#+TITLE: Open-WRT Router (Netgear R7800)
#+SETUPFILE: ./setup/org-setup-file.org

* Installation
** Freebox - Bridge mode
https://blog.kulakowski.fr/post/openwrt-derriere-une-freebox-ipv6-dmz-et-bridge

** Enable SSL
How can I enable SSL for the web admin gui?
In an SSH-command line, run opkg update, then install the package opkg install luci-ssl, then restart the router. Then you can access https://192.168.1.1 or https://openwrt with your favorite web browser

** Install useful packages
#+begin_src bash
opkg update && opkg install luci-ssl-openssl luci-theme-material ipset curl diffutils speedtest-netperf kmod-ipt-nat6
#+end_src

* Update
#+begin_src matlab
opkg update
#+end_src

#+begin_src bash
opkg list-upgradable | cut -f 1 -d ' ' | xargs -r opkg upgrade
#+end_src

* Configuration
** Configuration Files
https://openwrt.org/docs/guide-user/base-system/uci#common_principles

Configuration files are in =/etc/config=.

| *File*                 | *Description*                                  |
|------------------------+------------------------------------------------|
| =/etc/config/dhcp=     | Dnsmasq and odhcpd settings: DNS, DHCP, DHCPv6 |
| =/etc/config/dropbear= | SSH server options                             |
| =/etc/config/firewall= | NAT, packet filter, port forwarding, etc.      |
| =/etc/config/network=  | Switch, interface and route configuration:     |
| =/etc/config/system=   | Misc. system settings, NTP, RNG, Watchcat      |
| =/etc/config/wireless= | Wireless settings and wifi network definition  |

Nice theme:
https://github.com/jerrykuku/luci-theme-argon

** VLAN
| ID | Name      | Description |
|----+-----------+-------------|
|  1 | LAN       |             |
|  2 | WAN       |             |
|  3 | GUEST     |             |
|  4 | IOT       |             |
|  5 | Unifi-LAN |             |

** IP Addresses
*** LAN
| Hostname        | MAC-Address       |  IPv4-Address | Description |
|-----------------+-------------------+---------------+-------------|
| xps13           | 94:05:BB:13:6E:55 |  192.168.1.71 |             |
| desktop-w10     | 14:DA:E9:D5:9D:F4 |  192.168.1.72 |             |
| smart-tv        | 5C:85:7E:45:F9:82 |  192.168.1.73 |             |
| unifi-u6-lite-1 | 70:A7:41:C6:BE:60 |  192.168.1.74 |             |
|-----------------+-------------------+---------------+-------------|
| homelab         | D4:5D:64:7C:38:3C |  192.168.1.21 |             |
|-----------------+-------------------+---------------+-------------|
| oneplus8        | 5A:C7:3D:21:DE:D7 | 192.168.1.101 |             |
|-----------------+-------------------+---------------+-------------|
| valetudo        | 7C:25:DA:37:A5:BC | 192.168.1.110 |             |


*** IOT
| Hostname                      | MAC-Address       | IPv4-Address | Description |
|-------------------------------+-------------------+--------------+-------------|
| http://shutter-1.lan/         | C4:5B:BE:5F:C8:32 | 192.168.2.10 | Shutters    |
| http://shutter-2.lan/         | C4:5B:BE:5F:3A:E2 | 192.168.2.11 |             |
| http://shutter-3.lan/         | C4:5B:BE:5F:35:41 | 192.168.2.12 |             |
| http://shutter-salon.lan/     | 48:3F:DA:49:24:01 | 192.168.2.13 | (ESP8266)   |
|-------------------------------+-------------------+--------------+-------------|
| http://shelly1-1.lan/         | E8:68:E7:86:C1:2C | 192.168.2.20 | Light-bulbs |
| http://shelly1-2.lan/         | E8:68:E7:87:46:51 | 192.168.2.21 |             |
| http://shelly1-3.lan/         | 8C:AA:B5:74:CD:16 | 192.168.2.22 |             |
| http://shelly1-salon.lan/     | E8:68:E7:87:27:1D | 192.168.2.24 |             |
| http://shelly25-cuisine.lan/  | 98:CD:AC:1E:11:8E | 192.168.2.25 |             |
| http://shelly25-entrance.lan/ | C4:5B:BE:6B:87:39 | 192.168.2.26 |             |
|-------------------------------+-------------------+--------------+-------------|
| http://xiaomi-ble.lan/        | 3C:61:05:12:A8:C4 | 192.168.2.28 | Temperature |
|-------------------------------+-------------------+--------------+-------------|
| http://shellytrv-1.lan/       | BC:33:AC:03:35:8C | 192.168.2.40 | TRV         |
| http://shellytrv-2.lan/       | 60:A4:23:DC:C7:1E | 192.168.2.41 |             |
| http://shellytrv-3.lan/       | 60:A4:23:DC:C8:14 | 192.168.2.42 |             |
| http://shellytrv-s.lan/       | 60:A4:23:DB:2B:76 | 192.168.2.43 |             |
| http://shellytrv-e.lan/       | 60:A4:23:DB:2C:8C | 192.168.2.44 |             |