I’m struggling to find some guidance on the complete configuration of a private network setup.
I currently have 2 Pi’s with ASL3 installed and all seems ok. Using simple usb modems
I also have an i386 laptop with the Debian 12 and ASL3 setup for any possible testing that may need to be done.
I cannot connect to the AllStar Network just yet. This is going to be for a big event next year that you will hear about at some point.
Basic network setup is:
3 peplink routers all connected via a “layer 2 speedfusion vpn”
All 3 locations are remote and 1 port on each router is configured to this layer
2 vlan the pi will connect too.
All of this is completed and working fine. I can access each location as if all these devices are on the same local area network. So, I shouldn’t have any type of firewall issues.
2 of the locations will be using a Starlink Mini to make the VPN link possible. The 3rd location is on a fiber network with Static IPs available. (It is a requirement that one location must have a static public Ip for this layer2 Vpn to function and since Starlink offers CGNAT that’s not possible. (Yes, public Ip is available on the commercial plans, but it is still not static for a “roaming” service.
If anyone can point me to all the needed configurations on the setup of the nodes to communicate between each other in a standalone configuration it would be greatly appreciated. I’ve searched and searched and cannot find solid info on this setup.
I’ve done something like this in the rpt.conf file for 2 test device but I’m not even sure if this is correct and where else i may need to setup.
Main Location:
1500 = [email protected]:4569/1500,NONE ;main node/server
1500 = [email protected]:4569/1500,NONE ;main node client
1502 = [email protected]:4570/1502,NONE ;first remote node
From what you have written, I believe you need different node numbers, they can’t be the same. Additionally, each node should have their own rpt.c9nf configured with its own node number @127.0.0.1
Bind port would need to be the port you have configured for that node, for example in node 1502’s conf u will have 4570. Each conf should have it’s own port correctly configured.
It will also help if you set bindaddress to 0.0.0.0
Then give it a try and see if it works. That’s the only way to know if the settings are correct. Share if you have any issues and someone will definitely help with the exact issue you face or it might even be covered already.
Node numbers, even private ones, need to be unique.
I might suggest making all private nodes that start with 15 in one server and 16 for the other so you can keep them straight in your head.
The :port description needs to be the port used on the server your are connecting to.
And that is not clear to me in your config, but you need to go over it.
Please do correct me if I am wrong, but i think that the server @Mike is referring to is the allstarlink portal server and when @NurcDiver says server he is referring to the raspberry pi physical device.
Each node may have its own port number which could be different on its own physical device.
Allstarlink does not host any servers that handle traffic between nodes. All connections between nodes are peer-to-peer. Allstarlink just provides the “phone book” for nodes to look each other up. The portal is just a place to tell the Allstarlink “phone book” how your physical server (Raspberry Pi in this case) is configured. The “server” is always your physical host device.
This was my thinking. I read someplace that each station can act as a server and a client(node) so i assumed i would have to put the local loop back address 172.0.0.1 in the config on each side. and then the actual ip address of that device.
But now that i think about it if i plan on having one device acting as the main server then i probably only need to put one line in each of the remotes like this?
1500 = [email protected]:4569/1500,NONE ;main node/server : this will be main server
1500 = [email protected]:4569/1500,NONE ;main node client ;this is main server ip address and binded port in the iax.conf on the server These 2 lines are for the server device.
Then in each remote node something like this only?
But this doesn’t seem right to me because the remotes are not pointing to the server in anyway.
Then maybe on the server unit i should also add the bind address to 0.0.0.0 ??? or should i add each port from each remote node?
set bindaddress to 0.0.0.0
set bindaddress to 4570
set bindaddress to 4571
set bindaddress to 4572
I can’t be the only one that is wanting to do this…lol Once i get all working as it should i will be putting together a “how to” for the site because i have not been able to find a lot of details on this as you can tell with all my questions
Just to add if i’m not dealing with any port restrictions(all local area network not passing out any firewall) should i just be using that 0.0.0.0 bind port on the server and the same on the remote nodes?
wouldn’t i need to use the actual ip of each node rather than 127.0.0.1 for them to contact each other across the lan? I’m not seeing how the devices will be able to find each other across the lan.
127.0.0.1 means local, it means it is on the server you are describing it from.
You could use the local IP address I guess but why slow it down by bouncing it off the router.
There is no requirement to set the iax port on the local address, but I always use it.
It port will default to the local server setting when it’s internal 127.0.0.1
I understand all of that. i guess my question is if all the remote nodes have 127.0.0.1 in the config file how do they contact each other? it’s going to contact itself with a local loopback address 127.0.0.1 just not understanding this part.
with any other type of ip communications between a server/client/node/phone etc. you must tell the devices the ip to contact. So, if this is correct there’s something else going on between server/clients/nodes that i am not aware of and would like to understand how they are communicating.
Bindport= 4569
should only be the iax port you are using on server 1,
bindport=4570 on sever #2
but you can allow ‘any port’ by using 0.0.0.0 but once you have done that any other definition is meaningless. and lowers security
;=========================================
;Server 1 iax port 4569
; server 2 iax port 4570
;=========================================
;1st server
[nodes]
1500 = [email protected]:4569/1500,NONE ;local primary node on this server (local)
1501 = [email protected]:4569/1501,NONE ;2nd node on this server (local)
You still need a path in the dialplan (extensions.conf) for connecting the private nodes.
I can’t spell this part out any clearer from the info you have provided.
bindaddress should be uncommitted and have a value of 0.0.0.0
This restricts connecting addresses for security if you so desite and should be open if you want to allow incoming connections.
0.0.0.0 is ‘ANY’ but the line is commented and says ‘NONE’ as is.
Once you have established your system working, you can restrict it to the address of a known server ‘ONLY’ if that is your goal.
while bindport can have multiple ports to bind to, stay on the beaten path and just use one port to bind your iax connects to. To do anything else is for a advanced level you clearly have no purpose for.
Hi ap2x, so i’ve finally received all of the required components to continue this project. I have one question for you. Should I not use the default port of 4569 on any of the nodes (only reason i’m asking is Station 1 already is set to it) absolutely no problems changing it but was just curious if that could be causing any potential conflicts. Thanks!
