Search

You can find the results of your search below.

Fulltext results:

ISP IPoE DHCP Setup Notes
304 Hits, Last modified:
nt ID: IAID:0xb6220feb/DUID DHCP6 Client DUID: DUID-EN/Vendor:0000ab112278b955a63a0f690000</code>++++ ====d... ove existing connected dhcp leased connections on eno1: ''sudo dhclient -r eno1'', note this also seems to remove static IP add... *To manual request a dhcp lease connection on eno1: ''sudo dhclient -4 eno1'' , the ''-4'' flag restricts operation to IPv4... 29 kptr dhclient[763]: Jan 04 07:34:29 kptr dhclient[763]: Listening on LPF/enp1s0/00:e2:59:01:7d:ab Jan 04 07:34:29 kptr dhclie
Router Miscellaneous
145 Hits, Last modified:
s]]** * Redhat [[https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/4/html/security_guide/ch-ports|Appe... 000>Red Hat</fc> [[https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/5/html/deployment_guide/s1-users-groups-standard-users|37.3. Stand... -files'', use ''systemctl list-unit-files --state=enabled'' to check all enabled. A good reference from DigitalOcean for [[https://www.digitalocea... owto/|Nftables quick howto]] *A comparison between Nftables and IPTables from OpenWrt [[https://wiki.openwrt.org/doc/howto/netfilter|Netfilter/iptables]]
Wireguard VPN access from WAN to LAN
143 Hits, Last modified:
IPsec, while avoiding the massive headache. It intends to be considerably more performant than OpenVPN. WireGuard is designed as a general purpose VPN for running on embedded interface... ilise a full manual setup Linux router, using OPNsense, pfsense, OpenWRT or consumer modem/router boxes, etc. ===Grea... configuration file can be printed to terminal screen with: ''sudo qrencode -t ansiutf8 </etc/wireguard/clients/kptree_router.mobile1'', where: * ''/etc/wire... et_service \; flags interval \;}'' * To add elements to set tcp_open_ports: ''sudo nft add element inet firewall tcp_open_ports{ssh, http, 60000-61000 }'' * To delete ru
NFTables Configuration
113 Hits, Last modified:
.forwarding=1'' similar for ipv6 Also make permanent in ''/etc/sysctl.conf'', by ensuring ''net.ipv4.ip_forward = 1'' is indicated no... to routing.</color>\\ <tab6><color blue> # open ports refers to ports to open for input to this machine.</color>\\ <tab6><colo... rt number or range). The flags interval directive enables port ranges to be used. After that, you just set elements to add members to the set. Having a set is a clean and efficient way to later reference all of these values in the rules. We can use po
DHCP / DNS Setup
111 Hits, Last modified:
ed if this DNS does not have the record. I have been using OpenDNS to allow some free security screening, IP 208.67.222.222 and 208.67.220.220. I have ... 4'' in the line: ''OPTIONS="-u bind -4"'' *Also ensure to comment out "listen-on-v6 { any; };" in the file ''sudo vim /etc/bind... more verbose ====secure DNS==== *''echo | openssl s_client -connect '9.9.9.9:853' 2>/dev/null | openssl x509 -pubkey -noout | openssl pkey -pubin -outform der | openssl dgst -sha256 -binary | openssl enc -base64'' to query current SPKI pin for Quad9 *This also seems to
Basic Netfilter Function Block Diagram
92 Hits, Last modified:
the TTL (Time to Live) value of a packet, either lengthening or shortening the number of valid network hops the packet ca... ered. A few things should be noted. In the representation below, the ''nat'' table has been split between ''DNAT'' operations (those that alter the destina... not associated with an existing connection and aren’t appropriate for opening a new connection, if they cannot be identified, or if they aren’t routable among other rea... tering ICMP]] **Cisco** [[https://www.cisco.com/c/en/us/support/docs/ip/generic-routing-encapsulation-gre/25885-pmtud-ipfrag.html|Resolve IP
Wifi Router / Access Points
80 Hits, Last modified:
y much lower. Also wifi bandwidth is shared between clients, so if you have 2 clients using the 5GHz ac the theoretical 3200Mb/s is m... e maximum 1600Mb/s. The wifi speed is also very sensitive to distance between the wifi router and the client and any walls in between. The wifi speed is also very sensitive to radio interference, in particular from other neighboring wifi routers in dense urban areas. ... com/support/product/wax206/|WAX206]]. They only went on sale circa 2021 and went end of life early 2025, I am disappointed with Netge
Debian Server Network Setup
78 Hits, Last modified:
:0 inet static address 192.168.5.2/24 # Then LAN networks are eno2 eno3 eno4 in bridged mode br1 # on the 192.168.1.1 subn... auto br0 iface br0 inet static bridge_ports eno2 eno3 eno4 address 192.168.1.1/24 dns-nameservers ... 2001:470:1f2c:20c::3/64" #IPv6 interfaces: [eno2, eno3, eno4] nameservers: addresses: ["2001:4... network configuration. *''sudo netplan --debug generate'' To generate backend specific configuration files. *''sudo netplan
Router Hardware
73 Hits, Last modified:
Compatibility: Compatible with Windows, Linux, pfSense, OPNsense, OpenWrt, Proxmox VE, VMware ESXi, Unraid and more *B... up and maintain these machines and allow true convenient headless set up, maintenance and operation. Normally an SSH terminal is al... Intel integrated graphics device (IGD), which is enabled by default. The graphics then defaults to the BMC adaptor. The IGD can be turne... liable. You can also similarly increase the Grub menu screen by adding 'GRUB_GFXMODE=1024x768' to the etc/defa
NFTables IP Control
51 Hits, Last modified:
The forward and nat chains refer to routing. # open ports refers to ports to open for input to this machine. # ssh is port 22 for S... inet firewall controllist'' : will list the current elements in named set controllist *''sudo nft flush s... *''journalctl -b0 -xe -u nftables'' to list the end of all the nftables journal entries since the last boot I made a couple of bas... on the script files to make them executable I then created a cron job to run the script as required every evening *''sudo crontab -l'' : to list current cron
TC - Traffic Control
48 Hits, Last modified:
nted controls. However, since TCP/IP packets are sent using a slow start the system starts sending the packets slow and keeps sending them faster and faster until packets start ge... n in deeper filters! *''sudo tc qdisc show dev eno1'' shows current setting of interface ''dev eno1'' it would seem that Linux has default setting... ms down to 5-15ms. Video calls stop freezing mid-sentence and game ping stays flat even during large transfers. ====Monitor CAKE statist... eing disciplines]] *[[https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/8/html/configuring_and_managing_net
ISP PPPoE Network Setup
35 Hits, Last modified:
ps://samuel.kadolph.com/2015/02/mtu-and-tcp-mss-when-using-pppoe-2/|MTU and TCP MSS when using PPPoE]]. Also from Ubuntu forums [[https://... ind this connection specifically to ppp1 unit 1 #Ensure a PID entry with specified linkname is made pppoe linkname... -b 0 -xe''; ''-b 0'' sees last boot, ''-xe'' sees end of file, ''-f'' to list the end of the file. Also remember to turn on / off the ... ut pppd not being fully compatible with Netplan. Hence the attempt to manually set up wan/eno1 interface with an ''ip link set'' instruction i
Router Configuration, Switch & Server Setup
31 Hits, Last modified:
e device is available. * If accessing the equipment via a web browser, open a new page and ensure that the page is open directly not from cache. <- linux_router:hardwa
IPTables Configuration
25 Hits, Last modified:
e bothered explaining this, this is just my experience and feeling. I would preferentially use NFTables over IPtables where I have a c... g. Docker. So it is good to be able to be sufficiently fluent and be able to work in both at this time. ++++t... h IPTables this will not be the case. As of year ending 2019 general support and functionality of NFTables is much... Docker and Fail2ban basically still have default enbedment of IPTables with use of NFTables required greate
Linux Router Background
23 Hits, Last modified:
iable home internet access. Definitely not a good environment to be testing new equipment and configurations. (Production versus development environment. I effectively had no development environment....) *Lastly, was my ability to get time and mo... poe connect. My ISP was using IPoE DHCP, in preference to pppoe. I ended up moving away from pppoe to IPoE DHCP. This a... d in the section text. No individual on-line reference was exclusively used. Sadly some of the online references are no longer available (2022). In early 2024
Router VM
21 Hits, Last modified: