Domnev1: Difference between revisions

From Teltonika Networks Wiki
No edit summary
No edit summary
Line 3: Line 3:
==Introduction==
==Introduction==
This article contains instructions on how to do UCI-based configuration for setting up RelayD with IPv4+IPv6 support.
This article contains instructions on how to do UCI-based configuration for setting up RelayD with IPv4+IPv6 support.
==RUT1 configuration==


==Tunnelbroker configuration==
===Tunnelbroker configuration===
[http://tunnelbroker.net Tunnelbroker.net] is a website operated by Hurricane Electric, a leading provider of internet services and networking solutions. The website provides a service called Hurricane Electric IPv6 Tunnel Broker, which allows users to create an IPv6 tunnel between their network and Hurricane Electric's network. This allows users to connect their devices to the internet using the IPv6 protocol, even if their internet service provider (ISP) does not support IPv6.
[http://tunnelbroker.net Tunnelbroker.net] is a website operated by Hurricane Electric, a leading provider of internet services and networking solutions. The website provides a service called Hurricane Electric IPv6 Tunnel Broker, which allows users to create an IPv6 tunnel between their network and Hurricane Electric's network. This allows users to connect their devices to the internet using the IPv6 protocol, even if their internet service provider (ISP) does not support IPv6.
===Login===
====Login====
----
----
Go to [http://tunnelbroker.net tunnelbroker.net] and log into your account. If you don't have a registered account then you will need to create one - click '''register'''.
Go to [http://tunnelbroker.net tunnelbroker.net] and log into your account. If you don't have a registered account then you will need to create one - click '''register'''.
[[File:Tunnelbroker login.png|border|center|class=tlt-border|1004x1004px]]
[[File:Tunnelbroker login.png|border|center|class=tlt-border|1004x1004px]]


===IPv6 to IPv4 tunnel setup===
====IPv6 to IPv4 tunnel creation====
Setup IPv6 over IPv4, also known as 6in4 IPv6 transition mechanism
Setup IPv6 over IPv4, also known as 6in4 IPv6 transition mechanism
----
----


To create a new tunnel, click on '''create regular tunnel''' ('''1'''), then '''enter''' your '''public IP''' (it will light up green, if the tunnel can be created with this IP) ('''2'''), '''select''' the desired '''tunnel server''' ('''3''') and '''create tunnel''' ('''4''').
To create a new tunnel:
# Click on '''create regular tunnel''',
# '''Enter''' your '''public IP''' (it will light up green, if the tunnel can be created with this IP),  
# '''Select''' the desired '''tunnel server''',
# '''Create tunnel'''.


[[File:Create IPv6 Tunnel.png|border|center|class=tlt-border|854x854px]]
[[File:Create IPv6 Tunnel.png|border|center|class=tlt-border|854x854px]]
Line 23: Line 28:
[[File:IPv6 Tunnel created.png|border|center|class=tlt-border|454x454px]]
[[File:IPv6 Tunnel created.png|border|center|class=tlt-border|454x454px]]


To create a a tunnel instance on your RUT router, '''navigate''' to '''example configurations''' ('''1''') and select '''OpenWRT Barrier Breaker''' ('''2'''). Copy and paste the following commands into your RUT CLI. Do not forget to '''replace''' '''YOUR_TUNNELBORKER_USERNAME''' and '''YOUR_TUNNELBROKER_PASSWORD''' with your '''TunnelBroker account username''' and '''password'''.
To create a a tunnel instance on your RUT router:
# '''Navigate''' to '''example configurations''',
# Select '''OpenWRT Barrier Breaker'''.
# '''Paste''' the following '''commands''' '''into''' your '''RUT1 CLI'''.  
 
Do not forget to '''replace''' '''YOUR_TUNNELBORKER_USERNAME''' and '''YOUR_TUNNELBROKER_PASSWORD''' with your '''TunnelBroker account username''' and '''password'''.


[[File:Tunnel interface.png|border|center|class=tlt-border|554x554px]]
[[File:Tunnel interface.png|border|center|class=tlt-border|554x554px]]


In the RUT1 CLI you can see that the new interface has been successfully created.
Use the '''''cat /etc/config/network''''' command in RUT1 CLI to see if the new interface has been successfully created.


