Temat: wr743nd jako client z routingiem
Witam. Chciałbym ustawić wr743 w trybie klienta i dołączyć podsieć z inną pulą adresową ale poprzez routing a nie maskaradę, tak by mieć dostęp do wszystkich hostów po stronie lanu wr743. znalazłem dość prosty opis http://wiki.openwrt.org/doc/recipes/rou … ng.routing ale nie działa do końca. O ile wr743 działa w trybie klienta, to nie widać żadnego hosta po stronie lanu prócz samego interfejsu eth0 (czyli lan). Wygląda jakby radio było bridgowane z lanem. Tylko jak? A wyraźnie po stronie sieci 192.168.0.0/24 pingi wędrują i wracają z 192.168.62.49. Już od 192.168.62.45 nie wracają. Czy routing nie działa ponieważ lan jest mostkowany z wlan0 ?
config interface 'loopback'
option ifname 'lo'
option proto 'static'
option ipaddr '127.0.0.1'
option netmask '255.0.0.0'config interface 'lan'
option ifname 'eth0'
# option type 'bridge'
option proto 'static'
option ipaddr '192.168.62.49'
option netmask '255.255.255.0'config interface 'wan'
# option ifname 'eth1'
# option proto 'dhcp'
option proto 'static'
option ipaddr '192.168.0.246'
option netmask '255.255.255.0'
option gateway '192.168.0.1'
option dns '8.8.8.8'config switch
option name 'eth0'
option reset '1'
option enable_vlan '1'config switch_vlan
option device 'eth0'
option vlan '1'
option ports '0 1 2 3 4'
config defaults
option syn_flood '1'
option input 'ACCEPT'
option output 'ACCEPT'
option forward 'REJECT'config zone
option name 'lan'
option input 'ACCEPT'
option output 'ACCEPT'
option forward 'REJECT'config zone
option name 'wan'
# option network 'wan'
option input 'ACCEPT'
option output 'ACCEPT'
option forward 'REJECT'
option masq '0'
option mtu_fix '1'config forwarding
option src 'wan'
option dest 'lan'config rule
option name 'Allow-DHCP-Renew'
option src 'wan'
option proto 'udp'
option dest_port '68'
option target 'ACCEPT'
option family 'ipv4'config rule
option name 'Allow-Ping'
option src 'wan'
option proto 'icmp'
option icmp_type 'echo-request'
option family 'ipv4'
option target 'ACCEPT'config rule
option name 'Allow-DHCPv6'
option src 'wan'
option proto 'udp'
option src_ip 'fe80::/10'
option src_port '547'
option dest_ip 'fe80::/10'
option dest_port '546'
option family 'ipv6'
option target 'ACCEPT'config rule
option name 'Allow-ICMPv6-Input'
option src 'wan'
option proto 'icmp'
list icmp_type 'echo-request'
list icmp_type 'echo-reply'
list icmp_type 'destination-unreachable'
list icmp_type 'packet-too-big'
list icmp_type 'time-exceeded'
list icmp_type 'bad-header'
list icmp_type 'unknown-header-type'
list icmp_type 'router-solicitation'
list icmp_type 'neighbour-solicitation'
list icmp_type 'router-advertisement'
list icmp_type 'neighbour-advertisement'
option limit '1000/sec'
option family 'ipv6'
option target 'ACCEPT'config rule
option name 'Allow-ICMPv6-Forward'
option src 'wan'
option dest '*'
option proto 'icmp'
list icmp_type 'echo-request'
list icmp_type 'echo-reply'
list icmp_type 'destination-unreachable'
list icmp_type 'packet-too-big'
list icmp_type 'time-exceeded'
list icmp_type 'bad-header'
list icmp_type 'unknown-header-type'
option limit '1000/sec'
option family 'ipv6'
option target 'ACCEPT'config include
option path '/etc/firewall.user'config rule
option src 'wan'
option target 'ACCEPT'
option proto 'tcp'
option dest_port '22'config rule
option src 'wan'
option target 'ACCEPT'
option proto 'tcp'
option dest_port '23'
config wifi-device 'radio0'
option type 'mac80211'
option macaddr '90:f6:52:8f:08:98'
option hwmode '11ng'
option htmode 'HT20'
list ht_capab 'SHORT-GI-40'
list ht_capab 'TX-STBC'
list ht_capab 'RX-STBC1'
list ht_capab 'DSSS_CCK-40'
option disabled '0'
option channel '1'config wifi-iface
option device 'radio0'
option network 'wan'
option mode 'sta'
option client_bridge '0'
option ssid 'ssid'
option encryption 'psk2'
option key 'secret'