IPCop Question....

General Network security, firewalls, port filtering/forwarding, wireless security, anti-spyware, as well as spam control and privacy discussions.
Post Reply
User avatar
caveman
Advanced Member
Posts: 751
Joined: Mon Nov 26, 2001 4:44 pm
Location: Liverpool, UK

IPCop Question....

Post by caveman »

I currently run IPCop with red and green interfaces.

I`m looking to include a blue interface for a Wireless AP.

Now my question is, if and when I get round to this and disable DHCP in the AP and enable it in IPCop, do I have options for Mac filtering in IPCop or does that still reside on the AP?

Also, will I be able to access the web GUI of the AP thru IPCop??

Many thanx

Al
Image
FOLD ON!!
User avatar
YeOldeStonecat
SG VIP
Posts: 51171
Joined: Mon Jan 15, 2001 12:00 pm
Location: Somewhere along the shoreline in New England

Post by YeOldeStonecat »

MAC filtering is a function of the AP...

This for home? Reason you're adding it on the blue interface? I run mine with just red and green zone...I have my AP running off of the green zone...I don't have a reason to keep the wireless separated. You run wireless on a blue zone if you need to separate the wireless from the green zone..say, for wireless guests on a business network.
MORNING WOOD Lumber Company
Guinness for Strength!!!
User avatar
caveman
Advanced Member
Posts: 751
Joined: Mon Nov 26, 2001 4:44 pm
Location: Liverpool, UK

Post by caveman »

Ah, righto.

I thought it would still be on the AP, just thought I`d ask....

I now see what you`re saying RE the separate NW`s, there really isn`t any need then as I am indeed using it at home.

good job!!

Many thanx

Al
Image
FOLD ON!!
User avatar
YeOldeStonecat
SG VIP
Posts: 51171
Joined: Mon Jan 15, 2001 12:00 pm
Location: Somewhere along the shoreline in New England

Post by YeOldeStonecat »

For example...I have a wireless router running as an access point....I have it set to 192.168.69.253
I uplink it to the switch my Endian linux router plugs into.....the Endians LAN IP is 192.168.69.1

I believe you probably have the option of MAC filtering on the linux router..however..since the AP does it..makes sense to keep it there...stop the no-good MACs right at the AP itself.
MORNING WOOD Lumber Company
Guinness for Strength!!!
User avatar
caveman
Advanced Member
Posts: 751
Joined: Mon Nov 26, 2001 4:44 pm
Location: Liverpool, UK

Post by caveman »

I hear ya!

What got me thinking is using my WRT54G as an AP (disabling DHCP) and hang it off the switch that in turn is hanging off my IPCop.

Then got to Why not use the Blue card?? but you`ve already answered that one.

I got as far as flashing DD-WRT onto it and all seems well, I upped the TX power and it seems ok, all I gotta do is get the damn thing to work the way I want.

IPCop should be dishing out the IP Adresses right?

i think I goofed with the DD-WRT....seems far too complicated, the extra Xmit power does come in handy tho!
Image
FOLD ON!!
User avatar
YARDofSTUF
Posts: 70006
Joined: Sat Nov 11, 2000 12:00 am
Location: USA

Post by YARDofSTUF »

DDWRT is great. Whats complicated? Anything that is weird to figure out can probably be left alone, especially since you have IPcop as the router/firewall.

The interface is a new look so you gotta get use to that, after a bit it'll seem normal.

IPcop should do dhcp, then you turn it off on the WRT.
User avatar
caveman
Advanced Member
Posts: 751
Joined: Mon Nov 26, 2001 4:44 pm
Location: Liverpool, UK

Post by caveman »

Well I`m having a break from the DD-WRT for now and having anothe rplay with my IPCop....

I snagged one of these off ebay for much cheapness and got it all running fine BUT....

There`s always a but these days!! :rotfl: :D The damn thing won`t boot without a keyboard!

If I take the KB out, I get a message "304 - keyboard or system unit error" and goes blathering on about system admin and some other rubbish.

