OpenWrt router as dumb AP - succeeded but with many doubts

Installing and Using OpenWrt Network and Wireless Configuration
4

I've been running DD-WRT / OpenWRT / LEDE / OpenWRT as a dumb AP for several years. It's very straightforward to do.

The current dumb AP is an ancient Buffalo WZR-HP-G300NH, running OpenWRT 18.06.4. It has a single Ethernet cable, plugged into one of the LAN ports. The WAN port is empty. The wireless interface and LAN interfaces are bridged.

Its IP address is in the same subnet as the rest of the network. The firewall doesn't do anything, and the AP does not provide any services to wireless clients beyond L1/L2 connectivity. All IP address allocation, DNS, NTP, routing, and firewalling is handled by other devices on the network.

Here are the configuration files which you may use as reference. Bear in mind there may have been changes between 15.05 and 18.06 which mean that some of the configuration syntax may have changed, but the underlying principles remain the same.

/etc/config/system:

config system
        option hostname 'wap'
        option ttylogin '0'
        option log_size '64'
        option urandom_seed '0'
        option log_proto 'udp'
        option cronloglevel '8'
        option zonename 'UTC'
        option timezone 'GMT0'
        option log_ip '192.168.251.251'
        option log_port '514'
        option conloglevel '7'

config timeserver 'ntp'
        option enabled '1'
        list server '192.168.251.251'

config led 'led_wlan'
        option name 'Wireless'
        option sysfs 'buffalo:green:wireless'
        option trigger 'phy0tpt'

config led 'led_router'
        option name 'Router'
        option sysfs 'buffalo:green:router'
        option trigger 'netdev'
        option mode 'link tx rx'
        option dev 'eth1'

config led 'led_usb'
        option name 'USB'
        option sysfs 'buffalo:blue:usb'
        option trigger 'usbdev'
        option interval '50'
        option dev '1-1'

/etc/config/dhcp

config dnsmasq
        option domainneeded '1'
        option boguspriv '1'
        option filterwin2k '0'
        option localise_queries '1'
        option rebind_protection '1'
        option rebind_localhost '1'
        option local '/lan/'
        option domain 'lan'
        option expandhosts '1'
        option nonegcache '0'
        option authoritative '1'
        option readethers '1'
        option leasefile '/tmp/dhcp.leases'
        option resolvfile '/tmp/resolv.conf.auto'
        option nonwildcard '1'
        option localservice '1'

config dhcp 'lan'
        option interface 'lan'
        option ignore '1'

config odhcpd 'odhcpd'
        option maindhcp '0'
        option leasefile '/tmp/hosts/odhcpd'
        option leasetrigger '/usr/sbin/odhcpd-update'
        option loglevel '4'

/etc/config/firewall:


config defaults
        option syn_flood '1'
        option input 'ACCEPT'
        option output 'ACCEPT'
        option forward 'REJECT'
        option drop_invalid '1'

config zone
        option name 'lan'
        list network 'lan'
        option input 'ACCEPT'
        option output 'ACCEPT'
        option forward 'ACCEPT'

config include
        option path '/etc/firewall.user'

/etc/config/network:


config interface 'loopback'
        option ifname 'lo'
        option proto 'static'
        option ipaddr '127.0.0.1'
        option netmask '255.0.0.0'

config globals 'globals'

config interface 'lan'
        option type 'bridge'
        option ifname 'eth0.1'
        option proto 'static'
        option ipaddr '192.168.69.5'
        option netmask '255.255.255.0'
        option broadcast '192.168.69.255'
        option gateway '192.168.69.1'
        option dns '192.168.251.251'
        option delegate '0'

config switch
        option name 'switch0'
        option reset '1'
        option enable_vlan '1'

config switch_vlan
        option device 'switch0'
        option vlan '1'
        option ports '0 1 2 3 5t'

/etc/config/wireless:

config wifi-device 'radio0'
        option type 'mac80211'
        option hwmode '11g'
        option path 'platform/ath9k'
        option channel 'auto'
        option htmode 'HT40'
        option country 'GB'
        option legacy_rates '1'

config wifi-iface
        option device 'radio0'
        option mode 'ap'
        option ssid 'This is my test wireless network'
        option network 'lan'
        option encryption 'psk2+ccmp'
        option key 'This is my test wireless PSK'
        option wpa_disable_eapol_key_retries '1'
2 Likes