AAISP Support Documentation

https://support.aa.net.uk
Admin
AAISP Support Documentation is a comprehensive technical support resource for Andrews & Arnold Ltd...
Tokens:296,207
Snippets:4,514
Trust Score:9.7
Update:6 months ago
Show doc for...
Tokens:
Raw
### Initial System Setup

Source: https://support.aa.net.uk/Ubuntu_16.04_Full_Stack_Configuration_%28with_Bonding_Config%29

Updates the system, installs necessary networking packages, and enables IPv4/IPv6 forwarding in sysctl.

```bash
apt-get update
apt-get upgrade -y
apt-get install -y pppoe ppp iproute2 iptables ip6tables
sed -i 's/#net\.ipv4\.ip_forward=1/net.ipv4.ip_forward=1/' /etc/sysctl.conf
sed -i 's/#net\.ipv6\.conf\.all\.forwarding=1/net.ipv6.conf.all.forwarding=1/' /etc/sysctl.conf
sysctl -p
```

--------------------------------

### First PPPoE WAN Connection Setup

Source: https://support.aa.net.uk/Ubuntu_16.04_Full_Stack_Configuration_%28with_Bonding_Config%29

Configures a physical interface and a PPPoE interface for the first WAN connection. The 'pre-up' command ensures the physical interface is up before PPP starts.

```bash
# AAISP WAN1
auto DEV_AA_WAN1
iface DEV_AA_WAN1 inet manual

# AAISP PPPoE 1
auto aa_wan1
iface aa_wan1 inet ppp
    pre-up /sbin/ip link set DEV_AA_WAN1 up
    provider aaisp_wan1

```

--------------------------------

### Example Alias Configuration

Source: https://support.aa.net.uk/Aliases

This shows a basic alias setup where emails sent to bob@testing.me.uk are forwarded to bob@example.com. This is a common scenario for managing multiple email addresses.

```text
bob@testing.me.uk	bob@example.com
```

--------------------------------

### Install pppd software

Source: https://support.aa.net.uk/Router%3ALinux_-_Debian

Install the necessary packages for PPPoE connectivity.

```bash
apt-get update
apt-get install ppp pppoe iproute2
```

--------------------------------

### Enable and Start Openswan Service

Source: https://support.aa.net.uk/FireBrick_IPsec_Tunnel_with_Manual_Keys_%28Deprecated%29

Enables the Openswan service to start on boot and then starts the service immediately on a CentOS system.

```bash
chkconfig ipsec on
service ipsec start
```

--------------------------------

### Enable and Start ifstated Service

Source: https://support.aa.net.uk/L2TP_Client%3A_OpenBSD

Enables the ifstated service to start on boot and starts the service immediately. Ensure this is run with appropriate privileges.

```shell
$ doas rcctl enable ifstated
$ doas rcctl start ifstated
```

--------------------------------

### Install PPP and ATM Libraries

Source: https://support.aa.net.uk/IPv6_SpeedTouch

Installing the required packages for managing the ADSL connection.

```bash
# apt-get install ppp libatm1
```

--------------------------------

### Install BIND9

Source: https://support.aa.net.uk/Ubuntu_16.04_Full_Stack_Configuration_%28with_Bonding_Config%29

