FireBrick 2700 Configuration: Difference between revisions
Content deleted Content added
CrazyTeeka (talk | contribs) mNo edit summary |
m clean up, typos fixed: 350Mb/s → 350Mbit/s (2) |
||
| Line 5: | Line 5: | ||
These instructions are mostly applicable to the 2500 too. The difference between the 2700 and the 2500 is that: |
These instructions are mostly applicable to the 2500 too. The difference between the 2700 and the 2500 is that: |
||
*The 2700 has a USB port so supports 3G fallback, the 2500 does not have a USB port. |
*The 2700 has a USB port so supports 3G fallback, the 2500 does not have a USB port. |
||
*The 2700 has faster throughput - |
*The 2700 has faster throughput - 350Mbit/s on the 2700 compared to 100Mbit/s on the 2500. |
||
| Line 73: | Line 73: | ||
</syntaxhighlight> |
</syntaxhighlight> |
||
==System |
==System== |
||
FireBrick with basic system config. Automatic updates to new factory release firmware are enabled by default: |
FireBrick with basic system config. Automatic updates to new factory release firmware are enabled by default: |
||
<syntaxhighlight> |
<syntaxhighlight> |
||
| Line 83: | Line 83: | ||
</syntaxhighlight> |
</syntaxhighlight> |
||
==User |
==User== |
||
Full administrator account: |
Full administrator account: |
||
<syntaxhighlight> |
<syntaxhighlight> |
||
| Line 101: | Line 101: | ||
</syntaxhighlight> |
</syntaxhighlight> |
||
==Logging |
==Logging== |
||
General logging: |
General logging: |
||
<syntaxhighlight> |
<syntaxhighlight> |
||
| Line 113: | Line 113: | ||
</syntaxhighlight> |
</syntaxhighlight> |
||
==Services - NTP Client |
==Services - NTP Client== |
||
Set time from FireBrick time server: |
Set time from FireBrick time server: |
||
<syntaxhighlight> |
<syntaxhighlight> |
||
| Line 123: | Line 123: | ||
</syntaxhighlight> |
</syntaxhighlight> |
||
==Services - Telnet Server |
==Services - Telnet Server== |
||
Enable telnet server, local-only by default: |
Enable telnet server, local-only by default: |
||
<syntaxhighlight> |
<syntaxhighlight> |
||
| Line 153: | Line 153: | ||
</syntaxhighlight> |
</syntaxhighlight> |
||
==Services - HTTP Server |
==Services - HTTP Server== |
||
Enable HTTP server, local-only by default: |
Enable HTTP server, local-only by default: |
||
<syntaxhighlight> |
<syntaxhighlight> |
||
| Line 183: | Line 183: | ||
</syntaxhighlight> |
</syntaxhighlight> |
||
==Services - DNS Service |
==Services - DNS Service== |
||
Enable DNS service, local-only by default: |
Enable DNS service, local-only by default: |
||
<syntaxhighlight> |
<syntaxhighlight> |
||
| Line 189: | Line 189: | ||
</syntaxhighlight> |
</syntaxhighlight> |
||
==Port Grouping and Naming |
==Port Grouping and Naming== |
||
Port grouping for a single PPPoE session: |
Port grouping for a single PPPoE session: |
||
<syntaxhighlight> |
<syntaxhighlight> |
||
| Line 209: | Line 209: | ||
</syntaxhighlight> |
</syntaxhighlight> |
||
==Ethernet Interface |
==Ethernet Interface== |
||
LAN Interface: |
LAN Interface: |
||
<syntaxhighlight> |
<syntaxhighlight> |
||
| Line 244: | Line 244: | ||
</syntaxhighlight> |
</syntaxhighlight> |
||
==PPPoE |
==PPPoE== |
||
Connect to AAISP over PPPoE session (with NAT): |
Connect to AAISP over PPPoE session (with NAT): |
||
<syntaxhighlight> |
<syntaxhighlight> |
||
| Line 270: | Line 270: | ||
</syntaxhighlight> |
</syntaxhighlight> |
||
==USB and 3G dongle |
==USB and 3G dongle== |
||
Connect to AAISP over 3G dongle (with NAT): |
Connect to AAISP over 3G dongle (with NAT): |
||
<syntaxhighlight> |
<syntaxhighlight> |
||
| Line 288: | Line 288: | ||
</syntaxhighlight> |
</syntaxhighlight> |
||
==Static Routes |
==Static Routes== |
||
3G dongle IPv6 default route using IPv4 tunnel: |
3G dongle IPv6 default route using IPv4 tunnel: |
||
<syntaxhighlight> |
<syntaxhighlight> |
||
| Line 294: | Line 294: | ||
</syntaxhighlight> |
</syntaxhighlight> |
||
==Firewall - Rule Set |
==Firewall - Rule Set== |
||
Default firewall rule for traffic to LAN: |
