<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">Vlan isolation, inside and outside for
simplest of terms. Vlan 1 is inside, Vlan 2 is outside. By
nature, one cannot reach another, thus Virtual LAN's.<br>
<br>
In the middle sits a bridge, and iptables mangles packets between
them. This is your nat, firewall, application inspection, etc.<br>
<br>
A process on the wan grabs a dhcp address, adds it outside, and a
default route to the upstream dslam or cmts. It also registers it
as the external address to nat your internal traffic as to the
world, effectively hiding your internal routable subnets.<br>
<br>
The inside vlan uses a private address, usually 192.168.1.1/24 by
default. This gives you 253 usable address, and gives out a
subset of that via dhcp. When clients come up wired or wireless,
they get an address from the dhcp server when they broadcast for
an address.<br>
<br>
Routers usually bridge the wireless 802.11 radio(s) to this vlan
as well, bringing them all into the 192.168.1.0/24 subnet on that
vlan. The DHCP server gives wired or wireless clients a local
192.168.1.0/24 address out of the subset it hands out, including
the gateway for the subnet (itself, 192.168.1.1), and dns servers
for it, again itself.<br>
<br>
They get a local dns server that is usually dnsmasq running on the
router, caching and forwarding to the upstream provider dns
servers given externally to the router when it gets its WAN
address. It forwards your requests on mostly.<br>
<br>
Wireless does some form of security, hopefully, letting client
onto the ssid with a pre-share key or some other. No wpa1, only
wpa2+aes. Tkip is exploitable, so is wps pin registration (easily
crackable without mitigation routines).<br>
<br>
Most routers these days use dd-wrt, or some variant, usually some
oem abomination hack of linux. Your wrt54g is like the granddaddy
of dd-wrt routers, see what generation it is and see if it's
upgradable. Probably doing yourself a favor upgrading the 10yr
old firmware to something secure anyways, keeping some foreign
entity from redirecting your dns for bank servers to snatch your
credentials.<br>
<br>
Clear as mud? Google lots of those words.<br>
<br>
-mb<br>
<br>
<br>
On 10/19/2014 12:31 AM, Michael Havens wrote:<br>
</div>
<blockquote
cite="mid:CAFRvunLyafgwQ6fNA4a1CM8UitU7F-3hBkJkn_40Hm=5J6GO0Q@mail.gmail.com"
type="cite">
<div dir="ltr">so the port I'm wondering about is an input port
then. I thought I read that it is also a wan part. How does
that work? Like I know the internet is a wan but how does it
work in this case?
<div><br>
</div>
</div>
<div class="gmail_extra"><br clear="all">
<div>:-)~MIKE~(-:</div>
<br>
<div class="gmail_quote">On Fri, Oct 17, 2014 at 10:27 PM, koder
<span dir="ltr"><<a moz-do-not-send="true"
href="mailto:iscreamkid@gmail.com" target="_blank">iscreamkid@gmail.com</a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000"> Mike,<br>
<br>
I have the same device in my networking system. My answer
may not be 100% correct, but here is my SWAG: <br>
<br>
The device was designed to serve as a router with DHCP
server capabilities, in other words it hands out IP
addresses to requests that come from one of the output
ports.<br>
<br>
You can access the device using its web page and turn that
feature off, it then acts as a bridge router and the DHCP
functioning will come from further upsteam, from your
other router.<br>
<br>
The network will not function correctly if you have two
different devices trying to pass out IP addresses using
DHCP. Everything pretty much quits talking to each other.<br>
<br>
While I have never tried using the device by plugging
everything only into the output ports, I am guessing that
connection setup would use the device as a bare dumb
switch. No more double DHCP, only happy connectivity.<br>
<br>
I am reasonably sure my explanation is not technically
correct, but is functional. I was quite loose with input,
output, upstream, and downstream analogies, but that is
the way I think of them.<br>
<br>
