ipv6 static routing

classic Classic list List threaded Threaded
12 messages Options
Reply | Threaded
Open this post in threaded view
|

ipv6 static routing

dikshie-2
Hi,
I have an openbsd box with two interface.

# cat /etc/hostname.vio0
inet 202.249.25.29 255.255.255.224

# cat /etc/mygate
202.249.25.1

# cat /etc/hostname.vio1
inet6 2001:d30:101:624::64 64
!route -n add -inet6 default FE80::21B:2AFF:FEE2:A4C0%vio1


my goal:
ipv4 routing should go via interface vio0 with default gateway 202.249.25.1
and ipv6 routing should go via interface vio1 with default gateway
FE80::21B:2AFF:FEE2:A4C0%vio1

while IPv4 is working fine, IPv6 does not work as expected.

here's the IPv6 routing table
Internet6:
Destination                        Gateway
Flags   Refs      Use   Mtu  Prio Iface
::/104                             ::1                            UGRS
      0        0     -     8 lo0
::/96                              ::1                            UGRS
      0        0     -     8 lo0
default                            fe80::21b:2aff:fee2:a4c0%vio1  US
      0       75     -     8 vio1


# ndp -a
Neighbor                             Linklayer Address  Netif Expire    S Flags
2001:d30:101:624::64                 0:16:3e:e3:6:de     vio1 permanent R
fe80::216:3eff:fe5d:cb31%vio0        0:16:3e:5d:cb:31    vio0 permanent R
fe80::216:3eff:fee3:6de%vio1         0:16:3e:e3:6:de     vio1 permanent R
fe80::21b:2aff:fee2:a4c0%vio1        0:1b:2a:e2:a4:c0    vio1 2s        D R
fe80::1%lo0                          (incomplete)         lo0 permanent R


do I miss something here?

thanks!
--
-dikshie-

Reply | Threaded
Open this post in threaded view
|

Re: ipv6 static routing

Marios Makassikis-2
Your /etc/mygate file can look like this :

# cat /etc/mygate
202.249.25.1
FE80::21B:2AFF:FEE2:A4C0%vio1

Make sure you have net.inet6.ip6.forwarding=1 in /etc/sysctl.conf

On 8 December 2013 09:59, dikshie <[hidden email]> wrote:

> Hi,
> I have an openbsd box with two interface.
>
> # cat /etc/hostname.vio0
> inet 202.249.25.29 255.255.255.224
>
> # cat /etc/mygate
> 202.249.25.1
>
> # cat /etc/hostname.vio1
> inet6 2001:d30:101:624::64 64
> !route -n add -inet6 default FE80::21B:2AFF:FEE2:A4C0%vio1
>
>
> my goal:
> ipv4 routing should go via interface vio0 with default gateway 202.249.25.1
> and ipv6 routing should go via interface vio1 with default gateway
> FE80::21B:2AFF:FEE2:A4C0%vio1
>
> while IPv4 is working fine, IPv6 does not work as expected.
>
> here's the IPv6 routing table
> Internet6:
> Destination                        Gateway
> Flags   Refs      Use   Mtu  Prio Iface
> ::/104                             ::1                            UGRS
>       0        0     -     8 lo0
> ::/96                              ::1                            UGRS
>       0        0     -     8 lo0
> default                            fe80::21b:2aff:fee2:a4c0%vio1  US
>       0       75     -     8 vio1
>
>
> # ndp -a
> Neighbor                             Linklayer Address  Netif Expire    S Flags
> 2001:d30:101:624::64                 0:16:3e:e3:6:de     vio1 permanent R
> fe80::216:3eff:fe5d:cb31%vio0        0:16:3e:5d:cb:31    vio0 permanent R
> fe80::216:3eff:fee3:6de%vio1         0:16:3e:e3:6:de     vio1 permanent R
> fe80::21b:2aff:fee2:a4c0%vio1        0:1b:2a:e2:a4:c0    vio1 2s        D R
> fe80::1%lo0                          (incomplete)         lo0 permanent R
>
>
> do I miss something here?
>
> thanks!
> --
> -dikshie-

Reply | Threaded
Open this post in threaded view
|

Re: ipv6 static routing

dikshie-2
On Sun, Dec 8, 2013 at 10:14 PM, Marios Makassikis
<[hidden email]> wrote:
> Your /etc/mygate file can look like this :
>
> # cat /etc/mygate
> 202.249.25.1
> FE80::21B:2AFF:FEE2:A4C0%vio1
> Make sure you have net.inet6.ip6.forwarding=1 in /etc/sysctl.conf

same result with previous one.

# ndp -a
Neighbor                             Linklayer Address  Netif Expire    S Flags
2001:d30:101:624::64                 0:16:3e:65:2b:b     vio1 permanent R
fe80::216:3eff:fe1b:ac9c%vio0        0:16:3e:1b:ac:9c    vio0 permanent R
fe80::216:3eff:fe65:2b0b%vio1        0:16:3e:65:2b:b     vio1 permanent R
fe80::21b:2aff:fee2:a4c0%vio1        0:1b:2a:e2:a4:c0    vio1 23h58m10s S R
fe80::1%lo0                          (incomplete)         lo0 permanent R

# sysctl -a |grep forward
net.inet.ip.forwarding=1
net.inet.ip.mforwarding=0
net.inet6.ip6.forwarding=1
net.inet6.ip6.mforwarding=0

# route -n show -inet6
Routing tables
Internet6:
Destination                        Gateway
Flags   Refs      Use   Mtu  Prio Iface
::/104                             ::1                            UGRS
      0        0     -     8 lo0
::/96                              ::1                            UGRS
      0        0     -     8 lo0
default                            fe80::21b:2aff:fee2:a4c0%vio1  UGS
      0        2     -     8 vio1
::1                                ::1                            UH
     14        0 33144     4 lo0
::127.0.0.0/104                    ::1                            UGRS
      0        0     -     8 lo0
::224.0.0.0/100                    ::1                            UGRS
      0        0     -     8 lo0
::255.0.0.0/104                    ::1                            UGRS
      0        0     -     8 lo0
::ffff:0.0.0.0/96                  ::1                            UGRS
      0        0     -     8 lo0
2001:d30:101:624::/64              link#2                         UC
      0        0     -     4 vio1

# ifconfig vio0
vio0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
        lladdr 00:16:3e:1b:ac:9c
        priority: 0
        groups: egress
        media: Ethernet autoselect
        status: active
        inet 202.249.25.29 netmask 0xffffffe0 broadcast 202.249.25.31
        inet6 fe80::216:3eff:fe1b:ac9c%vio0 prefixlen 64 scopeid 0x1

# ifconfig vio1
vio1: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
        lladdr 00:16:3e:65:2b:0b
        priority: 0
        groups: egress
        media: Ethernet autoselect
        status: active
        inet6 2001:d30:101:624::64 prefixlen 64
        inet6 fe80::216:3eff:fe65:2b0b%vio1 prefixlen 64 scopeid 0x2

# traceroute6 -n www.google.com
traceroute6 to www.google.com (2404:6800:4001:c01::6a) from
2001:d30:101:624::64, 64 hops max, 12 byte packets
 1  * * *
 2  * * *
^C
#

thanks!

Reply | Threaded
Open this post in threaded view
|

Re: ipv6 static routing

Marios Makassikis-2
Is PF enabled ? If so, perhaps your current rules are IPv4 only.
Can you ping6 from this host ?

