44net September 2013

44net@mailman.ampr.org

48 participants
32 discussions

From Scratch
by Rosalio Salas 08 Sep '13

08 Sep '13

I need some help with where to download jnos from. Seems all the websites I find to download JNOS are offline. I have Debian loaded on computer and working, but JNOS software is eluding me. Thanks & 73s -- Leo Salas PO Box 6103 Paris, TX 75461-6103 972-510-5157 n5jep1(a)gmail.com

4 9

NetScreen NS-25 IPSEC Devices
by William Bressette 07 Sep '13

07 Sep '13

Hey all I have to older but still working fine still. These devices have been upgraded to Advanced edition and will support 500 IPSEC tunnels each They do BGP, OSPF, RIP, GRE Tunnels etc. I was thinking with all of the VPN talk on here do we want to use these to setup either 2 highly available IPSEC termination point or 2 one in NA and 1 in Europe so that we have to concentration points. If anyone has a 1 or 2 U rack space in a data center which can host these devices please let me know and we can try and set something up. Note Devices cost 0$

1 0

amprnet routing made simple
by Brian Rogers 06 Sep '13

06 Sep '13

http://n1uro.ampr.org/cgi-bin/safe-config.cgi will set up a *very* basic system for amprnet ipencap routing pending you have a tunnel interface already configured. Field 1: 169.228.66.251 <- ucsd Field 2: 44.0.0.1 <- ucsd Field 3: 44.x.x.x <- your amprnet gw IP Field 4: eth0/wlan0/wifi0/etc The rest gives you basic IPTable rules to allow IPEncap and ax25 frames through your firewall, route rules, and a basic route table. Load your favorite ripv2-daemon and configure it to populate "table 1" and you'll be off and running within the first rip broadcast (faster if you run the munge script - no need to wait for a broadcast). Mine looks exactly as the cgi prints: Add this to your rc.local, or whatever init script you wish to make: # allow IPEncapsulation and ax25 frames to gate through... iptables -I INPUT 1 -j ACCEPT --proto 4 iptables -I INPUT 1 -j ACCEPT --proto 93 iptables -I OUTPUT 1 -j ACCEPT --proto 4 iptables -I OUTPUT 1 -j ACCEPT --proto 93 iptables -I FORWARD 1 -j ACCEPT --proto 4 iptables -I FORWARD 1 -j ACCEPT --proto 93 # Create a policy to encap forward to your host... ip rule add from 44/8 pref 1 table 1 ip rule add to 44/8 pref 1 table 1 # Now let's set the routing accordingly... ip route add 44/8 via 169.228.66.251 dev tunl0 onlink src 44.88.0.9 table 1 ip route add default via 169.228.66.251 dev tunl0 onlink table 1 *Whether or not you're SAFed (source address filtered) this should work for you. -- 73 de Brian Rogers - N1URO email: <n1uro(a)n1uro.ampr.org> Web: http://www.n1uro.net/ Ampr1: http://n1uro.ampr.org/ Ampr2: http://nos.n1uro.ampr.org Linux Amateur Radio Services axMail-Fax & URONode AmprNet coordinator for: Connecticut, Delaware, Maine, Massachusetts, New Hampshire, Pennsylvania, Rhode Island, and Vermont.

3 5

BGP on commercial ISP lines
by Assi Friedman 06 Sep '13

06 Sep '13

So how are people dealing with running BGP over home class internet service? With ISPs becoming more and more restrictive, I can't see any ISP in the US allowing this. While not 100% sure, I believe running BGP would be in violation of the garden variety usage agreement that is tailored towards "home use" and prohibits any service that falls into the business class traffic. Also, how does BGP interoperate with the current default route of non 44 op to mirrorshades? Did Brian remove any BGP advertised subdomain from the default route? Assi KK7KX/4X1KX (www.kiloxray.com) -----Original Message----- > > I don't agree with that. > People who want to experiment with BGP are free and welcome to do > that, but there is no and there should not be any "deprecating IPIP > tunnels".