Install the BIND9 DNS server package.

```bash
apt-get install bind9
```

--------------------------------

### Full Dual-Stack Example Configuration for Juniper SRX

Source: https://support.aa.net.uk/Router_-_Juniper_SRX

This is a comprehensive example configuration for a Juniper SRX router, demonstrating dual-stack (IPv4 and IPv6) setup. It includes static configuration for IPv4 and IPv6, trust VLANs, PPPoE on a specific Ethernet port, and enabling ICMPv6 ping from untrusted to trusted hosts.

```junos
set version 12.1X46-D30.2
set system host-name SRX100B
set system time-zone Europe/London

# Interfaces
set interfaces ge-0/0/0 unit 0 family inet address 192.168.1.1/24
set interfaces ge-0/0/0 unit 0 family inet6 address 2001:8b0:100:1::1/64
set interfaces ge-0/0/0 unit 0 family pppoe
set interfaces ge-0/0/0 unit 0 family ethernet-switching interface-mode trunk
set interfaces ge-0/0/0 unit 0 family ethernet-switching vlan members [ TRUST TRUST-MGMT ]

set interfaces ge-0/0/1 gigether-options redundant-ether-options number-of-sub-interfaces 10
set interfaces ge-0/0/1 unit 0 family ethernet-switching interface-mode access
set interfaces ge-0/0/1 unit 0 family ethernet-switching vlan members TRUST
set interfaces ge-0/0/2 unit 0 family ethernet-switching interface-mode access
set interfaces ge-0/0/2 unit 0 family ethernet-switching vlan members TRUST
set interfaces ge-0/0/3 unit 0 family ethernet-switching interface-mode access
set interfaces ge-0/0/3 unit 0 family ethernet-switching vlan members TRUST
set interfaces ge-0/0/4 unit 0 family ethernet-switching interface-mode access
set interfaces ge-0/0/4 unit 0 family ethernet-switching vlan members TRUST
set interfaces ge-0/0/5 unit 0 family ethernet-switching interface-mode access
set interfaces ge-0/0/5 unit 0 family ethernet-switching vlan members TRUST
set interfaces ge-0/0/6 unit 0 family ethernet-switching interface-mode access
set interfaces ge-0/0/6 unit 0 family ethernet-switching vlan members TRUST

set interfaces ge-0/0/7 unit 0 family inet
set interfaces ge-0/0/7 unit 0 family pppoe

set interfaces lo0 unit 0 family inet address 10.0.0.1/32
set interfaces lo0 unit 0 family inet6 address 2001:8b0:XXXX::1/128

set interfaces pp0 unit 0 pppoe-options underlying-interface ge-0/0/7.0
set interfaces pp0 unit 0 family inet
set interfaces pp0 unit 0 family inet6 mtu 1492

set interfaces vlan unit 3 family inet address 192.168.3.1/24
set interfaces vlan unit 3 family inet6 address 2001:8b0:XXXX:3::1/64

set interfaces vlan unit 10 family inet address 192.168.10.1/24
set interfaces vlan unit 10 family inet6 address 2001:8b0:XXXX:10::1/64

# PPPoE
set ...

# Routing Options
set routing-options static route 0.0.0.0/0 next-hop 192.168.1.2
set routing-options rib inet6.0 static route 0::0/0 next-hop pp0.0

# Security
set security forwarding-options family inet6 mode flow-based
set security forwarding-options family inet enable

set security zones security-zone TRUST interfaces vlan.3
set security zones security-zone TRUST interfaces vlan.10
set security zones security-zone UNTRUST interfaces pp0.0

set security policies from-zone TRUST to-zone UNTRUST policy ping6-to-trust match source-address any
set security policies from-zone TRUST to-zone UNTRUST policy ping6-to-trust match destination-address any
set security policies from-zone TRUST to-zone UNTRUST policy ping6-to-trust match application junos-ping6
set security policies from-zone TRUST to-zone UNTRUST policy ping6-to-trust then permit

set security policies from-zone UNTRUST to-zone TRUST policy allow-all match source-address any
set security policies from-zone UNTRUST to-zone TRUST policy allow-all match destination-address any
set security policies from-zone UNTRUST to-zone TRUST policy allow-all match application any
set security policies from-zone UNTRUST to-zone TRUST policy allow-all then permit

# Protocols
set protocols ldp
set protocols ospf area 0.0.0.0
set protocols router-advertisement interface vlan.3 prefix 2001:8b0:XXXX:3::/64
set protocols router-advertisement interface vlan.10 prefix 2001:8b0:XXXX:10::/64

# VLANs
set vlans TRUST vlan-id 3
set vlans TRUST vlan-id-list 10
set vlans TRUST l3-interface vlan.3

set vlans TRUST-MGMT vlan-id 1
set vlans TRUST-MGMT l3-interface vlan.1

# Services
set poe interface ge-0/0/0
set poe interface ge-0/0/1
set poe interface ge-0/0/2
set poe interface ge-0/0/3
set poe interface ge-0/0/4
set poe interface ge-0/0/5
set poe interface ge-0/0/6

# DHCP Server
set system services dhcp-local-server group TRUST-VLAN10
set system services dhcp-local-server group TRUST-VLAN10 interface vlan.10
set system services dhcp-local-server group TRUST-VLAN10 subnet 192.168.10.0/24 {
    router 192.168.10.1;
    domain-name aaisp.net.uk;
    name-server 8.8.8.8;
    name-server 8.8.4.4;
}

set system services dhcp-local-server group TRUST-VLAN3
set system services dhcp-local-server group TRUST-VLAN3 interface vlan.3
set system services dhcp-local-server group TRUST-VLAN3 subnet 192.168.3.0/24 {
    router 192.168.3.1;
    domain-name aaisp.net.uk;
    name-server 8.8.8.8;
    name-server 8.8.4.4;
}

# NTP Client
set system ntp server 0.pool.ntp.org
set system ntp server 1.pool.ntp.org

# Logging
set system syslog host <syslog-server-ip> any any
set system syslog host <syslog-server-ip> match "^..(error|critical|alert|emergency).*";

# SNMP
set snmp community AAISP-RO group ro
set snmp community AAISP-RW group rw
set snmp location "AAISP SRX100B"
set snmp contact "support@aaisp.co.uk"

# User Authentication
set system login user admin authentication encrypted-password "$1$abcdefgh$ijklmnopqrstuvwxyz.0"
set system login user admin uid 2000

# SSH Access
set system services ssh root-login deny
set system services ssh protocol-version v2

# Configuration Commit
commit
```

