remove deprecated unifi stuff
This commit is contained in:
@@ -1,15 +0,0 @@
|
|||||||
# Unifi
|
|
||||||
|
|
||||||
## WiFi
|
|
||||||
|
|
||||||
As of Aug 2024, auto seems to give the best results.
|
|
||||||
|
|
||||||

|
|
||||||
|
|
||||||

|
|
||||||
|
|
||||||

|
|
||||||
|
|
||||||
## Firewall
|
|
||||||
|
|
||||||

|
|
||||||
Binary file not shown.
|
Before Width: | Height: | Size: 93 KiB |
Binary file not shown.
|
Before Width: | Height: | Size: 56 KiB |
Binary file not shown.
|
Before Width: | Height: | Size: 58 KiB |
Binary file not shown.
|
Before Width: | Height: | Size: 84 KiB |
@@ -1,67 +0,0 @@
|
|||||||
# Network Management
|
|
||||||
|
|
||||||
- [Network Management](#network-management)
|
|
||||||
- [IP Addresses](#ip-addresses)
|
|
||||||
- [Route53](#route53)
|
|
||||||
- [IPV6 EUI64 Address Generation](#ipv6-eui64-address-generation)
|
|
||||||
- [NetworkManager](#networkmanager)
|
|
||||||
- [VPN](#vpn)
|
|
||||||
- [IPv6 leak prevention](#ipv6-leak-prevention)
|
|
||||||
|
|
||||||
## IP Addresses
|
|
||||||
|
|
||||||
| Hostname | IPV4 | IPV6 |
|
|
||||||
| -------- | -------------- | ------------------------ |
|
|
||||||
| unifi | 192.168.2.0/24 | 2603:6013:3140:102::0/64 |
|
|
||||||
| lab | 10.1.0.0/16 | 2603:6013:3140:100::0/64 |
|
|
||||||
| iot | 10.2.0.0/16 | |
|
|
||||||
| home | 10.3.0.0/16 | 2603:6013:3140:103::0/64 |
|
|
||||||
| metallb | 10.5.0.0/16 | 2603:6013:3140:101::0/64 |
|
|
||||||
|
|
||||||
## Route53
|
|
||||||
|
|
||||||
```bash
|
|
||||||
aws route53 list-hosted-zones
|
|
||||||
|
|
||||||
# reeselink
|
|
||||||
aws route53 change-resource-record-sets --hosted-zone-id Z0092652G7L97DSINN18 --change-batch file://
|
|
||||||
|
|
||||||
# reeseapps
|
|
||||||
aws route53 change-resource-record-sets --hosted-zone-id Z012820733346FJ0U4FUF --change-batch file://
|
|
||||||
```
|
|
||||||
|
|
||||||
## IPV6 EUI64 Address Generation
|
|
||||||
|
|
||||||
This will ensure a static IPV6 Address that is based on your mac address.
|
|
||||||
|
|
||||||
You can tell if your ipv6 is eui64 if it has an fe:ff in between the 6th and 7th number.
|
|
||||||
|
|
||||||
### NetworkManager
|
|
||||||
|
|
||||||
(Fedora Server, Raspberry Pi, Debian)
|
|
||||||
|
|
||||||
```bash
|
|
||||||
nmcli connection show --active
|
|
||||||
nmcli -f ipv6.addr-gen-mode connection show <connection>
|
|
||||||
nmcli con mod <connection> ipv6.addr-gen-mode eui64
|
|
||||||
systemctl restart NetworkManager
|
|
||||||
nmcli -f ipv6.addr-gen-mode connection show <connection>
|
|
||||||
```
|
|
||||||
|
|
||||||
## VPN
|
|
||||||
|
|
||||||
### IPv6 leak prevention
|
|
||||||
|
|
||||||
Add the following to the exported wireguard config to block ipv6
|
|
||||||
|
|
||||||
```conf
|
|
||||||
[Interface]
|
|
||||||
PrivateKey =
|
|
||||||
Address = 192.168.4.2/32, fd00::1/128
|
|
||||||
DNS = 192.168.4.1
|
|
||||||
|
|
||||||
[Peer]
|
|
||||||
PublicKey =
|
|
||||||
AllowedIPs = 192.168.4.1/32,192.168.4.2/32,0.0.0.0/0,::0/0
|
|
||||||
Endpoint = ipv4.reeseapps.com:51831
|
|
||||||
```
|
|
||||||
Reference in New Issue
Block a user