Manual Gateway Configuration - Revision history

Stephen304 at 15:57, 13 September 2020

2020-09-13T15:57:16Z

Stephen304: Stephen304 moved page Gateway Configuration to Manual Gateway Configuration without leaving a redirect

2020-09-13T15:47:26Z

Stephen304 moved page Gateway Configuration to Manual Gateway Configuration without leaving a redirect

Lurker42o: /* Using Auto YGG */ Change public autoygg gateway.

2020-08-19T00:02:24Z

Using Auto YGG: Change public autoygg gateway.

Lurker42o: Add public gateway address for autoygg.

2020-07-27T02:33:41Z

Add public gateway address for autoygg.

Lurker42o: Move client-side mm-cli instructions to client section.

2020-05-24T18:27:30Z

Move client-side mm-cli instructions to client section.

Lurker42o: Add mm-cli instructions for clients.

2020-05-24T18:26:15Z

Add mm-cli instructions for clients.

Lurker42o at 18:18, 24 May 2020

2020-05-24T18:18:25Z

Lurker42o: Add my gateway info.

2020-05-24T18:01:52Z

Add my gateway info.

Lurker42o: First commit, worst commit

2020-01-17T04:03:35Z

First commit, worst commit

New page

__FORCETOC__
= Diagnostics Commands =

tcpdump -nqi any net 4.2.2.1
ip a | grep 200
# think metric as in "cost" -> higher is lower priority
ip route del default via 192.168.42.1 dev enp0s25
ip route del default via 192.168.42.1 dev enp0s25 metric 700
./build -d # build w/ debug flag
env PPROFLISTEN=localhost:6060 ./yggdrasil -useconffile /etc/yggdrasil/yggdrasil.conf
http://localhost:6060/debug/pprof/
./yggdrasilctl -v getself

= Staps To Configure The Gateway =

Add <code>0.0.0.0/0</code> to <code>IPv4LocalSubnets</code> and enable <code>TunnelRouting</code> in <code>/etc/yggdrasil.conf</code>

TunnelRouting:
{
# Enable or disable tunnel routing.
Enable: true
# IPv4 subnets belonging to this node's end of the tunnels. Only traffic
# from these ranges will be tunnelled.
IPv4LocalSubnets:
[
0.0.0.0/0
]
}

Restart yggdrasil with <code>systemctl restart yggdrasil.service</code> or <code>service yggdrasil restart</code>

Assign an IP/subnet to the yggdrasil interface (<code>tun0</code> or <code>ygg0</code>)

ip addr add 10.42.0.1/16 dev tun0

For every node using the gateway, pick an IP address in the previous subnet and inform yggdrasil of the public key of the node to be associated with the chosen IP

yggdrasilctl addremotesubnet subnet=10.42.0.10/32 box_pub_key=<client_public_key>

Finally, add iptables rules to route / forward traffic to the internet. Replace eth0 with the WAN interface of the gateway

iptables -A FORWARD -i eth0 -j ACCEPT
iptables -A FORWARD -o eth0 -j ACCEPT
iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
echo 1 | tee /proc/sys/net/ipv4/ip_forward

= Steps To Connect Your Mesh Node To A Gateway=

Add <code>0.0.0.0/0</code> to <code>IPv4LocalSubnets</code> and enable <code>TunnelRouting</code> in <code>/etc/yggdrasil.conf</code>

TunnelRouting:
{
# Enable or disable tunnel routing.
Enable: true
# IPv4 subnets belonging to this node's end of the tunnels. Only traffic
# from these ranges will be tunnelled.
IPv4LocalSubnets:
[
0.0.0.0/0
]
}

Restart yggdrasil with <code>systemctl restart yggdrasil.service</code> or <code>service yggdrasil restart</code>

Add the IP address allocated on the gateway for this node to the yggdrasil interface

ip addr add 10.42.0.10/16 dev ygg0

Inform yggdrasil of the gateway node's public key

yggdrasilctl addremotesubnet subnet=0.0.0.0/0 box_pub_key=<gateway_public_key>

If the client device is connected to WAN, add routes to each yggdrasil peer's IP address to override the default route. Replace <code><peer_ip></code> with the IP address of the yggdrasil peer (likely found in yggdrasil.conf), replace <code><wan_gw></code> with the IP address of the router or gateway the client device is connected to (likely 192.168.1.1), and replace <code><wan_dev></code> with the interface name of the WAN port on the client device. Do this for every peer yggdrasil is configured to use.

