Zobrazení zdroje stránky LINKSYS wrt54gl

= Firmware - OpenWRT Whiterussian =

==Nahrání firmwaru==

<del>OpenWRT firmware Whiterussian RC4 do Linksyse WRT54GL najdete [http://igw.hkfree.org/download/linux/hw-ap/openwrt/linksys-wrt54gl/openwrt-wrt54g-jffs2-WR-RC4.bin zde]</del>

OpenWRT firmware Whiterussian RC5 do Linksyse WRT54GL najdete [http://igw.hkfree.org/download/linux/hw-ap/openwrt/linksys-wrt54gl/openwrt-wrt54g-jffs2-WR-RC5.bin zde]

*Nahrava se pomoci WWW rozhrani primo v linksysu. 
*Prihlaseni do original firmware je bez jmena a heslo je '''admin'''
*Defaultni IP je 192.168.1.1 (maska 255.255.255.0)


* '''Po prvnim prihlaseni (telnetem) je treba dat reboot, aby se zaktivoval filesystem'''
* '''Po prvnim rebootu si ihned zmente heslo (passwd), rebootnout AP a prihlasit se pres ssh (telnet se pak automaticky zablokuje).'''
* '''Toto heslo je zaroven heslem na www (uzivatel root)'''
* robocfg a wl (+jine utility) je treba dohrat jako balik pres zalozku system - installed software. Jako prvni je treba dat "Update package lists"

Přístup do linksyse (přes SSH) je možný pouze z LAN (4 porty) nebo z WLAN (radio). Pokud se do něj chcete dostat přes SSH i z WAN portu, je tčeba jít do souboru /etc/init.d/S45firewall:
 
 (tenhle řádek tam je)
 iptables -A INPUT -i \! $WAN  -j ACCEPT       # allow from lan/wifi interfaces
 (tenhle přidejte)
 iptables -A INPUT -i $WAN  -j ACCEPT          # allow from wan interfaces


----
== Predelani linksyse na router co ma 5 sitovych ethernet karet (wifi zustava jedno)==
**Nastaveni 5ti sitovek na jednotlive porty switche (vcetne WAN)
<bash>
nvram set vlan0_ports="1 5*"
nvram set vlan0_hwname="et0"
nvram set vlan1_ports="4 5*"
nvram set vlan1_hwname="et0"
nvram set vlan2_ports="2 5*"
nvram set vlan2_hwname="et0"
nvram set vlan3_ports="3 5*"
nvram set vlan3_hwname="et0"
nvram set vlan4_ports="0 5*"
nvram set vlan4_hwname="et0"
nvram commit
reboot
#Nastaveni portu 1 pro vlan0 je vyzadovano pro budouci mozny upgrade firmware.
#Upgrade fw nejde kdyz neni port 1 ve vlan0.
</bash>

 Pak bude toto rozdeleni
 vlan0-> port3
 vlan1-> wanport(internet)
 vlan2-> port2
 vlan3-> port1
 vlan4-> port4

**Aktivace zbyvajicich vlanu (defaultni jsou aktivni jen vlan0 a 1) je nutno provadet uz skriptem po kazdem bootu:

<bash>
vconfig add eth0 2 #Pridat vlan2 k eth0
vconfig add eth0 3 #Pridat vlan3 k eth0
vconfig add eth0 4 #Pridat vlan4 k eth0

ifconfig vlan2 hw ether XX:XX:XX:XX:XX:02 #Nastavit mac adresu pro vlan2
ifconfig vlan3 hw ether XX:XX:XX:XX:XX:03 #Nastavit mac adresu pro vlan3
ifconfig vlan4 hw ether XX:XX:XX:XX:XX:04 #Nastavit mac adresu pro vlan4

ifconfig vlan0 xx.xx.xx.xx netmask xx.xx.xx.xx broadcast xx.xx.xx.xx up #Nastavit IP adresu pro vlan0
ifconfig vlan1 xx.xx.xx.xx netmask xx.xx.xx.xx broadcast xx.xx.xx.xx up #Nastavit IP adresu pro vlan1
ifconfig vlan2 xx.xx.xx.xx netmask xx.xx.xx.xx broadcast xx.xx.xx.xx up #Nastavit IP adresu pro vlan2
ifconfig vlan3 xx.xx.xx.xx netmask xx.xx.xx.xx broadcast xx.xx.xx.xx up #Nastavit IP adresu pro vlan3
ifconfig vlan4 xx.xx.xx.xx netmask xx.xx.xx.xx broadcast xx.xx.xx.xx up #Nastavit IP adresu pro vlan4
</bash>

