Well I’ve built the first working version of the speed box. It looks like this.
MC7430-- Jetway NF591–Mikrotik RB953
The NF591 is just a low powered PC running Kali which is a offshoot of Debian Linux.
It sets up the MC7430, does the NAT and then pumps it out on one of it’s interfaces.
The RB953 pick it up from there and runs the DNS and DHCP servers for the subnet.
It also has the wireless cards.
Here is the Kali config, quite a bit of the network config is GUI based. I also expect you to complete the network config as you require for your setup I;ve just put the bits I need to remember to do.
systemctl enable ssh
rm /etc/ssh/sshd_config
nano /etc/ssh/sshd_config
PermitRootLogin = yes
#################################################################
nano /etc/ssh/sshd_config
X11Forwarding yes
AllowAgentForwarding yes
PermitRootLogin yes
#################################################################
iptables -A INPUT -p tcp ! -s 192.168.6.2 -j DROP
#################################################################
#################################################################
#################################################################
Setup networks manually
eth0 192.168.6.1
IPv4 method "share to other computers"
Mobile broadband
"automatically connect"
#################################################################
reboot
#################################################################
touch /etc/apt/sources.list
chmod 644 /etc/apt/sources.list
echo "deb http://http.kali.org/kali kali-rolling main contrib non-free" > /etc/apt/sources.list
apt-key adv --keyserver hkp://keys.gnupg.net --recv-keys 7D8D0BF6
#################################################################
apt-get update
apt-get dist-upgrade
Here is the Mikrotik.
[admin@Porta_Hub] > export hide-sensitive
# jul/08/2018 08:56:48 by RouterOS 6.42.5
# software id = 0NE8-0RN3
#
# model = 953GS-5HnT
# serial number = 49C50414682D
/interface bridge
add fast-forward=no name=bridge1
/interface wireless
set [ find default-name=wlan1 ] band=5ghz-a/n channel-width=20/40mhz-Ce country=australia disabled=no frequency-mode=regulatory-domain mode=ap-bridge ssid="MikroTik 5.0" wireless-protocol=802.11
set [ find default-name=wlan2 ] band=2ghz-b/g/n channel-width=20/40mhz-eC disabled=no frequency=auto mode=ap-bridge ssid="Mikrotik 2.0"
/interface ethernet
set [ find default-name=sfp1 ] auto-negotiation=no speed=100Mbps
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa2-psk eap-methods="" mode=dynamic-keys supplicant-identity=MikroTik
add authentication-types=wpa2-psk eap-methods="" name=Free supplicant-identity=MikroTik
/ip ipsec proposal
set [ find default=yes ] enc-algorithms=aes-256-cbc,aes-192-cbc,aes-128-cbc,3des
/ip pool
add name=pool1 ranges=192.168.6.100-192.168.6.200
/ip dhcp-server
add address-pool=pool1 authoritative=after-2sec-delay disabled=no interface=bridge1 name=server1
/port
set 1 baud-rate=9600 data-bits=8 flow-control=none name=usb2 parity=none stop-bits=1
set 2 baud-rate=9600 data-bits=8 flow-control=none name=usb3 parity=none stop-bits=1
/interface ppp-client
add apn=telstra.datapack data-channel=2 dial-on-demand=no info-channel=2 name=ppp-out1 port=usb3
/interface l2tp-client
add connect-to=180.181.XXX.XXX disabled=no keepalive-timeout=30 name=l2tp-out1 profile=default use-ipsec=yes user=Porta_Hub_remote
/routing ospf instance
set [ find default=yes ] name=OSPF router-id=0.0.0.2
/snmp community
set [ find default=yes ] addresses=0.0.0.0/0
/interface bridge port
add bridge=bridge1 hw=no interface=ether2
add bridge=bridge1 hw=no interface=ether3
add bridge=bridge1 interface=wlan1
add bridge=bridge1 interface=wlan2
add bridge=bridge1 interface=ether1
add bridge=bridge1 interface=sfp1
add bridge=bridge1 interface=sfp2
/ip address
add address=192.168.6.2/24 interface=bridge1 network=192.168.6.0
/ip dhcp-server network
add address=192.168.6.0/24 dns-server=192.168.6.2 gateway=192.168.6.1
/ip dns
set allow-remote-requests=yes servers=61.9.242.33,61.9.194.49
/ip firewall filter
# bridge2 not ready
add action=drop chain=forward dst-port=53 in-interface=*14 protocol=tcp
# bridge2 not ready
add action=drop chain=forward dst-port=53 in-interface=*14 protocol=udp
/ip firewall nat
add action=masquerade chain=srcnat disabled=yes out-interface=ppp-out1
add action=masquerade chain=srcnat disabled=yes out-interface=*14
/ip route
add distance=1 gateway=192.168.6.1
/ip service
set telnet disabled=yes
set www port=8080
set ssh port=50000
set www-ssl disabled=no
set api disabled=yes
set api-ssl disabled=yes
/routing ospf network
add area=backbone network=172.16.1.4/30
add area=backbone network=192.168.6.0/24
/system clock
set time-zone-autodetect=no time-zone-name=Australia/Perth
/system identity
set name=Porta_Hub
/system leds
add interface=wlan2 leds=wlan2_signal1-led,wlan2_signal2-led,wlan2_signal3-led,wlan2_signal4-led,wlan2_signal5-led type=wireless-signal-strength
add interface=wlan2 leds=wlan2_tx-led type=interface-transmit
add interface=wlan2 leds=wlan2_rx-led type=interface-receive
/system routerboard settings
set silent-boot=no
/system scheduler
add interval=1w name="Sunday Midnight" on-event="system script run Autoupdater" policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon start-date=dec/03/2017 start-time=00:00:00
/system script
add name=Autoupdater owner=admin policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=\"system package update or-updates :global FWstatus [/system packag\
e update get status]; if (\\\$FWstatus = \\\"New version is available\\\") do={system package update download; delay delay-time=3600; system reboot} else={}"
[admin@Porta_Hub] >
The speed is quite an interesting topic.
I was building it at work yesterday and had some double NAT going on until I figured I could get rid of that.
With the double NAT a laptop running windows OS really struggled to get anything +40MB/s.
The same laptop on the same connection running Kali it flew, +100Mb/s down and around 35 up
I bought the porta hub home to try it off my desktop, got rid of the double NAT and it flies as well. I’ve just run at it 0900 local time, 80Mb/s down 37.5Mb/s up.
I will go back to work to try it out again on the laptop.
I should also mention I’ve got access to all three Telstra Bands 700, 1800, 2600 so it will crossband to get that sort of speed.
PS the latest Telstra Firmware 02.24.05.06 seems to work no problems.