# Brigded Broadband

# RHEL

# RHEL Repos

### Ensure Register

Check register Status with these commands. Output might no match exactly just general checks to see if anything looks weird.

```bash
sudo subscription-manager identity
```

```bash
system identity: 3634c02b-c3ce-4533-8151-8c7cc2d13318
name: RP-Host-03
org name: 7752782
org ID: 7752782
```

And

```bash
sudo subscription-manager status
```

```bash
+-------------------------------------------+
   System Status Details
+-------------------------------------------+
Overall Status: Registered
Content Access Mode is set to Simple Content Access. This host has access to content, regardless of subscription status.
```

Register if not

```bash
sudo subscription-manager register --org=7752782 --activationkey=KEY_HERE
```


### Repos

Repos should be added automatically after registering. Check to ensure the correct repos are enabled.

Ensure only these repos are enabled

- rhel-8-for-x86\_64-baseos-rpms
- rhel-8-for-x86\_64-appstream-rpms

```bash
sudo subscription-manager repos --list-enabled
```

Should show

```bash
+----------------------------------------------------------+
    Available Repositories in /etc/yum.repos.d/redhat.repo
+----------------------------------------------------------+
Repo ID:   rhel-8-for-x86_64-baseos-rpms
Repo Name: Red Hat Enterprise Linux 8 for x86_64 - BaseOS (RPMs)
Repo URL:  https://cdn.redhat.com/content/dist/rhel8/8.10/x86_64/baseos/os
Enabled:   1

Repo ID:   rhel-8-for-x86_64-appstream-rpms
Repo Name: Red Hat Enterprise Linux 8 for x86_64 - AppStream (RPMs)
Repo URL:  https://cdn.redhat.com/content/dist/rhel8/8.10/x86_64/appstream/os
Enabled:   1
```

Run updates

```bash
sudo dnf update -y
```

### Failed EUS Repositories

Redhat adds Extended Update Support (EUS) repos to the list by default. These can be disabled as they are only required for unsupported dependencies.

#### Fix for most cases

```bash
sudo subscription-manager repos \
  --disable=rhel-8-for-x86_64-baseos-eus-rpms \
  --disable=rhel-8-for-x86_64-appstream-eus-rpms
```

```bash
sudo dnf update -y
```

#### Manual Checking

Check the listed repos

```bash
sudo subscription-manager repos --list-enabled
```

Disable repos by name

```bash
sudo subscription-manager repos --disable=rhel-8-for-x86_64-baseos-eus-rpms
```

Run upgrades

```bash
sudo dnf update -y
```

# Network

### Overview

There are 4 network interfaces.  
Each interface bonds 2 physical network cards.

The 4 main vlans used are

- MDC RP Management
- NSP Client Network
- NSP Internal Network
- NSP Managed Network

Exact mappings and vlan information is in the spreadsheet:  
[Network Interfaces and Vlans](https://bookstack.archfox.org/attachments/2)

This sheet is for the RCPT hosts. The KCSW hosts are the exact same except the third IP field is +50.

<div id="bkmrk-rcpt-vlan-vlan-172.1"><table style="width:27.2619%;height:59.3666px;"><colgroup><col style="width:45.5738%;"></col><col style="width:54.3751%;"></col></colgroup><thead><tr><td>RCPT Vlan</td><td></td></tr></thead><tbody><tr style="height:29.6833px;"><td style="height:29.6833px;">Vlan</td><td class="align-left" style="height:29.6833px;">172.18.2.0/24

</td></tr><tr style="height:29.6833px;"><td style="height:29.6833px;">Vlan Tag</td><td class="align-left" style="height:29.6833px;">2102

</td></tr></tbody></table>

</div><table id="bkmrk-kcsw-vlan-vlan-172.1" style="width:27.2619%;height:59.3666px;"><thead><tr><td style="width:49.9781%;">KCSW Vlan

</td><td style="width:49.9781%;">  
</td></tr></thead><tbody><tr style="height:29.6833px;"><td style="height:29.6833px;width:49.9781%;">Vlan

</td><td class="align-left" style="height:29.6833px;width:49.9781%;">172.18.52.0/24</td></tr><tr style="height:29.6833px;"><td style="height:29.6833px;width:49.9781%;">Vlan Tag</td><td class="align-left" style="height:29.6833px;width:49.9781%;">2152</td></tr></tbody></table>

### Bond configurations

This creates the bond interfaces

```
nmcli connection add ipv4.method disabled ipv6.method ignore type bond mode active-backup ifname bond1 con-name bond1
nmcli connection add type ethernet slave-type bond ifname ens6f0 master bond1 con-name bond1-slave0
nmcli connection add type ethernet slave-type bond ifname ens6f1 master bond1 con-name bond1-slave1

nmcli connection add ipv4.method disabled ipv6.method ignore type bond mode active-backup ifname bond2 con-name bond2
nmcli connection add type ethernet slave-type bond ifname eno12409np1 master bond2 con-name bond2-slave0
nmcli connection add type ethernet slave-type bond ifname eno12399np0 master bond2 con-name bond2-slave1

nmcli connection add ipv4.method disabled ipv6.method ignore type bond mode active-backup ifname bond3 con-name bond3
nmcli connection add type ethernet slave-type bond ifname eno12419np2 master bond3 con-name bond3-slave0
nmcli connection add type ethernet slave-type bond ifname eno12429np3 master bond3 con-name bond3-slave1

nmcli dev
```

### Bridge configurations

This creates the bridges and adds them as slaves to the respective bond

```
nmcli con add type bridge ifname br1 con-name br1
nmcli con modify br1 ipv4.method disabled ipv6.method disabled
nmcli con modify bond1 master br1 slave-type bridge
nmcli con up br1

nmcli con add type bridge ifname br2 con-name br2
nmcli con modify br2 ipv4.method disabled ipv6.method disabled
nmcli con modify bond2 master br2 slave-type bridge
nmcli con up br2

nmcli con add type bridge ifname br3 con-name br3
nmcli con modify br3 ipv4.method disabled ipv6.method disabled
nmcli con modify bond3 master br3 slave-type bridge
nmcli con up br3

nmcli dev
```

### VM ENV

This makes sure to use the system qemu instance instead of the userspace one when running virsh commands.

<p class="callout warning">Run this before using any VM commands otherwise you will not find any VMs!</p>

```
echo 'export LIBVIRT_DEFAULT_URI="qemu:///system"' >> ~/.bashrc
source ~/.bashrc
```

### VM Nets

Use this script to add the bridges to the VMs

[add\_br\_vm.sh](https://bookstack.archfox.org/attachments/1)

#### VM Bridge Assignments:

Client Bridge (br1) Vms:

- All Vms

NSP Internal Bridge (br2) Vms:

- All VMs excpet:   
    KCSW-WSNOC, KCSW-WSP, RCPT-WSNOC, RCPT-WSP

NSP Internal Bridge (br3) Vms:

- All VMs excpet:   
    KCSW-WSNOC, KCSW-WSP, RCPT-WSNOC, RCPT-WSP