Commit Graph

364 Commits

Author SHA1 Message Date
Tim Wilkinson 8817b70b52 Remove firewall counters except for specific ports 2023-01-24 23:16:42 -08:00
Tim Wilkinson 2423bdd152
fix xlink firewall rule inserted incorrectly (#671) 2023-01-24 20:35:15 -06:00
Tim Wilkinson 78b8578a06
Automatically enable RTS when hidden nodes detected (#659) 2023-01-19 13:11:30 -06:00
Tim Wilkinson 7b8a2f2e8a
Fix power offsets (#656) 2023-01-19 09:15:26 -06:00
Tim Wilkinson f57a2ac647 Add nanobeaml ac gen1 xc 2023-01-17 14:15:22 -08:00
Tim Wilkinson 3366f9baa6
Mikrotik boot loader change to avoid boot lockup problem (#654)
See: https://forum.openwrt.org/t/openwrt-installed-mikrotik-rb750gr3-wont-boot-when-wan-cable-plugged/146330/7
2023-01-16 13:57:19 -06:00
Tim Wilkinson fdeda7d0cc
New network configuration code (#650)
* Migrate wired network building into node-setup
* Rework network setup
* Fixes for various alt wireless modes
* Commit to new vlan model
2023-01-14 23:07:22 -08:00
Tim Wilkinson 21c3b80e59 An node with a single RF link cant have exposed nodes 2023-01-14 22:54:00 -08:00
Tim Wilkinson 72cc6c8a06
Hidden node detection (and optional mitigation) (#635)
* Enable RTS/CTS when we detect hidden nodes
* Only change rts setting when we need to
* RTS advanced config option
* Include neighbors blocked neighbors (they still transmit)
* Bump default RTS threashold
* Report list of hidden node rather than yes/no
* Canonical hostnames
* When we enable RTS, enable it for all traffic by default
* Show hidden neighbors in display
* Default RTS threshold to -1 (always off)
2023-01-12 10:31:28 -08:00
Tim Wilkinson a21f7791af Add Mikrotik LDF 5 2023-01-11 19:06:06 -08:00
Tim Wilkinson 93ba4ca367 Revert a forwarding rule which was changed in error 2023-01-06 20:40:51 -08:00
Tim Wilkinson d2364b83ad Fix tunnel firewall
Data destined for the firewall endpoint was being blocked by
bad rule ordering.
2023-01-05 13:02:40 -08:00
Tim Wilkinson bc77ff8b5b
Enable ac neg channels (#615) 2023-01-03 21:25:22 -08:00
Tim Wilkinson 9ee849eb3f
More xlink firewall fixes (#581) 2022-12-23 23:00:35 -06:00
Tim Wilkinson cbbd8f81ee
Fix xlink firewall rule (#576) 2022-12-22 23:35:21 -06:00
Tim Wilkinson 7b495f5deb
Add MikroTik_RouterBOARD_912UAG-5HPnD (#575) 2022-12-22 23:34:43 -06:00
Tim Wilkinson 6950479bf1
Update AREDN to OpenWRT 22.3.2 (Major Upgrade) (#574)
* Update to Openwrt 21.02 and add support for the CPE710 v1
Update scripts to change references to ifname to device due to a change in Openwrt naming
reverse-wpad-basic-wolfssl and disable SSL on Curl

NOTE: The compile host must have python3-distutils installed for gpsd to build

* aredn: initial working upgrade to openwrt 21.02.1

* aredn: update 1 to working upgrade to openwrt 21.02.1

* aredn: add cpe710v1 to build config

* Andrew's patches

* Remove duplicates + display perl

* Temp disable wifi extension patch

* ifname/ports support

* Add spectrum patch back in

* Generic function to extra interfaces

* New api to get wifi ifname

* Disables jails

* Style link

* aredn: partial upgrade to openwrt 22.0.3.0

added AC device images and partial migration to 22.0.3.0
firewall upgrade pending

* aredn:  update mesh-release and revert config.mk

* Unused

* NFT firewall rewrite

* Common-isze configs

* Fix network layout for hap2

* Use local packages dev (new firewall rules)

* Add HAP2

* Add pause after network restart to let bridge reinitialize

* Various lua fixes for new lua version

* Tweak config

* Re-fix networking (lost patch change)

* Add new radio names

* Tolerate missing wifi

* Fix hap-lite switch setup

* More devices

* New radio id

* Build Rocket 5AC lite

* Remove need for luci.sys

* Remove need for luci.sys

* Explicitly name wlan interfaces

* Handle different compatibility verisoning

* Update networking for switches

* ipref version bump

* Extra flag for curl

* Better compat_version fix

* Remove wolfssl

* Fix dns server

* Fix device name

* Unused

* Remove things we dont need

* Remove unused packages

* Generic macaddr overrides

* Fix uci commit

* Fix luci.template.parser to avoid luci.http loading the real thing

* Rocket-M build

* Add search-domain dhcp option

* Turn of ipv6

* No IPV6 in dnsmasq

* Override mac addresses if devices all  the same

* Working from master (for now)

* Put back hostap

* Disable old ethmac fixup

* Tweak configs

* Move back to v22.03.2
Leave ipq4019 builds to master

* Need IPV6 to compile nft firewall

* Rocket-M fixes

* Before we start

* WIP

* Working snapshot

* Cleaned patches

* Merged patch

* Single patch to support HAP2

* Fix typo

* Add nanostation-m

* 5/10Mhz patch

* 5+10MHz patch for ath10k-ct driver

* Extend 2Ghz channel check to include -4 to -1

* Add chanbw setup for ath10k (like ath9k)

