Re: [OpenWrt-Users] Hardware recommendation for Access Point with WPA Enterprise

2016-11-15 Thread Stefan Monnier
> Do they support my RADIUS, multi-ssid and user-to-VLAN-mapping wishes?

AFAIK RADIUS and user-to-VLAN-mapping should work "anywhere" by
OpenWRT, even on the cheapest thingies (as long as there's enough
RAM/Flash/CPU to handle it), since it's a "simple matter of coding".

So the main question is w.r.t multi-SSID and 11ac support, which will
depend on the wifi-driver, where things are a lot more messy because it
usually depends on cooperation from the vendor or reverse-engineering.


Stefan
___
openwrt-users mailing list
openwrt-users@lists.openwrt.org
https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-users


Re: [OpenWrt-Users] Hardware recommendation for Access Point with WPA Enterprise

2016-11-15 Thread Marc Haber
Hi,

On Sun, Nov 13, 2016 at 01:24:08PM -0800, Christ Schlacta wrote:
> I've had good luck with ubiquiti's hardware. Some of it has lasted me ten
> plus years, and the built in firmware all has community driven support
> including wpa eap tls & friends. Their firmware is also based on openwrt,
> though I think they may have diverged enough to call it proprietary. They
> should still run openwrt.  Good luck on your search!

Do they support my RADIUS, multi-ssid and user-to-VLAN-mapping wishes?

> > I would like to hear your recommendation for suitable hardware. I
> > would like to have:
> >
> > - 802.11n in the 2.4 GHz band, 802.11ac in the 5 GHz band (or better),
> >   simultaneously
> > - Sufficient and good antennas so that the WLAN range is acceptable
> >   even in a difficult building with lots of drywall
> > - 802.1q support on the Ethernet
> > - Multi-SSID-Support
> > - Support für WPA2 Enterprise with an external RADIUS server
> > - Support for RADIUS Attributes allowing the RADIUS server to specify
> >   which VLAN a certain client should be mapped into after connecting to
> >   the same SSID.
> > - Support for RADIUS Attributes telling the Accesspoint to disconnect
> >   a user after a pre-defined amount of time.

Greetings
Marc

-- 
-
Marc Haber | "I don't trust Computers. They | Mailadresse im Header
Leimen, Germany|  lose things."Winona Ryder | Fon: *49 6224 1600402
Nordisch by Nature |  How to make an American Quilt | Fax: *49 6224 1600421
___
openwrt-users mailing list
openwrt-users@lists.openwrt.org
https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-users


Re: [OpenWrt-Users] Hardware recommendation for Access Point with WPA Enterprise

2016-11-15 Thread Marc Haber
Hi,

On Sun, Nov 13, 2016 at 06:30:47PM -0800, J Mo wrote:
> First, with respect to OpenWRT's past achievements; OpenWRT is now
> developmentally dead. Nearly all of it's contributing developers forked a
> new "LEDE Project" 6-8 months ago. I would advise you to go over to the LEDE
> Project forum or dev mailing list.

So regardless of what one chooses, it might be the wrong choice.

> As someone else mentioned; if you want to go commercial, Ubiquiti is pretty
> awesome for small businesses. Aruba is good but probably too expensive (you
> should check). Avoid anything Cisco (Expensive AND crap AND poor support).

Cisco has the advantage that knowledge of their gear is commercially
exploitable for me.

> If you are running a small business and just want a handfull of WAPs with
> enterprise-like capability, and you have the technical capability to do it,
> I would advise you to just build your own from LEDE source and go with an
> ipq806x-based system.

> Models include:
> 
> Netgear R7500 v2 (avoid the v1)
> Netgear R7800
> TP-Link Archer C2600 (WARNING: No console, TP-Link is no longer
> hacker-friendly)
> TRENDnet TEW-827DRU (I am the dev for this device)
> Linksys EA8500
> Zytel NBG6816 (Looks awesome but code isn't quite ready yet, check back in 2
> months)

Those devices are all around 200 Euros which is the like the same
price range as the ubiquity. I might be conservative but I think that
a device with visible, adjustable antennas might have the better RF
properties than the nice-to-look-at Ubiquities.

Can OpenWRT/LEDE do what I want it to do, RADIUS, WPA Enterprise and
Multi-SSID and mapping-wise? Is there a nice front end to configure
that, is it nicely documented or do I need to figure everything out
myself?

> >- 802.11n in the 2.4 GHz band, 802.11ac in the 5 GHz band (or better),
> >   simultaneously
> >- Sufficient and good antennas so that the WLAN range is acceptable
> >   even in a difficult building with lots of drywall
> >- 802.1q support on the Ethernet
> >- Multi-SSID-Support
> >- Support für WPA2 Enterprise with an external RADIUS server
> >- Support for RADIUS Attributes allowing the RADIUS server to specify
> >   which VLAN a certain client should be mapped into after connecting to
> >   the same SSID.
> >- Support for RADIUS Attributes telling the Accesspoint to disconnect
> >   a user after a pre-defined amount of time.

