remove deprecated unifi stuff

This commit is contained in:
2024-09-05 11:36:59 -04:00
parent e246a23f45
commit 6fa3a6feba
6 changed files with 0 additions and 82 deletions

View File

@@ -1,15 +0,0 @@
# Unifi
## WiFi
As of Aug 2024, auto seems to give the best results.
![Unifi Wifi Example](../../images/wifi.png)
![Unifi 6 Enterprise](../../images/u6e.png)
![Unifi 7 Pro](../../images/u7pro.png)
## Firewall
![Unifi v6 Firewall](../../images/firewall_accept.png)

Binary file not shown.

Before

Width:  |  Height:  |  Size: 93 KiB

Binary file not shown.

Before

Width:  |  Height:  |  Size: 56 KiB

Binary file not shown.

Before

Width:  |  Height:  |  Size: 58 KiB

Binary file not shown.

Before

Width:  |  Height:  |  Size: 84 KiB

View File

@@ -1,67 +0,0 @@
# Network Management
- [Network Management](#network-management)
- [IP Addresses](#ip-addresses)
- [Route53](#route53)
- [IPV6 EUI64 Address Generation](#ipv6-eui64-address-generation)
- [NetworkManager](#networkmanager)
- [VPN](#vpn)
- [IPv6 leak prevention](#ipv6-leak-prevention)
## IP Addresses
| Hostname | IPV4 | IPV6 |
| -------- | -------------- | ------------------------ |
| unifi | 192.168.2.0/24 | 2603:6013:3140:102::0/64 |
| lab | 10.1.0.0/16 | 2603:6013:3140:100::0/64 |
| iot | 10.2.0.0/16 | |
| home | 10.3.0.0/16 | 2603:6013:3140:103::0/64 |
| metallb | 10.5.0.0/16 | 2603:6013:3140:101::0/64 |
## Route53
```bash
aws route53 list-hosted-zones
# reeselink
aws route53 change-resource-record-sets --hosted-zone-id Z0092652G7L97DSINN18 --change-batch file://
# reeseapps
aws route53 change-resource-record-sets --hosted-zone-id Z012820733346FJ0U4FUF --change-batch file://
```
## IPV6 EUI64 Address Generation
This will ensure a static IPV6 Address that is based on your mac address.
You can tell if your ipv6 is eui64 if it has an fe:ff in between the 6th and 7th number.
### NetworkManager
(Fedora Server, Raspberry Pi, Debian)
```bash
nmcli connection show --active
nmcli -f ipv6.addr-gen-mode connection show <connection>
nmcli con mod <connection> ipv6.addr-gen-mode eui64
systemctl restart NetworkManager
nmcli -f ipv6.addr-gen-mode connection show <connection>
```
## VPN
### IPv6 leak prevention
Add the following to the exported wireguard config to block ipv6
```conf
[Interface]
PrivateKey =
Address = 192.168.4.2/32, fd00::1/128
DNS = 192.168.4.1
[Peer]
PublicKey =
AllowedIPs = 192.168.4.1/32,192.168.4.2/32,0.0.0.0/0,::0/0
Endpoint = ipv4.reeseapps.com:51831
```