Difference between revisions of "Network information"

From Hackerspace ACKspace
Jump to: navigation, search
(updated information)
(<code/> tag is corrupt, changing to good old <pre/>)
Line 16: Line 16:
 
* Netgear router (DD-WRT), providing internet and wifi (spacenet, spacenet_5GHz, ACKspaceWifi)
 
* Netgear router (DD-WRT), providing internet and wifi (spacenet, spacenet_5GHz, ACKspaceWifi)
 
: has extra firewall rules (to prevent Wifi, VoIP and internet access from crumbling down on multicast streams)
 
: has extra firewall rules (to prevent Wifi, VoIP and internet access from crumbling down on multicast streams)
: <code>insmod ebtables
+
<pre>
: insmod ebtable_filter
+
insmod ebtables
: insmod ebt_pkttype
+
insmod ebtable_filter
: ebtables -F INPUT
+
insmod ebt_pkttype
: ebtables -F FORWARD
+
ebtables -F INPUT
: ebtables -F OUTPUT
+
ebtables -F FORWARD
:
+
ebtables -F OUTPUT
: ebtables -A INPUT --pkttype-type multicast -j DROP
+
: ebtables -A FORWARD --pkttype-type multicast -j DROP
+
ebtables -A INPUT --pkttype-type multicast -j DROP
: ebtables -A OUTPUT --pkttype-type multicast -j DROP
+
ebtables -A FORWARD --pkttype-type multicast -j DROP
</code>
+
ebtables -A OUTPUT --pkttype-type multicast -j DROP
 +
</pre>
  
 
== notes ==
 
== notes ==

Revision as of 23:03, 2 February 2016

synopsis

I've (xopr) created this network information page mainly because no-one knows the current setup by heart, and I'm preparing for Congress everywhere without breaking people's precious downloads..

current setup

trunks

  1. router and 'main switch'
  2. router and VoIP setup
  3. 'main switch' and 'media switch'
  4. 'main switch' and «unknown»2
  5. 'main switch' and stackspace (not connected)
  6. 'main switch' and entrance/webcam (not connected)
  7. 'main switch' and 3D printcorner (not connected)

special settings

  • Netgear router (DD-WRT), providing internet and wifi (spacenet, spacenet_5GHz, ACKspaceWifi)
has extra firewall rules (to prevent Wifi, VoIP and internet access from crumbling down on multicast streams)
insmod ebtables
insmod ebtable_filter
insmod ebt_pkttype
ebtables -F INPUT
ebtables -F FORWARD
ebtables -F OUTPUT
 
ebtables -A INPUT --pkttype-type multicast -j DROP
ebtables -A FORWARD --pkttype-type multicast -j DROP
ebtables -A OUTPUT --pkttype-type multicast -j DROP

notes

  • All important connections have been labeled (trunks on both sides). Please keep the label on (and updated) at all times. You can find the label-tywraps in the network-connector box in the stackspace
  • Currently, multicast traffic is not filtered (IGMP snooping) by the switches. The router filters them all; if you don't want multicast traffic, connect to the router for now.

todo

  • create VLANs, do some descent trunking, provide 'standardized' ports for management, non-multicast, VM, VoIP and regular use.

also see