OpenWrt Forum Archive

Topic: Kamikaze newbie - WPA-Ent, VLAN, etc.

The content of this topic has been archived on 30 Apr 2018. There are no obvious gaps in this topic, but there may still be some posts missing at the end.

Hi,

I'm sorry I think I will ask simple questions.
My router is: Linksys WRT54GL v1.0

I've used WhiteRussian since 5 years. I have a 4 leg router. I'd like to configure this on my
router with Kamikaze. I installed the image.

1. What package I need for WPA(2)-EAP-TLS AP?
From the default image it is missing now.

2. How can I add a secondary IP address for the default interfaces (br-lan, eth0, eth0.0;1)?
I want to setup a route for my test network temporary to use opkt. In WhiteRussian I can setup
a vlan0:0 interface with the needed IP address.

3. How can I setup a VLAN on LAN port 1 without any bridging?
I tried out many situation. I did an eth0.2 port and I gave an IP address for it without success.
I don't have eth0.2 interface when I ssh'd to the router.

4. Where the configurated parameters from WEB GUI are stored? I checked nvram show ...

TIA,

lizby wrote:

4, Kamikaze configurations are in files in /etc/config.  The best explanation I have seen for this is here:  http://wiki.openwrt.org/doc/uci

Thanks!

I found the network config file.
I created a new interface lan1 by hand:

config 'interface' 'lan1'
    option 'proto' 'static'
    option 'netmask' '255.255.255.0'
    option 'defaultroute' '0'
    option 'peerdns' '0'
    option 'ifname' 'eth0.2'
    option 'ipaddr' '192.168.7.4'

Now I've got eth0.2 interface. I hope it is working. How can I make this by WEB GUI?

Remained items are: 1;2.

TIA,

aruzsi wrote:

Remained items are: 1;2.

I configured the second IP address for my eth0.2:0 interface. So item 2 was solved.

New question: can I change the MAC of my interfaces? In the network file?

Now I try to install some packages, like ntpclient (or ntp) and quagga. Is there bird
package for OpenWRT? I just need OSPFv2 because my router is very small (RAM+flash).

TIA,

I found for WPA(2)-EAP-TLS this:

802.1x configurations OpenWrt supports both 802.1x client and Access Point configurations. 802.1x client is only working with Atheros or mac80211 drivers. Configuration only supports EAP types TLS, TTLS or PEAP.

EAP-TLS
  config wifi-iface
      option device         "ath0"
      option network        lan
      option ssid           OpenWrt
      option eap_type       tls
      option ca_cert        "/etc/config/certs/ca.crt"
      option priv_key       "/etc/config/certs/priv.crt"
      option priv_key_pwd   "PKCS#12 passphrase"

Is this true? Doesn't work with my Broadcom????

Why are there cert options in AP config? I thought it was in (Free)RADIUS server config. I think I am confused now.
A config for AP, please! My situation: WLAN clients; WRT54GL AP, FreeRADIUS server.

TIA,

MAC address changes solved.

WPA(2)-EAP-TLS seems working:

root@OpenWrt:/mnt/shfs# iwlist wl0 auth
wl0       Authentication capabilities :
        WPA
        WPA2
        CIPHER-TKIP
        CIPHER-CCMP
          Current WPA version :
        WPA2
          Current Key management :
        802.1x
          Current Pairwise cipher :
        none
          Current Pairwise cipher :
        none
          Current TKIP countermeasures : no
          Current Drop unencrypted : yes
          Current Authentication algorithm :
        open
          Current Receive unencrypted EAPOL : no
          Current Roaming control : no
          Current Privacy invoked : no

My original questions were solved. WLAN test will be soon ...

Newer questions related to the very strict resources namely flash storage.

I've read oldwiki:remotefilesystemhowto. I've choosed shfs. It is working.
How can I go further? Mounting automaticly at boot time, using for opkt,
or running applications from it?

Can I put swap on that fs?

TIA,

I configured WPA(2)-EAP-TLS by hand.
I checked it by WEB GUI and I can see nothing! WEB GUI show me an unconfigured wl0 interface. :-(

Is that my mistake?

TIA,

Did you get this working i.e. Client mode EAP TLS WPA2?

Is any one else doing this?

Should I be able to do this from the Luci GUI?

PeterF wrote:

Did you get this working i.e. Client mode EAP TLS WPA2?

No. I tried it in AP mode not in client.

The discussion might have continued from here.