Internal device network

From DD-WRT Wiki

(Difference between revisions)
Jump to: navigation, search
Revision as of 14:21, 16 May 2010 (edit)
Glenn (Talk | contribs)
(chg)
← Previous diff
Current revision (04:57, 20 March 2018) (edit) (undo)
S2s2 (Talk | contribs)
m (updated)
 
(44 intermediate revisions not shown.)
Line 1: Line 1:
-Your network device's (commonly wrongly known as a "router") has an '''internal network'''. The internal network connects the internal physical(=hardware):+Your network device (commonly referred to as a "router") has an '''internal network'''. The internal network connects the internal physical(=hardware):
*switch *switch
*wireless access point *wireless access point
-with the network processor (ARM, mips...).+with the:
 +*network processors [[default internal device networks|default internal device network and services]].
-In the network processor, via the DD-WRT user interface (or the manufacturers firmware) limited by software implementation and hardware possibilities, you can define how the hardware is logically interconnected to your created software network services.+===Modifying internal network===
 +Via the user interface you can modify how the hardware is logically interconnected with each other and with your software services.
 + 
 +:'''Note''': It is easy to lock yourself out of your network device and if/when this happens (use the waiting time checking the PC's ip settings - try release/renew the dhcp lease if not ok):
 +:*First: Wait some minutes - it might just be a temporary glitz.
 +:*Second: Try to restart the device, because it might just be a device service that need to be restarted.
 +:*Last resort: Restore to the firmware defaults by resetting the device.
 + 
 +===Internal network services===
 +The software services are serviced by the network processor ([[wikipedia:ARM architecture|ARM]], [[wikipedia:MIPS architecture|MIPS]]...). Please note that the possibilities are limited by the software implementation and hardware.
List of non-exhaustive internal software services: List of non-exhaustive internal software services:
-*Network services:+*Network traffic services:
-**[[wikipedia:OSI model|OSI layer]] 2 interconnection - [[wikipedia:Ethernet|ethernet]] [[wikipedia:Ethernet address|address]] routing; '''bridge''' (ca.= software switch)+**[[wikipedia:OSI model|OSI layer]] 2 interconnection - [[wikipedia:Ethernet|ethernet]] [[wikipedia:Ethernet address|address]] routing; a (software) '''[[wikipedia:Bridging (networking)|bridge]]''' or '''[[wikipedia:Network switch|switch]]''' - Definition: A two port switch is a bridge - a traditional [[wikipedia:Bridge|bridge]] has two ends - not three or more ;-).
-**OSI layer 3 interconnection - [[wikipedia:Internet_Protocol|ip]] [[wikipedia:IP address|address]] routing; a '''software router'''+**OSI layer 3 interconnection - [[wikipedia:Internet_Protocol|ip]] [[wikipedia:IP address|address]] routing; a (software) '''[[wikipedia:Router|router]]'''
-**OSI layer 2-7 moderation, ethernet '''transparent/bridging firewall''', OSI layer 2-7 firewall+**OSI layer 2 interconnection and 2-4 moderation, ethernet '''transparent/bridging firewall'''
-**OSI layer 3-7 moderation; common ip '''firewall''', OSI layer 3-7 firewall+**OSI layer 3 interconnection and 2-4 moderation; ip '''packet filtering firewall'''
 +**Please note that the (above) (DD-WRT) [[firewall]] normally inspects higher OSI layers. Iptables can refer to modules that can do that:
 +***OSI layer 2-4 moderation; ip '''statefull firewall'''
 +***OSI layer 2-7 moderation; '''[[wikipedia:Application_firewall#Network-based_application_firewalls|proxying/application]]/[[wikipedia:Deep packet inspection|deep packet inspection]] firewall'''
**[[Quality of Service]] **[[Quality of Service]]
-**[[:Category:NAT]]+**[[:Category:NAT|NAT - Network Address Translation]]
**[[Transparent web proxy]] **[[Transparent web proxy]]
*(Inter)network client or server services: *(Inter)network client or server services:
-**[[:Category:Tunneling]]+**[[:Category:Tunneling|Tunneling]]
-**[[:Category:PPPOE]]+**[[:Category:PPPOE|PPPoE]]
*Network related server services: *Network related server services:
-**[[:Category:DHCP]]+**[[:Category:DHCP|DHCP server, client]]
-**[[:Category:DNS]]+**[[:Category:DNS|DNS server]]
*Management server services: *Management server services:
**[[Telnet/SSH and the Command Line|Telnet and SSH]] **[[Telnet/SSH and the Command Line|Telnet and SSH]]
**[[Web interface]] via the [[WEB server]] **[[Web interface]] via the [[WEB server]]
-**[[:Category:Monitoring]]+**[[:Category:Monitoring|Monitoring]]
*Other server services: *Other server services:
-**[[:Category:FTP]]+**[[:Category:FTP|FTP]]
**[[Printer Sharing]] **[[Printer Sharing]]
-The software network services is connected by you, to physical or logical [[:Category:Interfaces|network interface]]. The interfaces might be a:+===Software network interfaces===
 +The software network services is connected by you, to physical or logical [[:Category:Interfaces|network interface]]s. The interfaces might be a:
*physical interfaces might be labelled eth0, eth1... *physical interfaces might be labelled eth0, eth1...
*logical might be a bridge (=[[:Category:switch|switch]]) labelled br0, br1... *logical might be a bridge (=[[:Category:switch|switch]]) labelled br0, br1...
Line 37: Line 51:
* imq0,1 - [http://lartc.org/howto/lartc.imq.html QOS device] or [http://www.linuximq.net IMQ Device] * imq0,1 - [http://lartc.org/howto/lartc.imq.html QOS device] or [http://www.linuximq.net IMQ Device]
-[[Image:Ddwrtlogicview.jpg|thumb|600px|The [[default internal device networks]] in a non-802.11n network device - specifically the [[Factory_Defaults|default]] configuration of a DD-WRT V23-SP2 firmware on a Linksys WRT54G v2. In a network device containing a 802.11n wireless access point the internal numbering of ports, bridges and vlans are different.]]+Refer to the DD-WRT Wiki Page '''[[default internal device networks]]''' for illustrations of current and pre-N device mappings and a more in-depth description of vLan, port and bridge assignments.
 + 
 +.<!-- do not remove point -->
 + 
 +==Examples of changed internal network==
 +There are examples of how to move the wireless acces point on a separate vlan, so it can be separately firewalled:
 +*[[Separate LAN and WLAN]] (GUI)
 +*[[V24: WLAN separate from LAN, with independent DHCP]]
 +*[[WLAN separate from LAN, with independent dhcp, etc]]
 + 
 +There are examples of how to assign a wired LAN port to some vlan different from the rest of the LAN ports:
 +*[[VLAN Detached Networks (Separate Networks With Internet Access)]]
 +*[[VLAN Detached Networks (Separate Networks With Internet)]]
 + 
 +There are examples of how to have more than one ssid on the wireless acces point:
 +*[[Multiple WLANs]]
 +*[[Dual SSID isolated]]
 + 
 +Combinations of the above:
 +*[[VLAN Detached Networks each with Wireless and Internet]]
 +*[[Dual SSID one for public network]]
[[Category:Internal device networks| ]] [[Category:Internal device networks| ]]
 +[[Category:Documentation]]

