Web interface

From DD-WRT Wiki

(Difference between revisions)
Jump to: navigation, search
Revision as of 03:36, 9 October 2006 (edit)
Whiteboy (Talk | contribs)
(back here to web interface page)
← Previous diff
Revision as of 02:27, 13 November 2017 (edit) (undo)
Ian5142 (Talk | contribs)
(Removed dead link)
Next diff →
(33 intermediate revisions not shown.)
Line 1: Line 1:
-The easiest way to configure your WRT with DD-WRT installed is through the web interface. This provides an experience much like configuring a desktop application. Advanced users may want (or need) to configure their WRT using [[Glossary#SSH|SSH]] or [[Glossary#Telnet|Telnet]]. Based off the old Alchemy firmware the default DD-WRT web interface is one of the most elegantly designed and easily accessed for any firmware around. It supports multiple languages and interfaces. It allows you to configure every single aspect of your router, and its simple GUI, with the ability to enter you own commands and complex scripts with ease. +{{languages|Web_interface}}
 +You can contol the settings of DD-WRT in two ways:
 +# through the Web based Graphical User Interface (Web-GUI), which is explained on this page .
 +# using a Linux style command line interface. See [[Telnet/SSH_and_the_Command_Line]] for more details.
 +
 +You are here: '''[[Main_Page|DD-WRT wiki mainpage]] / [[Web_Interface|Web-GUI]]'''
 +
 +__TOC__
 +==Access via a web browser==
 +After installing DD-WRT Firmware you can access the DD-WRT Web-GUI using a web browser pointing to the same IP address as before you installed DD-WRT. These are some of the most common default IP addresses: 192.168.1.1 (most commonly used on Linksys and Asus), 192.168.2.1 (some Belkins), 192.168.11.1 (some Buffalos), 192.168.10.1 or 192.168.30.1 (some Motorolas), and there may be others.
 +
 +
 +==Username and Password==
-==Accessing==+The latest versions of DD-WRT will require you to set your own username and password when you first access the web interface. '''Because the SSH user is always root, it is critical that a strong password be used.''' ''' These passwords should be 12 characters and use numbers and valid non-alphabetic characters.''' 12 characters dramatically reduces the probability of a successful random attack and has a cost / time infeasible computational requirement.
-[[Image:Wpa2.JPG|thumb|right|400px|The current standard interface of DD-WRT]]+
-*Open a web browser+
-*In the address bar, type: http://192.168.1.1 (Your router's LAN IP address. It may be different than the one list here if you changed it.)+
-*Press Enter or click Go+
-Starting with v23 SP1, the default username is ''root'' and the default password is ''admin''. Some earlier versions of DD-WRT did not require a username.+The default username is ''root'' and the default password is ''admin'' (from v23 SP1). Some earlier versions of DD-WRT did not require a username.
-Depending which version of DD-WRT you're running and depending how you've configured it, you may be able to see a status page without entering your username and password, a handy little feature that poses a small security issue for open networks. Intruders probably won't be able to access your network from this status page but they will have more information about your router's configuration than you should be giving out.+==Elements of the Web-GUI==
 +The Web-GUI has five main elements
-If you're at a remote location and have access to your router through [[Glossary#SSH|SSH]] or [[Glossary#Telnet|Telnet]], but you'd like to enable remote web access, you may use the following command to allow access from one remote IP address:+:<font color=red>'''1.'''</font> The tabbed menu system
 +:<font color=red>'''2.'''</font> Main area
 +:<font color=red>'''3.'''</font> Action buttons
 +:<font color=red>'''4.'''</font> Help information
 +:<font color=red>'''5.'''</font> Some system essentials
-::'''iptables -I INPUT -p tcp -s <remote_location_ip> --dport 80 -j ACCEPT''' 
-This temporary Remote Web Access will be disabled again when the router reboots (unless you turned <i>Remote Administration</i> on from the settings in the web interface).+Clicking these text buttons gives you access to furter information
-<b>Note:</b> In the final release of v23, you can't prevent wireless access to the web interface without also preventing wired access to it. I don't know if it's a bug or if it's by design.+:<font color=green>'''1.'''</font> More... (More Help)
 +:<font color=green>'''2.'''</font> Firmware details
 +
 +[[Image:web-gui-elements.png|670px]]
-===Regaining Access===+Some notes about the screen elements.
-If for some reason you completely lose web access to the router, the web server (HTTP [[Glossary#daemon|daemon]]) may be shut down. To regain access try starting the web server. [[Glossary#SSH|SSH]] or [[Glossary#Telnet|Telnet]] into the router and enter the following commands: <pre>cd /www/+* The default information screen is the same as menu selection: ''Status->Sys-Info''
