mirror of
https://github.com/laurivosandi/certidude
synced 2025-10-31 09:29:13 +00:00
67 lines
2.3 KiB
Plaintext
67 lines
2.3 KiB
Plaintext
# Disable DHCP servers
|
|
/etc/init.d/odhcpd disable
|
|
/etc/init.d/dnsmasq disable
|
|
|
|
# Remove firewall rules since AP bridges ethernet to wireless anyway
|
|
uci delete firewall.@zone[1]
|
|
uci delete firewall.@zone[0]
|
|
uci delete firewall.@forwarding[0]
|
|
for j in $(seq 0 10); do uci delete firewall.@rule[0]; done
|
|
|
|
# Remove WAN interface
|
|
uci delete network.wan
|
|
uci delete network.wan6
|
|
|
|
# Reconfigure DHCP client for bridge over LAN and WAN ports
|
|
uci delete network.lan.ipaddr
|
|
uci delete network.lan.netmask
|
|
uci delete network.lan.ip6assign
|
|
uci delete network.globals.ula_prefix
|
|
uci delete network.@switch_vlan[1]
|
|
uci delete dhcp.@dnsmasq[0].domain
|
|
uci set network.lan.proto=dhcp
|
|
uci set network.lan.ipv6=0
|
|
uci set network.lan.ifname='eth0'
|
|
uci set network.lan.stp=1
|
|
|
|
# Radio ordering differs among models
|
|
case $(uci get wireless.radio0.hwmode) in
|
|
11a) uci rename wireless.radio0=radio5ghz;;
|
|
11g) uci rename wireless.radio0=radio2ghz;;
|
|
esac
|
|
case $(uci get wireless.radio1.hwmode) in
|
|
11a) uci rename wireless.radio1=radio5ghz;;
|
|
11g) uci rename wireless.radio1=radio2ghz;;
|
|
esac
|
|
|
|
# Reset virtual SSID-s
|
|
uci delete wireless.@wifi-iface[1]
|
|
uci delete wireless.@wifi-iface[0]
|
|
|
|
# Pseudorandomize channel selection, should work with 80MHz on 5GHz band
|
|
case $(uci get system.@system[0].hostname | md5sum) in
|
|
1*|2*|3*|4*) uci set wireless.radio2ghz.channel=1; uci set wireless.radio5ghz.channel=36 ;;
|
|
5*|6*|7*|8*) uci set wireless.radio2ghz.channel=5; uci set wireless.radio5ghz.channel=52 ;;
|
|
9*|0*|a*|b*) uci set wireless.radio2ghz.channel=9; uci set wireless.radio5ghz.channel=100 ;;
|
|
c*|d*|e*|f*) uci set wireless.radio2ghz.channel=13; uci set wireless.radio5ghz.channel=132 ;;
|
|
esac
|
|
|
|
# Create bridge for guests
|
|
uci set network.guest=interface
|
|
uci set network.guest.proto='static'
|
|
uci set network.guest.address='0.0.0.0'
|
|
uci set network.guest.type='bridge'
|
|
uci set network.guest.ifname='eth0.156' # tag id 156 for guest network
|
|
uci set network.guest.ipaddr='0.0.0.0'
|
|
uci set network.guest.ipv6=0
|
|
uci set network.guest.stp=1
|
|
|
|
# Disable switch tagging and bridge all ports on TP-Link WDR3600/WDR4300
|
|
case $(cat /etc/board.json | jsonfilter -e '@["model"]["id"]') in
|
|
tl-wdr*)
|
|
uci set network.@switch[0].enable_vlan=0
|
|
uci set network.@switch_vlan[0].ports='0 1 2 3 4 5 6'
|
|
;;
|
|
*) ;;
|
|
esac
|