Internal device network

From DD-WRT Wiki

(Difference between revisions)
Jump to: navigation, search
Revision as of 14:10, 16 May 2010 (edit)
Glenn (Talk | contribs)
(+link)
← Previous diff
Current revision (04:57, 20 March 2018) (edit) (undo)
S2s2 (Talk | contribs)
m (updated)
 
(47 intermediate revisions not shown.)
Line 1: Line 1:
-Your network device's (commonly wrongly known as a "router") has an '''internal network'''. The [[default internal device networks]] connects the internal physical(=hardware):+Your network device (commonly referred to as a "router") has an '''internal network'''. The internal network connects the internal physical(=hardware):
*switch *switch
*wireless access point *wireless access point
-with the network processor (ARM, mips...).+with the:
 +*network processors [[default internal device networks|default internal device network and services]].
-In the network processor, via the DD-WRT user interface (or the manufacturers firmware) limited by software implementation and hardware possibilities, you can define how the hardware is logically interconnected to your created software network services.+===Modifying internal network===
 +Via the user interface you can modify how the hardware is logically interconnected with each other and with your software services.
-List of possible software network services:+:'''Note''': It is easy to lock yourself out of your network device and if/when this happens (use the waiting time checking the PC's ip settings - try release/renew the dhcp lease if not ok):
-*[[wikipedia:OSI model|OSI layer]] 2 interconnection - [[wikipedia:Ethernet|ethernet]] [[wikipedia:Ethernet address|address]] routing; '''bridge''' (ca.= software switch)+:*First: Wait some minutes - it might just be a temporary glitz.
-*OSI layer 3 interconnection - [[wikipedia:Internet_Protocol|ip]] [[wikipedia:IP address|address]] routing; a '''software router'''+:*Second: Try to restart the device, because it might just be a device service that need to be restarted.
-*OSI layer 2-7 moderation, ethernet '''transparent/bridging firewall''', OSI layer 2-7 firewall+:*Last resort: Restore to the firmware defaults by resetting the device.
-*OSI layer 3-7 moderation; common ip '''firewall''', OSI layer 3-7 firewall+
-*[[Quality of Service]]+
-*[[:Category:NAT]]+
-*[[Transparent web proxy]]+
-(Inter)network client or server services:+===Internal network services===
-*[[:Category:Tunneling]]+The software services are serviced by the network processor ([[wikipedia:ARM architecture|ARM]], [[wikipedia:MIPS architecture|MIPS]]...). Please note that the possibilities are limited by the software implementation and hardware.
-*[[:Category:PPPOE]]+
-Network server services:+List of non-exhaustive internal software services:
-*[[:Category:DHCP]]+*Network traffic services:
-*[[:Category:DNS]]+**[[wikipedia:OSI model|OSI layer]] 2 interconnection - [[wikipedia:Ethernet|ethernet]] [[wikipedia:Ethernet address|address]] routing; a (software) '''[[wikipedia:Bridging (networking)|bridge]]''' or '''[[wikipedia:Network switch|switch]]''' - Definition: A two port switch is a bridge - a traditional [[wikipedia:Bridge|bridge]] has two ends - not three or more ;-).
-*[[:Category:FTP]]+**OSI layer 3 interconnection - [[wikipedia:Internet_Protocol|ip]] [[wikipedia:IP address|address]] routing; a (software) '''[[wikipedia:Router|router]]'''
-*[[Printer Sharing]]+**OSI layer 2 interconnection and 2-4 moderation, ethernet '''transparent/bridging firewall'''
 +**OSI layer 3 interconnection and 2-4 moderation; ip '''packet filtering firewall'''
 +**Please note that the (above) (DD-WRT) [[firewall]] normally inspects higher OSI layers. Iptables can refer to modules that can do that:
 +***OSI layer 2-4 moderation; ip '''statefull firewall'''
 +***OSI layer 2-7 moderation; '''[[wikipedia:Application_firewall#Network-based_application_firewalls|proxying/application]]/[[wikipedia:Deep packet inspection|deep packet inspection]] firewall'''
 +**[[Quality of Service]]
 +**[[:Category:NAT|NAT - Network Address Translation]]
 +**[[Transparent web proxy]]
 +*(Inter)network client or server services:
 +**[[:Category:Tunneling|Tunneling]]
 +**[[:Category:PPPOE|PPPoE]]
 +*Network related server services:
 +**[[:Category:DHCP|DHCP server, client]]
 +**[[:Category:DNS|DNS server]]
 +*Management server services:
 +**[[Telnet/SSH and the Command Line|Telnet and SSH]]
 +**[[Web interface]] via the [[WEB server]]
 +**[[:Category:Monitoring|Monitoring]]
 +*Other server services:
 +**[[:Category:FTP|FTP]]
 +**[[Printer Sharing]]
-List of management server services:+===Software network interfaces===
-*[[Telnet/SSH and the Command Line|Telnet and SSH]]+The software network services is connected by you, to physical or logical [[:Category:Interfaces|network interface]]s. The interfaces might be a:
-*[[Web interface]] via the [[WEB server]]+
-*[[:Category:Monitoring]]+
- +
-The software network services is connected by you, to physical or logical [[:Category:Interfaces|network interface]]. The interfaces might be a:+
*physical interfaces might be labelled eth0, eth1... *physical interfaces might be labelled eth0, eth1...
*logical might be a bridge (=[[:Category:switch|switch]]) labelled br0, br1... *logical might be a bridge (=[[:Category:switch|switch]]) labelled br0, br1...
Line 38: Line 51:
* imq0,1 - [http://lartc.org/howto/lartc.imq.html QOS device] or [http://www.linuximq.net IMQ Device] * imq0,1 - [http://lartc.org/howto/lartc.imq.html QOS device] or [http://www.linuximq.net IMQ Device]
-[[Image:Ddwrtlogicview.jpg|thumb|600px|The [[default internal device networks]] in a non-802.11n network device - specifically the [[Factory_Defaults|default]] configuration of a DD-WRT V23-SP2 firmware on a Linksys WRT54G v2. In a network device containing a 802.11n wireless access point the internal numbering of ports, bridges and vlans are different.]]+Refer to the DD-WRT Wiki Page '''[[default internal device networks]]''' for illustrations of current and pre-N device mappings and a more in-depth description of vLan, port and bridge assignments.
 + 
 +.<!-- do not remove point -->
 + 
 +==Examples of changed internal network==
 +There are examples of how to move the wireless acces point on a separate vlan, so it can be separately firewalled:
 +*[[Separate LAN and WLAN]] (GUI)
 +*[[V24: WLAN separate from LAN, with independent DHCP]]
 +*[[WLAN separate from LAN, with independent dhcp, etc]]
 + 
 +There are examples of how to assign a wired LAN port to some vlan different from the rest of the LAN ports:
 +*[[VLAN Detached Networks (Separate Networks With Internet Access)]]
 +*[[VLAN Detached Networks (Separate Networks With Internet)]]
 + 
 +There are examples of how to have more than one ssid on the wireless acces point:
 +*[[Multiple WLANs]]
 +*[[Dual SSID isolated]]
 + 
 +Combinations of the above:
 +*[[VLAN Detached Networks each with Wireless and Internet]]
 +*[[Dual SSID one for public network]]
[[Category:Internal device networks| ]] [[Category:Internal device networks| ]]
 +[[Category:Documentation]]

