2013-05-17 00:44:33 +02:00
== Aktuelle Problemchen ==
;IPv6 geht nicht
:<code>/etc/init.d/ntpd start; sleep 5; aiccu start</code>
;Keine mDNS-Reflection (Pulseaudio) zwischen Ethernet und WLAN
:<code>/etc/init.d/dbus start && /etc/init.d/avahi-daemon start</code>
2013-04-08 20:24:48 +02:00
== Administriert ==
* [[User:Astro|Astro]]
* [[User:Blotter|blotter]]
* [[User:dodo|dodo]]
2013-04-10 01:25:47 +02:00
* [[User:Hakunamenta|haku]]
2013-04-08 20:24:48 +02:00
* [[User:john|_john]]
* [[User:koeart|koeart]]
* [[User:leon|leon]]
* [[User:morphium|morphium]]
* [[User:payload|payload]]
2013-04-08 20:45:55 +02:00
* [[User:Poelzi|poelzi]]
2013-04-10 01:25:47 +02:00
* [[User:Sebseb7|seb]]
2013-04-08 20:24:48 +02:00
* [[User:Thammi|thammi]]
2013-04-08 20:26:51 +02:00
== Netze ==
=== IPv4 ===
* 172.22.99.0/24
* 172.22.101.0/24
=== IPv6 ===
* 2001:4dd0:fb82:c3d2::/64
* 2001:4dd0:fb82:c3d4::/64
2013-04-08 20:24:48 +02:00
2013-03-23 01:39:37 +01:00
== Ratbert Setup ==
Nach der erfolgreichen Wiederbelebung von Ratbert konnte der Ersatzrouter Wormbert wieder im Schrank verschwinden. Was dazu alles nötig war sei im Folgenden hier dokumentiert.
2012-02-08 18:10:09 +01:00
2013-03-23 01:39:37 +01:00
=== Debricking ===
2012-02-08 18:10:09 +01:00
Von Lateinich debricere - der Verziegelsteinigung entziehen.... oder so..
Da der Bootloader noch vollkommen intakt war, gab es bei der Wiederherstellung von einer lauffähigen OpenWRT Firmware keine größeren Hindernisse zu überwinden.
2013-03-23 01:39:37 +01:00
2012-02-08 18:10:09 +01:00
Mithilfe eines eingelöteten Pinheaders lässt sich die serielle Schnittstelle von Ratbert nun leicht mit einer USB UART bridge benutzen.
Die dazu nötigen Schritte sind unter :http://wiki.openwrt.org/toh/tp-link/tl-wr1043nd und besonders in dem Log unter :http://wiki.openwrt.org/toh/tp-link/tl-wr1043nd/flashlog zu finden.
2013-03-23 01:39:37 +01:00
=== Pakete ===
2012-02-08 18:20:03 +01:00
Durch geschickte Benutzung des Paketmanagers opkg hat Astro folgende Pakete zur Menge der Installierten gemacht:
2012-02-08 18:10:09 +01:00
<pre>
aiccu avahi-daemon base-files base-files-network busybox crda dbus dnsmasq
dropbear firewall hotplug2 ip iptables iptables-mod-conntrack iptables-mod-nat
iw kernel kmod-ath kmod-ath9k kmod-ath9k-common kmod-button-hotplug kmod-cfg80211
kmod-crypto-aes kmod-crypto-arc4 kmod-crypto-core kmod-input-core kmod-input-gpio-keys-polled
kmod-input-polldev kmod-ipt-conntrack kmod-ipt-core kmod-ipt-nat kmod-ipt-nathelper
kmod-iptunnel4 kmod-ipv6 kmod-leds-gpio kmod-ledtrig-usbdev kmod-lib-crc-ccitt kmod-mac80211
kmod-nls-base kmod-ppp kmod-pppoe kmod-sit kmod-tun kmod-usb-core kmod-usb-ohci kmod-usb2
libavahi libc libcap libdaemon libdbus libexpat libgcc libgdbm libip4tc libncurses
libnl-tiny libpcap libpthread libreadline librt libuci libxtables mtd ntpd opkg ppp
ppp-mod-pppoe quagga quagga-bgpd quagga-libospf quagga-libzebra quagga-ospfd
quagga-vtysh swconfig tcpdump terminfo uboot-envtools uci wireless-tools wpad-mini
</pre>
2012-02-08 18:20:03 +01:00
-> fileliste mit versionen: [[{{ns:media}}:Inst_pkgs.txt.gzfake.jpg]]
2012-02-08 18:10:09 +01:00
2013-07-16 04:42:07 +02:00
=== pakete bauen ===
auf build.hq.c3d2.de ist eine OpenWRT toolchain und gebaute Pakete...
