WIKI/public
1
Fork 0
Code

.

Browse Source
This commit is contained in:
Michael H.G. Schmidt 2023-07-21 22:59:40 +02:00
parent 3ec3649989
commit ed3b77d08f
2 changed files with 24 additions and 13 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

23
migrate/ipfire_ipalias.txt → migrate/ipfire_ipalias.md
View File

@ -1,25 +1,29 @@
====== Howto add IP aliases on ppp0 in IPfire ====== # Howto add IP aliases on ppp0 in IPfire
Let's say you have a /29 network on your DSL subscriber (dial) line: 212.218.10.64/29. Let's say you have a /29 network on your DSL subscriber (dial) line: 212.218.10.64/29.
In that case you could use six ip adresses (65 to 70) as public addresses for machines or services behind your firewall. In that case you could use six ip adresses (65 to 70) as public addresses for machines or services behind your firewall.
According to this [[https://community.ipfire.org/t/adding-aliases-to-red-interface/552|thread]] and this [[https://community.ipfire.org/t/a-red-interface-in-pppoe-and-have-two-public-ip/8014|thread]] it is not possible. But it is possible - and i will show you how. According to this [thread](https://community.ipfire.org/t/adding-aliases-to-red-interface/552) and this [thread](https://community.ipfire.org/t/a-red-interface-in-pppoe-and-have-two-public-ip/8014|thread) it is not possible. But it *is* possible - and i will show you how.
1.) Enable SSH access in ipfire and connect to ipfire as root. ## 1.) Enable SSH access in ipfire and connect to ipfire as root.
2.) Add the following lines to the file /var/ipfire/ethernet/aliases:
## 2.) Add the following lines to the file /var/ipfire/ethernet/aliases:
```bash
212.218.10.65,on,RED2 212.218.10.65,on,RED2
212.218.10.66,on,RED3 212.218.10.66,on,RED3
212.218.10.67,on,RED4 212.218.10.67,on,RED4
212.218.10.68,on,RED5 212.218.10.68,on,RED5
212.218.10.69,on,RED6 212.218.10.69,on,RED6
212.218.10.70,on,RED7 212.218.10.70,on,RED7
```
3.) Create a new file (this will configure your ip addresses) ## 3.) Create a new file (this will configure your ip addresses)
/etc/rc.d/init.d/networking/red.up/02-aliases: /etc/rc.d/init.d/networking/red.up/02-aliases:
```bash
ip addr add 212.218.10.65/29 dev ppp0 ip addr add 212.218.10.65/29 dev ppp0
ip addr add 212.218.10.66/29 dev ppp0 ip addr add 212.218.10.66/29 dev ppp0
ip addr add 212.218.10.67/29 dev ppp0 ip addr add 212.218.10.67/29 dev ppp0
@ -27,12 +31,15 @@ According to this [[https://community.ipfire.org/t/adding-aliases-to-red-interfa
ip addr add 212.218.10.69/29 dev ppp0 ip addr add 212.218.10.69/29 dev ppp0
ip addr add 212.218.10.70/29 dev ppp0 ip addr add 212.218.10.70/29 dev ppp0
ip addr show ppp0 ip addr show ppp0
```
4.) Make it executable! ## 4.) Make it executable!
chmod 0755 /etc/rc.d/init.d/networking/red.up/02-aliases ```bash
hmod 0755 /etc/rc.d/init.d/networking/red.up/02-aliases
```
5.) Restart your Internet connection ## 5.) Restart your Internet connection
READY. READY.

12
migrate/ipfire_ipalias_green.txt → migrate/ipfire_ipalias_green.md
View File

@ -1,19 +1,23 @@
====== Howto add a IP alias on the "green" interface in IPfire ====== # Howto add a IP alias on the "green" interface in IPfire
Let's say you have a an internal /24 network and you want to add a secondary (local) IP address (this could be useful in case you remove an old machine from the network and your new firewall is on a different address - but your new firewall should offer on of it's services on the old address). Let's say you have a an internal /24 network and you want to add a secondary (local) IP address (this could be useful in case you remove an old machine from the network and your new firewall is on a different address - but your new firewall should offer on of it's services on the old address).
In the ipfire GUI this is not possible. But you can use the file "rc.local" (which is executed while the firewall boots). In the ipfire GUI this is not possible. But you can use the file "rc.local" (which is executed while the firewall boots).
1.) Add the following lines to the file /etc/sysconfig/rc.local: ## 1.) Add the following lines to the file /etc/sysconfig/rc.local:
```bash
ip addr add 192.168.89.1/24 dev green0 ip addr add 192.168.89.1/24 dev green0
ip addr show green0 ip addr show green0
```
2.) Make it executable: ## 2.) Make it executable:
```bash
chmod 0755 /etc/sysconfig/rc.local chmod 0755 /etc/sysconfig/rc.local
```
3.) Reboot your firewall or execute the script manually ## 3.) Reboot your firewall or execute the script manually
READY. READY.