<?xml version="1.0" encoding="utf-8"?><!DOCTYPE article  PUBLIC '-//OASIS//DTD DocBook XML V4.4//EN'  'http://www.docbook.org/xml/4.4/docbookx.dtd'><article><articleinfo><title>unifihotspot</title><revhistory><revision><revnumber>28</revnumber><date>2014-05-19 19:32:17</date><authorinitials>BornAgain</authorinitials><revremark>corretta parola che punta a pagina inesistente</revremark></revision><revision><revnumber>27</revnumber><date>2014-05-19 19:29:23</date><authorinitials>BornAgain</authorinitials><revremark>corretta parola che punta a pagina inesistente</revremark></revision><revision><revnumber>26</revnumber><date>2014-03-18 13:28:53</date><authorinitials>BornAgain</authorinitials></revision><revision><revnumber>25</revnumber><date>2011-12-05 00:13:22</date><authorinitials>88-149-180-63.staticnet.ngi.it</authorinitials><revremark>corretti due errori</revremark></revision><revision><revnumber>24</revnumber><date>2011-05-14 13:07:01</date><authorinitials>Emiliano Macedonio</authorinitials></revision><revision><revnumber>23</revnumber><date>2011-05-14 13:06:20</date><authorinitials>Emiliano Macedonio</authorinitials></revision><revision><revnumber>22</revnumber><date>2011-05-11 00:32:37</date><authorinitials>Marco</authorinitials></revision><revision><revnumber>21</revnumber><date>2011-03-31 15:17:08</date><authorinitials>ZioPRoTo</authorinitials></revision><revision><revnumber>20</revnumber><date>2011-03-15 11:07:01</date><authorinitials>ZioPRoTo</authorinitials></revision><revision><revnumber>19</revnumber><date>2011-02-05 22:45:03</date><authorinitials>93-40-53-248.ip37.fastwebnet.it</authorinitials></revision><revision><revnumber>18</revnumber><date>2011-02-05 22:37:29</date><authorinitials>93-40-53-248.ip37.fastwebnet.it</authorinitials></revision><revision><revnumber>17</revnumber><date>2011-01-17 01:04:22</date><authorinitials>stefanopilla</authorinitials></revision><revision><revnumber>16</revnumber><date>2011-01-17 00:57:26</date><authorinitials>stefanopilla</authorinitials></revision><revision><revnumber>15</revnumber><date>2011-01-17 00:51:24</date><authorinitials>stefanopilla</authorinitials></revision><revision><revnumber>14</revnumber><date>2011-01-17 00:32:53</date><authorinitials>Marco</authorinitials></revision><revision><revnumber>13</revnumber><date>2011-01-17 00:30:55</date><authorinitials>Marco</authorinitials></revision><revision><revnumber>12</revnumber><date>2011-01-17 00:24:55</date><authorinitials>Marco</authorinitials></revision><revision><revnumber>11</revnumber><date>2011-01-17 00:19:37</date><authorinitials>Marco</authorinitials></revision><revision><revnumber>10</revnumber><date>2011-01-17 00:11:10</date><authorinitials>Marco</authorinitials></revision><revision><revnumber>9</revnumber><date>2011-01-17 00:02:08</date><authorinitials>Marco</authorinitials></revision><revision><revnumber>8</revnumber><date>2011-01-16 23:55:13</date><authorinitials>Marco</authorinitials></revision><revision><revnumber>7</revnumber><date>2011-01-16 23:49:51</date><authorinitials>Marco</authorinitials></revision><revision><revnumber>6</revnumber><date>2011-01-16 23:40:17</date><authorinitials>Marco</authorinitials></revision><revision><revnumber>5</revnumber><date>2011-01-16 23:32:53</date><authorinitials>Marco</authorinitials></revision><revision><revnumber>4</revnumber><date>2011-01-16 23:24:28</date><authorinitials>Marco</authorinitials></revision><revision><revnumber>3</revnumber><date>2011-01-16 23:21:11</date><authorinitials>Marco</authorinitials></revision><revision><revnumber>2</revnumber><date>2011-01-16 23:20:48</date><authorinitials>Marco</authorinitials></revision><revision><revnumber>1</revnumber><date>2011-01-16 23:20:05</date><authorinitials>Marco</authorinitials></revision></revhistory></articleinfo><section><title>UniFi HotSpot</title><para>Con questa breve guida cercherò di spiegare come realizzare un semplice HotSpot Ninux con <ulink url="http://www.ninux.org/unifihotspot/SplashPage#">SplashPage</ulink> e VPN per instradare il traffico. </para><section><title>Pacchetti necessari</title><para>Dopo aver flashato OpenWRT sulla nostra <ulink url="http://wiki.openwrt.org/toh/ubiquiti/unifi?s[]=unifi">Ubiquiti Unifi</ulink>, aggiorniamo il repository dei pacchetti e installiamo i seguenti pacchetti </para><screen><![CDATA[opkg update
opkg install kmod-ipv6 ip tinc tcpdump mini-snmpd olsrd olsrd-mod-dot-draw olsrd-mod-httpinfo olsrd-mod-mdns olsrd-mod-txtinfo olsrd-mod-nameservice]]></screen></section><section><title>Configurazione Rete</title><para>Disabilitare il firewall e abilitare dnsmasq </para><screen><![CDATA[/etc/init.d/firewall stop
/etc/init.d/firewall disable
]]><![CDATA[
/etc/init.d/dnsmasq start
