[openwrt][WIFI] 1.WiFi黑名单设置 2.sed 如何删除文件里的mac

短命女 2022-05-14 01:41 1294阅读 0赞

## 测试平台：OpenWrt+MT7621 ##

MTK WIFI芯片手册  
文档：[MTK\_Wi-Fi\_SoftAP\_Software\_Programming\_Guide\_v1.2.pdf][MTK_Wi-Fi_SoftAP_Software_Programming_Guide_v1.2.pdf]

**1.WiFi不重启拉黑名单设置**  
这种不重启即可拉黑，但是重启后不生效。

以2.4G为例： ra0 2.4G / rai0 5G

#清空WiFi访问控制设定
    iwpriv ra0 set ACLClearAll=1
     
    #设定访问控制策略为黑名单模式
    # macfilter=disable(d) AccessPolicy为0 使访问控制策略失效
    # macfilter=allow AccessPolicy为1 白名单模式
    # macfilter=deny AccessPolicy为2 黑名单模式
    iwpriv ra0 set AccessPolicy=2
     
    # 设定所有被拉黑的设备的MAC地址，此处假设AA-BB-CC-DD-EE-FF和FF-EE-DD-CC-BB-AA被拉黑
    # MAC地址间以分号(;)分隔。
    iwpriv ra0 set ACLAddEntry="aa:bb:cc:dd:ee:ff;ff:ee:dd:cc:bb:aa"

来着：[openwrtrt2860v2下的wifi不重启拉黑名单设置][openwrtrt2860v2_wifi]

**2.wifi黑名单重启有效**

修改/etc/confing/wirelsee 配置文件  
*/trunk/base/package/ramips/drivers/mt7603e/files/mt7603e.sh* 2.4G  
*/trunk/base/package/ramips/drivers/mt76x2e/files/mt7612e.sh* 5G  
![这里写图片描述][70]

option AccessPolicy0 '2'   //1 白名单 2 黑名单 0 使访问控制策略失效
     option AccessControlList0 '58:E2:8F:2E:A2:AD' //MAC 地址，多MAC的格式：MAC_A;MAC_B;MAC_C;MAC_D

--------------------

root@OpenWrt:~# 
    root@OpenWrt:~# cat /etc/config/wireless 
    
    config wifi-device 'mt7603e'
            option type 'mt7603e'
            option vendor 'ralink'
            option band '2.4G'
            option beacon '100'
            option wifimode '9'
            option txpower '100'
            option channel '0'
            option disabled '0'
            option hidden '0'
            option wps_enabled 'enable'
            option wps_router_pin 'pin'
            option wps_mode 'PBC'
            option bw '1'
            option region '0'
            option AccessPolicy0 '2'   //1 白名单 2 黑名单 0 使访问控制策略失效
            option AccessControlList0 '58:E2:8F:2E:A2:AD' //MAC 地址，多MAC的格式：MAC_A;MAC_B;MAC_C;MAC_D
    
    config wifi-iface
            option device 'mt7603e'
            option ifname 'ra0'
            option network 'lan'
            option mode 'ap'
            option ssid 'FURRIONAP_CCDD04'
            option instance '1'
            option wmm 'enable'
            option encryption 'psk-mixed+ccmp'
            option key 'FACCDD04'
    
    config wifi-device 'mt7612e'
            option type 'mt7612e'
            option vendor 'ralink'
            option band '5G'
            option channel '0'
            option autoch '2'
            option disabled '0'
            option txpower '100'
            option hidden '0'
            option wifimode '14'
            option bw '2'
            option wps_enabled 'enable'
            option wps_router_pin 'pin'
            option wps_mode 'PBC'
            option aregion '10'
            option AccessPolicy0 '2'
            option AccessControlList0 '58:E2:8F:2E:A2:AD'
    
    config wifi-iface
            option device 'mt7612e'
            option ifname 'rai0'
            option network 'lan'
            option mode 'ap'
            option ssid 'FURRIONAP_CCDD04'
            option encryption 'psk-mixed+ccmp'
            option key 'FACCDD04'
            option instance '2'
    
    config wifi-device 'radio0'
            option type 'mac80211'
            option channel '0'
            option hwmode '11g'
            option htmode 'HT20'
    
    config wifi-iface
            option device 'radio0'
            option network 'wan0'
            option mode 'sta'
            option ssid 'wifi'
            option encryption 'psk2'
            option key 'wifiwifi'
            option ifname 'wlan0'