On 8 December 2013 17:00, dikshie <[hidden email]> wrote:

> On Sun, Dec 8, 2013 at 10:14 PM, Marios Makassikis
> <[hidden email]> wrote:
>> Your /etc/mygate file can look like this :
>>
>> # cat /etc/mygate
>> 202.249.25.1
>> FE80::21B:2AFF:FEE2:A4C0%vio1
>> Make sure you have net.inet6.ip6.forwarding=1 in /etc/sysctl.conf
>
> same result with previous one.
>
> # ndp -a
> Neighbor                             Linklayer Address  Netif Expire    S Flags
> 2001:d30:101:624::64                 0:16:3e:65:2b:b     vio1 permanent R
> fe80::216:3eff:fe1b:ac9c%vio0        0:16:3e:1b:ac:9c    vio0 permanent R
> fe80::216:3eff:fe65:2b0b%vio1        0:16:3e:65:2b:b     vio1 permanent R
> fe80::21b:2aff:fee2:a4c0%vio1        0:1b:2a:e2:a4:c0    vio1 23h58m10s S R
> fe80::1%lo0                          (incomplete)         lo0 permanent R
>
> # sysctl -a |grep forward
> net.inet.ip.forwarding=1
> net.inet.ip.mforwarding=0
> net.inet6.ip6.forwarding=1
> net.inet6.ip6.mforwarding=0
>
> # route -n show -inet6
> Routing tables
> Internet6:
> Destination                        Gateway
> Flags   Refs      Use   Mtu  Prio Iface
> ::/104                             ::1                            UGRS
>       0        0     -     8 lo0
> ::/96                              ::1                            UGRS
>       0        0     -     8 lo0
> default                            fe80::21b:2aff:fee2:a4c0%vio1  UGS
>       0        2     -     8 vio1
> ::1                                ::1                            UH
>      14        0 33144     4 lo0
> ::127.0.0.0/104                    ::1                            UGRS
>       0        0     -     8 lo0
> ::224.0.0.0/100                    ::1                            UGRS
>       0        0     -     8 lo0
> ::255.0.0.0/104                    ::1                            UGRS
>       0        0     -     8 lo0
> ::ffff:0.0.0.0/96                  ::1                            UGRS
>       0        0     -     8 lo0
> 2001:d30:101:624::/64              link#2                         UC
>       0        0     -     4 vio1
>
> # ifconfig vio0
> vio0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
>         lladdr 00:16:3e:1b:ac:9c
>         priority: 0
>         groups: egress
>         media: Ethernet autoselect
>         status: active
>         inet 202.249.25.29 netmask 0xffffffe0 broadcast 202.249.25.31
>         inet6 fe80::216:3eff:fe1b:ac9c%vio0 prefixlen 64 scopeid 0x1
>
> # ifconfig vio1
> vio1: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
>         lladdr 00:16:3e:65:2b:0b
>         priority: 0
>         groups: egress
>         media: Ethernet autoselect
>         status: active
>         inet6 2001:d30:101:624::64 prefixlen 64
>         inet6 fe80::216:3eff:fe65:2b0b%vio1 prefixlen 64 scopeid 0x2
>
> # traceroute6 -n www.google.com
> traceroute6 to www.google.com (2404:6800:4001:c01::6a) from
> 2001:d30:101:624::64, 64 hops max, 12 byte packets
>  1  * * *
>  2  * * *
> ^C
> #
>
> thanks!

Reply | Threaded
Open this post in threaded view
|

Re: ipv6 static routing

dikshie-2
On Mon, Dec 9, 2013 at 1:38 AM, Marios Makassikis <[hidden email]> wrote:
> Is PF enabled ? If so, perhaps your current rules are IPv4 only.
> Can you ping6 from this host ?

pf is disable.


# ndp -a
Neighbor                             Linklayer Address  Netif Expire    S Flags
2001:d30:101:624::64                 0:16:3e:65:2b:b     vio1 permanent R
fe80::216:3eff:fe1b:ac9c%vio0        0:16:3e:1b:ac:9c    vio0 permanent R
fe80::216:3eff:fe65:2b0b%vio1        0:16:3e:65:2b:b     vio1 permanent R
fe80::21b:2aff:fee2:a4c0%vio1        (incomplete)        vio1 expired   N
fe80::1%lo0                          (incomplete)         lo0 permanent R
#


