Bent's Wiki

a_managed_switch

Anonymous (anonymous@undisclosed.example.com) — 2022-07-22T15:36:24+00:00

alternate_address

Anonymous (anonymous@undisclosed.example.com) — 2025-01-05T16:03:44+00:00

Alternate address Based on my experiments with IPv6 prefix delegation and subnetting I determined a prefix to delegate to Steve. Steve has asked for a /64 delegation like the one I would get from him. The prefix became 1011, derived in this manner: My LAN (0019) is actually subnet 0 in the first level (/56), subnet 1 in the next level (/60) and subnet 9 in the third level (/64). So the 1011 is subnet 10 (first level), 1 second level and again 1 third level. The initial 10 could also be interpre…

alternative_access

Anonymous (anonymous@undisclosed.example.com) — 2025-09-10T15:50:48+00:00

Alternative access to the Internet Rationale The normal Internet access is via a fiber connection which at present operates at 1 Gb/sec up and down. The connection has operated almost without flawlessly since I got it circa 2006. But, but, but. There is always the chance that the fiber is cut, e.g. when somebody starts digging without having obtained proper information on what already may be buried in the ground (power cables, antenna cables, telephone cables , water piping, sewage piping, yo…

convert-heic

Anonymous (anonymous@undisclosed.example.com) — 2022-12-08T16:22:25+00:00

Convert HEIF images to JPG or PNG 1. Use the following syntax with the heif-convert command to convert a photo. Simply supply the name of the input file (the HEIC photo) followed by the name of the output file (the new JPG or PNG photo). $ heif-convert image.HEIC new-image.jpg

cross-allocation

Anonymous (anonymous@undisclosed.example.com) — 2025-01-05T17:17:53+00:00

IPv6 Cross allocation Changes for '1011' The following lines were added to the zone files int.2a06.zone and ext.2a06.zone: ; $ORIGIN 1.1.0.1.3.7.0.8.0.0.0.4.6.0.a.2.ip6.arpa. @ NS hamgate.apana.org.au. ; This is all that is required to delegate a sub-domain. Steve will have to add a zone file

failover

Anonymous (anonymous@undisclosed.example.com) — 2023-07-30T08:08:46+00:00

Failover Setting up failover is fairly straightforward. There are several guides and howtos on the Internet. I used the following: ISC: A Basic Guide to Configuring DHCP Failover, and Steven Diver: ISC DHCP Failover Configuration Here are the important sections of the respective configuration files. The Main Router has the IP address 192.168.19.1 and the Backup Router has 192.168.19.44.

gate-rpi-tunnel

Anonymous (anonymous@undisclosed.example.com) — 2023-10-22T10:10:15+00:00

Vultrgate tunnels vultrgate is a VPS that we use as a publicly accessible endpoint for tunnels between us. The main purpose of this setup is to enable us to access our own servers should we for some reason loose our main Internet connection from our ISPs.

main_router

Anonymous (anonymous@undisclosed.example.com) — 2022-08-08T15:24:58+00:00

Configuration files for the Main Router Network configuration Upstream interface (enp6s0) The upstream network interface is configured to act as a DHCP client (both IPv4 and IPv6). It also sets this host as a router and will accept Router Announcements (RA)

net3_config

Anonymous (anonymous@undisclosed.example.com) — 2022-08-08T15:32:41+00:00

Net3 Network Configuration Upstream interface (enp3s0) #/etc/systemd/network/enp0s3.network # [Match] Name=enp0s3 [Network] DHCP=yes LinkLocalAddressing=ipv6 IPv6AcceptRA=yes [IPv6AcceptRA] DHCPv6Client=yes

nounours-tunnels

Anonymous (anonymous@undisclosed.example.com) — 2026-02-18T16:17:42+00:00

Nounours tunnels Nounours (my main router) has a number of tunnels: * Tunnels to OZ7SAT at Amager (interface wg0 and tun0 (backup)) * Tunnel 'home' - Interface: wg1 * Tunnel to Rigpi at Amager - Interface : wg2 1 - Tunnels to OZ7SAT Two tunnels exist between Nounours and Amsat (The OZ7SAT group's SatNOGS groundstation at Amanger):