有一些openwrt的wireless代码里面没打开UCI配置  
/trunk/base/package/ramips/applications/uci2dat/src/uci2dat.c  
![这里写图片描述][70 1]

{"AccessPolicy0", "AccessPolicy0", {0}, hooker, "0"},
    {"AccessControlList0", "AccessControlList0", {0}, hooker, NULL},
    {"AccessPolicy1", "AccessPolicy1", {0}, hooker, "0"},
    {"AccessControlList1", "AccessControlList1", {0}, hooker, NULL},
    {"AccessPolicy2", "AccessPolicy2", {0}, hooker, "0"},
    {"AccessControlList2", "AccessControlList2", {0}, hooker, NULL},
    {"AccessPolicy3", "AccessPolicy3", {0}, hooker, "0"},
    {"AccessControlList3", "AccessControlList3", {0}, hooker, NULL},

--------------------

## Tips： sed 如何删除mac ##

sed 's/dC:F0:90:9D:FC:23//i'    不分大小写将匹配到的字符串替换为空
    sed 's/DC:F0:90:9D:FC:23\+;*//ig'     至少一次mac 至少0次；

--------------------

root@OpenWrt:~# cat /etc/config/wireless 
    
    config wifi-device 'mt7603e'
            option type 'mt7603e'
            option vendor 'ralink'
            option band '2.4G'
            option beacon '100'
            option wifimode '9'
            option txpower '100'
            option channel '0'
            option disabled '0'
            option hidden '0'
            option wps_enabled 'enable'
            option wps_router_pin 'pin'
            option wps_mode 'PBC'
            option bw '1'
            option region '0'
            option AccessPolicy0 '2'
            option AccessControlList0 '58:E2:8F:2E:A2:AD;28:ED:6A:E9:AB:FB;58:11:22:2E:A2:AF'
    
    config wifi-iface
            option device 'mt7603e'
            option ifname 'ra0'
            option network 'lan'
            option mode 'ap'
            option ssid 'FURRIONAP_CCDD04'
            option instance '1'
            option wmm 'enable'
            option encryption 'psk-mixed+ccmp'
            option key 'FACCDD04'
    
    config wifi-device 'mt7612e'
            option type 'mt7612e'
            option vendor 'ralink'
            option band '5G'
            option channel '0'
            option autoch '2'
            option disabled '0'
            option txpower '100'
            option hidden '0'
            option wifimode '14'
            option bw '2'
            option wps_enabled 'enable'
            option wps_router_pin 'pin'
    root@OpenWrt:~# 
    root@OpenWrt:~# 
    root@OpenWrt:~# 
    root@OpenWrt:~# cat /etc/config/wireless 
    
    config wifi-device 'mt7603e'
            option type 'mt7603e'
            option vendor 'ralink'
            option band '2.4G'
            option beacon '100'
            option wifimode '9'
            option txpower '100'
            option channel '0'
            option disabled '0'
            option hidden '0'
            option wps_enabled 'enable'
            option wps_router_pin 'pin'
            option wps_mode 'PBC'
            option bw '1'
            option region '0'
            option AccessPolicy0 '2'
            option AccessControlList0 '58:E2:8F:2E:A2:AD;28:ED:6A:E9:AB:FB;58:11:22:2E:A2:AF'
    