* Nastaveni FD / HD / 10 / 100 pro jednotlive porty
**Pro nastavovani jednotlivych vystupu, je treba nainstalovat balik '''robocfg'''
**ipkg update
**nasledovne na www kliknout na install u prislusneho baliku
<bash>
robocfg show #Zobrazit aktualni konfiguraci vsech portu
robocfg port X media <auto|10HD|10FD|100HD|100FD> #Nastaveni modu portu
robocfg port X mdi-x <auto|on|off> #Nastaveni Auto-Cross
</bash>

== Nastavovani vystupniho vykonu radiove casti ==
**Pro nastavovani vykonu je treba nainstalovat balik '''wl''' pres web admina linksyse
**nastavovani vykonu probiha pomoci prikazu '''wl'''
<bash>
wl curpower #Vypis vsech hodnot o vykonu
wl txpwr X  #X je v mW
wl txpwr    #bez parametru zobrazi aktualni nastaveni vykonu v mW
</bash>
*Ukazka jak umi wrt54gl regulovat:
[[Soubor:Regulace-wrt54gl.PNG]]
*Vetsi sloupec je '''wl txpwr 251''' a ten mensi (zaregulovany) je '''wl txpwr 1'''
*na obrazku z netstumbleru je videt ze to umi regulovat v rozmezi ca 25db


----

==Drobne stripky z testovani HWAP Linksys==

 BusyBox v1.00 (2005.11.23-21:46+0000) Built-in shell (ash)
 Enter 'help' for a list of built-in commands.
  _______                     ________        __
 |       |.-----.-----.-----.|  |  |  |.----.|  |_
 |   -   ||  _  |  -__|     ||  |  |  ||   _||   _|
 |_______||   __|_____|__|__||________||__|  |____|
          |__| W I R E L E S S   F R E E D O M
 WHITE RUSSIAN (RC4) -------------------------------
  * 2 oz Vodka   Mix the Vodka and Kahlua together
  * 1 oz Kahlua  over ice, then float the cream or
  * 1/2oz cream  milk on the top.
 ---------------------------------------------------
 root@OpenWrt:~#

 root@OpenWrt:~# df
 Filesystem           1k-blocks      Used Available Use% Mounted on
 /dev/root                 3264      1884      1380  58% /
 none                      7188        12      7176   0% /tmp

 root@OpenWrt:/etc/quagga# free
              total         used         free       shared      buffers
  Mem:        14376         9136         5240            0            0
 Swap:            0            0            0
 Total:        14376         9136         5240