prefix_delegation

Anonymous (anonymous@undisclosed.example.com) — 2022-08-08T16:07:15+00:00

IPv6 prefix delegation and subnetting Subnetting is one of the tools you can use as part of segmenting a LAN in e.g a DMZ, a subnet for IoT devices etc. In this note I'll explain how I did it in IPv6 using Prefix Delegation. I took this opportunity to learn more about it. I set up the following test network using VirtualBox: (main router is a real host that runs Gentoo; the virtual hosts (Net0,1,2,

r2_configuration

Anonymous (anonymous@undisclosed.example.com) — 2022-08-08T15:31:22+00:00

Net2 (R2) Network configuration (There is no DHCP6 server configuration as there are no sub-routers on LAN3) Upstream interface (enp3s0) #/etc/systemd/network/enp0s3.network # [Match] Name=enp0s3 [Network] LinkLocalAddressing=ipv6 # SLAAC IPv6 for obtaining the default route IPv6AcceptRA=yes DHCP=yes IPForward=yes [DHCPv4] Hostname=net2 UseHostname=no # Ignore the hostname from the DHCP server UseDNS=yes UseNTP=yes UseRoutes=yes UseGateway=yes [IPv6AcceptRA] UseDNS=yes DHCPv6Client=yes […

redundancy

Anonymous (anonymous@undisclosed.example.com) — 2025-01-04T16:13:19+00:00

Redundancy The main purpose of having a second connection to the Internet is to be able to access the Internet from home for browsing etc. should the primary connection – the fiber – for any reason disappear. If I had hosted my mail and web servers at some web hotel this setup - which does not include any tunnels – would be almost perfect and nothing more would be required.

redundant_routers

Anonymous (anonymous@undisclosed.example.com) — 2025-09-10T15:54:17+00:00

Redundant Routers The virtual router is implented using the keepalived(8) package from the Keepalive project. Keepalived can do a lot of things but I only use the VRRP (Virtual Redundant Router Protocal) part of the package. Nounours is the chosen master router since it has the best connection to the Internet. Gate-rpi is then the backup router. Configuration is done following the guidelines on the

rigpi

Anonymous (anonymous@undisclosed.example.com) — 2025-09-23T15:25:07+00:00

Access to RigPi is through port forwarding on gate.amsat.dk. Port 2246 is forwarded to the SSH port (22). Example: ssh -4 -p 2246 pi@gate.amsat.dk. RipPi is IPv6 reachable and can be reached on tis address: 2a06:4000:8073:400::2 Port 64737 is forwarded to the HTTP port (80). Example:

router0_config

Anonymous (anonymous@undisclosed.example.com) — 2022-08-08T15:29:18+00:00

Net0 (R0) Network configuration Upstream interface (enp0s3) #/etc/systemd/network/enp0s3.network # [Match] Name=enp0s3 [Network] # SLAAC IPv6 for obtaining the default route. LinkLocalAddressing=ipv6 DHCP=yes [IPv6AcceptRA] DHCPv6Client=yes Downstream interface enp0s8 (LAN2)

start

Anonymous (anonymous@undisclosed.example.com) — 2025-02-22T09:45:30+00:00

Welcome As recommended by Keith Edmunds in 'The Linux Solution' a wiki is a Good Thing™ for documentation, so here is mine. The entries here will come as the need arises in no particular order. The following list of links will take you to the details for a particular area.

tunnels

Anonymous (anonymous@undisclosed.example.com) — 2024-12-06T17:03:43+00:00

Tunnels My routers are connected to a number of tunnels: * Nounours has tunnels to OZ7SAT and RigPi at Amager plus is the endpoint for a tunnel from my laptop * Gate-Rpi has a tunnel to Vultrgate which again has a number of tunnels to Steve's routers The main tunnel runs continously controlled by systemd (systemd-networkd.service). The backup tunnel is normally stopped and is only started when needed (openvpn-server@server.service)

update_tripwire

Anonymous (anonymous@undisclosed.example.com) — 2025-02-22T09:48:13+00:00

Update Tripwire policy file twadmin --print-polfile > twpol.txt vi twpol.txt twadmin --create-polfile twpol.txt /usr/bin/tripwire --init rm twpol.txt

vuplus

Anonymous (anonymous@undisclosed.example.com) — 2023-11-27T16:54:22+00:00

Software Update * Download a zip file for your VuPlus model from . * Unzip the zip file and you will have vuplus folder and under the folder, you have another folder named after the model of your VuPlus set. * Copy vuplus folder (including all the sub folders and files in it) to root folder of an USB memory.