* Added TP-Link CPE710 v1

* Override firmwares

* Missing patch

* Dropbear config like 3.22.8.0

* Add Ubiquiti Rocket 5AC Lite

* Fix c6

* Update

* Need more scan channels

* Remove IPV6

* Improve mac fixups

* Put back missing nft app

* IPv6 removed so dont have to disable it

* Fix rocket-m flash bug

* Fix nanostation-m

* Nanobridge is tiny

* Fix wifi order for ar750

* Rocket M5 XW support

* New rates

* Fix firewall4 so we don't need IPv6

* Allow channel width to be restricted

* Move channel list into library

* Fix naming

* Mechanism to block specific channels on specific radios

* Refresh buttons

* routerboard-sxt-5nd

* CPE605 v1.0

* Improve rocket m xw

* tpink

* Update patch

* Update to remove disable

* Remove BW restrictions on cpe710

* Restrict to what has been tested

* Remove test BW restrictions

* sxtsq-5-ac

* Update

* Update

* powerbeam-m5-300 support

* Fix

* Fix hap2

* Tidy unused patches

* Remove limit

* Add ubnt_bullet-m-ar7241

* Added ubnt_nanobeam-ac-gen2

* Fix typo

* Tolerate missing dtd ip

* Explicitly gix hap2 mac addresses

* Fix some broken patches

* Hap2 wont work at 5MHz

* Ubiquiti LiteBeam 5AC Gen2

* Fix compat_version for sxt 5ac

* Update patch

* Unused

* Fix lan configuration for some devices

* Rolling average of noise level

* Unused

* Split out the ath10k rssi monitor (its very simple at the moment)

* Ignore .DS_Store

* Reboot if ethernet doesnt come up (but only once!)

* reboot returns - add exit

* Add some logging info

* Fix ]

* Check all possibly ethernet bridges

* Improve mac fixing

* Remove HostAP on small memory devices

* Reduce dropbear footprint

* Add setsid

* Kill hostap when upgrading to save memory

* Different way to detect hostapd unavailable

* New build steps

* Improve manager logging

* Fix name conflict for the two monitors

* Try to improve test mesh name resolve problem

* Migrate tiny to generic (tiny doesnt work properly)

* Typo

* Another attempt to fix macs for Mikrotik

* Protect against missing trackers

* Fix wpad for ipq40xx

* Remove old tunnel check code

* Enable ZRAM swap to aid low memory devices

* ath10k noise can something be out of range - protect against that

* Updated with current devices and status

* Update firmware which has been tested

* Updated with more builds

* More binary/README

* Fix css error

* Start noise at sensible base level

* Unfix the css so it looks how it use to.

* Save as much memory as we can on lowmem nodes

* Hide some options on low memory devices

* Add "eol" to 32MB devices

* Restart network rather than reboot node if it seems to be broken

* Fixes

* Revert network reset

* Fix ar750 networking

* Continue to trim tiny configs

* More devices

* Dump IW output messages

* Fix Rocket 5AC intermittent ethernet issue

* Ethernet fix for PowerBeam 5AC 500

* More tiny size reduction

* More support data

* Fixed POE and USB power features

* Add Ubiquiti NanoBeam AC (gen1)

* NanoStation (not NanoBeam)

* Add mii-tool package

* Device updates

* Bump update time to 5 minutes

* Fix ethernet negotiation for rocker-5ac and nanobeam

* Fix iplookup

* Config changes based on call feedback

* Radio listing fixes

* Update with more untested builds

* Fallback TxMbps extracted from iw station dump

* Fix tunnel detection for low memory nodes

* Remove unused feed packages

* snapshot build

* Update stability info

* Add powerbeam-5ac-500

* Typo

* Add missing 3.22.1.0

* Add MikroTik LHG 5 AC

* Fix permissions

* Fix permissions

* AirGrid's take Bullet builds

* Mikrotik AC3

* Improve supportdata structure a little to make it easier to find things

* Restore WAN VLAN overrides

* Fix vlan regex for hap2 and hap3

* Support old and new style poe controls

* hap-ac3 is version 1.1

* Handle typo in some openwrt config files

* Fix HAP AC3 install

* Update hap ac3 status

* Support user overrides for network ports (non-swconfig devices)

* LHG 5AC support

* Remove -nand

* Remove non-working platform.sh change

* tunnel weight override

* Omit LinkQualityMult when value is 1

* Add mANTBox 19s and 15s

* Support ath79 mikrotik devices which require ath10k in the initramfs

Co-authored-by: apcameron <apcameron@softhome.net>
Co-authored-by: Joe AE6XE <ae6xe@arrl.net>
Co-authored-by: Joe Ayers <joe@arrl.net>
2022-12-22 14:22:49 -06:00
Tim Wilkinson 41b5040102
Improve xlink integration (#545) 2022-11-14 22:45:58 -06:00
Tim Wilkinson 737bd10f48
Add ECDSA dropbear key support (#547) 2022-11-13 07:38:40 -06:00
Steve 7e5adf1074
stop dnsmasq from filling the log (#531) 2022-11-01 09:46:57 -05:00
Tim Wilkinson 91cf71f9ae
Make ntp update protocol agnostic (#533) 2022-10-26 20:56:56 -05:00
Tim Wilkinson d581b9952a
Fix migration of wen settings when they've never been modified. (#526)
When wan settings had never been modified, they would be migrated
incorrectly.
2022-10-16 20:31:31 -05:00
Tim Wilkinson fe2122eae6 Merge vtun and xlink into one meshrouting hotplug script 2022-10-04 22:06:04 -07:00
Tim Wilkinson 1eecdf2d6f Add ip rules for extra links by reusing the tun infrastructure. 2022-10-04 22:06:04 -07:00
Tim Wilkinson 806f137ae0 Add xlinks to vpn firewall zone 2022-10-04 22:06:04 -07:00
Tim Wilkinson 64e4c1e3cd Support adding extra network links to OLSR
This is useful for non-AREDN backbone links, etc.
2022-10-04 22:06:04 -07:00
Steve 72572034be
add ntp update period to basic setup page (#510)
* add ntp update period to basic setup page

