Skip to content

Config Example Station

Adrian Chadd edited this page Aug 28, 2016 · 2 revisions

= Config example - station =

This is an example Carambola 2 as a station, providing NAT services via an openvpn session to wired clients.

TBD: include the openvpn configuration file as an example!

# Set the default system hostname
system_hostname="freebsd-carambola2"

# Modules to load
kernel_modules="bridgestp if_bridge random ipfw libalias ipfw_nat if_gre if_gif if_vlan if_tap if_tun"

# Services to start
services_list="dropbear dnsmasq openvpn"

forwarding_enable="YES"
firewall_nat_enable="YES"
firewall_nat_alias_interface="wlan0"
firewall_nat_public_interface="wlan0"
firewall_nat_deny_in="YES"
firewall_nat_log="YES"
firewall_nat_block_lan_wan="bridge0"

# DHCP server/DNS relaying
dnsmasq_enable="YES"
dnsmasq_dns_enable="YES"
dnsmasq_listen_interface="bridge0"
dnsmasq_dhcp_ipv4_range="192.168.14.20,192.168.14.64,24h"

# dropbear configuration
dropbear_enable="YES"
dropbear_listen_address="192.168.14.1:22"

# Don't need inetd/telnet for now
inetd_enable="NO"

# openvpn config
openvpn_enable="YES"
openvpn_config="/etc/cfg/openvpn-client.conf"
openvpn_nat_enable="YES"
openvpn_nat_rule_id="100"

# These interfaces are configured in-order
network_interfaces="arge1 wlan0 bridge0"

# Create arge1, no interface address
netif_arge1_enable="YES"
netif_arge1_type="ether"
netif_arge1_addrtype="none"
netif_arge1_descr="default"
netif_arge1_name="arge1"

netif_wlan0_enable="YES"
netif_wlan0_type="wifi"
netif_wlan0_addrtype="dhcp"
netif_wlan0_name="wlan0"
netif_wlan0_wifi_sta_ssid="SSID"
netif_wlan0_wifi_sta_passphrase="PSK"
netif_wlan0_wifi_mode="sta"
netif_wlan0_wifi_parent="ath0"
# Create a bridge, flip on an IPv4 static address
netif_bridge0_type="bridge"
netif_bridge0_addrtype="static"
netif_bridge0_descr="default"
netif_bridge0_name="bridge0"

# These are bridge members w/ STP enabled
netif_bridge0_members_stp="arge1"
# These are bridge members w/ STP disabled
netif_bridge0_members=""
netif_bridge0_ipv4_address="192.168.14.1"
netif_bridge0_ipv4_netmask="255.255.255.0"
Clone this wiki locally