Docunext


m0n0wall on Soekris net4501

June 15th, 2007
Jun 15 23:17:45 	/kernel: avail memory = 50819072 (49628K bytes)
Jun 15 23:17:45 	/kernel: Preloaded elf kernel "kernel" at 0xc0e0f000.
Jun 15 23:17:45 	/kernel: Preloaded mfs_root "/mfsroot" at 0xc0e0f0a8.
Jun 15 23:17:45 	/kernel: md0: Preloaded image  11534336 bytes at 0xc030d43c
Jun 15 23:17:45 	/kernel: md1: Malloc disk
Jun 15 23:17:45 	/kernel: Timecounter "ELAN" frequency 8333333 Hz
Jun 15 23:17:45 	/kernel: npx0:  on motherboard
Jun 15 23:17:45 	/kernel: npx0: INT 16 interface
Jun 15 23:17:45 	/kernel: pcib0:  on motherboard
Jun 15 23:17:45 	/kernel: pci0:  on pcib0
Jun 15 23:17:45 	/kernel: sis0:  port 0xe000-0xe0ff mem 0xa0000000-0xa0000fff irq 10 at device 18.0 on pci0
Jun 15 23:17:45 	/kernel: sis0: Ethernet address: 00:00:24:c8:7b:b0
Jun 15 23:17:45 	/kernel: miibus0:  on sis0
Jun 15 23:17:45 	/kernel: ukphy0:  on miibus0
Jun 15 23:17:45 	/kernel: ukphy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
Jun 15 23:17:45 	/kernel: sis1:  port 0xe100-0xe1ff mem 0xa0001000-0xa0001fff irq 11 at device 19.0 on pci0
Jun 15 23:17:45 	/kernel: sis1: Ethernet address: 00:00:24:c8:7b:b1
Jun 15 23:17:45 	/kernel: miibus1:  on sis1
Jun 15 23:17:45 	/kernel: ukphy1:  on miibus1
Jun 15 23:17:45 	/kernel: ukphy1: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
Jun 15 23:17:45 	/kernel: sis2:  port 0xe200-0xe2ff mem 0xa0002000-0xa0002fff irq 5 at device 20.0 on pci0
Jun 15 23:17:45 	/kernel: sis2: Ethernet address: 00:00:24:c8:7b:b2
Jun 15 23:17:45 	/kernel: miibus2:  on sis2
Jun 15 23:17:45 	/kernel: ukphy2:  on miibus2
Jun 15 23:17:45 	/kernel: ukphy2: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
Jun 15 23:17:45 	/kernel: isa0:  on motherboard
Jun 15 23:17:45 	/kernel: orm0: 

Unfortunately the webGUI for m0n0wall on the net4501 is REALLY SLOW. I mean molasses. I'm wondering if I have mine configured wrong because it is so slow. Up to a minute for the page to refresh. The WRAP is much much faster. The bridging is fine (I have mine setup as a bridge filter to manage bandwidth).

+----------------+
| CABLE MODEM    |
+----------------+
|
+---------------------------+
| SOEKRIS - m0n0wall bridge |
+---------------------------+(LAN - No DHCP)
|                           |
| (OPT1 PUBLIC IPs)         |
|                           |
+------------+              |
| DMZ SWITCH |              |
+------------+-+----+       |
|             SRV1 SRV2..   |
|                           |
+---------------------+     |
| WRAP - m0n0wall vpn |     |
+---------------------+     |
|                           |
|(LAN)                      |
|                           |
+------------+              |
| LAN SWITCH |              |
+------------+--------------+

I'm trying to make the net4501 perform a little faster, so I'm disabling most things that I don't need.

I just emailed the m0n0wall lists this question:

I'm loving m0n0wall, nice work! I'm using a soekris net4501 as a filtered bridge to manage bandwidth for a diverse network. I have a /28 subnet of public ips that I'm passing through the net4501 from wan to opt1 to a switch connecting:
  • Astlinux (though soon to be askoziaPBX) on WRAP

  • m0n0wall on a WRAP acting as a NAT and router for our office lan

  • a couple of public servers

This allows our lan computers to access the public servers, which you can't do when using 1:1 or server NAT AFAIK.

Everything is working well, and I have the inner m0n0wall (the one on the WRAP behind the filtered bridge) connecting a VPN out to another network. That still works fine, except I'm noticing some very odd behavior. If I ssh over the VPN to a a device on the remove lan and run one of the following commands:

  • ifconfig

  • ps -A

something goes haywire and the shell is dropped. The process doesn't die, as I can login through the public ip and watch the top of my user and see sshd and bash continue to run after the screen buffer in the other shell through the vpn stops responding.

I'm wondering if I'm doing something that goes against good network design here, or if this is a sign of something that is mis-configured and needs to be fixed. I appreciate any advice - thanks!

¥

Yearly Indexes: 2003 2004 2006 2007 2008 2009 2010 2011 2012 2013 2015 2019 2020 2022