Internal device network

From DD-WRT Wiki

(Difference between revisions)
Jump to: navigation, search
Revision as of 20:32, 18 May 2010 (edit)
Glenn (Talk | contribs)
(Internal network services - chg)
← Previous diff
Current revision (04:57, 20 March 2018) (edit) (undo)
S2s2 (Talk | contribs)
m (updated)
 
(9 intermediate revisions not shown.)
Line 20: Line 20:
**[[wikipedia:OSI model|OSI layer]] 2 interconnection - [[wikipedia:Ethernet|ethernet]] [[wikipedia:Ethernet address|address]] routing; a (software) '''[[wikipedia:Bridging (networking)|bridge]]''' or '''[[wikipedia:Network switch|switch]]''' - Definition: A two port switch is a bridge - a traditional [[wikipedia:Bridge|bridge]] has two ends - not three or more ;-). **[[wikipedia:OSI model|OSI layer]] 2 interconnection - [[wikipedia:Ethernet|ethernet]] [[wikipedia:Ethernet address|address]] routing; a (software) '''[[wikipedia:Bridging (networking)|bridge]]''' or '''[[wikipedia:Network switch|switch]]''' - Definition: A two port switch is a bridge - a traditional [[wikipedia:Bridge|bridge]] has two ends - not three or more ;-).
**OSI layer 3 interconnection - [[wikipedia:Internet_Protocol|ip]] [[wikipedia:IP address|address]] routing; a (software) '''[[wikipedia:Router|router]]''' **OSI layer 3 interconnection - [[wikipedia:Internet_Protocol|ip]] [[wikipedia:IP address|address]] routing; a (software) '''[[wikipedia:Router|router]]'''
-**OSI layer 2 moderation, ethernet '''transparent/bridging firewall'''+**OSI layer 2 interconnection and 2-4 moderation, ethernet '''transparent/bridging firewall'''
-**OSI layer 3 moderation; ip '''packet filtering firewall'''+**OSI layer 3 interconnection and 2-4 moderation; ip '''packet filtering firewall'''
-**Please note that the above layer 2 or 3 firewall normally inspects higher OSI layers. Iptables can refer to modules that can do that:+**Please note that the (above) (DD-WRT) [[firewall]] normally inspects higher OSI layers. Iptables can refer to modules that can do that:
-**OSI layer 3-4 moderation; tcp/udp/ip '''statefull firewall'''+***OSI layer 2-4 moderation; ip '''statefull firewall'''
-**OSI layer 3-7 moderation; '''proxying/application/Layer 7 [[firewall]]''', OSI layer 3-7 firewall+***OSI layer 2-7 moderation; '''[[wikipedia:Application_firewall#Network-based_application_firewalls|proxying/application]]/[[wikipedia:Deep packet inspection|deep packet inspection]] firewall'''
**[[Quality of Service]] **[[Quality of Service]]
**[[:Category:NAT|NAT - Network Address Translation]] **[[:Category:NAT|NAT - Network Address Translation]]
Line 51: Line 51:
* imq0,1 - [http://lartc.org/howto/lartc.imq.html QOS device] or [http://www.linuximq.net IMQ Device] * imq0,1 - [http://lartc.org/howto/lartc.imq.html QOS device] or [http://www.linuximq.net IMQ Device]
-[[Image:Ddwrtlogicview.jpg|thumb|652px|The [[default internal device networks]] in a non-802.11n network device - specifically the [[Factory_Defaults|default]] configuration of a DD-WRT V23-SP2 firmware on a Linksys WRT54G v2. In a network device containing a 802.11n wireless access point the internal numbering of ports, bridges and vlans are different.]]+Refer to the DD-WRT Wiki Page '''[[default internal device networks]]''' for illustrations of current and pre-N device mappings and a more in-depth description of vLan, port and bridge assignments.
.<!-- do not remove point --> .<!-- do not remove point -->
==Examples of changed internal network== ==Examples of changed internal network==
- 
There are examples of how to move the wireless acces point on a separate vlan, so it can be separately firewalled: There are examples of how to move the wireless acces point on a separate vlan, so it can be separately firewalled:
-*[[Separate Lan and WLan]] 
*[[Separate LAN and WLAN]] (GUI) *[[Separate LAN and WLAN]] (GUI)
*[[V24: WLAN separate from LAN, with independent DHCP]] *[[V24: WLAN separate from LAN, with independent DHCP]]

Current revision

Your network device (commonly referred to as a "router") has an internal network. The internal network connects the internal physical(=hardware):

  • switch
  • wireless access point

with the:

Contents

[edit] Modifying internal network

Via the user interface you can modify how the hardware is logically interconnected with each other and with your software services.

Note: It is easy to lock yourself out of your network device and if/when this happens (use the waiting time checking the PC's ip settings - try release/renew the dhcp lease if not ok):
  • First: Wait some minutes - it might just be a temporary glitz.
  • Second: Try to restart the device, because it might just be a device service that need to be restarted.
  • Last resort: Restore to the firmware defaults by resetting the device.

[edit] Internal network services

The software services are serviced by the network processor (ARM, MIPS...). Please note that the possibilities are limited by the software implementation and hardware.

List of non-exhaustive internal software services:

[edit] Software network interfaces

The software network services is connected by you, to physical or logical network interfaces. The interfaces might be a:

  • physical interfaces might be labelled eth0, eth1...
  • logical might be a bridge (=switch) labelled br0, br1...
  • logical vlan labelled vlan0, vlan1....

and maybe:

Refer to the DD-WRT Wiki Page default internal device networks for illustrations of current and pre-N device mappings and a more in-depth description of vLan, port and bridge assignments.

.

[edit] Examples of changed internal network

There are examples of how to move the wireless acces point on a separate vlan, so it can be separately firewalled:

There are examples of how to assign a wired LAN port to some vlan different from the rest of the LAN ports:

There are examples of how to have more than one ssid on the wireless acces point:

Combinations of the above: