Site Tools


basic-network

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revisionBoth sides next revision
basic-network [2022/09/07 09:21] – [LAN] obtain a LAN IP via DHCP (AP/WET/MB Mode) m_arsbasic-network [2023/02/15 21:11] – Removed inconsistent, forced line wrapping techie007
Line 109: Line 109:
 \\  Manually chosen DNS servers are useful if your ISP's DNS servers are slow or unreliable, or can be used for parental filtering. \\  Manually chosen DNS servers are useful if your ISP's DNS servers are slow or unreliable, or can be used for parental filtering.
  
-**MTU:**  Maximum Transmission Unit, the maximum size of Ethernet frames to be transferred between WAN and LAN. \\ This is only for the WAN interface and won't alter client devices on the LAN. However, MTU size differences among devices can cause issues.+**MTU:**  Maximum Transmission Unit, the maximum size of Ethernet frames to be transferred between WAN and LAN. This is only for the WAN interface and won't alter client devices on the LAN. However, MTU size differences among devices can cause issues.
  
-  * (Default: 1500), is typical for Ethernet devices, and is usually suitable. \\ When Default is selected, the number in the Manual field is greyed out \\ and can't be changed. +  * (Default: 1500), is typical for Ethernet devices, and is usually suitable. When Default is selected, the number in the Manual field is greyed out and can't be changed. 
-  * Manual: Selecting manual lets you to enter a custom number in the field \\ beside it. Jumbo Frame sizes typically begin at a size of 2000 bytes.+  * Manual: Selecting manual lets you to enter a custom number in the field beside it. Jumbo Frame sizes typically begin at a size of 2000 bytes.
  
 **Use DHCP:**  This function is rarely used, and it is recommended you leave it disabled. On a few Internet providers, addressing is separated from PPPoE functionality. TBD. **Use DHCP:**  This function is rarely used, and it is recommended you leave it disabled. On a few Internet providers, addressing is separated from PPPoE functionality. TBD.
Line 250: Line 250:
 \\  **Wireless Network Mode: **This lets you choose which 802.11 WiFi protocol(s) to make available to clients. \\  **Wireless Network Mode: **This lets you choose which 802.11 WiFi protocol(s) to make available to clients.
  
-  * Auto: FreshTomato and WiFi client devices negotiate the best wireless\\ protocol automatically. Generally, Auto is recommended, unless you are\\ very knowledgeable about networking. Compatibility issues can create\\ all kinds of problems, and often, the most "logical" setting is not the best one.+  * Auto: FreshTomato and WiFi client devices negotiate the best wireless protocol automatically. Generally, Auto is recommended, unless you are very knowledgeable about networking. Compatibility issues can create all kinds of problems, and often, the most "logical" setting is not the best one.
   * B Only: This allows W-Fi clients to connect using only the 802.11b protocol.   * B Only: This allows W-Fi clients to connect using only the 802.11b protocol.
   * G Only: This allows WiFi clients to connect using only the 802.11n protocol.   * G Only: This allows WiFi clients to connect using only the 802.11n protocol.
Line 266: Line 266:
 **Channel: **Selects the channel on which the 2.4 GHz radio interface will operate. Generally, it's a good idea to choose a different channel than the one your neighbours are using. (Default: Auto). **Channel: **Selects the channel on which the 2.4 GHz radio interface will operate. Generally, it's a good idea to choose a different channel than the one your neighbours are using. (Default: Auto).
  
-  * Auto: This default setting is generally safe unless there is significant interference \\ from nearby networks or other equipment.+  * Auto: This default setting is generally safe unless there is significant interference from nearby networks or other equipment.
  
 FreshTomato chooses and uses the channel it believes has the least interference. FreshTomato chooses and uses the channel it believes has the least interference.
  
-  * Channel: This menu lets you manually choose available WiFi channels \\ on the band. Unavailable channels will not appear here.+  * Channel: This menu lets you manually choose available WiFi channels on the band. Unavailable channels will not appear here.
  
 **Channel Width:**  This menu allows you to choose the width of the channel (in terms of frequency). **Channel Width:**  This menu allows you to choose the width of the channel (in terms of frequency).
Line 286: Line 286:
 **Security**: This menu lets you select the security protocol that will be used on the 2.4 GHz WiFi interface. **Security**: This menu lets you select the security protocol that will be used on the 2.4 GHz WiFi interface.
  