2013-03-23 01:39:37 +01:00
=== Einstellungen einzelner Services ===
2013-03-23 03:45:13 +01:00
Hier nun die wichtigsten Konfigurationsanpassungen für einzelne Services:
2012-02-08 18:27:25 +01:00
2013-03-23 01:39:37 +01:00
==== Basissystemeinstellungen ====
In /etc/config/system ist lediglich der hostname anzupassen:
2012-02-08 18:27:25 +01:00
<pre>
root@ratbert:/etc/config# cat system
config 'system'
option 'hostname' 'ratbert'
option 'timezone' 'UTC'
config 'timeserver' 'ntp'
list 'server' '0.openwrt.pool.ntp.org'
list 'server' '1.openwrt.pool.ntp.org'
list 'server' '2.openwrt.pool.ntp.org'
list 'server' '3.openwrt.pool.ntp.org'
config 'led' 'led_usb'
option 'name' 'USB'
option 'sysfs' 'tp-link:green:usb'
option 'trigger' 'usbdev'
option 'dev' '1-1'
option 'interval' '50'
config 'led' 'led_wlan'
option 'name' 'WLAN'
option 'sysfs' 'tp-link:green:wlan'
option 'trigger' 'phy0tpt'
</pre>
2013-03-23 01:39:37 +01:00
==== Netzconfig ====
2012-02-08 18:10:09 +01:00
In /etc/config/network findet sich die Basiskonfiguration für Netzwerk unter OpenWRT:
<pre>
root@ratbert:/etc/config# cat network
</pre> ---->
<pre>
config 'interface' 'loopback'
option 'ifname' 'lo'
option 'proto' 'static'
option 'ipaddr' '127.0.0.1'
option 'netmask' '255.0.0.0'
config 'interface' 'lan'
option 'ifname' 'eth0.1'
#option 'type' 'bridge'
option 'proto' 'static'
option ipaddr 172.22.99.4
option 'netmask' '255.255.255.0'
option netmask 255.255.255.0
config 'interface' 'wan'
option 'ifname' 'eth0.2'
option 'proto' 'pppoe'
option username "HIERUNSEREGEHEIMENUMMER@t-online.de"
option password "GEHEIMESPASSWORT"
option peerdns 0
option ipv6 1
config 'switch'
option 'name' 'rtl8366rb'
option 'reset' '1'
option 'enable_vlan' '1'
config 'switch_vlan'
option 'device' 'rtl8366rb'
option 'vlan' '1'
option 'ports' '1 2 3 4 5t'
config 'switch_vlan'
option 'device' 'rtl8366rb'
option 'vlan' '2'
option 'ports' '0 5t'
config interface wifi
option proto static
option ipaddr 172.22.101.1
</pre>
2012-02-08 18:20:03 +01:00
2013-03-23 01:39:37 +01:00
==== Firewall ====
2012-02-08 18:56:44 +01:00
Crappy OpenWRT firewall disabled.
2012-02-08 18:47:30 +01:00
<pre>
2012-02-08 18:56:44 +01:00
root@ratbert:~# cat /etc/rc.local
# Put your custom commands here that should be executed once
# the system init finished. By default this file does nothing.
2012-02-08 18:47:30 +01:00
2012-02-08 18:56:44 +01:00
iptables -t nat -A POSTROUTING -o pppoe-wan -j MASQUERADE
iptables -t mangle -A FORWARD -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu
2012-02-08 18:47:30 +01:00
2012-02-08 18:56:44 +01:00
exit 0
2012-02-08 18:47:30 +01:00
</pre>
2012-02-08 18:56:44 +01:00
Wir hatten mal noch in der raw table NOTRACK zwischen LAN & WLAN...
2012-02-08 18:47:30 +01:00
2013-03-23 01:39:37 +01:00
==== DNSmasq ====
2012-02-08 18:27:25 +01:00
Der combinierte DNS und DHCP Server dnsmasq ist in /etc/config/dhcp so eingestellt:
<pre>
root@ratbert:/etc/config# cat dhcp
config dnsmasq
option domainneeded 1
option boguspriv 1
option filterwin2k 0 # enable for dial on demand
option localise_queries 1
option rebind_protection 1 # disable if upstream must serve RFC1918 addresses
option rebind_localhost 1 # enable for RBL checking and similar services
#list rebind_domain example.lan # whitelist RFC1918 responses for domains
option local '/lan/'
option domain 'lan'
option expandhosts 1
option nonegcache 0
option authoritative 1
option readethers 1
option leasefile '/tmp/dhcp.leases'
option resolvfile '/tmp/resolv.conf.auto'
#list server '/mycompany.local/1.2.3.4'
#option nonwildcard 1
#list interface br-lan
#list notinterface lo
#list bogusnxdomain '64.94.110.11'
config dhcp wifi
option interface wifi
option start 100
option limit 150
option leasetime 12h
config dhcp lan
option interface lan
option ignore 1
config dhcp wan
option interface wan
option ignore 1
</pre>
2012-02-08 18:22:31 +01:00
2013-03-23 01:39:37 +01:00
==== aiccu ====
2012-02-08 18:20:03 +01:00
Der Sixxs Tunnel ist in /etc/config/aiccu configuriert:
<pre>
root@ratbert:/etc/config# cat aiccu
config aiccu
option username '****************'
option password '****************'
option protocol ''
option server 'tic.sixxs.net'
option interface ''
option tunnel_id ''
option requiretls ''
option defaultroute '1'
option nat '0'
option heartbeat '1'
</pre>
2012-02-08 18:51:47 +01:00
2013-03-23 01:39:37 +01:00
==== Quagga ====
2012-02-08 18:51:47 +01:00
<pre>
root@ratbert:/etc/rc.d# vtysh
Hello, this is Quagga (version 0.99.20).
Copyright 1996-2005 Kunihiro Ishiguro, et al.
ratbert# sh ru
Building configuration...
Current configuration:
!
!
interface aiccu
ipv6 nd suppress-ra
!
interface eth0
ipv6 nd suppress-ra
!
interface eth0.0
ipv6 nd suppress-ra
!
interface eth0.1
ip ospf message-digest-key 1 md5 $GEHEIM
ipv6 address 2001:6f8:1194:c3d2::1/64
ipv6 nd prefix 2001:6f8:1194:c3d2::/64
ipv6 nd ra-interval 5
ipv6 nd ra-lifetime 60
ipv6 nd reachable-time 30
no ipv6 nd suppress-ra
!
interface eth0.2
ipv6 nd suppress-ra
!
interface lo
!
interface mon.wlan0
ipv6 nd suppress-ra
!
interface pppoe-wan
ipv6 nd suppress-ra
!
interface sit0
ipv6 nd suppress-ra
!
interface wlan0
ipv6 address 2001:6f8:1194:c3d4::1/64
ipv6 nd prefix 2001:6f8:1194:c3d4::/64
ipv6 nd ra-interval 10
ipv6 nd ra-lifetime 600
ipv6 nd reachable-time 60
no ipv6 nd suppress-ra
!
router bgp 64699
bgp router-id 172.22.99.4
network 172.22.99.0/24
network 172.22.101.0/24
neighbor fe80::a800:42ff:fe7a:3246 remote-as 64699
neighbor fe80::a800:42ff:fe7a:3246 description dn42.hq.c3d2.de
neighbor fe80::a800:42ff:fe7a:3246 interface eth0.1
!
address-family ipv6
neighbor fe80::a800:42ff:fe7a:3246 activate
neighbor fe80::a800:42ff:fe7a:3246 soft-reconfiguration inbound
exit-address-family
!
router ospf
ospf router-id 172.22.99.4
redistribute connected
network 172.22.99.0/24 area 0.0.0.0
network 172.22.101.0/24 area 0.0.0.0
area 0.0.0.0 authentication message-digest
!
access-list vty permit 127.0.0.0/8
access-list vty deny any
!
ip forwarding
ipv6 forwarding
!
line vty
access-class vty
!
end
</pre>
2013-03-22 00:48:50 +01:00
2013-05-02 23:50:29 +02:00
=== DynDNS ===
Aus <code>/etc/ppp/ip-up.d/nsupdate</code> wird ''ppp0.dyn.hq.c3d2.de'' bei DSL-Einwahl aktualisiert. Das hilft dn42-Tunneln.
2013-03-23 01:39:37 +01:00
[[Kategorie:Infrastruktur]]
[[Kategorie:Hardware]]
[[Kategorie:HQ]]
