[arm-allstar] Repeater site ALLSTAR recovery after POWER FAIL

Stu2 stu at stu2.net
Wed Jul 13 15:29:12 EDT 2022


You should be fine with a static IPv4 address as long as the address 
isn't within range of the DHCP addresses handed out by the router. (as 
David mentions)

A couple of other things to think about:

  * Perhaps IPv6 is enabled and something is going wrong. I've seen
    rogue router advertisements screw things up. You PI might be trying
    to use another computer as the default gateway.
  * Since your switch connects to another switch, maybe there is a
    mis-configuration or some sort of layer 2 routing loop?
  * Is there a firewall in play? It seems like your subnet should be
    isolated from the other equipment on the site. For example, you PC
    and PIs should NOT be able to contact the ATM, Security Cameras,
    etc. and vica versa. If there is any network segmentation, I would
    highly implementing some! Insist.
  * You could create an outbound VPN connection using OpenVPN to create
    a tunnel to some other PC that is Internet accessible. I have used
    AutoSSH, too. Lately, I've been testing ZeroTier. Cloudflare has a
    solution and I think there is a project called ngrok. These
    solutions open outbound tunnels, which you can access remotely.
    ZeroTier and Cloudflare work OK with carrier grade NAT. I would set
    up multi-factor authentication on your PC in case your tunnel was
    breached. (e.g. SSH with GoogleAuthenticator - guess I'm assuming
    the PC is linux based. Use public/private keys at a minimum, no
    passwords.)
  * You might also be able to use a cronjob on the PIs to test for
    connectivity and if none, reboot.

That's all I can think of. With the other responses, you have a pretty 
good list of things to check. Good luck! I know it's a pain to drive all 
that way just to reboot a device.

Let us know what you find out. 73



More information about the ARM-allstar mailing list