2 1

Re: [44net] 44Net Digest, Vol 2, Issue 139
by Rob Janssen 06 Sep '13

06 Sep '13

> Subject: > Re: [44net] amprnet routing made simple > From: > K7VE - John <k7ve(a)k7ve.org> > Date: > 09/06/2013 06:58 PM > > To: > n1uro(a)n1uro.ampr.org, AMPRNet working group <44net(a)hamradio.ucsd.edu> > > > This may be a stop gap for low traffic sites, but I think the goal is to > avoid sending everything through 44.0.0.1. This solution is not sending "everything through 44.0.0.1" Only traffic incoming from non-44 internet addresses to your net-44 station is replied via that path. All other traffic is going via direct tunnels. > We should be working toward deprecating hacked solutions, like the IPIP > tunnel set. I don't agree with that. People who want to experiment with BGP are free and welcome to do that, but there is no and there should not be any "deprecating IPIP tunnels". Rob

2 1

Routing and encap minor issue in JNOS
by Mark Phillips 05 Sep '13

05 Sep '13

Hi all, Firstly, if this has been done to death before please forgive me. I could not find anything in the archive. Secondly, I have noticed an "issue" with the routing and encap within JNOS. It would seem that if a 44 station tries to contact me all works fine. For example I can communicate with N2NOV and GB7CIP exactly how you would expect. However, if a "public" address contacts me, I get their connect requests in encap format via uscd but then I send them my response directly rather than back the same way it came. This means that there can be no public access to my system via the Internet. What have I missed? JNOS will not allow me to set the default route via encap/uscd and I don't really want to send all my traffic (eg DNS lookups) via there anyway. How can I respond to connections in the same way that I received them? Thinking about it, it makes sense that JNOS replies directly. Once it unpacks the packet and discovers an encap'd one inside it will work on that one exclusively. Thanks Mark

4 9

jnos
by Eric Fort 05 Sep '13

05 Sep '13

Does a version of jnos exist that is stripped of all it's networking code thus just offering the the bbs parts? AF6EP

2 2

Something simple
by Rod Ekholm 03 Sep '13

03 Sep '13

I am interested in something simple. I am not interested in creating a Linux box to do my routing, as I see no need for it. It's almost worse than having a network that is vendor specific!! I don't tell you how to run your internet.. you don't tell me what router I have to use. I use Mikrotik for my edge technology, just because it's what I am familiar with. For me it's easy enough. I am interested in creating some links with others, hopefully in the NW towards the Seattle area. I have my own system design that I am planning on implementing starting early this fall. I have no interest however in trying to use some script (nice work on it though..) to make it work, but would rather have some common assembly of networks that can connect to each other. Unfortunatley, until this is done in a large enough fashion, it looks like i am talking static routes to and from some other networks. My intention is not to rock the boat of what has been done here, but it seem like there is little direction of how the network is assembled and coming to a common point of presence. until one person or gorup comes up and offers some stability of how to route the network accordingly, I fear my use of AMPR is only for some of it's tunneling ability with the use of our 44/8 addressing. I had no intentions of it before, so if I end up not using them later, now loss on my end. Let me know if anyone is interested in creating some more static links, and / or trying to do some sort of edge router that can have an open communications standard, and not a customized (could otherwise spelled proprietary) protocol in the middle. Thanks to you all and have a great day! -- Rod Ekholm KC7AAD kc7aad(a)gmail.com Spokane, WA (509) 435-3400

8 23

Chris Smith G1FEF?
by Brian Kantor 02 Sep '13

02 Sep '13

Has anyone heard from Chris Smith, G1FEF in the past few months? All my email to him has gone unanswered so I'm worried that he might be ill. - Brian

4 3

Re: [44net] ripv2
by Rob Janssen 02 Sep '13

02 Sep '13

> Subject: > [44net] ripv2 > From: > Brian Rogers <n1uro(a)n1uro.ampr.org> > Date: > 09/01/2013 12:12 AM > > To: > AMPRNet working group <44net(a)hamradio.ucsd.edu> > > > There appears to be at least one valid route missing in the rip > broadcasts. aa6hf is not received via rip however it is using the munge > script... is there an issue in the portal? I receive the routes from RIP and his route is OK. 44.17.0.128/31 via 67.49.91.65 dev tunl0 proto ampr-ripd onlink

5 5

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

44net September 2013