<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->

# Implementing Wireless Guest Network Security — API & Tool Reference

> Quick reference for tools, commands, and APIs used in implementing-wireless-guest-network-security.

## Tools


### `uci`

OpenWrt unified configuration interface

**Usage:**
```bash
uci [show|set|commit] <config>
```

**Key Flags:**
  - `show: display config`
  - `set: modify value`
  - `commit: apply changes`

---

### `nodogsplash`

Captive portal for guest networks

**Usage:**
```bash
nodogsplash [options]
```

**Key Flags:**
  - `-f: foreground`
  - `-d: debug level`

---

### `tc`

Traffic control / bandwidth management

**Usage:**
```bash
tc qdisc add dev <iface> root htb
```

**Key Flags:**
  - `htb: hierarchical token bucket`
  - `sfq: stochastic fair queueing`

---

### `iptables`

Linux firewall rule management

**Usage:**
```bash
iptables -t <table> -A <chain> [match] -j <target>
```

**Key Flags:**
  - `-t nat: NAT table`
  - `-A FORWARD: forward chain`
  - `--dport: destination port`

---


## Integration Notes

- All tools should be run with least-privilege access appropriate to the task
- Log all tool invocations for audit trail
- Validate tool output before acting on results
- Cross-reference findings with multiple tools where possible

## See Also

- Parent skill: [Wireless Security](../../../SKILL.md)
- Technique SKILL.md: [../SKILL.md](../SKILL.md)