* ensure current value as selected

* include case where reverts to daily after upgrade

* persist ntp_period across upgrades
2022-10-02 18:46:57 -05:00
Steve bf105adf84
fix recoverymode script (#512) 2022-09-27 22:03:55 -05:00
Tim Wilkinson 6ba17b8e5a
Snapshot hostnames after updates so we have a consistent copy to display (#488) 2022-09-06 09:58:18 -05:00
Tim Wilkinson d463923b29 Moved example routes file 2022-08-28 08:17:35 -07:00
Tim Wilkinson 9daf640c85 Optionally include static routes (and preserve them across upgrades) 2022-08-28 08:17:35 -07:00
Tim Wilkinson 8a2b6f968d
A simple way to keep a user swconfig override across upgrades (#481) 2022-08-16 14:03:13 -05:00
Tim Wilkinson e1ddbabb85 Migrate LAN-to-WAN options to advance configuration 2022-08-15 11:16:24 -07:00
Tim Wilkinson ac012ae7b2 Improve non-WAN firewalling 2022-08-15 11:16:24 -07:00
Tim Wilkinson c240d8a4a9 Block forwarding between LAN and WAN when necessary.
When "Prevent LAN devices from accessing WAN" is enabled
2022-08-15 11:16:24 -07:00
Tim Wilkinson 49a3d7738b Deal with lan on AR300M always having the same mac address 2022-07-24 08:12:30 -07:00
Tim Wilkinson 6eb4f64d23 Run an hourly check on the services we publish and disable any that
are not reachable
2022-07-21 15:16:45 -07:00
Tim Wilkinson ed1529678b WIP 2022-07-21 15:16:45 -07:00
dman776 f55cdee1d2
Initial framework api for read/write 07/13/2022 (#359)
* add login page controller

* update copyright

* initial update

* add options method

* add setup_basic controller

* initial pass of rework of setup_basic

* add stubs for setup_optional and setup_advanced

* setup_basic get mesh_rf functions complete

* add additional properties for setup_basic

* add maxpower for setup_basic

* add error checking for controllers

* cleanup

* add /apriprotected to basic auth list

* change to dot notation style
2022-07-13 16:36:53 -05:00
Tim Wilkinson 148e9bea13 Off by default on upgrade, on my default on fresh install 2022-06-16 20:34:39 -07:00
Tim Wilkinson c57d384ca6 LQM on by default 2022-06-16 20:34:39 -07:00
Joe AE6XE 79318f0b40 aredn: Add definition for PBE M5 300-ISO 2022-06-15 22:11:40 -07:00
Steve AB7PA 6aff2636c0
report node hardware better on Status page 06/07/2022 (#383)
* report hwtype better for UBNT nodes

* add Ubiquiti mfg to radios.json

* change field name

* edit field name to model
2022-06-07 21:31:30 -05:00
Steve AB7PA fc9a946286
fix typo in radios.json (#380) 2022-06-03 21:44:27 -05:00
Tim Wilkinson a8b7f8a216
LQM improvements (#364) 2022-05-20 08:10:01 -05:00
Tim Wilkinson b23ab5ee8a
Link Quality Management (#360)
* Link Quality Management experiment (built in)

* Protect LQM pages

* Omit "empty" mac addresses

* Integrate LQM v0.2
Includes proposed UI if this were built-in.
When LQM is enabled (advanced settings) the usual distance inputs are
replaced with "min snr' and "max distance" inputs which are the major
ones you might tweak, as well as a link to the LQM status page.
Other controls are now available (so protected) in advanced settings.

* Improve LQM updating

* Use running snr averages

* Merge app changes

* AREDN-ize the UI

* Improve status language

* Improved DtD detection

* Improve quality reporting

* Link Quality category

* Enable by default

* Better intergration

* Link => Neighbor

* Formatting

* Make sure initial page is populated without extra fetch

* Handle empty lqm.info

* Update with latest experiment algorithm changes

* Validate LQM settings before applying them

* Algorithm updates

* Improve quality reporting

* %% -> %

* Default max distance now 50 miles

* Get actual noise if radio will provide it

* low_snr => min_snr

* Dont print node description if we dont have one

* Remove properties duplicated from setup page

* Localize max distance. Miles in GB and US, Kilometers everywhere else.

* Ping link quality testing

* UDP 'ping' for quality check

* Change Active Settings title

* Expand ping test

* Improve messaging

* Add a ping penalty for neighbors which cannot be contacted in a timely manner.

* Remove user_blocks config option. No one needs to use this anymore.

* Localize distances on lqm page

* Improve status reporting

* First run emergency node setup.
When a node first runs LQM, if the default settings fail to connect to
a node we will now adjust them so that at least one node is viable.

