44net

44net@mailman.ampr.org

3196 discussions

Help Not receiving ampr-ripd encap route broadcast
by Jose Ng 15 Mar '16

15 Mar '16

Last year I followed this instructions http://www.qsl.net/kb9mwr/wapr/tcpip/ampr-ripd.html and was able to get a Amprnet Gateway working on a Raspberry Pi 2 with a second USB Ethernet and VPN working OK. Few months later, I have problem connecting with VPN. i found out later, I have 2 IPs one static and one dynamic on the RPI. This was due to the new dhcpcd.conf implementation. No longer you declare the static IP in interfaces and some say to add it at the end of dhcpcd.conf. I disable dhcpcd at boot and now 1 static IP and no trouble with VPN. Now, I have problem not receiving the ampr-ripd encap route broadcast. ip route show table 44 only shows: default via 169.228.66.251 dev tunl0 onlink 44.163.22.0/24 dev eth1 scope link 44.163.22.128/25 dev tun0 scope link tcpdump -i etho proto 4 monitor for a long time a no broadcast I use this tool to ping 44.163.22.1 http://yo2tm.ampr.org/nettools.php 100% packet lost But with tcpdump -i eth0 proto 4 it shows the ping arriving but my gateway with no route then no answer: tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on eth0, link-type EN10MB (Ethernet), capture size 65535 bytes 00:33:08.740142 IP mail.yo2loj.ro > 192.168.1.112: IP yo2tm.ampr.org > onx.hp2at.ampr.org: ICMP echo request, id 44708, seq 1, length 64 (ipip-proto-4) How can I diagnose why my ampr-ripd is not receiving the broadcast? Any tools? Jose / HP2AT

2 1

Re: [44net] OpenVPN
by Steve L 14 Mar '16

14 Mar '16

Brian, thanks for the update. I know I asked before on how to build openvpn server keys and other configuration details that will let a openvpn server I build work with any hams lotw key clients that has previously documented: http://wiki.ampr.org/wiki/AMPRNet_VPN This is what I have built my own generated certificate authority, server keys, with before using the ./clean-all ./build-ca ./build-key-server server ./build-key client1 ./build-dh I could really use something detailed on the values for the keys and certificates parameters to make a server work with the lotw based keys Its not clear to me where one gets the the LoTW root CA certificate(s) that need to be installed on the server. And I assume these are Diffie hellman parameters? Steve

2 2

ideas to uutomatic updates of gateway file to Cisco Routers ?
by R P 12 Mar '16

12 Mar '16

Hi there My CS8251 works very well I need a idea how to make it get the Updated encap file automatically I do it now by Cut and paste but know that TFTP can do the job as well I need a solution that this can be done automatic (by batch or script) Any ideas , Solutions welcome Regards Ronen - 4Z4ZQ http://www.ronen.org Ronen Pinchooks (4Z4ZQ) WebSite<http://www.ronen.org/> www.ronen.org ronen.org (Ronen Pinchooks (4Z4ZQ) WebSite) is hosted by domainavenue.com

5 12

Re: [44net] ideas to uutomatic updates of gateway file to Cisco Routers ?
by Assi Friedman 11 Mar '16

11 Mar '16

Ronen: Keep in mind that TFTP is horribly insecure and not very robust. It should only be used on local area networks. Assi -----Original Message----- From: 44Net [mailto:44net-bounces+assi=kiloxray.com@hamradio.ucsd.edu] On Behalf Of R P Sent: Friday, March 11, 2016 12:33 PM To: AMPRNet working group <44net(a)hamradio.ucsd.edu> Subject: Re: [44net] ideas to uutomatic updates of gateway file to Cisco Routers ? (Please trim inclusions from previous messages) _______________________________________________ I have made some tests with uploading config file to cisco in few ways The Telnet way is very slow it take to upload the whole gateways command about 5 minutes Today i have done config network (it is doing TFTP for the config file ) the whole procedure took 3 seconds The disadvantage that this way require TFTP server ... but i know it can be done with web also i will check tat too ... The script is also very simple all it have to do is to connect ... to wait for # prompt then to give the command conf network and to give some parameters such as the TFTP server address and file name and in the end to wait for OK When i will have fully automatic and running script (i will have to ask some of the local Script gurus to make it for me ) i will post it here and update the WIKI page Regards Ronen - 4Z4ZQ http://www.ronen.org

2 1

Re: [44net] need someone that use Cisco with Policy routing
by Jesse Hindmarsh 11 Mar '16

11 Mar '16

Ronen, Below is a code snippet I use on my AmprNet router to direct any traffic with a 44/8 source or destination address to use Tunnel1 as my default interface. This allows any non-44 sourced traffic to route back to UCSD. The “ip local policy” command tells the router to apply the route-map to any locally generated traffic. ip local policy route-map NET44-ROUTE-MAP interface Loopback0 ip address 44.56.193.1 255.255.255.0 interface Tunnel1 description Default AMPRNet tunnel ip unnumbered Loopback0 ip tcp adjust-mss 1360 tunnel source 24.229.88.253 tunnel destination 169.228.66.251 tunnel mode ipip interface FastEthernet0/1 ip address 44.56.192.254 255.255.255.240 ip policy route-map NET44-ROUTE-MAP duplex auto speed auto ip access-list extended NET44-PBR permit ip any 44.0.0.0 0.255.255.255 permit ip 44.0.0.0 0.255.255.255 any route-map NET44-ROUTE-MAP permit 10 match ip address NET44-PBR set default interface Tunnel1 Thanks Jesse - WC3XS On 3/11/16, 1:57 PM, "44Net on behalf of R P" <44net-bounces+jesse=hindmarsh.cc(a)hamradio.ucsd.edu on behalf of ronenp(a)hotmail.com> wrote: >(Please trim inclusions from previous messages) >_______________________________________________ >Hi there > >Is there any one that use Cisco as Gateway and use Policy routing for redirecting the 44 Net Traffic ? > >I would like to get the Policy routing lines and the access list that belong to it > >and also the static route command specially the one that refer to the default route and to the route to AMPR Gateway (the main 44 net router) > >I am writing in the ampr wiki page how to set up a gateway with Cisco Router and i cant succeed to make my policy route work correct and dont want to publish example that doesn't work > >Thanks in advance > >Ronen - 4Z4ZQ > >http://www.ronen.org > >Ronen Pinchooks (4Z4ZQ) WebSite<http://www.ronen.org/> >www.ronen.org >ronen.org (Ronen Pinchooks (4Z4ZQ) WebSite) is hosted by domainavenue.com > > >

