12,274
edits
FireBrick 2700 Configuration run-through: Difference between revisions
FireBrick 2700 Configuration run-through (view source)
Revision as of 15:59, 10 February 2011
, 10 February 2011no edit summary
No edit summary |
|||
|
*A standard issue AAISP ZyXEL P660-D1, in bridge mode (Go to: Wan - Wan setup, mode Bridge, Encapsulation RFC1483, Multiplex LLC)
*Another ADSL router set for bridge mode
*A modem such as a Draytek [[Vigor 120]]
In our default config, you can see that we already have some PPPoE settings:
<div dir="ltr" class="mw-geshi" style="text-align: left;"><div class="xml source-xml"><pre class="de1"><span class="sc3"><span class="re1"><ppp</span> <span class="re0">port</span>=<span class="st0">"LAN4"</span> <span class="re0">username</span>=<span class="st0">"startup_user@startup_domain"</span> <span class="re0">password</span>=<span class="st0">""</span> <span class="re0">comment</span>=<span class="st0">"Example PPPoE config for DSL/FTTC/FTTP/etc"</span><span class="re2">/></span></span></pre></div></div>
This is using Ethernet port 4, so plug your modem in to that port.
This line can be changed for your ADSL settings, eg:
<div dir="ltr" class="mw-geshi" style="text-align: left;"><div class="xml source-xml"><pre class="de1"><span class="sc3"><span class="re1"><ppp</span> <span class="re0">port</span>=<span class="st0">"WAN1"</span> <span class="re0">username</span>=<span class="st0">"abc@a.1"</span> <span class="re0">password</span>=<span class="st0">"secret"</span> <span class="re0">comment</span>=<span class="st0">"BT ADSL"</span> <span class="re0">graph</span>=<span class="st0">"BT ADSL"</span> <span class="re0">log</span>=<span class="st0">"true"</span><span class="re2">/></span></span></pre></div></div>
We've also set the FireBrick to create a graph for this, as well as to log.
We've changed the port to WAN1, so we also need to change the port config earlier in the file, so change
<div dir="ltr" class="mw-geshi" style="text-align: left;"><div class="xml source-xml"><pre class="de1"><span class="sc3"><span class="re1"><port</span> <span class="re0">name</span>=<span class="st0">"LAN4"</span> <span class="re0">ports</span>=<span class="st0">"4"</span><span class="re2">/></span></span></pre></div></div>
to:
<div dir="ltr" class="mw-geshi" style="text-align: left;"><div class="xml source-xml"><pre class="de1"><span class="sc3"><span class="re1"><port</span> <span class="re0">name</span>=<span class="st0">"WAN1"</span> <span class="re0">ports</span>=<span class="st0">"4"</span><span class="re2">/></span></span></pre></div></div>
Our complete config in full now looks like this:
<div dir="ltr" class="mw-geshi" style="text-align: left;"><div class="xml source-xml"><pre class="de1"><span class="sc3"><span class="re1"><?xml</span> <span class="re0">version</span>=<span class="st0">"1.0"</span> <span class="re0">encoding</span>=<span class="st0">"UTF-8"</span><span class="re2">?></span></span> <span class="sc3"><span class="re1"><config</span> <span class="re0">xmlns</span>=<span class="st0">"http://firebrick.ltd.uk/xml/fb2700/"</span> <span class="re0">xmlns:xsi</span>=<span class="st0">"http://www.w3.org/2001/XMLSchema-instance"</span> <span class="re0">xsi:schemaLocation</span>=<span class="st0">"http://firebrick.ltd.uk/xml/fb2700/ http://firebrick.ltd.uk/xml/fb2700/0.00.605.xsd"</span> <span class="re0">timestamp</span>=<span class="st0">"1970-01-01T00:00:07Z"</span><span class="re2">></span></span> <span class="sc3"><span class="re1"><user</span> <span class="re0">name</span>=<span class="st0">"john"</span> <span class="re0">timeout</span>=<span class="st0">"PT20M"</span> <span class="re0">level</span>=<span class="st0">"DEBUG"</span> <span class="re0">password</span>=<span class="st0">"secret"</span><span class="re2">/></span></span> <span class="sc3"><span class="re1"><port</span> <span class="re0">name</span>=<span class="st0">"LAN1"</span> <span class="re0">ports</span>=<span class="st0">"1"</span><span class="re2">/></span></span> <span class="sc3"><span class="re1"><port</span> <span class="re0">name</span>=<span class="st0">"LAN2"</span> <span class="re0">ports</span>=<span class="st0">"2"</span><span class="re2">/></span></span> <span class="sc3"><span class="re1"><port</span> <span class="re0">name</span>=<span class="st0">"LAN3"</span> <span class="re0">ports</span>=<span class="st0">"3"</span><span class="re2">/></span></span> <span class="sc3"><span class="re1"><port</span> <span class="re0">name</span>=<span class="st0">"WAN1"</span> <span class="re0">ports</span>=<span class="st0">"4"</span><span class="re2">/></span></span> <span class="sc3"><span class="re1"><interface</span> <span class="re0">name</span>=<span class="st0">"LAN1"</span> <span class="re0">port</span>=<span class="st0">"LAN1"</span><span class="re2">></span></span> <span class="sc3"><span class="re1"><subnet</span> <span class="re0">comment</span>=<span class="st0">"dhcp client"</span><span class="re2">/></span></span> <span class="sc3"><span class="re1"><subnet</span> <span class="re0">ip</span>=<span class="st0">"2001:DB8::1/64 10.0.0.1/24"</span> <span class="re0">nat</span>=<span class="st0">"true"</span> <span