Gadžety - TP-LINK TL-WR1043ND

Naposledy som predstavil dosku RouterStation Pro, ktorá je určená (výkonom, ale aj cenou) skôr na "profesionálne" nasadenie. Niekedy ale človek potrebuje niečo lacné, no stále dostatočne výkonné a konfigurovateľné. A práve takýto router predstavím dnes.

Ak je pre Vás, drahých čitateľov, dôležitá hlavne cena, ale nechcete sa vzdať niektorých výhod, napríklad podpory OpenWRT, gigabitových portov alebo N-kovej wifi, určite neprehliadnite zariadenie od výrobcu TP-Link s označením TL-WR1043ND. Ide o router, u nás dostupný za ľudovú cenu, 30 EUR bez DPH, ponúkajúci toho pomerne dosť.

Špecifikácia je nasledovná:

Atheros AR9132@400MHz
4x 10/100/1000M LAN Ports, 1x 10/100/1000M WAN Port
32MB RAM
8MB Flash
Wifi Atheros AR9103 802.11n
USB2.0 (Serial a JTAG po otvorení)

Spomínané gigabitové porty sú spolu na jednom switchi (Realtek RTL8366RB) a ich rozdelenie na WAN a LAN funguje rovnako, ako napríklad v prípade Linksys WRT54GL alebo rôznych Asusov (a veľa iných), teda pomocou VLANov. Čo ale štandardne nefunguje, je nahrávanie nového firmvéru (ktorý si inak môžete stiahnuť tu: openwrt-ar71xx-tl-wr1043nd-v1-squashfs-factory.bin). Na tomto zariadení totiž nenájdete možnosť preflashovať celý firmvér tak, ako je to bežné. Taktiež nie je možné nahrať nový firmvér cez JTAG, čo vyraďuje túto vecičku zo skupiny routrov vhodných na pokusy. Ak sa Vám ale stane, že sa odpílite len z OpenWRT (napríklad zlým nastavením firewallu alebo zhodením SSH/telnetu), stále je možnosť vrátiť továrenské nastavenia. Všetko podstatné nájdete priamo na OpenWRT Wiki - TP-Link TL-WR1043ND. Poďme už ale priamo na nastavenia.

Default sieťová konfigurácia (/etc/config/network) vyzerá takto:

config 'interface' 'loopback'
       option 'ifname'   'lo'
       option 'proto'    'static'
       option 'ipaddr'   '127.0.0.1'
       option 'netmask'  '255.0.0.0'
config 'interface' 'lan'
        option 'ifname'   'eth0.1'
        option 'type'     'bridge'
        option 'proto'    'static'
        option 'ipaddr'   '192.168.1.1'
        option 'netmask'  '255.255.255.0'
config 'interface' 'wan'
        option 'ifname' 'eth0.2'
        option 'proto' 'dhcp'
config 'switch'
        option 'name' 'rtl8366rb'
        option 'reset' '1'
        option 'enable_vlan' '1'
config 'switch_vlan'
        option 'device' 'rtl8366rb'
        option 'vlan' '1'
        option 'ports' '1 2 3 4 5t'
config 'switch_vlan'
        option 'device' 'rtl8366rb'
        option 'vlan' '2'
        option 'ports' '0 5t'

Kým metalická sieť beží hneď, wifi ovládače si musíte ručne doinštalovať.

opkg install kmod-ath9k

Ak chete používať IEEE 802.1x/WPA/EAP/RADIUS, treba doinštalovať balíček wpad. Ak postačí WPA-PSK, tak wpad-mini. Tieto balíky nahradzujú wpa-supplicant a hostapd, ktoré už teda nie je potrebné inštalovať.

opkg install wpad

Defaultná konfigurácia wifi vyzerá takto:

config wifi-device  radio0
        option type     mac80211
        option channel  5
        option macaddr  94:0c:6d:ac:42:a8
        option hwmode   11ng
        option htmode   HT20
        list ht_capab   SHORT-GI-40
        list ht_capab   DSSS_CCK-40
        # REMOVE THIS LINE TO ENABLE WIFI:
        option disabled 1
config wifi-iface
        option device   radio0
        option network  lan
        option mode     ap
        option ssid     OpenWrt
        option encryption none

Čo s tým ďalej už snáď nemusím rozpisovať.

Zariadenie mám len zopár dní, takže s jeho nasadením nemám žiadne skúsenosti. Počas testov som ale nenarazil na žiaden problém a predpokladám, že v normálne prevádzke sa bude správať stabilne. Samozrejme, nie je vhodné všade, napríklad OpenVPN výkon je dosť žalostný a routovanie taktiež zvládne sotva nejakých 160 Mbit/s. Ale na domáce použitie alebo u klientov so slabým pripojením je to dostačujúce.

Užitočné linky:

Na záver dodám ešte zopár (dlhších) výpisov, ktoré môžu niekoho zaujímať:

root@OpenWrt:~# cat /proc/cpuinfo
system type             : Atheros AR9132 rev 2
machine                 : TP-LINK TL-WR1043ND
processor               : 0
cpu model               : MIPS 24Kc V7.4
BogoMIPS                : 266.24
wait instruction        : yes
microsecond timers      : yes
tlb_entries             : 16
extra interrupt vector  : yes
hardware watchpoint     : yes, count: 4, address/irw mask: [0x0000, 0x0230, 0x0000, 0x0010]
ASEs implemented        : mips16
shadow register sets    : 1
core                    : 0
VCED exceptions         : not available
VCEI exceptions         : not available

root@OpenWrt:~# openssl speed
Doing md4 for 3s on 16 size blocks: 276694 md4's in 3.00s
Doing md4 for 3s on 64 size blocks: 246951 md4's in 3.00s
Doing md4 for 3s on 256 size blocks: 185278 md4's in 3.00s
Doing md4 for 3s on 1024 size blocks: 92783 md4's in 3.00s
Doing md4 for 3s on 2048 size blocks: 55704 md4's in 3.00s
Doing md5 for 3s on 16 size blocks: 200563 md5's in 3.00s
Doing md5 for 3s on 64 size blocks: 176768 md5's in 3.00s
Doing md5 for 3s on 256 size blocks: 130189 md5's in 3.00s
Doing md5 for 3s on 1024 size blocks: 63423 md5's in 3.00s
Doing md5 for 3s on 2048 size blocks: 37667 md5's in 2.99s
Doing hmac(md5) for 3s on 16 size blocks: 312411 hmac(md5)'s in 3.00s
Doing hmac(md5) for 3s on 64 size blocks: 256877 hmac(md5)'s in 3.00s
Doing hmac(md5) for 3s on 256 size blocks: 169050 hmac(md5)'s in 3.00s
Doing hmac(md5) for 3s on 1024 size blocks: 71432 hmac(md5)'s in 3.00s
Doing hmac(md5) for 3s on 2048 size blocks: 40354 hmac(md5)'s in 3.00s
Doing sha1 for 3s on 16 size blocks: 167121 sha1's in 3.00s
Doing sha1 for 3s on 64 size blocks: 114739 sha1's in 3.00s
Doing sha1 for 3s on 256 size blocks: 58948 sha1's in 3.00s
Doing sha1 for 3s on 1024 size blocks: 20035 sha1's in 3.00s
Doing sha1 for 3s on 2048 size blocks: 10656 sha1's in 3.00s
Doing sha256 for 3s on 16 size blocks: 184439 sha256's in 3.00s
Doing sha256 for 3s on 64 size blocks: 106746 sha256's in 2.99s
Doing sha256 for 3s on 256 size blocks: 47146 sha256's in 3.00s
Doing sha256 for 3s on 1024 size blocks: 14581 sha256's in 3.00s
Doing sha256 for 3s on 2048 size blocks: 7591 sha256's in 3.00s
Doing sha512 for 3s on 16 size blocks: 57707 sha512's in 3.00s
Doing sha512 for 3s on 64 size blocks: 57739 sha512's in 3.00s
Doing sha512 for 3s on 256 size blocks: 21178 sha512's in 3.00s
Doing sha512 for 3s on 1024 size blocks: 7308 sha512's in 3.00s
Doing sha512 for 3s on 2048 size blocks: 3901 sha512's in 3.00s
Doing rc4 for 3s on 16 size blocks: 3282242 rc4's in 3.00s
Doing rc4 for 3s on 64 size blocks: 920828 rc4's in 3.00s
Doing rc4 for 3s on 256 size blocks: 237466 rc4's in 3.00s
Doing rc4 for 3s on 1024 size blocks: 59838 rc4's in 3.00s
Doing rc4 for 3s on 2048 size blocks: 29956 rc4's in 3.00s
Doing des cbc for 3s on 16 size blocks: 563941 des cbc's in 3.00s
Doing des cbc for 3s on 64 size blocks: 146681 des cbc's in 3.00s
Doing des cbc for 3s on 256 size blocks: 37046 des cbc's in 3.00s
Doing des cbc for 3s on 1024 size blocks: 9286 des cbc's in 3.00s
Doing des cbc for 3s on 2048 size blocks: 4645 des cbc's in 3.00s
Doing des ede3 for 3s on 16 size blocks: 207357 des ede3's in 3.00s
Doing des ede3 for 3s on 64 size blocks: 52667 des ede3's in 3.00s
Doing des ede3 for 3s on 256 size blocks: 13220 des ede3's in 3.00s
Doing des ede3 for 3s on 1024 size blocks: 3308 des ede3's in 3.00s
Doing des ede3 for 3s on 2048 size blocks: 1655 des ede3's in 3.00s
Doing aes-128 cbc for 3s on 16 size blocks: 824452 aes-128 cbc's in 3.00s
Doing aes-128 cbc for 3s on 64 size blocks: 222460 aes-128 cbc's in 3.00s
Doing aes-128 cbc for 3s on 256 size blocks: 56672 aes-128 cbc's in 3.00s
Doing aes-128 cbc for 3s on 1024 size blocks: 14251 aes-128 cbc's in 3.00s
Doing aes-128 cbc for 3s on 2048 size blocks: 7132 aes-128 cbc's in 3.00s
Doing aes-192 cbc for 3s on 16 size blocks: 726362 aes-192 cbc's in 3.00s
Doing aes-192 cbc for 3s on 64 size blocks: 194191 aes-192 cbc's in 3.00s
Doing aes-192 cbc for 3s on 256 size blocks: 49351 aes-192 cbc's in 3.00s
Doing aes-192 cbc for 3s on 1024 size blocks: 12400 aes-192 cbc's in 3.00s
Doing aes-192 cbc for 3s on 2048 size blocks: 6205 aes-192 cbc's in 3.00s
Doing aes-256 cbc for 3s on 16 size blocks: 649277 aes-256 cbc's in 3.00s
Doing aes-256 cbc for 3s on 64 size blocks: 172291 aes-256 cbc's in 3.00s
Doing aes-256 cbc for 3s on 256 size blocks: 43705 aes-256 cbc's in 3.00s
Doing aes-256 cbc for 3s on 1024 size blocks: 10977 aes-256 cbc's in 3.00s
Doing aes-256 cbc for 3s on 2048 size blocks: 5492 aes-256 cbc's in 3.00s
Doing aes-128 ige for 3s on 16 size blocks: 814478 aes-128 ige's in 3.00s
Doing aes-128 ige for 3s on 64 size blocks: 229656 aes-128 ige's in 3.00s
Doing aes-128 ige for 3s on 256 size blocks: 59176 aes-128 ige's in 3.00s
Doing aes-128 ige for 3s on 1024 size blocks: 14928 aes-128 ige's in 2.99s
Doing aes-128 ige for 3s on 2048 size blocks: 7475 aes-128 ige's in 3.00s
Doing aes-192 ige for 3s on 16 size blocks: 719883 aes-192 ige's in 3.00s
Doing aes-192 ige for 3s on 64 size blocks: 199660 aes-192 ige's in 3.00s
Doing aes-192 ige for 3s on 256 size blocks: 51241 aes-192 ige's in 3.00s
Doing aes-192 ige for 3s on 1024 size blocks: 12911 aes-192 ige's in 3.00s
Doing aes-192 ige for 3s on 2048 size blocks: 6464 aes-192 ige's in 3.00s
Doing aes-256 ige for 3s on 16 size blocks: 643942 aes-256 ige's in 3.00s
Doing aes-256 ige for 3s on 64 size blocks: 176572 aes-256 ige's in 3.00s
Doing aes-256 ige for 3s on 256 size blocks: 45181 aes-256 ige's in 3.00s
Doing aes-256 ige for 3s on 1024 size blocks: 11373 aes-256 ige's in 3.00s
Doing aes-256 ige for 3s on 2048 size blocks: 5693 aes-256 ige's in 3.00s
