====== Information ====== * Linksys EA6700 ((https://www.linksys.com/gb/p/P-EA6700)) * Kong DD-WRT Builds ((''dd-wrt.v24-K3_AC_ARM_STD.bin'' from http://www.desipro.de/ddwrt/K3-AC-Arm/)) ====== Settings ====== ===== Setup ===== ==== Basic Setup ==== * Router Name: Wraeclast * Shortcut Forwarding Engine: Enabled * Static DNS 1: 185.121.177.177 * Static DNS 2: 169.239.202.202 * Static DNS 3: 185.121.177.177 * Time Zone: America/New York * Server IP/Name: 0.north-america.pool.ntp.org ==== IPv6 ==== * IPv6: Enabled * IPv6 Type: DHCPv6 with Prefix Delegation * Static DNS 1: 2a05:dfc7:5::53 * Static DNS 2: 2a05:dfc7:5::5353 ==== DDNS ==== * https://www.namecheap.com/support/knowledgebase/article.aspx/9356/11/how-to-configure-a-ddwrt-router * :!: Make sure to change ''(NameCheap DDNS Password)'' to the actual DDNS password in both ''Password'' and ''URL'' fields * DDNS Service: Custom * DYNDNS Server: * Username: * Password: * Hostname: * URL: dynamicdns.park-your-domain.com realmofespionage.xyz (NameCheap DDNS Password) @ /update?domain=realmofespionage.xyz&password=(NameCheap DDNS Password)&host= ===== Wireless ===== ==== Basic Settings ==== === wl0 [2.4 GHz] === * Wireless Network Mode: N-Only * Wireless Network Name (SSID): The Crossroads (2.4GHz) * Wireless Channel: 11 - 2.462 GHz * Channel Width: Wide HT40 (40 MHz) * Extension Channel: lower === Virtual Interface wl0.1 [2.4 GHz] === * Wireless Network Name (SSID): The Lower Prison (2.4GHz ISO) * Network Configuration: Unbridged * Net Isolation: Enabled ((prevents clients on this AP from accessing LAN resources; allows WAN/internet usage still)) * IP Address: 192.168.2.1 * Subnet Mask: 255.255.255.0 === wl1 [5GHz] === * Wireless Network Mode: AC-Only ((very few old devices need AC/N-Mixed such as Samsung Smart TV)) * Wireless Network Name (SSID): Highgate (5GHz) * Wireless Channel: 48 - 5.240 GHz ((Fire TV Sticks need some low 5GHz channel)) * Channel Width: VHT80 (80 MHz) * Extension Channel: upper upper * Explicit Beamforming: Enabled * Implicit Beamforming: Enabled ==== Wireless Security ==== * Applies to ''wl0'', ''wl0.1'', and ''wl1'' * Security Mode: WPA2 Personal * WPA Algorithms: AES * WPA Shared Key: (usual) ==== WL-Advanced ==== * Applies to both ''WL0'' and ''WL1'' * TX Power: Manual -> 999 ===== Services ===== ==== Services ==== * ttraff Daemon: Disabled * Additional DNSMasq Options: ((only required if the virtual wireless AP exists)) interface=wl0.1 dhcp-option=wl0.1,3,192.168.2.1 dhcp-range=wl0.1,192.168.2.100,192.168.2.125,255.255.255.0,12h ===== Security ===== ==== Firewall ==== * Enable the following: * Limit SSH Access * Limit Telnet Access * Limit PPTP Server Access * Limit FTP Server Access ===== Access Restrictions ===== ==== Policy 1 ==== * Policy Name: Seagate NAS * List of Clients -> MAC 01: (Seagate NAS Ethernet MAC) * PCs: Deny ==== Policy 2 ==== * Policy Name: Samsung TV * List of Clients -> MAC 01: (Samsung TV Wifi MAC) * PCs: Deny ==== Policy 3 ==== * Policy Name: Thistlesage RuneAudio * List of Clients -> MAC 01: (Raspberry Pi Ethernet MAC) * PCs: Deny ==== Policy 4 ==== * Policy Name: Kole HP Printer * List of Clients -> MAC 01: (HP Printer Ethernet MAC) * List of Clients -> MAC 02: (HP Printer Wifi MAC) * PCs: Deny ===== NAT / QoS ===== ==== Port Forwarding ==== * HTTP, 80, TCP, 153 * HTTPS, 443, TCP, 153 ===== Administration ===== ==== Keep Alive ==== * Schedule Reboot: Enabled * At a set Time: 05:00 Everyday ====== Telnet ====== ===== Connect ===== * Username is ''root'' with admin password telnet '192.168.1.1' ===== Update ===== ==== TFTP ==== tftp 192.168.1.1 binary rexmt 1 timeout 60 put firmware.bin ==== Stable ==== * http://www.desipro.de/ddwrt/K3-AC-Arm/ wget -O '/tmp/firmware.bin' 'http://www.desipro.de/ddwrt/K3-AC-Arm/dd-wrt.v24-K3_AC_ARM_STD.bin' && sync && mtd write '/tmp/firmware.bin' 'linux' ==== Test ==== * http://www.desipro.de/ddwrt/K3-AC-Arm/TEST/ wget -O '/tmp/firmware.bin' 'http://www.desipro.de/ddwrt/K3-AC-Arm/TEST/dd-wrt.v24-K3_AC_ARM_STD.bin' && sync && mtd write '/tmp/firmware.bin' 'linux' ==== NVRAM Wipe ==== * May be necessary after an update * :!: This will wipe out all router settings and everything will need set back up again erase nvram ==== Reboot ==== **** sync && reboot ===== Overclock ===== ==== Get Current Clocks ==== * Likely ''800,533'' by-default nvram get 'clkfreq' ==== Set Clocks ==== **** nvram set 'clkfreq'='1200,600' && nvram commit ====== TODO ====== Setup > advanced routing This Blocks Google DNS Google Primary DNS and Google Secondary DNS (1 and 2) Metric: 2 Destination: Primary = 8.8.8.8 Secondary = 8.8.4.4 Subnet Mask: 255.255.255.255 Gateway: 192.168.1.1 Interface: LAN and WLAN http://svn.dd-wrt.com/ticket/1483