Multiple SSID, Independant Virtual WLANs - SUCCESS!

Post new topic   Reply to topic    DD-WRT Forum Forum Index -> Broadcom SoC based Hardware
Goto page Previous  1, 2, 3, 4  Next
Author Message
bent
DD-WRT Novice


Joined: 24 Jun 2007
Posts: 12

PostPosted: Tue Jun 26, 2007 7:56 pm    Post subject: Reply with quote
Finally, I also tried to out in the interface infromation in the dnsmasq options and IT WORKS!!! Very Happy

I can now access the wl0.1 virtual wlan from both my laptop and from the DS Lite. Normally, I have the SSID's hidden, but if I broadcast the SSID of the virtual wlan, it shows up just fine in the DS Lite network configuration. My son only has one network enabled game, but it works flawlessly in this game. The DS Lite also shows up on the wireless status page in the DD-WRT configuration with a signal strength of about 50%.

Now, when all of this is working, it would be nice if access to the router configuration could be disabled from the wl0.1 network. I guess it could be done through some addiditonal iptables commands blocking access to the router IP on port 80 when coming from the br1 interface, but then I need apparently I need to block both the ordinary internal IP (192.168.2.1 in my case) and the address it can be accessed from on the wl0.1 interface (192.168.21.254 when using Pete's addresses). Can it be done in a more elegant way?

Bent
Sponsor
BoxOfSnoo
DD-WRT Novice


Joined: 25 Jun 2007
Posts: 11

PostPosted: Wed Jun 27, 2007 3:11 am    Post subject: Reply with quote
Argh. It just stopped working for me, and I have no idea why. I did a hard reset and did the whole thing from scratch, and still no go.

I dunno. I can't quite figure out the proper way to separate the two interfaces either. I may go back to v23 so I can follow the tutorial and just have it work.

There's something peculiar about the SSID that is attached to the VWLAN, but I can't put my finger on it.
snolsen
DD-WRT User


Joined: 07 Mar 2007
Posts: 94
Location: California

PostPosted: Wed Jun 27, 2007 9:14 pm    Post subject: Reply with quote
All of these posts are hard to follow. Has someone got it to work? Consistently? With an NDS?
BoxOfSnoo
DD-WRT Novice


Joined: 25 Jun 2007
Posts: 11

PostPosted: Wed Jun 27, 2007 10:59 pm    Post subject: Reply with quote
With real NDS games, it works. With homebrew, it doesn't show up.
snolsen
DD-WRT User


Joined: 07 Mar 2007
Posts: 94
Location: California

PostPosted: Thu Jun 28, 2007 3:56 am    Post subject: Reply with quote
BoxOfSnoo wrote:
With real NDS games, it works. With homebrew, it doesn't show up.


Your previous post stated that it quit working. Did you get it working and using what procedure?

TIA
BoxOfSnoo
DD-WRT Novice


Joined: 25 Jun 2007
Posts: 11

PostPosted: Thu Jun 28, 2007 11:52 am    Post subject: Reply with quote
Yes... I'm not sure why it quit. I reloaded everything and it caught on and has worked ever since. There are certain revisions of DS Lite that aren't so good with wireless, that could be it...

Another thing I definitely did was reboot the router about a dozen times.
BoxOfSnoo
DD-WRT Novice


Joined: 25 Jun 2007
Posts: 11

PostPosted: Thu Jun 28, 2007 1:18 pm    Post subject: Reply with quote
I know you've heard it before, but..

SUCCESS!!! Laughing

I swapped the two interfaces and I think I got it! Here's the full scoop, from start to finish.

1) Create a VWLAN, leave it bridged, and turn off broadcasting. Unbridge your ORIGINAL WLAN, put in 192.168.21.1, 255.255.255.0 - leave broadcasting on.

2) Add the dhcpd options on the Services tab:
Code:
interface=br1
dhcp-range=br1,192.168.21.2,192.168.21.149,255.255.255.0,1h
dhcp-authoritative
dhcp-option=br1,3,192.168.21.254

(note the change from before in the last line)

3) Under Administration->Commands enter these files:

Startup:
Code:
ifconfig br0:0 down
brctl addbr br1
ifconfig br1 192.168.21.254 netmask 255.255.255.0 promisc up
brctl delif br0 eth1
brctl addif br1 eth1
killall dnsmasq
dnsmasq --conf-file /tmp/dnsmasq.conf

(Note the change from wl0.1 to eth1 here - we are removing the ORIGINAL wlan interface and adding it to the new bridge.)

