Difference between revisions of "Installing ampr-ripd on a Ubiquiti EdgeRouter or EdgeRouter X"

From ARDC
Jump to navigation Jump to search
Line 1: Line 1:
These are the steps for setting up a fully functional AMPR gateway on Ubiquiti's EdgeRouter Light and EdgeRouter-X.
These are the steps for setting up a fully functional AMPR gateway on Ubiquiti's EdgeRouter Light and EdgeRouter-X.
<span style="color: red;">'''NOTE: THE SETUP SCRIPT DOES NOT SECURE YOUR ROUTER. YOU NEED TO SET UP FIREWALL ROULES YOURSELF.'''</span>


We start assuming you have a complete working and configured router, that already has internet access (a configured WAN port and a local LAN).
We start assuming you have a complete working and configured router, that already has internet access (a configured WAN port and a local LAN).


; For technical reasons, this set-up does not support dynamic assigned WAN addresses. If you have a dynamic IP, this setup can only be used in the primary router's DMZ.


1 First add tunnel interface. You need to reserve an AMPR address from your AMPR subnet for the tunnel interface.
 
1. First add tunnel interface. You need to reserve an AMPR address from your AMPR subnet for the tunnel interface.
If you have a /32 assignement, you need to use that one, else pick an unused address.
If you have a /32 assignement, you need to use that one, else pick an unused address.
Use the name 'tun44' for the tunnel, don't be creative since the script depends on this name.
Use the name 'tun44' for the tunnel, don't be creative since the script depends on this name.
Line 21: Line 27:


remote-ip: 0.0.0.0 (this MUST be 0.0.0.0, no matter what)
remote-ip: 0.0.0.0 (this MUST be 0.0.0.0, no matter what)
</blockquote>
</blockquote>
- tun44 -> disabe-link-detect, press + right of it to enable


- tun44 -> disabe-link-detect
- Press Preview and Apply
press + right of it to enable
 
- Press Preview ans Apply


If you prefer to do it by CLI:
If you prefer to do it by CLI:
<blockquote>
<blockquote><span style="font-family:Courier;">
ubnt@YO2LOJ-ER3:~$ configure
ubnt@YO2LOJ-ER3:~$ configure


Line 47: Line 52:


ubnt@YO2LOJ-ER3:~$ commit; save
ubnt@YO2LOJ-ER3:~$ commit; save
</blockquote>
</span></blockquote>


2. Download your packages from here (read this section to the end...):
2. Download your packages from here (read this section to the end...):
Line 55: Line 60:
For the EdgeRouterX setup use this one: http://www.yo2loj.ro/hamprojects/Ampr_EdgeRouterX.tgz (mipsel)
For the EdgeRouterX setup use this one: http://www.yo2loj.ro/hamprojects/Ampr_EdgeRouterX.tgz (mipsel)


In short, get it, unpack on the router and run the install.sh script.
<br>In short, get it, unpack on the router and run the install.sh script.


Then edit your startup script if needed, and run it:
Then edit your startup script if needed, and run it.


<br>Now the details...


a. First, log in and become root (don't omit that '-'...):
 
<blockquote>
a. First, log in and become root (don't omit that '-'):
<blockquote><span style="font-family:Courier;">
Welcome to EdgeOS
Welcome to EdgeOS


ubnt@YO2LOJ-ER3:~$ sudo su -
ubnt@YO2LOJ-ER3:~$ sudo su -


</blockquote>
</span></blockquote>


b. Now download the correct package as described in the links above and unpack it:
b. Now download the correct package as described in the links above and unpack it:
<blockquote>
<blockquote><span style="font-family:Courier;">
root@YO2LOJ-ER3:~# curl http://yo2loj.ro/hamprojects/Ampr_EdgeRouter.tgz -o er.tgz
root@YO2LOJ-ER3:~# curl http://yo2loj.ro/hamprojects/Ampr_EdgeRouter.tgz -o er.tgz


(you should get some download stats here...)
<i>(you should get some download stats here...)</i>


root@YO2LOJ-ER3:~# ls
root@YO2LOJ-ER3:~# ls
Line 80: Line 87:
root@YO2LOJ-ER3:~# tar -xf er.tgz
root@YO2LOJ-ER3:~# tar -xf er.tgz


</blockquote>
</span></blockquote>


c. install the package:
c. install the package:
<blockquote>
<blockquote><span style="font-family:Courier;">
root@YO2LOJ-ER3:~# ./install.sh
root@YO2LOJ-ER3:~# ./install.sh


</blockquote>
</span></blockquote>


d. edit the startup script to fit your needs. This is only needed if your router is behind NAT or you need to reject specific subnets. Edit only the -a options like below, don't touch the rest. If you want to have your position shown on the ampr map, also add the -L option using your callsign and your QTH locator.
d. edit the startup script to fit your needs. This is only needed if your router is behind NAT or you need to reject specific subnets. Edit only the -a options like below, don't touch the rest. If you want to have your position shown on the ampr map, also add the -L option using your callsign and your QTH locator ( -L your-call@AA00aa ).
<blockquote>
<blockquote><span style="font-family:Courier;">
root@YO2LOJ-ER3:~# cd /etc
root@YO2LOJ-ER3:~# cd /etc


root@YO2LOJ-ER3:/etc# vi ampr.sh
root@YO2LOJ-ER3:/etc# vi ampr.sh


<press insert to start editing>
<i><press insert to start editing></i>


[...]
[...]


ampr-ripd -s -t 44 -i tun44 -m 90 -a 44.182.20.0/24,44.182.21.0/24,44.182.61.0/24,yo2loj.go.ro (adapt this list to your needs - commna separated, no spaces) -L your-call@AA00aa (optional)
ampr-ripd -s -t 44 -i tun44 -m 90 -a 44.182.20.0/24,44.182.21.0/24,44.182.61.0/24,yo2loj.go.ro <i>(adapt this list to your needs - commna separated, no spaces)</i>


