Lumpiasty/klaster
0
0
Fork 0
Code Issues Pull Requests 2 Packages Projects Releases Wiki Activity

hide IoT WiFi and enable mac filter
ci/woodpecker/push/flux-reconcile-source Pipeline was successful
Details

Browse Source
This commit is contained in:
Lumpiasty
2026-06-22 14:50:20 +02:00
parent 6cec5c234b
commit a5464cf7a4
2 changed files with 7 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
ansible/roles/openwrt/tasks/wireless.yml
+6
View File
@@ -25,6 +25,12 @@
network: iot network: iot
mode: ap mode: ap
ssid: szafa ssid: szafa
hidden: '1' # Stop broadcasting SSID
macfilter: allow # Apply MAC filter allowing only specific addresses
maclist:
- 80:64:7c:99:21:20 # Thermomether
- C0:F8:53:89:E5:EF # Smart plug
- C0:F8:53:89:E3:42 # smart plug
encryption: psk2 encryption: psk2
key: "{{ openwrt_iot_wifi_password }}" key: "{{ openwrt_iot_wifi_password }}"
disabled: '0' disabled: '0'
docs/network.md
+1 -1
View File
@@ -50,7 +50,7 @@ Network is divided to multiple VLANs to enforce strict access control rules usin
Internet access only<br> Internet access only<br>
IP: 192.168.5.0/24 / 2001:470:61a3:a::/64<br> IP: 192.168.5.0/24 / 2001:470:61a3:a::/64<br>
Gateway: 192.168.5.1 / 2001:470:61a3:a:ffff:ffff:ffff:ffff<br> Gateway: 192.168.5.1 / 2001:470:61a3:a:ffff:ffff:ffff:ffff<br>
DHCP / SLAAC, accessible via separate WiFi network "szafa" from D-Link for absolutely untrusted Tuya and like devices DHCP / SLAAC, accessible via separate, hidden WiFi network "szafa" from D-Link with strict MAC filtering for absolutely untrusted Tuya and like devices
- 6: Internet access for OpenWRT<br> - 6: Internet access for OpenWRT<br>
Internet access only<br> Internet access only<br>
IP: 192.168.6.0/24 / 2001:470:61a3:600::/64<br> IP: 192.168.6.0/24 / 2001:470:61a3:600::/64<br>