--------------------------------

### DHCPv6 Client Binding Output Example

Source: https://support.aa.net.uk/Router_-_Juniper_SRX

Example output showing the state and lease information for a successful DHCPv6 binding.

```text
Client Interface: pp0.0
     Hardware Address:             54:e0:32:d2:39:20
     State:                        BOUND(DHCPV6_CLIENT_STATE_BOUND)
     ClientType:                   STATEFUL
     Lease Expires:                2016-02-19 13:27:25 GMT
     Lease Expires in:             1839 seconds
     Lease Start:                  2016-02-19 12:27:25 GMT
     Bind Type:                    IA_PD
     Client DUID:                  LL0x29-54:e0:32:d2:39:20
     Rapid Commit:                 On
     Server Ip Address:            ::
     Client IP Prefix:             2001:8b0:X:X::/64

DHCP options:
    Name: server-identifier, Value: LL0x1-00:03:97:16:80:00
    Name: dns-recursive-server, Value: 2001:8b0::2020,2001:8b0::2021
```

--------------------------------

### Install and Configure RADVD

Source: https://support.aa.net.uk/Ubuntu_16.04_Full_Stack_Configuration_%28with_Bonding_Config%29

Installation and configuration steps for the Router Advertisement Daemon.

```bash
apt-get install radvd
```

```text
interface DEV_LAN
{
    AdvSendAdvert on;
    prefix 2001:db8:b9:2041::/64 {
        AdvOnLink on;
        AdvAutonomous on;
    };
};
```

```bash
systemctl enable radvd
systemctl restart radvd
```

--------------------------------

### Install Networking Tools

Source: https://support.aa.net.uk/Router%3ALinux_-_Debian_-_With_L2TP_Fallback

Install the required packages for PPP, PPPoE, L2TP, and network management on Debian.

```bash
apt-get update
apt-get install ppp pppoe xl2tpd iproute2 tcpdump net-tools
```

--------------------------------

### Example Alias Configuration

Source: https://support.aa.net.uk/Email_Aliases

This example shows how to set up an alias to forward email from bob@testing.me.uk to bob@example.com. Ensure you have a mailbox for 'bob' if you also want mail delivered locally.

```text
bob@testing.me.uk     bob@example.com
```

--------------------------------

### Install strongSwan Packages

Source: https://support.aa.net.uk/FireBrick_Road_Warrior_strongSwan

Installs the necessary strongSwan packages, including plugins required for EAP-identity authentication with a FireBrick.

```bash
$ sudo apt-get install strongswan libcharon-extra-plugins

```

--------------------------------

### Example L2TP Peer Configuration

Source: https://support.aa.net.uk/L2TP_Client%3A_Ubiquiti_Edgerouter

An example of the /etc/ppp/peers/l2tpc1 file after modification, including the 'remotename xl2tpd' line required to bypass the authentication bug.

```text
remotename xl2tpd
```

