Internal device network

From DD-WRT Wiki

(Difference between revisions)
Jump to: navigation, search
Revision as of 20:32, 18 May 2010 (edit)
Glenn (Talk | contribs)
(Internal network services - chg)
← Previous diff
Revision as of 20:34, 18 May 2010 (edit) (undo)
Glenn (Talk | contribs)
(Internal network services - chg)
Next diff →
Line 22: Line 22:
**OSI layer 2 moderation, ethernet '''transparent/bridging firewall''' **OSI layer 2 moderation, ethernet '''transparent/bridging firewall'''
**OSI layer 3 moderation; ip '''packet filtering firewall''' **OSI layer 3 moderation; ip '''packet filtering firewall'''
-**Please note that the above layer 2 or 3 firewall normally inspects higher OSI layers. Iptables can refer to modules that can do that:+**Please note that the above layer 2 or 3 (DD-WRT) [[firewall]] normally inspects higher OSI layers. Iptables can refer to modules that can do that:
**OSI layer 3-4 moderation; tcp/udp/ip '''statefull firewall''' **OSI layer 3-4 moderation; tcp/udp/ip '''statefull firewall'''
-**OSI layer 3-7 moderation; '''proxying/application/Layer 7 [[firewall]]''', OSI layer 3-7 firewall+**OSI layer 3-7 moderation; '''proxying/application/Layer 7 firewall''', OSI layer 3-7 firewall
**[[Quality of Service]] **[[Quality of Service]]
**[[:Category:NAT|NAT - Network Address Translation]] **[[:Category:NAT|NAT - Network Address Translation]]

Revision as of 20:34, 18 May 2010

Your network device (commonly referred to as a "router") has an internal network. The internal network connects the internal physical(=hardware):

  • switch
  • wireless access point

with the:

Contents

Modifying internal network

Via the user interface you can modify how the hardware is logically interconnected with each other and with your software services.

Note: It is easy to lock yourself out of your network device and if/when this happens (use the waiting time checking the PC's ip settings - try release/renew the dhcp lease if not ok):
  • First: Wait some minutes - it might just be a temporary glitz.
  • Second: Try to restart the device, because it might just be a device service that need to be restarted.
  • Last resort: Restore to the firmware defaults by resetting the device.

Internal network services

The software services are serviced by the network processor (ARM, MIPS...). Please note that the possibilities are limited by the software implementation and hardware.

List of non-exhaustive internal software services:

Software network interfaces

The software network services is connected by you, to physical or logical network interfaces. The interfaces might be a:

  • physical interfaces might be labelled eth0, eth1...
  • logical might be a bridge (=switch) labelled br0, br1...
  • logical vlan labelled vlan0, vlan1....

and maybe:

The default internal device networks in a non-802.11n network device - specifically the default configuration of a DD-WRT V23-SP2 firmware on a Linksys WRT54G v2. In a network device containing a 802.11n wireless access point the internal numbering of ports, bridges and vlans are different.
The default internal device networks in a non-802.11n network device - specifically the default configuration of a DD-WRT V23-SP2 firmware on a Linksys WRT54G v2. In a network device containing a 802.11n wireless access point the internal numbering of ports, bridges and vlans are different.

.

Examples of changed internal network

There are examples of how to move the wireless acces point on a separate vlan, so it can be separately firewalled:

There are examples of how to assign a wired LAN port to some vlan different from the rest of the LAN ports:

There are examples of how to have more than one ssid on the wireless acces point:

Combinations of the above: