Hier werden die Unterschiede zwischen zwei Versionen angezeigt.
| Beide Seiten der vorigen Revision Vorhergehende Überarbeitung Nächste Überarbeitung | Vorhergehende Überarbeitung | ||
|
gaeste-wlan [2014/07/03 14:07] 192.168.5.11 |
gaeste-wlan [2016/08/17 12:19] (aktuell) joky |
||
|---|---|---|---|
| Zeile 14: | Zeile 14: | ||
| === Installation === | === Installation === | ||
| - | | + | |
| - | | + | / |
| - | | + | / |
| === / | === / | ||
| Zeile 31: | Zeile 31: | ||
| config wifi-iface | config wifi-iface | ||
| option device | option device | ||
| + | option network | ||
| + | option mode ap | ||
| + | option ssid | ||
| + | option encryption none | ||
| + | option disabled 0 | ||
| + | option isolate ' | ||
| + | config wifi-iface | ||
| + | option device | ||
| option network | option network | ||
| option mode ap | option mode ap | ||
| Zeile 63: | Zeile 71: | ||
| option ignore ' | option ignore ' | ||
| config dhcp | config dhcp | ||
| - | option leasetime ' | ||
| - | option limit ' | ||
| option interface ' | option interface ' | ||
| - | option start '50' | + | |
| + | option limit ' | ||
| + | | ||
| Zeile 165: | Zeile 173: | ||
| config zone | config zone | ||
| option name ' | option name ' | ||
| - | option output 'ACCEPT' | + | option output 'DROP' |
| option network ' | option network ' | ||
| - | option forward 'ACCEPT' | + | option forward 'DROP' |
| option input ' | option input ' | ||
| config rule | config rule | ||
| Zeile 195: | Zeile 203: | ||
| option name ' | option name ' | ||
| option proto ' | option proto ' | ||
| - | option src 'guest_' | + | option src 'guest' |
| option dest_ip ' | option dest_ip ' | ||
| option target ' | option target ' | ||
| Zeile 219: | Zeile 227: | ||
| === / | === / | ||
| iptables -t nat -I PREROUTING -p udp --dport 53 -j DNAT --to-destination 8.8.8.8:53 | iptables -t nat -I PREROUTING -p udp --dport 53 -j DNAT --to-destination 8.8.8.8:53 | ||
| + | iptables -I INPUT -i br-g -d 192.168.0.0/ | ||
| + | iptables -I INPUT -i br-g -d 10.0.0.0/8 -j DROP | ||
| + | / | ||
| === / | === / | ||
| + | **GatewayID anpassen**! | ||
| + | |||
| + | cat <<EOF > / | ||
| + | | ||
| + | GatewayID $HOSTNAME | ||
| GatewayInterface br-g | GatewayInterface br-g | ||
| HtmlMessageFile / | HtmlMessageFile / | ||
| Zeile 244: | Zeile 260: | ||
| FirewallRule allow to 0.0.0.0/0 | FirewallRule allow to 0.0.0.0/0 | ||
| } | } | ||
| - | | + | |
| } | } | ||
| FirewallRuleSet locked-users { | FirewallRuleSet locked-users { | ||
| FirewallRule block to 0.0.0.0/0 | FirewallRule block to 0.0.0.0/0 | ||
| } | } | ||
| + | | ||
| + | EOF | ||
| === Konfiguration neu laden und starten === | === Konfiguration neu laden und starten === | ||
| - | | + | / |
| - | | + | / |
| - | | + | / |
| - | | + | / |
| - | ==== Coova-Chilli (veraltet) ==== | + | |
| - | + | ||
| - | === Installation === | + | |
| - | # opkg update; opkg install coova-chilli | + | |
| - | + | ||
| - | === Chilli.conf === | + | |
| - | interval 3600 | + | |
| - | pidfile / | + | |
| - | radiusserver1 192.168.0.1 | + | |
| - | radiusserver2 192.168.0.1 | + | |
| - | radiussecret eNgai4peichuuk8Ainathooph8Ieza | + | |
| - | dhcpif br-guest | + | |
| - | uamserver http:// | + | |
| - | uamsecret shahliejuiju5ihahb4eg6eeX3Shaz | + | |
| - | uamallowed www.smart-mt.at, | + | |
| - | uamanydns | + | |
| - | dns1 208.67.222.222 | + | |
| - | dns2 208.67.220.220 | + | |
| - | domain SmartMediaTechnology | + | |
| - | net 172.16.30.0/ | + | |
| - | tundev tun1 | + | |
| - | === Wifi Settings | + | === Node anlegen |
| - | {{ :openwrt_guestlan_wifi.jpg |}} | + | [[http://auth.smart-mt.at/ |
| - | === General Settings === | ||
| - | {{ : | ||
| - | === Traffic Rules === | ||
| - | {{ : | ||