Funkfeuer Graz Wiki

Installing OpenWRT on the router for the first time

Go to the OpenWRT firmware selector. Select your device. Download the “factory” firmware and install it to your router as described on the device's OpenWRT wiki page. (e.g. https://openwrt.org/toh/ubiquiti/edgerouter_x_er-x_ka)

Generating the funkfeuer firmware image

Go to the OpenWRT firmware selector.
Select your device.
Click on “Customize installed packages and/or first boot script”.
Add the following packages to the list

curl mtr iperf3 tcpdump olsrd olsrd-mod-jsoninfo luci-app-olsr ethtool ipip kmod-ipip

Copy the following script and paste it to “Script to run on first boot (uci-defaults)” on the image builder website
Replace xxx in the first line with your location's name
(optional) change LAN_IP and LAN_NET

The script contains some default values that make configuration easier.

#openwrt config script for funkfeuer graz
#written by gabor
export FF_HOSTNAME="xxx.graz.funkfeuer.at"
export LAN_IP="192.168.10.1/24"
export LAN_NET="192.168.10.0/24"

#check if already configured. prevents overwriting settings when upgrading openwrt
[ "$(uci -q get system.@system[0].hostname)" = "$FF_HOSTNAME" ] && exit 0

#disable olsrd6 (not used in ffgraz)
/etc/init.d/olsrd6 stop
/etc/init.d/olsrd6 disable

# /etc/config/dhcp
uci del dhcp.@dnsmasq[0].server
uci del dhcp.@dnsmasq[0].address
uci del dhcp.@dnsmasq[0].filterwin2k
uci del dhcp.@dnsmasq[0].nonegcache
uci del dhcp.@dnsmasq[0].nonwildcard
uci del dhcp.@dnsmasq[0].filter_aaaa
uci del dhcp.@dnsmasq[0].filter_a

#set dns resolver to 10.12.0.10
uci add_list dhcp.@dnsmasq[0].server='10.12.0.10'

#enable reverse dns lookup for 10.12.xxx.xxx addresses
uci add_list dhcp.@dnsmasq[0].address='/.12.10.in-addr.arpa/10.12.0.10'
uci set dhcp.@dnsmasq[0].boguspriv='0'

uci del dhcp.free

uci set dhcp.free=dhcp
uci set dhcp.free.interface='free'
uci set dhcp.free.start='10'
uci set dhcp.free.limit='254'
uci set dhcp.free.leasetime='1h'
uci add_list dhcp.free.dhcp_option='6,10.12.0.10'

# /etc/config/firewall
while uci -q delete firewall.@zone[0]; do :; done
while uci -q delete firewall.@forwarding[0]; do :; done
while uci -q delete firewall.@nat[0]; do :; done
while uci -q delete firewall.@rule[0]; do :; done
uci set firewall.cfg01e63d.synflood_protect='1'
uci add firewall zone # =cfg0edc81
uci set firewall.@zone[-1].name='ff'
uci set firewall.@zone[-1].input='DROP'
uci set firewall.@zone[-1].output='ACCEPT'
uci set firewall.@zone[-1].forward='ACCEPT'
uci add_list firewall.@zone[-1].network='ffeth'
uci add_list firewall.@zone[-1].network='ffwifimesh'

uci add firewall zone
uci set firewall.@zone[-1].name='lan'
uci set firewall.@zone[-1].input='ACCEPT'
uci set firewall.@zone[-1].output='ACCEPT'
uci set firewall.@zone[-1].forward='DROP'
uci add_list firewall.@zone[-1].network='lan'

uci add firewall rule # =cfg0f92bd
uci set firewall.@rule[-1].name='ssh'
uci add_list firewall.@rule[-1].proto='tcp'
uci set firewall.@rule[-1].src='ff'
uci set firewall.@rule[-1].dest_port='22'
uci set firewall.@rule[-1].target='ACCEPT'
uci set firewall.@rule[-1].name='ssh ff'

uci add firewall rule # =cfg1092bd
uci set firewall.@rule[-1].name='olsrd'
uci add_list firewall.@rule[-1].proto='udp'
uci set firewall.@rule[-1].src='ff'
uci set firewall.@rule[-1].dest_port='698'
uci set firewall.@rule[-1].target='ACCEPT'
uci set firewall.@rule[-1].name='olsrd ff'

uci add firewall zone # =cfg11dc81
uci set firewall.@zone[-1].name='free'
uci set firewall.@zone[-1].input='DROP'
uci set firewall.@zone[-1].output='ACCEPT'
uci set firewall.@zone[-1].forward='DROP'
uci add_list firewall.@zone[-1].network='free'

uci add firewall forwarding # =cfg13ad58
uci set firewall.@forwarding[-1].src='lan'
uci set firewall.@forwarding[-1].dest='ff'

uci add firewall forwarding # =cfg12ad58
uci set firewall.@forwarding[-1].src='free'
uci set firewall.@forwarding[-1].dest='ff'

uci add firewall nat # =cfg1393c8
uci set firewall.@nat[-1].name='nat free wifi to ff'
uci add_list firewall.@nat[-1].proto='all'
uci set firewall.@nat[-1].src='ff'
uci set firewall.@nat[-1].src_ip='10.14.0.0/24'
uci set firewall.@nat[-1].target='MASQUERADE'

