Internet Connection Sharing - Revision history

Raboof: /* Share via ethernet */ sharing with NetworkManager: very easy, as long as you update the firewall accordingly

2025-03-12T08:32:57Z

Share via ethernet: sharing with NetworkManager: very easy, as long as you update the firewall accordingly

← Older revision		Revision as of 08:32, 12 March 2025
Line 32:		Line 32:
	== Share via ethernet ==		== Share via ethernet ==

	=== ~~Usage~~ ===		=== Method 1: NetworkManager ===
			In NetworkManager, you can share an existing internet connection of a wireless interface <code>wlan0</code> to clients connected on a ethernet device <code>eth0</code> by setting the connection type of the <code>eth0</code> interface to 'Shared'. This will start a dnsmasq DHCP server. You'll have to expose ports 53 and 67 in <code>networking.firewall.allowedUDPPorts</code>, and then you can connect using regular DHCP from the device connected via the cable in <code>eth0</code>.

			=== Method 2: manual setup ===

	Share an existing internet connection of a wireless interface <code>wlan0</code> to clients connected on a ethernet device <code>eth0</code>. Make sure you've got TCP and UDP port <code>53</code> for the dnsmasq DHCP server opened in your [[Firewall]].		Share an existing internet connection of a wireless interface <code>wlan0</code> to clients connected on a ethernet device <code>eth0</code>. Make sure you've got TCP and UDP port <code>53</code> for the dnsmasq DHCP server opened in your [[Firewall]].
Line 61:		Line 64:
	</syntaxhighlight>		</syntaxhighlight>

	=== ~~Configuration~~ ===		=== Method 3: declarative setup ===

	Persistently share an existing internet connection on interface <code>wlan0</code> to clients connected on an ethernet interface <code>eth0</code>. Tested where <code>wlan0</code> is a wireless interface, but it should work with a different ethernet interface as well. You do not need to manually open port 53.		Persistently share an existing internet connection on interface <code>wlan0</code> to clients connected on an ethernet interface <code>eth0</code>. Tested where <code>wlan0</code> is a wireless interface, but it should work with a different ethernet interface as well. You do not need to manually open port 53.

FliegendeWurst at 16:21, 9 March 2025

2025-03-09T16:21:56Z

← Older revision		Revision as of 16:21, 9 March 2025
Line 136:		Line 136:

	[[Category:Networking]]		[[Category:Networking]]
			[[Category:Tutorial]]

Trespaul: Add equivalent nftables configuration; use `instead of backticks.`


2025-02-18T17:42:42Z
Add equivalent nftables configuration; use <code> instead of backticks.

				
				
				
				
				
				← Older revision
				Revision as of 17:42, 18 February 2025
				
Line 13:
Line 13:



Here <code>eth0</code> is the ethernet interface connected to the internet, and <code>wlan0</code> is the wifi interface to share the internet connection with a wifi hotspot. However, these names may not be the same on your system. To check the name of your hardware interface use the command <code>ifconfig</code> or <code>ifconfig | grep ^[^:]*:</code> It will list network adapters on your system. Then modify command accordingly <code>sudo create_ap <wifiInterfaceName> <ethernetInterfaceName> MyAccessPoint <Password></code> Here <code>eth0</code> is the ethernet interface connected to the internet, and <code>wlan0</code> is the wifi interface to share the internet connection with a wifi hotspot. However, these names may not be the same on your system. To check the name of your hardware interface use the command <code>ifconfig</code> or <code>ifconfig | grep ^[^:]*:</code> It will list network adapters on your system. Then modify command accordingly <code>sudo create_ap <wifiInterfaceName> <ethernetInterfaceName> MyAccessPoint <Password></code>







=== Configuration === === Configuration ===
Line 67:
Line 63:
=== Configuration === === Configuration ===



Persistently share an existing internet connection on interface `wlan0` to clients connected on an ethernet interface `eth0`. Tested where `wlan0` is a wireless interface, but it should work with a different ethernet interface as well. You do not need to manually open port 53. Persistently share an existing internet connection on interface <code>wlan0</code> to clients connected on an ethernet interface <code>eth0</code>. Tested where <code>wlan0</code> is a wireless interface, but it should work with a different ethernet interface as well. You do not need to manually open port 53.