--------------------------------

### Example PPPoE Configuration

Source: https://support.aa.net.uk/FireBrick_2700

This is an example PPPoE configuration using Ethernet port 4. Ensure your modem is connected to the specified port.

```xml
<ppp port="LAN4" username="startup_user@startup_domain" password="" comment="Example PPPoE config for DSL/FTTC/FTTP/etc"/>
```

--------------------------------

### FireBrick Auto Update Log Example

Source: https://support.aa.net.uk/FireBrick_Updates

Example log entries detailing an automatic software upgrade process on a FireBrick device, from DNS lookup to successful reboot.

```text
Feb 25 01:00:10 90.155.90.129 983C7 V0.02.051 DNS lookup: 0.02.051.FB2700.1294261101.306027970.2700-0009-9737.et.firebrick.ltd.uk
Feb 25 01:00:11 90.155.90.129 032C7 V0.02.051 Automatic software upgrade to alpha release V0.02.055
Feb 25 01:00:11 90.155.90.129 032C7 V0.02.051 DNS lookup: www.firebrick.co.uk
Feb 25 01:00:11 90.155.90.129 110C7 V0.02.051 Release note:
Feb 25 01:00:11 90.155.90.129 110C7 V0.02.051 Fix to loader that was stopping 054 load. Fixed.
Feb 25 01:00:11 90.155.90.129 110C7 V0.02.051
Feb 25 01:00:11 90.155.90.129 168C7 V0.02.051 Downloading 532478 bytes
Feb 25 01:00:12 90.155.90.129 667C7 V0.02.051 Downloaded 532478 bytes
Feb 25 01:00:12 90.155.90.129 667C7 V0.02.051 Installing new code
Feb 25 01:00:12 90.155.90.129 878C7 V0.02.051 Software image FB2700 Inigo+ (V0.02.055 2011-02-24T15:18:54)
Feb 25 01:00:12 90.155.90.129 879C7 V0.02.051 Erasing flash blocks 76 to 80
Feb 25 01:00:17 90.155.90.129 030C7 V0.02.051 Flashing 532578 bytes to blocks 76 to 80
Feb 25 01:00:20 90.155.90.129 944C7 V0.02.051 FB2700 Inigo+ (V0.02.055 2011-02-24T15:18:54) flashed to blocks 76-80 (532578 bytes)
Feb 25 01:00:21 90.155.90.129 288C2 V0.02.051 Shutting down
Feb 25 01:00:21 90.155.90.129 289C2 V0.02.051 Clean shutdown
Feb 25 01:00:21 90.155.90.129 368C5 V0.02.051 PPPoE 0  shutdown
Feb 25 01:00:21 90.155.90.129 369C7 V0.02.051 PPPoE 0  Tx C021:LCP 05 00 0004 TermReq
Feb 25 01:00:21 90.155.90.129 369C7 V0.02.051 PPPoE 0  PADT requested
Feb 25 01:00:21 90.155.90.129 388C7 V0.02.051 PPPoE unknown session C9A9
Feb 25 01:00:23 90.155.90.129 290C2 V0.02.051 Shutdown complete, rebooting
Feb 25 01:00:23 90.155.90.129 836C2 V0.02.051 OS_ExecuteImage: Preparing to execute image FB2700 Inigo+ (V0.02.055 2011-02-24T15:18:54)
Feb 25 01:00:23 90.155.90.129 852C2 V0.02.051 Booting Image FB2700 Inigo+ (V0.02.055 2011-02-24T15:18:54) from flash block 76
Jan  1 00:00:00 90.155.90.129 489C5 V0.02.055 PPPoE 0 ??? created 1/0
Jan  1 00:00:00 90.155.90.129 496C5 V0.02.055 Config loaded OK
```

--------------------------------

### Full FireBrick Configuration Example

Source: https://support.aa.net.uk/FireBrick_2700

A complete XML configuration file demonstrating interfaces, PPP bonding, services, and firewall rules.

```xml
<?xml version="1.0" encoding="UTF-8"?>
<config xmlns="http://firebrick.ltd.uk/xml/fb2700/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://firebrick.ltd.uk/xml/fb2700/ http://firebrick.ltd.uk/xml/fb2700/0.00.605.xsd" timestamp="1970-01-01T00:00:07Z">
<user name="john" timeout="PT20M" level="DEBUG" password="secret"/>
<port name="LAN1" ports="1"/>
<port name="LAN2" ports="2"/>
<port name="WAN2" ports="3"/>
<port name="WAN1" ports="4"/>
<interface name="LAN1" port="LAN1">
<subnet ip="2001:8B0:123:1::1/64" ra="true" ra-other="dhcpv6" ra-dns="2001:8B0:123:1::2" comment="[[IPv6]] LAN"/>
<subnet ip="192.0.2.1/28" comment="LAN"/>
<dhcp ip="192.0.2.2-12"/>
</interface>
<ppp port="WAN1" username="abc@a.1" password="secret" comment="BT ADSL" graph="BT ADSL" log="true" speed="1000000"/>
<ppp port="WAN2" username="abc@a.2" password="secret" comment="BT ADSL" graph="BT ADSL 2" log="true" speed="1000000"/>
<services>
<dns domain="yourdomain.tld" resolvers="217.169.20.20 217.169.20.21"/>
<time/>
<telnet allow="192.0.2.0/28"/>
<http/>
</services>
<rule-set target-interface="LAN1" drop="reject" comment="default firewall rule - block incoming">
<rule source-interface="self" comment="allow from the FireBrick though"/>
</rule-set>
</config>
```

--------------------------------

### Full Startup Sequence

Source: https://support.aa.net.uk/Router%3ALinux

Basic commands to bring up the internal interface and start the PPPoE connection.

```bash
ifconfig eth1 up
pon aaisp
```

--------------------------------

### Configure PPPoA Connection

Source: https://support.aa.net.uk/IPv6_SpeedTouch

Copying the example configuration file to the peers directory.

```bash
# cp /usr/share/doc/ppp/examples/peers-pppoa /etc/ppp/peers/aaisp
```

--------------------------------

### Install xl2tpd on OpenWRT

Source: https://support.aa.net.uk/L2TP_Client%3A_OpenWRT_with_Policy_Based_Routing

Install the xl2tpd package via the Software menu. A reboot is required after installation.

```text
Go into Software, click Update lists, and then search for xl2tpd, and then click to install.
```

--------------------------------

### Create Interface Configuration

Source: https://support.aa.net.uk/L2TP_Client%3A_OpenBSD

Initialize the ppp0 interface configuration file.

```shell
$ doas sh -c 'echo down > /etc/hostname.ppp0'
```

--------------------------------

### Full Linux PPPoE Router Startup Sequence

Source: https://support.aa.net.uk/Linux

Bring up the internal network interface and initiate the PPPoE connection.

```bash
ifconfig eth1 up
pon aaisp

```

--------------------------------

### Complete FireBrick Configuration

Source: https://support.aa.net.uk/FireBrick_2700

A full example configuration file including user settings, port definitions, interfaces, and services.

```xml
<?xml version="1.0" encoding="UTF-8"?>
<config xmlns="http://firebrick.ltd.uk/xml/fb2700/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://firebrick.ltd.uk/xml/fb2700/ http://firebrick.ltd.uk/xml/fb2700/0.00.605.xsd" timestamp="1970-01-01T00:00:07Z">
<user name="john" timeout="PT20M" level="DEBUG" password="secret"/>
<port name="LAN1" ports="1"/>
<port name="LAN2" ports="2"/>
<port name="LAN3" ports="3"/>
<port name="WAN1" ports="4"/>
<interface name="LAN1" port="LAN1">
<subnet ip="2001:8B0:123:1::1/64" ra="true" comment="[[IPv6]] LAN"/>
<subnet ip="192.0.2.1/28" comment="LAN"/>
<dhcp ip="192.0.2.2-12"/>
</interface>
<ppp port="WAN1" username="abc@a.1" password="secret" comment="BT ADSL" graph="BT ADSL" log="true"/>
<services>
<dns domain="yourdomain.tld" resolvers="217.169.20.20 217.169.20.21"/>
<time/>
<telnet allow="192.0.2.0/28"/>
<http/>
</services>
<rule-set target-interface="LAN1" drop="reject" comment="default firewall rule - block incoming">
<rule source-interface="self" comment="allow from the FireBrick though"/>
</rule-set>
</config>
```

