Use Cell Phone As LAN Gateway - Revision history

Dlk: /* Testing the router */

2021-03-11T15:50:10Z

Testing the router

2021-03-11T15:26:24Z

Configure the ethernet port with a static address

2021-03-11T15:22:05Z

Start the dnsmasq service

2021-03-11T12:41:35Z

Testing the router

2021-03-11T12:35:41Z

Start the dnsmasq service

2021-03-11T12:29:27Z

Start the dnsmasq service

2021-03-11T12:27:16Z

Configure the ethernet port with a static address

2021-03-11T02:41:48Z

Start the dnsmasq service

2021-03-11T02:00:39Z

Configure firewalld

2021-02-25T16:29:43Z

Testing the router

@@ Line 103: / Line 103: @@
 == Testing the router ==
-Power on the laptop and connect a PC to the laptop's ethernet port.  The PC should obtain an address in the 10.254.239.0/24 subnet from DHCP on the laptop.  If the PC doesn't immediately get an address, it may be necessary to restart the dhcpd service on the laptop.  NetworkManager does not bring up the ethernet port until it is physically connected to the PC.
+Power on the laptop and connect a PC to the laptop's ethernet port.  The PC should obtain an address in the 10.254.239.0/24 subnet from DHCP on the laptop.  If the PC doesn't immediately get an address, it may be necessary to restart the dhcpd service on the laptop.
 Turn off any other network connections the PC may have.

@@ Line 31: / Line 31: @@
 Putting this interface into firewalld's "trusted" zone allows all traffic to flow on all ports.
-Delete any other connections that may have been defined by the installation process, only this one is needed.
+If the interface is not brought up and configured during the boot process, put the following lines into <code>/etc/NetworkManager/conf.d/99-ignore-carrier.conf</code>:
 == Configure and start the dhcp-server ==

@@ Line 56: / Line 56: @@
 == Start the dnsmasq service ==
-Comment out these two lines in the <code>/etc/dnsmasq.conf</code> file:
+In the <code>/etc/dnsmasq.conf</code> file, change:
 <pre>
 interface=lo
-bind_interfaces
+</pre>
 </pre>

@@ Line 95: / Line 95: @@
 == Testing the router ==
-Power on the laptop and connect a PC to the laptop's ethernet port.  The PC should obtain an address in the 10.254.239.0/24 subnet from DHCP on the laptop.  Make sure that this is the only active connection on the PC, i.e., turn off any wireless connections the PC may have, etc.
+Power on the laptop and connect a PC to the laptop's ethernet port.  The PC should obtain an address in the 10.254.239.0/24 subnet from DHCP on the laptop.  If the PC doesn't immediately get an address, it may be necessary to restart the dhcpd service on the laptop.  NetworkManager does not bring up the ethernet port until it is physically connected to the PC.
 Connect the cell phone to a USB port on the laptop and turn off its wifi connection and turn on its tethering function.  You should be able to watch the laptop's log using <code>journalctl -f</code> and see the new connection come up on the laptop.

@@ Line 59: / Line 59: @@
 <pre>
 interface=lo
-bind_interface
+bind_interfaces
 </pre>

← Older revision		Revision as of 12:27, 11 March 2021
Line 30:		Line 30:

	Putting this interface into firewalld's "trusted" zone allows all traffic to flow on all ports.		Putting this interface into firewalld's "trusted" zone allows all traffic to flow on all ports.
		+
		+	Delete any other connections that may have been defined by the installation process, only this one is needed.

	== Configure and start the dhcp-server ==		== Configure and start the dhcp-server ==

@@ Line 54: / Line 54: @@
 == Start the dnsmasq service ==
-No configuration changes are required.  Enable and start the dnsmasq systemd service.
+Comment out the line <code>interface=lo</code> in the <code>/etc/dnsmasq.conf</code> file.
 == Enable routing in the kernel ==

@@ Line 74: / Line 74: @@
 firewall-cmd --zone=router --set-target=ACCEPT --permanent
 firewall-cmd --zone=router --add-masquerade --permanent
 firewall-cmd --zone=router --add-rich-rule="rule port port=22 protocol=tcp drop" --permanent
 firewall-cmd --zone=router --add-rich-rule="rule port port=53 protocol=tcp drop" --permanent
@@ Line 83: / Line 82: @@
 firewall-cmd --zone=router --add-rich-rule="rule port port=5353 protocol=udp drop" --permanent
 firewall-cmd --reload
 </pre>

@@ Line 274: / Line 274: @@
    icmp-blocks:
    rich rules:
-	rule source-port port="22" protocol="tcp" drop
+	rule port port="22" protocol="tcp" drop
-	rule source-port port="53" protocol="tcp" drop
+	rule port port="53" protocol="tcp" drop
-	rule source-port port="53" protocol="udp" drop
+	rule port port="53" protocol="udp" drop
-	rule source-port port="67" protocol="udp" drop
+	rule port port="67" protocol="udp" drop
-	rule source-port port="67" protocol="tcp" drop
+	rule port port="67" protocol="tcp" drop
-	rule source-port port="323" protocol="udp" drop
+	rule port port="323" protocol="udp" drop
-	rule source-port port="5353" protocol="udp" drop
+	rule port port="5353" protocol="udp" drop
 trusted (active)