<syntaxhighlight lang="nix"> <syntaxhighlight lang="nix">
Line 119:
Line 115:
   };    };
}; };
</syntaxhighlight>

For nftables, the equivalent of the iptables rules in <code>networking.firewall.extraCommands</code> above is the following.

<syntaxhighlight lang="nix">
networking.nftables.ruleset = ''
  table ip nat {
    chain POSTROUTING {
      type nat hook postrouting priority 100;
      oifname "wlp2s0" counter masquerade
    }
  }
  table ip filter {
    chain INPUT {
      iifname "enp3s0" counter accept
    }
  }
'';
</syntaxhighlight> </syntaxhighlight>



[[Category:Networking]] [[Category:Networking]]



Onny: /* Usage */ Add missing nftable commands
2024-12-17T10:14:17Z
Usage:  Add missing nftable commands

				
				
				
				
				
				← Older revision
				Revision as of 10:14, 17 December 2024
				
Line 49:
Line 49:



# Enable NAT for leaving packets # Enable NAT for leaving packets
nft add table ip nat
nft add chain ip nat POSTROUTING { type nat hook postrouting priority 100 \; }
nft add rule nat POSTROUTING oifname wlan0 masquerade nft add rule nat POSTROUTING oifname wlan0 masquerade








Samasaur: Add persistent configuration to share a WiFi connection over Ethernet
2024-09-30T04:20:52Z
Add persistent configuration to share a WiFi connection over Ethernet

				
				
				
				
				
				← Older revision
				Revision as of 04:20, 30 September 2024
				
Line 20:
Line 20:
=== Configuration === === Configuration ===



Persistent share an existing internet connection of a wired interface <code>eth0</code> using a wifi hotspot on <code>wlan0</code> with the access point name <code>My Wifi Hotspot</code>. The network is protected with a simple WPA2 pre-shared key <code>12345678</code>. Persistently share an existing internet connection of a wired interface <code>eth0</code> using a wifi hotspot on <code>wlan0</code> with the access point name <code>My Wifi Hotspot</code>. The network is protected with a simple WPA2 pre-shared key <code>12345678</code>.



<syntaxhighlight lang="nix"> <syntaxhighlight lang="nix">
Line 61:
Line 61:
# Get handle_number with: nft -a list table nat # Get handle_number with: nft -a list table nat
nft delete rule nat POSTROUTING handle <handle_number> nft delete rule nat POSTROUTING handle <handle_number>
</syntaxhighlight>

=== Configuration ===

Persistently share an existing internet connection on interface `wlan0` to clients connected on an ethernet interface `eth0`. Tested where `wlan0` is a wireless interface, but it should work with a different ethernet interface as well. You do not need to manually open port 53.

<syntaxhighlight lang="nix">
# Set a static IP on the "downstream" interface
networking.interfaces."eth0" = {
  useDHCP = false;
  ipv4.addresses = [{
    address = "10.0.0.1";
    prefixLength = 24;
  }];
};
networking.firewall.extraCommands = ''
  # Set up SNAT on packets going from downstream to the wider internet
  iptables -t nat -A POSTROUTING -o wlan0 -j MASQUERADE

  # Accept all connections from downstream. May not be necessary
  iptables -A INPUT -i enp2s0 -j ACCEPT
'';
# Run a DHCP server on the downstream interface
services.kea.dhcp4 = {
  enable = true;
  settings = {
    interfaces-config = {
      interfaces = [
        "eth0"
      ];
    };
    lease-database = {
      name = "/var/lib/kea/dhcp4.leases";
      persist = true;
      type = "memfile";
    };
    rebind-timer = 2000;
    renew-timer = 1000;
    subnet4 = [
      {
        id = 1;
        pools = [
          {
            pool = "10.0.0.2 - 10.0.0.255";
          }
        ];
        subnet = "10.0.0.1/24";
      }
    ];
    valid-lifetime = 4000;
    option-data = [{
      name = "routers";
      data = "10.0.0.1";
    }];
  };
};
</syntaxhighlight> </syntaxhighlight>



[[Category:Networking]] [[Category:Networking]]





imported>Prateekrajgautam at 05:18, 14 December 2023
2023-12-14T05:18:07Z


				
				
				
				
				
				← Older revision
				Revision as of 05:18, 14 December 2023
				
Line 11:
Line 11:
sudo create_ap wlan0 eth0 MyAccessPoint sudo create_ap wlan0 eth0 MyAccessPoint
</syntaxhighlight> </syntaxhighlight>

Here <code>eth0</code> is the ethernet interface connected to the internet, and <code>wlan0</code> is the wifi interface to share the internet connection with a wifi hotspot. However, these names may not be the same on your system. To check the name of your hardware interface use the command <code>ifconfig</code> or <code>ifconfig | grep ^[^:]*:</code> It will list network adapters on your system. Then modify command accordingly <code>sudo create_ap <wifiInterfaceName> <ethernetInterfaceName> MyAccessPoint <Password></code>







=== Configuration === === Configuration ===





imported>Onny at 18:02, 17 April 2023
2023-04-17T18:02:57Z


				
				
				
				
				
				← Older revision
				Revision as of 18:02, 17 April 2023
				
Line 53:
Line 53:
ip addr del 10.0.0.1/24 dev eth0 ip addr del 10.0.0.1/24 dev eth0
ip link set down eth0 ip link set down eth0
iptables -t nat -D POSTROUTING -o wlan0 -j MASQUERADE # Get handle_number with: nft -a list table nat
nft delete rule nat POSTROUTING handle <handle_number>
</syntaxhighlight> </syntaxhighlight>



[[Category:Networking]] [[Category:Networking]]





imported>Onny at 17:56, 17 April 2023
2023-04-17T17:56:51Z


				
				
				
				
				
				← Older revision
				Revision as of 17:56, 17 April 2023
				
Line 43:
Line 43:



# Enable NAT for leaving packets # Enable NAT for leaving packets
iptables -t nat -A POSTROUTING -o wlan0 -j MASQUERADE nft add rule nat POSTROUTING oifname wlan0 masquerade



# Start dnsmasq for DHCP # Start dnsmasq for DHCP





imported>Onny at 17:49, 17 April 2023
2023-04-17T17:49:16Z


				
				
				
				
				
				← Older revision
				Revision as of 17:49, 17 April 2023
				
Line 32:
Line 32:
=== Usage === === Usage ===



Share an existing internet connection of a wireless interface <code>wlan0</code> to clients connected on a ethernet device <code>eth0</code>. Share an existing internet connection of a wireless interface <code>wlan0</code> to clients connected on a ethernet device <code>eth0</code>. Make sure you've got TCP and UDP port <code>53</code> for the dnsmasq DHCP server opened in your [[Firewall]].



<syntaxhighlight lang="bash"> <syntaxhighlight lang="bash">





imported>Onny at 11:38, 17 April 2023
2023-04-17T11:38:54Z


				
				
				
				
				
				← Older revision
				Revision as of 11:38, 17 April 2023
				
Line 28:
Line 28:
</syntaxhighlight> </syntaxhighlight>



=== Share via ethernet === == Share via ethernet ==
 
=== Usage ===



Share an existing internet connection of a wireless interface <code>wlan0</code> to clients connected on a ethernet device <code>eth0</code>. Share an existing internet connection of a wireless interface <code>wlan0</code> to clients connected on a ethernet device <code>eth0</code>.

