36930392fd0cb261d74fca315e075ca928bfc372
dn42-on-OpenWRT.md
... | ... | @@ -6,19 +6,21 @@ The intended target is a home router, acting as the default gateway for its LAN |
6 | 6 | |
7 | 7 | This documentation assumes that the LAN is addressed in the dn42 space (`172.22.0.0/15`), but it's not a big deal to add NAT if it's not. |
8 | 8 | |
9 | -## Configuration |
|
9 | +## Initial configuration |
|
10 | 10 | |
11 | -### Peerings |
|
11 | + |
|
12 | + |
|
13 | +## Peerings |
|
12 | 14 | |
13 | 15 | Nothing fancy: use GRE tunnels, openvpn, anything. Don't forget to install the relevant packages with `opkg` (`kmod-gre` for instance). |
14 | 16 | |
15 | 17 | You can't manage GRE tunnels with OpenWRT, so just create them in `/etc/rc.local` (and assign addresses if needed). |
16 | 18 | |
17 | -### BGP |
|
19 | +## BGP |
|
18 | 20 | |
19 | 21 | `quagga` and `bird` are both packaged in OpenWRT. Note that quagga is split in many packages, you probably need `quagga-bgpd`, `quagga-vtysh` and `quagga-zebra`. |
20 | 22 | |
21 | -### Interface definition |
|
23 | +## Interface definition |
|
22 | 24 | |
23 | 25 | This is needed so that OpenWRT is aware of the new interfaces (for firewall and stuff). |
24 | 26 | |
... | ... | @@ -28,7 +30,7 @@ In `/etc/config/network`, add entries for each dn42 interface: |
28 | 30 | option ifname tun-peer1 |
29 | 31 | option proto none |
30 | 32 | |
31 | -### Firewall |
|
33 | +## Firewall |
|
32 | 34 | |
33 | 35 | There are two goals: |
34 | 36 | |
... | ... | @@ -37,7 +39,7 @@ There are two goals: |
37 | 39 | |
38 | 40 | Everything is done in `/etc/config/firewall`. |
39 | 41 | |
40 | -#### Zone declaration |
|
42 | +### Zone declaration |
|
41 | 43 | |
42 | 44 | config zone |
43 | 45 | option name dn42 |
... | ... | @@ -50,7 +52,7 @@ If you need to NAT your home network into dn42, you probably just need to add: |
50 | 52 | |
51 | 53 | option masq 1 |
52 | 54 | |
53 | -#### dn42 ↔ LAN forwarding |
|
55 | +### dn42 ↔ LAN forwarding |
|
54 | 56 | |
55 | 57 | config forwarding |
56 | 58 | option src lan |
... | ... | @@ -63,9 +65,9 @@ If you're confident enough, you can also forward dn42 into your LAN: |
63 | 65 | option dest lan |
64 | 66 | |
65 | 67 | |
66 | -#### dn42 ↔ dn42 forwarding |
|
68 | +### dn42 ↔ dn42 forwarding |
|
67 | 69 | |
68 | 70 | This is more tricky. |
69 | 71 | |
70 | -### DNS |
|
72 | +## DNS |
|
71 | 73 |