~
~
Line 106: Line 113:
~
~


<press esc>:wq (to save and exit - yes, vi is strange)
<i><press esc>:wq (to save and exit - yes, vi is strange)</i>


</blockquote>
</span></blockquote>


e. Now run the startup script:
e. Now run the startup script:
<blockquote>
<blockquote><span style="font-family:Courier;">
root@YO2LOJ-ER3:/etc# ./ampr.sh
root@YO2LOJ-ER3:/etc# ./ampr.sh


</blockquote>
</span></blockquote>
(On router restart, this will happen automatically)
(On router restart, this will happen automatically)


Line 120: Line 127:




NOTE: THE SETUP SCRIPT DOES NOT SECURE YOUR ROUTER. YOU NEED TO SET UP FIREWALL ROUTES YOURSELF.
<span style="color: red;">'''NOTE: THE SETUP SCRIPT DOES NOT SECURE YOUR ROUTER. YOU NEED TO SET UP FIREWALL ROULES YOURSELF.'''</span>





Revision as of 10:45, 14 April 2019

These are the steps for setting up a fully functional AMPR gateway on Ubiquiti's EdgeRouter Light and EdgeRouter-X.


NOTE: THE SETUP SCRIPT DOES NOT SECURE YOUR ROUTER. YOU NEED TO SET UP FIREWALL ROULES YOURSELF.


We start assuming you have a complete working and configured router, that already has internet access (a configured WAN port and a local LAN).

For technical reasons, this set-up does not support dynamic assigned WAN addresses. If you have a dynamic IP, this setup can only be used in the primary router's DMZ.


1. First add tunnel interface. You need to reserve an AMPR address from your AMPR subnet for the tunnel interface. If you have a /32 assignement, you need to use that one, else pick an unused address. Use the name 'tun44' for the tunnel, don't be creative since the script depends on this name.

- Config Tree -> add tun44 -> Update List

- tun44:

address: <your AMPR IP assigned to the router, see above>/32 (this MUST be 0.0.0.0, no matter what, to allow P2MP connections)

description: AMPR GW

encapsulation: ipip

local-ip: <your WAN IP - ISP assigned or router's DMZ IP>

remote-ip: 0.0.0.0 (this MUST be 0.0.0.0, no matter what)

- tun44 -> disabe-link-detect, press + right of it to enable

- Press Preview and Apply

If you prefer to do it by CLI:

ubnt@YO2LOJ-ER3:~$ configure

ubnt@YO2LOJ-ER3:~$ set interfaces tunnel tun44

ubnt@YO2LOJ-ER3:~$ set interfaces tunnel tun44 local-ip <put the external ip>

ubnt@YO2LOJ-ER3:~$ set interfaces tunnel tun44 remote-ip 0.0.0.0

ubnt@YO2LOJ-ER3:~$ set interfaces tunnel tun44 encapsulation ipip

ubnt@YO2LOJ-ER3:~$ set interfaces tunnel tun44 address <44net router ip>/32

ubnt@YO2LOJ-ER3:~$ set interfaces tunnel tun44 description "AMPR GW"

ubnt@YO2LOJ-ER3:~$ set interfaces tunnel tun44 disable-link-detect

ubnt@YO2LOJ-ER3:~$ commit; save

2. Download your packages from here (read this section to the end...):

Find the EdgeRouter setup package here: http://www.yo2loj.ro/hamprojects/Ampr_EdgeRouter.tgz (mips64)

For the EdgeRouterX setup use this one: http://www.yo2loj.ro/hamprojects/Ampr_EdgeRouterX.tgz (mipsel)


In short, get it, unpack on the router and run the install.sh script.

Then edit your startup script if needed, and run it.


Now the details...


a. First, log in and become root (don't omit that '-'):

Welcome to EdgeOS

ubnt@YO2LOJ-ER3:~$ sudo su -

b. Now download the correct package as described in the links above and unpack it:

root@YO2LOJ-ER3:~# curl http://yo2loj.ro/hamprojects/Ampr_EdgeRouter.tgz -o er.tgz

(you should get some download stats here...)

root@YO2LOJ-ER3:~# ls

er.tgz

root@YO2LOJ-ER3:~# tar -xf er.tgz

c. install the package:

root@YO2LOJ-ER3:~# ./install.sh

d. edit the startup script to fit your needs. This is only needed if your router is behind NAT or you need to reject specific subnets. Edit only the -a options like below, don't touch the rest. If you want to have your position shown on the ampr map, also add the -L option using your callsign and your QTH locator ( -L your-call@AA00aa ).

root@YO2LOJ-ER3:~# cd /etc

root@YO2LOJ-ER3:/etc# vi ampr.sh

<press insert to start editing>

[...]

ampr-ripd -s -t 44 -i tun44 -m 90 -a 44.182.20.0/24,44.182.21.0/24,44.182.61.0/24,yo2loj.go.ro (adapt this list to your needs - commna separated, no spaces)

~

~

~

<press esc>:wq (to save and exit - yes, vi is strange)

e. Now run the startup script:

root@YO2LOJ-ER3:/etc# ./ampr.sh

(On router restart, this will happen automatically)

That should do it :-)


NOTE: THE SETUP SCRIPT DOES NOT SECURE YOUR ROUTER. YOU NEED TO SET UP FIREWALL ROULES YOURSELF.


3. Optionally you can install a status page in the wizzard section.

Download here: http://www.yo2loj.ro/hamprojects/Ampr_Status_Wizard.tar


Marius, YO2LOJ