Openwrt安装升级升级配置教程

Openwrt安装后配置的过程。

软件升级

可以通过下面命令对软件升级

opkg update
# Upgrade all package upgradable
opkg list-upgradable | awk -F ' - ' '{print $1}' | xargs opkg upgrade

软件安装

安装的主要软件包括openssh-server, nginx, vim，zsh， lsof等，通过opkg install xxx实现。

wpa-supplicant: 连接校园网wifi

hostapd: 开启热点

配置

1. ssh配置 [1]

Edit /etc/ssh/sshd_config and change #PermitRootLogin without-password to PermitRootLogin yes

Enable and start OpenSSH server. OpenSSH will listen now on port 22.

/etc/init.d/sshd enable
/etc/init.d/sshd start

2. 连接校园网

用以通过无线连接校园网做外网出口。

连接

Network -> Wireless -> radio1(5G)/radio0(2.4G) -> Scan连 接：

配置 参数
General Setup -> Mode Client
General Setup -> ESSID Wifi名称(SJTU)
General Setup -> BSSID 校园网MAC地址，可以绑定特定的wifi MAC
General Setup -> Network 网络 Interface接口，下面IPv4和IPv6两个
Security -> Encryption WPA2-EAP
Security -> EAP Method PEAP
Security -> Authentication EAP-MSCHAPv2
Security -> Identity 用户名
Security -> Password 密码
IPv4

新建 Network -> Interface (Name: SJTU)

General -> Protocol: DHCP client
General -> Device: unspecified
General -> Bring up on boot: selected
Firewall Settings -> Create / Assign firewall-zone: SJTU/SJTU6
IPv6

新建 Network -> Interface (Name: SJTU6)

General -> Protocol: DHCP6 client
General -> Device: wlan1
General -> Bring up on boot: selected
Firewall Settings -> Create / Assign firewall-zone: SJTU/SJTU6
IPv6 NAT66

Network -> Interface -> LAN edit -> DHCP server 配置如下：

配置 参数
RA - Service server mode
DHCPv6-Service server mode
Local IPv6 DNS Server unchecked
NDP-Proxy disabled
NAT66配置 [2]

打开 IPv6, iptables添加IPv6的NAT表。在 /etc/firewall.user里面加上：

 WAN6=SJTU
 LAN=br-lan
 ip6tables -t nat -A POSTROUTING -o $WAN6 -j MASQUERADE
 ip6tables -A FORWARD -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
 ip6tables -A FORWARD -i $LAN -j ACCEPT

WAN6和LAN分别改成外网IPv6和内网网卡(interface)的名字，注意不是防火墙区域(zone)的名字，也不是LuCI里面Network->Interfaces里面看到的名字，而是ifconfig看到的名字

正确配置网关

添加/etc/hotplug.d/iface/99-ipv6文件：

  #!/bin/sh
  [ "$ACTION" = ifup ] || exit 0
  iface=SJTU6
  [ -z "$iface" -o "$INTERFACE" = "$iface" ] || exit 0
  ip -6 route add `ip -6 route show default|sed -e 's/from [^ ]* //'`
  logger -t IPv6 "Add IPv6 default route."

这里iface是LuCI里面Network->Interfaces里面看到的名 字，一般叫wan6。这个脚本的意思是在wan6起来以后读取默认 网关，把带from的内容去掉，再加到系统路由表里。同时

chmod +x /etc/hotplug.d/iface/99-ipv6

静态 IP

开启热点

安装hostapd软件

Network -> Wireless -> radio0(2.4G)/radio1(5G) -> Add添 加：

配置 参数
General Setup -> Mode Access Point
General Setup -> ESSID Wifi名称(sunnet)
General Setup ->Network lan
Security -> Encryption WPA2-PSK
Security -> Key 密码

3. WAN口转LAN口

修改Network -> Interface -> Devices
br-lan : Bridge ports 添加 wan

4. 挂载U盘

安装下述packages即可。

  opkg install block-mount e2fsprogs kmod-fs-ext4 kmod-usb-storage kmod-usb2 kmod-usb3

5. zsh

安装zsh

修改/etc/passwd 中 root:开头行中/bin/ash为 /usr/bin/zsh

.oh-my-zsh文件夹复制到/root/

cd root && ln -s .oh-my-zsh/sunic-zsh/zshrc.sh .zshrc

6. vim

复制.vimrc到/root/

7. nginx

安装nginx

复制证书和配置文件

Problems

Nginx代理luci时报错：No related RPC reply
Status: 待解决

Reference

[1] (Replacing Dropbear by openssh-server)[https://oldwiki.archive.openwrt.org/inbox/replacingdropbearbyopensshserver]

[2] (OpenWRT 路由器作为 IPv6 网关的配置)[https://github.com/tuna/ipv6.tsinghua.edu.cn/blob/master/openwrt.md]

---

原文来源：
https://sunicyosen.github.io/2021/12/25/Openwrt-installation