/etc/init.d/dnsmasq enable]]></screen><para>Modificare il file /etc/config/network nel seguente modo </para><screen><![CDATA[config interface loopback
        option ifname   lo
        option proto    static
        option ipaddr   127.0.0.1
        option netmask  255.0.0.0
]]><![CDATA[
config interface lan
        option ifname   wlan0
        option proto    static
        option ipaddr   10.xxx.xxx.1
        option netmask  255.255.255.0
        option dns 8.8.8.8
]]><![CDATA[
config interface wan
        option ifname   eth0
        option proto    dhcp
]]><![CDATA[
config interface vpn
        option proto none
        option ifname ninux]]></screen><para>Consultare la pagina <ulink url="http://wiki.ninux.org/GestioneIndirizzi">Gestione Indirizzi</ulink> per impostare la subnet del nostro <ulink url="http://www.ninux.org/unifihotspot/HotSpot#">HotSpot</ulink>. </para><para>Nel file /etc/config/wireless modificare le seguenti righe </para><screen><![CDATA[option disabled 0
]]><![CDATA[
config wifi-iface
        option device   radio0
        option network  lan
        option mode     ap
        option ssid     www.ninux.org
        option encryption none]]></screen></section><section><title>Configurazione VPN</title><para>Passiamo ora alla configurazione della VPN. Iniziamo a configurare tinc seguendo la guida <ulink url="http://wiki.ninux.org/TincVPN">TincVPN</ulink> </para><para>Modifichiamo il file /etc/tinc/ninux/tinc-up nel seguente modo </para><screen><![CDATA[ip link set dev ninux up
ip a a dev ninux 10.0.1.xxx/24 broadcast 10.0.1.255
#Adjust MTU
ip link set mtu 1280 dev ninux
iptables -A FORWARD -p tcp -m tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu
#hotspot
grep relakks /etc/iproute2/rt_tables || echo 200 relakks >> /etc/iproute2/rt_tables
ip rule add from 10.xxx.xxx.0/24 table relakks
ip route add 10.xxx.xxx.0/24 dev wlan0 table relakks
ip route add default via 10.0.1.1 table relakks]]></screen><para>Inviare un'email a <ulink url="mailto:contatti@ninux.org">contatti@ninux.org</ulink> con le subnet del proprio <ulink url="http://www.ninux.org/unifihotspot/HotSpot#">HotSpot</ulink> per abilitare il tunnel Relakks. </para><para>Abilitare tinc </para><screen><![CDATA[/etc/init.d/tincd start
/etc/init.d/tincd enable]]></screen></section><section><title>Configurazione OLSR</title><para>Configurare il file /etc/config/olsrd </para><screen><![CDATA[config 'olsrd'
        option 'IpVersion' '4'
]]><![CDATA[
config LoadPlugin
        option 'library' 'olsrd_httpinfo.so.0.1'
        option 'port' '1978'
        list 'Net' '0.0.0.0 0.0.0.0'
]]><![CDATA[
config LoadPlugin
        option 'library' 'olsrd_nameservice.so.0.3'
]]><![CDATA[
config LoadPlugin
        option 'library' 'olsrd_txtinfo.so.0.1'
        option accept '0.0.0.0'
]]><![CDATA[
config 'Interface'
        option 'interface' 'vpn'
        option 'LinkQualityMult' 'default 0.2'
]]><![CDATA[
config 'Hna4'
        option 'netaddr' '10.xxx.xxx.0'
        option 'netmask' '255.255.255.0'
]]><![CDATA[
config LoadPlugin
        option library 'olsrd_mdns.so.1.0.0'
        option "NonOlsrIf" "lan"]]></screen><para>Abilitare olsr </para><screen><![CDATA[/etc/init.d/olsrd start]]></screen><screen><![CDATA[/etc/init.d/olsrd enable]]></screen></section><section><title>Configurazione Splash Page</title><para>Per la configurazione della <ulink url="http://www.ninux.org/unifihotspot/SplashPage#">SplashPage</ulink> seguire la seguente <ulink url="http://wiki.ninux.org/SplashPage">guida</ulink> Modificare il file di configurazione /etc/nodogsplash/nodogsplash.conf con le seguenti righe </para><screen><![CDATA[........
]]><![CDATA[
GatewayInterface wlan0
]]><![CDATA[
........
]]><![CDATA[
FirewallRuleSet authenticated-users {
]]><![CDATA[
   FirewallRule allow all
]]><![CDATA[
}]]></screen><para>In questo modo abilitiamo la <ulink url="http://www.ninux.org/unifihotspot/SplashPage#">SplashPage</ulink> sull'interfaccia wireless dell'HotSpot e abilitamo qualsiasi tipo di traffico verso la rete ninux. </para></section><section><title>Configurazione miniSNMP</title><para>Possiamo configurare il pachetto mini-snmpd per avere delle statistiche sul traffico del nostro HotSpot. </para><para>Modifichiamo il file /etc/config/mini_snmpd nel seguente modo </para><screen><![CDATA[config mini_snmpd
        option enabled 1
        option community public
        option location ''
        option contact ''
        option disks '/tmp,/overlay'
        option interfaces 'wlan0,ninux' # Max 4]]></screen><para>Inviare un'email a <ulink url="mailto:contatti@ninux.org">contatti@ninux.org</ulink> con le subnet del proprio HotSpot per abilitare le statistiche. </para></section></section></article>