diff --git a/defaults/49-network b/defaults/49-network
new file mode 100644
index 0000000..3180212
--- /dev/null
+++ b/defaults/49-network
@@ -0,0 +1,21 @@
+# switch LAN to eth1
+/sbin/uci set network.@device[0].ports='eth1'
+
+# set WAN to eth0
+/sbin/uci set network.wan=interface
+/sbin/uci set network.wan.device=eth0
+/sbin/uci set network.wan.proto=dhcp
+
+# firewall allow SSH
+/sbin/uci add firewall rule
+/sbin/uci set firewall.@rule[-1].name='Allow-SSH'
+/sbin/uci set firewall.@rule[-1].src='wan'
+/sbin/uci set firewall.@rule[-1].dest_port='22'
+/sbin/uci set firewall.@rule[-1].proto='tcp'
+/sbin/uci set firewall.@rule[-1].target='ACCEPT'
+
+/sbin/uci commit
+
+/sbin/service network restart
+/sbin/service firewall restart
+/sbin/service dnsmasq restart