Tech

Technical posts, meaning: stuff that I encounter at work, or at home, whilst doing my techie stuff


KPN Glasvezel met LEDE/OpenWRT (Dutch) 4

Shout-outs

Allereerst heel veel dank aan de Gathering of Tweakers-community, het betreffende KPN Topic, maar met name sl1000, van wie ik deze guide grotendeels heb overgenomen.

Uitgangspunten en Referenties

Uitgangspunten

  • Deze guide werkt met
    • LEDE versie 17.01.2
    • OpenWRT 18.06.1
  • Basiskennis van Linux, VI en netwerken is aanwezig

Resources/Referenties

Voorbereiding

  • Download LEDE van https://lede-project.org/ of OpenWRT van https://openwrt.org en zorg ervoor dat de juiste versie hebt voor jouw router.
  • Zorg ervoor dat je BEKABELD aan je router vastzit (gedurende de gehele guide). Dat maakt het geheel een stuk makkelijker
  • Bewaar deze manual ergens (printen, als PDF opslaan), zodat je deze beschikbaar hebt mocht je geen internet meer hebben
  • Gebruik je ExperiaBox als backup, dat mocht het fout gaan, dat je in ieder geval nog internet access hebt.
  • Gebruik een tool als PuTTY om een SSH verbinding naar de router op te zetten
  • Zolang als je bezig bent, moet de stroom van het IPTV Kastje zijn (tot de laatste stap)
  • BELANGRIJK: Voor stap 1 en 2 is het noodzakelijk dat de router een internet-verbinding heeft. Idealiter hangt deze dan achter de ExperiaBox, zodat deze het internet daarvan krijgt.
  • WIFI is standaard uitgeschakeld in LEDE. Activeer dit zelf op een gewenst moment.

Uitvoering

Stap 1 – Flash LEDE en eerste voorbereiding

De documentatie van LEDE is heel duidelijk en geeft goed aan hoe te flashen. Hier zal ik verder niet op ingaan.

Standaard wordt er alleen maar een root-user aangemaakt in LEDE. Deze heeft standaard geen wachtwoord, dus dat is niet heel veilig. Na het flashen ga je dan naar het standaard adres van de router (http://192.168.1.1), je logt in met de root user en wijzig dan het wachtwoord in de UI. 

We gaan nu er voor zorgen dat er een normale user naast komt. Maak hiervoor een SSH verbinding met de router, en log in met je net gewijzigde root-wachtwoord. Vervang in onderstaand “myuser” voor je eigen username.

Stap 2 – Installeer de IGMP Proxy packages

Stap 3 – Configureer de switch

Configureer de switch zodat de juiste VLANs (Network -> Switch) gekoppeld zijn, dit moet er ongeveer zo uitzien:

Let er hierbij op dat LAN-poort 3 nu de poort is waar de ExperiaBox op aangesloten wordt voor telefonie.

Stap 4 – Configureer de WAN interfaces

By default, de ifname (interface name) van de WAN interface is “eth0”, op de R7800. Op jouw router kan dit anders zijn, kijk hiervoor in /etc/config/network. Noteer de ifname.

Voer nu het volgende commando uit en noteer het MAC-adres.

Open /etc/config/network weer en pas de entries voor de WAN-interface aan, zodat het er uitziet zoals hieronder:

Voeg nu de IPTV interface toe:

In de User Interface (Network –> Interfaces), ziet dit er zo uit:

Stap 5 – Reboot de router

Om de configuratie actief te krijgen, rebooten we de router.

Nu kunnen we de router direct aan het internet hangen. Koppel dus de ExperiaBox af en prik het draadje in de WAN-poort van je router.

Stap 6 – Voeg IPTV routes toe

Draai ‘route’, je krijgt een lijstje met actieve routes van de router te zien. Dit ziet er uit als onderstaand: 

Als alles correct werkt zie je in de lijst voor eth0.4 twee soortgelijke entries (ipadressen zullen anders zijn):

Noteer het destination adres wat getoond wordt, in plaats van de 10.81.80.1

Open /etc/config/network en voeg het volgende toe:

In de User Interface, ziet dit er zo uit:

Stap 7 – Voeg DHCP Opties toe

Open /etc/dnsmasq.conf en voeg het volgende toe:

Stap 8 – IGMP Proxy Settings

Open /etc/config/igmpproxy en zorg ervoor dat deze er uit ziet zoals onderstaand

Stap 9 – Firewall settings

Open /etc/config/firewall en voeg de volgende regels aan het einde toe:

Dit zorgt er voor dat:

  1. Er een speciale IPTV_WAN zone komt
  2. IGMP verkeer wordt toegestaan vanaf de IPTV_Interface naar het LAN
  3. Masquerading wordt aangezet

In de user interface (Network –> Firewall –> General Settings), zou dat er zo uit moeten komen te zien:

En zo voor de Traffic Rule (Network –> Firewall –> Traffic Rules)

Stap 10 – Reboot en test

Reboot nogmaals de router. Nadat de router is gereboot, zet je je IPTV Kastje aan en test je of het werkt (wat wel zou moeten).

Je hebt nu Routed IPTV, wat betekent dat je ook zaken als NetFlix zou moeten kunnen bekijken via het kastje van KPN.

Updates

2018-12-20

  • Update voor IGMPProxy settings ivm nieuwe config KPN
  • Update voor OpenWRT 18.0.6.1

Dell XPS 15-9550 and Fedora 23 (and Windows 10) 1

Introduction

On February 5th, I received my new laptop, a Dell XPS 15 9550. Before this laptop, I used to use a Dell Precision M3800, which has been replaced by the Dell Precision 15 5000 series, but the “only” difference between the two is the dedicated video card you can choose. The Precision sports a Quadro video card, whereas the XPS uses a GeForce card. Without going in too much details, this means that the Precision is better in professional work, such as AutoCAD, and the XPS is better at running games. Since one of my goals with this laptop was to get rid of my desktop PC, which I only use for games, the XPS was the more logical choice.

As can be derived from previous posts, I mainly use Linux, more specifically Fedora, on my laptop. This is because I run a number of VM’s (via VirtualBox and Vagrant) and/or Docker containers at the same time. In itself, this is also possible on Windows, but on Linux the overhead is a lot lower than on Windows. I will not go into the details of how to use aforementioned tools, that is something for a different post.

Two back-to-back Dell XPS 15 (Model 9550) Touch notebook computers. One model is open 90 degrees facing left, the other is open 45 degrees facing back right.

Dell XPS 15

What I will go into in this post, as the title might suggest, is how to get Fedora 23 running on the XPS 15, how to dual-boot it with Windows, issues I have run into, and their solutions (hopefully). Also, be sure to read the end (last two paragraphs) of the post, which contain an important note :). I hope this post will help people who want to use Fedora on their XPS, and maybe I will even get a few tips and pointers in return :).

For reference purposes, the specs are:

  • Intel Core i7-6700HQ
  • 16GB RAM
  • 512GB SSD (Samsung NVMe)
  • nVidia Geforce GTX960M with 2GB of RAM
  • 15.6″ UltraHD (3840×2160) Screen
  • Broadcom BCM43602 Wireless card
  • Windows 10 Pro installed

(more…)


VirtualBox vs KVM

virtualization_iconWorking in IT, it is often useful to be able to test software and try out stuff in a clean environment, to make sure you do not, inadvertently, destroy your work-laptop. Personally, I have been using VirtualBox for this for quite some time. However, one of my friends, and co-worker, (hi Maarten!) has been nagging me continuously over the past year about why I am still using VirtualBox and why I would not switch to KVM. Especially since I am running Fedora on my laptop, his argument is that using the de facto built-in way for virtualization on Linux is better (and faster) than using VirtualBox, which, admittedly, does have its quirks. Annoyingly, performance comparisons over time, seem to support his claim.

So, after trying KVM out a few times, reluctantly and not really open-minded, and failing in accomplishing what I want, I thought it was time to go ahead and REALLY figure out what is holding me back from using KVM, and if I would be able to switch from VirtualBox to KVM as my go-to virtualization software. Also, it makes for blog-post, which is always a good thing 🙂

As is the case with any kind of switch like this, it is important to define what my requirements are for the virtual machine provider, and of course, as it is a comparison, I will be comparing everything KVM does to VirtualBox, for better or worse. I might even put in some screenshots here and there.

(more…)


John Oliver talks about Government Surveillance

JohnOliver_LWT_KeyArt_FinalSome time ago, I had a post that showed a Youtube video from Last Week Tonight, in which John Oliver explained Net Neutrality in the best way possible.

This time, I would like to share a video about Government Surveillance. In the video, apart from the expected joking about, John Oliver tells us that the Patriot Act will be due for reauthorization on June 1st of this year. In the Patriot Act, there is a section, 215, also called the library records section, that grants the U.S. government the power to ask for tangible things in its fight against terrorism. It has been set up in such a broad way, that it is basically a blank check. Now, I will not go further into explaining this, as the video does a much better job at this.

There are two lessons to be learned from the video. One is that a lot of people have “forgotten” about who Edward Snowden is, and the things he brought to light. Some people even thought he was Julian Assange, the founder of Wikileaks, which is not a good thing.

However, the most important lesson to be learned from this, and one that is put forward in the video as well, is that most people cannot actually grasp the concept of how far-reaching the NSA programs were. This is especially if you try to explain it to them in the “techy” language that is inherent to the discussion. However, once you simplify the discussion, and put it into a context people can relate to, they are a lot more susceptible to the problem at hand.

Have a look at the video after the break and see for yourself.

(more…)


The Big Migration – Consolidating my accounts – Execution

Original Image: CloudTweaks.com - http://cloudtweaks.com/2011/08/the-lighter-side-of-the-cloud-the-migration-strategy/

Original Image: CloudTweaks.com – http://cloudtweaks.com/2011/08/the-lighter-side-of-the-cloud-the-migration-strategy/

As described in The Big Migration – Consolidating my accounts – Preparation, I am moving my @gmail account to my @gapps account. The main reason is to provide me with only one account to sign in to.

Just to refresh everyone’s memory, here is the list of stuff that I want to transfer:

Google Tools:

  • AdSense
  • Analytics
  • Android (i.e.: Play Store)
  • Calendar
  • Chrome
  • Contacts
  • Drive
  • Gmail (naturally)
  • Finance
  • Google+
  • Google Now
  • Hangouts
  • Maps
  • Picasa
  • Web history
  • Webmaster Tools

Connected Tools:

  • Chrome Remote Desktop
  • Feedly
  • WordPress (to be able to get my posts to Google+)
  • WordPress – Google Analytics Dashboard for WP (to get my Analytics data to the dashboard on my site)

(more…)


The Big Migration – Consolidating my accounts – Preparation 1

migrate-to-cloudAs described in“The ancient way” – or why I am still using Thunderbird for mail, I am still using a client, Thunderbird, to access my Gmail accounts. This has both its advantages and disadvantages, an example of the latter being that I am always dependent on a connection to my server (in the setup that I am running, which is not optimal, to say the least).

One of the reasons why I have not yet moved to the online model, is that I like having an overview of everything in one view, something that Thunderbird provides me with. However, this is also possible in Gmail, if you set up some forwarding and import rules, so basically, consolidating everything into one account.

This has the added advantage that Google Now (which I use a lot) will be able to also show me information on orders that I placed at stores, travel details, and so on.

Unfortunately, there is no button to press to get everything done magically, so I will have to manually move everything from my Gmail account (@gmail) to my Google Apps account (@gapps). Then again: maybe there are tools that I can use. Let us dive a bit deeper.

(more…)


“The ancient way” – or why I am still using Thunderbird for mail 1

thunderbird_gmailIn  the olden days, when one was looking for an email client, you either ended up with Outlook Express (as it was included with Windows) or Outlook, as it was included in pretty much all Office versions.

Back in those days, pretty much all email you received in your client would be transferred via POP, or the Post Office Protocol. As user mailboxes were not that big at the time, I believe it was 20MB at most ISPs in the Netherlands, POP would download your mail into your client and then delete it from the server.

When the first free email providers started, Hotmail (which apparently started with only 2MB) and Yahoo! Mail, you started to get the ability to save more and more mails in your mailbox, but occasionally, you would still have to delete items to free up space. It must be mentioned, that emails back then were also a lot smaller than the ones we have now.

When Gmail was first launched, in 2004, it provided users with a whopping 1GB of mail. Hotmail and Yahoo followed suit and also started offering more storage space.

(more…)


Tools, tools, tools

There are many online tools these days, which you can use for just about anything. Apart from the usual suspects, like Facebook, Twitter and Google (of which the first two are not necessarily tools), there are a number of other tools, which aim to increase your productivity. I have mentioned a number of these in another post, To cloud or not to cloud. Of course, not all tools mentioned there are ones that I use.

As you start looking around to improve your own productivity, you start to try tools, and stick with them, or not. At the moment, the tools I use most extensively are Evernote, Wunderlist, TrelloGoogle Calendar, and Dropbox.

I think that I have written enough about Evernote, but for this article, let’s just keep it at that I use it as my digital filing cabinet. Wunderlist is a to-do-list app, which you can use to keep track of your to-do’s and share them with others as well. Trello is more of a project management application, based on a Kanban Board, I am using it to see if it useful for planning projects. Google Calendar, well, that is basically what the name says: a calendar. It has my appointments in it, and such, which is what it is made for. Dropbox is well-known, I would assume, but just in case someone does not know it yet, it is a file-syncing service, which puts your files in the cloud and makes them (readily) available on every device you have installed Dropbox on. (more…)