    config wifi-iface
            option device 'mt7603e'
            option ifname 'ra0'
            option network 'lan'
            option mode 'ap'
            option ssid 'FURRIONAP_CCDD04'
            option instance '1'
            option wmm 'enable'
            option encryption 'psk-mixed+ccmp'
            option key 'FACCDD04'
    
    config wifi-device 'mt7612e'
            option type 'mt7612e'
            option vendor 'ralink'
            option band '5G'
            option channel '0'
            option autoch '2'
            option disabled '0'
            option txpower '100'
            option hidden '0'
            option wifimode '14'
            option bw '2'
            option wps_enabled 'enable'
            option wps_router_pin 'pin'
            option wps_mode 'PBC'
            option aregion '10'
            option AccessPolicy0 '2'
            option AccessControlList0 '58:E2:8F:2E:A2:AD;28:ED:6A:E9:AB:FB;58:11:22:2E:A2:AF'
    
    config wifi-iface
            option device 'mt7612e'
            option ifname 'rai0'
            option network 'lan'
            option mode 'ap'
            option ssid 'FURRIONAP_CCDD04'
            option encryption 'psk-mixed+ccmp'
            option key 'FACCDD04'
            option instance '2'
    
    config wifi-device 'radio0'
            option type 'mac80211'
            option channel '0'
            option hwmode '11g'
            option htmode 'HT20'
    
    config wifi-iface
            option device 'radio0'
            option network 'wan0'
            option mode 'sta'
            option ssid 'wifi'
            option encryption 'psk2'
            option key 'wifiwifi'
            option ifname 'wlan0'
    
    root@OpenWrt:~# sed -i 's/58:E2:8F:2E:A2:AD\+;*//ig' /etc/config/wireless
    root@OpenWrt:~# cat /etc/config/wireless 
    
    config wifi-device 'mt7603e'
            option type 'mt7603e'
            option vendor 'ralink'
            option band '2.4G'
            option beacon '100'
            option wifimode '9'
            option txpower '100'
            option channel '0'
            option disabled '0'
            option hidden '0'
            option wps_enabled 'enable'
            option wps_router_pin 'pin'
            option wps_mode 'PBC'
            option bw '1'
            option region '0'
            option AccessPolicy0 '2'
            option AccessControlList0 '28:ED:6A:E9:AB:FB;58:11:22:2E:A2:AF'
    
    config wifi-iface
            option device 'mt7603e'
            option ifname 'ra0'
            option network 'lan'
            option mode 'ap'
            option ssid 'FURRIONAP_CCDD04'
            option instance '1'
            option wmm 'enable'
            option encryption 'psk-mixed+ccmp'
            option key 'FACCDD04'
    
    config wifi-device 'mt7612e'
            option type 'mt7612e'
            option vendor 'ralink'
            option band '5G'
            option channel '0'
            option autoch '2'
            option disabled '0'
            option txpower '100'
            option hidden '0'
            option wifimode '14'
            option bw '2'
            option wps_enabled 'enable'
            option wps_router_pin 'pin'
            option wps_mode 'PBC'
            option aregion '10'
            option AccessPolicy0 '2'
            option AccessControlList0 '28:ED:6A:E9:AB:FB;58:11:22:2E:A2:AF'
    
    config wifi-iface
            option device 'mt7612e'
            option ifname 'rai0'
            option network 'lan'
            option mode 'ap'
            option ssid 'FURRIONAP_CCDD04'
            option encryption 'psk-mixed+ccmp'
            option key 'FACCDD04'
            option instance '2'
    
    config wifi-device 'radio0'
            option type 'mac80211'
            option channel '0'
            option hwmode '11g'
            option htmode 'HT20'
    
    config wifi-iface
            option device 'radio0'
            option network 'wan0'
            option mode 'sta'
            option ssid 'wifi'
            option encryption 'psk2'
            option key 'wifiwifi'
            option ifname 'wlan0'
    
    root@OpenWrt:~#

--------------------

代码中记得转义字符`\\`

snprintf(cmd, sizeof(cmd), "sed  -i 's/%s\\+;*//ig'  /etc/config/wireless", g_l2filter_params.l2filter_list[i].l2addr);
    			my_printf(LOG_MODE_LEVEL_1, "%s(%d) cmd:%s \n",__FUNCTION__,__LINE__, cmd);
    			system(cmd);
    			system("sync");

