HowTo Configurazione AirOS in shell mode
for firmware AirOs 5.3.3 sdk
Apriamo una shell ed entriamo nel device
ssh root@IP_DEL_DEVICE Using username "root". Authenticating with public key "localhost@localdomain" BusyBox v1.11.2 (2011-12-21 20:31:59 CET) built-in shell (ash) Enter 'help' for a list of built-in commands. XM.v5.3.3.sdk#
Quindi andiamo ora a vedere come è fatto il nostro file di configurazione digitando
XM.v5.3.3.sdk# vi /tmp/system.cfg
ed iniziamo ad editarlo.
In questa prima sezione non è necessario apportare modifiche, ma la incollo per conoscenza
aaa.1.status=disabled aaa.status=disabled bridge.1.devname=br0 bridge.1.fd=1 bridge.1.port.1.devname=eth0 bridge.1.port.1.status=enabled bridge.1.port.2.devname=ath0 bridge.1.port.2.status=enabled bridge.1.port.3.devname=eth1 bridge.1.port.3.status=enabled bridge.status=disabled dhcpc.1.devname=br0 dhcpc.1.status=disabled dhcpc.status=disabled dhcpd.1.status=disabled dhcpd.status=disabled dnsmasq.1.devname=eth0 dnsmasq.1.status=enabled dnsmasq.status=enabled dyndns.status=disabled ebtables.1.cmd=-t nat -A PREROUTING --in-interface ath0 -j arpnat --arpnat-target ACCEPT ebtables.1.status=enabled ebtables.2.cmd=-t nat -A POSTROUTING --out-interface ath0 -j arpnat --arpnat-target ACCEPT ebtables.2.status=enabled ebtables.3.cmd=-t broute -A BROUTING --protocol 0x888e --in-interface ath0 -j DROP ebtables.3.status=disabled ebtables.50.status=disabled ebtables.51.status=disabled ebtables.52.status=disabled ebtables.status=disabled gpio.1.direction=1 gpio.1.line=8 gpio.1.status=enabled gpio.1.value=disabled gpio.status=enabled gui.language=en_US
Https Mode
Abilitiamo la porta '443' per collegarci via interfaccia web in maniera sicura, la porta '80' rimarrà attiva ma reinderizzata automaticamente in https
httpd.https.port=443 httpd.https.status=enabled httpd.port=80 httpd.session.timeout=900 httpd.status=enabled
Anche qui di seguito non sono necessari interventi
igmpproxy.status=disabled iptables.1.cmd=-t nat -I POSTROUTING -o ath0 -j MASQUERADE iptables.1.status=disabled iptables.2.status=disabled iptables.200.status=disabled iptables.3.status=disabled iptables.4.status=disabled iptables.5.status=disabled iptables.50.status=disabled iptables.51.status=disabled iptables.52.status=disabled iptables.status=disabled
Network
Qui possiamo modificare i parametri relativi alla nostra rete
netconf.1.autoip.status=disabled netconf.1.autoneg=enabled netconf.1.devname=eth0 netconf.1.duplex=enabled netconf.1.hwaddr.status=disabled netconf.1.hwaddr= netconf.1.ip=LAN_IP netconf.1.mtu=1500 netconf.1.netmask=LAN_SUBNET netconf.1.promisc=enabled netconf.1.speed=100 netconf.1.status=enabled netconf.1.up=enabled netconf.2.allmulti=enabled netconf.2.autoip.status=disabled netconf.2.devname=ath0 netconf.2.hwaddr.status=disabled netconf.2.hwaddr= netconf.2.ip=WLAN_IP netconf.2.mtu=1500 netconf.2.netmask=WLAN_SUBNET netconf.2.promisc=enabled netconf.2.status=enabled netconf.2.up=enabled
Non ci interessa ...
