Open5gs: Konfigurasi Awal - Revision history

Onnowpurbo: /* Referensi */

2023-07-23T03:35:42Z

Referensi

Onnowpurbo: /* Tambahkan Route Untuk UE ke WAN / Internet */

2023-07-23T03:33:58Z

Tambahkan Route Untuk UE ke WAN / Internet

Onnowpurbo: /* Tambahkan Route Untuk UE ke WAN / Internet */

2023-07-23T03:30:53Z

Tambahkan Route Untuk UE ke WAN / Internet

Onnowpurbo: /* Setup TUN device (not persistent) */

2023-07-23T03:28:09Z

Setup TUN device (not persistent)

Onnowpurbo: /* Tambahkan Router Untuk UE ke WAN / Internet */

2023-07-23T03:25:38Z

Tambahkan Router Untuk UE ke WAN / Internet

Onnowpurbo: /* Referensi */

2023-07-23T02:42:39Z

Referensi

Onnowpurbo: /* =4G/ 5G NSA Core */

2023-07-23T02:39:57Z

=4G/ 5G NSA Core

Onnowpurbo at 02:39, 23 July 2023

2023-07-23T02:39:00Z

Onnowpurbo: /* 5G Core */

2023-07-23T02:30:07Z

5G Core

Onnowpurbo at 02:22, 23 July 2023

2023-07-23T02:22:21Z

← Older revision		Revision as of 03:35, 23 July 2023
Line 244:		Line 244:

	* https://open5gs.org/open5gs/docs/guide/02-building-open5gs-from-sources/		* https://open5gs.org/open5gs/docs/guide/02-building-open5gs-from-sources/
		+
		+
		+	==Pranala Menarik==
		+
		+	* [[5G]]

@@ Line 200: / Line 200: @@
   sudo ip6tables -t nat -A POSTROUTING -s 2001:db8:cafe::/48 ! -o ogstun -j MASQUERADE
-Konfigurasi firewall dengan benar dan pastikan status active.
+ iptables -L -t nat
   sudo ufw status
@@ Line 211: / Line 220: @@
   sudo ufw disable
-Firewall stopped and disabled on system startup
+Matikan firewall dan disable pada system startup
   $ sudo ufw status

@@ Line 201: / Line 201: @@
-Konfigurasi firewall dengan benar.
+Konfigurasi firewall dengan benar dan pastikan status active.
-Configure the firewall correctly. Some operating systems (Ubuntu) by default enable firewall rules to block traffic.
+ sudo ufw status
 Firewall stopped and disabled on system startup
-### Ensure that the packets in the `INPUT` chain to the `ogstun` interface are accepted
+ $ sudo ufw status
 $ sudo iptables -I INPUT -i ogstun -j ACCEPT
-### Prevent UE's from connecting to the host on which UPF is running
+ ### Prevent UE's from connecting to the host on which UPF is running
-$ sudo iptables -I INPUT -s 10.45.0.0/16 -j DROP
+ $ sudo iptables -I INPUT -s 10.45.0.0/16 -j DROP
-$ sudo ip6tables -I INPUT -s 2001:db8:cafe::/48 -j DROP
+ $ sudo ip6tables -I INPUT -s 2001:db8:cafe::/48 -j DROP
-### If your core network runs over multiple hosts, you probably want to block
+ ### If your core network runs over multiple hosts, you probably want to block
-### UE originating traffic from accessing other network functions.
+ ### UE originating traffic from accessing other network functions.
-### Replace x.x.x.x/y with the VNFs IP/subnet
+ ### Replace x.x.x.x/y with the VNFs IP/subnet
-$ sudo iptables -I FORWARD -s 10.45.0.0/16 -d x.x.x.x/y -j DROP
+ $ sudo iptables -I FORWARD -s 10.45.0.0/16 -d x.x.x.x/y -j DROP
 ==Referensi==
 * https://open5gs.org/open5gs/docs/guide/02-building-open5gs-from-sources/

@@ Line 173: / Line 173: @@
 ==Setup TUN device (not persistent)==
-Buat TUN device dengan nama interface ogstun.
+Jika dibutuhkan kita dapat menset interface ogstun, tampaknya ini tidak dibutuhkan jika kita menginstall open5gs dari binary.
   sudo ip tuntap add name ogstun mode tun
@@ Line 183: / Line 185: @@
   sudo ./misc/netconf.sh
 ==Tambahkan Route Untuk UE ke WAN / Internet==

@@ Line 171: / Line 171: @@
-==Tambahkan Router Untuk UE ke WAN / Internet==
+==Setup TUN device (not persistent)==
 Agar ada bridge antara PGWU/UPF dan WAN (Internet), kita perlu meng-enable IP forwarding dan NAT rule di IP Tables.
@@ Line 209: / Line 223: @@
 ### Replace x.x.x.x/y with the VNFs IP/subnet
 $ sudo iptables -I FORWARD -s 10.45.0.0/16 -d x.x.x.x/y -j DROP
 ==Referensi==
 * https://open5gs.org/open5gs/docs/guide/02-building-open5gs-from-sources/

← Older revision	Revision as of 02:42, 23 July 2023
Line 169:	Line 169:


