change mac address for wan interface

AP-600RP-USB firmware by tftp and another problems...

mesage to "stn21"

Re: change mac address for wan interface

Hi Ulf,

late response to your mail, but maybe useful.

I'm trying to setup a wireless bridge at the moment, so I've downloaded
the sources from linksys for their wet54v2 (this device is sold as
bridge).

One can compile a running image from this sources, with support for
ebtables. ebtables is a layer 2 firewall (aka. stealth firewall), it
offers access control and "mac nat". 

BTW: linksys wet54gv2s5 is an isl3983 based 5 port and wlan bridge
(unlisted on project page), with very cool features like port based vlan
tagging, QoS, port mirroring (for e. g. IDS), layer 2 access lists. The
sources are available, but didn't compile out of box (smidump is not in
toolchain). I can post a workaround if someone is interested. I've it
running on an AP600.

Roland

On Sat, 2005-12-03 at 02:02 +0100, ulf kypke wrote:
> hi, 
> i realized that datastore can change the mac address for the wan
> interface.
> a little sticker on the box gives two macs, one for the switch one for
> the wan port, the wan' s mac address is +1 compair to the lan's mac
> address.
> so now i can change the mac by using the setoid command, but how can i
> make it active?
> 
> # getoid eth2 0x0 mac
> 00:60:b3:06:54:20
> 
> # setoid eth2 0x0 mac aa:bb:cc:dd:ee:ff
> 
> # getoid eth2 0x0 mac
> AA:BB:CC:DD:EE:FF
> 
> now the mac is changed but not active!
> ifconfig eth2 give the original mac output, not the new one.
> in compair to the changes i made with the wifi device, eth1, i have to
> set the ssid by using setoid eth1 0x10000002 ssid 'the essid for the
> net' once to set the device down and a second time to set the device
> up again, that the changes i made are active, foe example to change
> the channel.
> 
> any ideas?
> 
> thanks ulf
> 
> 
> 
> 

-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click

Re: Isl3893-devel digest, Vol 1 #96 - 1 msg

isl3893-devel-request <at> lists.sourceforge.net wrote:
> Send Isl3893-devel mailing list submissions to
> 	isl3893-devel <at> lists.sourceforge.net
> 
> To subscribe or unsubscribe via the World Wide Web, visit
> 	https://lists.sourceforge.net/lists/listinfo/isl3893-devel
> or, via email, send a message with subject or body 'help' to
> 	isl3893-devel-request <at> lists.sourceforge.net
> 
> You can reach the person managing the list at
> 	isl3893-devel-admin <at> lists.sourceforge.net
> 
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of Isl3893-devel digest..."
> 
> 
> Today's Topics:
> 
>    1. Re: change mac address for wan interface (Roland Mieslinger)
> 
> --__--__--
> 
> Message: 1
> Subject: Re: [Isl3893-devel] change mac address for wan interface
> From: Roland Mieslinger <rmie <at> gmx.de>
> Reply-To: rmie <at> gmx.de
> To: ulf kypke <u.kypke <at> gmail.com>
> Cc: isl3893-devel <at> lists.sourceforge.net
> Date: Thu, 29 Dec 2005 15:04:12 +0100
> 
> Hi Ulf,
> 
> late response to your mail, but maybe useful.
> 
> I'm trying to setup a wireless bridge at the moment, so I've downloaded
> the sources from linksys for their wet54v2 (this device is sold as
> bridge).
> 
> One can compile a running image from this sources, with support for
> ebtables. ebtables is a layer 2 firewall (aka. stealth firewall), it
> offers access control and "mac nat". 
> 
> BTW: linksys wet54gv2s5 is an isl3983 based 5 port and wlan bridge
> (unlisted on project page), with very cool features like port based vlan
> tagging, QoS, port mirroring (for e. g. IDS), layer 2 access lists. The
> sources are available, but didn't compile out of box (smidump is not in
> toolchain). I can post a workaround if someone is interested. I've it
> running on an AP600.
> 
> Roland
> 
> On Sat, 2005-12-03 at 02:02 +0100, ulf kypke wrote:
> 
>>hi, 
>>i realized that datastore can change the mac address for the wan
>>interface.
>>a little sticker on the box gives two macs, one for the switch one for
>>the wan port, the wan' s mac address is +1 compair to the lan's mac
>>address.
>>so now i can change the mac by using the setoid command, but how can i
>>make it active?
>>
>># getoid eth2 0x0 mac
>>00:60:b3:06:54:20
>>
>># setoid eth2 0x0 mac aa:bb:cc:dd:ee:ff
>>
>># getoid eth2 0x0 mac
>>AA:BB:CC:DD:EE:FF
>>
>>now the mac is changed but not active!
>>ifconfig eth2 give the original mac output, not the new one.
>>in compair to the changes i made with the wifi device, eth1, i have to
>>set the ssid by using setoid eth1 0x10000002 ssid 'the essid for the
>>net' once to set the device down and a second time to set the device
>>up again, that the changes i made are active, foe example to change
>>the channel.
>>
>>any ideas?
>>
>>thanks ulf
>>
>>
>>
>>
> 
> 
> 
> 
> 
> --__--__--
> 
> _______________________________________________
> Isl3893-devel mailing list
> Isl3893-devel <at> lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/isl3893-devel
> 
> 
> End of Isl3893-devel Digest
> 

I am very interested. If you could post a little guide on how to compile 
the sources, I would be grateful.