Then out of the blue :thumb: :D ;) I get a prompt, funnily enough, in blue saying "F1: boot" so I pop the KB in and hit F1 and it boots, but same thing next time round, it won`t come back without a KB plugged in

Anyone know of a workaround?

Thanx again
Image
FOLD ON!!
User avatar
YeOldeStonecat
SG VIP
Posts: 51171
Joined: Mon Jan 15, 2001 12:00 pm
Location: Somewhere along the shoreline in New England

Post by YeOldeStonecat »

I've run DD-WRT on my wrt54g (actually back to running it that way now)

In the web admin of DD-WRT..there's a checkbox to run it in "Access Point" mode.

Set the LAN IP of your wrt to something in the same range as your IPCop box. For example...if IPCop has an IP of 192.168.1.1 on the green card...set your wrt to something like 192.168.1.245 or 192.168.1.253 (popular access point IPs..that are outside your DHCP pool)

Disable DHCP on the wrt...I believe setting it to AP mode already does this for you.

Uplink your wrt to your IPCop boxes green NIC using a LAN port of your wrt. You will not use the WAN/Internet port of your WRT...as an uplink. Note...you can, in the web admin of your DD...utilize that port as a standard LAN port...it will change how it works..thus giving you a 5 port switch. ;)

Regarding the boot w/o kb....some BIOS allow you turn disable that notification.
MORNING WOOD Lumber Company
Guinness for Strength!!!
User avatar
caveman
Advanced Member
Posts: 751
Joined: Mon Nov 26, 2001 4:44 pm
Location: Liverpool, UK

Post by caveman »

Think I`ve got it pretty much set up like that, only I was using the WAN/Cable Modem interface on the router.

That explains a lot! :rotfl: :D

Ah well!?

Any work arounds for booting without a KB?? there`s no options in the BIOS for it!
Image
FOLD ON!!
User avatar
YeOldeStonecat
SG VIP
Posts: 51171
Joined: Mon Jan 15, 2001 12:00 pm
Location: Somewhere along the shoreline in New England

Post by YeOldeStonecat »

Yeah...much smoother using a LAN port. :)

Don't forget to flip the mode to AP in the web admin.

No options remotely close to "boot on error" or whatever in the BIOS? There's usually something like that in there..what make/model?
MORNING WOOD Lumber Company
Guinness for Strength!!!
User avatar
caveman
Advanced Member
Posts: 751
Joined: Mon Nov 26, 2001 4:44 pm
Location: Liverpool, UK

Post by caveman »

All I know is it`s a Compaq ENS, one of these (if the pic works...)

Image

No idea what board is in it, but it`s running a PIII 533mhz.

Looks weird inside hard drive/floppy drive assembly flip up towards you (when the top`s off) and teh PSU is sort of angled on one corner and that hinges up to you right and the PCI riser assembly just lifts straigh out!

the guy I bought it off is on ebay, and here`s another one listed the same...Compaq Deskpro ENS.

Dunno if any of that has actually helped! :wth: :rotfl:
Image
FOLD ON!!
User avatar
YeOldeStonecat
SG VIP
Posts: 51171
Joined: Mon Jan 15, 2001 12:00 pm
Location: Somewhere along the shoreline in New England

Post by YeOldeStonecat »

I have the same model at home..slightly newer (P3 733 or 833 or something in that range). I'll dig into it....may take me a while.
MORNING WOOD Lumber Company
Guinness for Strength!!!
User avatar
caveman
Advanced Member
Posts: 751
Joined: Mon Nov 26, 2001 4:44 pm
Location: Liverpool, UK

Post by caveman »

Good stuff, if you can dig anything out I`d reaaly appreciate it!
Image
FOLD ON!!
User avatar
YARDofSTUF
Posts: 70006
Joined: Sat Nov 11, 2000 12:00 am
Location: USA

Post by YARDofSTUF »

How often do you need to reboot it? I'd just boot it with the keyboard and then unplug it.
User avatar
caveman
Advanced Member
Posts: 751
Joined: Mon Nov 26, 2001 4:44 pm
Location: Liverpool, UK

Post by caveman »

Well really speaking, I don`t :rotfl: It`s more really for just in case..... just in case it bails on me (unlikely I know) or sometimes after an update there`s a mandatory reboot.