-  * Disabled: disables security entirely, leaving the network open to anyone. \\ Avoid using this, as it is an almost unlimited security risk. +  * Disabled: disables security entirely, leaving the network open to anyone. Avoid using this, as it is an almost unlimited security risk. 
-  * WEP: enables Wired Equivalent Privacy protocol. Avoid using this. It's obsolete \\ due to serious vulnerabilities, including weak encryption. +  * WEP: enables Wired Equivalent Privacy protocol. Avoid using this. It's obsolete due to serious vulnerabilities, including weak encryption. 
-  * WPA Personal: enables WiFi Protected Access Protocol (1.x). WPA uses the \\ RC4-based TKIP protocol, letting hosts exchange pre-shared keys more secure. \\ While more secure than WEP, WPA still has weaknesses, like lower encryption \\ standards. WPA is strongly discouraged in favour of WPA2 or higher. +  * WPA Personal: enables WiFi Protected Access Protocol (1.x). WPA uses the RC4-based TKIP protocol, letting hosts exchange pre-shared keys more secure. While more secure than WEP, WPA still has weaknesses, like lower encryption standards. WPA is strongly discouraged in favour of WPA2 or higher. 
-  * WPA Enterprise: Also known as WPA-802.1X, this is similar to WPA Personal, \\ but each user has their own username/password, instead of the same pre-shared key. \\ WPA2 Enterprise does not requires a RADIUS server. However, often one is used \\ anyway for compatibility and security purposes. WPA Enterprise is more secure against \\ dictionary attacks on short passwords. Suitable for larger, more formal networks. +  * WPA Enterprise: Also known as WPA-802.1X, this is similar to WPA Personal, but each user has their own username/password, instead of the same pre-shared key. WPA2 Enterprise does not requires a RADIUS server. However, often one is used anyway for compatibility and security purposes. WPA Enterprise is more secure against dictionary attacks on short passwords. Suitable for larger, more formal networks. 
-  * WPA2 Personal: WiFi Protected Access version 2 uses elements of the\\ 802.11i standard, like mandatory support for AES encryption. This makes it\\ much more secure than older protocols. WPA2 Personal is recommended for small-\\ to mid-sized, informal networks. +  * WPA2 Personal: WiFi Protected Access version 2 uses elements of the 802.11i standard, like mandatory support for AES encryption. This makes it much more secure than older protocols. WPA2 Personal is recommended for small to mid-sized, informal networks. 
-  * WPA2 Enterprise: This enables the Enterprise version of WPA2. This uses WPA2, but\\ each user has their own WiFi username/passkey, instead of the same pre-shared key.\\ WPA2 Enterprise is based on parts of 802.11i. This does NOT require a RADIUS server, \\ but one is often used for legacy purposes \\ to maintain compatibility and security. Appropriate for larger, more structured networks.+  * WPA2 Enterprise: This enables the Enterprise version of WPA2. This uses WPA2, but each user has their own WiFi username/passkey, instead of the same pre-shared key. WPA2 Enterprise is based on parts of 802.11i. This does NOT require a RADIUS server, but one is often used for legacy purposes to maintain compatibility and security. Appropriate for larger, more structured networks.
   * WPA / WPA2 Personal:   * WPA / WPA2 Personal:
   * WPA / WPA2 Enterprise:   * WPA / WPA2 Enterprise:
-  * RADIUS: Enables FreshTomato's Remote Access Dialup User Service. \\ Designed for larger organizations, RADIUS uses a separate server to authenticate, \\ permit and keep track of users. RADIUS also supports authentication via certificates, \\ which makes user management easier. This is usually used by advanced users.+  * RADIUS: Enables FreshTomato's Remote Access Dialup User Service. Designed for larger organizations, RADIUS uses a separate server to authenticate, permit and keep track of users. RADIUS also supports authentication via certificates, which makes user management easier. This is usually used by advanced users.
  