uci add firewall nat # =cfg1393c8
uci set firewall.@nat[-1].name='nat lan to ff'
uci add_list firewall.@nat[-1].proto='all'
uci set firewall.@nat[-1].src='ff'
uci set firewall.@nat[-1].src_ip="$LAN_NET"
uci set firewall.@nat[-1].target='MASQUERADE'

uci add firewall rule # =cfg1492bd
uci set firewall.@rule[-1].name='web'
uci add_list firewall.@rule[-1].proto='tcp'
uci set firewall.@rule[-1].src='ff'
uci set firewall.@rule[-1].dest_port='80'
uci set firewall.@rule[-1].target='ACCEPT'
uci set firewall.@rule[-1].name='web ff'


uci add firewall rule # =cfg1592bd
uci set firewall.@rule[-1].name='ssh free'
uci add_list firewall.@rule[-1].proto='tcp'
uci set firewall.@rule[-1].src='free'
uci set firewall.@rule[-1].dest_port='22'
uci set firewall.@rule[-1].target='ACCEPT'


uci add firewall rule # =cfg1692bd
uci set firewall.@rule[-1].name='icmp ff'
uci add_list firewall.@rule[-1].proto='icmp'
uci set firewall.@rule[-1].src='ff'
uci set firewall.@rule[-1].target='ACCEPT'

uci add firewall rule # =cfg1792bd
uci set firewall.@rule[-1].name='icmp free'
uci add_list firewall.@rule[-1].proto='icmp'
uci set firewall.@rule[-1].src='free'
uci set firewall.@rule[-1].target='ACCEPT'

uci add firewall rule # =cfg0c92bd
uci set firewall.@rule[-1].name='dhcp free'
uci add_list firewall.@rule[-1].proto='udp'
uci set firewall.@rule[-1].src='free'
uci set firewall.@rule[-1].src_port='68'
uci set firewall.@rule[-1].dest_port='67'
uci set firewall.@rule[-1].target='ACCEPT'

# /etc/config/network
uci del network.wan
uci del network.wan6

uci del network.lan.netmask
uci del network.lan.ipaddr
uci add_list network.lan.ipaddr="$LAN_IP"

uci del network.globals.ula_prefix
uci set network.globals.packet_steering='1'

uci add network device # =cfg080f15
uci set network.@device[-1].type='bridge'
uci set network.@device[-1].name='br-free'
uci set network.@device[-1].bridge_empty='1'

uci del network.free
uci set network.free=interface
uci set network.free.device='br-free'
uci set network.free.proto='static'
uci add_list network.free.ipaddr='10.14.0.1/24'

# /etc/config/wireless
i=0
while uci -q get "wireless.radio$i"
do
 uci set wireless.wifinetfree$i=wifi-iface
 uci set wireless.wifinetfree$i.device=radio$i
 uci set wireless.wifinetfree$i.mode='ap'
 uci set wireless.wifinetfree$i.ssid='Free WiFi - graz.funkfeuer.at'
 uci set wireless.wifinetfree$i.encryption='none'
 uci set wireless.wifinetfree$i.network='free'
 uci set wireless.wifinetfree$i.disabled='1'
 i=$(( $i + 1 ))
done

# /etc/config/system
uci del system.ntp.enabled
uci del system.ntp.enable_server
uci set system.cfg01e48a.hostname=$FF_HOSTNAME
uci set system.cfg01e48a.zonename='Europe/Vienna'
uci set system.cfg01e48a.timezone='CET-1CEST,M3.5.0,M10.5.0/3'
uci set system.cfg01e48a.log_proto='udp'
uci set system.cfg01e48a.conloglevel='8'
uci set system.cfg01e48a.cronloglevel='5'
# /etc/config/wireless

while uci -q delete olsrd.@Interface[0]; do :; done

uci set olsrd.@LoadPlugin[-1].ignore='0'
uci set olsrd.@LoadPlugin[-1].library='olsrd_jsoninfo'

while uci -q delete olsrd.@InterfaceDefaults[0]; do :; done
uci add olsrd InterfaceDefaults
uci set olsrd.@InterfaceDefaults[-1].Mode='ether'
uci set olsrd.@InterfaceDefaults[-1].Ip4Broadcast='255.255.255.255'

Click on “Request Build” and wait for the build to complete.
Download the newly built custom sysupgrade image
Log in to your router using the web interface (http://192.168.1.1)
Go to “System→Backup/Flash Firmware”
Click on “Flash image” and select your newly downloaded sysupgrade image.
Untick the box “Keep settings and retain the current configuration”
Click “Continue”

Accessing the router

After the installation has completed the router should be reachable by connecting to it LAN port using the configured LAN_IP (192.168.10.1 as default).

