Changes between Version 11 and Version 12 of Internal/Soekris
- Timestamp:
- Sep 20, 2006, 10:11:20 PM (18 years ago)
Legend:
- Unmodified
- Added
- Removed
- Modified
-
Internal/Soekris
v11 v12 77 77 }}} 78 78 79 Attach the CF card. If it gets automounted, unmount it. Cd into the untarred directory and run voyage.update as root. The CF card is likely to be /dev/sdb. On an Ubuntu box you can use /media/usbdisk as the mount point. When this finishes, move the CF card into the Soekris net4801, and reboot it.79 There's a README in that tarball, and you should. 80 80 81 LILO may be less than perfect at 81 Attach the CF card to your linux laptop. If it gets automounted, unmount it. Cd into the untarred directory and run voyage.update as root. The CF card is likely to be /dev/sdb. On an Ubuntu box you can use /media/usbdisk as the mount point. When this finishes, move the CF card into the Soekris net4801, and reboot it. 82 82 83 Log in as root. The default root password is, predictably, 'voyage'. Voyage linux tries to be cute by mounting everything read only, so you need to remount the root partition as read write, like this: 83 LILO may be less than perfect at displaying over the serial port. Don't worry, it will boot. 84 85 Log in to the net4801 as root. The default root password is, predictably, 'voyage'. Voyage linux tries to be cute by mounting everything read only, so you need to remount the root partition as read write, like this: 84 86 85 87 {{{ … … 91 93 Change /etc/rc2.d/S99voyage so that the commands that keep remounting / ro are disabled. 92 94 93 Note that things like /root are normally linked to /rw/root, which is a tmpfs. It's all very cute, but you probably want to disable it. 95 You may also want to remove the rc link for rc2.d/S89watchdog, or set run_watchdog to 0 in init.d/watchdog. 96 97 Note that things like /root are normally linked to /rw/root, which is a tmpfs. It's all very cute, but you need to disable it at least for /root. /root needs to hold a persistent .ssh directory. 94 98 95 99 Run … … 100 104 }}} 101 105 102 as usual. 106 as usual. Reboot. 103 107 104 108 == PPP/SSH client configuration == … … 107 111 108 112 http://tldp.org/HOWTO/ppp-ssh 113 114 Details of how the commands below work are probably most in the man pages for pppd and ssh. 109 115 110 116 The idea is: … … 116 122 vpn: ALL=NOPASSWD: VPN 117 123 }}} 118 3. Allow the vpn client to log in to the vpn account on the landing using an ssh key with no password. 124 3. Allow the vpn client to log in to the vpn account on the landing using an ssh key with no password. You're proably looking for this command: 125 {{{ 126 ssh-keygen -b 2048 -t rsa 127 }}} 119 128 4. Run a script like the following on the landing. 120 129 {{{ … … 134 143 exit 0 135 144 }}} 136 5. Change iptables so that the traffic incoming 145 5. Change iptables and the routing table in the Soekris net4801 so that the traffic coming in over ppp0 goes to the right interface on the ORBIT node, and so that all traffic from the ORBIT node's interfaces goes to ppp0. 146 6. Change iptables, the routing table, and multi-homed interfaces in the landing so that packets for the remote ORBIT nodes get there. 147 148 As of 9/20, we're up to 5.
