# Generat per a:
# DD-guifi
#
# unsolclic version: v3.6-beta
# obre una sessio telnet/ssh en el teu trasto i executa aquestscript.
# Nota: Fes servir l'Status/Wireless survey per verificar que
# tens l'antena ben endollada i configurada. La dreta es probablement
# la que tens a la dreta si el mires des del davant (on hi han els
# leds). Si et cal, canvia el connector des de la configuracio via
# wev anant a Wireless->Advanced Settings.
# Security notes:
# Once this script is executes, the router password for root/admin users is "guifi"
# You must change this password if you want to keep it secret. If you like to still
# be managed externally, you must install a trusted ssh key. Upon request, your setup
# might be asked for being inspected to check the Wireless Commons compliance.
# No firewall rules are allowed in the public network area.
# By being in client mode, the router has the firewall enabled to distinguish between
# private and public areas, and only SNMP, ssh and https 8080 ports are enabled
# for external administration. Everything else is closed, therefore you might
# have to open ports to share resources.
#
# TonaAjAPEst
# Parametres globals de la xarxa
nvram set router_name="TonaAjAPEst"
nvram set wan_hostname="TonaAjAPEst"
nvram set lan_ipaddr="10.138.62.97"
nvram set lan_gateway="0.0.0.0"
nvram set lan_netmask="255.255.255.224"
nvram set wan_proto="disabled"
nvram set lan_domain="guifi.net"
nvram set wan_domain="guifi.net"
nvram set http_passwd="guifi"
nvram set time_zone="+01 2 2"
nvram set sv_localdns="10.138.38.211"
nvram set wl_net_mode="b-only"
nvram set wl0_net_mode="b-only"
nvram set wl_afterburner="on"
nvram set wl_frameburst="on"
nvram set txpwr="28"
nvram set txant="0"
nvram set wl0_antdiv="0"
nvram set wl_antdiv="0"
nvram set block_wan="0"
#
# Gestio
nvram set telnetd_enable="1"
nvram set sshd_enable="1"
nvram set sshd_passwd_auth="1"
nvram set remote_management="1"
nvram set remote_mgt_https="1"
nvram set snmpd_enable="1"
nvram set snmpd_sysname="guifi.net"
nvram set snmpd_syscontact="guifi_at_guifi.net"
nvram set boot_wait="on"
# This is just a fake key. You must install a trusted key if you like to have you router managed externally
nvram set sshd_authorized_keys="
ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAwWNX4942fQExw4Hph2M/sxOAWVE9PB1I4JnNyhoWuF9v\
id0XcU34kwWqBBlI+LjDErCQyaR4ysFgDX61V4kUuCKwBOMp+UGxhL648VTv5Qji/YwvIzt7nguUOZ5A\
GPISqsC0717hc0Aja1mvHkQqg9aXKznmszmyKZGhcm2+SU8= root@bandoler.guifi.net\
"
nvram set http_enable="1"
nvram set https_enable="1"
#
# NTP Network time protocol
nvram set ntp_enable="1"
nvram set ntp_server="10.138.38.211"
#
# Mode AP
nvram set wl_mode="ap"
nvram set wl0_mode="ap"
nvram set wl_channel="1"
nvram set wl_ssid="guifi.net-TonaAjAPEst"
nvram set wl_macmode="disable"
nvram set wl0_macmode="disable"
nvram set wl_macmode1="disable"
nvram set wl0_macmode1="disable"
#
# Tallafocs desactivat
nvram set filter="off"
# DD-WRT OSPF routing
nvram set wk_mode="ospf"
nvram set routing_lan="on"
nvram set routing_wan="on"
nvram set routing_ospf="on"
nvram set dr_setting="3"
nvram set dr_lan_rx="1 2"
nvram set dr_lan_tx="1 2"
nvram set dr_wan_rx="1 2"
nvram set dr_wan_tx="1 2"