* Restore blocking of mac addresses

* LQM now off by default
fixed #47
2022-05-18 12:49:00 -05:00
Tim Wilkinson 1c6c596d38
Only start vtund server if we have active clients. 04/27/2022 (#343)
Without active clients the server will fail to start. This is okay, except this
error code causes the package installer to incorrectly report an install problem
requiring an unnecessary reboot.
2022-04-27 11:38:56 -05:00
Tim Wilkinson c42ac68767 Include iperf3 by default 2022-04-20 20:50:19 -07:00
Tim Wilkinson fc55e44001
Run NTPD daily to sync time against network clock (#319) 2022-03-27 20:13:18 -05:00
Tim Wilkinson 75d42693d3
Stop people removing tunnel components (which will break things now) (#320) 2022-03-25 14:15:44 -05:00
Tim Wilkinson 321e58bd37
Include tunnels by default (#302)
* Include tunnels by default

* Tunnels are always installed so no longer need this flag
2022-03-17 20:57:48 -05:00
Tim Wilkinson 8947e6f23c
Migrate LeafletJS to new URL (#298) 2022-03-16 21:42:26 -05:00
Tim Wilkinson 09985d3c57
Completely remove perl from the build DUMP_PERL (#291)
* And finally ... remove perl from the images

* Remove two more than came from the Admin merge

* Remove perl from perm packages
2022-03-15 21:23:39 -05:00
Tim Wilkinson 49300073dc
Remove xinetd (which has little to do) (#292)
Switch olsrd dot_draw plugin to directly accept connections and not pass through xinetd.
2022-03-14 19:23:03 -07:00
Tim Wilkinson 7dde68bbb5
Lua page: Admin (#290)
* Fix scripts to fail gracefully if tunnel software not configured.
* Add 'manager.lua' to restart list
* Admin page in Lua (+associated upgrade script)
* Rename bbhn-postupgrade -> aredn_postupgrade
* Add missing 'uploadctlservices' call before package upload
2022-03-13 20:19:04 -07:00
Tim Wilkinson 93e8d0a53d Cron is only running to poll AREDN messages, so kill it.
And move polling into the Lua Manager
2022-03-09 19:18:19 -08:00
dman776 02ffc1e1b9
Revert "Prevent mesh from accessing internal LAN (#175)" (#240)
This reverts commit 86473b642e.
2022-02-28 15:45:46 -06:00
battlehax 86473b642e
Prevent mesh from accessing internal LAN (#175) 2022-02-28 14:41:22 -06:00
Tim Wilkinson fa6c2da4fe
Lua Services (#189)
* Lua Services

* Support multiple antenna chains

* Improved led detection

* Fix logging

* Add manager.log files to support tool
2022-01-17 18:54:44 -06:00
dman776 488247753c
remove 'trunk' from snapshots path (#194) 2021-12-18 10:42:13 -06:00
Tim Wilkinson ee2791c621
Dmz mode migrate fix (#169)
* Migrate /etc/config/dmz-mode to /etc/dmz-mode

* Migrate dmz_mode into /etc/config/aredn

* Use cmd append

* Changes should be in /etc/config.mesh

* Add commit
2021-11-19 15:48:45 -06:00
dman776 7163819bf2
moved uci actions and file actions under file exists test (#173) 2021-11-12 08:34:31 -06:00
Tim Wilkinson f1b949134d
Stop creating 'config alerts' on every reboot. (#172)
Co-authored-by: Tim Wilkinson <tim@aredn-build.home>
2021-11-11 12:08:49 -06:00
dman776 90d9ac94bc
fix: duplicate to the config.mesh structure after saving. (#170) 2021-11-09 23:16:25 -06:00
dman776 f0c62fc2a7
enhancement: migrate location info to uci (#168)
* add uci migration script

* removed debug lines

* added newline to end

* include gridsquare values

* migrate lat/lon/gridsquare to uci format

* remove from sysupgrade kept files list
2021-11-09 17:03:20 -06:00
Tim Wilkinson 1fd909b18d
Meshoween: Better way to add new uci meshstatus section (#159) 2021-11-03 21:26:56 -05:00
Tim Wilkinson 134532ab2a
aredn: Meshoween Mesh status page optimizations (#157)
* Memory and cpu performance improvements
* Fix bandwidth reporting
* Discard large arrays once we're done with them
* Fixup whitespace
* Improve string constructions
* Use available mem
* Print the Remote Nodes as we go (can be big)
* Local variables
* Stop re-reading arp/mac files
* Reduce calls to system 'cat'
* Simply lat/lon read
* Only read route30 once
* Whitespace
* Make meshstatus limits configurable
* and => &&, or => ||
* gzip content if we can

fixes #155
2021-11-02 21:35:39 -07:00
Paul K3PGM 3ddb7a0bb2
feature: runtime-configurable tunnel limits (#84) 2021-04-23 09:46:09 -05:00
Paul K3PGM 130119f163
Tunnel servers limited to 9 - same fix as vtundsrv in f4a1e73 (#82) 2021-03-21 19:13:34 -05:00
dman776 cdf8057f65
bugfix: re-submit path reset2 (previously approved) (#75) 2021-03-12 20:02:08 -06:00
dman776 7c6c1e4636
bugfix: reset download paths upon upgrade to default (#69)
* bugfix: reset download paths upon upgrade to default, if standard paths are used.

* correct aredn_base path default
2021-02-23 21:23:06 -06:00
Eric e4a0c996ff bugfix: custom download paths during firmware upgrade
Fixes #575
2020-10-07 16:23:46 -07:00
Eric 2c1bd9ce0e
aredn: enhancement: Nat mode aliases
Aliases in NAT mode allows the node admin to create alias names for hosts on the LAN and then use those for creating port forwarding rules.  The aliases DO NOT effect the rest of the mesh network and are not propagated via OLSR.

