Web interface

From DD-WRT Wiki

(Difference between revisions)
Jump to: navigation, search
Revision as of 14:20, 17 May 2006 (edit)
84.56.217.37 (Talk)

← Previous diff
Current revision (17:03, 15 September 2022) (edit) (undo)
Kernel-panic69 (Talk | contribs)
m (Simulation - (fix typos))
 
(48 intermediate revisions not shown.)
Line 1: Line 1:
-This is an infant wiki! Please help by fixing formatting and adding content!+{{languages|Web_interface}}
 +You can contol the settings of DD-WRT in two ways:
 +# through the Web based Graphical User Interface (Web-GUI), which is explained on this page .
 +# using a Linux style command line interface. See [[Telnet/SSH_and_the_Command_Line]] for more details.
 +
 +You are here: '''[[Main_Page|DD-WRT wiki mainpage]] / [[Web_Interface|Web-GUI]]'''
 +
 +__TOC__
 +==Access via a web browser==
 +After installing DD-WRT Firmware you can access the DD-WRT Web-GUI using a web browser pointing to the same IP address as before you installed DD-WRT. These are some of the most common default IP addresses: 192.168.1.1 (most commonly used on Linksys and Asus), 192.168.2.1 (some Belkins), 192.168.11.1 (some Buffalos), 192.168.10.1 or 192.168.30.1 (some Motorolas), and there may be others.
 +
 +
 +==Username and Password==
-=Introduction=+The latest versions of DD-WRT will require you to set your own username and password when you first access the web interface. '''Because the SSH user is always root, it is critical that a strong password be used. These passwords should be a minimum of 12 characters and use numbers and valid non-alphabetic characters.''' 12 characters dramatically reduces the probability of a successful random attack and has a cost / time infeasible computational requirement.
-The easiest way to configure your WRT54G with DD-WRT installed is through the web interface. This provides an experience more like configuring a desktop application. :-). Also, this may look a bit different from other web applications you have seen in the past.+
-<center>+
-[[Image:Wpa2.JPG|thumb|none|600px|The current standard interface of v23]]+
-</center>+
-=Accessing=+'''Valid special characters prior to 49599 are:''' <pre>~!@#$%&()-_=+[]{}\;,.<>/?</pre> '''Valid special characters for builds 49599 and newer are:''' <pre>!"#%&'()*+,-./;<=>?@[\]^_`{|}~$</pre> '''See forum threads:''' [https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=328775 WARNING: Invalid Password characters that no longer work] [https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=330490&start=117 UI themes! preview/public builds BUG hunting REPORTING]
-*Open a web browser+
-*In the location bar, enter ''<Router_IP>''+
-*Hit Enter/Return or click Go+
-*There is no username to enter+
-*Enter the password for your router.+
-By default, ''<Router_IP>'' is 192.168.1.1<br>+The default username is ''root'' and the default password is ''admin'' (from v23 SP1). Some earlier versions of DD-WRT did not require a username.
-Default username is left blank however use ''root'' (so username and pwd can be saved to browser [or use firefox, cause it doesn't care]. Note : doesnt apply anymore : on v23 SP1, the default username is ''root'')<br>+
-Default password is ''admin''<br>+
 +==Elements of the Web-GUI==
 +The Web-GUI has five main elements
-<b>Hint:</b> if you're on a remote location with access to your router through telnet/ssh (e.g. by first logging in on a LAN server) and you want temporary web access from that location, you may use:+:<font color=red>'''1.'''</font> The tabbed menu system
- iptables -I INPUT -p tcp -s <remote_location_ip> --dport 80 -j ACCEPT+:<font color=red>'''2.'''</font> Main area
