{"id":8034,"date":"2024-02-23T18:32:51","date_gmt":"2024-02-23T09:32:51","guid":{"rendered":"\/blog\/?p=8034"},"modified":"2024-02-27T17:33:56","modified_gmt":"2024-02-27T08:33:56","slug":"armbian-wifi-access-point-%ea%b5%ac%ec%84%b1","status":"publish","type":"post","link":"https:\/\/hasu0707.duckdns.org\/blog\/?p=8034","title":{"rendered":"Armbian WIFI Access Point \uad6c\uc131"},"content":{"rendered":"\n

<\/p>\n\n\n\n\u25a0 \uc900\ube44
nmcli device modify eth0 ipv6.method \"disabled\"
rm -f \/etc\/wpa_supplicant\/wpa_supplicant.conf
mv \/etc\/init.d\/hostapd \/etc\/init.d\/hostapd.orig

\u25a0 Bridge \ub124\ud2b8\uc6cc\ud06c\ub97c \uad6c\uc131\ud558\uae30 \uc704\ud574 \uc778\ud130\ud398\uc774\uc2a4 \ud30c\uc77c \ud3b8\uc9d1(br0)
vi \/etc\/network\/interfaces.d\/br0
-----------------------------------------------------------
auto br0
iface br0 inet static
  address 10.10.10.108
  netmask 255.255.255.0
  gateway 10.10.10.254
  dns-nameservers 8.8.8.8
  bridge_ports eth0 wlan0
  bridge_stp off
  bridge_fd 0
  bridge_maxwait 0
-----------------------------------------------------------

\u25a0 Bridge \ub124\ud2b8\uc6cc\ud06c\ub97c \uad6c\uc131\ud558\uae30 \uc704\ud574 \uc778\ud130\ud398\uc774\uc2a4 \ud30c\uc77c \ud3b8\uc9d1(eth0)
vi \/etc\/network\/interfaces.d\/eth0
-----------------------------------------------------------
auto eth0
iface eth0 inet manual
-----------------------------------------------------------

\u25a0 Bridge \ub124\ud2b8\uc6cc\ud06c\ub97c \uad6c\uc131\ud558\uae30 \uc704\ud574 \uc778\ud130\ud398\uc774\uc2a4 \ud30c\uc77c \ud3b8\uc9d1(wlan0)
   wlan0 \uc8fc\uc18c\ub294 \uc544\ubb34\uac70\ub098 \uc0ac\uc6a9\ud558\uc9c0 \uc54a\ub294 \uac83\uc73c\ub85c \ub123\ub294\ub2e4.
vi \/etc\/network\/interfaces.d\/wlan0
-----------------------------------------------------------
allow-hotplug wlan0
auto wlan0
iface wlan0 inet static
  address 192.168.101.1
  netmask 255.255.255.0
-----------------------------------------------------------

\u25a0 Bridge \uad6c\uc131\uc774 \uc544\ub2cc \ub2e8\ub3c5 \ub77c\uc6b0\ud130 \uad6c\uc131\uc774\uba74 DHCP \uc11c\ubc84 \uc124\uc815
vi \/etc\/dhcp\/dhcpd.conf
-----------------------------------------------------------
ddns-update-style none;
default-lease-time 86400;
max-lease-time 172800;

subnet 192.168.2.0 netmask 255.255.255.248 {
  range 192.168.2.2 192.168.2.6;
  option domain-name \"local\";
  option domain-name-servers 8.8.8.8, 8.8.4.4;
  option subnet-mask 255.255.255.248;
  option routers 192.168.2.1;
  option broadcast-address 192.168.2.7;
  default-lease-time 86400;
  max-lease-time 172800;
}
-----------------------------------------------------------
systemctl restart isc-dhcp-server

\u25a0 hostapd\uc5d0 \ub300\ud55c systemd \uc2a4\ud06c\ub9bd\ud2b8 \uc791\uc131
vi \/usr\/lib\/systemd\/system\/hostapd.service
-----------------------------------------------------------
[Unit]
Description=Hostapd IEEE 802.11 AP, IEEE 802.1X\/WPA\/WPA2\/EAP\/RADIUS Authenticator
Wants=network-online.target
After=systemd-networkd.service
After=sys-subsystem-net-devices-wlan.device
After=sys-subsystem-net-devices-lan.device
#BindsTo=sys-subsystem-net-devices-lan.device

