1
0

hosts/carbon: Migrate to DTAG DSL

This commit is contained in:
2024-07-14 00:06:41 +02:00
parent 9ddc82b507
commit d09e80e88e
3 changed files with 59 additions and 27 deletions

View File

@@ -5,6 +5,8 @@
[
./hardware-configuration.nix
../../configuration/router
./ppp.nix
];
boot.kernelParams = [ "console=ttyS0,115200n8" ];
@@ -88,7 +90,7 @@
networking.nat = {
enableIPv6 = true;
enable = true;
externalInterface = "ppp-ntvdsl";
externalInterface = "ppp-dtagdsl";
internalIPv6s = [ "fd00:152:152::/48" "fd00:3214:9453:4920::/64"];
internalIPs = [ "10.152.0.0/16" "192.168.32.0/24" ];
};
@@ -256,7 +258,7 @@
clerie.firewall.enable = true;
clerie.firewall.extraForwardFilterCommands = ''
ip46tables -A forward-filter -i enp1s0.202 -o ppp-ntvdsl -j ACCEPT
ip46tables -A forward-filter -i enp1s0.202 -o ppp-dtagdsl -j ACCEPT
ip46tables -A forward-filter -i enp1s0.202 -j DROP
ip46tables -A forward-filter -o enp1s0.202 -j DROP
'';
@@ -264,29 +266,6 @@
ip46tables -t mangle -A forward-mangle -p tcp -m tcp --tcp-flags SYN,RST SYN -j TCPMSS --set-mss 1416
'';
services.pppd = {
enable = true;
peers.ntvdsl = {
config = ''
plugin pppoe.so net-dsl
user "dsl-31997-001#regio@bsa-vdsl"
ifname ppp-ntvdsl
persist
maxfail 0
holdoff 5
noipdefault
lcp-echo-interval 20
lcp-echo-failure 3
mtu 1456
hide-password
defaultroute
+ipv6
debug
'';
};
};
clerie.monitoring = {
enable = true;
id = "104";