-The webaccess will be secure again when the router reboots (unless you turned remote_administration on ofcourse ;)).+:<font color=red>'''3.'''</font> Action buttons
 +:<font color=red>'''4.'''</font> Help information
 +:<font color=red>'''5.'''</font> Some system essentials
-== Regaining access ==+Clicking these text buttons gives you access to furter information
-If for some reason you completely lose web access to the router (for example, at least in the official v23, you can't prevent wireless access to the web interface without also preventing wired access to it. I don't know if it's a bug or a feature but still, it's there), you can ssh into the router and start the web server by entering the following commands: <pre>cd /www/+
-httpd</pre>To connect through secure http, add the option ''-S'' at the end of the command. See the httpd man pages for more information about that command.<br><br>+
-You can use this behavior to get a more secure router by activating the web interface only when you need to configure it, and then close the web server once you're done.<br>+
-To close the web server, run the command "'' kill `cat /tmp/var/run/httpd.pid` ''" (note the backquotes) or " ''kill `cat /tmp/var/run/httpsd.pid` ''" if you ran the web server with the option ''-S'' to get secure http.+
-=Interface Map (v23 SP1 Final)=+:<font color=green>'''1.'''</font> More... (More Help)
 +:<font color=green>'''2.'''</font> Firmware details
 +
 +[[Image:web-gui-elements.png|670px]]
 + 
 +Some notes about the screen elements.
 +* The default information screen is the same as menu selection: ''Status->Sys-Info''
 +* To save changes you may have made to settings you need to press the Save button. Just moving to a new tab in the menu, will discard settings in the current menu tab.
 +* The time will count the time since the router has been powered up, until the router gets WAN access. By default the DD-WRT will automatically try to get the corrent time from a time server.
 + 
 +==Menu Interface map==
 +Select one of the menu points below for information about settings within that menu page.
 + 
 +(Menu structure as of June 2012 - svn19342 Mega).
*Setup *Setup
**Basic Setup **Basic Setup
Line 37: Line 51:
** Advanced Routing ** Advanced Routing
** VLANs ** VLANs
 +** Networking
 +** EoIP Tunnel
* Wireless * Wireless
-** Basic Settings+** [[WebInterfaceWirelessBasicSettings|Basic Settings]]
-** RADIUS+** Radius
** Wireless Security ** Wireless Security
** MAC Filter ** MAC Filter
** Advanced Settings ** Advanced Settings
** WDS ** WDS
 +* Services
 +** Services
 +** VPN
 +** USB
 +** NAS
 +** Hotspot
 +** SIP Proxy
 +** My Ad Network
* Security * Security
** Firewall ** Firewall
-** VPN+** VPN Passthrough
* Access Restrictions * Access Restrictions
-** Internet Access+** WAN Access
-* Applications and Gaming+* NAT/QoS
-** Port Range Forwarding+
** Port Forwarding ** Port Forwarding
 +** Port Range Forwarding
** Port Triggering ** Port Triggering
** UPnP ** UPnP
** DMZ ** DMZ
-** [http://wrt-wiki.bsr-clan.de/index.php?title=Quality_of_Service QOS]+** [[Quality_of_Service|Quality of Service - QoS]]
* Administration * Administration
** Management ** Management
-** Hotspot 
-** Services 
** Keep Alive ** Keep Alive
-** Log+** Commands
-** Diagnostics+
** WOL ** WOL
** Factory Defaults ** Factory Defaults
Line 69: Line 90:
* Status * Status
** Router ** Router
 +** WAN
** LAN ** LAN
** Wireless ** Wireless
 +** Bandwith
** Sys-Info ** Sys-Info
 +** [[MyPage|My Page]]
-=Simulation=+== Setting details about the Web-GUI==
-[[Image:Onstart.jpg|thumb| The Old Alchemy interface of DD-WRT v22]]+Under ''Administration -> Management'' you can set various details about the Web-GUI. Like:
