Book Image

Network Administration with FreeBSD 7

By : Babak Farrokhi
Book Image

Network Administration with FreeBSD 7

By: Babak Farrokhi

Overview of this book

<p>This book is a guide to FreeBSD for network administrators; therefore it does not cover basic installation and configuration of FreeBSD, but is about using FreeBSD to build, secure, and maintain networks.<br /><br />After introducing the basic tools for monitoring the performance and security of the system the book moves on to cover using jails&acirc;&euro;&rdquo;FreeBSD virtual environments&acirc;&euro;&rdquo;to virtually run multiple instances of FreeBSD on the same hardware. Then it shows how to overcome the different bottlenecks that you may meet depending on the services you are running by tweaking different parameters to maintain a high performance from your FreeBSD server. Next it covers using the ifconfig utility to configure interfaces with different layer protocols and about connectivity testing and debugging tools. After covering using User PPP or Kernel PPP for Point-to-Point Protocol network configuration it explains basic IP forwarding in FreeBSD and the use of the built-in routing daemons, routed and route6d, which support RIPv1, RIPv2, RIPng, and RDISC. Next it covers the OpenOSPFD and OpenBGPD daemons that you can install to run OSPF and BGP on your host. Then it covers setup and configuration of IPFW and PF, and finally looks at some important internet services and how to set them up on your FreeBSD server.</p>

Related Content you might be interested in

Current Title:

Small book image
Network Administration with FreeBSD 7
Babak Farrokhi
Apr, 2008 | 280 pages
No titles found
Table of Contents (19 chapters)
Network Administration with FreeBSD 7
Network Administration with FreeBSD 7
Credits
Credits
About the Author
About the Author
About the Reviewer
About the Reviewer
Preface
Preface
Free Chapter
1
System Configuration—Disks
System Configuration—Disks
Partition Layout and Sizes
Swap
Softupdates
Snapshots
Quotas
File System Backup
RAID-GEOM Framework
Summary
2
System Configuration—Keeping it Updated
System Configuration—Keeping it Updated
CVSup—Synchronizing the Source Code
Ports Collection
Security Advisories
Customizing and Rebuilding Kernel
Rebuilding World
Binary Update
Recovering from a Dead Kernel
Summary
3
System Configuration—Software Package Management
System Configuration—Software Package Management
Ports and Packages
Package Management Tools
Summary
4
System Configuration—System Management
System Configuration—System Management
Process Management and Control
Summary
5
System Configuration—Jails
System Configuration—Jails
Concept
Introduction
Setting Up a Jail
Configuring the Host System
Starting the Jail
Automatic Startup
Shutting Down Jails
Managing Jails
Jail Security
Jail Limitations
Summary
6
System Configuration—Tuning Performance
System Configuration—Tuning Performance
Tweaking Kernel Variables using SYSCTL
Kernel
Disk
Network
The /etc/make.conf file
The /boot/loader.conf file
Summary
7
Network Configuration—Basics
Network Configuration—Basics
Ifconfig Utility
Default Routing
Name Resolution
Network Testing Tools
Summary
8
Network Configuration—Tunneling
Network Configuration—Tunneling
Generic Routing Encapsulation (GRE) protocol
IPSEC
Summary
9
Network Configuration—PPP
Network Configuration—PPP
Setting up PPP Client
Setting up PPP Server
Setting up PPPoE Client
Setting up PPPoE Server
Summary
10
Network Configuration—Routing and Bridging
Network Configuration—Routing and Bridging
Basic Routing—IP Forwarding
Static Routing
routed and route6d
Running OSPF—OpenOSPFD
Running BGP—OpenBGPD
Bridging
Proxy ARP
Summary
11
Network Configuration—IPv6
Network Configuration—IPv6
IPv6 Facts
Using IPv6
Routing IPv6
RIP6
Multicast Routing
Tunneling
Summary
12
Network Configuration—Firewalls
Network Configuration—Firewalls
Packet Filtering with IPFW
Packet Filtering with PF
Network Address Translation using PF and IPFW
Summary
13
Network Services—Internet Servers
Network Services—Internet Servers
inetd Daemon
SSH
NTP
DNS
FTP
Mail
Web
Proxy
Summary
14
Network Services—Local Network Services
Network Services—Local Network Services
Dynamic Host Configuration Protocol (DHCP)
Trivial File Transfer Protocol (TFTP)
Network File System (NFS)
Server Message Block (SMB) or CIFS
Simple Network Management Protocol (SNMP)
Printing
Network Information System (NIS)
Summary

Routing IPv6

Similar to IPv4, your host does not automatically forward IPv6 traffic between interfaces, by default. In order to enable packet forwarding between the two IPv6 enabled interfaces, you should modify the net.inet6.ip6.forwarding sysctl variable:

# sysctl net.inet6.ip6.forwarding=1

This can also be achieved by adding the following variable to the /etc/rc.conf file:

ipv6_gateway_enable="YES"

After enabling IPv6 forwarding in the /etc/rc.conf file, you should reboot your system or run relevant rc script:

# /etc/rc.d/network_ipv6 restart

The rtadvd(8) daemon is another component that you may want to enable on a IPv6 router. As mentioned earlier, the hosts automatically configure the IPv6 addresses on their interface, based on the advertisements they receive from the IPv6 enabled routers on the same subnet. These advertisements are called Router Advertisement (RA) packets. The rtadvd(8) daemon sends router advertisements on the specified network interfaces, helping hosts to automatically...

Previous Section
End of Section 4
Next Section