[[File:Tunnel RUT interface created.png|border|center|class=tlt-border|524x524px]]
[[File:Tunnel RUT interface created.png|border|center|class=tlt-border|524x524px]]
 
==RUT2 configuration==
==Relayd and interface configuration using UCI==
===Relayd and interface configuration using UCI===
----
Relay is a daemon (computer program that runs as a background process) used to relay and dynamically redirect incoming connections to a target host. Its main purpose in RUTxxx routers is to extend the wireless network. For example, when RUTxxx is in STA Wireless Station mode, it can be used to bridge WAN and LAN interfaces to create a larger Wireless network.
Relay is a daemon (computer program that runs as a background process) used to relay and dynamically redirect incoming connections to a target host. Its main purpose in RUTxxx routers is to extend the wireless network. For example, when RUTxxx is in STA Wireless Station mode, it can be used to bridge WAN and LAN interfaces to create a larger Wireless network.


[[UCI_command_usage|Unified Configuration Interface (UCI)]] is a small utility written in C (a shell script-wrapper is available as well) and is intended to centralize the whole configuration of a device running on OpenWrt.
[[UCI_command_usage|Unified Configuration Interface (UCI)]] is a small utility written in C (a shell script-wrapper is available as well) and is intended to centralize the whole configuration of a device running on OpenWrt.
===Relayd installation===
====Relayd installation====
----
----
Install relayd package if needed, skip this step on RUTX series devices or if you already installed it on your router
Install relayd package if needed, skip this step on RUTX series devices or if you already installed it on your router
Line 41: Line 52:
opkg install relayd</pre>
opkg install relayd</pre>


===WiFi client configuration===
====WiFi client configuration====
----
----
Add WiFi interface to make your router act as a WiFi client (connect to another AP)
Add WiFi interface to make your router act as a WiFi client (connect to another AP)
Line 73: Line 84:
uci set wireless.@wifi-iface[-1].wifi_id='wifi1'</pre>
uci set wireless.@wifi-iface[-1].wifi_id='wifi1'</pre>


===IPv4 interface creation===
====IPv4 interface creation====
----
----
Create a new interface IPv4 for WiFi WAN.
Create a new interface IPv4 for WiFi WAN.
Line 108: Line 119:
uci add_list mwan3.balance_default.use_member='wifi_wan_member_balance'</pre>
uci add_list mwan3.balance_default.use_member='wifi_wan_member_balance'</pre>


===IPv6 interface creation===
====IPv6 interface creation====
----
----
Create a new IPv6 interface for WiFi WAN
Create a new IPv6 interface for WiFi WAN
Line 149: Line 160:
uci set mwan3.default_rule_ipv6.family='ipv6'</pre>
uci set mwan3.default_rule_ipv6.family='ipv6'</pre>


===LAN interface configuration===
====LAN interface configuration====
----
----
Configure a LAN interface accordingly.
Configure a LAN interface accordingly.
Line 171: Line 182:
uci set dhcp.wifi_wan.ndp='relay'</pre>
uci set dhcp.wifi_wan.ndp='relay'</pre>


===Firewall configuration===
====Firewall configuration====
----
----
Set firewall zone, using WAN firewall zone for newly created WiFi WAN network interface.
Set firewall zone, using WAN firewall zone for newly created WiFi WAN network interface.
<pre>uci set firewall.@zone[1].network='wan wan6 mob1s1a1 mob1s2a1 wifi_wan'</pre>
<pre>uci set firewall.@zone[1].network='wan wan6 mob1s1a1 mob1s2a1 wifi_wan'</pre>


===Commit changes===
====Commit changes====
----
----
Save all the changes and restart the configuration
Save all the changes and restart the configuration

Revision as of 15:38, 20 December 2022

The information in this page is updated in accordance with 00.07.03 firmware version.

Introduction

This article contains instructions on how to do UCI-based configuration for setting up RelayD with IPv4+IPv6 support.

RUT1 configuration

Tunnelbroker configuration

Tunnelbroker.net is a website operated by Hurricane Electric, a leading provider of internet services and networking solutions. The website provides a service called Hurricane Electric IPv6 Tunnel Broker, which allows users to create an IPv6 tunnel between their network and Hurricane Electric's network. This allows users to connect their devices to the internet using the IPv6 protocol, even if their internet service provider (ISP) does not support IPv6.

