I was searching half a night and 2 hours today to get a Linksys Router working a wireless bridge with WPA(2) encryption. I tried Openwrt White Russian RC5 and DD-Wrt V23 SP1 and many combinations of WPA, WPA2, TKIP, AES. The bridge works well with WEP and without any encryption….
Just a place to be!
Archive for the 'WLan' Category
Okay … we got the serial port running (same like WRT54GS), so we could be more risky. After some tries I decided to work analog the WRT54G models.
Don´t ask how, but we got some units to europe.
The first thing we does, was to install openwrt and to try debridge the switch to have multiple interfaces instead. We was able to remove ports from the switch, but cant create additional working vlans like on WRT54G. So at this point its useless for our purpose. But we will start exploring as son as possible we have a running serial console.
At first … I’m not responsible, if you brick your router by using this documention. If your fear it would be possible, stop HERE!
The following NVRAM-Settings need to take place:
#!/bin/sh #Port 0 into WAN, 5 Router themselv nvram set vlan1hwname=et0 nvram set vlan1ports="0 5" #Port 2, 3 and 4 into LAN, 5 Router themselv nvram set vlan0hwname=et0 nvram set vlan0ports="2 3 4 5*" # Port 1 into DMZ, 5 Router themselv nvram set vlan2hwname=et0 nvram set vlan2ports="1 5*" # Static IP-Address for DMZ-IF nvram set dmz_ifname=vlan2 nvram set dmz_proto=static nvram set dmz_ipaddr=172.18.20.5 nvram set dmz_netmask=255.255.255.0 # save all the stuff nvram commit
To bring automaticaly up the dmz-if, you need to add “ifup dmz” with:
# sed “s/ifup lan/ifup lan@ ifup dmz/” \
/etc/init.d/S40network | tr ‘@’ ‘n’ > /etc/init.d/S40network
To allow traffic forwarded by the new if, you will maybe add for example the following into “/etc/firewall.users”:
#!/bin/sh DMZ=$(nvram get dmz_ifname) #Allow Forward from DMZ into WAN iptables -A FORWARD -i $DMZ -o $WAN -j ACCEPT #Allow Forward from DMZ into LAN iptables -A FORWARD -i $DMZ -o $LAN -j ACCEPT #Allow Forward from LAN into DMZ iptables -A FORWARD -i $LAN -o $DMZ -j ACCEPT
But it will be better to specify exactly, what services are allowed from and into DMZ!
Spy View *
Favorit Radio Station
Latest Checkins
Brunner Bäcker8:34 31 July 2010
Aldi8:31 31 July 2010
Städtischer Kinderspielplatz8:28 31 July 2010
Kindergarten Am Storchennest21:20 30 July 2010
Volksfestplatz Bayreuth19:31 29 July 2010