 **Shared Key:**  Here, enter the shared key which authenticates the WiFi client on the network. The field shows only asterisks until you click your cursor in it. Then, the characters become visible. **Shared Key:**  Here, enter the shared key which authenticates the WiFi client on the network. The field shows only asterisks until you click your cursor in it. Then, the characters become visible.
Line 362: Line 362:
 **Security** **Security**
  
-  * Disabled: disables security entirely, leaving the network open to anyone. \\ Avoid using this, as it is an almost unlimited security risk. +  * Disabled: disables security entirely, leaving the network open to anyone. Avoid using this, as it is an almost unlimited security risk. 
-  * WEP: enables Wired Equivalent Privacy protocol. Avoid using this, as it is obsolete \\ due to serious vulnerabilities, including weak encryption. +  * WEP: enables Wired Equivalent Privacy protocol. Avoid using this, as it is obsolete due to serious vulnerabilities, including weak encryption. 
-  * WPA Personal: enables WiFi Protected Access Protocol (1.x). WPA uses the \\ RC4-based TKIP protocol, letting hosts exchange pre-shared keys more secure. \\ While more secure than WEP, WPA still has weaknesses, like lower encryption standards. \\ WPA is strongly discouraged in favour of WPA2 or higher. +  * WPA Personal: enables WiFi Protected Access Protocol (1.x). WPA uses the RC4-based TKIP protocol, letting hosts exchange pre-shared keys more secure. While more secure than WEP, WPA still has weaknesses, like lower encryption standards. WPA is strongly discouraged in favour of WPA2 or higher. 
-  * WPA Enterprise: Also known as WPA-802.1X, this is similar to WPA Personal, \\ but each user has their own username/password, instead of the same pre-shared key. \\ WPA2 Enterprise does not requires a RADIUS server. However, often one is used \\ anyway for compatibility and security purposes. WPA Enterprise is more secure against \\ dictionary attacks on short passwords. Suitable for larger, more formal networks. +  * WPA Enterprise: Also known as WPA-802.1X, this is similar to WPA Personal, but each user has their own username/password, instead of the same pre-shared key. WPA2 Enterprise does not requires a RADIUS server. However, often one is used anyway for compatibility and security purposes. WPA Enterprise is more secure against dictionary attacks on short passwords. Suitable for larger, more formal networks. 
-  * WPA2 Personal: WiFi Protected Access version 2 uses elements of the\\ 802.11i standard, like mandatory support for AES encryption. This makes it\\ much more secure than older protocols. WPA2 Personal is recommended for small-\\ to mid-sized, informal networks. +  * WPA2 Personal: WiFi Protected Access version 2 uses elements of the 802.11i standard, like mandatory support for AES encryption. This makes it much more secure than older protocols. WPA2 Personal is recommended for small to mid-sized, informal networks. 
-  * WPA2 Enterprise: This enables the Enterprise version of WPA2. This uses WPA2, but\\ each user has their own WiFi username/passkey, instead of the same pre-shared key.\\ WPA2 Enterprise is based on parts of 802.11i. This does not require a RADIUS server,\\ but one is often used for legacy purposes \\ to maintain compatibility and security. Appropriate for larger, more structured networks.+  * WPA2 Enterprise: This enables the Enterprise version of WPA2. This uses WPA2, but each user has their own WiFi username/passkey, instead of the same pre-shared key. WPA2 Enterprise is based on parts of 802.11i. This does not require a RADIUS server, but one is often used for legacy purposes to maintain compatibility and security. Appropriate for larger, more structured networks.
   * WPA / WPA2 Personal:   * WPA / WPA2 Personal:
   * WPA / WPA2 Enterprise:   * WPA / WPA2 Enterprise:
-  * RADIUS: Enables FreshTomato's Remote Access Dialup User Service. \\ Designed for larger organizations, RADIUS uses a separate server to authenticate, \\ permit and keep track of users. RADIUS also supports authentication via certificates, \\ which makes user management easier. This is usually used by advanced users.+  * RADIUS: Enables FreshTomato's Remote Access Dialup User Service. Designed for larger organizations, RADIUS uses a separate server to authenticate, permit and keep track of users. RADIUS also supports authentication via certificates, which makes user management easier. This is usually used by advanced users.
  
 **Shared Key:**  Here, enter the shared key used to authenticate the WiFi client on the network. The field will show asterisks until you click your cursor in it. The characters will then become visible. **Shared Key:**  Here, enter the shared key used to authenticate the WiFi client on the network. The field will show asterisks until you click your cursor in it. The characters will then become visible.
basic-network.txt · Last modified: 2024/05/07 06:03 by hogwild