diff --git a/hosts/dns/zones/db.bula22.de b/hosts/dns/zones/db.bula22.de index ef2d7df..768f07e 100644 --- a/hosts/dns/zones/db.bula22.de +++ b/hosts/dns/zones/db.bula22.de @@ -75,6 +75,8 @@ gw.services.net.bula22.de. IN A 10.42.10.1 gw.management.net.bula22.de. IN A 10.42.42.1 gw.technik-iot.net.bula22.de. IN A 10.42.151.1 IN AAAA fd00:10:42:151::1 +gw.ikt-toys.net.bula22.de. IN A 10.42.152.1 + IN AAAA fd00:10:42:152::1 gw.ikt.net.bula22.de. IN A 10.42.201.1 IN AAAA fd00:10:42:201::1 gw.technik.net.bula22.de. IN A 10.42.202.1 diff --git a/hosts/router/152-net-ikt-toys.nix b/hosts/router/152-net-ikt-toys.nix new file mode 100644 index 0000000..fa1ea50 --- /dev/null +++ b/hosts/router/152-net-ikt-toys.nix @@ -0,0 +1,56 @@ +{ config, pkgs, ...}: + +{ + networking.vlans."net-ikt-toys" = { + id = 152; + interface = "ens18"; + }; + + networking.interfaces.net-ikt-toys.ipv6.addresses = [ + { address = "fe80::1"; prefixLength = 64; } + { address = "fd00:10:42:152::1"; prefixLength = 64; } + ]; + networking.interfaces.net-ikt-toys.ipv4.addresses = [ + { address = "10.42.152.1"; prefixLength = 24; } + ]; + + services.radvd.config = '' + interface net-ikt-toys { + AdvSendAdvert on; + prefix ::/64 {}; + RDNSS 2a01:4f8:1c0c:8221::8 {}; + DNSSL bula22.de {}; + }; + ''; + + services.kea.dhcp4 = { + settings = { + interfaces-config = { + interfaces = [ "net-ikt-toys" ]; + }; + subnet4 = [ + { + id = 152; + subnet = "10.42.152.1/24"; + pools = [ + { + pool = "10.42.152.100 - 10.42.152.240"; + } + ]; + option-data = [ + { + name = "routers"; + data = "10.42.152.1"; + } + ]; + } + ]; + }; + }; + + clerie.forward-filter.interfaces.net-ikt-toys.rules = [ + { incomingInterface = "net-ikt"; } + ]; + + clerie.uplink-selector.interfaces.net-ikt-toys.uplink = "uplink-b"; +} diff --git a/hosts/router/configuration.nix b/hosts/router/configuration.nix index c6214a2..c56cc67 100644 --- a/hosts/router/configuration.nix +++ b/hosts/router/configuration.nix @@ -15,6 +15,7 @@ ./101-net-uplink-a.nix ./102-net-uplink-b.nix ./151-net-technik-iot.nix + ./152-net-ikt-toys.nix ./201-net-ikt.nix ./202-net-technik.nix ./203-net-hospital.nix diff --git a/hosts/router/prefix-delegation.nix b/hosts/router/prefix-delegation.nix index 27c991b..2ce2354 100644 --- a/hosts/router/prefix-delegation.nix +++ b/hosts/router/prefix-delegation.nix @@ -28,7 +28,7 @@ ia_pd 1/::/56 net-hospital/203/64 net-zoll/204/64 net-leitstelle/205/64 net-verwaltung/206/64 interface ppp-uplink-b ipv6rs - ia_pd 1/::/56 net-technik-iot/151/64 net-ikt/201/64 net-technik/202/64 net-yolo/208/64 net-infojurte/209/64 net-internation/210/64 net-programmtre/211/64 net-open-office/212/64 + ia_pd 1/::/56 net-technik-iot/151/64 net-technik-iot/152/64 net-ikt/201/64 net-technik/202/64 net-yolo/208/64 net-infojurte/209/64 net-internation/210/64 net-programmtre/211/64 net-open-office/212/64 ''; }; }