NAT Mode aliases are only usable on the local LAN where the IP addresses are known and routable only on the subnet.   Since the NAT hides these IP addresses or the node masquerades, other mesh nodes and devices by definition only know about the node’s hostname.  Thus aliases on the LAN in NAT mode are not propagated by OLSR across the mesh.  You _CANNOT_ use an alias name in a service listing.

You _will_ be able to set an alternate hostname for any host on the nodes' LAN however.
A host named `CBY45-DELLLAPTOP` can also be known as `wxc-shack-laptop`. It may make remembering which host is which a bit easier.

Since OLSR does not propagate the alias,  the "Do Not Propagate" checkbox while in NAT Mode is hidden.
2020-10-07 16:20:59 -07:00
Eric e13dd2cb04
aredn: allow aliased hostnames on the mesh
Allows for aliased hostnames on the mesh. One IP/Host can be assigned to multiple hostnames.
This is useful for many things including virtual hosts, virtual machines, virtual email addresses, etc.
The possibilities are actually _endless_.

Fixes #516
2020-09-08 16:39:49 -05:00
Joe Ayers f4a1e73189 aredn: bugfix max tunnel limited to 9 instead of 10
fixes #564
2020-09-08 14:39:23 -05:00
dman776 5e572ff66a
aredn: add aredn local alerts capability (#552) 2020-08-18 16:17:03 -05:00
Joe Ayers 1adcfd77a5 aredn: remove config files no longer in use consuming flash
clean up 176k of flash space.  Config files include modes
forA P, Client, Mesh_Ap, and ROuter.  Files are no longer
referenced or used.
2020-06-29 08:11:44 -05:00
Joe AE6XE 7b3f205ffb
aredn: allow wan ping (#544)
fixes: #509
2020-06-24 21:08:06 -05:00
Eric 31492676dc
update: Change the nodes default map tile server URL away from MapBox (#527) 2020-06-20 19:54:12 -05:00
apcameron 80619b73a9
ath79: Migrate the TP-LINK WBS Devices to the ath79 Branch (#525) 2020-05-01 09:30:39 -05:00
Joe AE6XE b53ce1e817
bugfix: aredn firewall blocking traffic when using tunnel feature (#524)
fixes #522
tested by: Matthew KB9OIV <Matthew.annen@gmail.com>
tested by: Chris K3ADA <sutehk.cs@gmail.com>

Resolves 2 issues with tunnel iptable rules.  A rule needed to be
shifted down by 1 position in chain given upgrade to openwrt 19.07.
Reload of rules was not correctly retaining chain order and creating
duplicate entries, inadvertantly blocking intended traffic.
2020-04-29 20:54:29 -05:00
apcameron 62adfa9eb8
ath79: Migrate CPE210 v1/v1.1, CPE510v1/v1.1 to the ATH79 Branch (#523)
Installation:

Flash factory image through stock firmware WEB UI
or through TFTP:
To get to TFTP recovery just hold reset button while powering on for
around 4-5 seconds and release.
Rename factory image to recovery.bin
Stock TFTP server IP:192.168.0.100
Stock device TFTP address:192.168.0.254
2020-04-28 22:29:37 -05:00
apcameron 31c6669c2f ath79: add support for TP-Link CPE220 v2
Specifications:

    * SoC: Qualcomm Atheros AR9344 (560 MHz)
    * RAM: 64MB
    * Storage: 8 MB
    * Wireless: 2.4GHz N based built into SoC 2x2
    * Ethernet: 2x 100/10 Mbps, integrated into SoC, 24V POE IN

Installation:

Flash factory image through stock firmware WEB UI
or through TFTP:
To get to TFTP recovery just hold reset button while powering on for
around 4-5 seconds and release.
Rename factory image to recovery.bin
Stock TFTP server IP:192.168.0.100
Stock device TFTP address:192.168.0.254
2020-04-20 19:20:57 -07:00
dman776 c3f94bd0d5
feature: add "aredn alerts" feature in header (#505)
* feature: add "aredn alerts" feature in header

* optimize conditional logic

* additional fixes

* improve presentation display
2020-04-08 21:31:01 -05:00
Eric 83675fbd9d
enhancement: ability to change and revert firmware and package download paths (#490)
replaces #486
fixes #452
2020-04-03 15:58:30 -05:00
dman776 5d672f5371
feature: change firmware download location (#488) 2020-02-26 22:59:13 -06:00
Joe Ayers 9d5f8a3a78 aredn: upgrade to pre-openwrt-19.07.2 2020-02-26 00:04:23 -06:00
Joe Ayers 3a4d92add2 aredn: switch from active to passive wifi scan
Password protection is no longer necessary with
a passive scan.  results are same or very similiar,
both options do not always show all devices.
2019-08-24 20:48:52 -07:00
Joe Ayers 74ca6f5a17 aredn: add wan wifi client capability 2019-06-17 20:45:02 -07:00
dman776 c981a1c451
feature: api - added current dhcp leases (#394)
* feature: api - added current dhcp leases

* move dhcp info to secure page

* changed filename
2019-04-30 20:29:17 -05:00
Joe Ayers 07aa305e29 aredn: olsrd: add olsrd watchdog
Adding native olsrd watchdog on top of procd
ensures mesh nodes are always accessable.