-A setup simulation of the old alchemy interface can be found here:+* set Username and Password
- +* control Access to the Web-GUI locally/remotely and more
- +* select between different Router GUI styles
-http://www.0711-stuttgart.de/192.168.1.23+
 +==Regaining Access==
 +===Locally===
 +If for some reason you completely lost web access to the router, the web server (HTTP [[Glossary#daemon|daemon]]) may be shut down. To regain access try starting the web server. [[Glossary#SSH|SSH]] or [[Glossary#Telnet|telnet]] into the router and enter the following commands:
-This interface has been used in v22 and before, the new v23 and v24 interface has been completely redesigned and supports multiple languages and skins (take a look at the screenshot above)but you can still see the basic DD-WRT interface setup by viewing the simulation.+ httpd -h /www
 +To connect through secure HTTP, add the option ''-S'' at the end of the command. See the httpd man pages for more information about that command.
-See a Site with Version '''DD-WRT V22finalR2''' (Sorry about the Popup, the Webspace is for free) http://www.informatione.gmxhome.de/DDWRT/Standard/V22R2/index.html (Click on "GUI Setup").+You can use this feature to get a more secure router by activating the web interface only when you need to configure it, and then closing the web server once you're done.
-'''DD-WRT V23final:'''+To shut down the web server, run the command ''kill `cat /tmp/var/run/httpd.pid`'' (note the backquotes) or ''kill `cat /tmp/var/run/httpsd.pid`'' if you ran the web server with the option ''-S'' to get secure HTTP.
-http://www.informatione.gmxhome.de/DDWRT/Standard/V23final/index.html+
-(No Password needed)+===Remotely===
 +'''Method 1:''' See [http://www.dd-wrt.com/phpBB2/viewtopic.php?t=29181 Enable Web Interface Over SSH?]
-=Troubleshooting=+'''Method 2:''' If you're at a remote location and have access to your router through [[Glossary#SSH|SSH]] or [[Glossary#Telnet|telnet]], but you'd like to enable remote web access, you may use the following command to allow access from one remote IP address:
-If you forget your router's IP address or password you can press and hold the reset button on the back of the router for 5-30 seconds. This will reset all ''settings'' to their defaults, including the IP address and password. '''This will not unflash your router to the default firmware''' This will not work if ''Resetbuttond'' is set to disabled.+
-Make sure you are on the same subnet as your router. If your router is 192.168.1.1 and your computers IP address is 192.168.2.50 you may not be able to access the interface. Correct your computers IP address or reboot your computer.+::'''iptables -I INPUT -p tcp -s <remote_location_ip> --dport 80 -j ACCEPT'''
-Some pages may not refresh/update settings as expected when using Mozilla Firefox. Try using MSIE when having problems getting changes to stick, or when confronted with blank pages.+This temporary remote web access will be disabled again when the router reboots (unless you turned <i>Remote Administration</i> on from the settings in the web interface or saved this as firewall script under Administration ->Commands).
 +
 +
 +==Simulation==
 +[[Image:Onstart.jpg|thumb|left| The old Alchemy interface of DD-WRT v22]][[Image:Wpa2.JPG|thumb| The v24sp2-early beta [[Web Interface|web interface]] of DD-WRT]]
 +A setup simulation of v24-sp2 and early beta DD-WRT interface is [https://router-firmware-test.gamma.nu/DD-WRT/index.html here].<br>
 +A setup simulation of current beta DD-WRT interface is [https://forum.dd-wrt.com/demo/ here].<br>
-[[Category:English documentation]]+[[Category:Management| ]]