Doing rc2 cbc for 3s on 16 size blocks: 588412 rc2 cbc's in 3.00s
Doing rc2 cbc for 3s on 64 size blocks: 152837 rc2 cbc's in 3.00s
Doing rc2 cbc for 3s on 256 size blocks: 38588 rc2 cbc's in 3.00s
Doing rc2 cbc for 3s on 1024 size blocks: 9671 rc2 cbc's in 3.00s
Doing rc2 cbc for 3s on 2048 size blocks: 4838 rc2 cbc's in 3.00s
Doing blowfish cbc for 3s on 16 size blocks: 1241392 blowfish cbc's in 3.00s
Doing blowfish cbc for 3s on 64 size blocks: 337303 blowfish cbc's in 3.00s
Doing blowfish cbc for 3s on 256 size blocks: 86200 blowfish cbc's in 3.00s
Doing blowfish cbc for 3s on 1024 size blocks: 21671 blowfish cbc's in 3.00s
Doing blowfish cbc for 3s on 2048 size blocks: 10846 blowfish cbc's in 3.00s
Doing cast cbc for 3s on 16 size blocks: 1140592 cast cbc's in 3.00s
Doing cast cbc for 3s on 64 size blocks: 307614 cast cbc's in 3.00s
Doing cast cbc for 3s on 256 size blocks: 78449 cast cbc's in 3.00s
Doing cast cbc for 3s on 1024 size blocks: 19712 cast cbc's in 3.00s
Doing cast cbc for 3s on 2048 size blocks: 9864 cast cbc's in 3.00s
Doing 512 bit private rsa's for 10s: 1204 512 bit private RSA's in 10.00s
Doing 512 bit public rsa's for 10s: 14442 512 bit public RSA's in 10.00s
Doing 1024 bit private rsa's for 10s: 238 1024 bit private RSA's in 10.04s
Doing 1024 bit public rsa's for 10s: 4863 1024 bit public RSA's in 10.00s
Doing 2048 bit private rsa's for 10s: 40 2048 bit private RSA's in 10.12s
Doing 2048 bit public rsa's for 10s: 1441 2048 bit public RSA's in 10.01s
Doing 4096 bit private rsa's for 10s: 6 4096 bit private RSA's in 10.04s
Doing 4096 bit public rsa's for 10s: 406 4096 bit public RSA's in 10.02s
Doing 512 bit sign dsa's for 10s: 1433 512 bit DSA signs in 10.00s
Doing 512 bit verify dsa's for 10s: 1245 512 bit DSA verify in 10.01s
Doing 1024 bit sign dsa's for 10s: 491 1024 bit DSA signs in 10.00s
Doing 1024 bit verify dsa's for 10s: 415 1024 bit DSA verify in 10.01s
Doing 2048 bit sign dsa's for 10s: 147 2048 bit DSA signs in 10.05s
Doing 2048 bit verify dsa's for 10s: 125 2048 bit DSA verify in 10.03s
OpenSSL 0.9.8m 25 Feb 2010
built on: Wed Mar 31 03:40:53 CEST 2010
options:bn(64,32) rc4(ptr,char) des(idx,cisc,16,long) aes(partial) blowfish(ptr)
compiler: mips-openwrt-linux-uclibc-gcc -fPIC -DOPENSSL_PIC -DZLIB_SHARED -DZLIB -DDSO_DLFCN -DHAVE_DLFCN_H -DHAVE_CRYPTODEV -I/home/openwrt/backfire/build/ar71xx/staging_dir/target-mips_r2_uClibc-0.9.30.1/usr/include -I/home/openwrt/backfire/build/ar71xx/staging_dir/target-mips_r2_uClibc-0.9.30.1/include -I/home/openwrt/backfire/build/ar71xx/staging_dir/toolchain-mips_r2_gcc-4.3.3+cs_uClibc-0.9.30.1/usr/include -I/home/openwrt/backfire/build/ar71xx/staging_dir/toolchain-mips_r2_gcc-4.3.3+cs_uClibc-0.9.30.1/include -DOPENSSL_SMALL_FOOTPRINT -DOPENSSL_NO_ERR -DOPENSSL_NO_HW -DTERMIO -Os -pipe -mips32r2 -mtune=mips32r2 -funit-at-a-time -fhonour-copts -msoft-float -fpic -fomit-frame-pointer -Wall
available timing options: TIMES TIMEB HZ=100 [sysconf value]
timing function used: times
The 'numbers' are in 1000s of bytes per second processed.
type             16 bytes     64 bytes    256 bytes   1024 bytes   2048 bytes
