RE: IPv6 in rc.conf only: create gif0 / add route?

From: Vince (jhary_at_unsane.co.uk)
Date: 03/20/05

  • Next message: Thomas Foster: "Re: Slow Performance with OpenBSD's PF on 5.3-RELEASE"
    To: "'Fafa Diliha Romanova'" <fteg@london.com>
    Date: Sun, 20 Mar 2005 19:54:49 -0000
    
    

     

    > -----Original Message-----
    > From: owner-freebsd-questions@freebsd.org
    > [mailto:owner-freebsd-questions@freebsd.org] On Behalf Of
    > Fafa Diliha Romanova
    > Sent: 20 March 2005 19:22
    > To: Vince Hoffman
    > Cc: questions@freebsd.org
    > Subject: RE: IPv6 in rc.conf only: create gif0 / add route?
    >
    >
    > Hello again!
    >

    Hi,
     
    > Your answers were a bit out of my league:
    >

    Or badly worded ;)
     
    > > > here is my rc.conf so far. i'm not sure if it's working i haven't
    > > > had a chance to reboot yet.
    > > >
    > > > please let me know what you think of it?
    > > >
    > > > # *** IPv6 configuration
    > > > #
    > > > ipv6_enable="YES"
    > > > ipv6_gateway_enable="YES"
    > > > cloned_interfaces="gif0"
    > > > ipv6_network_interfaces="gif0"
    > > > ipv6_defaultrouter="fe80::"
    > > > ifconfig_gif0="inet 213.181.153.22 213.121.24.85"
    > > > ipv6_ifconfig_gif0_alias1="2001:618:400:33bb::1 prefixlen 64"
    > > > ipv6_ifconfig_gif0_alias2="2001:618:400:33bb::2 prefixlen 64"
    > > > ipv6_ifconfig_gif0_alias3="2001:618:400:33bb::3 prefixlen 64"
    > > > ipv6_firewall_enable="YES"
    > > > ipv6_firewall_type="open"
    > > > rtadvd_enable="YES"
    > > > rtadvd_interfaces="gif0"
    > >
    > > You have nothing to specify the ipv6 part of the gif tunnel. should
    > > have 2 ipv6 addresses usualy on a /128.
    >
    > Could you please provide me with an example?

    Ok I had a headstart here as I had already used a gif s an ipv4 over
    ipv4 tunnel and the HE tunnelbroker page gives you a basic config
    (for every operating system you're likely to use anyway which includes
    FreeBSD.) I'll go through the steps of creating the tunnel and then
    translate them to rc.conf variables.

    1) create the gif
     ifconfig gif0 create -- you have this with cloned_interfaces="gif0"

    2) the command they give was slightly wrong you need
      ifconfig gif0 inet 62.140.220.90 64.71.128.83 -- again you have this as
    ifconfig_gif0="inet 213.181.153.22 213.121.24.85"

    3) configure the ipv6 point to point tunnel
    ifconfig gif0 inet6 2001:470:1F01:FFFF::121 2001:470:1F01:FFFF::120
    prefixlen 128
    --- you are missing this command. I have
    ipv6_ifconfig_gif0="2001:470:1F01:FFFF::121 2001:470:1F01:FFFF::120
    prefixlen 128

    4) add you ipv6 default route (the far end of the tunnel makes sense)
    route -n add -inet6 default 2001:470:1F01:FFFF::120
    In rc.conf
    ipv6_defaultrouter="2001:470:1F01:FFFF::120"

    >
    > > Your ipv6 default gateway is a fe80: address (link local.)
    > Usualy it
    > > would be your next hop out onto the ipv6 internet (in my case the
    > > other side of the ipv6 part of the gif tunnel.)
    >
    > How should my gateway be?
    >

    Your first hop out onto the ipv6 internet, as provided by your tunnel
    provider.

    > > You are advertising your machine as an ipv6 router but only
    > on the gif
    > > interface, thus any ipv6 hosts you have on your network
    > wont see the
    > > router advertisment packets and wont autoconfigure to the range you
    > > are advertising.
    >
    > My network interface connecting me to the Internet is lnc0.
    > Should rtadvd be advertising it instead?
    >

    Do you have any hosts that need to use rtadvd? (hosts on your network that
    are
    running rtsold/rtsol or equivalent? If not don't run it, if you do then run
    it
    on the interface those hosts are connected to.

