Difference between revisions of "Network information"
(updated information) |
(<code/> tag is corrupt, changing to good old <pre/>) |
||
Line 16: | Line 16: | ||
* Netgear router (DD-WRT), providing internet and wifi (spacenet, spacenet_5GHz, ACKspaceWifi) | * Netgear router (DD-WRT), providing internet and wifi (spacenet, spacenet_5GHz, ACKspaceWifi) | ||
: has extra firewall rules (to prevent Wifi, VoIP and internet access from crumbling down on multicast streams) | : has extra firewall rules (to prevent Wifi, VoIP and internet access from crumbling down on multicast streams) | ||
− | + | <pre> | |
− | + | insmod ebtables | |
− | + | insmod ebtable_filter | |
− | + | insmod ebt_pkttype | |
− | + | ebtables -F INPUT | |
− | + | ebtables -F FORWARD | |
− | + | ebtables -F OUTPUT | |
− | + | ||
− | + | ebtables -A INPUT --pkttype-type multicast -j DROP | |
− | + | ebtables -A FORWARD --pkttype-type multicast -j DROP | |
− | </ | + | ebtables -A OUTPUT --pkttype-type multicast -j DROP |
+ | </pre> | ||
== notes == | == notes == |
Revision as of 23:03, 2 February 2016
synopsis
I've (xopr) created this network information page mainly because no-one knows the current setup by heart, and I'm preparing for Congress everywhere without breaking people's precious downloads..
current setup
trunks
- router and 'main switch'
- router and VoIP setup
- 'main switch' and 'media switch'
- 'main switch' and «unknown»2
- 'main switch' and stackspace (not connected)
- 'main switch' and entrance/webcam (not connected)
- 'main switch' and 3D printcorner (not connected)
special settings
- Netgear router (DD-WRT), providing internet and wifi (spacenet, spacenet_5GHz, ACKspaceWifi)
- has extra firewall rules (to prevent Wifi, VoIP and internet access from crumbling down on multicast streams)
insmod ebtables insmod ebtable_filter insmod ebt_pkttype ebtables -F INPUT ebtables -F FORWARD ebtables -F OUTPUT ebtables -A INPUT --pkttype-type multicast -j DROP ebtables -A FORWARD --pkttype-type multicast -j DROP ebtables -A OUTPUT --pkttype-type multicast -j DROP
notes
- All important connections have been labeled (trunks on both sides). Please keep the label on (and updated) at all times. You can find the label-tywraps in the network-connector box in the stackspace
- Currently, multicast traffic is not filtered (IGMP snooping) by the switches. The router filters them all; if you don't want multicast traffic, connect to the router for now.
todo
- create VLANs, do some descent trunking, provide 'standardized' ports for management, non-multicast, VM, VoIP and regular use.