Current revision

Your network device (commonly referred to as a "router") has an internal network. The internal network connects the internal physical(=hardware):

  • switch
  • wireless access point

with the:

Contents

[edit] Modifying internal network

Via the user interface you can modify how the hardware is logically interconnected with each other and with your software services.

Note: It is easy to lock yourself out of your network device and if/when this happens (use the waiting time checking the PC's ip settings - try release/renew the dhcp lease if not ok):
  • First: Wait some minutes - it might just be a temporary glitz.
  • Second: Try to restart the device, because it might just be a device service that need to be restarted.
  • Last resort: Restore to the firmware defaults by resetting the device.

[edit] Internal network services

The software services are serviced by the network processor (ARM, MIPS...). Please note that the possibilities are limited by the software implementation and hardware.

List of non-exhaustive internal software services:

[edit] Software network interfaces

The software network services is connected by you, to physical or logical network interfaces. The interfaces might be a:

  • physical interfaces might be labelled eth0, eth1...
  • logical might be a bridge (=switch) labelled br0, br1...
  • logical vlan labelled vlan0, vlan1....

and maybe:

Refer to the DD-WRT Wiki Page default internal device networks for illustrations of current and pre-N device mappings and a more in-depth description of vLan, port and bridge assignments.

.

[edit] Examples of changed internal network

There are examples of how to move the wireless acces point on a separate vlan, so it can be separately firewalled:

There are examples of how to assign a wired LAN port to some vlan different from the rest of the LAN ports:

There are examples of how to have more than one ssid on the wireless acces point:

Combinations of the above: