Web interface

From DD-WRT Wiki

(Difference between revisions)
Jump to: navigation, search
Revision as of 16:02, 4 January 2006 (edit)
Atzekalle (Talk | contribs)
m (Regaining access)
← Previous diff
Current revision (17:16, 12 April 2024) (edit) (undo)
Kernel-panic69 (Talk | contribs)
((add note about lockout feature, cleanup format, add additional info related to MyPage and webUI in general))
 
(71 intermediate revisions not shown.)
Line 1: Line 1:
-'''You are here: ''' '''[[Main Page]]'''/'''[[DD-WRT Docu (EN)]]'''/'''[[Web Interface]]'''+{{languages|Web_interface}}
- +
-This is an infant wiki! Please help by fixing formatting and adding content!+
 +You are here: '''[[Main_Page|DD-WRT wiki mainpage]] / [[Web_Interface|Web-GUI]]'''
 +
 +__TOC__
=Introduction= =Introduction=
-The easiest way to configure your WRT54G with DD-WRT installed is from the web interface. This provides an experience more like configuring a desktop application. :-) This may look diffrent than your past web interface screens.+You can contol the settings of DD-WRT in two ways:
-<center>+# through the Web based Graphical User Interface (Web-GUI), which is explained on this page .
-[[Image:Wpa2.JPG|thumb|none|600px|The current standard interface of v23]]+# using a Linux style command line interface. See [[Telnet/SSH_and_the_Command_Line]] for more details.
-</center>+'''NOTE: DD-WRT features a security mechanism that will lock out access to the router for 5 minutes after 6 failed login attempts whether by webUI, SSH, or Telnet. Please wait or continued attempts will increase the time of the lockout.'''
 + 
 +==Access via a web browser==
 +After installing DD-WRT Firmware you can access the DD-WRT Web-GUI using a web browser pointing to 192.168.1.1 on current releases for most supported devices. There may be some exceptions to this and it should be the same IP address as before you installed DD-WRT. These are some of the most common default IP addresses: 192.168.1.1 (most commonly used on Linksys and Asus), 192.168.2.1 (some Belkins), 192.168.11.1 (some Buffalos), 192.168.10.1 or 192.168.30.1 (some Motorolas), and there may be others.
 +
 +==Username and Password==
 +The latest versions of DD-WRT will require you to set your own username and password when you first access the web interface. '''Because the SSH user is always root, it is critical that a strong password be used. These passwords should be a minimum of 12 characters and use numbers and valid non-alphabetic characters.''' 12 characters dramatically reduces the probability of a successful random attack and has a cost / time infeasible computational requirement.
 + 
 +'''Valid special characters prior to 49599 are:''' <pre>~!@#$%&()-_=+[]{}\;,.<>/?</pre> '''Valid special characters for builds 49599 and newer are:''' <pre>!"#%&'()*+,-./;<=>?@[\]^_`{|}~$</pre> '''See forum threads:''' [https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=328775 WARNING: Invalid Password characters that no longer work] [https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=330490&start=117 UI themes! preview/public builds BUG hunting REPORTING]
 + 
 +The default username is ''root'' and the default password is ''admin'' (from v23 SP1). Some earlier versions of DD-WRT did not require a username.
 + 
 +==Elements of the Web-GUI==
 +The Web-GUI has five main elements
 + 
 +:<font color=red>'''1.'''</font> The tabbed menu system
 +:<font color=red>'''2.'''</font> Main area
 +:<font color=red>'''3.'''</font> Action buttons
 +:<font color=red>'''4.'''</font> Help information
 +:<font color=red>'''5.'''</font> Some system essentials
 + 
 + 
 +Clicking these text buttons gives you access to furter information
-=Accessing=+:<font color=green>'''1.'''</font> More... (More Help)
-*Open a web browser+:<font color=green>'''2.'''</font> Firmware details
-*In the location bar, enter ''<Router_IP>''+
-*Hit Enter/Return or click Go+[[Image:web-gui-elements.png|670px]]
-*There is no username to enter+
-*Enter the password for your router.+
-By default, ''<Router_IP>'' is 192.168.1.1<br>+Some notes about the screen elements.
-Default username is left blank however use ''root'' (so username and pwd can be saved to browser [or use firefox, cause it doesn't care])<br>+* The default information screen is the same as menu selection: ''Status->Sys-Info''
-Default password is ''admin''<br>+* To save changes you may have made to settings you need to press the Save button. Just moving to a new tab in the menu, will discard settings in the current menu tab.
 +* The time will count the time since the router has been powered up, until the router gets WAN access. By default the DD-WRT will automatically try to get the corrent time from a time server.
 +==Menu Interface map==
 +Select one of the menu points below for information about settings within that menu page.
-== Regaining access ==+*Setup
-If for some reason you completly lose web access to the router (for example, at least in the official v23, you can't prevent wireless access to the web interface without also preventing wired access to it. I don't know if it's a bug or a feature but still, it's there), you can ssh into the router and start the web server by entering the following commands: <pre>cd /www/+**Basic Setup
-httpd</pre>To connect through secure http, add the option ''-S'' at the end of the command. See the httpd man pages for more information about that command.<br><br>+** IPv6
-You can use this behavior to get a more secure router by activating the web interface only when you need to configure it, and then close the web server once you're done.<br>+** DDNS
-To close the web server, run the command "'' kill `cat /tmp/var/run/httpd.pid` ''" (note the backquotes) or " ''kill `cat /tmp/var/run/httpsd.pid` ''" if you ran the web server with the option ''-S'' to get secure http.+** MAC Address Clone
 +** Advanced Routing
 +** Switch Config
 +** Networking
 +** Tunnels
 +* Wireless
 +** [[WebInterfaceWirelessBasicSettings|Basic Settings]]
 +** Advanced Settings
 +** Wireless Security
 +** Roaming
 +** MAC Filter
 +** WDS
 +* Services
 +** Services
 +** FreeRadius
 +** PPPoE Server
 +** VPN
 +** USB
 +** NAS
 +** Hotspot
 +** Ad Blocking
 +** SpeedChecker
 +* Security
 +** Firewall
 +** VPN Passthrough
 +* Access Restrictions
 +** WAN Access
 +* NAT/QoS
 +** Port Forwarding
 +** Port Range Forwarding
 +** Port Triggering
 +** UPnP
 +** DMZ
 +** [[Quality_of_Service|Quality of Service - QoS]]
 +* Administration
 +** Management
 +** Keep Alive
 +** Sysctl
 +** Commands
 +** WOL
 +** Factory Defaults
 +** Firmware Upgrade
 +** Backup
 +* Status
 +** Router
 +** WAN
 +** LAN
 +** Wireless
 +** Bandwith
 +** Syslog
 +** Sys-Info
 +** [[MyPage|My Page]] (If installed. See [https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=61746&start=364 My_Page (forum thread)] for updated versions for current releases.)
-=Simulation=+== Setting details about the Web-GUI==
-[[Image:Onstart.jpg|thumb| The Old Alchemy interface of DD-WRT v22]]+Under ''Administration -> Management'' you can set various details about the Web-GUI. Like:
-A setup simulation of the old alchemy interface can be found here:+* set Username and Password
 +* control Access to the Web-GUI locally/remotely and more
 +* select between different Router GUI styles
 +==Regaining Access==
 +===Locally===
 +If for some reason you completely lost web access to the router, the web server (HTTP [[Glossary#daemon|daemon]]) may be shut down. To regain access try starting the web server. [[Glossary#SSH|SSH]] or [[Glossary#Telnet|telnet]] into the router and enter the following commands:
-http://www.0711-stuttgart.de/192.168.1.23+ httpd -h /www
 +To connect through secure HTTP, add the option ''-S'' at the end of the command. See the httpd man pages for more information about that command.
-This interface has been used in v22 and before, the new v23 and v24 interface has been completely redesigned and supports multiple languages and skins (take a look at the screenshot above)but you can still see the basic DD-WRT interface setup by viewing the simulation.+You can use this feature to get a more secure router by activating the web interface only when you need to configure it, and then closing the web server once you're done.
 +To shut down the web server, run the command ''kill `cat /tmp/var/run/httpd.pid`'' (note the backquotes) or ''kill `cat /tmp/var/run/httpsd.pid`'' if you ran the web server with the option ''-S'' to get secure HTTP.
-See a Site with Version '''DD-WRT V22finalR2''' (Sorry about the Popup, the Webspace is for free) http://www.informatione.gmxhome.de/DDWRT/Standard/V22R2/index.html (Klick on "GUI Setup")+===Remotely===
 +'''Method 1:''' See [http://www.dd-wrt.com/phpBB2/viewtopic.php?t=29181 Enable Web Interface Over SSH?]
-'''DD-WRT V23final:'''+'''Method 2:''' If you're at a remote location and have access to your router through [[Glossary#SSH|SSH]] or [[Glossary#Telnet|telnet]], but you'd like to enable remote web access, you may use the following command to allow access from one remote IP address:
-http://www.informatione.gmxhome.de/DDWRT/Standard/V23final/index.html+
-(No Password needed)+::'''iptables -I INPUT -p tcp -s <remote_location_ip> --dport 80 -j ACCEPT'''
-=Troubleshooting=+This temporary remote web access will be disabled again when the router reboots (unless you turned <i>Remote Administration</i> on from the settings in the web interface or saved this as firewall script under Administration ->Commands).
-If you forget your router's IP address or Password you can press and hold the reset button on the back of the router for 5-30 seconds. This will reset all ''settings'' to their default, including the IP address and password. '''This will not unflash your router to the default firmware''' This will not work if ''Resetbuttond'' is set to disabled.+
 +
 +==Simulation==
 +[[Image:Onstart.jpg|thumb|left| The old Alchemy interface of DD-WRT v22]][[Image:Wpa2.JPG|thumb| The v24sp2-early beta [[Web Interface|web interface]] of DD-WRT]]
-Make sure you are on the same subnet as your router. If your router is 192.168.1.1 and your computers ip address is 192.168.2.50 you may not be able to access the interface. Correct your computers ip address or reboot your computer.+A setup simulation of v24-sp2 and early beta DD-WRT interface is [https://router-firmware-test.gamma.nu/DD-WRT/index.html here].<br>
 +A setup simulation of current beta DD-WRT interface is [https://forum.dd-wrt.com/demo/ here].<br>
-----+[[Category:Management| ]]
-'''You are here: ''' '''[[Main Page]]'''/'''[[DD-WRT Docu (EN)]]'''/'''[[Web Interface]]'''+

Current revision


You are here: DD-WRT wiki mainpage / Web-GUI

Contents

[edit] Introduction

You can contol the settings of DD-WRT in two ways:

  1. through the Web based Graphical User Interface (Web-GUI), which is explained on this page .
  2. using a Linux style command line interface. See Telnet/SSH_and_the_Command_Line for more details.

NOTE: DD-WRT features a security mechanism that will lock out access to the router for 5 minutes after 6 failed login attempts whether by webUI, SSH, or Telnet. Please wait or continued attempts will increase the time of the lockout.

[edit] Access via a web browser

After installing DD-WRT Firmware you can access the DD-WRT Web-GUI using a web browser pointing to 192.168.1.1 on current releases for most supported devices. There may be some exceptions to this and it should be the same IP address as before you installed DD-WRT. These are some of the most common default IP addresses: 192.168.1.1 (most commonly used on Linksys and Asus), 192.168.2.1 (some Belkins), 192.168.11.1 (some Buffalos), 192.168.10.1 or 192.168.30.1 (some Motorolas), and there may be others.

[edit] Username and Password

The latest versions of DD-WRT will require you to set your own username and password when you first access the web interface. Because the SSH user is always root, it is critical that a strong password be used. These passwords should be a minimum of 12 characters and use numbers and valid non-alphabetic characters. 12 characters dramatically reduces the probability of a successful random attack and has a cost / time infeasible computational requirement.

Valid special characters prior to 49599 are:
~!@#$%&()-_=+[]{}\;,.<>/?
Valid special characters for builds 49599 and newer are:
!"#%&'()*+,-./;<=>?@[\]^_`{|}~$
See forum threads: WARNING: Invalid Password characters that no longer work UI themes! preview/public builds BUG hunting REPORTING

The default username is root and the default password is admin (from v23 SP1). Some earlier versions of DD-WRT did not require a username.

[edit] Elements of the Web-GUI

The Web-GUI has five main elements

1. The tabbed menu system
2. Main area
3. Action buttons
4. Help information
5. Some system essentials


Clicking these text buttons gives you access to furter information

1. More... (More Help)
2. Firmware details

Some notes about the screen elements.

  • The default information screen is the same as menu selection: Status->Sys-Info
  • To save changes you may have made to settings you need to press the Save button. Just moving to a new tab in the menu, will discard settings in the current menu tab.
  • The time will count the time since the router has been powered up, until the router gets WAN access. By default the DD-WRT will automatically try to get the corrent time from a time server.

[edit] Menu Interface map

Select one of the menu points below for information about settings within that menu page.

  • Setup
    • Basic Setup
    • IPv6
    • DDNS
    • MAC Address Clone
    • Advanced Routing
    • Switch Config
    • Networking
    • Tunnels
  • Wireless
    • Basic Settings
    • Advanced Settings
    • Wireless Security
    • Roaming
    • MAC Filter
    • WDS
  • Services
    • Services
    • FreeRadius
    • PPPoE Server
    • VPN
    • USB
    • NAS
    • Hotspot
    • Ad Blocking
    • SpeedChecker
  • Security
    • Firewall
    • VPN Passthrough
  • Access Restrictions
    • WAN Access
  • NAT/QoS
  • Administration
    • Management
    • Keep Alive
    • Sysctl
    • Commands
    • WOL
    • Factory Defaults
    • Firmware Upgrade
    • Backup
  • Status

[edit] Setting details about the Web-GUI

Under Administration -> Management you can set various details about the Web-GUI. Like:

  • set Username and Password
  • control Access to the Web-GUI locally/remotely and more
  • select between different Router GUI styles

[edit] Regaining Access

[edit] Locally

If for some reason you completely lost web access to the router, the web server (HTTP daemon) may be shut down. To regain access try starting the web server. SSH or telnet into the router and enter the following commands:

httpd -h /www

To connect through secure HTTP, add the option -S at the end of the command. See the httpd man pages for more information about that command.

You can use this feature to get a more secure router by activating the web interface only when you need to configure it, and then closing the web server once you're done.

To shut down the web server, run the command kill `cat /tmp/var/run/httpd.pid` (note the backquotes) or kill `cat /tmp/var/run/httpsd.pid` if you ran the web server with the option -S to get secure HTTP.

[edit] Remotely

Method 1: See Enable Web Interface Over SSH?

Method 2: If you're at a remote location and have access to your router through SSH or telnet, but you'd like to enable remote web access, you may use the following command to allow access from one remote IP address:

iptables -I INPUT -p tcp -s <remote_location_ip> --dport 80 -j ACCEPT

This temporary remote web access will be disabled again when the router reboots (unless you turned Remote Administration on from the settings in the web interface or saved this as firewall script under Administration ->Commands).


[edit] Simulation

The old Alchemy interface of DD-WRT v22
The old Alchemy interface of DD-WRT v22
The v24sp2-early beta web interface of DD-WRT
The v24sp2-early beta web interface of DD-WRT

A setup simulation of v24-sp2 and early beta DD-WRT interface is here.
A setup simulation of current beta DD-WRT interface is here.