*ospf a zebra bezici na predelanem linksysu:
<bash>
linksys-ospf> show ip ospf interface
eth0 is up
  OSPF not enabled on this interface
eth1 is up
  OSPF not enabled on this interface
lo is up
  OSPF not enabled on this interface
vlan0 is up
  Internet Address 192.168.2.2/24, Broadcast 192.168.2.255, Area 0.0.0.0
  Router ID 192.168.1.124, Network Type BROADCAST, Cost: 100
  Transmit Delay is 1 sec, State Waiting, Priority 1
  No designated router on this network
  No backup designated router on this network
  Timer intervals configured, Hello 15, Dead 40, Wait 40, Retransmit 5
    Hello due in 00:00:02
  Neighbor Count is 0, Adjacent neighbor count is 0
vlan1 is up
  Internet Address 10.107.0.74/30, Broadcast 10.107.0.75, Area 0.0.0.0
  Router ID 192.168.1.124, Network Type BROADCAST, Cost: 100
  Transmit Delay is 1 sec, State Waiting, Priority 1
  No designated router on this network
  No backup designated router on this network
  Timer intervals configured, Hello 15, Dead 40, Wait 40, Retransmit 5
    Hello due in 00:00:02
  Neighbor Count is 0, Adjacent neighbor count is 0
vlan2 is down
  OSPF not enabled on this interface
vlan3 is up
  Internet Address 192.168.1.124/24, Broadcast 192.168.1.255, Area 0.0.0.0
  Router ID 192.168.1.124, Network Type BROADCAST, Cost: 10
  Transmit Delay is 1 sec, State Waiting, Priority 1
  No designated router on this network
  No backup designated router on this network
  Timer intervals configured, Hello 5, Dead 40, Wait 40, Retransmit 5
    Hello due in 00:00:02
  Neighbor Count is 0, Adjacent neighbor count is 0
vlan4 is down
  OSPF not enabled on this interface
</bash>
<bash>
linksys-Zebra> show interface
Interface eth0 is up, line protocol detection is disabled
  index 2 metric 1 mtu 1500 <UP,BROADCAST,RUNNING,PROMISC,MULTICAST>
  HWaddr: 00:14:bf:ef:2c:b9
Interface eth1 is up, line protocol detection is disabled
  index 3 metric 1 mtu 1500 <UP,BROADCAST,RUNNING,MULTICAST>
  HWaddr: 00:14:bf:ef:2c:b9
  inet 10.107.99.1/27 broadcast 10.107.99.31
Interface lo is up, line protocol detection is disabled
  index 1 metric 1 mtu 16436 <UP,LOOPBACK,RUNNING>
  inet 127.0.0.1/8
Interface vlan0 is up, line protocol detection is disabled
  index 5 metric 1 mtu 1500 <UP,BROADCAST,RUNNING,MULTICAST>
  HWaddr: 00:14:bf:ef:2c:b9
  inet 192.168.2.2/24 broadcast 192.168.2.255
Interface vlan1 is up, line protocol detection is disabled
  index 6 metric 1 mtu 1500 <UP,BROADCAST,RUNNING,PROMISC,MULTICAST>
  HWaddr: 00:14:bf:ef:2c:ba
  inet 10.107.0.74/30 broadcast 10.107.0.75
Interface vlan2 is down
  index 7 metric 1 mtu 1500 <BROADCAST,PROMISC,MULTICAST>
  HWaddr: 00:14:bf:ef:2c:bb
Interface vlan3 is up, line protocol detection is disabled
  index 8 metric 1 mtu 1500 <UP,BROADCAST,RUNNING,PROMISC,MULTICAST>
  HWaddr: 00:14:bf:ef:2c:bc
  inet 192.168.1.124/24 broadcast 192.168.1.255
Interface vlan4 is down
  index 9 metric 1 mtu 1500 <BROADCAST,PROMISC,MULTICAST>
  HWaddr: 00:14:bf:ef:2c:bd
</bash>

==LAN/WAN, robocfg, ifconfig, porty a oznaceni na deklu==

Ve vychozim stavu, po instalaci White Russian RC5:
 web    ifconfig       port           krabice
 LAN == br0 ( eth1 ------------------ WiFi
            ( vlan0 -- Port0,1,2,3 -- 4,3,2,1
 WAN == vlan1 -------- Port4 -------- Internet

robocfg show
 robocfg:                                                           oznaceni na krabici
 Port 0(W): 100FD enabled stp: none vlan: 0 mac: 00:00:00:00:00:00  4 \
 Port 1(4):  DOWN enabled stp: none vlan: 0 mac: 00:00:00:00:00:00  3  \ tyto 4 jsou
 Port 2(3):  DOWN enabled stp: none vlan: 0 mac: 00:00:00:00:00:00  2  / vedle sebe
 Port 3(2):  DOWN enabled stp: none vlan: 0 mac: 00:00:00:00:00:00  1 /
 Port 4(1):  DOWN enabled stp: none vlan: 1 mac: 00:00:00:00:00:00  Internet
 Port 5(C): 100FD enabled stp: none vlan: 0 mac: 00:00:00:00:00:00  (zadne - to vede dovnitr)


