Bringing Back the 1-Port Router

Ok, now I need to set up a Raspberry Pi 1-Port Router.  I know how to accomplish this (see the article here), I just have to go through the motions to implement it.  Strange - I am on SD052; I'm going to have to quit buying these things and start reusing the ones that I already have.  The setup was as follows:

sudo apt-get update
sudo apt-get upgrade
sudo apt-get install vlan shorewall

Then to get webmin setup and running, I did the following:

I added to /etc/apt/sources.list -

deb http://download.webmin.com/download/repository sarge contrib

I then got the key for the webmin repository -

sudo wget http://www.webmin.com/jcameron-key.asc
sudo apt-key add jcameron-key.asc

I then installed webmin -

sudo apt-get install perl libnet-ssleay-perl openssl libauthen-pam-perl libpam-runtime libio-pty-perl apt-show-versions python
sudo apt-get install webmin

I am going to use the 1-Port Router to connect between three different vlans, vlan4, vlan6, and vlan8.  Webmin will be used to setup the routing functions on Shorewall so that I can do the following:

1. Have a firewall facing out towards vlan4 from vlan6; supply dhcp services to vlan4; allow only traffic from the Mac Mini to vlan4 from vlan6; and provide a one-to-one NAT ip from my WD MyCloud onto vlan4.
2. Have a firewall facing out towards vlan8 from vlan6; supply dhcp services to vlan8; allow only traffic from the Mac Mini to vlan8 from vlan6; and provide a one-to-one NAP ip from my ubuntuServer VM cluster.

I am going to accomplish this by the following setup (TBD).

Cluster#1 - 802.1q at L2 Along with Routing at L3 in the 1-Port Router

Ok, I am still playing around here with routing and 802.1q.  My latest endeavor is using Quagga along with shorewall to produce some useful home appliances.  Unfortunately, this is all going to be running at a 100MHz clip on Ethernet rather than the nice 1GHz Ethernet lines I have running through the house.  However, I get to play with the outcome.

When I last broached the subject here, I had added the 802.1q capability to the RPi Raspbian load.  I have since been adding a number of RPis, without a clear purpose to what I would do with them.  I now have a quad RPi cluster (shown in the image above) that I can use for some of the networking experiments.  The latest experiment is to setup each RPi in the cluster with a Quagga and shorewall routing load.  Shorewall is primarily a firewall, but with some alterations to the definition files, it will serve its purpose as a router capability.  The Quagga software allows me to experiment with OSPF and BGP routing protocols, the idea being that I can simply configure them and drop them into my network at home at any place and the routing tables will automatically be built for me.

My idea is to use the normal Ethernet interface to the RPi as the connection point to the other Quagga/shorewall RPis on a separate no-mans land VLAN.  I would then use 802.1q to trunk my way into VLAN switches which would then distribute the information as necessary.  I can also modify the way that I am connecting and actually have a VLAN switch capability on an RPi with attached USB hub running to USB-to-Ethernet adapters, each "port" having a trunk line or untagged port.  This of course gets somewhat expensive since the cheapest I can find those adapters is $6.99 at amazon.  I wish that I could find an Ethernet switch adapter that would allow me to experiment with an RPi controller.

Update: as you can see from the new site picture, I have been able to setup the RPi cluster along with some cheap ($6.99) USB to Ethernet adapters.  Now the fun begins!

Thinking of Setting Up an OpenVPN Server with 1-Port Capability for External Connections

I was thinking back to the 1-Port router idea and now I am thinking of adding an OpenVPN to the mix.  I could have an encryption key on both sides of the connection to give my setup a little extra protection.  So that would mean: (1) have an RPi running an OpenVPN server (allowing connection from the outside); (2) have a second RPi running an OpenVPN client/OpenWRT; and (3) let a connection go through the second RPi to my WorkNet Guest wireless to my home network.

I could have most of the ideas that I have come up with resident in this setup.  In addition, I would still like to have a selection switch that would give me some different options, like TOR, w/wo OpenVPN, etc.  The bubble chart would look like:

Got WiFi adapters TL-Link WN725N to Work

After getting the Netgear wifi adapters to work with my bring-to-work RPi box, I took them out and put them on the RPi at the back of my new ASUS touchscreen.  I then went to MicroCenter and got a couple more, this time they were TL-Link WN725N.  Well, when I booted the RPi box up it didn't work.  Simple explanation is that the native drivers were not usable.  So I got one of the Netgear wifi adapters and put it on the RPi box, to at least get WLAN0 working and connected through my DIR-505L wireless router.  After an update of the software on the RPi, I then started looking for a solution and found it at http://raspberrypi.stackexchange.com/questions/23338/tl-wn725n-v2-driver-needed-for-linux-3-12-28.   The solution was found on Gordon's site and the following worked great:

wget gordon.d4rc.net/8188eu_3.12.28.zip
unzip 8188eu_3.12.28.zip
sudo cp rtl8188eufw.bin /lib/firmware/rtlwifi
sudo install -p -m 644 8188eu.ko /lib/modules/3.12.28+/kernel/drivers/net/wireless
sudo insmod /lib/modules/3.12.28+/kernel/drivers/net/wireless/8188eu.ko
sudo depmod -a
sudo reboot

Thanks Gordon for the tip!  Although the GordonSys site is no longer there.

Setting up Shorewall and VLANs on the 1-Port Router

In putting together a 1-Port router, it seems that I have kind of lost a purpose here.  What I would like to do is have the router allow just the Mac Mini to access 3 other VLANs than what it is connected to.  In addition, I don't want anything from the Pers VLAN with the exception of the Mac Mini to be able to connect to these three VLANs.  I don't want any cross-talk between the VLANs.  The diagram of what I want to do is shown below.



 In order to accomplish this task I am turning to an old friend in the firewall world, Shorewall (http://www.shorewall.net/).  So I want to load Shorewall onto my 1-port router, add the additional VLANs, and add Webmin to manage the Shorewall setup and other things on this platform.  Installing Shorewall and Webmin is pretty easy:

sudo apt-get update
sudo apt-get install shorewall
sudo apt-get install -y perl libnet-ssleay-perl openssl libauthen-pam-perl libpam-runtime libio-pty-perl apt-show-versions python
wget http://prdownloads.sourceforge.net/webadmin/webmin_1.690_all.deb
sudo dpkg --install webmin_1.690_all.deb