#
# DHCP
nvram set static_leases="FF:FF:FF:FF:FF:FF=TonaCFigueresRadio1=10.138.62.98 00:1D:7E:28:12:BD=TonaBastidaRadio1=10.138.62.99 FF:FF:FF:FF:FF:FF=TonaGuimeraRadio1=10.138.62.100 FF:FF:FF:FF:FF:FF=TonaJCortacansRadio1=10.138.62.101 FF:FF:FF:FF:FF:FF=TonaATioRadio1=10.138.62.102 00:16:01:F4:C8:0C=SevaRoviraRadio1=10.138.62.103 FF:FF:FF:FF:FF:FF=TonaVDiazRadio1=10.138.62.104 00:18:39:C6:26:AD=TonaFMolistRadio1=10.138.62.105 FF:FF:FF:FF:FF:FF=TonaFPerezRadio1=10.138.62.106 "
nvram set static_leasenum="9"
nvram set dhcp_start="111"
#
# Enllacos WDS per TonaAjAPEst
# 251-TonaAusatelAP
nvram set wl_wds1_desc="TonaAusatelAP"
nvram set wl_wds1_enable="1"
nvram set wl_wds1_if="wds0.49153"
nvram set wl_wds1_ipaddr="172.25.1.161"
nvram set wl_wds1_hwaddr="00:12:17:DE:1D:29"
nvram set wl_wds1_netmask="255.255.255.252"
#
# Slots WDS lliures
nvram set wl_wds2_desc="Lliure"
nvram set wl_wds2_enable="0"
nvram set wl_wds2_ipaddr="172.0.0.0"
nvram set wl_wds2_hwaddr="00:13:00:00:00:00"
nvram set wl_wds2_netmask="255.255.255.252"
nvram set wl_wds3_desc="Lliure"
nvram set wl_wds3_enable="0"
nvram set wl_wds3_ipaddr="172.0.0.0"
nvram set wl_wds3_hwaddr="00:13:00:00:00:00"
nvram set wl_wds3_netmask="255.255.255.252"
nvram set wl_wds4_desc="Lliure"
nvram set wl_wds4_enable="0"
nvram set wl_wds4_ipaddr="172.0.0.0"
nvram set wl_wds4_hwaddr="00:13:00:00:00:00"
nvram set wl_wds4_netmask="255.255.255.252"
nvram set wl_wds5_desc="Lliure"
nvram set wl_wds5_enable="0"
nvram set wl_wds5_ipaddr="172.0.0.0"
nvram set wl_wds5_hwaddr="00:13:00:00:00:00"
nvram set wl_wds5_netmask="255.255.255.252"
nvram set wl_wds6_desc="Lliure"
nvram set wl_wds6_enable="0"
nvram set wl_wds6_ipaddr="172.0.0.0"
nvram set wl_wds6_hwaddr="00:13:00:00:00:00"
nvram set wl_wds6_netmask="255.255.255.252"
nvram set wl_wds7_desc="Lliure"
nvram set wl_wds7_enable="0"
nvram set wl_wds7_ipaddr="172.0.0.0"
nvram set wl_wds7_hwaddr="00:13:00:00:00:00"
nvram set wl_wds7_netmask="255.255.255.252"
nvram set wl_wds8_desc="Lliure"
nvram set wl_wds8_enable="0"
nvram set wl_wds8_ipaddr="172.0.0.0"
nvram set wl_wds8_hwaddr="00:13:00:00:00:00"
nvram set wl_wds8_netmask="255.255.255.252"
nvram set wl_wds9_desc="Lliure"
nvram set wl_wds9_enable="0"
nvram set wl_wds9_ipaddr="172.0.0.0"
nvram set wl_wds9_hwaddr="00:13:00:00:00:00"
nvram set wl_wds9_netmask="255.255.255.252"
nvram set wl_wds10_desc="Lliure"
nvram set wl_wds10_enable="0"
nvram set wl_wds10_ipaddr="172.0.0.0"
nvram set wl_wds10_hwaddr="00:13:00:00:00:00"
nvram set wl_wds10_netmask="255.255.255.252"
nvram set wl0_wds=" 00:12:17:DE:1D:29"
nvram set wl0_lazywds="0"
nvram set wl_lazywds="0"
#
#
# VLANs -- radio: 3825-TonaAjAPEst
nvram set vlan2hwname="et0"
nvram set vlan3hwname="et0"
nvram set vlan4hwname="et0"
nvram set vlan0ports="4 3 5*"
nvram set vlan1ports="4 5"
nvram set vlan2ports="2 5"
nvram set vlan3ports="1 5"
nvram set vlan4ports="0 5"
#
nvram set rc_startup="#!/bin/ash
#
# unsolclic: v3.6-beta
# radio: 3825-TonaAjAPEst
#
#
# VLANs -- radio: 3825-TonaAjAPEst
# vlan2: TonaAjuntament
ifconfig vlan2 172.25.2.133 netmask 255.255.255.252 broadcast 172.25.2.135
/bin/sleep 10
/usr/sbin/wl shortslot_override 0
ifconfig eth1 -promisc -allmulti
ifconfig br0 -promisc -allmulti
ifconfig eth0 promisc"
#
# Fi del script i reiniciar
nvram commit
reboot