Router

Normal way of setting up a clean TP-Link Router

### When you have installed OpenWRT, [continue here](#configure_openwrt).

1. Download the OpenWRT Image for your router here

   • Find the modellnumber of your router out. Help you can find here.
     
   • The filenames are to understand like this: [openwrt/lede]-[Chipset]-generic/tiny-[Router Modell]-v[Revision]-[Filesystem]-[factory / sysupgrade].bin
   • Filesystem is always squashfs
   • Chipset is most of the time ar71xx
   • factoryneed we, to flash the original TP-Link Software to OpenWRT, sysupgrade only functions for updates from OpenWRT to OpenWRT
   • Check twice, that the download was complete and correct. To check this, there are checksums for you.
     

2. Connect the Router

   • Plug the Router power adapter in and check, that there is no loose connection and the power supply is stable
   • If there Routerhas more than 2 LAN-Ports, plug the LAN-Cable in the WAN-Port(most of the time coloured blue) in the network socket in your room.
   • Connect your PC/Laptop if possible by LAN (if not possible by WiFi) with the router (if available, to the LAN-Port of the router (most of the time yellow)).
   • Power your router on
   • You should get per DHCP an IP adress. Most of the time 192.168.0.x
   • (For example you can find it with CMD, when you type in ipconfig.)
   • The IP adress of your router will be 192.168.0.1

3. In your Browser open the Webinterface of your router

   • Most of the time your just need to type in http://192.168.0.1/ or http://192.168.1.1/ (depending on your router IP adress).
   • If that doesn't work you can try http://tplinkwifi.net/

4. Log in

   
   • Mostly the standard login data isadmin and admin.
   • If not, look on the bottom of your router or in the internet

5. Load the OpenWRT-Image form step 1 as update up

   
   • System Tools > Firmware Upgrade and than on Browse.
   • Search the file from step 1 on your Computer an upload it

   You should be now 100% sure that this is the right image for your router and that the download was correct and complete. Otherwise something could get destroyed.

   Sometime you will need to change the name of the imagefile. Than there would be an error message. If this happens, look in the OpenWRT-Wiki.

6. Flash the image

   
   • Click on Upgrade.

   Now the power supply mustn't be cut, or something may get destroyed!

7. Keep calm and keep waiting

   
   • Press now OK.

   Now the power supply mustn't be cut, or something may get destroyed!

   If the network connection is cut, than it isn't a problem

8. Wait till the process is finished

   

   Now the power supply mustn't be cut, or something may get destroyed!

   If the network connection is cut, than it isn't a problem

9. After a reboot, OpenWRT should be installed

   • Normally now, at the beginning, there is only LAN btw. PC and router possible. (If necessary unplug the WAN-Port)
   • OpenWRT most of the time uses different IP adresses:
   • It will take a moment, till your PC will be reconnected.
   • You should get now per DHCP an IP adress. Mostly 192.168.1.x
   • You can find it with CMD, when you type in ipconfig.
   • The router IP adress will be than 192.168.1.1
   • Short said: Type now http://192.168.1.1/ in your browser
   • If no Webinterface loads, it may be possible, that it is missing in the image. You can try to connect by SSH or Telnet with the router and luci to install Luci afterwards (per opkg install luci). Information on the OpenWRT Wiki an in the internet.
   

10. Log in

    • The standard login credentials are root and root.
    

11. Configure Settings

    • System > System
    

12. General settings and time

    
    • After a click on Sync with Browser the time should be somewhat accurate (it is important that the date is correct)
    • register some NTP Servers. The following should work:
    1. ntp0.rommelwood.de New and important!
    2. use the default server. e.g. 2.openwrt.pool.ntp.org (or 0-3)
    3. ntp2.fau.de (or ntp0-ntp3) not recommended! you will quickly reach the reques rate limit!
    • Timezone: Here Europe/Berlin is correct, eventhough some people prefer to live on american time ;)
    • Hostname is optional: e.g. your rommel-username, your WLAN-name or the name of your stuffed animal (but don't use special characters)
    • After that press Save & Apply

13. Network > Interfaces

    

14. Remember the WAN Interface

    
    • Look for the interface with the name WAN (or WAN6)
    • Remember the name of the interface. Quite often it is eth0, eth1 or eth0.1
    • in the picture it is eth1

15. Wired Auth > 802.1X

    

16. 802.1X configuration

    
    • Interface is the name of the WAN interface from the "Remember the WAN Interface" section (e.g. eth1)
    • EAP-Method is TTLS
    • Authentication is PAP
    • If CA-Certificate is not used you should never use the router anywhere else, otherwise your login is no longer secret! It's safer if you use this here . (right-click and "Save as...". If you run into problems you can also skip installing the certificate)
    • Identity is your Rommel-username (just like for the website)
    • Password is your Rommel-password (just like for the website)
    • after that press Save & Apply

17. Network > WiFi

    

18. Edit WLAN

    

19. WLAN Settings

    
    • For Transmit Power normal is enough 0 dBm. (the higher the setting, the more you jam your neighbor's network and the more power your device uses).
    • ESSID is the name of the Network (creative names only ;)). Using the name of an already existing network in our dormitory is forbidden
    • Continue with Wireless Security

20. Wireless Security settings

    
    • Encryption is WPA2PSK. Using no or other encryption methods will lead to the termination of your internet access and possible legal prosecution!
    • Key is the password you would like for your WLAN (what you have to put in to connect to your router from your e.g. laptop or mobile phone). It must have a length of at least 8 characters and may not be guessed by others. If your password is insecure you might have unbidden guests using your internet access soon!
    • Continue with Advanced Settings (above, marking is missing)

    WLAN networks have to be encrypted using WPA2PSK. Using no or other encryption methods will lead to the termination of your internet access and possible legal prosecution!

    A weak password is no password! You have to ensure that the password of your choosing is secure, otherwise you will face prosecution in case someone abuses your internet access!

21. Advanced WLAN settings

    • Region is DE - Germany. other wireless settings are illegal to use and will lead to prosecution from the radio authority (Funkaufsichtsbehörde)!
    • Afterwards press Save & Apply

    The WLAN settings have to be compliant with the regulations from the Bundesnetzagentur!

    Eventhough no screenshot is availible it is of utmost importance that the region is set to DE - Germany

22. Activate WLAN

    
    • (after Save & Apply) click on Enable

23. Set router password

    • click on Go to password configuration
    • set a password of your choosing (input twice, will be needed for later configuration of the router)
    • Afterwards click on Save & Apply
    

24. Try it out

    • now you can connect your devices to your router
    • Search for the WLAN name that you put in as ESSID. The password is the WPA2PSK Key
    • Visit sites like:
    • rommelwood.de
    • fau.de
    • openwrt.org
    • Wikipedia
    • bundesnetzagentur.de
    • xkcd
    • Facebook
    • If everything works you've earned yourself a medal! Perhaps you would like to join our network-team? ;)

ctrl_interface=/var/run/wpa_supplicant
eapol_version=1
ap_scan=0
fast_reauth=1
network={
  key_mgmt=IEEE8021X
  eap=TTLS
  identity="username"
  password="passwd"
  ca_cert="/etc/config/lets-encrypt-x3-cross-signed.pem"
  phase2="auth=PAP"
  priority=10
}

#!/bin/sh /etc/rc.common

START=10
STOP=15

start() {
        ntpclient -d -s -h ntp0.rommelwood.de
        wpa_supplicant -i "output from previous step" -D wired -c /etc/config/wpa_supplicant.conf -B -dd -t
}

stop() {
        killall wpa_supplicant
}