Hello all!
Relatively new to Apt_rpt and AllStar, so forgive me if this is a rehash of
something that's already been done. I've recently been put in charge of
maintenance of our local 2m repeater for our club. I'm new to running
repeaters, so I wanted to really learn by doing, and am planning to do this
by rebuilding old, currently defunct 440 machine that's been off the air for
a year now. I've already been in touch with the local freq coordinator, and
ensured we are still coordinated on our old frequency, and we're currently
in the hardware acquisition phase. I'm planning to use AllStar DIAL on an
RPI-3 as the controller for the new repeater, and if all goes well, I'll
eventually replace the current NHRC-3 controller on the 2-meter side with
another Pi-3 running Dial, and set up a permanent link between the 2m and
440 machines.
Question 1 is related to the underlying networking. Our repeater site is a
tower for a rural wireless ISP, so it already has internet connectivity
there. The problem is, the guy running the ISP has some "odd" opinions on
how to run things, and is stubborn enough to not listen to reason as to why
what he's doing is a bad idea - the end result being the systems will be
behind a Double-NAT, with what amounts to no possibility to do proper
port-forwarding to AllStar. Leaving this tower site is pretty impatctical
(the guy running the site is also a ham, and actually lets us use the site
for free), so I've been trying to come up with a way to get around this
port-forwarding issue. As an IT guy by trade myself, I do have access to a
co-located server with multiple IPv4 IP's allocated to it. So my thinking
is, at the repeater site, I'll set up a Microtik router, that establishes an
OpenVPN connection to my colo server. Each of the RPi's will be tunneled
via the OpenVPN connection to the colo server, and use it's own dedicated IP
address from there. In theory, this would remove the double-NAT,
effectively replacing it with a single NAT layer that I control totally. I
don't see any real reason this could not work from a network standpoint
(I've done similar things at work in the past using VPN tunnels), but maybe
there's something specific to the AllStarLink software that precludes this
from working. The more I think about it, I could potentially even use an
Ethernet bridge at the machine in the colo and simply provide public IP's
across the VPN tunnel, effectively eliminating NAT altogether.
Question 2 is more of a policy question - I've registered my personal
callsign with AllStar, and gotten a node number for a simplex link that's
going to be my first node on the network (to learn a little more before I
actually start to build the new repeater). Should I also register our club
callsign and set up the repeater nodes under that (I am the trustee for the
club call), or make additional nodes under my personal call for those?
Thanks for your time in reading thru this, and for the help!
Jeremy Utley, NQ0M
Iola, KS