closes #338
2019-01-27 14:12:37 -08:00
Joe Ayers 1c6d2286cc aredn: hap ac lite add 2G/5G lan ap options
Add option for hap ac lite to select which band to
use for LAN AP option, 2GHz or 5GHz.  Also, ensure
all wireless cards are defined when disabled to
prevent default wireless config options.
2018-12-17 20:13:37 -08:00
Joe AE6XE f777e914f9 aredn: Mesh RF enable/disable (#307)
add feature to turn off Mesh RF if not in use.  When off,
section to re-purpose wireless card to LAN bridged Access
Point becomes visable.
Closes #155
2018-12-12 15:16:07 -06:00
dman776 ce5a757ca0
bugfix: advanced config usb passthru errors when uci section is not available (#308) 2018-12-12 08:31:57 -06:00
Joe AE6XE 123949de9e
aredn: Standardize Ethernet Port vlans for UBNT XM devices (#297)
The secondary port on Ubnt XM devices was non-functional.
Enabled bridge type in network config to utilize both ports.
2018-12-02 17:52:48 -08:00
dman776 dab3f60c9a
bugfix: correct uhttpd page security on sysupgrade (#296) 2018-12-02 17:28:35 -06:00
dman776 86ec92ac46
bugfix: usb passthrough not initializing after reboot properly (#292) 2018-11-29 22:15:16 -06:00
Joe AE6XE a62fe95b26
aredn: hAP ac lite enable 5GHz LAN Access Point (#287)
* aredn: hAP ac lite enable 5GHz LAN Access Point

enable ability to bridge LAN physical ports with wireless
LAN Access Point capability. On dual band hAP ac lite,
used in parallel with mesh RF on 2GHz.  Enables future
features on single band devices to turn off mesh RF and
repurposed for mesh LAN Access Point.

closes: #215
2018-11-27 21:37:59 -08:00
dman776 854afdb32d
bugfix: correct initial values for poe and usb passthrough (#271)
* bugfix: correct initial values for poe and usb passthrough

* correct a few shellcheck errors
2018-11-16 22:41:58 -06:00
dman776 8716fd42be Add PoE passthrough option to advanced config (#243)
* minor changes

* handle null value (change to 0)

* add poe_passthrough script

* change key location

* change key name

* add default info into aredn uci file

* add conditional functions
2018-10-26 19:34:16 -07:00
dman776 9391ff5555
Add "Advanced config" page (#237)
* initial commit

* feature: advanced configuration page

fixes #230

* add help page updates

* added menu links to perlfunc.pm

* add default value for serverpath

* move "Reset to Firstboot" button from setup page to advancedconfig page

* secure page
minor ui changes

* center the help icon

* implement callback capabilities pre/post

* hardening uci calls to prevent command injection attacks

* moved settings to custom aredn uci file

* resolve shellcheck warnings
2018-10-25 21:06:05 -05:00
Joe AE6XE 9ce76e1e7e aredn: preserve custom firewall rules across sysupgrade
groups with custom rules created in /etc/local/mesh-firewall
for echolink, ampr.net, and other integrations with internet
based appications can preserve rules across a firmware
upgrade by locating the custom rules in this directory
using a file named 59-custom-rules
2018-09-06 19:45:42 -07:00
Joe AE6XE 0bd057ed40 aredn: phase 1 support for Mikrotik rb952Ui-5ac2nD
Add support for the hAP lite model rb952UI-5ac2nD equivilent to
the UBNT AirRouter.  The 5Ghz interface will be configured in a
2nd phase.  This hAP lite model has double the RAM and Flash
of the AR.  the 2Ghz is MIMO (5Ghz is single antenna).
2018-09-03 23:26:56 -07:00
Joe AE6XE 5abeb8f7ac bugfix: aredn slugbug mitigation
with low memory conditions, typically on 32Mb RAM, the
device would become unresponsive in hours to days. The
symptoms only occured when no RF links. iw processes
would hang in Zombie state.  Updates to use iwinfo where
possible and avoid using both iw and iwinfo.  crontab
script is implemented to detect Zombie processes and free
up resources in the reduced chance the symptoms are still
occuring.
2018-08-22 07:23:53 -07:00
Trevor Paskett af0e26dd84 config change to make uhttpd listen on port 80 and 8080 (#142)
* config change to make uhttpd listen on port 80 and 8080

* add port 80 to tunnel firewall rules

* add port 80 to tunnel firewall rules in config, update help

* firewall rules for wan + dtdlink
2018-08-20 14:09:47 -05:00
dman776 560070d2d1
bugfix: node description not saving properly (#101) 2018-08-02 15:58:01 -05:00
Joe AE6XE 53fd55b345 aredn: tunnel firewall rules upgrade to openwrt 18.06
fixes: #68
2018-07-14 21:34:00 -07:00
apcameron 0d95d4d708 ar71xx: Add Support for the TP-LINK CPE510 V2.0 Device
Once the PR for this is accepted by Openwrt we will need to remove the file
001-add_support_for_TP-Link_CPE510_v2.patch

Removed 001-add_support_for_TP-Link_CPE210_v2.patch as PR #937 has been committed

