V24: WLAN separate from LAN, with independent DHCP
From DD-WRT Wiki
The goal is to separate the WLAN and LAN ports from each other using the v24 GUI.
Contents |
Configuration
Informal Description: I wanted to create a firewall that would have a separate WLAN from LAN. The WLAN would be unsecured (no WEP, no WPA) so as to allow my poor-but-attractive female neighbors access to the Internet without exposing my private network.
I wanted to block outbound mail ports on the WLAN to preclude roaming spammers from using my unsecured WLAN as a launching pad to send their spam.
I also wanted to make sure that several services I run (i.e. ssh, dns, ntp) were forwarded to the appropriate machine on the internal network.
- Hardware: Linksys WRT54GL v1.1
- Software: DD-WRT v24 SP1
- External IPs
- 173.8.141.153
- 173.8.141.154
- 173.8.141.155
- Internal IPs
- 10.9.9.0/24 (private network)
- 10.8.8.0/24 (open wifi network)
Step 1:
Setup→Basic Setup
Connection Type | Static IP |
Wan IP Address | 173.8.141.153 |
Subnet Mask | 255.255.255.248 |
Gateway | 173.8.141.158 |
Static DNS 1 | 68.87.76.178 |
Static DNS 2 | 66.240.48.9 |
Router Name | lili |
Host Name | lili |
Domain Name | nono.com |
Local IP Address | 10.9.9.1 |
Subnet Mask | 255.255.255.0 |
DHCP Type | DHCP Server |
Start IP Address | 10.9.9.10 |
Maximum DHCP Users | 200 |
Client Lease Time | 600 |
Use DNSMasq for DHCP | checked |
Use DNSMasq for DNS | checked |
DHCP-Authoritative | checked |
FYI, according to wikipedia, "Starting in 2007, most of the United States and Canada observe DST from the second Sunday in March to the first Sunday in November."
NTP Client | Enable |
Time Zone | UTC-08:00 |
Summer Time (DST) | 2nd Sun Mar - first Sun Nov |
Server IP/Name | 0.us.pool.ntp.org |
Setup→VLANs
Wireless | None |
Brian Cunnie 19:56, 1 September 2008 (CEST)