Book Image

Network Administration with FreeBSD 7

By : Babak Farrokhi
Book Image

Network Administration with FreeBSD 7

By: Babak Farrokhi

Overview of this book

<p>This book is a guide to FreeBSD for network administrators; therefore it does not cover basic installation and configuration of FreeBSD, but is about using FreeBSD to build, secure, and maintain networks.<br /><br />After introducing the basic tools for monitoring the performance and security of the system the book moves on to cover using jails&acirc;&euro;&rdquo;FreeBSD virtual environments&acirc;&euro;&rdquo;to virtually run multiple instances of FreeBSD on the same hardware. Then it shows how to overcome the different bottlenecks that you may meet depending on the services you are running by tweaking different parameters to maintain a high performance from your FreeBSD server. Next it covers using the ifconfig utility to configure interfaces with different layer protocols and about connectivity testing and debugging tools. After covering using User PPP or Kernel PPP for Point-to-Point Protocol network configuration it explains basic IP forwarding in FreeBSD and the use of the built-in routing daemons, routed and route6d, which support RIPv1, RIPv2, RIPng, and RDISC. Next it covers the OpenOSPFD and OpenBGPD daemons that you can install to run OSPF and BGP on your host. Then it covers setup and configuration of IPFW and PF, and finally looks at some important internet services and how to set them up on your FreeBSD server.</p>

Related Content you might be interested in

Current Title:

Small book image
Network Administration with FreeBSD 7
Babak Farrokhi
Apr, 2008 | 280 pages
No titles found
Table of Contents (19 chapters)
Network Administration with FreeBSD 7
Network Administration with FreeBSD 7
Credits
Credits
About the Author
About the Author
About the Reviewer
About the Reviewer
Preface
Preface
Free Chapter
1
System Configuration—Disks
System Configuration—Disks
Partition Layout and Sizes
Swap
Softupdates
Snapshots
Quotas
File System Backup
RAID-GEOM Framework
Summary
2
System Configuration—Keeping it Updated
System Configuration—Keeping it Updated
CVSup—Synchronizing the Source Code
Ports Collection
Security Advisories
Customizing and Rebuilding Kernel
Rebuilding World
Binary Update
Recovering from a Dead Kernel
Summary
3
System Configuration—Software Package Management
System Configuration—Software Package Management
Ports and Packages
Package Management Tools
Summary
4
System Configuration—System Management
System Configuration—System Management
Process Management and Control
Summary
5
System Configuration—Jails
System Configuration—Jails
Concept
Introduction
Setting Up a Jail
Configuring the Host System
Starting the Jail
Automatic Startup
Shutting Down Jails
Managing Jails
Jail Security
Jail Limitations
Summary
6
System Configuration—Tuning Performance
System Configuration—Tuning Performance
Tweaking Kernel Variables using SYSCTL
Kernel
Disk
Network
The /etc/make.conf file
The /boot/loader.conf file
Summary
7
Network Configuration—Basics
Network Configuration—Basics
Ifconfig Utility
Default Routing
Name Resolution
Network Testing Tools
Summary
8
Network Configuration—Tunneling
Network Configuration—Tunneling
Generic Routing Encapsulation (GRE) protocol
IPSEC
Summary
9
Network Configuration—PPP
Network Configuration—PPP
Setting up PPP Client
Setting up PPP Server
Setting up PPPoE Client
Setting up PPPoE Server
Summary
10
Network Configuration—Routing and Bridging
Network Configuration—Routing and Bridging
Basic Routing—IP Forwarding
Static Routing
routed and route6d
Running OSPF—OpenOSPFD
Running BGP—OpenBGPD
Bridging
Proxy ARP
Summary
11
Network Configuration—IPv6
Network Configuration—IPv6
IPv6 Facts
Using IPv6
Routing IPv6
RIP6
Multicast Routing
Tunneling
Summary
12
Network Configuration—Firewalls
Network Configuration—Firewalls
Packet Filtering with IPFW
Packet Filtering with PF
Network Address Translation using PF and IPFW
Summary
13
Network Services—Internet Servers
Network Services—Internet Servers
inetd Daemon
SSH
NTP
DNS
FTP
Mail
Web
Proxy
Summary
14
Network Services—Local Network Services
Network Services—Local Network Services
Dynamic Host Configuration Protocol (DHCP)
Trivial File Transfer Protocol (TFTP)
Network File System (NFS)
Server Message Block (SMB) or CIFS
Simple Network Management Protocol (SNMP)
Printing
Network Information System (NIS)
Summary

Basic Routing—IP Forwarding

The default behavior of a FreeBSD host is only to pick up packets that are destined for the same host. In case there are multiple network interfaces installed on the host, the system does not forward traffic between interfaces by default.

This behavior is changed by enabling IP forwarding using the sysctl(8) utility:

# sysctl net.inet.ip.forwarding=1
# sysctl net.inet6.ip6.forwarding=1

The above commands will enable forwarding for IPv4 and IPv6 respectively.

To make these changes permanent, you can also add the following lines to the /etc/rc.conf file:

gateway_enable="YES"
ipv6_gateway_enable="YES"

By enabling IP Forwarding (routing) between interfaces, the system will pick up all the packets that have the layer2 destination, (MAC) address of the same host, and will forward it to an appropriate network interface, according to the system's routing table.

Once the forwarding is enabled, the forwarding behavior can be controlled by modifying the routing table. This is...

Previous Section
End of Section 2
Next Section