Firewall:
Code:
iptables -I INPUT 9 -i br1 -m state --state NEW -j logaccept
iptables -I FORWARD -i br1 -o vlan1 -j ACCEPT


Set your low-security on the first wireless interface, and high on the new one. I did not have to add a nas line to the startup, it seemed to figure this out on its own. I will try a few reboots, too, but absolutely everything seems to work, including my DS Lite - surfing and downloading homebrew off DSOrganize, NDSMail, and original Nintendo cartridges!

Thanks everyone, I literally couldn't have done it without you!
TheBashar
DD-WRT Novice


Joined: 26 Mar 2007
Posts: 25

PostPosted: Sat Jun 30, 2007 8:08 pm    Post subject: Reply with quote
BoxOfSnoo wrote:
SUCCESS!!! Laughing


Thanks for the write-up BoxOfSnoo. I'm going to give it a try. Quick question. Does Cron still have to be disabled with this latest configuration?

Thanks!
BoxOfSnoo
DD-WRT Novice


Joined: 25 Jun 2007
Posts: 11

PostPosted: Sun Jul 01, 2007 2:12 am    Post subject: Reply with quote
I just did it to be safe. I haven't tried enabling it. I imagine it follows the same principle as the first example in the thread - I only adjusted the interfaces.
onix
DD-WRT User


Joined: 22 Oct 2006
Posts: 92

PostPosted: Mon Jul 09, 2007 3:52 am    Post subject: suggested wiki addition Reply with quote
Guys it would be great to have a multiuser-edit wiki on this topic. Many of us would benefit.
_________________
WRT54GL v1.1 - DD-WRT v24-sp2 (12/18/09) mini
(SVN revision 13491M NEWD Eko)
Running Pennock's Scripts (www.pennock.nl/dd-wrt/Multiple_BSSIDs.html)
zipfruder
DD-WRT Novice


Joined: 27 Aug 2006
Posts: 3

PostPosted: Tue Jul 10, 2007 3:02 pm    Post subject: Reply with quote
I've noticed that access is allowed to the setup page on the virtual wireless network(wl0.1), despite it being set to disabled in the advanced page. wl0 is denied access however.
Eko
DD-WRT Developer/Maintainer


Joined: 07 Jun 2006
Posts: 5358

PostPosted: Tue Jul 10, 2007 3:32 pm    Post subject: Reply with quote
I know this. Will look at it.
Eko
DD-WRT Developer/Maintainer


Joined: 07 Jun 2006
Posts: 5358

PostPosted: Wed Jul 11, 2007 9:02 am    Post subject: Reply with quote
Eko wrote:
I know this. Will look at it.

F I X E D
skinny
DD-WRT Novice


Joined: 17 Jul 2007
Posts: 2

PostPosted: Thu Jul 19, 2007 5:30 am    Post subject: Reply with quote
OK - I tried this out this evening and got it to work.

I did find an issue with the "Startup" script. I had to add an "=" between the "--conf-file" and "/tmp/dnsmasq.conf".

Code:

...
dnsmasq --conf-file=/tmp/dnsmasq.conf


I did note the wide open access to the router admin. I saw the comment that it is fixed. I guess I'll keep an eye out for the update. Meanwhile - is this iptables config acceptable?

Code:

iptables -I INPUT -i br1 -p TCP -d 192.168.21.254 -j logreject
iptables -I INPUT -i br1 -p UDP -d 192.168.21.254 -j logreject


I don't know much about iptables. The above seems to work for blocking access to the router directly through IP.

Thanks for the great thread.
JSpenc87
DD-WRT Novice


Joined: 22 Jul 2007
Posts: 2

PostPosted: Tue Jul 24, 2007 11:52 pm    Post subject: Reply with quote
so I have followed BoxOfSnoo guide to the T but i am at a stand still. I can connect to the virtual interface perfectly with my laptop and it has internet, but with the main interface on the DS lite I can only connect to the access point sometimes and when i do it has no internet connection. Any help would be greatly appreciated.
Goto page Previous  1, 2, 3, 4  Next Display posts from previous:    Page 2 of 4
Post new topic   Reply to topic    DD-WRT Forum Forum Index -> Broadcom SoC based Hardware All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum