Search

You can find the results of your search below.

Fulltext results:

ISP IPoE DHCP Setup Notes
88 Hits, Last modified:
ove existing connected dhcp leased connections on eno1: ''sudo dhclient -r eno1'', note this also seems to remove static IP add... *To manual request a dhcp lease connection on eno1: ''sudo dhclient -4 eno1'' , the ''-4'' flag restricts operation to IPv4... 04 07:34:29 kptr dhclient[763]: Listening on LPF/enp1s0/00:e2:59:01:7d:ab Jan 04 07:34:29 kptr dhclient[763]: Sending on LPF/enp1s0/00:e2:59:01:7d:ab Jan 04 07:34:29 kptr dhclie
Debian Server Network Setup
47 Hits, Last modified:
ddress 192.168.5.2/24 # Then LAN networks are eno2 eno3 eno4 in bridged mode br1 # on the 192.168.1.1 subn... auto br0 iface br0 inet static bridge_ports eno2 eno3 eno4 address 192.168.1.1/24 dns-nameservers ... 2001:470:1f2c:20c::3/64" #IPv6 interfaces: [eno2, eno3, eno4] nameservers: addresses: ["2001:4... addresses: [192.168.1.6/24] interfaces: [eno2, eno3, eno4] gateway4: 192.168.1.1 nameserv
Router Miscellaneous
38 Hits, Last modified:
for a /48 IPv6 prefix ?]] *Wikipedia [[https://en.wikipedia.org/wiki/IPv6|IPv6]], [[https://en.wikipedia.org/wiki/IPsec|IPsec]], [[https://en.wikipedia.org/wiki/Domain_Name_System|DNS]], [[https://en.wikipedia.org/wiki/Dynamic_Host_Configuration_Pro... e]] *Purdue Uni IPTables lesson notes [[https://engineering.purdue.edu/kak/compsec/NewLectures/Lectu
DHCP / DNS Setup
27 Hits, Last modified:
m/2018/12/21/security/dns-over-tls/|DNS over TLS: Encrypting DNS end-to-end]] *[[https://www.b1c1l1.com/blog/2018/04/23/encrypted-recursive-dns-with-dns-over-tls-unbound-and-cloudflare/|Encrypted Recursive DNS with DNS over TLS, Unbound, an... 6 links===== *[[https://jochen.kirstaetter.name/enabling-dns-for-ipv6-infrastructure/|Enabling DNS for IPv6 infrastructure]] *[[https://... 6-HOWTO/#HINTS-DAEMONS-ISC-DHCP|Linux IPv6 HOWTO (en)]] <- linux_router:nftables|Prev page ^ linux_r
Basic Netfilter Function Block Diagram
25 Hits, Last modified:
tering ICMP]] **Cisco** [[https://www.cisco.com/c/en/us/support/docs/ip/generic-routing-encapsulation-gre/25885-pmtud-ipfrag.html|Resolve IP Fragmentation]], [[https://www.cisco.com/c/en/us/support/docs/ip/generic-routing-encapsulation-gre/25885-pmtud-ipfrag.html|MTU]], [[https://www.cisco.com/c/en/us/support/docs/ip/generic-routing-encapsulation-gre/25885-pmtud-ipfrag.html|MSS]], and [[https://www.cisco.com/c/en/us/support/docs/ip/generic-routing-encapsulation-gre/25885-pmtud-ipfrag.html|PMTUD Issu
Wireguard VPN access from WAN to LAN
21 Hits, Last modified:
vice: ''sudo systemctl start wg-quick@wg0'' *To enable/disable the Wireguard service: ''sudo systemctl enable wg-quick@wg0'' *To check status of the Wire... label</color>\\ <tab3>define <color red>modem = eno1</color><color blue> #definition of modem device... and name ''firewall''. ''inet'' is a family that encompasses both IPv4 and IPv6 internet protocols. I... rt number or range). The flags interval directive enables port ranges to be used. After that, you just
ISP PPPoE Network Setup
19 Hits, Last modified:
ind this connection specifically to ppp1 unit 1 #Ensure a PID entry with specified linkname is made pppoe linkname... -b 0 -xe''; ''-b 0'' sees last boot, ''-xe'' sees end of file, ''-f'' to list the end of the file. Also remember to turn on / off the ... t up dev eno1 ExecStartPre=/sbin/ip link add link eno1 name eno1.7 type vlan id 7 ExecStartPre=/sbin/ip link set up dev eno1.7 ExecStartPre=/sbin/ip addr add 192.168.5.2/24
Router Hardware
15 Hits, Last modified:
ter 8 core [[https://www.intel.com/content/www/us/en/products/sku/231805/intel-core-i3n305-processor-6... J1900 CPU. The AES CPU instruction helps improve encryption performance significantly, handy for SSL ... the older hardware, although it is probably good enough in this respect. That all being said if one i... eaper units, so care must be taken if you want to ensure more up to date hardware. These machines are
TC - Traffic Control
15 Hits, Last modified:
n in deeper filters! *''sudo tc qdisc show dev eno1'' shows current setting of interface ''dev eno1'' it would seem that Linux has default setting... an0 [Install] WantedBy=multi-user.target</code> Enable it: ''%%sudo systemctl enable --now sqm.service%%'' ++++ ====Verify It Wor... eing disciplines]] *[[https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/8/html/configuring_and_managing_net... *[[https://oneuptime.com/blog/post/2026-03-20-enable-gro-tso-linux-network/view| How to Enable Generic Receive Offload (GRO) and TCP Segment
NFTables Configuration
14 Hits, Last modified:
lowing file called: "router.nft". Dont forget to ensure the router is allowed to forward packets: *... Also make permanent in ''/etc/sysctl.conf'', by ensuring ''net.ipv4.ip_forward = 1'' is indicated no... ge. </color>++ \\ <tab3>define <color red>wan = eno1</color><color blue> #definition of wan device l... pppoe</color>\\ <tab3>define <color red>modem = eno1</color><color blue> #definition of modem device
IPTables Configuration
7 Hits, Last modified:
:OUTPUT ACCEPT [0:0] :POSTROUTING ACCEPT [0:0] # eno1 is WAN interface, br1 is LAN interface (bridged eno2 - eno4), # ppp1 is the PPPoE connection on eno1, is effectively the WAN -A POSTROUTING -o ppp1 -j MASQUER... A INPUT -m state --state ESTABLISHED -j ACCEPT # enable traceroute rejections to get sent out -A INPU
NFTables IP Control
6 Hits, Last modified:
*''journalctl -b0 -xe -u nftables'' to list the end of all the nftables journal entries since the last boot I made a couple of bas... im controllist.sh'' : This script automates the entry of a a range of IP address with timeout limits... ich nft''. In any case the final crontab command entry would look like: ''/usr/bin/systemd-cat -t con... mount of drop packets to be seen with the counter enabled: *''sudo nft add rule inet firewall forwa
Router Configuration, Switch & Server Setup
5 Hits, Last modified:
of security.) - NAT obfuscation wrecks simple end to end IP addressing that is required for some services... t, but felt this was not would the trouble in the end. I am not sure if I would use NAT on a IPv6 LAN... se LAN port 1 as the Router WAN port. *I do not encrypt the home directory. (See How to install [[ht... equipment via a web browser, open a new page and ensure that the page is open directly not from cache
Linux Router Background
4 Hits, Last modified:
nd configurations. (Production versus development environment. I effectively had no development environment....) *Lastly, was my ability to get ti... SP was using IPoE DHCP, in preference to pppoe. I ended up moving away from pppoe to IPoE DHCP. This a
Wifi Router / Access Points
2 Hits, Last modified:
06]]. They only went on sale circa 2021 and went end of life early 2025, I am disappointed with Netge... age widget api configuration files on Openwrt and ensure alignment with configuration on homepage setu