V24: WLAN separate from LAN, with independent DHCP
From DD-WRT Wiki
Revision as of 16:10, 1 September 2008 (edit) Brian Cunnie (Talk | contribs) (→Configuration) ← Previous diff |
Revision as of 17:56, 1 September 2008 (edit) (undo) Brian Cunnie (Talk | contribs) (→Configuration) Next diff → |
||
Line 4: | Line 4: | ||
== Configuration == | == Configuration == | ||
- | + | Informal Description: I wanted to create a firewall that would have a separate WLAN from LAN. The WLAN would be unsecured (no WEP, no WPA) so as to allow my poor-but-attractive female neighbors access to the Internet without exposing my private network. | |
- | * | + | |
- | * | + | I wanted to block outbound mail ports on the WLAN to preclude roaming spammers from using my unsecured WLAN as a launching pad to send their spam. |
- | + | ||
- | + | I also wanted to make sure that several services I run (i.e. ssh, dns, ntp) were forwarded to the appropriate machine on the internal network. | |
- | + | ||
- | * | + | * Hardware: Linksys WRT54GL v1.1 |
- | + | * Software: DD-WRT v24 SP1 | |
- | + | * External IPs | |
+ | ** 173.8.141.153 | ||
+ | ** 173.8.141.154 | ||
+ | ** 173.8.141.155 | ||
+ | * Internal IPs | ||
+ | ** 10.9.9.0/24 (private network) | ||
+ | ** 10.8.8.0/24 (open wifi network) | ||
=== Step 1: === | === Step 1: === | ||
- | + | ||
+ | ==== Setup→Basic Setup ==== | ||
+ | |||
+ | {| border="1" cellpadding="2" cellspacing="0" | ||
+ | |+ Wan Setup Options | ||
+ | |- | ||
+ | |Connection Type || '''Static IP''' | ||
+ | |- | ||
+ | |Wan IP Address||'''173.8.141.153''' | ||
+ | |- | ||
+ | |Subnet Mask||'''255.255.255.248''' | ||
+ | |- | ||
+ | |Gateway||'''173.8.141.158''' | ||
+ | |- | ||
+ | |Static DNS 1||'''68.87.76.178''' | ||
+ | |- | ||
+ | |Static DNS 2||'''66.240.48.9''' | ||
+ | |} | ||
+ | |||
+ | {| border="1" cellpadding="2" cellspacing="0" | ||
+ | |+ Optional Settings | ||
+ | |- | ||
+ | |Router Name||'''lili''' | ||
+ | |- | ||
+ | |Host Name||'''lili''' | ||
+ | |- | ||
+ | |Domain Name||'''nono.com''' | ||
+ | |} | ||
+ | |||
+ | {| border="1" cellpadding="2" cellspacing="0" | ||
+ | |+ Router IP | ||
+ | |- | ||
+ | |Local IP Address||'''10.9.9.1''' | ||
+ | |- | ||
+ | |Subnet Mask||'''255.255.255.0''' | ||
+ | |} | ||
+ | |||
+ | {| border="1" cellpadding="2" cellspacing="0" | ||
+ | |+ Network Address Server Settings (DHCP) | ||
+ | |- | ||
+ | |DHCP Type||'''DHCP Server''' | ||
+ | |- | ||
+ | |Start IP Address||'''10.9.9.10''' | ||
+ | |- | ||
+ | |Maximum DHCP Users||'''200''' | ||
+ | |- | ||
+ | |Client Lease Time||'''600''' | ||
+ | |- | ||
+ | |Use DNSMasq for DHCP||'''checked''' | ||
+ | |- | ||
+ | |Use DNSMasq for DNS||'''checked''' | ||
+ | |- | ||
+ | |DHCP-Authoritative||'''checked''' | ||
+ | |} | ||
+ | |||
+ | FYI, according to [http://en.wikipedia.org/wiki/Daylight_saving_time wikipedia], "Starting in 2007, most of the United States and Canada observe DST from the second Sunday in March to the first Sunday in November." | ||
+ | |||
+ | {| border="1" cellpadding="2" cellspacing="0" | ||
+ | |+Time Settings | ||
+ | |- | ||
+ | |NTP Client||'''Enable''' | ||
+ | |- | ||
+ | |Time Zone||'''UTC-08:00''' | ||
+ | |- | ||
+ | |Summer Time (DST)||'''2nd Sun Mar - first Sun Nov''' | ||
+ | |- | ||
+ | |Server IP/Name||'''0.us.pool.ntp.org''' | ||
+ | |} | ||
+ | |||
+ | [[User:Brian Cunnie|Brian Cunnie]] 19:56, 1 September 2008 (CEST) |
Revision as of 17:56, 1 September 2008
The goal is to separate the WLAN and LAN ports from each other using the v24 GUI.
Configuration
Informal Description: I wanted to create a firewall that would have a separate WLAN from LAN. The WLAN would be unsecured (no WEP, no WPA) so as to allow my poor-but-attractive female neighbors access to the Internet without exposing my private network.
I wanted to block outbound mail ports on the WLAN to preclude roaming spammers from using my unsecured WLAN as a launching pad to send their spam.
I also wanted to make sure that several services I run (i.e. ssh, dns, ntp) were forwarded to the appropriate machine on the internal network.
- Hardware: Linksys WRT54GL v1.1
- Software: DD-WRT v24 SP1
- External IPs
- 173.8.141.153
- 173.8.141.154
- 173.8.141.155
- Internal IPs
- 10.9.9.0/24 (private network)
- 10.8.8.0/24 (open wifi network)
Step 1:
Setup→Basic Setup
Connection Type | Static IP |
Wan IP Address | 173.8.141.153 |
Subnet Mask | 255.255.255.248 |
Gateway | 173.8.141.158 |
Static DNS 1 | 68.87.76.178 |
Static DNS 2 | 66.240.48.9 |
Router Name | lili |
Host Name | lili |
Domain Name | nono.com |
Local IP Address | 10.9.9.1 |
Subnet Mask | 255.255.255.0 |
DHCP Type | DHCP Server |
Start IP Address | 10.9.9.10 |
Maximum DHCP Users | 200 |
Client Lease Time | 600 |
Use DNSMasq for DHCP | checked |
Use DNSMasq for DNS | checked |
DHCP-Authoritative | checked |
FYI, according to wikipedia, "Starting in 2007, most of the United States and Canada observe DST from the second Sunday in March to the first Sunday in November."
NTP Client | Enable |
Time Zone | UTC-08:00 |
Summer Time (DST) | 2nd Sun Mar - first Sun Nov |
Server IP/Name | 0.us.pool.ntp.org |
Brian Cunnie 19:56, 1 September 2008 (CEST)