--------------------------------

### Install L2TP Packages on OpenWRT

Source: https://support.aa.net.uk/L2TP_Client%3A_OpenWRT

List of necessary packages for L2TP client functionality on OpenWRT. Ensure these are installed before proceeding with configuration. A reboot is required after installation for kernel modules to load.

```text
kmod-l2tp - 3.18.10-1
kmod-l2tp-eth - 3.18.10-1
kmod-l2tp-ip - 3.18.10-1
kmod-pppol2tp - 3.18.10-1
ppp-mod-pppol2tp - 2.4.7-5
xl2tpd - 1.3.6-5619e1771048e74b729804e8602f409af0f3faea
luci-proto-ipv6 - git-15.090.50849-576e235-1
luci-proto-ppp - git-15.090.50849-576e235-1
```

--------------------------------

### Manual Network Interface Configuration

Source: https://support.aa.net.uk/Router%3AUbiquiti_EdgeRouter_Lite

Example commands for manually configuring the WAN Ethernet interface.

```bash
# Network interface configuration
# eth0 - the WAN interface
# You'll need to reduce the MTU to 1500 if you don't have a modem that allows you to use baby jumbos
set interfaces ethernet eth0 description 'Ethernet interface for PPPoE'
set interfaces ethernet eth0 duplex auto
set interfaces ethernet eth0 mtu 1508
set interfaces ethernet eth0 speed auto
```

--------------------------------

### Configure IPv6 Startup Script

Source: https://support.aa.net.uk/IPv6_SpeedTouch

Script to assign the IPv6 address and set the default route when the PPP interface initializes.

```bash
#!/bin/bash
/sbin/ip -6 addr add 2001:8b0:xxxx::1/64 dev $1
/sbin/ip -6 route add default dev $1
```

--------------------------------

### Install ISC DHCP Server

Source: https://support.aa.net.uk/Ubuntu_16.04_Full_Stack_Configuration_%28with_Bonding_Config%29

Install the ISC DHCP server package.

```bash
apt-get install isc-dhcp-server
```

--------------------------------

### Complete FireBrick 2700 Configuration Example

Source: https://support.aa.net.uk/FireBrick_2700

This is a complete XML configuration file for the FireBrick 2700, including user, port, interface, PPPoE, and services settings. It sets up a PPPoE connection on WAN1 with logging and graphing.

```xml
<?xml version="1.0" encoding="UTF-8"?>
<config xmlns="http://firebrick.ltd.uk/xml/fb2700/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://firebrick.ltd.uk/xml/fb2700/ http://firebrick.ltd.uk/xml/fb2700/0.00.605.xsd" timestamp="1970-01-01T00:00:07Z">
<user name="john" timeout="PT20M" level="DEBUG" password="secret"/>
<port name="LAN1" ports="1"/>
<port name="LAN2" ports="2"/>
<port name="LAN3" ports="3"/>
<port name="WAN1" ports="4"/>
<interface name="LAN1" port="LAN1">
<subnet ip="192.0.2.1/28" comment="LAN"/>
<dhcp ip="192.0.2.2-12"/>
</interface>
<ppp port="WAN1" username="abc@a.1" password="secret" comment="BT ADSL" graph="BT ADSL" log="true"/>
<services>
<dns domain="yourdomain.tld" resolvers="217.169.20.20 217.169.20.21"/>
<time/>
<telnet allow="192.0.2.0/28"/>
<http/>
</services>
<rule-set target-interface="LAN1" drop="reject" comment="default firewall rule - block incoming">
<rule source-interface="self" comment="allow from the FireBrick though"/>
</rule-set>
</config>
```

--------------------------------

### Install xl2tpd

Source: https://support.aa.net.uk/L2TP_Client%3A_OpenBSD

Install the xl2tpd package using the OpenBSD package manager.

```shell
$ doas pkg-add xl2tpd
```

--------------------------------

### Example Email Addresses

Source: https://support.aa.net.uk/Sieve-Example%3AMove_email_to_a_suffix_folder

Examples of email address formats used for tracking and filtering.

```text
me@example.com
```

```text
me-amazon@example.com
me-ebay@example.com
...
me-ANYTHING@example.com
```

```text
ebay-me@example.com
amazon-me@example.com
...
ANYTHING-me@example.com
```

