| + | option interface ' | ||
| + | option dhcpv6 ' | ||
| + | option ra ' | ||
| + | option ignore ' | ||
| + | option ra_management ' | ||
| + | |||
| + | config dhcp ' | ||
| + | option interface ' | ||
| + | option ignore ' | ||
| + | |||
| + | config odhcpd ' | ||
| + | option maindhcp ' | ||
| + | option leasefile '/ | ||
| + | option leasetrigger '/ | ||
| + | option loglevel ' | ||
| + | |||
| + | </ | ||
| Resources: | Resources: | ||
| - | * https:// | + | * [[docs:guide-user:network:vlan:creating_virtual_switches]] |
| - | * https:// | + | * [[docs:guide-user:network:wifi:relay_configuration]] |
| - | * https:// | + | * [[docs:guide-user:network:wifi:routedap]] |
| - | * https:// | + | * [[docs:guide-user:network:wifi:mesh:80211s]] |