==MAC filter ve skriptu s komentarem==

Nebavi te na WWW rozhrani RC5 zadavat stale dalsi a dalsi MAC adresy pripojenych stanic? Chybi ti tam moznost k MAC adrese si pripsat nejakou poznamku (napr. jmeno pripojence)? Chces pro vice linksysu mit centralni spravu MAC adres? Pak je tady pro tebe tento skript:

 #!/bin/sh
 #
 # Skript pro MAC filtr, Linksys WRT54GL, firmware White Russian RC5
 # VojtaLhota <vojta@lhota.hkfree.org> 9/2005
 #
 [ -d /tmp/.webif ] || mkdir /tmp/.webif
 cat $0 | grep -i ^[0-9A-F][0-9A-F]: |\
 sort |\
 awk -- '{maclist= maclist $1 " "} END {print "wl0_maclist=\"" maclist "\""}' > /tmp/.webif/config-wireless
 sh /usr/lib/webif/apply.sh
 exit
 
 #
 # Sem se zapisuej povolene MAC adresy, jedna na radek. Za adresou muze byt
 # jakykoliv komentar. Po zmenach je tento soubor treba spustit
 # v prikazove radce: ./mac.list
 #
 00:90:4B:AA:69:5E       # ID 1547, IP 10.107.8.48, Josef Skocdopole
 00:90:4B:AA:69:1E       # IP 304, IP 10.107.8.55-9, Jarda Plech

Skript se ulozi do linksyse pod jmenem /mac.list. Pri jeho pouzivani nedoporucuju pouzivat WWW rozhrani, nebot MAC adresa tamtudy pridana se pri pristim pouziti skriptu prepise.

''VojtaLhota''

==Mereni sily signalu od pripojenych stanic==

root@Lhota3-vsesmer:/usr/bin# cat rssi

Je treba nainstalovat balicek wl:

 ipkg install wl

A potom pouzit prikazy:

 wl assoclist
 wl rssi <MAC_adresa>

Nebo tento simple&stupid skript (/usr/bin/rssi):

 #!/bin/sh
 wl assoclist | while read a b; do echo -n "$b "; wl rssi $b; done

''VojtaLhota''


=Jak ozivit napul mrtvý WRT54GL=
[[Soubor:Wrt54g_inside1.jpg|thumb|Jeden konec na zem.]]
[[Soubor:Wrt54g_inside2.jpg|thumb|Druhy konec na pin.]]
Kdyz uz je Linksys po zaruce a umrel nam treba po flashovani tak je treba k jeho oziveni ho kuchnout. Pozor pokud je jeste v zaruce, tak timto kuchnutim tu zaruku ztratis.
* Sundej gumove nozicky a vem plochy sroubovak. Nyni je treba ho zarazit do nozicky. Az to hlasite krupne (ne okolni plast, trosku s citem), tak je pripraveno k rozdelani. Toto u vsech 4 noh. Az se ti ho podari rozlousknout, tak pokracuj v nasledujicim bodu.
* Pokracujem tedy dal. Pin 16 u flash pameti vyzkratovat na zem, zapnout AP do elektriky. Nyni se vse rozsviti jako vanocni stromek. Cekej nez to vse pohasne. Nyni je Linksys ve flashovacim rezimu a ma ip 192.168.1.1 Pokud ne, tak je bud uplne spatnej, nebo si neco vynechal => zkus to vse znovu. Nyni pomoci tftp nahraj firmware: (nebo [http://www.topshareware.com/TrivialFTP-Suite-download-19579.htm TFTP klient pro Windows])

<bash># tftp 192.168.1.1
> binary
> trace
> rexmt 1
> timeout 90
> put firmware.bin</bash>