Current revision

Your network device (commonly referred to as a "router") has an internal network. The internal network connects the internal physical(=hardware):

  • switch
  • wireless access point

with the:

Contents

[edit] Modifying internal network

Via the user interface you can modify how the hardware is logically interconnected with each other and with your software services.

Note: It is easy to lock yourself out of your network device and if/when this happens (use the waiting time checking the PC's ip settings - try release/renew the dhcp lease if not ok):
  • First: Wait some minutes - it might just be a temporary glitz.
  • Second: Try to restart the device, because it might just be a device service that need to be restarted.
  • Last resort: Restore to the firmware defaults by resetting the device.

[edit] Internal network services

The software services are serviced by the network processor (ARM, MIPS...). Please note that the possibilities are limited by the software implementation and hardware.

List of non-exhaustive internal software services:

[edit] Software network interfaces

The software network services is connected by you, to physical or logical network interfaces. The interfaces might be a:

  • physical interfaces might be labelled eth0, eth1...
  • logical might be a bridge (=switch) labelled br0, br1...
  • logical vlan labelled vlan0, vlan1....

and maybe:

Refer to the DD-WRT Wiki Page default internal device networks for illustrations of current and pre-N device mappings and a more in-depth description of vLan, port and bridge assignments.

.

[edit] Examples of changed internal network

There are examples of how to move the wireless acces point on a separate vlan, so it can be separately firewalled:

There are examples of how to assign a wired LAN port to some vlan different from the rest of the LAN ports:

There are examples of how to have more than one ssid on the wireless acces point:

Combinations of the above: