Wireless AP with udhcpd and NAT - Revision history

AlpinePhil: Proposal for merging.

2025-09-24T18:38:38Z

Proposal for merging.

← Older revision		Revision as of 18:38, 24 September 2025
Line 1:		Line 1:
	[[Category:Networking]]		[[Category:Networking]]
			{{Merge\|Setting up a Home Router}}
	Setting up a wireless AP with udhcpd and NAT		Setting up a wireless AP with udhcpd and NAT

Sertonix: replace /etc/init.d with rc-service

2023-11-17T10:31:42Z

replace /etc/init.d with rc-service

← Older revision		Revision as of 10:31, 17 November 2023
Line 110:		Line 110:
	= Test =		= Test =
	<code>		<code>
	~~/etc/init.d/~~hostapd start		rc-service hostapd start

	~~/etc/init.d/~~udhcpd start		rc-service udhcpd start

	sysctl net.ipv4.ip_forward=1		sysctl net.ipv4.ip_forward=1
Line 140:		Line 140:
	address 192.168.2.1		address 192.168.2.1
	netmask 255.255.255.0		netmask 255.255.255.0
	up ~~/etc/init.d/~~iptables start		up rc-service iptables start
	up sysctl net.ipv4.ip_forward=1		up sysctl net.ipv4.ip_forward=1
	down ~~/etc/init.d/~~iptables stop		down rc-service iptables stop
	</pre>		</pre>

Sertonix: use https

2023-08-25T21:25:15Z

use https

← Older revision		Revision as of 21:25, 25 August 2023
Line 2:		Line 2:
	Setting up a wireless AP with udhcpd and NAT		Setting up a wireless AP with udhcpd and NAT

	(based largely on the [~~http~~://elinux.org/RPI-Wireless-Hotspot raspberry pi wireless router howto])		(based largely on the [https://elinux.org/RPI-Wireless-Hotspot raspberry pi wireless router howto])

	= Dependencies =		= Dependencies =

Bbbhltz: /* Finishing touches */ correcting page link

2023-04-25T09:50:28Z

Finishing touches: correcting page link

← Older revision		Revision as of 09:50, 25 April 2023
Line 150:		Line 150:
	= Finishing touches =		= Finishing touches =

	(See [[~~Setting_up_a_ssh-~~server]] for alternatives and more information)		(See [[Setting up a SSH server]] for alternatives and more information)
	Add dropbear SSH server, configure it to run on only the wireless interface:		Add dropbear SSH server, configure it to run on only the wireless interface:
	{{Cmd\|setup-sshd -c dropbear}}		{{Cmd\|setup-sshd -c dropbear}}

Anjanmomi: fix command formatting

2022-10-03T05:27:07Z

fix command formatting

← Older revision		Revision as of 05:27, 3 October 2022
Line 102:		Line 102:
	{{Cmd\|iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE		{{Cmd\|iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
	iptables -A FORWARD -i eth0 -o wlan0 -m state --state RELATED,ESTABLISHED -j ACCEPT		iptables -A FORWARD -i eth0 -o wlan0 -m state --state RELATED,ESTABLISHED -j ACCEPT
	iptables -A FORWARD -i wlan0 -o eth0 -j ACCEPT		iptables -A FORWARD -i wlan0 -o eth0 -j ACCEPT}}
	# this saves the state in a location the service can restore it from		# this saves the state in a location the service can restore it from
	<code>		<code>

Bt129: /* Finishing touches */

2021-07-25T09:25:30Z

Finishing touches

← Older revision		Revision as of 09:25, 25 July 2021
Line 157:		Line 157:
	DROPBEAR_OPTS="-p 192.168.2.1:22"		DROPBEAR_OPTS="-p 192.168.2.1:22"

	(assuming ~~that~~ the wireless interface has the IP 192.168.2.1 and you		(assuming the wireless interface has the IP address 192.168.2.1 and you
	want SSH on port 22).		want SSH on port 22).
	This is optional, but if you're using a wireless router it helps to be able		This is optional, but if you're using a wireless router it helps to be able
	to administer it, and listening on all addresses is rather risky.		to administer it, and listening on all addresses is rather risky.


	= Things this doesn't cover but it would be nice to =		= Things this doesn't cover but it would be nice to =

Bt129: /* Make changes permanent */

2021-07-25T09:24:28Z

Make changes permanent

← Older revision		Revision as of 09:24, 25 July 2021
Line 118:		Line 118:
	and try connecting from another computer.		and try connecting from another computer.

	= Make changes permanent =		= Make the changes permanent =

	{{Cmd\|rc-update add hostapd		{{Cmd\|rc-update add hostapd
Line 127:		Line 127:
	Now, the odd parts:		Now, the odd parts:
	iptables tries to set net.ipv4.ip_forward to 1 when it's started, but in		iptables tries to set net.ipv4.ip_forward to 1 when it's started, but in
	my experience, this ~~cannot be relied upon~~.		my experience, this is not reliable.
	You do not want to enable the "iptables" service~~; it~~ starts before		You do not want to enable the "iptables" service. It starts before
	networking, and may result in your wireless interface not getting configured.		networking, and may result in your wireless interface not getting configured.
	(Apparently, ifup thinks that wlan0 is up and skips it. This was not something I expected, but it's the only explanation I have for how things worked...)		(Apparently, ifup thinks that wlan0 is up and skips it. This was not something I expected, but it's the only explanation I have for how things worked...)

	Rather, modify /etc/network/interfaces, commenting out any configuration for		Rather, modify /etc/network/interfaces, commenting out any configuration for
	your wireless interface. Then add ~~this~~:		your wireless interface. Then add:

	<pre>		<pre>
Line 145:		Line 145:
	</pre>		</pre>

	(It ~~would be~~ possible to set everything up so that hostapd and udhcpd get		(It's possible to set up everything so that hostapd and udhcpd get
	started and stopped from the wlan0 stanza; I didn't bother doing that.)		started and stopped from the wlan0 stanza. I didn't bother doing that.)


	= Finishing touches =		= Finishing touches =

Bt129: /* Configure iptables */

2021-07-25T09:22:28Z

Configure iptables

← Older revision		Revision as of 09:22, 25 July 2021
Line 105:		Line 105:
	# this saves the state in a location the service can restore it from		# this saves the state in a location the service can restore it from
	<code>		<code>
	service iptables save}}		service iptables save
	</code>		</code>

Bt129: /* Configure iptables */

2021-07-25T09:21:48Z

Configure iptables

← Older revision		Revision as of 09:21, 25 July 2021
Line 104:		Line 104:
	iptables -A FORWARD -i wlan0 -o eth0 -j ACCEPT		iptables -A FORWARD -i wlan0 -o eth0 -j ACCEPT
	# this saves the state in a location the service can restore it from		# this saves the state in a location the service can restore it from
			<code>
	service iptables save}}		service iptables save}}
			</code>

	= Test =		= Test =

Bt129: /* Configure iptables */

2021-07-25T09:19:10Z

Configure iptables

← Older revision		Revision as of 09:19, 25 July 2021
Line 103:		Line 103:
	iptables -A FORWARD -i eth0 -o wlan0 -m state --state RELATED,ESTABLISHED -j ACCEPT		iptables -A FORWARD -i eth0 -o wlan0 -m state --state RELATED,ESTABLISHED -j ACCEPT
	iptables -A FORWARD -i wlan0 -o eth0 -j ACCEPT		iptables -A FORWARD -i wlan0 -o eth0 -j ACCEPT
	# this saves the state ~~somewhere that~~ the service can restore it from		# this saves the state in a location the service can restore it from
	service iptables save}}		service iptables save}}