FF@Home - OpenBSD Doku ergänzt

Community/Bildung/FF@home/OpenBSD.page

@@ -1,3 +1,155 @@
 # Installation
 - <https://www.tumfatig.net/20200530/openbsd-6-7-on-pc-engines-apu4d4/>
-- <https://hofmeyr.de/OpenBSD%20on%20APU4/>
+- <https://hofmeyr.de/OpenBSD%20on%20APU4/>
+
+# Allgemein
+
+
+
+# Interfaces
+/etc/hostname.em0
+    
+    rdomain 1
+    inet 192.168.2.50 255.255.255.0      # Die statische IP-Adresse im eigenen lokalen Netz
+    inet6 autoconf
+
+/etc/hostname.lo2
+
+    inet 193.43.220.131 255.255.255.255  # Die Public-IP der APU
+
+/etc/hostname.tap1
+
+    inet 192.168.38.1 255.255.255.0      # Die statische IP-Adresse im tap1-Netz (lan)
+
+/etc/hostname.tap2
+
+    inet 193.43.220.163 255.255.255.224  # Die statische IP-Adresse im tap2-Netz (wan)
+
+# Tinc
+
+    etc/tinc/
+    |-- lan
+    |   |-- hosts
+    |   |   |-- apu
+    |   |   `-- laptop
+    |   |-- rsa_key.priv
+    |   `-- tinc.conf
+    `-- wan
+        |-- hosts
+        |   |-- city
+        |   |-- hoerde
+        |   `-- nordstadt
+        |-- rsa_key.priv
+        `-- tinc.conf
+
+/etc/tinc/wan/tinc.conf
+
+    Name = city
+    Device = /dev/tap2
+    Mode = switch
+    AddressFamily = ipv4
+    BindToAddress = 192.168.2.50
+    Port = 656
+    ConnectTo = nordstadt
+    ConnectTo = hoerde
+
+Damit beide tinc Instanzen parallel laufen können musste das dazugehörige rc-Skript angepasst werden. 
+
+z.B.: /etc/rc.d/tincd_wan
+
+    #!/bin/ksh
+
+    daemon="/usr/local/sbin/tincd"
+    daemon_flags="-U _tinc --chroot --net=wan"
+    daemon_rtable="1"
+
+    . /etc/rc.d/rc.subr
+
+    rc_stop() {
+            /usr/local/sbin/tincd -k --net=wan
+    }
+
+    rc_cmd $1
+
+Analog dazu auch /etc/rc.d/tincd_lan anlegen und beide enablen.
+
+    rcctl enable tincd_wan
+    rcctl enable tincd_lan
+
+# Bird
+
+/etc/bird.conf
+
+    router id 193.43.220.131;
+
+    define AS35675_all = [
+            193.43.220.0/23
+            ];
+
+    define AS35675_any = [
+            193.43.220.0/23+
+            ];
+
+    protocol device device0 {
+            scan time 10;
+    }
+
+
+    /* wg. BSD: */
+    protocol direct direct0 {
+            ipv4;
+    }
+
+    protocol kernel kernel0 {
+            learn on;
+            scan time 120;
+            ipv4 {
+                    import all;
+                    export where source != RTS_DEVICE;
+            };
+    }
+
+
+    ipv4 table fib1table;
+
+    protocol kernel kernel1 {
+            kernel table 1;
+            learn on;
+            scan time 120;
+            ipv4 {
+                    table fib1table;
+                    import all;
+                    export where source != RTS_DEVICE;
+            };
+    }
+
+    protocol static static1 {
+            ipv4 {
+                    table fib1table;
+            };
+            route 0.0.0.0/0 via 192.168.2.2;
+    }
+
+    protocol ospf ospfwan {
+            ipv4 {
+                    import all;
+                    export where net ~ AS35675_any;
+            };
+            area 0.0.0.0 {
+                    stubnet 193.43.220.131/32 { cost 1; };
+                    interface "tap2" {
+                            type broadcast;
+                            cost 100;
+                    };
+            };
+    }
+
+Den bird enablen.
+
+    rcctl enable bird
+
+# Sonstiges
+
+/etc/sysctl.conf
+
+    net.inet.ip.forwarding=1