TODO: add interfaces for olsrd, setup olsrd, setup wifi, setup free wifi

diverse ergaenzungen und configs, noch zu pruefen (w 20260228)

vim /etc/crontabs/root

*/5 *	* * *	killall -HUP dnsmasq # keine ahnung warum - zu pruefen
*/5 *	* * *	/usr/sbin/ff_olsr_watchdog # keine ahnung warum - zu pruefen
###
#05 3	* * 6	/sbin/reboot # zur sicherheit einmal in der woche reboot oder
05 3	* * *	/bin/sleep 65m ; /sbin/reboot # reboot zur sicherheit einmal am tag; der sleep fuer den fall das die rtc-batterie leer und timeserver nicht sofort erreichbar ist
#10 *	* * *	/usr/bin/iwinfo radio0 scan # initialisiert das wlan, bei schlechten verbindungen - zu pruefen
###

vim /etc/config/wireless

2,4ghz

### info: achtung, bei aenderungen uebers webinterface werden die kommentare geloescht!

config wifi-device 'radio0'
	option type 'mac80211'
	### nicht mehr unterstuetzt?
	#option hwmode '11g'
	### nicht mehr unterstuetzt?
	#option path 'platform/ar934x_wmac'
	option path 'platform/ahb/18100000.wmac'
	### neue option - ab welcher openwrt-version gueltig?
	option band '2g'
	option country 'AT' 
	option htmode 'HT20'
	### frag:
	### Set Fragmentation Threshold value between 800 . 1500
	### Available Settings: range from 256 to 2346 (?) 2346 recomended
	option frag '512'
	### rts:
	### set RTS Threshold value between 1800 . 2300                   
	### Available Settings: range from 0 to 2347, Default + Recommended Setting: 2347
	option rts '250'
	### txpower: 20 max!, aber so niedrig wie moeglich
	option txpower '3'
	### distace: tatsaechliche entfernung in meter
	option distance '1000' 
	#option channel '1'
	#option channel '3'
	#option channel '5'
	#option channel '7'
	#option channel '9'
	#option channel '11'
	option channel '13'
	### zum testen 20170521
	#option disabled '1'

config wifi-iface 'default_radio0'
	option device 'radio0'
	option network 'wlan'
	option encryption 'none'
	option mode 'adhoc'
	#option ssid 'http://graz.funkfeuer.at/v1'
	#option bssid 'CA:00:24:00:C0:01'
	#option ssid 'http://graz.funkfeuer.at/v3'
	#option bssid 'CA:00:24:00:C0:03'
	#option ssid 'http://graz.funkfeuer.at/v5'
	#option bssid 'CA:00:24:00:C0:05'
	#option ssid 'http://graz.funkfeuer.at/v7'
	#option bssid 'CA:00:24:00:C0:07'
	#option ssid 'http://graz.funkfeuer.at/v9'
	#option bssid 'CA:00:24:00:C0:09'
	#option ssid 'http://graz.funkfeuer.at/v11'
	#option bssid 'CA:00:24:00:C0:11'
	option ssid 'http://graz.funkfeuer.at/v13'
	option bssid 'CA:00:24:00:C0:13'

5,6ghz

### info: achtung, bei aenderungen uebers webinterface werden die kommentare geloescht!

config wifi-device 'radio0'
	option type 'mac80211'
	option hwmode '11a'
	option path 'platform/ar934x_wmac'
	option country 'AT' 
	option htmode 'HT20'
	### frag:
	### Set Fragmentation Threshold value between 800 . 1500
	### Available Settings: range from 256 to 2346 (?) 2346 recomended
	### frag: fuer 5,6ghz bei grosser entfernung / schlechten empfang -> 800
	option frag '800'
	### rts:
	### set RTS Threshold value between 1800 . 2300                   
	### Available Settings: range from 0 to 2347, Default + Recommended Setting: 2347
	### rts: fuer 5,6ghz bei grosser entfernung / schlechten empfang -> 2300
	option rts '2300'
	### txpower: 20 max!
	### keine txpower bei 5,6 - zu pruefen
	#option txpower '3'
	### distace: tatsaechliche entfernung in meter
	option distance '1000' 
	#option channel '36'
	#option channel '40'
	#option channel '44'
	#option channel '48'
	#option channel '100'
	#option channel '104'
	#option channel '108'
	#option channel '112'
	#option channel '116'
	#option channel '120'
	#option channel '124'
	#option channel '128'
	#option channel '136'
	option channel '140'
	### keine ahnung warum, ist aber gut ;)
	option beacon_int '5000'
	### zum testen 20170521
	#option disabled '1'

config wifi-iface
	option device 'radio0'
	option network 'wlan'
	### haben wir einen accesspoint 'ap' oder eine 'station'?
	#option mode 'ap'                                                     
	option mode 'sta'
	option encryption 'none'
	### bitte nodebezeichnung ergaenzen: aktueller standort xxx1, gegenseite xxx2
	option ssid 'xxx1-xxx2.ffgraz.net'
	#option ssid 'OpenWrt'
	### https://forum.openwrt.org/viewtopic.php?id=43188                             
	option disassoc_low_ack '0'

Table of Contents

Installing OpenWRT on the router for the first time

Generating the funkfeuer firmware image

Accessing the router

TODO: add interfaces for olsrd, setup olsrd, setup wifi, setup free wifi

diverse ergaenzungen und configs, noch zu pruefen (w 20260228)