editor
698
edits
FireBrick 2700 Configuration run-through: Difference between revisions
FireBrick 2700 Configuration run-through (view source)
Revision as of 22:57, 26 March 2022
, 26 March 2022→Setting up 3G Fallback: indenting
m (clean up, typos fixed: However → However,) |
(→Setting up 3G Fallback: indenting) |
||
| (9 intermediate revisions by 2 users not shown) | |||
|
Here we will build a config file for a FB2700, from scratch, it should help you to build a configuration for your line(s) and help you understand the XML syntax etc. The examples are relevant for ADSL (Be and BT) as well as FTTC/FTTP through AAISP.
These examples are based on V0.00.608 (2011-01-05), and future firmware releases may have different configuration requirements.
We have an AAISP ADSL line with the following details:
<ppp port="LAN4" username="startup_user@startup_domain" password="" comment="Example PPPoE config for DSL/FTTC/FTTP/etc"/>
<services>
<
<telnet comment="Set allow IP list to restrict access"/>
<http/>
Set yourself a user with full debug rights, e.g.:
<syntaxhighlight lang=xml>
<user name="john" timeout="PT20M" level="DEBUG" password="secret"/>
</syntaxhighlight>
To explain the timeout a bit:
Modify the ntp time server to use the AAISP time server:
<syntaxhighlight lang=xml>
<
</syntaxhighlight>
<syntaxhighlight lang=xml>
<telnet allow="192.0.2.0/28"/>
</syntaxhighlight>
Set DNS servers and your domain name, under the services (here we're using the AAISP DNS servers:
<syntaxhighlight lang=xml>
<dns domain="yourdomain.tld" resolvers="217.169.20.20 217.169.20.21"/>
</syntaxhighlight>
Note: If you are using PPPoE, then you can leave the resolves empty, and the FireBrick will obtain the DNS servers from the ISP.
<services>
<dns domain="yourdomain.tld" resolvers="217.169.20.20 217.169.20.21"/>
<time/>
<telnet allow="192.0.2.0/28"/>
<http/>
= PPPoE =
More info on
The [[FireBrick 2700]] supports PPPoE - so you can use it to connect via an xDSL modem, e.g. a:
<services>
<dns domain="yourdomain.tld" resolvers="217.169.20.20 217.169.20.21"/>
<time/>
<telnet allow="192.0.2.0/28"/>
<http/>
<syntaxhighlight lang=xml>
<rule-set name="Incoming Firewall Rules">
<rule name="SIP" source-ip="81.187.30.110-119" target-ip="192.0.2.0/28" target-port="5060-5069"/>
<rule name="RTP" target-ip="192.0.2.0/28" protocol="17" target-port="1025-5059 5070-" set-graph="RTP"/>
</rule-set>
</syntaxhighlight>
<services>
<dns domain="yourdomain.tld" resolvers="217.169.20.20 217.169.20.21"/>
<time/>
<telnet allow="192.0.2.0/28"/>
<http/>
</syntaxhighlight>
(
Setting
You may also wish to configure [[IPv6]] DNS servers (
There are a couple of different mechanisms available to push out [[IPv6]] DNS servers, and the FB2700 supports both.
= Next Steps, Bonding a Second Line =
More info on
ADSL and FTTC lines can be bonded, typically A&A customers bond a BT and a Be line for greater resilience. Multiple FTTC lines can be bonded together too in the same way.
<services>
<dns domain="yourdomain.tld" resolvers="217.169.20.20 217.169.20.21"/>
<time/>
<telnet allow="192.0.2.0/28"/>
<http/>
<syntaxhighlight lang=xml>
<usb>
<dongle username="startup_user@startup_domain" password=""/>
</usb>
</syntaxhighlight>
| |||