Default firewall rule for traffic to LAN: |
||
<syntaxhighlight> |
<syntaxhighlight> |
||
| Line 301: | Line 301: | ||
</syntaxhighlight> |
</syntaxhighlight> |
||
==Firewall - Rule(s) |
==Firewall - Rule(s)== |
||
Allow all from the FireBrick to LAN - This rule is important: |
Allow all from the FireBrick to LAN - This rule is important: |
||
<syntaxhighlight> |
<syntaxhighlight> |
||
| Line 317: | Line 317: | ||
</syntaxhighlight> |
</syntaxhighlight> |
||
==VoIP |
==VoIP== |
||
VoIP with IPv6 source IP defined: |
VoIP with IPv6 source IP defined: |
||
<syntaxhighlight> |
<syntaxhighlight> |
||
| Line 329: | Line 329: | ||
</syntaxhighlight> |
</syntaxhighlight> |
||
==VoIP Carriers |
==VoIP Carriers== |
||
VoIP carrier that registers with Voiceless and binds inbound/outbound calls to extension 1000 as below: |
VoIP carrier that registers with Voiceless and binds inbound/outbound calls to extension 1000 as below: |
||
<syntaxhighlight> |
<syntaxhighlight> |
||
| Line 335: | Line 335: | ||
</syntaxhighlight> |
</syntaxhighlight> |
||
==VoIP Users |
==VoIP Users== |
||
VoIP user that accepts registrations from your VoIP phone: |
VoIP user that accepts registrations from your VoIP phone: |
||
<syntaxhighlight> |
<syntaxhighlight> |
||
| Line 344: | Line 344: | ||
=With NAT vs Without NAT= |
=With NAT vs Without NAT= |
||
You have 8 IPv4 for example "1.1.1.1-1.1.1.8" or "1.1.1.1/29", you can use them with NAT or without NAT. By using NAT you would only be using "1.1.1.1" and the other IPs would be unused. |
You have 8 IPv4 for example "1.1.1.1-1.1.1.8" or "1.1.1.1/29", you can use them with NAT or without NAT. By using NAT you would only be using "1.1.1.1" and the other IPs would be unused. |
||
==With NAT |
==With NAT== |
||
LAN Interface (with NAT): |
LAN Interface (with NAT): |
||
<syntaxhighlight> |
<syntaxhighlight> |
||
| Line 356: | Line 356: | ||
<ppp name="AAISP" port="WAN" username="me@a.1" password="secret" nat="true" graph="AAISP" log="default"/> |
<ppp name="AAISP" port="WAN" username="me@a.1" password="secret" nat="true" graph="AAISP" log="default"/> |
||
</syntaxhighlight> |
</syntaxhighlight> |
||
==Without NAT |
==Without NAT== |
||
LAN Interface (without NAT): |
LAN Interface (without NAT): |
||
<syntaxhighlight> |
<syntaxhighlight> |
||
| Line 372: | Line 372: | ||
=NAT on a Single Port= |
=NAT on a Single Port= |
||
It is possible to have NAT on a single port, for example port 3, while ports 1 and 2 are without NAT. |
It is possible to have NAT on a single port, for example port 3, while ports 1 and 2 are without NAT. |
||
==Port Grouping and Naming with NAT on Port 3 |
==Port Grouping and Naming with NAT on Port 3== |
||
<syntaxhighlight> |
<syntaxhighlight> |
||
<port name="LAN" ports="1 2"/> |
<port name="LAN" ports="1 2"/> |
||
| Line 378: | Line 378: | ||
<port name="WAN" ports="4"/> |
<port name="WAN" ports="4"/> |
||
</syntaxhighlight> |
</syntaxhighlight> |
||
==Ethernet Interface |
==Ethernet Interface== |
||
<syntaxhighlight> |
<syntaxhighlight> |
||
<interface name="LAN" port="LAN" ra-client="false"> |
<interface name="LAN" port="LAN" ra-client="false"> |
||
| Line 392: | Line 392: | ||
<interface name="WAN" port="WAN" ra-client="false"/> |
<interface name="WAN" port="WAN" ra-client="false"/> |
||
</syntaxhighlight> |
</syntaxhighlight> |
||
==PPPoE |
==PPPoE== |
||
<syntaxhighlight> |
<syntaxhighlight> |
||
<ppp name="AAISP" port="WAN" username="me@a.1" password="secret" nat="false" graph="AAISP" log="default"/> |
<ppp name="AAISP" port="WAN" username="me@a.1" password="secret" nat="false" graph="AAISP" log="default"/> |
||
</syntaxhighlight> |
</syntaxhighlight> |
||
==Firewall |
==Firewall== |
||
<syntaxhighlight> |
<syntaxhighlight> |
||
<rule-set name="Firewall: LAN" target-interface="LAN" no-match-action="reject" comment="Default firewall rule for traffic to LAN"> |
<rule-set name="Firewall: LAN" target-interface="LAN" no-match-action="reject" comment="Default firewall rule for traffic to LAN"> |
||