Difference between revisions of "NAC Passby with Proxy"

From RHS Wiki
Jump to navigation Jump to search
m
Tag: visualeditor
m
Tag: visualeditor
Line 1: Line 1:
Platformed PC:
+
=== Platformed PC ===
  
 
*Add an USB network adapter to the Platformed PC
 
*Add an USB network adapter to the Platformed PC
Line 7: Line 7:
 
*Create a scheduled task to start FreeProxy on startup  (Administrator rights required)
 
*Create a scheduled task to start FreeProxy on startup  (Administrator rights required)
  
Raspberry Pi
+
=== Raspberry Pi ===
  
* Assign static IP to the Raspberry Pi via /etc/network/interfaces  
+
*Assign static IP to the Raspberry Pi via /etc/network/interfaces
  
 
*Install DHCP server
 
*Install DHCP server
Line 15: Line 15:
 
**Must assign static IP to the platformed PC
 
**Must assign static IP to the platformed PC
  
 +
=== Physical Setup ===
  
Setup
+
*Connect the DCHP server (Raspberry Pi), the Platformed PC (Added USB adapter) and the PCs that will use the SOCKS5 proxy to a switch
 +
*Setup OpenVPN to use a SOCKS5 Proxy (socks-proxy 192.168.0.11    1080)
 +
 
 +
<br />
 +
 
 +
== Configuration Files ==
 +
 
 +
=== Raspberry Pi ===
 +
<syntaxhighlight lang="bash">
 +
sudo apt update
 +
sudo apt upgrade
 +
sudo apt install proxychains dnsutils isc-dhcp-server
 +
 
 +
</syntaxhighlight>
 +
 
 +
==== /etc/network/interfaces ====
 +
<syntaxhighlight lang="text">
 +
source-directory /etc/network/interfaces.d
 +
 
 +
auto eth0
 +
iface eth0 inet static
 +
    address 192.168.0.1
 +
    netmask 255.255.255.0
 +
    gateaway 192.168.0.1
 +
 
 +
</syntaxhighlight>
 +
 
 +
==== /etc/dhcp/dhcpd.conf ====
 +
<syntaxhighlight lang="text">
 +
option domain-name "rra.lan";
 +
option domain-name-servers 10.0.232.30, 8.8.8.8;
 +
 
 +
default-lease-time 60000000;
 +
max-lease-time 720000000000;
 +
 
 +
ddns-update-style none;
 +
 
 +
authoritative;
 +
 
 +
log-facility local7;
 +
 
 +
 
 +
subnet 192.168.0.0 netmask 255.255.255.0 {
 +
    range 192.168.0.1 192.168.0.200;
 +
    option subnet-mask 255.255.255.0;
 +
    option broadcast-address 192.168.0.255;
 +
}
  
*Connect the DCHP server (Raspberry Pi), the Platformed PC (Added USB adapter) and the PCs that will use the SOCKS5 proxy to a switch
+
host dhcpi {
*Setup OpenVPN to use a SOCKS5 Proxy (socks-proxy 192.168.0.11    1080)<br />
+
  hardware ethernet d8:eb:97:b9:5e:77;
 +
  fixed-address 192.168.0.1;
 +
}
 +
 
 +
host WF0006D3 {
 +
  hardware ethernet D8:EB:97:B6:B7:6A;
 +
  fixed-address 192.168.0.11;
 +
}
 +
 
 +
host WF0006D3Rafa {
 +
  hardware ethernet ec:8e:b5:77:3e:e1;
 +
  fixed-address 192.168.0.2;
 +
}
 +
 
 +
</syntaxhighlight>
 +
 
 +
==== /etc/default/isc-dhcp-server ====
 +
<syntaxhighlight lang="text">
 +
INTERFACESv4="eth0"
 +
INTERFACESv6=""
 +
 
 +
</syntaxhighlight>Enable & estart isc-dhcp-server service<syntaxhighlight lang="text">
 +
sudo systemctl enable isc-dhcp-server
 +
sudo systemctl restart isc-dhcp-server
 +
 
 +
</syntaxhighlight>

Revision as of 10:30, 3 June 2019

Platformed PC

  • Add an USB network adapter to the Platformed PC
  • Install FreeProxy (Administrator rights required)
  • Create a SOCKS5 Proxy (Administrator rights required)
  • Create a scheduled task to start FreeProxy on startup (Administrator rights required)

Raspberry Pi

  • Assign static IP to the Raspberry Pi via /etc/network/interfaces
  • Install DHCP server
  • Configure the DHCP server (Required because plataformed PC's wont let you set an IP)
    • Must assign static IP to the platformed PC

Physical Setup

  • Connect the DCHP server (Raspberry Pi), the Platformed PC (Added USB adapter) and the PCs that will use the SOCKS5 proxy to a switch
  • Setup OpenVPN to use a SOCKS5 Proxy (socks-proxy 192.168.0.11    1080)


Configuration Files

Raspberry Pi

sudo apt update
sudo apt upgrade
sudo apt install proxychains dnsutils isc-dhcp-server

/etc/network/interfaces

source-directory /etc/network/interfaces.d

auto eth0
iface eth0 inet static
    address 192.168.0.1
    netmask 255.255.255.0
    gateaway 192.168.0.1

/etc/dhcp/dhcpd.conf

option domain-name "rra.lan";
option domain-name-servers 10.0.232.30, 8.8.8.8;

default-lease-time 60000000;
max-lease-time 720000000000;

ddns-update-style none;

authoritative;

log-facility local7;


subnet 192.168.0.0 netmask 255.255.255.0 {
    range 192.168.0.1 192.168.0.200;
    option subnet-mask 255.255.255.0;
    option broadcast-address 192.168.0.255;
}

host dhcpi {
   hardware ethernet d8:eb:97:b9:5e:77;
   fixed-address 192.168.0.1;
}

host WF0006D3 {
   hardware ethernet D8:EB:97:B6:B7:6A;
   fixed-address 192.168.0.11;
}

host WF0006D3Rafa { 
   hardware ethernet ec:8e:b5:77:3e:e1;
   fixed-address 192.168.0.2;
}

/etc/default/isc-dhcp-server

INTERFACESv4="eth0"
INTERFACESv6=""

Enable & estart isc-dhcp-server service

sudo systemctl enable isc-dhcp-server
sudo systemctl restart isc-dhcp-server