Updated 99_setup_aredn_include to remove unused Rssi Led configuration
2018-07-04 18:17:14 -07:00
Joe AE6XE 8cbc9a1435 hardware: add aredn definition for mikrotik 912uag-5hpnd
Mikrotik RouterBOARD 912UAG-5HPnD or BaseBox 5 definition
2018-06-15 17:50:18 -05:00
apcameron 9fd3f30934 ar71xx: Add Support for the TP-LINK CPE210 V2.0 Device
Once Support for the TP-LINK CPE210 V2.0 gets added to the OpenWrt code we will need to drop the patch 001-add_support_for_TP-Link_CPE210_v2.patch
2018-05-15 21:20:44 -07:00
Andrew Cameron 770fe43e23 aredn: upgrade setup_aredn_include to new generate_led 2018-03-29 23:55:55 -07:00
Andrew Cameron 1fc7a926ab bugfix: fix scripts to current standards
local can only be used in a function
2018-03-29 22:00:19 -07:00
Joe AE6XE b7cacc3d18 package: olsr: AREDN upgrade to 0.9.6.2 2018-03-29 21:03:16 -07:00
Darryl Quinn f532ee6a40 bugfix: tun_client connection does not persist/retry
refs AREDN->ticket:229

Change-Id: I843bd2eb7c6d88ec4917e52cfc5bbdfaeda9f4c0
2017-04-26 12:06:24 -05:00
Darryl Quinn 7d8496282b bugfix: remove unnecessary packages in order to reduce memory footprint
Change-Id: I0897be587cd1f46da758dda3efe65aea32c8a965
2017-04-04 03:11:46 +00:00
Conrad Lara - KG6JEI a57d5cd08c bugfix: olsrd-watchdog false reports
olsrd-watchdog can trigger when the olsrd service is restarted
Such as when a tunnel comes up, or when a config change is
made to olsrd.

procd already monitors olsrd and makes sure it remains running.

With procd we no longer need olsrd-watchdog and can remove it.

fixes AREDN->ticket:215

Change-Id: I5067d380a22bd0ab5e597746478ef3e1ba05d72d
2017-03-31 19:34:49 +00:00
Conrad Lara - KG6JEI 8ee8fbefe0 bugfix: Increase available memory during upgrade/install process
It is possible for the system to run out of memory when dealing
with large file uploads and installs.

As part of the upgrade procedure shutdown services that are not
essential for node operations to allow more memory for install
to take place.

Includes changes to linkled to indicate this new state as it will
be shutdown as part of the cleanup process.

Memory gain (approximate)

dropbear 100kb
linkled  200kb
logd     200kb
odhcp    100kb
snmpd    500kb
xinetd   100kb

Total(approximate): 1200kb (around %4 on 32mb devices)

This is somewhat similar to files/usr/local/bin/upgrade_kill_prep
except that it kills only a select group of services
so that the system can handle the file upload while
upgrade_kill_prep does the final system cleanup to run the full
upgrade.

ref AREDN->ticket:204

Change-Id: Ic6d3aa028725064a97c4723f6d9b36e1e51d87a7
2017-03-08 03:23:52 +00:00
Conrad Lara - KG6JEI c592f44ab0 Sourcecode license text spelling correction.
Inside the source files the word "contained" was mispelled
as "conained"

The website currently lists this correctly as "contained"

This was an error in the intial stamping of the source files in
changeset:5c3ee1d0686c6e6f2907fe4fc393d86d6c5a69b5/aredn_ar71xx

Line is part of "Additional Conditions" permitted by GPLv3.
Line does not impact coders prior to the AREDN setup date
as it was added by the AREDN team.

Change-Id: I3bc09aea548100f35c08aebe8686b8d4808d56d8
Signed-off-by: Conrad Lara - KG6JEI <KG6JEI@amsat.org>
Signed-off-by: Joe Ayers <ae6xe@arrl.net>
Signed-off-by: Darryl Quinn <k5dlq@arrl.net>
Signed-off-by: Trevor Paskett - K7FPV <snoopytjp@gmail.com>
2016-12-30 18:54:05 +00:00
Conrad Lara - KG6JEI 905995eb23 feature: Automate banner file creation Patch 1 of 2
Remove banner from the files set as it will override the build
version of the banner.

Patch 2 will be in arednbase repo.

Change-Id: Iefb8288985b39b8942419f43925d00aaab53d610
2016-12-16 22:47:46 +00:00
Conrad Lara - KG6JEI 27ea95209e bugfix: Have UI keep timezone after OTA
After OTA upgrade the timezone was kept in the system file
but not in the UI so when a user would save the timezone
would be overwritten.

fixes AREDN->ticket:186

Change-Id: I593afab0c3f67ba9d300228e9cbb47d7e3d894d1
2016-12-12 08:39:35 +00:00
Darryl Quinn 25dc984988 security: protect wifi scan page
fixes AREDN->ticket:195

Change-Id: I30f8087aa59483cdbf73cfde8029ccc7bbd42cb5
2016-11-17 14:50:10 -05:00
Darryl Quinn df9c6601be enable leafletjs, leafletcss, and maptiles to be based on uci config vars
fixes AREDN->ticket:174

Change-Id: I0133ab46df95b14d55192e5e47fa4e8f6377b4c9
2016-06-22 08:43:28 -05:00
Conrad Lara - KG6JEI 061ede3488 Merge branch 'ChaosCalmer' into develop
Change-Id: I26a8677595a25aae267b7365f1e5835ea68f49b4
2016-06-19 19:26:12 -07:00
Conrad Lara - KG6JEI 8f91ad1e0e security feature: Enhance HTTPD password security
Move httpd.conf to not store password and instead depend on the shadow password file.

Also tag the 40_aredn_migrate-httpdconf script to be +x. Not strictly necessary but wish to have this standard

Change-Id: I018d9a3294e45af2316b3c3947ef2a7d8081268b
2016-06-10 19:37:57 -07:00
Conrad Lara - KG6JEI 1271db794a Merge 3.16.1.0 as released into develop
Merge branch 'release-3.16.1.0' into develop
2016-05-17 09:50:40 -07:00
Darryl Quinn 6912f69dc8 fixes AREDN->ticket:165 2016-05-15 17:35:43 -05:00
Conrad Lara - KG6JEI 86d17e0998 bugfix: RFC Compliance for DHCP and Classless static routes
RFC requires that the DHCP server include the default gateway (0.0.0.0/0) route as part the Classless network list.