--------------------

## realtek 平台设置wifi黑名单 ##

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2xpbmJvdW5jb25zdHJhaW50_size_16_color_FFFFFF_t_70]  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2xpbmJvdW5jb25zdHJhaW50_size_16_color_FFFFFF_t_70 1]  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2xpbmJvdW5jb25zdHJhaW50_size_16_color_FFFFFF_t_70 2]

ifconfig wlan0 down
    iwpriv wlan0 set_mib aclmode=2
    iwpriv wlan0 set_mib aclnum=0
    iwpriv wlan0 set_mib acladdr=0c1daf4de901
    iwpriv wlan0 set_mib acladdr=0c1daf4de902
    iwpriv wlan0 set_mib acladdr=0c1daf4de903
    iwpriv wlan0 set_mib acladdr=0c1daf4de904
    iwpriv wlan0 set_mib acladdr=0c1daf4de905
    ifconfig wlan0 up

root@OpenWrt:/# cat /proc/wlan0/mib_staconfig
      Dot11StationConfigEntry...
        dot11Bssid: 34ba9a998899
        dot11DesiredSSID:(Len 16) Smart_Bro_998899
        dot11DefaultSSID:(Len 0) 
        dot11SSIDtoScan:(Len 16) Smart_Bro_998899
        dot11DesiredBssid: 000000000000
        dot11OperationalRateSet: 82848b960c1218243048606c
        dot11OperationalRateSetLen: 12
        dot11BeaconPeriod: 100
        dot11DTIMPeriod: 1
        dot11swcrypto: 0
        dot11AclMode: 2
        dot11AclNum: 1
        dot11AclAddr[0]: 0c1daf4de959
        Access control list...
             hwaddr: 0c1daf4de959(deny)
        dot11SupportedRates: 0xfff
        dot11BasicRates: 0xf
        dot11RegDomain: 3
        autoRate: 1
        fixedTxRate: 0x0
        swTkipMic: 1
        protectionDisabled: 0
        olbcDetectDisabled: 0
        nmlscDetectDisabled: 0
        legacySTADeny: 0
        fastRoaming: 0
        lowestMlcstRate: 0
        supportedStaNum: 8
    root@OpenWrt:/#

[MTK_Wi-Fi_SoftAP_Software_Programming_Guide_v1.2.pdf]: https://download.csdn.net/download/linbounconstraint/10638110
[openwrtrt2860v2_wifi]: http://storypku.com/2015/08/openwrtrt2860v2%E4%B8%8B%E7%9A%84wifi%E4%B8%8D%E9%87%8D%E5%90%AF%E6%8B%89%E9%BB%91%E5%90%8D%E5%8D%95%E8%AE%BE%E7%BD%AE/
[70]: /images/20220514/f9b43fc8a1194eb081d6f2120069cad3.png
[70 1]: /images/20220514/ec6ca340abb14cdfb59c365441e5d3ed.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2xpbmJvdW5jb25zdHJhaW50_size_16_color_FFFFFF_t_70]: /images/20220514/feeb0be517cf49fcae350351a4a6a68e.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2xpbmJvdW5jb25zdHJhaW50_size_16_color_FFFFFF_t_70 1]: /images/20220514/d651ea83610c42b7b906eb6e6e0b1b61.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2xpbmJvdW5jb25zdHJhaW50_size_16_color_FFFFFF_t_70 2]: /images/20220514/e8abd3092eca4e9da33160518bf3f22f.png