doc:appunti:hardware:gl_ar750
Differences
This shows you the differences between two versions of the page.
Both sides previous revisionPrevious revisionNext revision | Previous revisionLast revisionBoth sides next revision | ||
doc:appunti:hardware:gl_ar750 [2021/05/07 13:43] – [Configuring the switch from the command line] niccolo | doc:appunti:hardware:gl_ar750 [2021/05/11 08:25] – [VLAN limitations] niccolo | ||
---|---|---|---|
Line 18: | Line 18: | ||
===== Configuring the switch from the command line ===== | ===== Configuring the switch from the command line ===== | ||
- | The GL-AR750 contains a switch capable of VLAN: two ports are exposed to the to the outside as the **LAN 1** and **LAN 2** ports, the same switch has a port internally connected with the **CPU eth1**. | + | The GL-AR750 contains a switch |
+ | |||
+ | ^ Port ^ Connection | ||
+ | | 0 | Connected to **CPU eth0** at 1Gbit full-duplex. | ||
+ | | 1 | Connected to **LAN 1** external port (toward the power socket). | ||
+ | | 2 | Connected to **LAN 2** external port. | | ||
+ | | 3 | Not connected. | ||
+ | | 4 | Not connected. | ||
The switch can be configured through the LuCI interface **Network** => **Switch** or using the **swconfig** tool from the command line. See the **[[https:// | The switch can be configured through the LuCI interface **Network** => **Switch** or using the **swconfig** tool from the command line. See the **[[https:// | ||
+ | View the existing switches: | ||
+ | < | ||
+ | swconfig list | ||
+ | Found: switch0 - eth1 | ||
+ | </ | ||
+ | |||
+ | To view the full configuration use the command: | ||
+ | |||
+ | < | ||
+ | swconfig dev switch0 show | ||
+ | </ | ||
+ | |||
+ | To view only **PORT #1** settings: | ||
+ | |||
+ | < | ||
+ | swconfig dev switch0 port 1 show | ||
+ | Port 1: | ||
+ | enable_mirror_rx: | ||
+ | enable_mirror_tx: | ||
+ | pvid: 1 | ||
+ | link: port:1 link:up speed: | ||
+ | </ | ||
+ | |||
+ | Notice the **pvid** parameter: when an untagged packet arrives to that port, it gets the VLAN #1 tag attacched. | ||
+ | |||
+ | To view only **VLAN #1** settings: | ||
+ | |||
+ | < | ||
+ | swconfig dev switch0 vlan 1 show | ||
+ | VLAN 1: | ||
+ | vid: 1 | ||
+ | ports: 0t 1 2 | ||
+ | </ | ||
+ | |||
+ | In the example above, you can see that VLAN #1 is connected to port **#0 tagged**, to port **#1 untagged** and port **#2 untagged**. | ||
+ | |||
+ | To change the port tagged/ | ||
+ | |||
+ | < | ||
+ | swconfig dev switch0 vlan 1 set ports "0t 1" | ||
+ | swconfig dev switch0 set apply | ||
+ | </ | ||
+ | |||
+ | ===== VLAN limitations ===== | ||
+ | |||
+ | There is a limit to **16 VLANs**, numbered from #0 to #15. Default configuration uses **VLAN #1** for **eth1.1** which is connected to bridge **br-lan**. This limitation is not visible from the LuCI web interface: any number greater than 15 will be silently accepted, but it will be not functional. | ||
+ | |||
+ | You can view the actual switch configuration using: | ||
+ | |||
+ | < | ||
+ | swconfig dev switch0 show | ||
+ | </ | ||
+ | |||
+ | You can check the limit issuing the following command (notice the error message): | ||
+ | |||
+ | < | ||
+ | swconfig dev switch0 vlan 16 set vid 16 | ||
+ | Failed to set attribute: Invalid input data or parameter | ||
+ | </ | ||
+ | |||
+ | You cannot mix tagged and untagged VLAN on the same switch port. | ||
+ | |||
+ | * Only one port is allowed to carry untagged traffic for a specific VLAN. | ||
+ | * You cannot mix tagged and untagged VLAN on the same port. E.g. if a port carries untagged VLAN#10, the same port cannot carries tagged VLAN#11 (depending upon the order of the commands, the settings will be changed to carry buth as tagged). | ||
+ | |||
+ | Limitation example #1: the **untagged VLAN#10** is **removed** from port **#1** and **#2**: | ||
+ | |||
+ | < | ||
+ | swconfig dev switch0 vlan 10 set ports "0t 1 2" | ||
+ | swconfig dev switch0 vlan 11 set ports "0t 1 2" | ||
+ | swconfig dev switch0 show | ||
+ | ... | ||
+ | VLAN 10: | ||
+ | vid: 10 | ||
+ | ports: 0t | ||
+ | VLAN 11: | ||
+ | vid: 11 | ||
+ | ports: 0t 1 2 | ||
+ | </ | ||
+ | |||
+ | Limitation example #2: the **untagged VLAN#10** is **changed to tagged** on **port #1** and it is removed from port **#2**: | ||
+ | |||
+ | < | ||
+ | swconfig dev switch0 vlan 10 set ports "0t 1 2" | ||
+ | swconfig dev switch0 vlan 11 set ports "0t 1t 2" | ||
+ | VLAN 10: | ||
+ | vid: 10 | ||
+ | ports: 0t 1t | ||
+ | VLAN 11: | ||
+ | vid: 11 | ||
+ | ports: 0t 1t 2 | ||
+ | </ | ||
+ | |||
+ | ===== Configuring a DMZ ===== | ||
+ | |||
+ | We used VLAN to configure a DMZ ... FIXME | ||
+ | |||
+ | ===== Configuration ===== | ||
+ | |||
+ | === Change SSH Port === | ||
+ | |||
+ | From the LuCI interface: | ||
+ | |||
+ | * System => Administration => SSH Access | ||
+ | * Port: | ||
+ | |||
+ | === Install the tcpdump package === | ||
+ | |||
+ | From the command line: | ||
+ | |||
+ | < | ||
+ | opkg update | ||
+ | # tcpdump-mini requires ??? kb: | ||
+ | opkg install tcpdump-mini | ||
+ | # coreutils-base64 requires 28 kb: | ||
+ | opkg install coreutils-base64 | ||
+ | </ | ||
+ | |||
+ | === Crontabs === | ||
+ | |||
+ | < | ||
+ | crontab -e | ||
+ | / | ||
+ | / | ||
+ | ps | grep crond | ||
+ | </ | ||
===== Web References ===== | ===== Web References ===== | ||
Line 28: | Line 161: | ||
* **[[https:// | * **[[https:// | ||
* **[[https:// | * **[[https:// | ||
+ | |||
+ | * **[[https:// | ||
+ | * **[[https:// | ||
+ | * **[[https:// | ||
doc/appunti/hardware/gl_ar750.txt · Last modified: 2023/09/11 07:37 by niccolo