# route -n show -inet6 |grep vio1
default                            fe80::21b:2aff:fee2:a4c0%vio1  UGS
      0        0     -     8 vio1
2001:d30:101:624::/64              link#2                         UC
      1        0     -     4 vio1
2001:d30:101:624::1                00:1b:2a:e2:a4:c0              UHLc
      0        4     -     4 vio1
fe80::%vio1/64                     link#2                         UC
      1        0     -     4 vio1
fe80::216:3eff:fe65:2b0b%vio1      00:16:3e:65:2b:0b              UHL
      0        0     -     4 lo0
fe80::21b:2aff:fee2:a4c0%vio1      00:1b:2a:e2:a4:c0              UHLc
      1        9     -     4 vio1
ff01::%vio1/32                     link#2                         UC
      0        0     -     4 vio1
ff02::%vio1/32                     link#2                         UC
      1        0     -     4 vio1
ff02::1:ffe2:a4c0%vio1             link#2                         UHLc
      0        0     -     4 vio1

ping6 to gateway's link local is fine.
# ping6 fe80::21b:2aff:fee2:a4c0%vio1
PING6(56=40+8+8 bytes) fe80::216:3eff:fe65:2b0b%vio1 -->
fe80::21b:2aff:fee2:a4c0%vio1
16 bytes from fe80::21b:2aff:fee2:a4c0%vio1, icmp_seq=0 hlim=64 time=1.811 ms
16 bytes from fe80::21b:2aff:fee2:a4c0%vio1, icmp_seq=1 hlim=64 time=0.912 ms
16 bytes from fe80::21b:2aff:fee2:a4c0%vio1, icmp_seq=2 hlim=64 time=0.948 ms
16 bytes from fe80::21b:2aff:fee2:a4c0%vio1, icmp_seq=3 hlim=64 time=0.883 ms
16 bytes from fe80::21b:2aff:fee2:a4c0%vio1, icmp_seq=4 hlim=64 time=0.938 ms
^C
--- fe80::21b:2aff:fee2:a4c0%vio1 ping6 statistics ---
5 packets transmitted, 5 packets received, 0.0% packet loss
round-trip min/avg/max/std-dev = 0.883/1.098/1.811/0.357 ms

# ping6 2001:D30:101:624::1
PING6(56=40+8+8 bytes) 2001:d30:101:624::64 --> 2001:d30:101:624::1
^C
--- 2001:D30:101:624::1 ping6 statistics ---
4 packets transmitted, 0 packets received, 100.0% packet loss

Reply | Threaded
Open this post in threaded view
|

Re: ipv6 static routing

Marios Makassikis-2
On 8 December 2013 17:54, dikshie <[hidden email]> wrote:

