uci set system.bypass='gpio_switch' uci set system.bypass.name='bypass_off' uci set system.bypass.gpio_pin='647' uci set system.bypass.value='0' uci commit system /etc/init.d/gpio_switch enable /etc/init.d/gpio_switch restart
uci -q delete firewall.wan_luci uci set firewall.wan_luci='rule' uci set firewall.wan_luci.name='Allow-LuCI-from-upstream' uci set firewall.wan_luci.src='wan' uci set firewall.wan_luci.src_ip='192.168.13.0/24' uci set firewall.wan_luci.proto='tcp' uci set firewall.wan_luci.dest_port='80' uci set firewall.wan_luci.target='ACCEPT' uci set firewall.wan_luci.family='ipv4'
uci -q delete firewall.wan_ssh uci set firewall.wan_ssh='rule' uci set firewall.wan_ssh.name='Allow-SSH-from-upstream' uci set firewall.wan_ssh.src='wan' uci set firewall.wan_ssh.src_ip='192.168.13.0/24' uci set firewall.wan_ssh.proto='tcp' uci set firewall.wan_ssh.dest_port='22' uci set firewall.wan_ssh.target='ACCEPT' uci set firewall.wan_ssh.family='ipv4'
uci -q delete firewall.wan_ttyd uci set firewall.wan_ttyd='rule' uci set firewall.wan_ttyd.name='Allow-ttyd-from-upstream' uci set firewall.wan_ttyd.src='wan' uci set firewall.wan_ttyd.src_ip='192.168.13.0/24' uci set firewall.wan_ttyd.proto='tcp' uci set firewall.wan_ttyd.dest_port='7681' uci set firewall.wan_ttyd.target='ACCEPT' uci set firewall.wan_ttyd.family='ipv4'
uci -q delete firewall.k3s_api uci set firewall.k3s_api=rule uci set firewall.k3s_api.name='Allow-K3s-API-from-upstream' uci set firewall.k3s_api.src='wan' uci set firewall.k3s_api.src_ip='192.168.13.160' # uci set firewall.k3s_api.dest='lan' 尽量不要把 lan 暴露给外面 ！！！ uci set firewall.k3s_api.proto='tcp' uci set firewall.k3s_api.dest_port='6443' uci set firewall.k3s_api.target='ACCEPT' uci set firewall.k3s_api.family='ipv4'
uci commit firewall /etc/init.d/firewall restart
手工恢复 ttyd
1 2 3 4 5 6
uci set ttyd.@ttyd[0].command='/bin/login' uci set ttyd.@ttyd[0].listen='0.0.0.0' uci commit ttyd /etc/init.d/ttyd enable /etc/init.d/ttyd restart netstat -lntp | grep ':7681 '
进阶操作
手工恢复 sing-box
先手工创建并检查： 参考hexo_posts代理与 TUN 模式配置.md
1
/etc/sing-box/config.json
不要把包含订阅、密码或密钥的配置提交到公开仓库。然后启用服务：
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17
uci set sing-box.main.enabled='1' uci set sing-box.main.user='root' uci commit sing-box /etc/init.d/sing-box enable /etc/init.d/sing-box restart /etc/init.d/sing-box status
uci set network.singbox_tun=interface uci set network.singbox_tun.device='tun0' uci set network.singbox_tun.proto='unmanaged' uci commit network uci -q del_list firewall.@zone[0].network='singbox_tun' uci add_list firewall.@zone[0].network='singbox_tun' uci commit firewall /etc/init.d/network reload /etc/init.d/firewall restart
确认 sing-box 已经监听 127.0.0.1:5353 后，再把 dnsmasq
DNS 转发过去：
ubus call system board ip addr show ip route ubus call network.interface dump ubus call network.interface.wan status dmesg | grep -E 'fsl_dpaa_mac|PHY|Link is' uci show firewall | grep -E "name='wan'|input|output|forward|masq" ip rule ip route show table all
设备已有 radio0、2.4 GHz、信道、AP 模式以及
lan 绑定，无需重复配置。 只需设置
SSID、加密方式、密码并解除禁用。密码建议使用至少 12 位随机字符：
1 2 3 4 5 6 7
uci set wireless.default_radio0.ssid='替换为SSID' uci set wireless.default_radio0.encryption='sae-mixed' uci set wireless.default_radio0.key='替换为至少8位的密码' uci set wireless.default_radio0.disabled='0'
uci commit wireless wifi reload
检查无线接口、SSID 和客户端关联状态：
1 2 3
ubus call network.wireless status iwinfo wifi status
正常情况下，radio0 应显示
up: true，interfaces 不再为空，并能看到 AP
接口和配置的 SSID。 无线客户端会接入 lan。COM14 由 LAN DHCP
分配 192.168.3.0/24 网段地址；COM12 仍使用
192.168.2.0/24。