Linux as Gateway


Topologi jaringan :









Jika LAN mempunyai jaringan 192.168.0.0/24, Gateway mempunyai IP eth1 192.168.0.1/24 dan IP eth0 10.14.202.2/24 dan untuk koneksi ke jaringan luar memakai router dengan IP 10.14.202.1/24, Other LAN STT Telkom 10.14.0.0/16, dan Gateway harus koneksi VPN ke VPN Server sehingga semua klien pada LAN dapat menggunakan Internet dengan akun VPN milik Gateway.

# vi /etc/sysconfig/network

NETWORKING=yes
HOSTNAME=smiert
GATEWAY=10.14.202.1

# vi /etc/sysconfig/network-scripts/ifcfg-eth0

DEVICE=eth0
BOOTPROTO=static
IPADDR=10.14.202.2
NETMASK=255.255.255.0
ONBOOT=yes
USERCTL=no

# vi /etc/sysconfig/network-scripts/ifcfg-eth1

DEVICE=eth1
BOOTPROTO=static
IPADDR=192.168.0.1
NETMASK=255.255.255.0
ONBOOT=yes
USERCTL=no

Setting DNS milik STT Telkom
# vi /etc/resolve.conf

nameserver 10.14.201.3

Setting ip_forwarding
# vi /etc/sysctl.conf

ubah net.ipv4.ip_forward = 0 menjadi net.ipv4.ip_forward = 1

restart network
# /etc/init.d/network restart

Gateway menjalankan VPN Client dengan menginstall sebagai berikut:
downloadlah file ppp-mppe-2.4.0-4.tar.gz, pptp-linux-1.0.3-1.tar.gz, pptp-vpn.tar.gz
taruh file di direktori home anda atau terserah ..

Install ppp-mppe-2.4.0-4.tar.gz:
# tar -xzvf ppp-mppe-2.4.0-4.tar.gz
# cd ppp-mppe-2.4.0-4
# chmod 700 unpack.sh
# ./unpack.sh
# cd ppp-2.4.0
# ./configure
# make
# make install

Install pptp-linux-1.0.3-1.tar.gz:
# tar -xzvf pptp-linux-1.0.3-1.tar.gz
# cd pptp-linux-1.0.3-1
# tar -xzvf pptp-linux-1.0.3.tar.gz
# cd pptp-linux-1.0.3
# make clean
# make

Copy pptp dan pptp_callmgr ke direktori /usr/sbin
# cp pptp pptp_callmgr /usr/sbin

Installing pptp-vpn.tar.gz:
# tar -xzvf pptp-vpn.tar.gz
# cd pptp-vpn
# cd client

Copy all files into /etc/sysconfig/network-scripts/, overwrite if prompt.
# cp * /etc/sysconfig/network-scripts
Configuring vpn clinet:
# vi /etc/sysconfig/network-scripts/ifcfg-pptp0

VPN_HOST="10.14.203.5"
VPN_USER="113020086"

Delete other routing if exist in this files. Example: ifcfg-pptp0

# vi /etc/ppp/chap-secrets

#client server secret
113020086 10.14.203.5 password_here

Running vpn clinet:

# ifup pptp0

Setting IP Client pada LAN dapat dilakukan dengan DHCP

Setting iptables
# /sbin/iptables -t nat -A POSTROUTING -o ppp0 -s 192.168.0.0/24 -j MASQUERADE
# /sbin/iptables -t nat -A POSTROUTING -o eth0 -s 192.168.0.0/24 -j SNAT --to-source 10.14.202.2
# /sbin/iptables-save > /etc/sysconfig/iptables
# /etc/init.d/iptables restart

Popular posts from this blog

Howto configure boot device order on ILOM

To ensure the system can be installed using the DVD drive, the boot device order in the BIOS has to be configured correctly so that the DVD drive takes precedence over the internal hard drives. 1 Log into the ILOM. 2 Start the system if it is not already running: > start /SYS else reset the system: > reset /SYS 3 Log onto the system’s console: > start /SP/console 4 When prompted, press Esc 2 to enter setup. 5 Once the setup menu has loaded, navigate across to the Boot screen by using the right arrow key. 6 Using the down arrow key, select the Boot Device Priority item and press Enter. 7 Confirm that the item [CD/DVD] is higher in the list than the item [Hard Drive]. The order can be changed by selecting the relevant item and using the +/- keys to move the item up or down in the list. 8 Once the order is correct, save any changes made by pressing Esc and then navigate right to the Exit screen. Select the item Save Changes and Exit and press Enter, then confirm
Read more

SAN Switch Config Command

Login via console Fabric OS (swd77) swd77 console login: admin Password: Note: password default is "password" - set hostname swd77:admin> switchName swcdr1 Committing configuration... Done. swcdr1:admin> - set IP Address swcdr1:admin> ipaddrset Ethernet IP Address [192.168.0.25]: 192.168.0.11 Ethernet Subnetmask [255.255.255.0]: Fibre Channel IP Address [0.0.0.0]: Fibre Channel Subnetmask [0.0.0.0]: Gateway IP Address [192.168.0.25]: 0.0.0.0 Issuing gratuitous ARP...Done. 2008/07/14-18:46:43, [WEBD-1007], 494,, INFO, swcdr1, HTTP server will be restarted due to change of IP Address IP address is being changed...Done. Committing configuration...Done. - Configure basic parameter swcdr1:admin> switchDisable swcdr1:admin> configure Configure... Fabric parameters (yes, y, no, n): [no] y Domain: (1..239) [1] 22008/07/14-18:50:40, [FW-1424], 24,, WARNING, swcdr1, Switch status changed from HEALTHY to MARGINAL. 2008/07/14-18:50:40, [FW-1439], 25,, WARNING, swcdr
Read more

Howto cstm on HP-UX

If we want to show all machine information, just use cstm. # cstm Running Command File (/usr/sbin/stm/ui/config/.stmrc). -- Information -- Support Tools Manager Version C.46.05 (C) Copyright Hewlett Packard Co. 1995-2002 All Rights Reserved Use of this program is subject to the licensing restrictions described in "Help-->On Version". HP shall not be liable for any damages resulting from misuse or unauthorized use of this program. cstm> Map all device in this system with : cstm> map Dev Last Last Op Num Path Product Active Tool Status === ==================== ========================= =========== ============= 1 system system (1014) Information Successful 2 memory IPF_MEMORY (1014) Information Successful ------------ We want to know info about memory information cstm>sel d 2 cstm>
Read more