Moved to node-setup so it can be set dynamically at setup run time.

fixes AREDN->ticket:155
2016-03-31 22:54:29 -07:00
Darryl Quinn 35b8278b34 bugfix: traffic generated from the tun client would not forward thru the server 2016-02-23 13:20:19 -06:00
Conrad Lara - KG6JEI 7df4747aff bugfix: Traffic from Lan to DTDLINK not masqueraded when in NAT mode.
Due to a firewall chain name changes in BB when a node was in NAT mode (instead of recommended direct mode) connections that went out over DTDLink as the first hop would not be masqed and as such would not work.
2016-01-23 20:40:01 -08:00
Conrad Lara - KG6JEI b38309bab5 Merge branch 'FixupTunnelFirewall' into release-3.16.1.0
Various fixes around tunnel firewall rules
2016-01-21 20:40:43 -08:00
Conrad Lara - KG6JEI 29ba1c0419 bugfix: Tunnel Firewall: Accept SNMP and default to block on input chain instead of accept 2016-01-21 20:39:59 -08:00
Trevor Paskett - K7FPV 923039fcc0 Merge branch 'release-3.16.1.0' of ssh://git.aredn.org/aredn_ar71xx into release-3.16.1.0 2016-01-20 10:10:34 -07:00
Trevor Paskett - K7FPV 35e05b7dac change uhttpd script_timeout from 60 to 240 to fix uploading firmware on slow links 2016-01-20 10:09:52 -07:00
Conrad Lara - KG6JEI 0f837d601a bugfix: Tunnel firewall rules throw a chain does not exist on firewall restart.
This chain may not exist by design of the check.

Redirect the iptables error to /dev/null so it doesn't clog logs
2016-01-16 21:20:22 -08:00
Conrad Lara - KG6JEI 5663741cb1 bugfix: On firewall reload some tunnel rules were not being inserted into the default chains which are flushed on both reload and restart of firewall by OpenWRT fw scripts. 2016-01-16 21:20:22 -08:00
AE6XE 2be20cbde2 bugfix: Tunnel firewall rule chain names are incorrect.
Based on previously reverted commit 646702aab9
2016-01-16 21:20:16 -08:00
AE6XE 06eb7fa688 bugfix: Remove erroneous reference in license header of 01-tunnels script.
Script is a new file created after the split from BBHN and did not use code from a file BBHN worked on.
2016-01-16 19:58:38 -08:00
Conrad Lara - KG6JEI 921967d5f9 Revert "bugfix: resolve bad chain ref and port from hotplug to a firewall include"
This reverts commit 646702aab9.

Needs to be broken up into separate commits and doesn't cleanly fix issue with tunnel firewall
2016-01-16 19:55:20 -08:00
AE6XE 646702aab9 bugfix: resolve bad chain ref and port from hotplug to a firewall include 2016-01-16 13:26:14 -08:00
Conrad Lara - KG6JEI 243ded9f23 Bump banner to 3.16.1.0 in prep for release 2016-01-13 09:45:36 -08:00
Trevor Paskett - K7FPV 0aca4ce5c7 fix bug with spaces in time zone names 2016-01-12 10:58:06 -07:00
Conrad Lara - KG6JEI bb10ca7faf Merge branch 'FirewallIncludes' into develop 2016-01-09 19:48:18 -08:00
Conrad Lara - KG6JEI 813c4cefcf feature: Decrease WIFI Beacon rate in Mesh mode to around 2 times a second.
This changes the beacon rate from once every 100tu's to once every 500tu's

1tu=1024 microseconds

This will decrease the amount of RF time being used by beacon packets.

This is especially important on 900MHz and 2.4GHz using 5MHz wide channels where 10 nodes beaconing 10x a second at ~256kbit/s can use up around 45% of the RF channel in beacons alone.
Other bands and channels and widths are not expected to see as significant an advantage due to the faster data rates.
2016-01-09 17:39:44 -08:00
Conrad Lara - KG6JEI e8b2ffd7ea feature: FirewallIncludes: Migrate tunnel firewal rules to new include format.
These rules setup chains that may be needed by other firewall rules as such we need to set them up early to be sure includes work.
2016-01-09 16:24:54 -08:00
Conrad Lara - KG6JEI 477a20d55a feature: FirewallIncludes: Add program that will auto include firewall rules that are in a set directory.
This is the basis for allowing packages to contain firewall rules that can be just dropped in a folder at install time.
2016-01-09 16:24:45 -08:00
Trevor Paskett - K7FPV 6f3cb97ea2 fix new lines 2016-01-08 21:09:38 -07:00
Trevor Paskett - K7FPV 44ab46bc87 move new settings to optional area under table, disable ntp server, ntp server fqdn validation 2016-01-08 18:04:25 -07:00
Trevor Paskett - K7FPV c6d02d964a change timezone to time_zone 2016-01-08 11:50:45 -07:00
Trevor Paskett - K7FPV 6f97c52565 add time zone and ntp server to setup page 2016-01-08 10:58:22 -07:00
Darryl Quinn 07f447313f default wifi distance to 0, disallow saving with 0 value, change alert to show on 0 2016-01-05 23:09:34 -06:00