Greetings
Marc

-- 
-
Marc Haber | "I don't trust Computers. They | Mailadresse im Header
Leimen, Germany|  lose things."Winona Ryder | Fon: *49 6224 1600402
Nordisch by Nature |  How to make an American Quilt | Fax: *49 6224 1600421
___
openwrt-users mailing list
openwrt-users@lists.openwrt.org
https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-users


Re: [OpenWrt-Users] Installing packages in OpenWrt

2016-11-15 Thread Lars Kruse
Hi,


Am Mon, 14 Nov 2016 18:10:56 +
schrieb James Allsopp :

> [..]
> root@OpenWrt:~# df -h /

maybe the filesystem has no free inodes left.
Sadly "df -i" is not supported by the default busybox configuration in openwrt.
You can take a look at the filesystem from the outside:
 tune2fs -l firmware.img
Look for "Free inodes".

In this case you need to recreate the filesystem, since the inode count is only
configurable during filesystem creation.

Cheers,
Lars
___
openwrt-users mailing list
openwrt-users@lists.openwrt.org
https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-users


Re: [OpenWrt-Users] Installing packages in OpenWrt

2016-11-15 Thread Tim

ah wait, you have posted

Am 14.11.2016 um 19:10 schrieb James Allsopp:

 * pkg_write_filelist: Failed to open
//usr/lib/opkg/info/openssl-util.list: Read-only file system.


so are you sure that the filesystem is in good condition and mounted 
correctly in rw mode? Maybe you have to do another fsck.


regards tim
___
openwrt-users mailing list
openwrt-users@lists.openwrt.org
https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-users


Re: [OpenWrt-Users] Installing packages in OpenWrt

2016-11-15 Thread Tim

Hi,

Have all the steps till resize2fs been sugsessfull and the output of 
resize2fs saied that the space is now as long as it should be?


If this is to much complicated you can just create a new vm with a good 
hdd size matching your needs, put in a livecd with graphical disc 
content manipulation tools like partedmagic[01], get from those your 
network running and download and dd to disk from there the image, than 
use graphical gparted to enlarge the filesystem on it...


regards tim


Annotations:

01: https://partedmagic.com/

Am 14.11.2016 um 19:10 schrieb James Allsopp:

Hi,
I'm trying to install an ESXi (x86) image of OpenWRT. Got it working
fine, but copied the sources and dependencies for OpenVPN over, and
tried install them manually, but ran out of space. I increased the size
of the image from 55Mb  to 100Mb using instructions here,

https://macbruins.com/2011/11/15/expanding-x86-openwrt-root-partition/

and this worked, but when I tried to reinstall the packages I ran into
the size issue again. The machine isn't connected to the internet so
couldn't use the packages directly

I copied the packages to /packages
root@OpenWrt:~# ls /packages
kmod-tun_3.18.20-1_x86_64.ipk
liblzo_2.08-1_x86_64.ipk
libopenssl_1.0.2g-1_x86_64.ipk
openssl-util_1.0.2g-1_x86_64.ipk
openvpn-easy-rsa_2013-01-30-2_x86_64.ipk
openvpn-openssl_2.3.6-5_x86_64.ipk
zlib_1.2.8-1_x86_64.ipk

I edited my /etc/opkg.conf to this
dest root /
dest ram /tmp
lists_dir ext /var/opkg-lists
option overlay_root /overlay
src/gz chaos_calmer_base
http://downloads.openwrt.org/chaos_calmer/15.05/x86/64/packages/base
src/gz chaos_calmer_luci
http://downloads.openwrt.org/chaos_calmer/15.05/x86/64/packages/luci
src/gz chaos_calmer_packages
http://downloads.openwrt.org/chaos_calmer/15.05/x86/64/packages/packages
src/gz chaos_calmer_routing
http://downloads.openwrt.org/chaos_calmer/15.05/x86/64/packages/routing
src/gz chaos_calmer_telephony
http://downloads.openwrt.org/chaos_calmer/15.05/x86/64/packages/telephony
src/gz chaos_calmer_management
http://downloads.openwrt.org/chaos_calmer/15.05/x86/64/packages/management
option check_signature 1

root@OpenWrt:~# df -h /
FilesystemSize  Used Available Use% Mounted on
rootfs   96.5M  9.1M 85.4M  10% /

but I ran into this problem with the install,
root@OpenWrt:~# opkg install /packages/openssl-util_1.0.2g-1_x86_64.ipk
Installing openssl-util (1.0.2g-1) to root...
Collected errors:
 * extract_archive: Cannot make dir /etc/ssl/: No space left on device.
 * extract_archive: Cannot make dir /etc/ssl/certs/: No such file or
directory.
 * extract_archive: Cannot make dir /etc/ssl/private/: No such file or
directory.
 * wfopen: /etc/ssl/openssl.cnf: No such file or directory.
 * pkg_write_filelist: Failed to open
//usr/lib/opkg/info/openssl-util.list: Read-only file system.
 * opkg_install_pkg: Failed to extract data files for openssl-util.
Package debris may remain!
 * opkg_install_cmd: Cannot install package openssl-util.

If anyone can help, I'd be very grateful,
James



___
openwrt-users mailing list
openwrt-users@lists.openwrt.org
https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-users


___
openwrt-users mailing list
openwrt-users@lists.openwrt.org
https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-users