Login


Go to tunnelbroker.net and log into your account. If you don't have a registered account then you will need to create one - click register.

File:Tunnelbroker login.png

IPv6 to IPv4 tunnel creation

Setup IPv6 over IPv4, also known as 6in4 IPv6 transition mechanism


To create a new tunnel:

  1. Click on create regular tunnel,
  2. Enter your public IP (it will light up green, if the tunnel can be created with this IP),
  3. Select the desired tunnel server,
  4. Create tunnel.
File:Create IPv6 Tunnel.png

After successful tunnel creation, you will be prompt to tunnel details window.

File:IPv6 Tunnel created.png

To create a a tunnel instance on your RUT router:

  1. Navigate to example configurations,
  2. Select OpenWRT Barrier Breaker.
  3. Paste the following commands into your RUT1 CLI.

Do not forget to replace YOUR_TUNNELBORKER_USERNAME and YOUR_TUNNELBROKER_PASSWORD with your TunnelBroker account username and password.

File:Tunnel interface.png

Use the cat /etc/config/network command in RUT1 CLI to see if the new interface has been successfully created.

File:Tunnel RUT interface created.png

RUT2 configuration

Relayd and interface configuration using UCI


Relay is a daemon (computer program that runs as a background process) used to relay and dynamically redirect incoming connections to a target host. Its main purpose in RUTxxx routers is to extend the wireless network. For example, when RUTxxx is in STA Wireless Station mode, it can be used to bridge WAN and LAN interfaces to create a larger Wireless network.

Unified Configuration Interface (UCI) is a small utility written in C (a shell script-wrapper is available as well) and is intended to centralize the whole configuration of a device running on OpenWrt.

Relayd installation


Install relayd package if needed, skip this step on RUTX series devices or if you already installed it on your router

opkg update 
opkg install relayd

WiFi client configuration


Add WiFi interface to make your router act as a WiFi client (connect to another AP)

uci add wireless wifi-iface
uci set wireless.@wifi-iface[-1]=wifi-iface

Add new WiFi interface to 2.4ghz device, can specify 'radio1' for 5ghz

uci set wireless.@wifi-iface[-1].device='radio0'
uci set wireless.@wifi-iface[-1].mode='sta'
uci set wireless.@wifi-iface[-1].network='wifi_wan'

Change SSID here to an SSID that the router will be connecting to

uci set wireless.@wifi-iface[-1].ssid='RUT1_SSID'

Change BSSID here to BSSID that the router will be connecting to (L2 address)

uci set wireless.@wifi-iface[-1].bssid='RUT1_BSSID'

Use appropriate encryption method, PSK2 = WPA2-PSK here

uci set wireless.@wifi-iface[-1].encryption='psk2'

Change secret to appropriate one

uci set wireless.@wifi-iface[-1].key='SSID_PASSWORD' 
uci set wireless.@wifi-iface[-1].disabled='0'
uci set wireless.@wifi-iface[-1].skip_inactivity_poll='0'
uci set wireless.@wifi-iface[-1].wifi_id='wifi1'

IPv4 interface creation


Create a new interface IPv4 for WiFi WAN.

uci set network.wifi_wan=interface
uci set network.wifi_wan.proto='dhcp'
uci set network.wifi_wan.metric='6'
uci set network.wifi_wan.disabled='0'
uci set network.wifi_wan.force_link='0'
uci set network.wifi_wan.broadcast='0'

Set mwan3 settings for new interface

uci set mwan3.wifi_wan=interface
uci set mwan3.wifi_wan.enabled='0'
uci set mwan3.wifi_wan.interval='3'
uci set mwan3.wifi_wan.family='ipv4'
uci add mwan3 condition
uci set mwan3.@condition[-1].interface='wifi_wan'
uci set mwan3.@condition[-1].track_method='ping'
uci add_list mwan3.@condition[-1].track_ip='1.1.1.1'
uci add_list mwan3.@condition[-1].track_ip='8.8.8.8'
uci set mwan3.@condition[-1].reliability='1'
uci set mwan3.@condition[-1].count='1'
uci set mwan3.@condition[-1].timeout='2'
uci set mwan3.@condition[-1].down='3'
uci set mwan3.@condition[-1].up='3'
uci set mwan3.wifi_wan_member_mwan=member
uci set mwan3.wifi_wan_member_mwan.interface='wifi_wan'
uci set mwan3.wifi_wan_member_mwan.metric='1'
uci set mwan3.wifi_wan_member_balance=member
uci set mwan3.wifi_wan_member_balance.interface='wifi_wan'
uci set mwan3.wifi_wan_member_balance.weight='1'
uci add_list mwan3.mwan_default.use_member='wifi_wan_member_mwan'
uci add_list mwan3.balance_default.use_member='wifi_wan_member_balance'