[Service]
Type=forking
PIDFile=\/run\/hostapd.pid
ExecStart=\/usr\/sbin\/hostapd \/etc\/hostapd\/hostapd.conf -P \/run\/hostapd.pid -B

[Install]
WantedBy=multi-user.target
-----------------------------------------------------------
systemctl daemon-reload
systemctl disable hostapd
systemctl restart hostapd

\u25a0 hostapd.conf \uc791\uc131
vi \/etc\/hostapd\/hostapd.conf
-----------------------------------------------------------
interface=wlan0
driver=nl80211
ssid=opizero2
hw_mode=a
channel=36
macaddr_acl=0
auth_algs=1
wpa=2
wpa_key_mgmt=WPA-PSK
wpa_passphrase=12345678
rsn_pairwise=CCMP
-----------------------------------------------------------

\u25a0 rc.local\uc5d0\uc11c \ud638\ucd9c\ub418\uc5b4 \uc2e4\ud589\ud560 \ubc29\ud654\ubcbd \uc2a4\ud06c\ub9bd\ud2b8 \uc791\uc131.
\u25a0 brctl addif br0 wlan0\uc740 wlan0\uac00 \uc790\ub3d9\uc73c\ub85c Bridge \uad6c\uc131\uc774 \uc548\ub420 \uacbd\uc6b0 \ub300\ube44.
\u25a0 hostapd\uac00 \uc62c\ub77c\uc624\uae30 \uc804\uc5d0 wlan0\uc758 bridge \ucd94\uac00 \ubd88\uac00.
mkdir \/root\/scripts
vi \/root\/scripts\/firewall_opizero2.sh
-----------------------------------------------------------
#!\/bin\/bash
sysctl -w net.ipv6.conf.all.disable_ipv6=1
sysctl -w net.ipv6.conf.default.disable_ipv6=1
sysctl -w net.ipv4.ip_forward=1

iptables -F
iptables -F -t nat
iptables -P INPUT ACCEPT
iptables -P OUTPUT ACCEPT
iptables -P FORWARD ACCEPT
iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE

systemctl restart hostapd
brctl addif br0 wlan0
-----------------------------------------------------------<\/span>\n","protected":false},"excerpt":{"rendered":"

\u25a0 \uc900\ube44nmcli device modify eth0 ipv6.method “disabled”rm -f \/etc\/wpa_supplicant\/wpa_supplicant.confmv \/etc\/init.d\/hostapd \/etc\/init.d\/hostapd.orig \u25a0 Bridge \ub124\ud2b8\uc6cc\ud06c\ub97c \uad6c\uc131\ud558\uae30 \uc704\ud574 \uc778\ud130\ud398\uc774\uc2a4 \ud30c\uc77c \ud3b8\uc9d1(br0)vi \/etc\/network\/interfaces.d\/br0———————————————————–auto br0iface br0 inet static  address 10.10.10.108  netmask 255.255.255.0  gateway 10.10.10.254  dns-nameservers 8.8.8.8  bridge_ports eth0 wlan0  bridge_stp off  bridge_fd 0  bridge_maxwait 0———————————————————– \u25a0 Bridge \ub124\ud2b8\uc6cc\ud06c\ub97c \uad6c\uc131\ud558\uae30 \uc704\ud574 \uc778\ud130\ud398\uc774\uc2a4 \ud30c\uc77c \ud3b8\uc9d1(eth0)vi \/etc\/network\/interfaces.d\/eth0———————————————————–auto eth0iface eth0 inet manual———————————————————– \u25a0 […]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_import_markdown_pro_load_document_selector":0,"_import_markdown_pro_submit_text_textarea":"","site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"set","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[39],"tags":[],"class_list":["post-8034","post","type-post","status-publish","format-standard","hentry","category-os_linux_unix_macos"],"_links":{"self":[{"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=\/wp\/v2\/posts\/8034","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=8034"}],"version-history":[{"count":0,"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=\/wp\/v2\/posts\/8034\/revisions"}],"wp:attachment":[{"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=8034"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=8034"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=8034"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}