netconf.3.alias.1.status=disabled netconf.3.alias.2.status=disabled netconf.3.alias.3.status=disabled netconf.3.alias.4.status=disabled netconf.3.alias.5.status=disabled netconf.3.alias.6.status=disabled netconf.3.alias.7.status=disabled netconf.3.alias.8.status=disabled netconf.3.autoip.status=disabled netconf.3.devname=br0 netconf.3.hwaddr.status=disabled netconf.3.ip=192.168.1.20 netconf.3.netmask=255.255.255.0 netconf.3.status=disabled netconf.3.up=enabled netconf.4.autoip.status=disabled netconf.4.devname=eth1 netconf.4.hwaddr.status=disabled netconf.4.mtu=1500 netconf.4.up=enabled netconf.5.autoip.status=disabled netconf.5.devname=ath1 netconf.5.mtu=1500 netconf.6.status=disabled netconf.status=enabled netmode=router
Qui possiamo inserire/modificare il timeserver
ntpclient.1.server=time.ien.it ntpclient.1.status=enabled ntpclient.status=enabled
Se usiamo OLSRd è bene abilitarlo
olsrd.status=enabled
Non occorrono modifiche
ppp.1.password= ppp.1.status=disabled ppp.status=disabled pwdog.status=disabled
Radio Interface
radio.1.ack.auto=enabled radio.1.ackdistance=600 radio.1.acktimeout=25 radio.1.ampdu.bytes=50000 radio.1.ampdu.frames=32 radio.1.ampdu.status=enabled radio.1.antenna.gain=#modifica solo su Rocket/Bullet/NanoBridge/AirGrid/PicoStation a seconda dell'antenna che si utilizza radio.1.antenna=4 radio.1.chanshift=0 radio.1.clksel=1 radio.1.countrycode=380 radio.1.cwm.enable=0 radio.1.cwm.mode=0 radio.1.devname=ath0 radio.1.dfs.status=enabled radio.1.ext_antenna=0 radio.1.forbiasauto=0 radio.1.frag=off radio.1.freq=5600 radio.1.ieee_mode=11naht20# 11naht40 per abilitare la larghezza del canale a 40Mhz radio.1.mcastrate=15 radio.1.mode=master radio.1.obey=disabled# enabled/diabled stabilisce il controllo automatico del transmit rate in AP mode radio.1.polling=enabled# enabled/diabled AirMAX radio.1.pollingnoack= radio.1.pollingpri=# AirMAX config - con configurazione STA 3=disabled 2=Low 1=Medium 0=High - lascia vuoto in AP radio.1.rate.auto=disabled radio.1.rate.mcs=13# stabilisce il massimo transimt rate 0-15 radio.1.reg_obey=disabled# enabled/diabled stabilisce il controllo automatico del transmit rate in STA mode radio.1.rts=off radio.1.rx_antenna=0 radio.1.rx_antenna_diversity=enabled radio.1.status=enabled radio.1.subsystemid=0xe005 radio.1.thresh62a= radio.1.thresh62b= radio.1.thresh62g= radio.1.tx_antenna=0 radio.1.tx_antenna_diversity=enabled radio.1.txpower=14# a seconda del paese/device/antenna valori da 0 a 27 radio.countrycode=380 radio.status=enabled
ResolvName
resolv.host.1.name=NanoStationM resolv.host.1.status=enabled resolv.nameserver.1.ip=8.8.8.8 resolv.nameserver.1.status=enabled resolv.nameserver.2.ip=8.8.4.4 resolv.nameserver.2.status=enabled resolv.status=enabled
Lasciare pure com'è di seguito
route.1.devname=ath0 route.1.gateway=0.0.0.0 route.1.ip=0.0.0.0 route.1.netmask=0 route.1.status=disabled route.status=enabled snmp.community=public snmp.contact= snmp.location= snmp.status=enabled
SSH Key Control
Qui possiamo inserire la nostra chiave pubblica per controllare il device da shell senza dover inserire la password al login
sshd.auth.key.1.comment= sshd.auth.key.1.status=disabled sshd.auth.key.1.type= sshd.auth.key.1.value= sshd.auth.passwd=enabled sshd.port=22 sshd.status=enabled
Log server
syslog.remote.ip= syslog.remote.port=514 syslog.remote.status=enabled syslog.status=enabled
Di norma le info a seguire non vanno modificate, chi volesse tentare lo può fare a suo rischio e pericolo
