Skip to content

OpenWRT

interface restart

here

1
2
3
4
5
#!/bin/sh
r=$(/bin/date | /usr/bin/md5sum | /usr/bin/cut -c 1-8)
/sbin/uci set network.wan.hostname="owrt${r}"
/sbin/uci commit network
/etc/init.d/network reload

OR

here

IP accessibility test supposed: nc -zw1 8.8.8.8 53

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
#!/bin/ash
# This file is responsible for restarting the network interface.
# Should be run once OFFLINE state is detected.

INTERFACE="wwan"

# syslog entry
logger -s "INTERNET KEEP ALIVE SYSTEM: Restarting the LTE interface."

echo "SH RESTART IFACE DOWN"
ifdown $INTERFACE

sleep 2

echo "SH RESTART IFACE UP"
ifup $INTERFACE
then logread -e cron, if croned.

lm-sensors in OpenWRT

  • sensors (установить: opkg install lm-sensors) – вывод датчиков температуры.
  • sensors-detect – запуск определение датчиков
  • collectd-mod-thermal (установить: opkg install collectd-mod-thermal) – сбор данных температур.
  • opkg install luci-app-statistics - установка пакета визуализации температуры в веб панели.
  • После установки можно настроить сбор данных через пакет luci-app-statistics

6in4 for OpenWRT

here

OpenConnect for OpenWRT

Here: https://github.com/openwrt/packages/tree/master/net/openconnect:

The openconnect client expects to be configured using the uci interface.

To setup a VPN connection, add the following to /etc/config/network:

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
config interface 'MYVPN'
    option proto 'openconnect'
    option interface 'wan'
    option uri 'https://vpn.example.com:4443'
    option username 'test'
    option password 'secret'
    option serverhash 'AE7FF6A0426F0A0CD0A02EB9EC3C5066FAEB0B25'
    option defaultroute '0'
    # option proxy 'http://proxy.example.com:8080'
    option authgroup 'DEFAULT'
    # usergroup option, if required by some servers
    # option usergroup 'USERGROUP'

    # Reconnect after a temporary network down time (in seconds)
    #option reconnect_timeout '30'

    # For second factor auth:

    # when a fixed 2FA password can be used
    #option password2 'my-fixed-2fa-password'

    # RSA tokens, must be built with stoken support
    #option token_mode 'rsa'
    #option token_secret 'secret'

    # HOTP/TOTP tokens
    #option token_mode 'hotp'
    #option token_secret '00'

    # tokens from script
    #option token_mode 'script'
    #option token_script '/lib/custom/getocpass.sh'

    # For non-anyconnect vpn protocols
    # Cisco AnyConnect (default)
    #option vpn_protocol 'anyconnect'
    # Juniper Network Connect
    #option vpn_protocol 'nc'
    # Palo Alto Networks GlobalProtect
    #option vpn_protocol 'gp'
    # Pulse Connect Secure
    #option vpn_protocol 'pulse'

    # Authentication form responses
    #list form_entry FORM:OPT=VAL

The additional files are also used:

  • /etc/openconnect/user-cert-vpn-MYVPN.pem: The user certificate
  • /etc/openconnect/user-key-vpn-MYVPN.pem: The user private key
  • /etc/openconnect/ca-vpn-MYVPN.pem: The CA certificate (instead of serverhash)

After these are setup you can initiate the VPN using ifup MYVPN, and deinitialize it using ifdown. You may also use the luci web interface (Network ⇒ Interfaces ⇒ MYVPN Connect).

Note that you need to configure the firewall to allow communication between the MYVPN interface and lan.

There is a luci plugin to allow configuring an openconnect interface from the web environment; see the luci-proto-openconnect package.