IPv6 interface creation


Create a new IPv6 interface for WiFi WAN

uci set network.wifi_wan6=interface
uci set network.wifi_wan6.proto='dhcpv6'
uci set network.wifi_wan6.metric='6'
uci set network.wifi_wan6.disabled='0'
uci set network.wifi_wan6.force_link='0'
uci set network.wifi_wan6.reqaddress='try'
uci set network.wifi_wan6.reqprefix='auto'
uci set network.wifi_wan6.device='@wifi_wan'

Set proper ipv6 settings for wifi_wan6 iface

uci set mwan3.wifi_wan6=interface
uci set mwan3.wifi_wan6.enabled='0'
uci set mwan3.wifi_wan6.interval='3'
uci set mwan3.wifi_wan6.family='ipv6'
uci add mwan3 condition
uci set mwan3.@condition[-1].interface='wifi_wan6'
uci set mwan3.@condition[-1].track_method='ping'
uci add_list mwan3.@condition[-1].track_ip='2606:4700:4700::1111'
uci add_list mwan3.@condition[-1].track_ip='2001:4860:4860::8888'
uci set mwan3.@condition[-1].reliability='1'
uci set mwan3.@condition[-1].count='1'
uci set mwan3.@condition[-1].timeout='2'
uci set mwan3.@condition[-1].down='3'
uci set mwan3.@condition[-1].up='3'
uci set mwan3.wifi_wan6_member_mwan=member
uci set mwan3.wifi_wan6_member_mwan.interface='wifi_wan6'
uci set mwan3.wifi_wan6_member_mwan.metric='1'
uci set mwan3.wifi_wan6_member_balance=member
uci set mwan3.wifi_wan6_member_balance.interface='wifi_wan6'
uci set mwan3.wifi_wan6_member_balance.weight='1'
uci add_list mwan3.mwan_default.use_member='wifi_wan6_member_mwan'
uci add_list mwan3.balance_default.use_member='wifi_wan6_member_balance'
uci set mwan3.default_rule_ipv6=rule
uci set mwan3.default_rule_ipv6.dest_ip='::/0'
uci set mwan3.default_rule_ipv6.use_policy='mwan_default'
uci set mwan3.default_rule_ipv6.family='ipv6'

LAN interface configuration


Configure a LAN interface accordingly.

uci set network.lan_repeater=interface
uci set network.lan_repeater.proto='relay'
uci set network.lan_repeater.lan_mark='lan'
uci set network.lan_repeater.enabled='1'
uci set network.lan_repeater.network='lan wifi_wan'

Set DHCP settings for LAN interface (disable dhcp on LAN) and enable IPv6 relay on wifi_wan interface and

uci set dhcp.lan.ignore='1'
uci set dhcp.lan.ra='relay'
uci set dhcp.lan.dhcpv6='relay'
uci set dhcp.lan.ndp='relay'
uci set dhcp.wifi_wan=dhcp
uci set dhcp.wifi_wan.ra='relay'
uci set dhcp.wifi_wan.dhcpv6='relay'
uci set dhcp.wifi_wan.master='1'
uci set dhcp.wifi_wan.ndp='relay'

Firewall configuration


Set firewall zone, using WAN firewall zone for newly created WiFi WAN network interface.

uci set firewall.@zone[1].network='wan wan6 mob1s1a1 mob1s2a1 wifi_wan'

Commit changes


Save all the changes and restart the configuration

uci commit
reload_config

Testing the setup

If you've taken all of the steps described above, the configuration is done. But as with any other configuration, it is always wise to test the set up in order to make sure that it works properly.