system.button.reset=enabled system.date.status=disabled system.date= system.eirp.status=enabled system.latitude= system.longitude= system.modules.blacklist.1.status=disabled system.modules.blacklist.2.status=disabled system.modules.blacklist.3.status=disabled system.modules.blacklist.4.status=disabled system.modules.blacklist.status=disabled system.timezone=GMT-1 telnetd.port=23 telnetd.status=disabled tshaper.in.1.devname=eth0 tshaper.out.1.devname=ath0 tshaper.status=disabled users.1.name=root#ubnt di default users.1.password=*VOSTRA_PW_CIFRATA* users.1.status=enabled users.2.gid=100 users.2.name=ubnt users.2.password= users.2.shell=/bin/false users.2.status=disabled users.2.uid=100 users.status=enabled
vLAN
vlan.1.status=disabled vlan.2.status=disabled vlan.status=disabled
Wireless
wireless.1.addmtikie=enabled wireless.1.ap=00:00:00:00:00:00# In STA Mode MAC ADDRESS del AP wireless.1.authmode=1 wireless.1.compression=0 wireless.1.devname=ath0 wireless.1.fastframes=0 wireless.1.frameburst=0 wireless.1.hide_ssid=disabled wireless.1.l2_isolation=disabled wireless.1.mac_acl.1.mac= wireless.1.mac_acl.1.status=disabled wireless.1.mac_acl.10.mac= wireless.1.mac_acl.10.status=disabled wireless.1.mac_acl.11.mac= wireless.1.mac_acl.11.status=disabled wireless.1.mac_acl.12.mac= wireless.1.mac_acl.12.status=disabled wireless.1.mac_acl.13.mac= wireless.1.mac_acl.13.status=disabled wireless.1.mac_acl.14.mac= wireless.1.mac_acl.14.status=disabled wireless.1.mac_acl.15.mac= wireless.1.mac_acl.15.status=disabled wireless.1.mac_acl.16.mac= wireless.1.mac_acl.16.status=disabled wireless.1.mac_acl.17.mac= wireless.1.mac_acl.17.status=disabled wireless.1.mac_acl.18.mac= wireless.1.mac_acl.18.status=disabled wireless.1.mac_acl.19.mac= wireless.1.mac_acl.19.status=disabled wireless.1.mac_acl.2.mac= wireless.1.mac_acl.2.status=disabled wireless.1.mac_acl.20.mac= wireless.1.mac_acl.20.status=disabled wireless.1.mac_acl.21.mac= wireless.1.mac_acl.21.status=disabled wireless.1.mac_acl.22.mac= wireless.1.mac_acl.22.status=disabled wireless.1.mac_acl.23.mac= wireless.1.mac_acl.23.status=disabled wireless.1.mac_acl.24.mac= wireless.1.mac_acl.24.status=disabled wireless.1.mac_acl.25.mac= wireless.1.mac_acl.25.status=disabled wireless.1.mac_acl.26.mac= wireless.1.mac_acl.26.status=disabled wireless.1.mac_acl.27.mac= wireless.1.mac_acl.27.status=disabled wireless.1.mac_acl.28.mac= wireless.1.mac_acl.28.status=disabled wireless.1.mac_acl.29.mac= wireless.1.mac_acl.29.status=disabled wireless.1.mac_acl.3.mac= wireless.1.mac_acl.3.status=disabled wireless.1.mac_acl.30.mac= wireless.1.mac_acl.30.status=disabled wireless.1.mac_acl.31.mac= wireless.1.mac_acl.31.status=disabled wireless.1.mac_acl.32.mac= wireless.1.mac_acl.32.status=disabled wireless.1.mac_acl.4.mac= wireless.1.mac_acl.4.status=disabled wireless.1.mac_acl.5.mac= wireless.1.mac_acl.5.status=disabled wireless.1.mac_acl.6.mac= wireless.1.mac_acl.6.status=disabled wireless.1.mac_acl.7.mac= wireless.1.mac_acl.7.status=disabled wireless.1.mac_acl.8.mac= wireless.1.mac_acl.8.status=disabled wireless.1.mac_acl.9.mac= wireless.1.mac_acl.9.status=disabled wireless.1.mac_acl.policy=allow wireless.1.mac_acl.status=disabled wireless.1.macclone=disabled wireless.1.scan_list.channels= wireless.1.scan_list.status=disabled wireless.1.security=none wireless.1.signal_led1=1 wireless.1.signal_led2=2 wireless.1.signal_led3=3 wireless.1.signal_led4=4 wireless.1.ssid=ninux.org wireless.1.status=enabled wireless.1.wds=disabled wireless.1.wmm=enabled wireless.1.wmmlevel= wireless.status=enabled wpasupplicant.device.1.status=disabled wpasupplicant.profile.1.network.1.bssid= wpasupplicant.status=disabled
Al termine delle modifiche salviamo ed usciamo dal terminale digitando prima ESC e poi ":wq" quindi facciamo un rapido controllo di ciò che abbiamo effettuato rileggendo il file con il comando
cat /tmp/system.cfg
Se tutto è corretto passiamo a fissare le modifiche in maniera permanente con il comando
cfgmtd -f /tmp/system.cfg -p /etc -w && reboot
Buon divertimento!