# Ethernet-over-USB network ## Basic configuration Specifically to v2+. When combined with configuring a DNS server, FTP, or SMB (for example), this is a powerful way to extend the capabilities of PiKVM. 1. Edit `/etc/kvmd/override.yaml` and add these lines: ``` yaml otg: devices: ethernet: enabled: true driver: ecm host_mac: 48:6f:73:74:50:43 kvm_mac: 42:61:64:55:53:42 ``` The `host_mac` address will be used on the server's network interface. The `kvm_mac` means the address that will be assigned to the local interface on the PiKVM. The KVM interface will be called `usb0`network interface. If the `host_mac` or `kvm_mac` is not specified, a random value will be used. The `driver` parameter means the protocol that will be used for the USB network. The default value is `ecm` so it can be passed it this example. Other possible values are `eem`, `ncm`, `rndis` and `rndis5`. **Driver compatibility:** | Driver | Operating System| |--------|-------| | ecm | Linux | | eem | Linux | | rndis5 | Windows XP to Windows 7[1](#rndis5)
Linux > 2.6.13 | | rndis | Windows 7 and later[2](#rndis)
Linux > 2.6.13 | | ncm | Windows 10 and later
Linux > 2.6.37 | 1: Manual driver installation is required. [Download RNDIS 5 Windows](driver/win/pikvm-rndis5.inf)
2: Automatic driver installation since kvmd-3.53 2. To automatically configure the USB network on the server recommended using the service `kvmd-otgnet`. It configures the firewall, assigns an address to the local PiKVM interface `usb0` and starts DHCP so the managed server can get the IPv4 address. By default, the address `169.254.0.1/28` to interface `usb0` will be assigned. One of the other addresses from the network `169.254.0.0./28` will be assigned to the server when it requests it via DHCP. For security reasons, all incoming connections from the server to the PiKVM side are blocked (except for ICMP and UDP port 67 which is used for DHCP). If you want to allow access from the server to the PiKVM interface, then you need to add ports 80 and 443 to the whitelist using `/etc/kvmd/override.yaml` file like this: ```yaml otgnet: firewall: allow_tcp: [80, 443] ``` To view other available configuration parameters, use the command `kvmd -m`. 3. To enable the service, use the command `systemctl enable kvmd-otgnet`. 4. Perform `reboot`. ## Routing via PiKVM By default, `kvmd-otgnet` will configure network connection between PiKVM and the server host only. The server host will not be able to reach other hosts beyond PiKVM. If the full network access is required from the server host through the USB-Ethernet feature (access all hosts PiKVM can access), additional settings are needed in `/etc/kvmd/override.yaml`. 1. Run `echo "net.ipv4.ip_forward = 1" > /etc/sysctl.d/99-kvmd-extra.conf`. 2. Add network interface to forward requests to (default gateway) by adding a line `forward_iface: ` under `firewall:`. Typically it would be `eth0` if the built-in ethernet port is used:: ```yaml otgnet: firewall: forward_iface: eth0 ``` 3. Add DNS server to provide host name resolution service. For example, adding `8.8.8.8` as DNS server requires addition of `dnsmasq` dhcp options. This can be done by adding following lines to `/etc/kvmd/override.yaml`: ```yaml otgnet: commands: post_start_cmd_append: - "--dhcp-option=6,8.8.8.8" ``` 4. Combining above two together:: ```yaml otgnet: firewall: forward_iface: eth0 commands: post_start_cmd_append: - "--dhcp-option=6,8.8.8.8" ``` 5. Don't forget to `reboot`. ======= ??? example "An example of what the config would look like if you wanted the target to have inet access (Please edit to suit your needs):" ``` otgnet: firewall: allow_tcp: [80, 443] forward_iface: wlan0 commands: post_start_cmd_append: - "--dhcp-option=6,1.1.1.1,1.0.0.1" iface: ip_cmd: - /usr/bin/ip net: 10.65.0.0/28 ``` ======= ## Working with Windows Computers This has been proven to work with Windows: 1. Set the driver type to `rndis` (see above) 2. Download this driver on the Windows machine and unzip it somewhere: [https://modclouddownloadprod.blob.core.windows.net/shared/mod-rndis-driver-windows.zip] 3. Open the devices manager \ ![grafik](https://user-images.githubusercontent.com/100349/149659926-34c6650e-fc9d-469b-838d-969b754d98fd.png) 4. Select `Properties` of the `Composite KVM Device` \ ![grafik](https://user-images.githubusercontent.com/100349/149659971-67f68537-af83-41af-a777-99c022b78677.png) 5. Select the `RNDIS Device` and click properties \ ![grafik](https://user-images.githubusercontent.com/100349/149659911-9f734343-50c2-4868-82e0-f47712670d98.png) 6. Switch to the "Driver" Tab and then click "Update driver" 7. Click "Browse my computer for driver software" \ ![grafik](https://user-images.githubusercontent.com/100349/149660982-0f9ce11e-ab03-4bff-a0aa-1c2427664a19.png) 8. Click "Let me pick from a list of available drivers on my Computer" \ ![grafik](https://user-images.githubusercontent.com/100349/149661039-ad6740d5-624b-4649-aef9-38cbaf5965b3.png) 9. From the list of available hardware types, scroll down and select "Network adapters", then click next \ ![grafik](https://user-images.githubusercontent.com/100349/149661132-405fad53-a4a4-41c2-a60d-da3a93059ae2.png) 10. Click "Have disk" \ ![grafik](https://user-images.githubusercontent.com/100349/149661092-7cd9f642-039a-4469-8439-44dca9f24129.png) 11. Click Browse, navigate to the folder where you've stored the driver and select the `RNDIS.inf`, press Open and then OK \ ![grafik](https://user-images.githubusercontent.com/100349/149661186-5039689e-53fe-49e6-8892-af0bd92daa54.png) 12. Select "Acer Netchip RNDIS/Ethernet Gadget" and click Next \ ![grafik](https://user-images.githubusercontent.com/100349/149661214-d0504972-a8f6-4496-a4d6-033c70f45f9f.png) 13. Dismiss the warning about non-compatible drivers by clicking "Yes" \ ![grafik](https://user-images.githubusercontent.com/100349/149661228-e10039ae-ac32-4b98-83aa-893e4e07b639.png) 14. You're done - the device should now be recognized. \ ![grafik](https://user-images.githubusercontent.com/100349/149661295-97d8d8f9-5c40-4d80-b3a2-c544ca8c7224.png) 15. Verify the card is working by pinging your piKVM in a console: `ping 169.254.0.1` \ ![grafik](https://user-images.githubusercontent.com/100349/149662794-51d34926-a6d4-425a-8cdd-b16d69e458ee.png)