    Good luck,
    Vince
    > > Hope you get it working, I'm no expert but it works for me :)
    >
    > Now now :) You seem to know your way.
    >
    > All the best,
    > -- Fafa
    >
    > > > ----- Original Message -----
    > > > From: Vince <jhary@unsane.co.uk>
    > > > To: "'Fafa Diliha Romanova'" <fteg@london.com>,
    > > > questions@freebsd.org
    > > > Subject: RE: IPv6 in rc.conf only: create gif0 / add route?
    > > > Date: Mon, 14 Mar 2005 20:26:53 -0000
    > > >
    > > >>
    > > >> Since you are using a gif interface I assume you use a
    > tunnel for
    > > >> your ipv6 connection.
    > > >>
    > > >> Here is the relevant parts of my rc.conf which works (I
    > use a H.E.
    > > >> ipv6 tunnel (http://tunnelbroker.net) but any gif tunnel
    > should be
    > > >> similar)
    > > >>
    > > >> gif_interfaces="gif0" # create the gif
    > > >> gifconfig_gif0="62.140.220.90 64.71.128.83" # setup the ipv4
    > > >> endpoints of the tunnel
    > > >> ipv6_enable="YES" # Set to YES to set up for IPv6.
    > > >> ipv6_gateway_enable="YES"
    > > >> ipv6_network_interfaces="gif0 fxp0" # List of network
    > interfaces
    > > >> (or "auto").
    > > >> ipv6_defaultrouter="2001:470:1F01:FFFF::120" # Set to
    > IPv6 default
    > > >> gateway
    > > >> ipv6_ifconfig_gif0="2001:470:1F01:FFFF::121
    > 2001:470:1F01:FFFF::120
    > > >> prefixlen 128" #setup ipv6 tunnel
    > > >> ipv6_ifconfig_fxp0="2001:470:1F01:244::1 prefixlen 64" #set fxp0
    > > >> ipv6 address
    > > >> rtadvd_enable="YES" # Set to YES to enable
    > an IPv6 router
    > > >> rtadvd_interfaces="fxp1 fxp0 wi0" # Interfaces
    > rtadvd sends RA
    > > >> packets.
    > > >>
    > > >>
    > > >> Some lines may wrap.
    > > >> Vince
    > > >>
    > > >>> -----Original Message-----
    > > >>> From: owner-freebsd-questions@freebsd.org
    > > >>> [mailto:owner-freebsd-questions@freebsd.org] On Behalf Of Fafa
    > > >>> Diliha Romanova
    > > >>> Sent: 13 March 2005 20:11
    > > >>> To: questions@freebsd.org
    > > >>> Subject: IPv6 in rc.conf only: create gif0 / add route?
    > > >>>
    > > >>> Hey!
    > > >>>
    > > >>> I am trying to add my entire IPv6 setup into rc.conf.
    > > >>> But it seems it won't automagically create gif0, nor
    > will it add
    > > >>> the default route. This is my rc.conf:
    > > >>>
    > > >>> # *** IPv6 configuration
    > > >>> #
    > > >>> ipv6_enable="YES"
    > > >>> ipv6_gateway_enable="YES"
    > > >>> ipv6_network_interfaces="gif0"
    > > >>> ipv6_defaultrouter="fe80::%gif0"
    > > >>> ipv6_ifconfig_gif0="inet 213.183.143.59 213.121.24.85"
    > > >>> ipv6_ifconfig_gif0="inet6 alias 2001:618:400:4572::1
    > prefixlen 64"
    > > >>> ipv6_ifconfig_gif0="inet6 alias 2001:618:400:4572::2
    > prefixlen 64"
    > > >>> ipv6_ifconfig_gif0="inet6 alias 2001:618:400:4572::3
    > prefixlen 64"
    > > >>> ipv6_firewall_enable="YES"
    > > >>> ipv6_firewall_type="open"
    > > >>> rtadvd_enable="YES"
    > > >>> rtadvd_interfaces="gif0"
    > > >>>
    > > >>> Is anybody able to tell what I lack?
    > > >>> I certainly cannot ping6 6bone.net after reboot.
    > > >>>
    > > >>> Thanks!
    > > >>>
    > > >>> All the best,
    > > >>> -- Fafa
    >
    > --
    > ___________________________________________________________
    > Sign-up for Ads Free at Mail.com
    > http://promo.mail.com/adsfreejump.htm
    >
    > _______________________________________________
    > freebsd-questions@freebsd.org mailing list
    > http://lists.freebsd.org/mailman/listinfo/freebsd-questions
    > To unsubscribe, send any mail to
    > "freebsd-questions-unsubscribe@freebsd.org"
    >

    _______________________________________________
    freebsd-questions@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-questions
    To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org"


  • Next message: Thomas Foster: "Re: Slow Performance with OpenBSD's PF on 5.3-RELEASE"

    Relevant Pages

    • Re: [fw-wiz] IPv6 and IPSec
      ... >> Now, as a system administrator, how are you going to track down a virus ... network to network). ... Nice thing is that, with IPv6, you can have ... up an IPv6 tunnel back out that slid right past all the IDS they had. ...
      (Firewall-Wizards)
    • Re: ipv6 confusion
      ... The machine I want to do the tunneling on is behind a NAT'ed firewall ... so it can receive all of your incoming IPv6 traffic. ... Pick the tunnel with the least delay! ... LAN get other IPv6 addresses, all with the same initial 48 bits (I.E. ...
      (freebsd-questions)
    • IPv6 tunnel problem
      ... The tunnel runs fine on 8.2, I can ping6 ipv6.google.com from all interfaces using all IPv6 addresses. ... Route Advertisements are sent, Linux Machines, Mac OS X machiens and FreeBSD 8.2/8.1 machines are all receiveing the advertisements and are able to ping and use the IPv6 network. ...
      (freebsd-current)
    • Configuring ipv6 on cisco 877
      ... I have a cisco 877 that's been working fine (after an RMA on the first ... ipv6 addresses on the other end of the tunnel. ... A debug log shows the packets going ... Of course it's possible the tunnel broker is dead (it worked 2 years ...
      (comp.dcom.sys.cisco)
    • Re: LAN addresses in IPv6
      ... Starting AICCU (Automatic IPv6 Connectivity Configuration Utility) services: ... Tunnel Information for T20165: ... those to Centos boxes. ...
      (Fedora)