Dual SSID one for public network
From DD-WRT Wiki
(Difference between revisions)
Revision as of 07:08, 5 June 2009 (edit) Ausimus1 (Talk | contribs) (Removing all content from page) ← Previous diff |
Revision as of 08:37, 5 June 2009 (edit) (undo) Markus (Talk | contribs) (Undo revision 25533 by Ausimus1 (Talk)) Next diff → |
||
Line 1: | Line 1: | ||
+ | This worked for me on V24 release with wrt54GL | ||
+ | My main network is 192.168.1.1 | ||
+ | |||
+ | 1) Wireless -->basic setting added another Interface, unbrigged, and with IP of 192.168.2.1, mask of 255.255.255.0 | ||
+ | |||
+ | 2) In wireless security, configure the security for the second adapter. | ||
+ | |||
+ | Apply changes. | ||
+ | |||
+ | 3)Setup - networking --> dhcpD add another DHCP server for the second interface choose wl0.1. | ||
+ | In my case it was 192.168.2.10 5 users | ||
+ | |||
+ | 4) Administration---> commands | ||
+ | |||
+ | iptables -I INPUT -i wl0.1 -p icmp -j ACCEPT | ||
+ | |||
+ | iptables -I INPUT -i wl0.1 -p tcp --dport 23 -j logdrop | ||
+ | |||
+ | iptables -I INPUT -i wl0.1 -p tcp --dport 80 -j logdrop | ||
+ | |||
+ | iptables -I FORWARD -i wl0.1 -o br0 -j logdrop | ||
+ | |||
+ | ;''WHAT DO THESE COMMANDS DO?'':By setting these rules, someone logging into the public wifi network cannot see or modify the router or see your network. Probably. | ||
+ | |||
+ | Save firewall | ||
+ | |||
+ | 5)Reboot router | ||
+ | |||
+ | That's it | ||
+ | == Links == | ||
+ | http://www.pennock.nl/dd-wrt/Multiple_BSSIDs.html |
Revision as of 08:37, 5 June 2009
This worked for me on V24 release with wrt54GL
My main network is 192.168.1.1
1) Wireless -->basic setting added another Interface, unbrigged, and with IP of 192.168.2.1, mask of 255.255.255.0
2) In wireless security, configure the security for the second adapter.
Apply changes.
3)Setup - networking --> dhcpD add another DHCP server for the second interface choose wl0.1. In my case it was 192.168.2.10 5 users
4) Administration---> commands
iptables -I INPUT -i wl0.1 -p icmp -j ACCEPT
iptables -I INPUT -i wl0.1 -p tcp --dport 23 -j logdrop
iptables -I INPUT -i wl0.1 -p tcp --dport 80 -j logdrop
iptables -I FORWARD -i wl0.1 -o br0 -j logdrop
- WHAT DO THESE COMMANDS DO?
- By setting these rules, someone logging into the public wifi network cannot see or modify the router or see your network. Probably.
Save firewall
5)Reboot router
That's it