md2                  0.00         0.00         0.00         0.00         0.00
mdc2                 0.00         0.00         0.00         0.00         0.00
md4               1475.70k     5268.29k    15810.39k    31669.93k    38027.26k
md5               1069.67k     3771.05k    11109.46k    21648.38k    25800.01k
hmac(md5)         1666.19k     5480.04k    14425.60k    24382.12k    27548.33k
sha1               891.31k     2447.77k     5030.23k     6838.61k     7274.50k
rmd160               0.00         0.00         0.00         0.00         0.00
rc4              17505.29k    19644.33k    20263.77k    20424.70k    20449.96k
des cbc           3007.69k     3129.19k     3161.26k     3169.62k     3170.99k
des ede3          1105.90k     1123.56k     1128.11k     1129.13k     1129.81k
idea cbc             0.00         0.00         0.00         0.00         0.00
seed cbc             0.00         0.00         0.00         0.00         0.00
rc2 cbc           3138.20k     3260.52k     3292.84k     3301.03k     3302.74k
rc5-32/12 cbc        0.00         0.00         0.00         0.00         0.00
blowfish cbc      6620.76k     7195.80k     7355.73k     7397.03k     7404.20k
cast cbc          6083.16k     6562.43k     6694.31k     6728.36k     6733.82k
aes-128 cbc       4397.08k     4745.81k     4836.01k     4864.34k     4868.78k
aes-192 cbc       3873.93k     4142.74k     4211.29k     4232.53k     4235.95k
aes-256 cbc       3462.81k     3675.54k     3729.49k     3746.82k     3749.21k
camellia-128 cbc        0.00         0.00         0.00         0.00         0.00
camellia-192 cbc        0.00         0.00         0.00         0.00         0.00
camellia-256 cbc        0.00         0.00         0.00         0.00         0.00
sha256             983.67k     2284.86k     4023.13k     4976.98k     5182.12k
sha512             307.77k     1231.77k     1807.19k     2494.46k     2663.08k
aes-128 ige       4343.88k     4899.33k     5049.69k     5112.47k     5102.93k
aes-192 ige       3839.38k     4259.41k     4372.57k     4406.95k     4412.76k
aes-256 ige       3434.36k     3766.87k     3855.45k     3881.98k     3886.42k
                  sign    verify    sign/s verify/s
rsa  512 bits 0.008306s 0.000692s    120.4   1444.2
rsa 1024 bits 0.042185s 0.002056s     23.7    486.3
rsa 2048 bits 0.253000s 0.006947s      4.0    144.0
rsa 4096 bits 1.673333s 0.024680s      0.6     40.5
                  sign    verify    sign/s verify/s
dsa  512 bits 0.006978s 0.008040s    143.3    124.4
dsa 1024 bits 0.020367s 0.024120s     49.1     41.5
dsa 2048 bits 0.068367s 0.080240s     14.6     12.5

Average rating

(7 votes)

Comments

10 August, 2010 - 13:19 — Harvie

IPv6 bez OpenWRT

A má to podporu IPv6 (nativní a 6to4) bez nutnosti instalace OpenWRT?

10 August, 2010 - 14:39 — bwpow

Re: IPv6 bez OpenWRT

To zial neviem povedat, lebo povodny firmver som videl mozno 10 sekund. Ked pride najblizsia varka, tak pozriem a napisem pod tento komentar (alebo niekto iny by mohol, ak ma k tomu pristup).

Prisiel som, videl som, hmm...

BLACKHOLE.sk

Navigation

other

Poll