hhf/pfatt
1
0
Fork 0
Code Issues 26 Pull requests Projects Releases Packages Wiki Activity Actions

Merge to implement latest changes #1

Merged
MonkWho merged 33 commits from master into master 2020-05-03 02:30:07 +05:30
Conversation 0 Commits 33 Files changed 7 +74 -63
2 changed files with 74 additions and 63 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files
Showing only changes of commit 8b7b102496 - Show all commits

4
README.md
View file

@ -195,6 +195,10 @@ That's it! Now your clients should be recieving public IPv6 addresses via DHCP6.
# Troubleshooting # Troubleshooting
## Logging
Output from `pfatt.sh` and `pfatt-5268AC.sh` can be found in `/var/log/pfatt.log`.
## tcpdump ## tcpdump
Use tcpdump to watch the authentication, vlan and dhcp bypass process (see above). Run tcpdumps on the `$ONT_IF` interface and the `$RG_IF` interface: Use tcpdump to watch the authentication, vlan and dhcp bypass process (see above). Run tcpdumps on the `$ONT_IF` interface and the `$RG_IF` interface:

131
bin/pfatt.sh
View file

@ -4,83 +4,90 @@ set -e
ONT_IF='em0' ONT_IF='em0'
RG_IF='em1' RG_IF='em1'
RG_ETHER_ADDR='xx:xx:xx:xx:xx:xx' RG_ETHER_ADDR='xx:xx:xx:xx:xx:xx'
LOG=/var/log/pfatt.log
echo "$0: pfSense + AT&T U-verse Residential Gateway for true bridge mode" getTimestamp(){
echo "Configuration: " echo `date "+%Y-%m-%d %H:%M:%S :: [pfatt.sh] ::"`
echo " ONT_IF: $ONT_IF" }
echo " RG_IF: $RG_IF"
echo "RG_ETHER_ADDR: $RG_ETHER_ADDR"
echo -n "loading netgraph kernel modules... " {
/sbin/kldload ng_etf echo "$(getTimestamp) pfSense + AT&T U-verse Residential Gateway for true bridge mode"
echo "OK! (any 'already loaded' errors can be ignored)" echo "$(getTimestamp) Configuration: "
echo "$(getTimestamp) ONT_IF: $ONT_IF"
echo "$(getTimestamp) RG_IF: $RG_IF"
echo "$(getTimestamp) RG_ETHER_ADDR: $RG_ETHER_ADDR"
echo -n "attaching interfaces to ng_ether... " echo -n "$(getTimestamp) loading netgraph kernel modules... "
/usr/local/bin/php -r "pfSense_ngctl_attach('.', '$ONT_IF');" /sbin/kldload ng_etf
/usr/local/bin/php -r "pfSense_ngctl_attach('.', '$RG_IF');" echo "OK! (any 'already loaded' errors can be ignored)"
echo "OK!"
echo "building netgraph nodes..." echo -n "$(getTimestamp) attaching interfaces to ng_ether... "
/usr/local/bin/php -r "pfSense_ngctl_attach('.', '$ONT_IF');"
/usr/local/bin/php -r "pfSense_ngctl_attach('.', '$RG_IF');"
echo "OK!"
echo -n " creating ng_one2many... " echo "$(getTimestamp) building netgraph nodes..."
/usr/sbin/ngctl mkpeer $ONT_IF: one2many lower one
/usr/sbin/ngctl name $ONT_IF:lower o2m
echo "OK!"
echo -n " creating vlan node and interface... " echo -n "$(getTimestamp) creating ng_one2many... "
/usr/sbin/ngctl mkpeer o2m: vlan many0 downstream /usr/sbin/ngctl mkpeer $ONT_IF: one2many lower one
/usr/sbin/ngctl name o2m:many0 vlan0 /usr/sbin/ngctl name $ONT_IF:lower o2m
/usr/sbin/ngctl mkpeer vlan0: eiface vlan0 ether echo "OK!"
/usr/sbin/ngctl msg vlan0: 'addfilter { vlan=0 hook="vlan0" }' echo -n "$(getTimestamp) creating vlan node and interface... "
/usr/sbin/ngctl msg ngeth0: set $RG_ETHER_ADDR /usr/sbin/ngctl mkpeer o2m: vlan many0 downstream
echo "OK!" /usr/sbin/ngctl name o2m:many0 vlan0
