【OpenWRT】——Internal And Guest Wireless LANs
[i=s] 本帖最後由 角色 於 2014-5-25 16:35 編輯 [/i]有的时候，对Wireless Access是要把Internal Wireless LAN与Guest Wireless LAN分开，而Guest Wireless LAN不用密码可以上网，而Internal的就要密码，而Guest Wireless LAN的network segment与Internal Wireless LAN segment不一样。
The installation procedure using LuCI method can be found in the post #8 ([url]http://www.telecom-cafe.com/forum/redirect.php?goto=findpost&ptid=5370&pid=38490[/url]).
Internal Wireless LAN
1. 先enable Internal的Wireless LAN
2. set security，选WPA2-PSK
3. 由于wlan是bridged with lan interface (lan interface有自己的interface ip，dhcp server, firewall forwarded to wan)
Guest Wireless LAN
1. 先在wifi，建立wlan_guest
2. 先建立一个新的interface wlan_guest
3. Interface wlan_guest建立interface ip address，DHCP server
4. Firewall wlan_guest => wan
reference: [url]http://wiki.openwrt.org/doc/recipes/guest-wlan[/url] [attach]2383[/attach]
[attach]2384[/attach]
[attach]2385[/attach]
[attach]2386[/attach]
[attach]2382[/attach] 這樣能分離公用和私人網絡？ 是的。。。 能否自定不同的dns ip
例如Wifi1 anto dns ip:8.8.8.8
Wifi2 anto dns ip:192.241.222.103 真的不知道，但是一般也没有必要。 [i=s] 本帖最後由 角色 於 2014-5-25 11:59 編輯 [/i]
哈哈，如果全用luci （web-gui）来做，以现在的功力根本set不到Guest WiFi。:L [i=s] 本帖最後由 角色 於 2014-5-25 16:52 編輯 [/i]
The procedure to set up a guest wireless LAN (without any password)
1. Go to the page of Network->Wifi, as shown in Figure 1.
[attach]3247[/attach]
Figure 1: Network->Wifi
2. In Figure 1, press "Add" button, it gives Figure 2.
[attach]3248[/attach]
Figure 2: Network->Wifi, Interface Configuration
3. In Figure 2, under Interface Configuration,
enter "Free WiFi" for ESSID field
create "wlan_guest" under Network, as shown in Figure 2.
4. Save and Apply
5. Goto Network->Interfaces, it gives Figure 3.
[attach]3249[/attach]
Figure 3: Network->Interfaces
6. In Figure 3, edit WLAN_GUEST, it gives Figure 4.
[attach]3250[/attach]
Figure 4: Network->Interfaces for WLAN_GUEST
7. In Figure 4, change the protocol from "Unmanaged" to "Static address", it gives Figure 5.
[attach]3251[/attach]
Figure 5: Network->Interfaces for WLAN_GUEST
8. In Figure 5, click "Switch protocol" button, it gives Figure 6.
[attach]3255[/attach]
Figure 6: Network->Interfaces, protocol using static address
9. In Figure 6, enter "10.0.0.1" for IPv4 address
10. Enter "255.255.255.0" for IPv4 netmask
11. Press "Save" command
12. Under DHCP Server, click "Setup DHCP Server" (Use the default values, start = 100, Limit = 150, Leasetime = 12h)
13. Save and apply
14. Goto Network->Firewall, it gives Figure 7.
[attach]3253[/attach]
Figure 7: Network->Firewall
15. Press 'Add", as shown in Figure 7, it gives Figure 8.
[attach]3254[/attach]
Figure 8: Netowrk->Firewall, zone forwarding
16. In Figure 8, under General Settings, add "waln_guest" to the Name field
17. Under "Covered network", tick the box for "wlan_guest"
18. Under Inter-Zone forwarding, put a tick to the box for "wan" to allow forward to destination zones.
19. Save and apply
20. Reoboot the router [b]回復 [url=http://www.telecom-cafe.com/forum/redirect.php?goto=findpost&pid=38353&ptid=5370]5#[/url] [i]Mr.Tom[/i] [/b]
你的问题，可以参看Figure 6 of post #8 for custom DNS。
頁:
[1]