V24: WLAN separate from LAN, with independent DHCP

From DD-WRT Wiki

(Difference between revisions)
Jump to: navigation, search
Revision as of 17:56, 1 September 2008 (edit)
Brian Cunnie (Talk | contribs)
(Configuration)
← Previous diff
Revision as of 18:15, 1 September 2008 (edit) (undo)
Brian Cunnie (Talk | contribs)
(Setup→Basic Setup)
Next diff →
Line 88: Line 88:
|- |-
|Server IP/Name||'''0.us.pool.ntp.org''' |Server IP/Name||'''0.us.pool.ntp.org'''
 +|}
 +
 +==== Setup→VLANs ====
 +
 +{| border="1" cellpadding="2" cellspacing="0"
 +|+VLAN
 +|-
 +|Wireless||'''None'''
|} |}
[[User:Brian Cunnie|Brian Cunnie]] 19:56, 1 September 2008 (CEST) [[User:Brian Cunnie|Brian Cunnie]] 19:56, 1 September 2008 (CEST)

Revision as of 18:15, 1 September 2008

The goal is to separate the WLAN and LAN ports from each other using the v24 GUI.


Contents

Configuration

Informal Description: I wanted to create a firewall that would have a separate WLAN from LAN. The WLAN would be unsecured (no WEP, no WPA) so as to allow my poor-but-attractive female neighbors access to the Internet without exposing my private network.

I wanted to block outbound mail ports on the WLAN to preclude roaming spammers from using my unsecured WLAN as a launching pad to send their spam.

I also wanted to make sure that several services I run (i.e. ssh, dns, ntp) were forwarded to the appropriate machine on the internal network.

  • Hardware: Linksys WRT54GL v1.1
  • Software: DD-WRT v24 SP1
  • External IPs
    • 173.8.141.153
    • 173.8.141.154
    • 173.8.141.155
  • Internal IPs
    • 10.9.9.0/24 (private network)
    • 10.8.8.0/24 (open wifi network)

Step 1:

Setup→Basic Setup

Wan Setup Options
Connection Type Static IP
Wan IP Address173.8.141.153
Subnet Mask255.255.255.248
Gateway173.8.141.158
Static DNS 168.87.76.178
Static DNS 266.240.48.9
Optional Settings
Router Namelili
Host Namelili
Domain Namenono.com
Router IP
Local IP Address10.9.9.1
Subnet Mask255.255.255.0
Network Address Server Settings (DHCP)
DHCP TypeDHCP Server
Start IP Address10.9.9.10
Maximum DHCP Users200
Client Lease Time600
Use DNSMasq for DHCPchecked
Use DNSMasq for DNSchecked
DHCP-Authoritativechecked

FYI, according to wikipedia, "Starting in 2007, most of the United States and Canada observe DST from the second Sunday in March to the first Sunday in November."

Time Settings
NTP ClientEnable
Time ZoneUTC-08:00
Summer Time (DST)2nd Sun Mar - first Sun Nov
Server IP/Name0.us.pool.ntp.org

Setup→VLANs

VLAN
WirelessNone

Brian Cunnie 19:56, 1 September 2008 (CEST)