--------------------------------

### Configure OpenBSD iked.conf

Source: https://support.aa.net.uk/IPsec_OpenBSD

Sets up the IKEv2 daemon on OpenBSD to connect to the FireBrick peer with specified subnets and authentication.

```text
ikev2 "tofirebrick" active \
        esp \
        from 203.0.113.0/24 to 198.51.100.0/24 \
        local 192.0.2.2 peer 192.0.2.1 \
        ikesa group modp2048 \
        srcid 192.0.2.2 dstid 192.0.2.1 \
        psk "your PSK here"
```

--------------------------------

### Install Docker on Ubuntu

Source: https://support.aa.net.uk/Ubuntu_16.04_Full_Stack_Configuration_%28with_Bonding_Config%29

Commands to install the latest Docker CE version from official repositories.

```bash
apt-get install apt-transport-https ca-certificates curl software-properties-common
curl -fsSL https://download.docker.com/linux/ubuntu/gpg | sudo apt-key add -
# Assuming amd64
add-apt-repository "deb [arch=amd64] https://download.docker.com/linux/ubuntu $(lsb_release -cs) stable"
apt-get update
apt-get install docker-ce
```

--------------------------------

### Configure QoS

Source: https://support.aa.net.uk/Router%3AUbiquiti_EdgeRouter_Lite

Sets up smart queue management for traffic control.

```bash
# Set up QoS to keep your internet connection usable when doing lots of traffic
# You'll need to adjust the upload rate based on your connection's upload sync rate
set traffic-control smart-queue wan-qos upload rate 20mbit
set traffic-control smart-queue wan-qos wan-interface pppoe0
```

--------------------------------

### Install iptables-persistent

Source: https://support.aa.net.uk/Ubuntu_16.04_Full_Stack_Configuration_%28with_Bonding_Config%29

Installs the iptables-persistent package, which is necessary to save firewall rules across system reboots.

```bash
apt-get install iptables-persistent
```

--------------------------------

### Configure TEQL Routing Script

Source: https://support.aa.net.uk/Ubuntu_16.04_Full_Stack_Configuration_%28with_Bonding_Config%29

Create a script to initialize TEQL bonding for multiple PPP interfaces. Replace placeholders with your specific IPv4 and IPv6 addresses.

```bash
#!/bin/bash
/sbin/sysctl -w net.ipv4.conf.pppoe-AA_1.rp_filter=2
/sbin/sysctl -w net.ipv4.conf.pppoe-AA_2.rp_filter=2
/sbin/tc qdisc add dev pppoe-AA_1 root teql0
/sbin/tc qdisc add dev pppoe-AA_2 root teql0
/sbin/ip address add YOUR_IPV4_ADDRESS/32 dev teql0
/sbin/ip address add YOUR_FIRST_IPV6_ADDRESS/64 dev teql0
/sbin/ip link set teql0 up
/sbin/ip route replace default scope global dev teql0
/sbin/ip -6 route replace default scope global dev teql0
```

--------------------------------

### Install Debian packages for L2TP

Source: https://support.aa.net.uk/L2TP_Client%3A_Debian

Install the required networking and tunneling utilities before configuring the L2TP connection.

```bash
apt-get install ppp pppoe xl2tpd iproute2 tcpdump net-tools resolvconf
```

--------------------------------

### Configure UPnP with miniupnpd

Source: https://support.aa.net.uk/Ubuntu_16.04_Full_Stack_Configuration_%28with_Bonding_Config%29

Installation, configuration, and automation scripts for miniupnpd.

```bash
apt-get install miniupnpd
```

```text
# Set to 1 to start the daemon. Desactivated by default, because
# you don't want the outside to control your UPnP router, and
# as a consequence MiniUPnPd_LISTENING_IP should be set to a
# reasonable value before enabling the daemon.
START_DAEMON=1

# Define here the external interface connected to the WAN (e.g.: the public
# IP address NIC)
MiniUPnPd_EXTERNAL_INTERFACE="pppoe-AA_1"

# IP that the daemon should listen on.
# Note that you do *not* want this to be 0.0.0.0, as you don't want
# your MiniUPnPd to be controlled by anyone on the internet.
MiniUPnPd_LISTENING_IP=”DEV_LAN”
 
# This defines other options which you might want to use when
# starting MiniUPnPd. Note that the -S option is important:
# -S sets "secure" mode : clients can only add mappings to their own ip
# (see man page)
#MiniUPnPd_OTHER_OPTIONS="-N -f /etc/miniupnpd/miniupnpd.conf"
MiniUPnPd_OTHER_OPTIONS=""

# If this option is defined, then the init script will initialize
# the ipv6 tables.
MiniUPnPd_ip6tables_enable=no
```

```bash
systemctl enable miniupnpd
systemctl start miniupnpd
```

```bash
#!/bin/bash
/etc/init.d/miniupnpd restart
```

```bash
chmod 0755 /etc/ppp/ip-up.d/fix-upnp
chmod +x /etc/ppp/ip-up.d/fix-upnp
```