* Ted bude blikat dioda POWER, Nesahat dokud neprestane blikat. Dle posledniho ozivovani to trvalo cca 10min. Az zhasne, tak mame flashnuto. Pokud ted nenapingas Linksys, tak je treba mu jeste smazat NVRAM.
* Smazani NVRAM: Vypni Linksyse,stiskni a drz tlacitko reset, zapni Linksys do elektriky. Dokud se nerozsviti DMZ drz reset, pak pust. Ted je NVRAM vycistena. Po zhasnuti DMZ by ses mel uz dostat telnetem na Linksys (192.168.1.1)


= Linksys jako router - zkušenosti z Lesoparku =

Special Thanks to: VojtaLhota, Lada

Použitý firmware - Whiterussian RC5

Používáno s vypnutou wifi částí a swichem natagovaným do 5 vlanů

==Nainstalované balíčky==

* base-files (OpenWrt filesystem structure and scripts) - 11kB 
* base-files-brcm (Board/architecture specific files) - 3kB 
* bridge (ethernet bridging tools) - 10kB 
* busybox (core utilities for embendded Linux systems) - 255kB 
* dropbear (small SSH 2 server/client) - 98kB 
* haserl (a CGI wrapper to embed shell scripts in HTML docs) - 8kB
* ipkg (package management system) - 63kB
* iptables (netfilter firewalling software for IPv4) - 40kB
* iwlib (setting up wifi using Wireless Extension) - 12kB
* kernel
* kmod-brcm-wl
* kmod-diag
* kmod-switch
* kmod-wlcompat
* libncurses
* mtd (tool for modifying the flash chip) - 5kB 
* nvram (nvram utility and libraries for Broadcom hardware) - 14kB
* quagga-ospfd (OSPFv2 routing engine) - 129kB
* quagga (routing software package) - 155kB
* quagga-vtysh (integrated shell for interacting with Quagga) - 120kB 
* tcpdump (network monitoring and data acqusition) - 206kB
* uclibc
* webif (web interface for OpenWrt) - 43kB
* wificonf (replacement utility for wlconf) - 7kB
* wireless-tools (setting up wifi using Wireless Extension) - 29kB
* wl (wifi tool)

==Další zajímavé balíčky==

* bwm (bandwidth monitor) - 4kB
* dhcp-forvarder (dhcp relay agent) - 16kB
* dnsmasq (DNS and DHCP server) - 52kB
* libnetsnmp (snmp shared libraries) - 215kB
* maradns (small secure DNS server) - 148kB
* monit (utility for system services monitoring) - 118kB
* nmap (network exploration or security auditing) - 382kB
* ntpclient (setting system time from NTP servers) - 10kB
* openssh-client, server, sftp-client, sftp-server
* snmp-utils (SNMP client utilities) - 16kB
* snmpd (SNMP agent) - 9kB
* tc (iproute2 traffic control utility) - 67kB
* ttcp (small utility to test TCP connection performace) - 14kB

==Quagga==

Stačí přes web nahrát balíčky quagga, quagga-ospfd, příp. quagga-vtysh. Do adresáře /etc/quagga přidat soubory deamons, zebra.conf, ospfd.conf (konfiguráky stejné jako na klasicky na linuxu) a spustit /etc/init.d/quagga start.

==Hints==

* Zkontrolujte si pravidla v /etc/init.d/S45firewall (především pravidla na FORWARDing), jinak se může stát, že zdánlivě je vše ok (quagga, routy, zebra), ale "skrz" Linksys neprochazí žádný traffic.
* Nvram se nastavuje "nvram set <promenna>=<hodnota>" (napr. nvram set lan_proto=static), proměnná se maže "nvram unset <promenna>=<hodnota>", při zadávání více hodnot používejte uvozovky (napr. ="1 2 3 4"), nezapomenout uložit změny "nvram commit".
* Při nastavování vlanů se může stát, že nebude fungovat nastavení proměnné vlan0_ports, použijte proto proměnnou bez podtržítka (vlan0ports), pozn. u mě toto platilo u proměnných vlanXports, vlanXhwname, ale proměnné vlanX_ifname a vlanX_proto fungovaly normálně (X je číslo 0-4).

''Paul''