Watchguard XTM 5 - Revision history

Adj: /* OpenVPN */

2018-01-07T19:15:49Z

OpenVPN

← Older revision		Revision as of 19:15, 7 January 2018
Line 140:		Line 140:
	apt-get install openvpn		apt-get install openvpn

	[[OpenVPN configuration]] has ~~it's~~ own page.		[[OpenVPN configuration]] has its own page.

	== Network performance numbers ==		== Network performance numbers ==

2018-01-07T19:15:38Z

OpenVPN

← Older revision		Revision as of 19:15, 7 January 2018
Line 139:		Line 139:
	=== OpenVPN ===		=== OpenVPN ===
	apt-get install openvpn		apt-get install openvpn

			[[OpenVPN configuration]] has it's own page.

	== Network performance numbers ==		== Network performance numbers ==

2017-12-30T19:48:26Z

hardware description

← Older revision		Revision as of 19:48, 30 December 2017
Line 15:		Line 15:
	* 1x DDR2 PC6400 1Gbyte DIMM		* 1x DDR2 PC6400 1Gbyte DIMM

	AFAICT, ~~*~~all~~*~~ Watchguard XTM 505, 510, 520, 530 have the same hardware inside. Differences are licensed capacity in the Watchguard OS. (But 515, 525, 535 are different in some way)		AFAICT, '''all''' Watchguard XTM 505, 510, 520, 530 have the same hardware inside. Differences are licensed capacity in the Watchguard OS. (But 515, 525, 535 are different in some way)

	== Modifications so far ==		== Modifications so far ==

2017-12-30T19:44:26Z

IPv6 forwarding enablement

← Older revision		Revision as of 19:44, 30 December 2017
Line 130:		Line 130:
	address '''''tunnelclientIPv6address'''''		address '''''tunnelclientIPv6address'''''
	endpoint '''''tunnelserverIPv4address''''' # There are many possible tunnel servers		endpoint '''''tunnelserverIPv4address''''' # There are many possible tunnel servers
	local '''''tunnelclientIPv4address''''' # internet facing address of the local system (may not actually be required)		# local '''''tunnelclientIPv4address''''' # internet facing address of the local system (may not actually be required)
	ttl 255		ttl 255
	gateway '''''tunnelserverIPv6address''''' # this will be the next hop for the IPv6 default route		gateway '''''tunnelserverIPv6address''''' # this will be the next hop for the IPv6 default route

2017-12-30T19:44:06Z

IPv6 tunnel to Hurricane Electric/Tunnelbroker.net

← Older revision		Revision as of 19:44, 30 December 2017
Line 116:		Line 116:
	address '''''tunnelclientIPv6address'''''		address '''''tunnelclientIPv6address'''''
	endpoint '''''tunnelserverIPv4address''''' # There are many possible tunnel servers		endpoint '''''tunnelserverIPv4address''''' # There are many possible tunnel servers
	local '''''tunnelclientIPv4address''''' # internet facing address of the local system (~~may~~ not actually be required)		# local '''''tunnelclientIPv4address''''' # internet facing address of the local system (this is not actually be required)
	ttl 255		ttl 255
	gateway '''''tunnelserverIPv6address''''' # this will be the next hop for the IPv6 default route		gateway '''''tunnelserverIPv6address''''' # this will be the next hop for the IPv6 default route

2017-12-30T16:37:59Z

Making it a router

@@ Line 102: / Line 102: @@
 == Making it a router ==
-=== IPv6 things ===
+=== IPv6 software needed ===
  apt-get install radvd ndisc6        # IPv6 tools
 === OpenVPN ===
  apt-get install openvpn
 == Network performance numbers ==

2017-05-16T21:30:07Z

hardware description

← Older revision		Revision as of 21:30, 16 May 2017
Line 9:		Line 9:
	* 2x USB ports inside		* 2x USB ports inside
	* motherboard has a single Socket 775 Celeron 440 CPU (not very exciting, but this will turn exciting later on)		* motherboard has a single Socket 775 Celeron 440 CPU (not very exciting, but this will turn exciting later on)
	* 2x DDR2 DIMM sockets		* 2x DDR2 DIMM sockets (non-ECC)
	* Compact Flash port (not sure largest capacity suppported -- The WatchGuard OS is delivered on a 1Gbyte CF card.		* Compact Flash port (not sure largest capacity suppported -- The WatchGuard OS is delivered on a 1Gbyte CF card.
	* 2x SATA (SATA 2, probably, based on age) ports on motherboard.		* 2x SATA (SATA 2, probably, based on age) ports on motherboard.

2016-10-31T18:31:13Z

Firewall beginnings

← Older revision		Revision as of 18:31, 31 October 2016
Line 175:		Line 175:
	apt-get install fancontrol # Ramps fans up when we move .. in .. to .. the .. dangerzone!		apt-get install fancontrol # Ramps fans up when we move .. in .. to .. the .. dangerzone!
	apt-get install haproxy/jessie-backports # This machine is going to be the TLS (SSL) endpoint for a number of services. The version of HAproxy in jessie-backports includes LUA support and can be used for zero-downtime Let'sEncrypt certificate updates		apt-get install haproxy/jessie-backports # This machine is going to be the TLS (SSL) endpoint for a number of services. The version of HAproxy in jessie-backports includes LUA support and can be used for zero-downtime Let'sEncrypt certificate updates

			=== nftables resources ===
			* http://developers.redhat.com/blog/2016/10/28/what-comes-after-iptables-its-successor-of-course-nftables/
			* https://wiki.nftables.org/
			* https://wiki.debian.org/nftables
			* https://wiki.archlinux.org/index.php/nftables

	== CPU Upgrade, anyone? ==		== CPU Upgrade, anyone? ==

2016-09-28T22:40:48Z

mumblemumblemumbleperformCPUtranslplant

← Older revision		Revision as of 22:40, 28 September 2016
Line 216:		Line 216:

	=== mumblemumblemumbleperformCPUtranslplant ===		=== mumblemumblemumbleperformCPUtranslplant ===

			It's on youtube! Thank you for the assist, kids!

	=== Post upgrade state ===		=== Post upgrade state ===

2016-09-13T17:23:02Z

hardware description

← Older revision		Revision as of 17:23, 13 September 2016
Line 15:		Line 15:
	* 1x DDR2 PC6400 1Gbyte DIMM		* 1x DDR2 PC6400 1Gbyte DIMM

	AFAICT, *all* Watchguard XTM 505, 510, 520, 530 have the same hardware inside. Differences are licensed capacity in the Watchguard OS.		AFAICT, *all* Watchguard XTM 505, 510, 520, 530 have the same hardware inside. Differences are licensed capacity in the Watchguard OS. (But 515, 525, 535 are different in some way)

	== Modifications so far ==		== Modifications so far ==