sjw
/
pfatt
mirror of https://github.com/MonkWho/pfatt.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

updated README and added freeatt.sh

This commit is contained in:
Reed McIntosh 2021-04-15 12:38:31 -04:00
parent 32bb348f75
commit 5322785cc7
No known key found for this signature in database
GPG Key ID: 1B054509B676DE56
1 changed files with 12 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
README.md
View File

@ -301,7 +301,7 @@ There is a whole thread on this at [DSLreports](http://www.dslreports.com/forum/
However, I don't think this works for everyone. I had to explicitly tag my WAN traffic to VLAN0 which wasn't supported on my switch.
## OPNSense / FreeBSD
## OPNSense
For OPNSense 20.1:
follow the pfSense instructions, EXCEPT:
1) use file opnatt.sh
@ -310,7 +310,17 @@ follow the pfSense instructions, EXCEPT:
4) do *NOT* modify config.xml, nor do any of the duid stuff
5) note: You *CAN* use IPv6 Prefix id 0, as OPNSense does *NOT* assign a routeable IPv6 address to ngeth0
I haven't tried this with native FreeBSD, but I imagine the process is ultimately the same with netgraph. Feel free to submit a PR with notes on your experience.
## FreeBSD (tested on 13.0-RELEASE)
For FreeBSD:
1) use file freeatt.sh
2) ng_etf.ko is not needed, standard FreeBSD includes all of the required modules
3) modules can be loaded from /boot/loader.conf, an example loader.conf with the modules listed is included (loading modules in the script should work, but lets do things "properly")
4) set net.inet.ip.forwarding=1 and net.inet6.ip6.forwarding=1 in '/etc/sysctl.conf' and with 'sysctl net.inet.ip.forwarding=1 net.inet6.ip6.forwarding=1'
5) put the freeatt.sh script into '/etc' and rename to 'start_if.$ONT_IF' in my case the file is '/etc/start_if.igb0' this will depend on your hardware
6) in rc.conf, add the line 'ifconfig_$ONT_IF=""' this will trigger rc to run our start_if.$ONT_IF script to create the ngeth0 interface, and then do nothing else to the interface, in my case this line is 'ifconfig_igb0=""' (using $RG_IF instead probably gives the same result)
7) you can then use rc.conf to configure ngeth0 as your wan interface as normal, and configure your lan interface, vlans, etc. as normal depending on your hardware and setup (mac address spoofing is set in the script already)
8) configure pf, dhcpd, etc. to taste, generic examples provided
# U-verse TV