← Older revision		Revision as of 10:14, 17 December 2024
Line 49:		Line 49:

	# Enable NAT for leaving packets		# Enable NAT for leaving packets
			nft add table ip nat
			nft add chain ip nat POSTROUTING { type nat hook postrouting priority 100 \; }
	nft add rule nat POSTROUTING oifname wlan0 masquerade		nft add rule nat POSTROUTING oifname wlan0 masquerade

← Older revision		Revision as of 05:18, 14 December 2023
Line 11:		Line 11:
	sudo create_ap wlan0 eth0 MyAccessPoint		sudo create_ap wlan0 eth0 MyAccessPoint
	</syntaxhighlight>		</syntaxhighlight>

			Here <code>eth0</code> is the ethernet interface connected to the internet, and <code>wlan0</code> is the wifi interface to share the internet connection with a wifi hotspot. However, these names may not be the same on your system. To check the name of your hardware interface use the command <code>ifconfig</code> or <code>ifconfig \| grep ^[^:]*:</code> It will list network adapters on your system. Then modify command accordingly <code>sudo create_ap <wifiInterfaceName> <ethernetInterfaceName> MyAccessPoint <Password></code>





	=== Configuration ===		=== Configuration ===

← Older revision		Revision as of 18:02, 17 April 2023
Line 53:		Line 53:
	ip addr del 10.0.0.1/24 dev eth0		ip addr del 10.0.0.1/24 dev eth0
	ip link set down eth0		ip link set down eth0
	~~iptables~~ -t nat -D POSTROUTING ~~-o wlan0 -j MASQUERADE~~		# Get handle_number with: nft -a list table nat
			nft delete rule nat POSTROUTING handle <handle_number>
	</syntaxhighlight>		</syntaxhighlight>

	[[Category:Networking]]		[[Category:Networking]]

← Older revision		Revision as of 17:56, 17 April 2023
Line 43:		Line 43:

	# Enable NAT for leaving packets		# Enable NAT for leaving packets
	~~iptables -t~~ nat -A POSTROUTING -o wlan0 ~~-j MASQUERADE~~		nft add rule nat POSTROUTING oifname wlan0 masquerade

	# Start dnsmasq for DHCP		# Start dnsmasq for DHCP

← Older revision		Revision as of 17:49, 17 April 2023
Line 32:		Line 32:
	=== Usage ===		=== Usage ===

	Share an existing internet connection of a wireless interface <code>wlan0</code> to clients connected on a ethernet device <code>eth0</code>.		Share an existing internet connection of a wireless interface <code>wlan0</code> to clients connected on a ethernet device <code>eth0</code>. Make sure you've got TCP and UDP port <code>53</code> for the dnsmasq DHCP server opened in your [[Firewall]].

	<syntaxhighlight lang="bash">		<syntaxhighlight lang="bash">

← Older revision		Revision as of 11:38, 17 April 2023
Line 28:		Line 28:
	</syntaxhighlight>		</syntaxhighlight>

	=== Share via ethernet ===		== Share via ethernet ==

			=== Usage ===

	Share an existing internet connection of a wireless interface <code>wlan0</code> to clients connected on a ethernet device <code>eth0</code>.		Share an existing internet connection of a wireless interface <code>wlan0</code> to clients connected on a ethernet device <code>eth0</code>.

Internet Connection Sharing - Revision history

Raboof: /* Share via ethernet */ sharing with NetworkManager: very easy, as long as you update the firewall accordingly

FliegendeWurst at 16:21, 9 March 2025

Trespaul: Add equivalent nftables configuration; use instead of backticks.

Onny: /* Usage */ Add missing nftable commands

Samasaur: Add persistent configuration to share a WiFi connection over Ethernet

imported>Prateekrajgautam at 05:18, 14 December 2023

imported>Onny at 18:02, 17 April 2023

imported>Onny at 17:56, 17 April 2023

imported>Onny at 17:49, 17 April 2023

imported>Onny at 11:38, 17 April 2023

Trespaul: Add equivalent nftables configuration; use `instead of backticks.`