Current revision

You can contol the settings of DD-WRT in two ways:

  1. through the Web based Graphical User Interface (Web-GUI), which is explained on this page .
  2. using a Linux style command line interface. See Telnet/SSH_and_the_Command_Line for more details.

You are here: DD-WRT wiki mainpage / Web-GUI

Contents

[edit] Access via a web browser

After installing DD-WRT Firmware you can access the DD-WRT Web-GUI using a web browser pointing to the same IP address as before you installed DD-WRT. These are some of the most common default IP addresses: 192.168.1.1 (most commonly used on Linksys and Asus), 192.168.2.1 (some Belkins), 192.168.11.1 (some Buffalos), 192.168.10.1 or 192.168.30.1 (some Motorolas), and there may be others.


[edit] Username and Password

The latest versions of DD-WRT will require you to set your own username and password when you first access the web interface. Because the SSH user is always root, it is critical that a strong password be used. These passwords should be a minimum of 12 characters and use numbers and valid non-alphabetic characters. 12 characters dramatically reduces the probability of a successful random attack and has a cost / time infeasible computational requirement.

Valid special characters prior to 49599 are:
~!@#$%&()-_=+[]{}\;,.<>/?
Valid special characters for builds 49599 and newer are:
!"#%&'()*+,-./;<=>?@[\]^_`{|}~$
See forum threads: WARNING: Invalid Password characters that no longer work UI themes! preview/public builds BUG hunting REPORTING

The default username is root and the default password is admin (from v23 SP1). Some earlier versions of DD-WRT did not require a username.

[edit] Elements of the Web-GUI

The Web-GUI has five main elements

1. The tabbed menu system
2. Main area
3. Action buttons
4. Help information
5. Some system essentials


Clicking these text buttons gives you access to furter information

1. More... (More Help)
2. Firmware details

Some notes about the screen elements.

  • The default information screen is the same as menu selection: Status->Sys-Info
  • To save changes you may have made to settings you need to press the Save button. Just moving to a new tab in the menu, will discard settings in the current menu tab.
  • The time will count the time since the router has been powered up, until the router gets WAN access. By default the DD-WRT will automatically try to get the corrent time from a time server.

[edit] Menu Interface map

Select one of the menu points below for information about settings within that menu page.

(Menu structure as of June 2012 - svn19342 Mega).

  • Setup
    • Basic Setup
    • DDNS
    • MAC Address Clone
    • Advanced Routing
    • VLANs
    • Networking
    • EoIP Tunnel
  • Wireless
    • Basic Settings
    • Radius
    • Wireless Security
    • MAC Filter
    • Advanced Settings
    • WDS
  • Services
    • Services
    • VPN
    • USB
    • NAS
    • Hotspot
    • SIP Proxy
    • My Ad Network
  • Security
    • Firewall
    • VPN Passthrough
  • Access Restrictions
    • WAN Access
  • NAT/QoS
  • Administration
    • Management
    • Keep Alive
    • Commands
    • WOL
    • Factory Defaults
    • Firmware Upgrade
    • Backup
  • Status
    • Router
    • WAN
    • LAN
    • Wireless
    • Bandwith
    • Sys-Info
    • My Page

[edit] Setting details about the Web-GUI

Under Administration -> Management you can set various details about the Web-GUI. Like:

  • set Username and Password
  • control Access to the Web-GUI locally/remotely and more
  • select between different Router GUI styles

[edit] Regaining Access

[edit] Locally

If for some reason you completely lost web access to the router, the web server (HTTP daemon) may be shut down. To regain access try starting the web server. SSH or telnet into the router and enter the following commands:

httpd -h /www

To connect through secure HTTP, add the option -S at the end of the command. See the httpd man pages for more information about that command.

You can use this feature to get a more secure router by activating the web interface only when you need to configure it, and then closing the web server once you're done.

To shut down the web server, run the command kill `cat /tmp/var/run/httpd.pid` (note the backquotes) or kill `cat /tmp/var/run/httpsd.pid` if you ran the web server with the option -S to get secure HTTP.

[edit] Remotely

Method 1: See Enable Web Interface Over SSH?

Method 2: If you're at a remote location and have access to your router through SSH or telnet, but you'd like to enable remote web access, you may use the following command to allow access from one remote IP address:

iptables -I INPUT -p tcp -s <remote_location_ip> --dport 80 -j ACCEPT

This temporary remote web access will be disabled again when the router reboots (unless you turned Remote Administration on from the settings in the web interface or saved this as firewall script under Administration ->Commands).


[edit] Simulation

The old Alchemy interface of DD-WRT v22
The old Alchemy interface of DD-WRT v22
The v24sp2-early beta web interface of DD-WRT
The v24sp2-early beta web interface of DD-WRT

A setup simulation of v24-sp2 and early beta DD-WRT interface is here.
A setup simulation of current beta DD-WRT interface is here.