It really is just in case, cuz if I do need a re-boot, I gotta get up into the attic (where the box is) climb over a load of stuff and go from there.

I found out of someone on another forum I use over here that one of those adaptors that eneble a USB KB to be plugged into a PS/2 socket will let it boot without the actual KB.

Further digging revealed that a 10K Ohm resistor connected between pins 3 and 4 on the KB socket will also do the trick!

Image

Gonna give that one a go soon! :thumb: I`ll let you know how I get on ;)
Image
FOLD ON!!
User avatar
YeOldeStonecat
SG VIP
Posts: 51171
Joined: Mon Jan 15, 2001 12:00 pm
Location: Somewhere along the shoreline in New England

Post by YeOldeStonecat »

Also took a bit..but I finally remember a program..had to Google around a bit cuz couldn't remember the name...but for some Compaq models that didn't have the BIOS option to not wait for keyboard...there's a program called
no_f1.com
Gotta run it through Winders though...so if you have a hard drive around with Windows on it...

Also you one some models...if you enable power on password..there's a new option in the BIOS that allows you to change the role to network server mode..where she doesn't need a KB/mouse.
MORNING WOOD Lumber Company
Guinness for Strength!!!
User avatar
caveman
Advanced Member
Posts: 751
Joined: Mon Nov 26, 2001 4:44 pm
Location: Liverpool, UK

Post by caveman »

OK, the 10K ohm resistor DIDN`T work! LOL :rotfl: :rotfl:

I also tried the password/server role thing and it looked good, until I re-booted and it said "server mode enabled, no keyboard present, enter password" LOL :rotfl:

Hmm, no keyboard? enter password?? how exactly??

Anyway, I`m still open to suggestions!
Image
FOLD ON!!
User avatar
caveman
Advanced Member
Posts: 751
Joined: Mon Nov 26, 2001 4:44 pm
Location: Liverpool, UK

Post by caveman »

YeOldeStonecat wrote:I've run DD-WRT on my wrt54g (actually back to running it that way now)

In the web admin of DD-WRT..there's a checkbox to run it in "Access Point" mode.

Set the LAN IP of your wrt to something in the same range as your IPCop box. For example...if IPCop has an IP of 192.168.1.1 on the green card...set your wrt to something like 192.168.1.245 or 192.168.1.253 (popular access point IPs..that are outside your DHCP pool)

Disable DHCP on the wrt...I believe setting it to AP mode already does this for you.

Uplink your wrt to your IPCop boxes green NIC using a LAN port of your wrt. You will not use the WAN/Internet port of your WRT...as an uplink. Note...you can, in the web admin of your DD...utilize that port as a standard LAN port...it will change how it works..thus giving you a 5 port switch. ;)

Regarding the boot w/o kb....some BIOS allow you turn disable that notification.
YeOldeStonecat wrote:Yeah...much smoother using a LAN port. :)

Don't forget to flip the mode to AP in the web admin.

No options remotely close to "boot on error" or whatever in the BIOS? There's usually something like that in there..what make/model?
Well, you are THE man!!

You have sigle handedly set up my new/er network....remotely!! :rotfl: :rotfl:

I got everything set up

Modem --> IPCop --> BEFSR81 (switch only) --> WRT 54G with DD-WRT on it.

I got all hosts off the switch and the DD-WRT off the switch too, IPCop`s dishing up the IP addresses and I can access any single device on the network using it`s IP address, just the way it`s supposed to be!!

absolutely fantastic!

All I gotta do now is find a cheaper option to make my XBOX 360 wireless without spending the extortionate price microsoft are wanting, and my life/network will be complete!

Thank you so very much!

P.S. using the LAN port on the DD-WRT works so much better!! :thumb: :thumb: :D :rotfl:
Image
FOLD ON!!
Post Reply