-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click

Re: change mac address for wan interface

On Fri, Dec 30, 2005 at 11:50:18AM +0100, Ruben Faelens wrote:
> >From: Roland Mieslinger <rmie <at> gmx.de>
> >Date: Thu, 29 Dec 2005 15:04:12 +0100
> >
> >Hi Ulf,
> >
> >late response to your mail, but maybe useful.
> >
> >I'm trying to setup a wireless bridge at the moment, so I've downloaded
> >the sources from linksys for their wet54v2 (this device is sold as
> >bridge).
> >
> >One can compile a running image from this sources, with support for
> >ebtables. ebtables is a layer 2 firewall (aka. stealth firewall), it
> >offers access control and "mac nat". 
> >
> >BTW: linksys wet54gv2s5 is an isl3983 based 5 port and wlan bridge
> >(unlisted on project page), with very cool features like port based vlan
> >tagging, QoS, port mirroring (for e. g. IDS), layer 2 access lists. The
> >sources are available, but didn't compile out of box (smidump is not in
> >toolchain). I can post a workaround if someone is interested. I've it
> >running on an AP600.
> >
> 
> I am very interested. If you could post a little guide on how to compile 
> the sources, I would be grateful.

Having something on http://isl3893.sourceforge.net 
 (other then an error message 
is surely a good thing.

GSt

Re: Re: Isl3893-devel digest, Vol 1 #96 - 1 msg

Hi Ruben,

i'm using wet54gs5-v4.91.tar.bz2 installed in /tmp/wet54gs5 and the
stripped-toolchain installed in /opt/uclinux_tools_1.6.0.0 . I'm using
Fedora Core 4 as build system.

#cd /tmp/wet54gs5/Software/firmware/uClinux
#make menuconfig
kept values untouched, exit and save config.

#cd /tmp/wet54gs5/Software/firmware/uClinux/kernel
#make menuconfig
kept values untouched, exit and save config.

#cd /tmp/wet54gs5/Software/firmware/apfw
#make image

This fails with an error "smidump not found". Building smidump from
sources didn't solve the problem as next error will be "smidump: invalid
dump format `IslSchema' - supported formats are ... ".

The only reason for smidump is to create the file /etc/schema later
found in the romfs. The trick is to get this file from the binary
firmware from linksys (don't try without it ends up in a boot loop  )

I found two ways to get it.
- install the linksys firmware on a router and copy it (easy way but
  serial access needed as shelld is disabled)
  default ip is 192.168.1.266 
  username is admin, password is admin 
  you can use mount or nc to transfer the file
  ( mount -t nfs -o nolock,rsize=4096,wsize=4096,nfsvers=3 ... works, 
    but don't miss no_root_squash in /etc/exports ) 

- extract it from binary (the hackers choice)
  The firmware contains a gzip compressed kernel with the a root
  filesystem (details at http://www.warp.at/projects/wg602.html)

  Open firmeware with hexedit, search for gzip file magic
  (1F8B08) remove everything before and save as kernel.gz

  gunzip kernel.gz (you should have a file called kernel now)

  Open kernel in hexedit, serach for -rom1fs- (2D726F6D3166732D), 
  remove everything before and save as fs.img

  you can mount the romfs with:
  mount -o loop -t romfs fs.img /moute/where/you/like/it

  You should now find a file schema in dir etc.

copy schema to
/tmp/wet54gs5/Software/firmware/uClinux/apps-non-gpl/datastore/etc/
  
and 

#cd /tmp/wet54gs5/Software/firmware/apfw
#make image

In my case this ends with a firmeware working on a AP600. I have
problems installing the firmware in "rescue mode" as I always got "image
size exceeds flash size". So you have to boot with another firmware
first and update then to your firmware.

Roland

> I am very interested. If you could post a little guide on how to compile 
> the sources, I would be grateful.
> 
> 
> -------------------------------------------------------
> This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
> for problems?  Stop!  Download the new AJAX search engine that makes
> searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
> http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click
> _______________________________________________
> Isl3893-devel mailing list
> Isl3893-devel <at> lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/isl3893-devel

-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click