--------------------------------

### Install Modem Firmware Files

Source: https://support.aa.net.uk/IPv6_SpeedTouch

Copying the specific firmware binaries for the v4 modem variant to the system firmware directory.

```bash
# cp firmware/speedtch-1.bin.4 /lib/firmware/speedtch-1.bin
# cp firmware/speedtch-2.bin.4 /lib/firmware/speedtch-2.bin
```

--------------------------------

### No Device Detected Example

Source: https://support.aa.net.uk/Router_-_TG582N_-_3G

Example output indicating that no mobile device was detected by the router. This is shown when a dongle is not recognized.

```text
 No device detected
```

--------------------------------

### Install mwan3 and luci-app-mwan3 on OpenWRT

Source: https://support.aa.net.uk/L2TP_Client%3A_OpenWRT_with_Policy_Based_Routing

Install the mwan3 package and its luci-app for managing multiple WAN connections and policy-based routing.

```text
Same as installing xl2tpd really, except that you will want to install mwan3, and the luci snap in for it.
```

--------------------------------

### Prepare DHCPv6 Init Script

Source: https://support.aa.net.uk/Ubuntu_16.04_Full_Stack_Configuration_%28with_Bonding_Config%29

Create a separate init script configuration for DHCPv6.

```bash
cp /etc/default/isc-dhcp-server /etc/default/isc-dhcp-server6
```

--------------------------------

### L2TP Debug Log Example

Source: https://support.aa.net.uk/Mikrotik_L2TP_Server

Example of a debug log entry indicating a tunnel failure due to session conflicts.

```text
l2tp,debug tunnel 21 entering state: dead
```

--------------------------------

### Start Connection

Source: https://support.aa.net.uk/IPv6_SpeedTouch

Command to initiate the configured ADSL connection.

```bash
# pon aaisp
```

--------------------------------

### Initialize DHCPv6 Service

Source: https://support.aa.net.uk/Ubuntu_16.04_Full_Stack_Configuration_%28with_Bonding_Config%29

Commands to create a secondary DHCPv6 init script and start the service.

```bash
cp /etc/init.d/isc-dhcp-server /etc/init.d/isc-dhcp-server6
sed -i s/isc-dhcp-server/isc-dhcp-server6/ /etc/init.d/isc-dhcp-server6
sed -i s/dhcpd.conf/dhcpd6.conf/ /etc/init.d/isc-dhcp-server6
sed -i s/dhcpd.pid/dhcpd6.pid/ /etc/init.d/isc-dhcp-server6
systemctl enable isc-dhcp-server6
systemctl start isc-dhcp-server6
```

--------------------------------

### Spam Probability Header Example 2

Source: https://support.aa.net.uk/Spam_Folder

This example shows a spam report header indicating a moderate probability of a message being spam.

```text
 0.8 BAYES_50               BODY: Bayes spam probability is 40 to 60%
```

--------------------------------

### Spam Probability Header Example 1

Source: https://support.aa.net.uk/Spam_Folder

This example shows a spam report header indicating a low probability of a message being spam.

```text
 -3.0 BAYES_00               BODY: Bayes spam probability is 0 to 1%
```

--------------------------------

### Auto Reverse PTR Record Examples

Source: https://support.aa.net.uk/Reverse_DNS

Example of the generated PTR records for IPv4 and IPv6 addresses under the Auto Reverse configuration.

```text
1.2.0.192.in-addr.arpa
1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.8.b.d.0.1.0.0.2.ip6.arpa
```
Tokens:
Raw