> On Mon, Dec 9, 2013 at 1:38 AM, Marios Makassikis <[hidden email]> wrote:
>> Is PF enabled ? If so, perhaps your current rules are IPv4 only.
>> Can you ping6 from this host ?
>
> pf is disable.
>
>
> # ndp -a
> Neighbor                             Linklayer Address  Netif Expire    S Flags
> 2001:d30:101:624::64                 0:16:3e:65:2b:b     vio1 permanent R
> fe80::216:3eff:fe1b:ac9c%vio0        0:16:3e:1b:ac:9c    vio0 permanent R
> fe80::216:3eff:fe65:2b0b%vio1        0:16:3e:65:2b:b     vio1 permanent R
> fe80::21b:2aff:fee2:a4c0%vio1        (incomplete)        vio1 expired   N
> fe80::1%lo0                          (incomplete)         lo0 permanent R
> #
>
>
> # route -n show -inet6 |grep vio1
> default                            fe80::21b:2aff:fee2:a4c0%vio1  UGS
>       0        0     -     8 vio1
> 2001:d30:101:624::/64              link#2                         UC
>       1        0     -     4 vio1
> 2001:d30:101:624::1                00:1b:2a:e2:a4:c0              UHLc
>       0        4     -     4 vio1
> fe80::%vio1/64                     link#2                         UC
>       1        0     -     4 vio1
> fe80::216:3eff:fe65:2b0b%vio1      00:16:3e:65:2b:0b              UHL
>       0        0     -     4 lo0
> fe80::21b:2aff:fee2:a4c0%vio1      00:1b:2a:e2:a4:c0              UHLc
>       1        9     -     4 vio1
> ff01::%vio1/32                     link#2                         UC
>       0        0     -     4 vio1
> ff02::%vio1/32                     link#2                         UC
>       1        0     -     4 vio1
> ff02::1:ffe2:a4c0%vio1             link#2                         UHLc
>       0        0     -     4 vio1
>
> ping6 to gateway's link local is fine.
> # ping6 fe80::21b:2aff:fee2:a4c0%vio1
> PING6(56=40+8+8 bytes) fe80::216:3eff:fe65:2b0b%vio1 -->
> fe80::21b:2aff:fee2:a4c0%vio1
> 16 bytes from fe80::21b:2aff:fee2:a4c0%vio1, icmp_seq=0 hlim=64 time=1.811 ms
> 16 bytes from fe80::21b:2aff:fee2:a4c0%vio1, icmp_seq=1 hlim=64 time=0.912 ms
> 16 bytes from fe80::21b:2aff:fee2:a4c0%vio1, icmp_seq=2 hlim=64 time=0.948 ms
> 16 bytes from fe80::21b:2aff:fee2:a4c0%vio1, icmp_seq=3 hlim=64 time=0.883 ms
> 16 bytes from fe80::21b:2aff:fee2:a4c0%vio1, icmp_seq=4 hlim=64 time=0.938 ms
> ^C
> --- fe80::21b:2aff:fee2:a4c0%vio1 ping6 statistics ---
> 5 packets transmitted, 5 packets received, 0.0% packet loss
> round-trip min/avg/max/std-dev = 0.883/1.098/1.811/0.357 ms
>
> # ping6 2001:D30:101:624::1
> PING6(56=40+8+8 bytes) 2001:d30:101:624::64 --> 2001:d30:101:624::1
> ^C
> --- 2001:D30:101:624::1 ping6 statistics ---
> 4 packets transmitted, 0 packets received, 100.0% packet loss

^^^
You can ping6 the gateway, but not a global IPv6 address. It looks
like you have IPv6
connectivity problem, and not routing/forwarding (i.e.: your gateway
or some other router
further upstream is misconfigured).

Reply | Threaded
Open this post in threaded view
|

Re: ipv6 static routing

Claudio Jeker
In reply to this post by dikshie-2
On Mon, Dec 09, 2013 at 01:54:56AM +0900, dikshie wrote:

> On Mon, Dec 9, 2013 at 1:38 AM, Marios Makassikis <[hidden email]> wrote:
> > Is PF enabled ? If so, perhaps your current rules are IPv4 only.
> > Can you ping6 from this host ?
>
> pf is disable.
>
>
> # ndp -a
> Neighbor                             Linklayer Address  Netif Expire    S Flags
> 2001:d30:101:624::64                 0:16:3e:65:2b:b     vio1 permanent R
> fe80::216:3eff:fe1b:ac9c%vio0        0:16:3e:1b:ac:9c    vio0 permanent R
> fe80::216:3eff:fe65:2b0b%vio1        0:16:3e:65:2b:b     vio1 permanent R
> fe80::21b:2aff:fee2:a4c0%vio1        (incomplete)        vio1 expired   N
> fe80::1%lo0                          (incomplete)         lo0 permanent R
> #
>
>
> # route -n show -inet6 |grep vio1
> default                            fe80::21b:2aff:fee2:a4c0%vio1  UGS
>       0        0     -     8 vio1
> 2001:d30:101:624::/64              link#2                         UC
>       1        0     -     4 vio1
> 2001:d30:101:624::1                00:1b:2a:e2:a4:c0              UHLc
>       0        4     -     4 vio1
> fe80::%vio1/64                     link#2                         UC
>       1        0     -     4 vio1
> fe80::216:3eff:fe65:2b0b%vio1      00:16:3e:65:2b:0b              UHL
>       0        0     -     4 lo0
> fe80::21b:2aff:fee2:a4c0%vio1      00:1b:2a:e2:a4:c0              UHLc
>       1        9     -     4 vio1
> ff01::%vio1/32                     link#2                         UC
>       0        0     -     4 vio1
> ff02::%vio1/32                     link#2                         UC
>       1        0     -     4 vio1
> ff02::1:ffe2:a4c0%vio1             link#2                         UHLc
>       0        0     -     4 vio1
>
> ping6 to gateway's link local is fine.
> # ping6 fe80::21b:2aff:fee2:a4c0%vio1
> PING6(56=40+8+8 bytes) fe80::216:3eff:fe65:2b0b%vio1 -->
> fe80::21b:2aff:fee2:a4c0%vio1
> 16 bytes from fe80::21b:2aff:fee2:a4c0%vio1, icmp_seq=0 hlim=64 time=1.811 ms
> 16 bytes from fe80::21b:2aff:fee2:a4c0%vio1, icmp_seq=1 hlim=64 time=0.912 ms
> 16 bytes from fe80::21b:2aff:fee2:a4c0%vio1, icmp_seq=2 hlim=64 time=0.948 ms
> 16 bytes from fe80::21b:2aff:fee2:a4c0%vio1, icmp_seq=3 hlim=64 time=0.883 ms
> 16 bytes from fe80::21b:2aff:fee2:a4c0%vio1, icmp_seq=4 hlim=64 time=0.938 ms
> ^C
> --- fe80::21b:2aff:fee2:a4c0%vio1 ping6 statistics ---
> 5 packets transmitted, 5 packets received, 0.0% packet loss
> round-trip min/avg/max/std-dev = 0.883/1.098/1.811/0.357 ms
>
> # ping6 2001:D30:101:624::1
> PING6(56=40+8+8 bytes) 2001:d30:101:624::64 --> 2001:d30:101:624::1
> ^C
> --- 2001:D30:101:624::1 ping6 statistics ---
> 4 packets transmitted, 0 packets received, 100.0% packet loss

Check with tcpdump if the packets go out and to the right place.
Maybe try to figure out if they arrive at the destination to figure out
where they get lost.

--
:wq Claudio

Reply | Threaded
Open this post in threaded view
|

Re: ipv6 static routing

dikshie-2
In reply to this post by Marios Makassikis-2
On Mon, Dec 9, 2013 at 2:01 AM, Marios Makassikis <[hidden email]> wrote:
> You can ping6 the gateway, but not a global IPv6 address. It looks
> like you have IPv6
> connectivity problem, and not routing/forwarding (i.e.: your gateway
> or some other router
> further upstream is misconfigured).

i checked several times on switch and router. everything looks fine.
i used linux before and everything works well :D

----------------
# ip route
202.249.25.208/28 dev eth0  proto kernel  scope link  src 202.249.25.209
202.249.25.0/27 dev eth0  proto kernel  scope link  src 202.249.25.29
169.254.0.0/16 dev eth0  scope link
default via 202.249.25.1 dev eth0

# ip -6 route
2001:d30:101:624::/64 dev eth1  metric 256  expires 21305003sec mtu
1500 advmss 1440 hoplimit 4294967295
fe80::/64 dev eth0  metric 256  expires 21304998sec mtu 1500 advmss
1440 hoplimit 4294967295
fe80::/64 dev eth1  metric 256  expires 21305003sec mtu 1500 advmss
1440 hoplimit 4294967295
default via fe80::21b:2aff:fee2:a4c0 dev eth1  metric 1  expires
21305003sec mtu 1500 advmss 1440 hoplimit 4294967295

# ping6 fe80::21b:2aff:fee2:a4c0%eth1
PING fe80::21b:2aff:fee2:a4c0%eth1(fe80::21b:2aff:fee2:a4c0) 56 data bytes
64 bytes from fe80::21b:2aff:fee2:a4c0: icmp_seq=1 ttl=64 time=2.12 ms
64 bytes from fe80::21b:2aff:fee2:a4c0: icmp_seq=2 ttl=64 time=0.877 ms
--- fe80::21b:2aff:fee2:a4c0%eth1 ping statistics ---
2 packets transmitted, 2 received, 0% packet loss, time 1000ms
rtt min/avg/max/mdev = 0.877/1.503/2.129/0.626 ms

# ping6 2001:d30:101:624::1
PING 2001:d30:101:624::1(2001:d30:101:624::1) 56 data bytes
64 bytes from 2001:d30:101:624::1: icmp_seq=1 ttl=64 time=2.79 ms
64 bytes from 2001:d30:101:624::1: icmp_seq=2 ttl=64 time=0.920 ms
--- 2001:d30:101:624::1 ping statistics ---
2 packets transmitted, 2 received, 0% packet loss, time 1000ms
rtt min/avg/max/mdev = 0.920/1.857/2.795/0.938 ms
------------------

--
-dikshie-

Reply | Threaded
Open this post in threaded view
|

Re: ipv6 static routing

dikshie-2
In reply to this post by Claudio Jeker
On Mon, Dec 9, 2013 at 7:00 AM, Claudio Jeker <[hidden email]> wrote:
> Check with tcpdump if the packets go out and to the right place.
> Maybe try to figure out if they arrive at the destination to figure out
> where they get lost.

sure, i'll check with tcpdump after working/business hour.

-dikshie-

Reply | Threaded
Open this post in threaded view
|

Re: ipv6 static routing

Giancarlo Razzolini-3
Em 08-12-2013 23:50, dikshie escreveu:
> sure, i'll check with tcpdump after working/business hour. -dikshie-
You could enforce v4 traffic going through the v4 gateway and v6 traffic
going through the v6 gateway, using pf and route-to. This way you can
assure that the right protocol is going through the right interface. Do
not forget that traffic coming out of the firewall itself is one thing
and traffic passing through it is another thing completely different.
You have to enforce both.

Cheers,

--
Giancarlo Razzolini
GPG: 4096R/77B981BC

Reply | Threaded
Open this post in threaded view
|

Re: ipv6 static routing

Todd T. Fries-2
In reply to this post by dikshie-2
Penned by dikshie on 20131208 19:50.21, we have:
| On Mon, Dec 9, 2013 at 7:00 AM, Claudio Jeker <[hidden email]> wrote:
| > Check with tcpdump if the packets go out and to the right place.
| > Maybe try to figure out if they arrive at the destination to figure out
| > where they get lost.
|
| sure, i'll check with tcpdump after working/business hour.
|
| -dikshie-

I've installed a current snapshot on a kvm system and noted that with vio0 I have
the same problem you experience unless I manually program the global IPv6 addresses
via ndp.

If I change to em0 (e1000 in kvm speak) it works like a champ.

Perhaps you could try this change; I also would not be surprised if some multicast
bits that recently changed got twiddled for vio(4) as well.

Thanks,
--
Todd Fries .. [hidden email]

 ____________________________________________
|                                            \  1.636.410.0632 (voice)
| Free Daemon Consulting, LLC                \  1.405.227.9094 (voice)
| http://FreeDaemonConsulting.com            \  1.866.792.3418 (FAX)
| PO Box 16169, Oklahoma City, OK 73113-2169 \  sip:[hidden email]
| "..in support of free software solutions." \  sip:[hidden email]
 \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
                                                 
              37E7 D3EB 74D0 8D66 A68D  B866 0326 204E 3F42 004A
                        http://todd.fries.net/pgp.txt

Reply | Threaded
Open this post in threaded view
|

Re: ipv6 static routing

dikshie-2
Hi,

On Thu, Dec 12, 2013 at 8:43 AM, Todd T. Fries <[hidden email]> wrote:
> I've installed a current snapshot on a kvm system and noted that with vio0 I have
> the same problem you experience unless I manually program the global IPv6 addresses
> via ndp.
> If I change to em0 (e1000 in kvm speak) it works like a champ.
> Perhaps you could try this change; I also would not be surprised if some multicast
> bits that recently changed got twiddled for vio(4) as well.

Thank you for the information.
I'll change from vio to e1000.

-dikshie-