[opensuse] Help with IPv6

newer
[opensuse] The grinch packaged VB...

Mark Petersen

23 Dec 2017 23 Dec '17

03:16

I have a computer running Tumbleweed that I'm using as a router. I am using wicked for network management. I have 1 interface (enp5s6) connected to the wan using dhcp. I have 1 interface (enp3s0 bridged br0) connected to the lan with a static ip address. In YaST2 on the routing tab of network settings I have Enable IPv4 & IPv6 Forwarding checked. In Yast2 in the Masquerading section of Firewall, I have Masquerade Networks checked. I have dnsmasq taking care of dns and dhcp. This all works, but I would like to get IPv6 working. I found this guide https://doc.opensuse.org/documentation/leap/reference/html/ book.opensuse.reference/cha.basicnet.html and created the 50-router.conf file. After several reboots of the computer and modem, I'm not getting an IPv6 address assigned to the interface. n1250:~ # ip a 1: lo: mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo valid_lft forever preferred_lft forever inet6 ::1/128 scope host valid_lft forever preferred_lft forever 2: enp3s0: mtu 1500 qdisc pfifo_fast master br0 state UP group default qlen 1000 link/ether 50:e5:49:c6:1a:e0 brd ff:ff:ff:ff:ff:ff 3: enp5s6: mtu 1500 qdisc pfifo_fast state UNKNOWN group default qlen 1000 link/ether 00:50:04:22:fd:33 brd ff:ff:ff:ff:ff:ff inet 174.1xx.xxx.xxx/20 brd 255.255.255.255 scope global enp5s6 valid_lft forever preferred_lft forever inet6 fe80::250:4ff:fe22:fd33/64 scope link valid_lft forever preferred_lft forever 5: br0: mtu 1500 qdisc noqueue state UP group default qlen 1000 link/ether 50:e5:49:c6:1a:e0 brd ff:ff:ff:ff:ff:ff inet 192.168.0.50/24 brd 192.168.0.255 scope global br0 valid_lft forever preferred_lft forever inet6 fe80::52e5:49ff:fec6:1ae0/64 scope link valid_lft forever preferred_lft forever I only have an fe80 address. When I check in the journal my isp is giving my an ipv6 address 1250:~ # journalctl -b |grep wickedd-dhcp6 Dec 22 19:35:36 n1250 wickedd-dhcp6[937]: enp5s6: Request to acquire DHCPv6 lease with UUID e8b23d5a-d5d0-0600-ab03-000007000000 in mode auto Dec 22 19:35:54 n1250 wickedd-dhcp6[937]: enp5s6: Committed DHCPv6 lease with addresses: Dec 22 19:35:54 n1250 wickedd-dhcp6[937]: 2605:a000:xxxx:x:xxxx:b1bd: 1859:c410, pref-lft 604800, valid-lft 604800 Here's my 50-router.conf n1250:~ # cat /etc/sysctl.d/50-router.conf net.ipv4.conf.all.forwarding = 1 net.ipv6.conf.all.forwarding = 1 net.ipv4.conf.all.rp_filter = 0 net.ipv6.conf.enp5s6.accept_ra = 2 net.ipv6.conf.enp5s6.autoconf = 0 Any ideas on how to assign the ipv6 address? Thanks for any assistance. Mark -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org

Show replies by date

James Knott

23 Dec 23 Dec

03:27

On 12/22/2017 10:16 PM, Mark Petersen wrote:

...

5: br0: mtu 1500 qdisc noqueue state UP group default qlen 1000 link/ether 50:e5:49:c6:1a:e0 brd ff:ff:ff:ff:ff:ff inet 192.168.0.50/24 brd 192.168.0.255 scope global br0 valid_lft forever preferred_lft forever inet6 fe80::52e5:49ff:fec6:1ae0/64 scope link valid_lft forever preferred_lft forever I only have an fe80 address.

I assume this is for the LAN side?

...

1250:~ # journalctl -b |grep wickedd-dhcp6 Dec 22 19:35:36 n1250 wickedd-dhcp6[937]: enp5s6: Request to acquire DHCPv6 lease with UUID e8b23d5a-d5d0-0600-ab03-000007000000 in mode auto Dec 22 19:35:54 n1250 wickedd-dhcp6[937]: enp5s6: Committed DHCPv6 lease with addresses: Dec 22 19:35:54 n1250 wickedd-dhcp6[937]: 2605:a000:xxxx:x:xxxx:b1bd: 1859:c410, pref-lft 604800, valid-lft 604800 Here's my 50-router.conf n1250:~ # cat /etc/sysctl.d/50-router.conf net.ipv4.conf.all.forwarding = 1 net.ipv6.conf.all.forwarding = 1

net.ipv4.conf.all.rp_filter = 0

net.ipv6.conf.enp5s6.accept_ra = 2 net.ipv6.conf.enp5s6.autoconf = 0

Any ideas on how to assign the ipv6 address?

Before trying to set up a router, have it configured as just a computer and see if it gets an IPv6 address. It should. Once you have that, you can try to set up a router. However, many ISPs used DHCPv6-PD to assign the LAN prefix and I could never get openSUSE to support it. As a result, I switched to pfSense for my firewall/router and it works fine. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org

Mark Petersen

03:36

On Friday, 22 December 2017 21:27:56 CST James Knott wrote:

...

On 12/22/2017 10:16 PM, Mark Petersen wrote:

...
5: br0: mtu 1500 qdisc noqueue state UP group default qlen 1000

link/ether 50:e5:49:c6:1a:e0 brd ff:ff:ff:ff:ff:ff inet 192.168.0.50/24 brd 192.168.0.255 scope global br0

valid_lft forever preferred_lft forever

inet6 fe80::52e5:49ff:fec6:1ae0/64 scope link

valid_lft forever preferred_lft forever

I only have an fe80 address.

