Relais "besik" (configuration)

Ce relais communique avec pomme. Il est lié au routeur PinotNoir.

Temporairement:

/etc/init.d/firewall disable

/etc/config/system

config system
    option timezone 'UTC'
    option community 'Commotion'
    option homepage 'http://thisnode/commotion/index/apps'
    option hostname 'besik-1359772340'

config timeserver 'ntp'
    list server '0.openwrt.pool.ntp.org'
    list server '1.openwrt.pool.ntp.org'
    list server '2.openwrt.pool.ntp.org'
    list server '3.openwrt.pool.ntp.org'
    option enable_server '0'

/etc/config/network

config interface 'loopback'
    option ifname 'lo'
    option proto 'static'
    option ipaddr '127.0.0.1'
    option netmask '255.0.0.0'

config interface 'lan'
    option class 'client'
    option type 'bridge'
    option ip6addr 'fd2a:6112:3d26:0001::1/64'
    option proto 'static'
    option ipaddr '10.122.180.1'
    option netmask '255.255.255.0'

config interface 'wired'
    option ifname 'eth0'
    option proto 'commotion'
    option class 'wired'
    option meshed 'false'
    option dhcp 'server'

config alias 'thisnode'
    option interface 'lan'
    option proto 'static'
    option ipaddr '169.254.122.180'
    option netmask '255.255.0.0'

config interface 'relais_46besik_46reseaulibre_46ca'
    option class 'mesh'
    option proto 'babel'
    option profile 'relais_46besik_46reseaulibre_46ca'

/etc/config/wireless

config wifi-device 'radio0'
    option type 'mac80211'
    option hwmode '11ng'
    option macaddr '68:72:51:0c:7a:b4'
    option htmode 'HT20'
    list ht_capab 'SHORT-GI-40'
    list ht_capab 'TX-STBC'
    list ht_capab 'RX-STBC1'
    list ht_capab 'DSSS_CCK-40'
    option disabled '0'
    option channel '1'

config wifi-iface 'commotionAP'
    option network 'lan'
    option mode 'ap'
    option ssid 'acces.besik.reseaulibre.ca'
    option device 'radio0'
    option encryption 'none'

config wifi-iface 'commotionMesh'
    option mode 'adhoc'
    option network 'relais_46besik_46reseaulibre_46ca'
    option ssid 'relais.besik.reseaulibre.ca'
    option proto 'babel'
    option device 'radio0'
    option encryption 'none'

/etc/config/babeld

config general
    option hello_interval '4'
    option wired_hello_interval '10'
    option local_server '33123'
    option conf_file '/etc/babeld.conf'
    option log_file '/var/log/babeld.log'

config interface 'relais_46besik_46reseaulibre_46ca'

/etc/babeld.conf

interface br-lan wired true

redistribute local ip 192.168.0.0/16 deny
redistribute local ip 10.0.0.0/8 deny
redistribute ip 192.168.0.0/16 deny
redistribute ip 10.0.0.0/8 deny
redistribute proto 2

/etc/config/dhcp

config dnsmasq
    option domainneeded '1'
    option boguspriv '1'
    option filterwin2k '0'
    option localise_queries '1'
    option rebind_protection '1'
    option rebind_localhost '1'
    option local '/mesh.local/'
    option domain 'mesh.local'
    option expandhosts '1'
    option nonegcache '0'
    option authoritative '1'
    option readethers '1'
    option leasefile '/tmp/dhcp.leases'
    option resolvfile '/tmp/resolv.conf.auto'
    list   addnhosts '/var/run/hosts_olsr'
    list   dhcp_option '3'

config dhcp
    option interface 'lan'
    option start '2'
    option limit '150'
    option leasetime '12h'
    option ignore '0'

/etc/config/radvd

config interface
    option interface 'lan'
    option AdvSendAdvert '1'
    option AdvManagedFlag '0'
    option AdvOtherConfigFlag '0'
    list client ''
    option ignore '0'

config prefix
    option interface 'lan'
    option AdvOnLink '1'
    option AdvAutonomous '1'
    option prefix 'fd2a:6112:3d26:0001::1/64'
    option ignore '0'
    option AdvRouterAddr '1'

/etc/config/nodogsplash

config settings 'settings'
    option splashunit 'hours'
    option enable '1'
    option splashtime '1'
    option redirect '0'
    option autoauth '0'
    option MaxClients 100

config interfaces 'interfaces'
    option interface 'br-lan'

config MACList whitelist

config MACList blacklist

config FirewallRuleSet preauthenticated_users
    list FirewallRule 'allow tcp port 53'
    list FirewallRule 'allow udp port 53'
    list FirewallRule 'allow tcp port 443'
    list FirewallRule 'allow to 10.0.0.0/8'
    list FirewallRule 'allow to 169.254.0.0/16'
    list FirewallRule 'allow to 100.64.0.0/10'

config FirewallRuleSet authenticated_users
    list FirewallRule 'allow all'

config FirewallRuleSet users_to_router
    list FirewallRule 'allow all'