Changes between Version 47 and Version 48 of WikiStart

Timestamp:

May 6, 2013, 12:08:04 PM (12 years ago)

Author:

walter

Comment:

--

WikiStart

@@ -145 +145 @@
 }}}
 
-#example code#/etc/config/dhcp
+#example code# /etc/config/dhcp
 {{{
 config dnsmasq
@@ -187 +187 @@
 }}}
 
-#example code#/etc/config/firewall
+#example code# /etc/config/firewall
 {{{
 config defaults
@@ -324 +324 @@
 }}}
 
-#example code#/etc/config/network
+#example code# /etc/config/network
 {{{
 # Copyright (C) 2006 OpenWrt.org
@@ -359 +359 @@
 }}}
 
-#example code#/etc/config/system
+#example code# /etc/config/system
 {{{
 config  system
@@ -372 +372 @@
 }}}
 
-#example code#/etc/config/wireless
+#example code# /etc/config/wireless
 {{{
 config wifi-device  radio0 #! names and config parameters are different for wifi architectures, ar71xx,brcm47xx,x86,etc <---
@@ -380 +380 @@
         option hwmode   11bg #when using 5ghz vs 2,4ghz '11na' must be set! <--- 
         option htmode   HT20
+#       option isolate  1 #! TODO test <---
         list ht_capab   SHORT-GI-40
         list ht_capab   TX-STBC
@@ -406 +407 @@
 }}}
 
-#example code#/etc/init.d/openvpn
+#example code# /etc/init.d/openvpn
 {{{
 #!/bin/sh /etc/rc.common
@@ -424 +425 @@
 }}}
 
-#example code#/etc/init.d/sysntpd
+#example code# /etc/init.d/sysntpd
 {{{
 #!/bin/sh /etc/rc.common
@@ -460 +461 @@
 }}}
 
-#example code#/etc/firewall.user
+#example code# /etc/firewall.user
 {{{
 # This file is interpreted as shell script.
@@ -480 +481 @@
 }}}
 
-#example code#/etc/inittab
+#example code# /etc/inittab
 {{{
 ::sysinit:/etc/init.d/rcS S boot
@@ -489 +490 @@
 }}}
 
-#example code#/etc/rc.local
+#example code# /etc/rc.local
 {{{
 # Put your custom commands here that should be executed once
@@ -509 +510 @@
 
 
-#example code#/sbin/wifi-update
+#example code# /sbin/wifi-update
 {{{
 #!/bin/sh
@@ -518 +519 @@
 }}}
 
-#example code#/usr/sbin/iopenvpn
+#example code# /usr/sbin/iopenvpn
 {{{
 #!/bin/sh
@@ -611 +612 @@
 }}}
 
-#example code#/etc/openvpn/easy-rsa/vars
+#example code# /etc/openvpn/easy-rsa/vars
 {{{
 export KEY_COUNTRY="NL"
@@ -642 +643 @@
 }}}
 
-#example code#/usr/local/bin/eduroam-client-openvpn-cert
+#example code# /usr/local/bin/eduroam-client-openvpn-cert
 {{{
 #!/bin/sh
@@ -699 +700 @@
 }}}
 
-#example code#/etc/openvpn/easy-rsa/keys/client.conf
+#example code# /etc/openvpn/easy-rsa/keys/client.conf
 {{{
 client
@@ -917 +918 @@
 svn checkout http://svn.wirelessleiden.nl/svn/code/eduroam-bullet/trunk/files/ /usr/local/etc/ --depth empty
 cd /usr/local/etc/
-rm dhcpd.conf
 svn up dhcpd.conf
 }}}
@@ -947 +947 @@
 
 TODO:
-
+3 de handleiding van de "certnode" creeert natuurlijk een openvpn server op de certnode zelf, nog testen of je openvpn kan verwijderen en de easy-rsa bestande ergens anders kan plaatsten?
 
 sunfire FIXEN?
@@ -956 +956 @@
 TODO Verzin leuke manier om dit in een batch workflow voor veel AP's clients in te passen... denken we vanuit dit concept met tar bestand of moeten we iets maken dat meteen meedere parameters zoals multiSSID ip-adres hostname wifichannel etc meeneemt op basis van MAC adres? Nog uitzoeken welk deel er naar de server moet 4 bestanden ca dh1024 server.crt/key?
 
-geen down script?
-
-Veiligheid aspect, radius authenticatie over zelf tunnels als de clients... 
+geen down.sh script voor openvpn server en client?
+
+Veiligheid aspect, radius authenticatie over zelfde tunnels als de clients... isolation tussen openvpn clients de AP's zelf is actief maar isolate van de wireless users op de client nog teste? 
 
 TFTP without 15sec pen reset