You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
> After many years of service, the PC Engines APU platform is now [EOL](https://www.pcengines.ch/eol.htm).
3
-
4
-
This guide demonstrates how to build a router using the PC Engines [APU platform](https://www.pcengines.ch/apu.htm) and a free operating system like [OpenBSD](https://www.openbsd.org/) or [Debian](https://www.debian.org/distrib/) to be used for [network address translation](https://computer.howstuffworks.com/nat.htm), as a stateful firewall, to filter web traffic, and more.
1
+
This guide demonstrates how to build a router using a free operating system like [OpenBSD](https://www.openbsd.org/) or [Debian](https://www.debian.org/distrib/) to be used for [network address translation](https://computer.howstuffworks.com/nat.htm), as a stateful firewall, to filter web traffic, and more.
5
2
6
3
This guide is provided "as is" - without warranties of any kind. You are solely responsible for any consequences of following it.
7
4
5
+
See [legacy/pcengines.md](https://github.com/drduh/Router-Guide/blob/main/legacy/pcengines.md) for previous instructions to configure the PC Engines APU platform.
6
+
8
7
# Overview
9
8
10
9
The completed router configuration will enable:
@@ -15,211 +14,9 @@ The completed router configuration will enable:
15
14
* A local Ethernet interface on `10.8.1.0/24`
16
15
* A fourth Ethernet interface is available on the APU4
17
16
18
-
## Hardware
19
-
20
-
This guide should work on any PC Engines APU model. Here is a suggested parts list:
21
-
22
-
Part | Description | Cost
23
-
-: | :-: | :-
24
-
[apu4c4](https://pcengines.ch/apu4c4.htm) | apu4c4 system board | $117.50
25
-
[case1d2bluu](https://pcengines.ch/case1d2bluu.htm) | Enclosure 3 LAN, blue | $9.40
26
-
[ac12vus2](https://pcengines.ch/ac12vus2.htm) | AC adapter 12V 2A US plug | $4.10
[pigsma](https://pcengines.ch/pigsma.htm) (x2) | Cable I-PEX -> reverse SMA | $2.70
30
-
[antsmadb](https://pcengines.ch/antsmadb.htm) (x2) | Antenna reverse SMA dual band | $4.10
31
-
32
-
> [!NOTE]
33
-
> WLE600VX and WLE900VX cards will likely not work due to [regulatory compliance reasons](https://medium.com/@renaudcerrato/how-to-build-your-own-wireless-router-from-scratch-part-3-d54eecce157f).
34
-
35
-
To connect over serial, you will need a [USB to Serial (9-Pin) Converter Cable](https://www.amazon.com/gp/product/B00IDSM6BW) and [Modem Serial RS232 Cable](https://www.amazon.com/gp/product/B000067SCH), also available from [PC Engines](https://www.pcengines.ch/usbcom1a.htm).
36
-
37
-
See [Issue #1](https://github.com/drduh/PC-Engines-APU-Router-Guide/issues/1) for a list of alternative parts.
38
-
39
-
## Assembly
40
-
41
-
Clear a workspace and unpack the materials. Follow the [apu cooling assembly instructions](https://www.pcengines.ch/apucool.htm) to install the heat conduction plate.
42
-
43
-
Install the mSATA drive and miniPCIe wireless adapter in their respective slots.
44
-
45
-
See the relevant APU series manual for detailed board information:
46
-
47
-
*[APU2](https://www.pcengines.ch/pdf/apu2.pdf)
48
-
*[APU3](https://www.pcengines.ch/pdf/apu3.pdf)
49
-
*[APU4](https://www.pcengines.ch/pdf/apu4.pdf)
50
-
51
-
> [!CAUTION]
52
-
> Wireless radio cards are ESD sensitive, especially the RF switch and the power amplifier. To avoid damage by electrostatic discharge, the following installation procedure is [recommended](https://www.pcengines.ch/wle200nx.htm)
53
-
54
-
1. Touch your hands and the bag containing the radio card to a ground point on the router board (for example one of the mounting holes). This equalizes the electrical potential between the radio card and the router board.
55
-
1. Install the radio card in the miniPCI express socket.
56
-
1. Install the pigtail cable in the cut-out of the enclosure. This will ground the pigtail to the enclosure.
57
-
1. Touch the pigtail's I-PEX connector to a mounting hole to discharge it, then plug it into the radio card.
58
-
59
-
To avoid arcing, connect the DC jack first, then plug the power adapter into an outlet.
60
-
61
-
Press `F10` during boot and select `Payload [memtest]` to complete at least one pass.
62
-
63
-
# Connect over serial
64
-
65
-
The APU serial connection uses 115200 baud, 8N1 (8 data bits, no parity, and 1 stop bit).
66
-
67
-
On OpenBSD, use [cu](https://man.openbsd.org/cu):
68
-
69
-
```bash
70
-
doas cu -r -s 115200 -l cuaU0
71
-
```
72
-
73
-
On Linux, use [screen](https://www.gnu.org/software/screen/manual/screen.html):
74
-
75
-
```bash
76
-
screen /dev/ttyUSB0 115200 8N1
77
-
```
78
-
79
-
Or use [minicom](https://linux.die.net/man/1/minicom):
80
-
81
-
```bash
82
-
sudo minicom -D /dev/ttyUSB0
83
-
```
84
-
85
-
Power on the APU and note the firmware version displayed briefly during boot.
86
-
87
-
# Updating firmware
88
-
89
-
Check for the latest PC Engines firmware version at [pcengines.github.io](https://pcengines.github.io/)
90
-
91
-
> [!NOTE]
92
-
> As of 2023, PC Engines firmware is no longer being updated. See [announcement](https://docs.dasharo.com/variants/pc_engines/post-eol-fw-announcement/).
93
-
94
-
To update firmware, first download and extract [TinyCore Linux](https://pcengines.ch/file/apu2-tinycore6.4.img.gz).
95
-
96
-
Download and import the [firmware signing key](https://github.com/3mdeb/3mdeb-secpack/tree/master/customer-keys/pcengines/release-keys), then check the file signature:
Or generate a new SSH key on the client and copy it to clipboard:
646
443
647
444
```bash
648
-
ssh-keygen -f -C 'sysadm'~/.ssh/pcengines
649
-
xclip ~/.ssh/pcengines.pub
445
+
ssh-keygen -f -C 'sysadm'~/.ssh/router
446
+
xclip ~/.ssh/router.pub
650
447
```
651
448
652
449
On the APU, over the serial connection, as the primary user (e.g., `sysadm` - *not*`root`), configure SSH to accept that key by pasting it into `~/.ssh/authorized_keys`:
0 commit comments