class="re0">comment</span>=<span class="st0">"Temporary IPs for setup only, delete when finished configuring"</span><span class="re2">/></span></span> <span class="sc3"><span class="re1"><subnet</span> <span class="re0">ip</span>=<span class="st0">"192.0.2.1/28"</span> <span class="re0">comment</span>=<span class="st0">"LAN"</span><span class="re2">/></span></span> <span class="sc3"><span class="re1"><dhcp</span> <span class="re0">ip</span>=<span class="st0">"192.0.2.2-12"</span><span class="re2">/></span></span> <span class="sc3"><span class="re1"></interface<span class="re2">></span></span></span> <span class="sc3"><span class="re1"><ppp</span> <span class="re0">port</span>=<span class="st0">"WAN1"</span> <span class="re0">username</span>=<span class="st0">"abc@a.1"</span> <span class="re0">password</span>=<span class="st0">"secret"</span> <span class="re0">comment</span>=<span class="st0">"BT ADSL"</span> <span class="re0">graph</span>=<span class="st0">"BT ADSL"</span> <span class="re0">log</span>=<span class="st0">"true"</span><span class="re2">/></span></span> <span class="sc3"><span class="re1"><services<span class="re2">></span></span></span> <span class="sc3"><span class="re1"><dns</span> <span class="re0">domain</span>=<span class="st0">"yourdomain.tld"</span> <span class="re0">resolvers</span>=<span class="st0">"217.169.20.20 217.169.20.21"</span><span class="re2">/></span></span> <span class="sc3"><span class="re1"><ntp</span> <span class="re0">timeserver</span>=<span class="st0">"90.155.53.32 2001:8B0:0:53::5A9B:3520"</span><span class="re2">/></span></span> <span class="sc3"><span class="re1"><telnet</span> <span class="re0">allow</span>=<span class="st0">"192.0.2.0/28"</span><span class="re2">/></span></span> <span class="sc3"><span class="re1"><http</span><span class="re2">/></span></span> <span class="sc3"><span class="re1"></services<span class="re2">></span></span></span> <span class="sc3"><span class="re1"><rule-set</span> <span class="re0">target-interface</span>=<span class="st0">"LAN1"</span> <span class="re0">drop</span>=<span class="st0">"reject"</span> <span class="re0">comment</span>=<span class="st0">"default firewall rule - block incoming"</span><span class="re2">></span></span> <span class="sc3"><span class="re1"><rule</span> <span class="re0">source-interface</span>=<span class="st0">"self"</span> <span class="re0">comment</span>=<span class="st0">"allow from the FireBrick though"</span><span class="re2">/></span></span> <span class="sc3"><span class="re1"></rule-set<span class="re2">></span></span></span> <span class="sc3"><span class="re1"></config<span class="re2">></span></span></span></pre></div></div>
By default the PPPoE will be used as the default route, saving this config should mean you have an internet connection! ▼
▲By default the PPPoE will be used as the default route, saving this config should mean you have an internet connection!
== 1500 MTU? ==
The Default MTU is 1492 for PPPoE. However if your modem supports jumboframes, then you should be able to use a full 1500MTU on the PPPoE. The BT supplied modem for FTTC does support this, other modems may or may not...▼
▲The Default MTU is 1492 for PPPoE. However if your modem supports jumboframes, then you should be able to use a full 1500MTU on the PPPoE. The BT supplied modem for FTTC does support this, other modems may or may not... Config wise, just add mtu="1500" to the ppp element. eg:
==ZyXEL P660R-D1 Notes==▼
<div dir="ltr" class="mw-geshi" style="text-align: left;"><div class="xml source-xml"><pre class="de1"><span class="sc3"><span class="re1"><ppp</span> <span class="re0">port</span>=<span class="st0">"WAN1"</span> <span class="re0">username</span>=<span class="st0">"abc@a.1"</span> <span class="re0">password</span>=<span class="st0">"secret"</span> <span class="re0">comment</span>=<span class="st0">"BT ADSL"</span> <span class="re0">graph</span>=<span class="st0">"BT ADSL"</span> <span class="re0">log</span>=<span class="st0">"true"</span> <span class="re0">mtu</span>=<span class="st0">"1500"</span><span class="re2">/></span></span></pre></div></div>
(These notes will be similar for any type of ADSL router in Bridge mode, or ADSL modems.)▼
▲== ZyXEL P660R-D1 Notes ==
▲(These notes will be similar for any type of ADSL router in Bridge mode, or ADSL modems.) When setting up the ZyXEL to work with the FireBrick, set the WAN settings to be:
===For a Be PPPoA or a BT Line:===▼
*Name: AAISP (But can be anything)▼
▲=== For a Be PPPoA or a BT Line: ===
*Mode: Bridge▼
*Encapsulation: RFC 1493▼
▲*Name: AAISP (But can be anything)
*Multiplexing: VC▼
*
▲*Encapsulation: RFC 1493
*VCI: 38▼
▲*Multiplexing: VC
*VPI: 0 ▼
▲*VCI: 38
*ADSL modulation type: Multimode
=== For a Be, PPPoE, Line: ===
*Name: AAISP (But can be anything)
▲*Mode: Bridge
*Encapsulation: RFC 1493
*Multiplexing: LLC
▲*VPI: 0
*
*VCI: 101
*ADSL modulation type: Multimode
Also make a not of the LAN address, as you'll set a subnet on the FireBrick below so that you can still access the ZyXEL from your LAN. As the ZyXEL is not doing any PPP in bridge mode, the 'Internet' LED will not light up, the DSL light will still indicate sync though.
= Filters =
| |||