Configuration for IPv6 over tunnel

Hiroki Sato hrs at FreeBSD.org
Thu Sep 11 03:22:08 UTC 2014


Dan Langille <dan at langille.org> wrote
  in <14E3A97C-4FCB-4A2C-B22F-3D0849CECA2D at langille.org>:

da> IPv6 Tunnel Endpoints
da> Server IPv4 Address:  209.51.x.y
da> Server IPv6 Address:  2001:470:xx06:9ea::1/64
da> Client IPv4 Address:  96.245.100.201
da> Client IPv6 Address:  2001:470:xx06:9ea::2/64
da>
da> Routed /64:           2001:470:xx07:9ea::/64
da>
da> My /etc/rc.conf includes
da>
da> cloned_interfaces="gif0”
da> ifconfig_gif0="tunnel 96.245.100.201 209.51.x.y mtu 1480”
da> ifconfig_gif0_ipv6="inet6 2001:470:xx06:9ea::2 2001:470:xx06:9ea::1 prefixlen 128"
da> ifconfig_em0_ipv6="inet6 2001:470:xx07:9ea:1::1”
da> ipv6_defaultrouter="2001:470:xx06:9ea::1"
da> ipv6_gateway_enable=“YES"
da> rtadvd_enable=“YES”

 The following line is enough for ifconfig_gif0_ipv6.  A /128
 configuration works but ugly:

  -ifconfig_gif0_ipv6="inet6 2001:470:xx06:9ea::2 2001:470:xx06:9ea::1 prefixlen 128"
  +ifconfig_gif0_ipv6="inet6 2001:470:xx06:9ea::2/64"

 Or, you do not need to configure a client side global address in
 subnet of the inter-router link if you use his endpoint as the
 default router.  Reducing the number of global addresses on a box is
 healthy for packet filtering rule management:

  -ifconfig_gif0_ipv6="inet6 2001:470:xx06:9ea::2 2001:470:xx06:9ea::1 prefixlen 128"
  +ifconfig_gif0_ipv6="inet6 auto_linklocal"
  -ipv6_defaultrouter="2001:470:xx06:9ea::1"
  +ipv6_defaultrouter="-interface gif0"

 And if your box works as a router for subnet
 2001:470:xx07:9ea::/64, please add subnet-router anycast address.
 This is mandatory in RFC:

  +ifconfig_em0_ipv6_alias0="inet6 2001:470:xx07:9ea::/64 anycast"

 I think HE's endpoint is properly configured.  You can ping6 to
 2001:470:xx06:9ea:: from 2001:470:xx07:9ea:1::1.

-- Hiroki
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 181 bytes
Desc: not available
URL: <http://lists.freebsd.org/pipermail/freebsd-net/attachments/20140911/96dfdcc6/attachment.sig>


More information about the freebsd-net mailing list