[DD-WRT] A first hand look and explanation of functions and uses!

[Mark]

[DD-WRT] A first hand look and explanation of everything!

What is DD-WRT?

DD-WRT is a Linux based alternative OpenSource firmware suitable for a great variety of WLAN routers and embedded systems. The main emphasis lies on providing the easiest possible handling while at the same time supporting a great number of functionalities within the framework of the respective hardware platform used.

I've been wanting to play around with custom firmware on a router for ages but the various routers i own aren't supported. I didn't want to splash out on a new router just to have the ability to run DD-WRT as i didn't know what it was like, what features it had or any of the real details, this is why i've made this thread i was googling my heart out with no luck at all. To my relief, a few days ago i got the chance to pick up a cheap Linksys WRT54GL router.

I'm not going to lie to you DD-WRT is very well equipped with a mass of tools, some of which i don't know what they do but throughout this thread i will try my best to explain what the features do and why they're used.

Let's get started, i have print screens of EVERY single page in the DD-WRT web interface. For your own safety they're in spoilers.


Linksys WRT54GL box
[spoiler][/spoiler]


The man himself
[spoiler][/spoiler]


At the time of writing this i was using firmware: DD-WRT v24-sp2
In the DD-WRT web interface there are 8 main top tabs, further options are then within these:

• Setup
  
• Wireless
  
• Services
  
• Securirty
  
• Access Restrictions
  
• NAT / QoS
  
• Administration
  
• Status
  

Default Page

Default page
[spoiler][/spoiler]


This is the page that you get to when you type your router's IP address into your browser. This page displays basic information about your router and network. Anyone can get to this page, you do not need to log in.


You need to log in to see all of the following pages.

Default username = root
Default password = admin

Setup

Basic Setup
[spoiler][/spoiler]


DHCP = Dynamic host configuration protocol. What this basically means is that when a client joins you're network they're automatically assigned an available IP address.
Local IP = The Router's IP
Subnet Mask = 255.255.255.0 (Class C network)
Start IP = Your DHCP pool, it will start assigning IPs from 192.168.2.6
Maximum DHCP users = The maximum number of clients allowed.
Client Lease Time = The time before the IP of a given client is released and re-assigned. (They have to not be connected for that amount of time)


DDNS
[spoiler][/spoiler]


DDNS = Dynamic Domain Name System
Basically what DDNS does is it allows you to connect to your home network through a domain name instead of an IP. A very popular service for this is DynDns.org


MAC Address Clone
[spoiler][/spoiler]


Advanced Routing
[spoiler][/spoiler]


VLANs
[spoiler][/spoiler]


Networking
[spoiler][/spoiler]


EoIP Tunnel
[spoiler][/spoiler]



Wireless

Basic Settings
[spoiler][/spoiler]


AP = Access point
Wireless Network Mode = G = 54MBps, B = 11MBps. IEEE standard 802.11
Wireless Network Name (SSID) = The name that shows up when you're connecting to a wireless network.
Wireless SSID Broadcast = Disabling this will stop your SSID from broadcasting publicly, so that when you scan for networks it won't show up but if you know it's there then you can still connect - It's mainly used for security reasons.


Radius
[spoiler][/spoiler]


Radius is used more in corporate networks, it allows you to connect back to your work's server. A token is usually required as authentication such as your MAC address - Again for security reasons.


Wireless Security
[spoiler][/spoiler]


Security Mode = The encryption to use for your wireless.
WPA Shared Key = Wireless password.


MAC Filter
[spoiler][/spoiler]


MAC Filtering allows you to only allows or deny certain MAC / Physical addresses. Ever single NIC in the world has a different MAC address - This is used for security.


Advanced Settings
[spoiler][/spoiler]


WDS
[spoiler][/spoiler]



Services

Services
[spoiler][/spoiler]


SSHd = Secure shell. SSH allows you to connect to your router through means such as a terminal. SSH was designed as a more secure replacement for Telnet. Uses port 22.
Telnet = Different method of connection. Uses port 23.


VPN
[spoiler][/spoiler]


PPTP = Point-to-Point Tunneling Protocol


Hotspot
[spoiler][/spoiler]


My Ad Network
[spoiler][/spoiler]



Security

Firewall
[spoiler][/spoiler]


SPI = Stateful packet inspection


VPN Passthrough
[spoiler][/spoiler]



Access Restrictions

WAN Access
[spoiler][/spoiler]


This is where you can set access times, so you could stop a certain machine from being able to reach the Internet on Mondays from 9am to 4pm for example. You can also block websites.


NAT / QoS

QoS = Quality of service

Port Forwarding
[spoiler][/spoiler]


Opening ports to internal machines.


Port Range Forwarding
[spoiler][/spoiler]


Port Triggering
[spoiler][/spoiler]


UPnP
[spoiler][/spoiler]


UpnP = Universal plug and play. UPnP allows applications to automatically open ports in your firewall.


DMZ
[spoiler][/spoiler]


DMZ = Demilitarized zone. Putting a machine in a DMZ essentially puts them outside of your firewall leaving all of their ports open. This can be a security risk.


QoS
[spoiler][/spoiler]


QoS = Quality of service. You can set what services, ports and traffic get priority over others. This can be useful for capping torrent ports so that downloading doesn't bring your network to a stand still.


Administration

Management
[spoiler][/spoiler]


Router Password = The password used to log into the web interface of the router.


Keep Alive
[spoiler][/spoiler]


Commands
[spoiler][/spoiler]


WOL
[spoiler][/spoiler]


WOL = Wake on Lan


Factory Defaults
[spoiler][/spoiler]


Allows you to restore your router to factory defaults.


Firmware Upgrade
[spoiler][/spoiler]


Allows you to upgrade the DD-WRT firmware.


Backup
[spoiler][/spoiler]


Allows you to backup your current configuration.


Status

Router
[spoiler][/spoiler]


Shows various information on the status of your router including memory usage.


WAN
[spoiler][/spoiler]


Wide area network information.


LAN
[spoiler][/spoiler]


Local area network information. You can also see active clients from here (who's connected to your network).


Wireless
[spoiler][/spoiler]


Bandwidth
[spoiler][/spoiler]


The bit i like, this gives you the ability to monitor bandwidth usage for WAN (Internet), LAN (Local) and Wireless (Local).


Sys-Info
[spoiler][/spoiler]



I hope this has given you an insight into the sort of things you can achieve by using DD-WRT. I will also be writing a thread about Tomato, check the Networking section for it.

:tux

[Drumm]

I've always wanted to dive into DD-WRT. Not had a compatible router yet. Will make sure I will when I make my own setup.
I congratulate you on your use of spoilers for images, smaller images. And not overdoing the pictures. This is one case where I think you haven't gone over the top by showing people how to tick a box or something in your images.

[Pack3t SynAck3r]

Make sure if you use QoS on DD-WRT that you enter the correct information for upstream and downstream bandwidth.(If you are going this route you will see the option in the menu) Generally as a rule of thumb you want to enter values on both that are equal to 90% of you best possible speed. So if you have a "10Mb down/5Mb up" connection you would want to set in QoS Down=9Mb/sec and Up= 4.5Mb/sec.
A cool feature of DD-WRT is that you can telnet into it and so you ALMOST feel like you are logged into a big corporate Cisco router.
Bummer: Sometimes the wireless N routers end up losing their N functionality when DD-WRT is implemented (only b/g mode works) but overall it can't be beat as far as adding functionality to your router goes. Sometimes you can even hack your router to have two separate wireless networks one that connects to your LAN, and one that is on its own LAN(Some routers come by default come with this functionality, DD-WRT can sometimes "unlock" the ability in some routers). A honeypot with bandwidth restrictions is what you get, kick ass!! Let them come connect to your open network....nobody will be watching what your doing, honest.