WIKI/public
1
Fork 0
Code

new files

Browse Source
This commit is contained in:
Michael H.G. Schmidt 2023-07-21 22:51:44 +02:00
parent 87d469573f
commit 3ec3649989
2 changed files with 64 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

44
migrate/ipfire_ipalias.txt Normal file
View File

@ -0,0 +1,44 @@
====== Howto add IP aliases on ppp0 in IPfire ======
Let's say you have a /29 network on your DSL subscriber (dial) line: 212.218.10.64/29.
In that case you could use six ip adresses (65 to 70) as public addresses for machines or services behind your firewall.
According to this [[https://community.ipfire.org/t/adding-aliases-to-red-interface/552|thread]] and this [[https://community.ipfire.org/t/a-red-interface-in-pppoe-and-have-two-public-ip/8014|thread]] it is not possible. But it is possible - and i will show you how.
1.) Enable SSH access in ipfire and connect to ipfire as root.
2.) Add the following lines to the file /var/ipfire/ethernet/aliases:
212.218.10.65,on,RED2
212.218.10.66,on,RED3
212.218.10.67,on,RED4
212.218.10.68,on,RED5
212.218.10.69,on,RED6
212.218.10.70,on,RED7
3.) Create a new file (this will configure your ip addresses)
/etc/rc.d/init.d/networking/red.up/02-aliases:
ip addr add 212.218.10.65/29 dev ppp0
ip addr add 212.218.10.66/29 dev ppp0
ip addr add 212.218.10.67/29 dev ppp0
ip addr add 212.218.10.68/29 dev ppp0
ip addr add 212.218.10.69/29 dev ppp0
ip addr add 212.218.10.70/29 dev ppp0
ip addr show ppp0
4.) Make it executable!
chmod 0755 /etc/rc.d/init.d/networking/red.up/02-aliases
5.) Restart your Internet connection
READY.
- The new ip addresses will be automatically configured every time the firewall reconnects or reboots.
- You will see the addresses in the ipfire menu -> network -> aliases
- You can use the new addresses in the firewall config - they will appear as RED2 - RED7
- The warning "Aliases will not be active unless your RED interface is STATIC" can be safely ignored from now on
Have fun ;-)

20
migrate/ipfire_ipalias_green.txt Normal file
View File

@ -0,0 +1,20 @@
====== Howto add a IP alias on the "green" interface in IPfire ======
Let's say you have a an internal /24 network and you want to add a secondary (local) IP address (this could be useful in case you remove an old machine from the network and your new firewall is on a different address - but your new firewall should offer on of it's services on the old address).
In the ipfire GUI this is not possible. But you can use the file "rc.local" (which is executed while the firewall boots).
1.) Add the following lines to the file /etc/sysconfig/rc.local:
ip addr add 192.168.89.1/24 dev green0
ip addr show green0
2.) Make it executable:
chmod 0755 /etc/sysconfig/rc.local
3.) Reboot your firewall or execute the script manually
READY.
The new ip address will be automatically configured every time the firewall reboots.