-httpd</pre>To connect through secure http, add the option ''-S'' at the end of the command. See the httpd man pages for more information about that command.<br><br>+* To save changes you may have made to settings you need to press the Save button. Just moving to a new tab in the menu, will discard settings in the current menu tab.
-You can use this feature to get a more secure router by activating the web interface only when you need to configure it, and then closing the web server once you're done.<br>+* The time will count the time since the router has been powered up, until the router gets WAN access. By default the DD-WRT will automatically try to get the corrent time from a time server.
-To close the web server, run the command "'' kill `cat /tmp/var/run/httpd.pid` ''" (note the backquotes) or " ''kill `cat /tmp/var/run/httpsd.pid` ''" if you ran the web server with the option ''-S'' to get secure http.+
-==Interface Map (v23 SP1 Final)==+==Menu Interface map==
 +Select one of the menu points below for information about settings within that menu page.
 + 
 +(Menu structure as of June 2012 - svn19342 Mega).
*Setup *Setup
**Basic Setup **Basic Setup
Line 32: Line 49:
** Advanced Routing ** Advanced Routing
** VLANs ** VLANs
 +** Networking
 +** EoIP Tunnel
* Wireless * Wireless
-** Basic Settings+** [[WebInterfaceWirelessBasicSettings|Basic Settings]]
-** RADIUS+** Radius
** Wireless Security ** Wireless Security
** MAC Filter ** MAC Filter
** Advanced Settings ** Advanced Settings
** WDS ** WDS
 +* Services
 +** Services
 +** VPN
 +** USB
 +** NAS
 +** Hotspot
 +** SIP Proxy
 +** My Ad Network
* Security * Security
** Firewall ** Firewall
-** VPN+** VPN Passthrough
* Access Restrictions * Access Restrictions
-** Internet Access+** WAN Access
-* Applications and Gaming+* NAT/QoS
-** Port Range Forwarding+
** Port Forwarding ** Port Forwarding
 +** Port Range Forwarding
** Port Triggering ** Port Triggering
** UPnP ** UPnP
** DMZ ** DMZ
-** [http://wrt-wiki.bsr-clan.de/index.php?title=Quality_of_Service QOS]+** [[Quality_of_Service|Quality of Service - QoS]]
* Administration * Administration
** Management ** Management
-** Hotspot 
-** Services 
** Keep Alive ** Keep Alive
-** Log+** Commands
-** Diagnostics+
** WOL ** WOL
** Factory Defaults ** Factory Defaults
Line 64: Line 88:
* Status * Status
** Router ** Router
 +** WAN
** LAN ** LAN
** Wireless ** Wireless
 +** Bandwith
** Sys-Info ** Sys-Info
 +** [[MyPage|My Page]]
 +
 +== Setting details about the Web-GUI==
 +Under ''Administration -> Management'' you can set various details about the Web-GUI. Like:
 +* set Username and Password
 +* control Access to the Web-GUI locally/remotely and more
 +* select between different Router GUI styles
 +[[Image:
 +== Example.jpg ==
 +testing klik here]]
 +
 +==Regaining Access==
 +===Locally===
 +If for some reason you completely lost web access to the router, the web server (HTTP [[Glossary#daemon|daemon]]) may be shut down. To regain access try starting the web server. [[Glossary#SSH|SSH]] or [[Glossary#Telnet|telnet]] into the router and enter the following commands:
 +
 + httpd -h /www
 +
 +To connect through secure HTTP, add the option ''-S'' at the end of the command. See the httpd man pages for more information about that command.
 +
 +You can use this feature to get a more secure router by activating the web interface only when you need to configure it, and then closing the web server once you're done.
 +
 +To shut down the web server, run the command ''kill `cat /tmp/var/run/httpd.pid`'' (note the backquotes) or ''kill `cat /tmp/var/run/httpsd.pid`'' if you ran the web server with the option ''-S'' to get secure HTTP.
 +
 +===Remotely===
 +'''Method 1:''' See [http://www.dd-wrt.com/phpBB2/viewtopic.php?t=29181 Enable Web Interface Over SSH?]
 +
 +'''Method 2:''' If you're at a remote location and have access to your router through [[Glossary#SSH|SSH]] or [[Glossary#Telnet|telnet]], but you'd like to enable remote web access, you may use the following command to allow access from one remote IP address:
 +
 +::'''iptables -I INPUT -p tcp -s <remote_location_ip> --dport 80 -j ACCEPT'''
 +This temporary remote web access will be disabled again when the router reboots (unless you turned <i>Remote Administration</i> on from the settings in the web interface or saved this as firewall script under Administration ->Commands).
 +
 +
==Simulation== ==Simulation==
[[Image:Onstart.jpg|thumb|left| The old Alchemy interface of DD-WRT v22]] [[Image:Onstart.jpg|thumb|left| The old Alchemy interface of DD-WRT v22]]
-A setup simulation of the current DD-WRT interface is [http://www.informatione.gmxhome.de/DDWRT/Standard/V23final/index.html here].+(This section has not been updated for quite some time).<br>
-The old Alchemy firmware interface simulation is [http://www.0711-stuttgart.de/192.168.1.23 here]+A setup simulation of V22-DD-WRT interface is [http://www.informatione.gmxhome.de/DDWRT/Standard/V22R2/index.html here].<br>
 +A setup simulation of V23-DD-WRT interface is [http://www.informatione.gmxhome.de/DDWRT/Standard/V23final/index.html here].<br>
 +A setup simulation of V24beta-DD-WRT interface is [http://www.informatione.gmxhome.de/DDWRT/Standard/V24BetaVPN/index.html here].<br>
-[[Category:English documentation]]+[[Category:Management| ]]