	+
	+
	+	==Tambahkan Router Untuk UE ke WAN / Internet==
	+
	+	Agar ada bridge antara PGWU/UPF dan WAN (Internet), kita perlu meng-enable IP forwarding dan NAT rule di IP Tables.
	+
	+	Untuk mengaktifkan forwarding dan NAT rule, ketik,
	+
	+	### Enable IPv4/IPv6 Forwarding
	+	sudo sysctl -w net.ipv4.ip_forward=1
	+	sudo sysctl -w net.ipv6.conf.all.forwarding=1
	+
	+	### Add NAT Rule
	+	sudo iptables -t nat -A POSTROUTING -s 10.45.0.0/16 ! -o ogstun -j MASQUERADE
	+	sudo ip6tables -t nat -A POSTROUTING -s 2001:db8:cafe::/48 ! -o ogstun -j MASQUERADE
	+
	+
	+	Konfigurasi firewall dengan benar.
	+
	+	Configure the firewall correctly. Some operating systems (Ubuntu) by default enable firewall rules to block traffic.
	+
	+	$ sudo ufw status
	+	Status: active
	+	$ sudo ufw disable
	+	Firewall stopped and disabled on system startup
	+	$ sudo ufw status
	+	Status: inactive
	+	Optionally, you may consider the settings below for security purposes.
	+
	+	### Ensure that the packets in the `INPUT` chain to the `ogstun` interface are accepted
	+	$ sudo iptables -I INPUT -i ogstun -j ACCEPT
	+
	+	### Prevent UE's from connecting to the host on which UPF is running
	+	$ sudo iptables -I INPUT -s 10.45.0.0/16 -j DROP
	+	$ sudo ip6tables -I INPUT -s 2001:db8:cafe::/48 -j DROP
	+
	+	### If your core network runs over multiple hosts, you probably want to block
	+	### UE originating traffic from accessing other network functions.
	+	### Replace x.x.x.x/y with the VNFs IP/subnet
	+	$ sudo iptables -I FORWARD -s 10.45.0.0/16 -d x.x.x.x/y -j DROP

← Older revision		Revision as of 02:39, 23 July 2023
Line 95:		Line 95:


−	==4G/ 5G NSA Core=	+	==4G/ 5G NSA Core==

	Modify install/etc/open5gs/mme.yaml untuk set S1AP IP address, PLMN ID, dan TAC.		Modify install/etc/open5gs/mme.yaml untuk set S1AP IP address, PLMN ID, dan TAC.

@@ Line 1: / Line 1: @@
 Sumber: https://open5gs.org/open5gs/docs/guide/02-building-open5gs-from-sources/
@@ Line 83: / Line 89: @@
           port: 9090
-==4G EPC==
+Restart Open5GS,
 Modify install/etc/open5gs/mme.yaml untuk set S1AP IP address, PLMN ID, dan TAC.
   cd /usr/local/src/open5gs/install/etc/open5gs
   cp mme.yaml mme.yaml.old
   vi mme.yaml
@@ Line 94: / Line 110: @@
   mme:
-      freeDiameter: /usr/local/src/open5gs/install/etc/freeDiameter/mme.conf
+      freeDiameter: /etc/freeDiameter/mme.conf
       s1ap:
         #      - addr: 127.0.0.2
@@ Line 119: / Line 135: @@
         tac: 1
       security:
+         integrity_order : [ EIA2, EIA1, EIA0 ]
 Modify install/etc/open5gs/sgwu.yaml untuk set GTP-U IP address.
   cd /usr/local/src/open5gs/install/etc/open5gs
   cp sgwu.yaml sgwu.yaml.old
   vi sgwu.yaml
@@ Line 136: / Line 159: @@
         - addr: 10.11.0.6
-Restart Open5GS,
+ sudo systemctl restart open5gs-mmed
-* ERROR: karena open5gs tidak ada dalam systemctl
+Jika kita compile open5gs, kemungkinan script untuk systemctl belum ada. Ini akan menimbulkan ERROR.

@@ Line 29: / Line 29: @@
         - plmn_id:
           #          mcc: 999
-          #  mnc: 70
+          #          mnc: 70
             mcc: 001
             mnc: 01
@@ Line 37: / Line 37: @@
       tai:
         - plmn_id:
-          #  mcc: 999
+          #          mcc: 999
-          #  mnc: 70
+          #          mnc: 70
             mcc: 001
             mnc: 01
           tac: 1
-    plmn_support:
+     plmn_support:
-      - plmn_id:
+       - plmn_id:
-        #          mcc: 999
+         #          mcc: 999
-        #          mnc: 70
+         #          mnc: 70
-          mcc: 001
+           mcc: 001
-          mnc: 01
+           mnc: 01
-        s_nssai:
+         s_nssai:
-          - sst: 1
+           - sst: 1
-    security:
+     security:
-        integrity_order : [ NIA2, NIA1, NIA0 ]
+         integrity_order : [ NIA2, NIA1, NIA0 ]
-        ciphering_order : [ NEA0, NEA1, NEA2 ]
+         ciphering_order : [ NEA0, NEA1, NEA2 ]
-    network_name:
+     network_name:
-        full: Open5GS
+         full: Open5GS
-    amf_name: open5gs-amf0
+     amf_name: open5gs-amf0
 Modify install/etc/open5gs/upf.yaml untuk set GTP-U dan PFCP IP address.
   cd /usr/local/src/open5gs/install/etc/open5gs
   cp upf.yaml upf.yaml.old
   vi upf.yaml
@@ Line 77: / Line 82: @@
         - addr: 127.0.0.7
           port: 9090
 ==4G EPC==

@@ Line 7: / Line 7: @@
   cd /usr/local/src/open5gs/install/etc/open5gs
   cp amf.yaml amf.yaml.old
   vi amf.yaml