Tag Info

Hot answers tagged

10

While the slow client is transmitting data, due to CSMA-CA, no other client can transmit. A slow client will take significantly longer to transmit its packet of data than a fast client. Similarly while the AP is talking to a slow client all other wireless devices on that channel will have to wait for their turn. The slower the device the longer that the ...


9

I don't think you can set it up where DD-WRT calls CloudFlare directly. The way I have it configured is to have DD-WRT call a PHP script on a remote web server, which then detects the client IP and sends the update request to CloudFlare via their API. DD-WRT DDNS settings DDNS Service: Custom DYNDNS Server: <yourserver.com> Username: <anything> ...


7

DD-WRT is nice for routing, but if your replacing a firewall, I would lean towards pfSense or Endian as a firewall solution instead of a router with firewall capabilities.


6

We have used DDWRT for over a year now and have never had an prob with it. We run it on a WRT54G that is on and open to the public 24/7. I may have had to restart it 3 times in the last year or so. We frequently have 15-25 wireless users. There is plenty of support for DDWRT online and I would definitely recommend it. If you have read anything about it ...


6

I've had my eye on CoovaChilli for a while, it's an OpenWRT only fork of ChilliSpot which also runs on regular computers. Coova offers commercial support if you need it.


6

Yes. Generally speaking, a G-only network is about three times faster than a mixed B/G network. Please see the following: What do I need to transform my network from Ethernet to WiFi? From the Cisco White Paper Capacity Coverage & Deployment Considerations for IEEE 802.11g "When 802.11b clients are associated to an 802.11g access point, the ...


6

Your configuration is not that complex. You really don't need "prosumer" NAT router/firewall boxes if you don't want them. What you DO need is proper isolation of your "public" and "intranet" networks -- you don't really have that here (Public devices can't hit your intranet's internal IPs, but they can see all of its traffic, and your intranet can hit ...


5

I can't rule out the possibility of doing it but I can make some points against it. The recommended process (strongly reiterated by DD-WRT) involves a series of 'hard' resets that involve power cycling while holding down the physical reset button on the router. Tricky to do remotely :) Saved settings for one version of the firmware should NEVER be used ...


5

I would imagine that if you checked most of those connections will be on port 80 and in a TIME_WAIT state. TIME_WAIT is a state where connections could conceivably be re-used without making a new TCP between servers, so it can help reduce load. So basically your router is saving a tcp socket for later use to the same site.


4

We use them everywhere, I think we got about a hundred used in production, from simple firewalls to asterix nodes. We have standardized on ASUS WL-500GP hardware. We have developed some scripts in-house to handle upgrades and "config" snapshots. The only thing we really miss is accelerated crypto for OpenVPN.


4

This is a routing question, so using iptables may not suitable. Here we will use iproute2, which, fortunately, included with DD-WRT. Suppose 1.1.1.1 is the IP address of the default gateway of the DD-WRT (you have to figure it out, may be by ways of disable OpenVPN so that the default gateway will be set to normal and issue a route -n command to see the ...


3

You want to put the router between your gateway and the switch as mentioned. In this typical setup, all traffic between the internet and your local network runs through the router and gateway, which allows you to control the traffic using either device. internets---------[gateway]---------[router]------[switch]---local network 192.168.0.1 ...


3

Well, yes and no. The Dyndns address is an external address: that's the whole point. It points to your external interface, the one out there on teh interwebs, not your internal one on your nice safe lan. So if something from your internal network is pointed at that address, it goes out, turns around, and comes back in. That's the only way it knows to get ...


3

We use OpenWRT at work, both in the office and DC. It'll handle as many machines as your wireless bandwidth will support, as far as I can tell. I don't know how long we've been using it, it was here when I got here.


3

You should really consider pfsense which is a embedded distribution that does FW/Router and captive portal. It is extremely simple to use and works great.


3

I would strongly suggest putting guests on their own subnet with strictly controlled firewalls preventing anything but internet access.


3

Are you looking to do this through a single wireless router or through multiple access points? Many routers are multi-SSID as well as DMZ capable if that's what you want. I would look around for some higher end SOHO boxes like the one's from DrayTek. I have had good luck with them in the past. If you already have the LAN set up with a separate subnet for ...


3

Try using syslog-ng. I ran into a number of problems with syslogd on openwrt. I suspect you are running into the similar problems. See my documentation on using syslog-ng with openwrt. My logging server is Ubuntu running rsyslogd. Alternatively, you should be able to do the required changes on the logging server using syslog-ng to rerwrite the log ...


3

Based purely on observation I refute that theory. I frequently have machines connecting to the same point at different speeds and none are affected when another connects at a slower speed (other than by virtue of them all sharing the same feed bandwidth.


3

If you want to execute the update from your router then there is no getting around the fact that you need a little extra 'something' in the middle to convert your call into the CloudFlare format (if only DNS-O-Matic would add them to their supported services...). Rather than have to host an intermediate script yourself you can just use Google AppEngine ...


3

It sounds like they have their netmasks set improperly. If they're both in 24.123.68.0/24 and they both have their netmask set to /24, then each one will think the other one's hosts are on its local network, so it will use ARP to try to connect to them locally, which won't work. It sounds like whoever configured the routers didn't correctly set the netmask. ...


3

The address option will accept fully qualified domain names. address=/mydomain.com/192.168.1.156


2

It's never advisable to upgrade any router remotely, unless you have separate out-of-band access to it. I base that recommendation on a decade of running the core networks for an ISP (in a previous job)


2

Designating one of your "Lan" ports to be connected to the neighborhood wifi network shouldn't be too difficult if you use a firmware that gives you access to the underlying IP stack, such as DD-WRT. However... I'd then like to set up routing so than some traffic is routed to ADSL, and the rest to the Mikrotik. This is the tricky part—What you want to ...


2

You would need to re-flash the firmware with something like DD-WRT which can get you full access to the underlying Linux OS. From there you can configure the iptables, etc. to do whatever you wish on the different interfaces. You will need a firm understanding of Linux routing, this is not for the casual end-user. The main page for the DD-WRT project is ...


2

The new Apple AirPort Extremes support this. "Now you can set up a separate Wi-Fi network with a separate password for your visitors. Simply enable the new guest networking feature, and your guests can use the Internet but can't access other parts of your private network, such as your computers, printers, and attached hard drives."


2

OpenWRT.org This is definitely something where everyone will just recommend whichever one they're familiar with. But please note that most of these are based on openwrt, and largely the forks were created because at that time openwrt did not have a very good web interface. These days openwrt does have a good web interface, and I highly recommend it. See ...


2

You may have to do a hard reset on it. In the main setup screen, you can set the router's static LAN IP address, which is how you will access it once you set it up as a switch. Aside from that, I would recommend that instead of using it as a dhcp forwarder, you leave it on dhcp server, and disable the dhcp server. Then set the WAN type to Disabled, then ...


2

I'm guessing that you're doing NAT for traffic from NET A to NET B, in which case you'll need to add a rule to exclude traffic from NET A destined for the NET B address of the DD-WRT - something like: iptables -t nat -I POSTROUTING -s <net.a.ip.block/mask> -d <dd-wrt.net.b.address> -j ACCEPT or you could do a rewrite of the address like so: ...



Only top voted, non community-wiki answers of a minimum length are eligible