Carlos E. R. wrote:
On 15/08/2019 08.55, Per Jessen wrote:
Carlos E. R. wrote:
Hi,
Well, as suggested, I got an account on Hurricane Electric and I got the tunnel data.
The next step is how to configure it on my router. [snip]
I don't know what to do at this point.
Ignore the router, afair, this will work from any box behind your router. Instead set up a 6in4 tunnel on any other machine (which will afterwards need to run radvd or dhcpv6).
That's IPv4-in-IPv6 :-)
It would be <http://tldp.org/HOWTO/Linux+IPv6-HOWTO/ch09.html>
Sorry, cut&pasted too fast ....
It's been too long since I played with this, I don't remember the exact details, but I think you'll end up with a device 'tunl0', and maybe something like 'he0' for the actual tunnel. Google will no doubt help with the rest.
If it can be set on any machine, then yes, there is a way.
HE posts also an example configuration, but not knowing what it does I thought it had to be done on the router. If it can be done inside, then I can do it, I suppose.
modprobe ipv6 ip tunnel add he-ipv6 mode sit remote 216.A.B.C local 88.Z.X.Y ttl 255 ip link set he-ipv6 up ip addr add 2001:M:N:O::2/64 dev he-ipv6 ip route add ::/0 dev he-ipv6 ip -f inet6 addr
Apart from the last command, that looks about right. That'll give you a device called 'he-ipv6' with your ipv6 prefix and a default ipv6 route via that.
But there is a lot of info missing. How to make that machine a router,
a) enable IPv6 forwarding - you can do that in YaST or with sysctl. b) start radvd with the prefix given by HE. Add to /etc/radvd.conf, to give every client a default ipv6 route. route ::/0 { };
for instance, what to do on the firewalls, what to do on the LAN machines, etc.
Well, there has to be something for you to do too :-) In short - on the tunnel box, optionally configure ipv6 firewall. On the IPv4 firewall, I guess you might need to permit protocol 41. On the LAN machines - nothing. They will auto-configure. -- Per Jessen, Zürich (19.1°C) http://www.dns24.ch/ - free dynamic DNS, made in Switzerland. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org