1 0

need someone that use Cisco with Policy routing
by R P 11 Mar '16

11 Mar '16

Hi there Is there any one that use Cisco as Gateway and use Policy routing for redirecting the 44 Net Traffic ? I would like to get the Policy routing lines and the access list that belong to it and also the static route command specially the one that refer to the default route and to the route to AMPR Gateway (the main 44 net router) I am writing in the ampr wiki page how to set up a gateway with Cisco Router and i cant succeed to make my policy route work correct and dont want to publish example that doesn't work Thanks in advance Ronen - 4Z4ZQ http://www.ronen.org Ronen Pinchooks (4Z4ZQ) WebSite<http://www.ronen.org/> www.ronen.org ronen.org (Ronen Pinchooks (4Z4ZQ) WebSite) is hosted by domainavenue.com

1 0

Re: [44net] Is there raceroutre machine on 44 net available forpublic ?
by Rob Janssen 10 Mar '16

10 Mar '16

> We are not in a real mesh. We are in a star topology from each node. > A real mesh would mean that each node knows its neighbourgs (of course ) AND > is also > Able to handle traffic for its neighbourgs. That not the case if I'm right. This is not right, the IPIP network (at least when properly implemented) is a full mesh. All nodes can send traffic to all other nodes without having to rely on a central node or a neighbor other than the destination. Technically one can even send traffic to "the wrong node" and it might forward it to the correct endpoint, but that is not guaranteed to work because not all nodes allow that in their firewall rules. The only thing that operates in a star fashion is the distribution of routing information using RIP. It would be perfectly possible to setup a second node that sends this same information, to cover the case where that central node goes down and the other nodes gradually lose their routing info. Rob

6 7

Re: [44net] Is there raceroutre machine on 44 net available forpublic ?
by Rob Janssen 10 Mar '16

10 Mar '16

> And there comes nice feature > of ampr-ripd program by Marius YO2LOJ: > in case of missing or not broadcasted > RIPv4 transmission, it keeps LASTLY > received data, thus preserving routing table. But of course only for completely lost transmissions. Some time ago I was hunting a problem where I apparently had packet loss in RIP transmissions, likely because they are sent in a big burst and may overflow buffers or exceed rate limits somewhere. In that case I was randomly losing routes. I kind of fixed that by increasing the timeout on routes to two hours (default was much lower, 15 minutes I think). Also when something would break down that resulted in e.g. the RIP server sending only info about 44.0.0.0/8 in a single packet and not all the other gateways (e.g. due to an empty result from a database query due to some outside issue), the routes would still be lost. It is always difficult to prevent all possible mishaps. Sending updates from different sources will also not prevent all problems (after all there must be a single source of all the info that is being distributed, or we would be faced with two portal systems and the obligation to always register and update both). Rob

4 3

Re: [44net] OpenVPN
by Steve L 10 Mar '16

10 Mar '16

I haven't heard back from Tal. Is there anyone else who share the details on how to build the server keys so that they work with lotw client based certificates? Steve, KB9MWR >Hello, >The time here is 23:53 and i'm not next to my computer. >Tomorrow I'll send configuration file for the openvpn server and one to the >client, also i have script that generate key files & config files for >clients. > >Sorry that i can't send them now. > >Regards, >Tal. > >>Brian, thanks for the update. >> >>I know I asked before on how to build openvpn server keys and other >>configuration details that will let a openvpn server I build work with >>any hams lotw key clients that has previously documented: >> >>http://wiki.ampr.org/wiki/AMPRNet_VPN >> >>This is what I have built my own generated certificate authority, >>server keys, with before using the >> >>./clean-all >>./build-ca >>./build-key-server server >>./build-key client1 >>./build-dh >> >>I could really use something detailed on the values for the keys and >>certificates parameters to make a server work with the lotw based keys >> >>Its not clear to me where one gets the the LoTW root CA certificate(s) >>that need to be installed on the server. And I assume these are >>Diffie hellman parameters? >> >>Steve

1 0

Re: [44net] Documentation on the AMPRNet network
by Brian Kantor 10 Mar '16

10 Mar '16

I wish there were. There was an explanation in the NOSIntro book by Ian Wade which is out of print (but PDFs of it have shown up on line - for example, there is something at QSL.net, and it's available used from Amazon). There really should be an article in the wiki but no one has written it yet. - Brian On Wed, Mar 09, 2016 at 07:08:52PM -0500, Jerry Kutche (N9LYA) wrote: > Is there any reading material online for NET44 and how it works.. > Documentation, maybe also for the Ip Coordinator to gain a grip.. Thanks...

1 1

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

44net