-
Notifications
You must be signed in to change notification settings - Fork 60
Config Example Station
Adrian Chadd edited this page Aug 28, 2016
·
2 revisions
= Config example - station =
This is an example Carambola 2 as a station, providing NAT services via an openvpn session to wired clients.
TBD: include the openvpn configuration file as an example!
# Set the default system hostname
system_hostname="freebsd-carambola2"
# Modules to load
kernel_modules="bridgestp if_bridge random ipfw libalias ipfw_nat if_gre if_gif if_vlan if_tap if_tun"
# Services to start
services_list="dropbear dnsmasq openvpn"
forwarding_enable="YES"
firewall_nat_enable="YES"
firewall_nat_alias_interface="wlan0"
firewall_nat_public_interface="wlan0"
firewall_nat_deny_in="YES"
firewall_nat_log="YES"
firewall_nat_block_lan_wan="bridge0"
# DHCP server/DNS relaying
dnsmasq_enable="YES"
dnsmasq_dns_enable="YES"
dnsmasq_listen_interface="bridge0"
dnsmasq_dhcp_ipv4_range="192.168.14.20,192.168.14.64,24h"
# dropbear configuration
dropbear_enable="YES"
dropbear_listen_address="192.168.14.1:22"
# Don't need inetd/telnet for now
inetd_enable="NO"
# openvpn config
openvpn_enable="YES"
openvpn_config="/etc/cfg/openvpn-client.conf"
openvpn_nat_enable="YES"
openvpn_nat_rule_id="100"
# These interfaces are configured in-order
network_interfaces="arge1 wlan0 bridge0"
# Create arge1, no interface address
netif_arge1_enable="YES"
netif_arge1_type="ether"
netif_arge1_addrtype="none"
netif_arge1_descr="default"
netif_arge1_name="arge1"
netif_wlan0_enable="YES"
netif_wlan0_type="wifi"
netif_wlan0_addrtype="dhcp"
netif_wlan0_name="wlan0"
netif_wlan0_wifi_sta_ssid="SSID"
netif_wlan0_wifi_sta_passphrase="PSK"
netif_wlan0_wifi_mode="sta"
netif_wlan0_wifi_parent="ath0"
# Create a bridge, flip on an IPv4 static address
netif_bridge0_type="bridge"
netif_bridge0_addrtype="static"
netif_bridge0_descr="default"
netif_bridge0_name="bridge0"
# These are bridge members w/ STP enabled
netif_bridge0_members_stp="arge1"
# These are bridge members w/ STP disabled
netif_bridge0_members=""
netif_bridge0_ipv4_address="192.168.14.1"
netif_bridge0_ipv4_netmask="255.255.255.0"