By the way on a separate item, it is my understanding that
most of these devices are hacked and infected and should
be either upgraded, or replaced. I have yet to do either,
but I think that is the case.<br>
<br>
HM
<div>
<div class="h5"><br>
<br>
<br>
<div>On 10/17/2014 03:08 PM, Michael Havens wrote:<br>
</div>
</div>
</div>
<blockquote type="cite">
<div>
<div class="h5">
<div dir="ltr">That is the router I have. On the
back there are 4 LAN ports and another port labled
Internet. My setup had the cable from the modem
feeding into that port and everything worked until
a couple of days ago. Today I switched that cable
to a LAN port and everything worked again. I asked
in another thread the purpose of the internet port
and MR Butash gave me an answer but it is still a
lot hazy. In my research to answer the question
myself I found a wikipedia article that states:
<div><span
style="color:rgb(37,37,37);font-family:sans-serif;font-size:14px;line-height:22.3999996185303px"><br>
</span></div>
<div><span
style="color:rgb(37,37,37);font-family:sans-serif;font-size:14px;line-height:22.3999996185303px">The
original </span><b
style="color:rgb(37,37,37);font-family:sans-serif;font-size:14px;line-height:22.3999996185303px">WRT54G</b><span
style="color:rgb(37,37,37);font-family:sans-serif;font-size:14px;line-height:22.3999996185303px"> was
first released in December 2002. It has a 4+1
port </span><a moz-do-not-send="true"
href="https://en.wikipedia.org/wiki/Network_switch"
title="Network switch"
style="text-decoration:none;color:rgb(11,0,128);font-family:sans-serif;font-size:14px;line-height:22.3999996185303px;background-image:none;background-repeat:initial"
target="_blank">network switch</a><span
style="color:rgb(37,37,37);font-family:sans-serif;font-size:14px;line-height:22.3999996185303px"> (the
Internet/WAN port is part of the same internal
network switch, but on a different </span><a
moz-do-not-send="true"
href="https://en.wikipedia.org/wiki/VLAN"
title="VLAN"
style="text-decoration:none;color:rgb(11,0,128);font-family:sans-serif;font-size:14px;line-height:22.3999996185303px;background-image:none;background-repeat:initial"
target="_blank">VLAN</a><span
style="color:rgb(37,37,37);font-family:sans-serif;font-size:14px;line-height:22.3999996185303px">).</span><br
clear="all">
<div><br>
</div>
<div>My questions: What is that port for if not
to be an input port for the internet</div>
<div>and</div>
<div>Why was it working as an input port for the
internet and why did it stop working as such?</div>
<div>:-)~MIKE~(-:</div>
</div>
</div>
<br>
<fieldset></fieldset>
<br>
</div>
</div>
<pre>---------------------------------------------------
PLUG-discuss mailing list - <a moz-do-not-send="true" href="mailto:PLUG-discuss@lists.phxlinux.org" target="_blank">PLUG-discuss@lists.phxlinux.org</a>
To subscribe, unsubscribe, or to change your mail settings:
<a moz-do-not-send="true" href="http://lists.phxlinux.org/mailman/listinfo/plug-discuss" target="_blank">http://lists.phxlinux.org/mailman/listinfo/plug-discuss</a></pre>
</blockquote>
<br>
</div>
<br>
---------------------------------------------------<br>
PLUG-discuss mailing list - <a moz-do-not-send="true"
href="mailto:PLUG-discuss@lists.phxlinux.org">PLUG-discuss@lists.phxlinux.org</a><br>
To subscribe, unsubscribe, or to change your mail settings:<br>
<a moz-do-not-send="true"
href="http://lists.phxlinux.org/mailman/listinfo/plug-discuss"
target="_blank">http://lists.phxlinux.org/mailman/listinfo/plug-discuss</a><br>
</blockquote>
</div>
<br>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">---------------------------------------------------
PLUG-discuss mailing list - <a class="moz-txt-link-abbreviated" href="mailto:PLUG-discuss@lists.phxlinux.org">PLUG-discuss@lists.phxlinux.org</a>
To subscribe, unsubscribe, or to change your mail settings:
<a class="moz-txt-link-freetext" href="http://lists.phxlinux.org/mailman/listinfo/plug-discuss">http://lists.phxlinux.org/mailman/listinfo/plug-discuss</a></pre>
</blockquote>
<br>
</body>
</html>