Revision as of 02:27, 13 November 2017

You can contol the settings of DD-WRT in two ways:

  1. through the Web based Graphical User Interface (Web-GUI), which is explained on this page .
  2. using a Linux style command line interface. See Telnet/SSH_and_the_Command_Line for more details.

You are here: DD-WRT wiki mainpage / Web-GUI

Contents

Access via a web browser

After installing DD-WRT Firmware you can access the DD-WRT Web-GUI using a web browser pointing to the same IP address as before you installed DD-WRT. These are some of the most common default IP addresses: 192.168.1.1 (most commonly used on Linksys and Asus), 192.168.2.1 (some Belkins), 192.168.11.1 (some Buffalos), 192.168.10.1 or 192.168.30.1 (some Motorolas), and there may be others.


Username and Password

The latest versions of DD-WRT will require you to set your own username and password when you first access the web interface. Because the SSH user is always root, it is critical that a strong password be used. These passwords should be 12 characters and use numbers and valid non-alphabetic characters. 12 characters dramatically reduces the probability of a successful random attack and has a cost / time infeasible computational requirement.

The default username is root and the default password is admin (from v23 SP1). Some earlier versions of DD-WRT did not require a username.

Elements of the Web-GUI

The Web-GUI has five main elements

1. The tabbed menu system
2. Main area
3. Action buttons
4. Help information
5. Some system essentials


Clicking these text buttons gives you access to furter information

1. More... (More Help)
2. Firmware details

Some notes about the screen elements.

  • The default information screen is the same as menu selection: Status->Sys-Info
  • To save changes you may have made to settings you need to press the Save button. Just moving to a new tab in the menu, will discard settings in the current menu tab.
  • The time will count the time since the router has been powered up, until the router gets WAN access. By default the DD-WRT will automatically try to get the corrent time from a time server.

Menu Interface map

Select one of the menu points below for information about settings within that menu page.

(Menu structure as of June 2012 - svn19342 Mega).

  • Setup
    • Basic Setup
    • DDNS
    • MAC Address Clone
    • Advanced Routing
    • VLANs
    • Networking
    • EoIP Tunnel
  • Wireless
    • Basic Settings
    • Radius
    • Wireless Security
    • MAC Filter
    • Advanced Settings
    • WDS
  • Services
    • Services
    • VPN
    • USB
    • NAS
    • Hotspot
    • SIP Proxy
    • My Ad Network
  • Security
    • Firewall
    • VPN Passthrough
  • Access Restrictions
    • WAN Access
  • NAT/QoS
  • Administration
    • Management
    • Keep Alive
    • Commands
    • WOL
    • Factory Defaults
    • Firmware Upgrade
    • Backup
  • Status
    • Router
    • WAN
    • LAN
    • Wireless
    • Bandwith
    • Sys-Info
    • My Page

Setting details about the Web-GUI

Under Administration -> Management you can set various details about the Web-GUI. Like:

  • set Username and Password
  • control Access to the Web-GUI locally/remotely and more
  • select between different Router GUI styles

[[Image:

Example.jpg

testing klik here]]

Regaining Access

Locally

If for some reason you completely lost web access to the router, the web server (HTTP daemon) may be shut down. To regain access try starting the web server. SSH or telnet into the router and enter the following commands:

httpd -h /www

To connect through secure HTTP, add the option -S at the end of the command. See the httpd man pages for more information about that command.

You can use this feature to get a more secure router by activating the web interface only when you need to configure it, and then closing the web server once you're done.

To shut down the web server, run the command kill `cat /tmp/var/run/httpd.pid` (note the backquotes) or kill `cat /tmp/var/run/httpsd.pid` if you ran the web server with the option -S to get secure HTTP.

Remotely

Method 1: See Enable Web Interface Over SSH?

Method 2: If you're at a remote location and have access to your router through SSH or telnet, but you'd like to enable remote web access, you may use the following command to allow access from one remote IP address:

iptables -I INPUT -p tcp -s <remote_location_ip> --dport 80 -j ACCEPT

This temporary remote web access will be disabled again when the router reboots (unless you turned Remote Administration on from the settings in the web interface or saved this as firewall script under Administration ->Commands).


Simulation

The old Alchemy interface of DD-WRT v22
The old Alchemy interface of DD-WRT v22

(This section has not been updated for quite some time).
A setup simulation of V22-DD-WRT interface is here.
A setup simulation of V23-DD-WRT interface is here.
A setup simulation of V24beta-DD-WRT interface is here.