ip ro add <peer_ip> via <wan_gw> dev <wan_dev>

Finally, replace the default route with one pointing to the gateway node's tunnel IP

ip ro replace default via 10.42.0.1

@@ Line 1: / Line 1: @@
 __FORCETOC__
-{{Info|Our gateway's public key is d5ce5d9e98bf9d5031c0e78a64339915b71e77b808830a719241afb7dd6c8c25. After coordinating with [mailto:lurker@riseup.net our gateway operator], you will get an IPv4 address necessary to complete the [[#Gateway Client Configuration]] steps.}}
+{{Info|These instructions are superseded by autoygg and are retained for informational purposes. See [[Node Setup]] if you wish to connect your node to the internet.}}
-= Gateway Server Configuration =
+This page documents the manual steps to configuring both ends of a mesh gateway. Using these instructions is not recommended, as newer methods exist to automate this setup. These instructions are useful to anyone who wishes to understand how the gateway is configured on both ends, as well as to anyone looking to rewrite the gateway configuration software.
-== Manual Configuration ==
+= Gateway Server Manual Configuration =
 Add <code>0.0.0.0/0</code> to <code>IPv4LocalSubnets</code> and enable <code>TunnelRouting</code> in <code>/etc/yggdrasil.conf</code>
@@ Line 39: / Line 39: @@
 = Gateway Client Configuration =
+== Using mm-cli (obsolete) ==
 This method will work as long as you connect your client device to the Internet during the install.

@@ Line 42: / Line 42: @@
 == Using Auto YGG ==
-Public Gateway Address: 216:9f49:62ff:4170:1081:45fb:553a:1acc
+Public Gateway Address: 201:506e:60d6:bd66:e35c:606:4883:ea9a
 This can be accomplished in LuCi. Navigate to "Network > Internet Gateway (autoygg)."

← Older revision		Revision as of 02:33, 27 July 2020
Line 39:		Line 39:

	= Gateway Client Configuration =		= Gateway Client Configuration =
		+
		+	== Using Auto YGG ==
		+
		+	Public Gateway Address: 216:9f49:62ff:4170:1081:45fb:553a:1acc
		+
		+	This can be accomplished in LuCi. Navigate to "Network > Internet Gateway (autoygg)."

	== Using mm-cli ==		== Using mm-cli ==

@@ Line 4: / Line 4: @@
 = Gateway Server Configuration =
 == Manual Configuration ==
@@ Line 50: / Line 39: @@
 = Gateway Client Configuration =
 Add <code>0.0.0.0/0</code> to <code>IPv4LocalSubnets</code> and enable <code>TunnelRouting</code> in <code>/etc/yggdrasil.conf</code>

@@ Line 3: / Line 3: @@
 {{Info|Our gateway's public key is d5ce5d9e98bf9d5031c0e78a64339915b71e77b808830a719241afb7dd6c8c25. After coordinating with [mailto:lurker@riseup.net our gateway operator], you will get an IPv4 address necessary to complete the [[#Gateway Client Configuration]] steps.}}
-= Diagnostics Commands =
+= Gateway Server Configuration =
- tcpdump -nqi any net 4.2.2.1
+This method will work as long as you connect your client device to the Internet during the install.
- ip a | grep 200
+<pre>
- # think metric as in "cost" -> higher is lower priority
+opkg update
- ip route del default via 192.168.42.1 dev enp0s25
+opkg install python3-pip
- ip route del default via 192.168.42.1 dev enp0s25 metric 700
+pip install mm-cli
- ./build -d # build w/ debug flag
+alias mm="python -m mm_cli
- env PPROFLISTEN=localhost:6060 ./yggdrasil -useconffile /etc/yggdrasil/yggdrasil.conf
+mm cl setgateway d5ce5d9e98bf9d5031c0e78a64339915b71e77b808830a719241afb7dd6c8c25 10.42.0.{Client_IP}/24 10.42.0.1
- http://localhost:6060/debug/pprof/
+</pre>
-= Gateway Server Configuration =
+== Manual Configuration ==
 Add <code>0.0.0.0/0</code> to <code>IPv4LocalSubnets</code> and enable <code>TunnelRouting</code> in <code>/etc/yggdrasil.conf</code>
@@ Line 81: / Line 82: @@
   ip ro replace default via 10.42.0.1

@@ Line 15: / Line 15: @@
   ./yggdrasilctl -v getself
-= Staps To Configure The Gateway =
+= Gateway Server Configuration =
 Add <code>0.0.0.0/0</code> to <code>IPv4LocalSubnets</code> and enable <code>TunnelRouting</code> in <code>/etc/yggdrasil.conf</code>