# Generated for:
<br /># DD-guifi
<br /># 
<br /># unsolclic version: v3.6-beta
<br /># open a telnet/ssh session on your device and run the script below.
<br /># Note: Use Status/Wireless survey to verify that you have the
<br /># antenna plugged in the right connector. The right antena is probably
<br /># the one which is at the right, looking the WRT54G from the front
<br /># (where it have the leds). If needed, change the antenna connector
<br /># at Wireless->Advanced Settings.
<br /># Security notes:
<br /># Once this script is executes, the router password for root/admin users is "guifi"
<br /># You must change this password if you want to keep it secret. If you like to still
<br /># be managed externally, you must install a trusted ssh key. Upon request, your setup
<br /># might be asked for being inspected to check the Wireless Commons compliance.
<br /># No firewall rules are allowed in the public network area.
<br /># By being in client mode, the router has the firewall enabled to distinguish between
<br /># private and public areas, and only SNMP, ssh and https 8080 ports are enabled
<br /># for external administration. Everything else is closed, therefore you might
<br /># have to open ports to share resources.
<br /># 
<br /># neguhouseRadio1
<br /># Global network parameters
<br />nvram set router_name="neguhouseRadio1"
<br />nvram set wan_hostname="neguhouseRadio1"
<br />nvram set wan_proto="static"
<br />nvram set wan_ipaddr="10.138.60.175"
<br />nvram set wan_netmask="255.255.255.224"
<br />nvram set fullswitch="1"
<br />nvram set wan_dns="10.138.50.194 10.138.25.68 10.138.0.2"
<br />nvram set lan_domain="guifi.net"
<br />nvram set wan_domain="guifi.net"
<br />nvram set http_passwd="guifi"
<br />nvram set time_zone="+01 2 2"
<br />nvram set sv_localdns="10.138.50.194"
<br />nvram set wl_net_mode="b-only"
<br />nvram set wl0_net_mode="b-only"
<br />nvram set wl_afterburner="on"
<br />nvram set wl_frameburst="on"
<br />nvram set txpwr="28"
<br />nvram set txant="0"
<br />nvram set wl0_antdiv="0"
<br />nvram set wl_antdiv="0"
<br />nvram set block_wan="0"
<br /># 
<br /># Management
<br />nvram set telnetd_enable="1"
<br />nvram set sshd_enable="1"
<br />nvram set sshd_passwd_auth="1"
<br />nvram set remote_management="1"
<br />nvram set remote_mgt_https="1"
<br />nvram set snmpd_enable="1"
<br />nvram set snmpd_sysname="guifi.net"
<br />nvram set snmpd_syscontact="guifi_at_guifi.net"
<br />nvram set boot_wait="on"
<br /># This is just a fake key. You must install a trusted key if you like to have you router managed externally
<br />nvram set sshd_authorized_keys="
<br />ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAwWNX4942fQExw4Hph2M/sxOAWVE9PB1I4JnNyhoWuF9v\
<br />id0XcU34kwWqBBlI+LjDErCQyaR4ysFgDX61V4kUuCKwBOMp+UGxhL648VTv5Qji/YwvIzt7nguUOZ5A\
<br />GPISqsC0717hc0Aja1mvHkQqg9aXKznmszmyKZGhcm2+SU8= root@bandoler.guifi.net\
<br />"
<br />nvram set http_enable="1"
<br />nvram set https_enable="1"
<br /># 
<br /># NTP Network time protocol
<br />nvram set ntp_enable="1"
<br />nvram set ntp_server="10.138.15.130"
<br /># 
<br /># Client mode
<br />nvram set wl_mode="sta"
<br />nvram set wl0_mode="sta"
<br />nvram set wl_ssid="guifi.net-TorelloCalsAvisAP1"
<br />nvram set wan_gateway="10.138.60.161"
<br />nvram set wl_macmode="disabled"
<br />nvram set wl0_macmode="disabled"
<br />nvram set wl_macmode1="disabled"
<br />nvram set wl0_macmode1="disabled"
<br /># 
<br /># Gateway routing
<br />nvram set wk_mode="gateway"
<br />nvram set dr_setting="0"
<br />nvram set route_default="1"
<br />nvram set dr_lan_rx="0"
<br />nvram set dr_lan_tx="0"
<br />nvram set dr_wan_rx="0"
<br />nvram set dr_wan_tx="0"
<br />nvram set dr_wan_tx="0"
<br /># Firewall enabled
<br />nvram set filter="on"
<br />nvram set rc_firewall="
<br />/usr/sbin/iptables -I INPUT -p udp --dport 161 -j ACCEPT; /usr/sbin/iptables -I \
<br />INPUT -p tcp --dport 22 -j ACCEPT\
<br />"
<br /># 
<br /># 
<br />nvram set rc_startup="#!/bin/ash
<br /># 
<br />#  unsolclic: v3.6-beta
<br />#  radio:     8138-neguhouseRadio1
<br /># 
<br /># 
<br />    /bin/sleep 10
<br />    /usr/sbin/wl shortslot_override 0
<br />    ifconfig eth1 -promisc -allmulti
<br />    ifconfig br0 -promisc -allmulti
<br />    ifconfig eth0 promisc"
<br /># 
<br /># end of script and reboot
<br />    nvram commit
<br />    reboot
<br />