/usr/sbin/ngctl mkpeer vlan0: eiface vlan0 ether
echo -n " defining etf for $ONT_IF (ONT)... " /usr/sbin/ngctl msg vlan0: 'addfilter { vlan=0 hook="vlan0" }'
/usr/sbin/ngctl mkpeer o2m: etf many1 downstream /usr/sbin/ngctl msg ngeth0: set $RG_ETHER_ADDR
/usr/sbin/ngctl name o2m:many1 waneapfilter echo "OK!"
/usr/sbin/ngctl connect waneapfilter: $ONT_IF: nomatch upper
echo "OK!"
echo -n " defining etf for $RG_IF (RG)... " echo -n "$(getTimestamp) defining etf for $ONT_IF (ONT)... "
/usr/sbin/ngctl mkpeer $RG_IF: etf lower downstream /usr/sbin/ngctl mkpeer o2m: etf many1 downstream
/usr/sbin/ngctl name $RG_IF:lower laneapfilter /usr/sbin/ngctl name o2m:many1 waneapfilter
/usr/sbin/ngctl connect laneapfilter: $RG_IF: nomatch upper /usr/sbin/ngctl connect waneapfilter: $ONT_IF: nomatch upper
echo "OK!" echo "OK!"
echo -n " bridging etf for $ONT_IF <-> $RG_IF... " echo -n "$(getTimestamp) defining etf for $RG_IF (RG)... "
/usr/sbin/ngctl connect waneapfilter: laneapfilter: eapout eapout /usr/sbin/ngctl mkpeer $RG_IF: etf lower downstream
echo "OK!" /usr/sbin/ngctl name $RG_IF:lower laneapfilter
/usr/sbin/ngctl connect laneapfilter: $RG_IF: nomatch upper
echo "OK!"
echo -n " defining filters for EAP traffic... " echo -n "$(getTimestamp) bridging etf for $ONT_IF <-> $RG_IF... "
/usr/sbin/ngctl msg waneapfilter: 'setfilter { matchhook="eapout" ethertype=0x888e }' /usr/sbin/ngctl connect waneapfilter: laneapfilter: eapout eapout
/usr/sbin/ngctl msg laneapfilter: 'setfilter { matchhook="eapout" ethertype=0x888e }' echo "OK!"
echo "OK!"
echo -n " enabling one2many links... " echo -n "$(getTimestamp) defining filters for EAP traffic... "
/usr/sbin/ngctl msg o2m: setconfig "{ xmitAlg=2 failAlg=1 enabledLinks=[ 1 1 ] }" /usr/sbin/ngctl msg waneapfilter: 'setfilter { matchhook="eapout" ethertype=0x888e }'
echo "OK!" /usr/sbin/ngctl msg laneapfilter: 'setfilter { matchhook="eapout" ethertype=0x888e }'
echo "OK!"
echo -n " removing waneapfilter:nomatch hook... " echo -n "$(getTimestamp) enabling one2many links... "
/usr/sbin/ngctl rmhook waneapfilter: nomatch /usr/sbin/ngctl msg o2m: setconfig "{ xmitAlg=2 failAlg=1 enabledLinks=[ 1 1 ] }"
echo "OK!" echo "OK!"
echo "enabling interfaces..." echo -n "$(getTimestamp) removing waneapfilter:nomatch hook... "
echo -n " $RG_IF ... " /usr/sbin/ngctl rmhook waneapfilter: nomatch
/sbin/ifconfig $RG_IF up echo "OK!"
echo "OK!"
echo -n " $ONT_IF ... " echo "$(getTimestamp) enabling interfaces..."
/sbin/ifconfig $ONT_IF up echo -n " $RG_IF ... "
echo "OK!" /sbin/ifconfig $RG_IF up
echo "OK!"
echo -n "enabling promiscuous mode on $RG_IF... " echo -n " $ONT_IF ... "
/sbin/ifconfig $RG_IF promisc /sbin/ifconfig $ONT_IF up
echo "OK!" echo "OK!"
echo -n "enabling promiscuous mode on $ONT_IF... " echo -n "$(getTimestamp) enabling promiscuous mode on $RG_IF... "
/sbin/ifconfig $ONT_IF promisc /sbin/ifconfig $RG_IF promisc
echo "OK!" echo "OK!"
echo "ngeth0 should now be available to configure as your pfSense WAN" echo -n "$(getTimestamp) enabling promiscuous mode on $ONT_IF... "
echo "done!" /sbin/ifconfig $ONT_IF promisc
echo "OK!"
echo "$(getTimestamp) ngeth0 should now be available to configure as your pfSense WAN"
echo "$(getTimestamp) done!"
} >> $LOG