By Carla Schroder<\/p>\n
Soekris single-board computers (SBC) are great choices for routers, firewalls, and wireless access points. They’re small, quiet, low-power, and sturdy. So here’s a howto that attempts to answer your hardware questions, and then we’ll get into building a sturdy firewall using Pyramid Linux. I just happened to find a deal on a used Soekris Net4521, which handles both wired and wireless networking, so that’s the model we’ll talk about. What you learn here can be applied to all models.<\/span><\/p>\n The PC Engines WRAP Boards are similar in price and features, and are good-quality just like their Soekris cousins. Soekris and WRAP are probably the most popular amongst the Linux\/BSD crowd. When you’re ready to move up from those wimpy little plastic blue boxes to grownup networking devices, take a good look at these. (See Resources for more information on these and on other single-board computers.)<\/span><\/p>\n You probably won’t see throughput greater than 17 megabits per second with the Soekris 45xx boards. The 48xx and WRAP boards are more powerful, so you’ll get speeds up to 50 Mbps. This is still faster than most users’ Internet pipelines, and fast enough for ordinary Ethernet LANs.<\/span><\/p>\n Getting Acquainted With the 4521<\/strong> You’ll find more raw horsepower in a low-end video card, or some of these weirdo neon blinky hydraulic athletic shoes kids are into these days. OK, so maybe the shoes are an exaggeration. But even so, don’t let the numbers fool you. Combined with a specialized Linux, BSD or any embedded operating system, these little devices are tough, efficient workhorses that beat the pants off comparable (and usually overpriced and inflexible) commercial devices. You get complete control and customizability, and don’t have to worry about nonsense like\u00a0NTP server abuse<\/a>, or\u00a0secret backdoors<\/a>\u00a0that are known to everyone but the end user.<\/p>\n What You Need To Make It Go<\/strong> In addition the board itself you’ll need a Compact Flash card or microdrive, a reader\/writer for the CF\/microdrive, power supply, and a null-modem DB9 serial cable. A case is optional.<\/p>\n You can purchase the power supply and case from Soekris; storage media and cables have to come from somewhere else. I don’t have a fax and Soekris doesn’t have secure online ordering, so I found an\u00a0Ault 12V\/1.5A Switching Wall Wart<\/a>\u00a0elsewhere.<\/p>\n Buying AC\/DC transformers can drive you nuts because you need the exactly correct one: a switching transformer with the correct combination of voltage and amperage, and the correctly-sized barrel connector. The Ault has it all, including a center-positive 2.1mm barrel connector.<\/p>\n My used 4521 came with a Crucial 64 megabyte Compact Flash card. The 4521 has a CompactFLASH Type I\/II socket that supports up to an eight-megabyte Compact Flash card or up to a four-gigabyte microdrive. You’ll need a second PC and a reader\/writer for your flash card or microdrive to install the operating system. The most common kind plug into a USB port, come in various garish plastic colors, and shouldn’t cost more than $20.<\/p>\n Cost<\/strong> Capacity<\/strong> That’s quite a bit of flexibility in a tiny device. Two Ethernet ports are fine for a standard firewall when there are no public servers, but you need a third one to set up a proper DMZ for public services. No problem, just add a PCMCIA or Cardbus Ethernet card. The Mini-PCI socket is perfect for a wireless adapter like the Atheros 5004 MP, which is a mini-PCI 802.11a\/b\/g wireless adapter. (I bought this card in a kit with a pigtail and rubber duck antenna for $74 from\u00a0Netgate.com<\/a>.)<\/p>\n Installing the Atheros card was a bit tricky. First slide it into the slot at an angle, then push until it clicks into place. Mine required a frightening amount of force. Then press it flat, and if it’s installed correctly the little side clips will fit perfectly in the little indentations in the card, as Figure 2 shows.<\/p>\n Every computer widget maker in the world lards their tech specs with junk like dimensions, humidity range, weight, and operating tempuratures. This makes them look like they’re providing meaningful information, when they’re really dodging the stuff we want to know, like, will it run on Linux\/BSD\/Mac OSX\/etc.? But for the Soekris boards, the operating temperature range is actually meaningful \u2014 0-60 \u00b0C is an extreme range that you won’t see on most networking gear. These little boards can handle pretty hostile environments, and with the right kind of enclosures can even go outside.<\/p>\n PCI Warning<\/strong> What if you don’t have a nice networking device with a miniPCI slot, but only full-sized PCI, but still want to use the Atheros card? Get a\u00a0mPCI-to-PCI<\/a>\u00a0adapter. This particular model is dual-voltage, so you can plug it into an old-fashioned full-sized 5v PCI slot.<\/p>\n Next week we’ll install an operating system and get to work.<\/p>\n Resources<\/strong><\/p>\n By Carla Schroder Soekris single-board computers (SBC) are great choices for routers, firewalls, and wireless access points. They’re small, quiet, low-power, and sturdy. So here’s a howto that attempts to answer your hardware questions, and then we’ll get into building a sturdy firewall using Pyramid Linux. I just happened to find a deal on a used Soekris Net4521, which handles both wired and wireless networking, so that’s the model we’ll talk about. What you learn here can be applied to all models. The PC Engines WRAP Boards are similar in price and features, and are good-quality just like their Soekris <\/p>\n","protected":false},"author":2,"featured_media":5595,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5],"tags":[],"_links":{"self":[{"href":"https:\/\/www.practicallynetworked.com\/wp-json\/wp\/v2\/posts\/896"}],"collection":[{"href":"https:\/\/www.practicallynetworked.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.practicallynetworked.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.practicallynetworked.com\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.practicallynetworked.com\/wp-json\/wp\/v2\/comments?post=896"}],"version-history":[{"count":0,"href":"https:\/\/www.practicallynetworked.com\/wp-json\/wp\/v2\/posts\/896\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.practicallynetworked.com\/wp-json\/wp\/v2\/media\/5595"}],"wp:attachment":[{"href":"https:\/\/www.practicallynetworked.com\/wp-json\/wp\/v2\/media?parent=896"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.practicallynetworked.com\/wp-json\/wp\/v2\/categories?post=896"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.practicallynetworked.com\/wp-json\/wp\/v2\/tags?post=896"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\nYou might look at the specs of my sleek little 4521 and turn your nose up in scorn:<\/span><\/p>\n\n
\nIt can be a bit confusing getting all the pieces that you need. Fortunately their user forum is an excellent resource, and you can\u00a0download user manuals<\/a>.<\/p>\n
\nBecause I got a nice deal on a used board, my total outlay was under $200. If I had purchased a new board I would have been out about $300, and still been happy.<\/p>\n
\nAs a general rule, one of these will serve up to fifty LAN users, though of course this varies according to how hard your users hammer the little guy. Let’s see what you get with the 4521:<\/p>\n\n
\nBeware miniPCI and newfangled PCI in general. In the olden days all PCI slots were five volt, and we were happy and we liked it that way. Then along came the great volt shortage, and now 3.3 volt PCI devices are sprouting like mushrooms on cow flops. Some PCI cards are dual-voltage, but many are not and will fry in a 5v slot, so pay attention. The Atheros card requires 3.3v.<\/p>\n\n