I assume this is for the LAN side?

No, for the WAN interface. If I plug the WAN into my Tumbleweed laptop, I do get an IPV6 address. So I know I can get an address. - Also in the journal, my isp is giving me and address.

...

...
1250:~ # journalctl -b |grep wickedd-dhcp6 Dec 22 19:35:36 n1250 wickedd-dhcp6[937]: enp5s6: Request to acquire DHCPv6 lease with UUID e8b23d5a-d5d0-0600-ab03-000007000000 in mode auto Dec 22 19:35:54 n1250 wickedd-dhcp6[937]: enp5s6: Committed DHCPv6 lease with addresses: Dec 22 19:35:54 n1250 wickedd-dhcp6[937]: 2605:a000:xxxx:x:xxxx:b1bd: 1859:c410, pref-lft 604800, valid-lft 604800 Here's my 50-router.conf n1250:~ # cat /etc/sysctl.d/50-router.conf net.ipv4.conf.all.forwarding = 1 net.ipv6.conf.all.forwarding = 1

net.ipv4.conf.all.rp_filter = 0

net.ipv6.conf.enp5s6.accept_ra = 2 net.ipv6.conf.enp5s6.autoconf = 0

Any ideas on how to assign the ipv6 address?

Before trying to set up a router, have it configured as just a computer and see if it gets an IPv6 address. It should. Once you have that, you can try to set up a router. However, many ISPs used DHCPv6-PD to assign the LAN prefix and I could never get openSUSE to support it. As a result, I switched to pfSense for my firewall/router and it works fine.

-- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org

James Knott

03:42

On 12/22/2017 10:36 PM, Mark Petersen wrote:

...

...
...
5: br0: mtu 1500 qdisc noqueue state UP

...
...
group default qlen 1000

link/ether 50:e5:49:c6:1a:e0 brd ff:ff:ff:ff:ff:ff inet 192.168.0.50/24 brd 192.168.0.255 scope global br0

valid_lft forever preferred_lft forever

inet6 fe80::52e5:49ff:fec6:1ae0/64 scope link

valid_lft forever preferred_lft forever

I only have an fe80 address.

I assume this is for the LAN side? No, for the WAN interface.

192.168.0.50 on the WAN???

...

If I plug the WAN into my Tumbleweed laptop, I do get an IPV6 address. So I know I can get an address. - Also in the journal, my isp is giving me and address.

As I suspected. So, start with a fresh install as a desktop, verify you get an IPv6 address and go from there. However, as I mentioned, I couldn't get DHCPv6-PD to work with openSUSE. You may have the same issue. This was over 1.5 years ago, so perhaps someone else has more current experience. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org

mark.petersen＠markofall.com

04:00

I've got to get use to replying to list. On 2017-12-22 21:42, James Knott wrote:

...

On 12/22/2017 10:36 PM, Mark Petersen wrote:

...
...
...
5: br0: mtu 1500 qdisc noqueue state UP

...
...
group default qlen 1000

link/ether 50:e5:49:c6:1a:e0 brd ff:ff:ff:ff:ff:ff inet 192.168.0.50/24 brd 192.168.0.255 scope global br0

valid_lft forever preferred_lft forever

inet6 fe80::52e5:49ff:fec6:1ae0/64 scope link

valid_lft forever preferred_lft forever

I only have an fe80 address.

I assume this is for the LAN side? No, for the WAN interface.

192.168.0.50 on the WAN???

No, you must have read that wrong. enp5s6 is on the WAN side - currently has a 174.xxx address. enp3s0/br0 is on the LAN side with an address of 192.168.0.50.

...

...
If I plug the WAN into my Tumbleweed laptop, I do get an IPV6 address. So I know I can get an address. - Also in the journal, my isp is giving me and address.

As I suspected. So, start with a fresh install as a desktop, verify you get an IPv6 address and go from there. However, as I mentioned, I couldn't get DHCPv6-PD to work with openSUSE. You may have the same issue. This was over 1.5 years ago, so perhaps someone else has more current experience.

So this may be a wicked problem, or an issue with how opensuse tweaks the kernel? -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org

Andrei Borzenkov

06:01

23.12.2017 06:16, Mark Petersen пишет:

...

I have a computer running Tumbleweed that I'm using as a router. I am using wicked for network management.

I have 1 interface (enp5s6) connected to the wan using dhcp.

I have 1 interface (enp3s0 bridged br0) connected to the lan with a static ip address.

In YaST2 on the routing tab of network settings I have Enable IPv4 & IPv6

Show /etc/sysconfig/network/ifcfg-enp5s6

...

Forwarding checked.

In Yast2 in the Masquerading section of Firewall, I have Masquerade Networks checked.

I have dnsmasq taking care of dns and dhcp.

This all works, but I would like to get IPv6 working. I found this guide https://doc.opensuse.org/documentation/leap/reference/html/ book.opensuse.reference/cha.basicnet.html and created the 50-router.conf file. After several reboots of the computer and modem, I'm not getting an IPv6 address assigned to the interface.

n1250:~ # ip a 1: lo: mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo valid_lft forever preferred_lft forever inet6 ::1/128 scope host valid_lft forever preferred_lft forever 2: enp3s0: mtu 1500 qdisc pfifo_fast master br0 state UP group default qlen 1000 link/ether 50:e5:49:c6:1a:e0 brd ff:ff:ff:ff:ff:ff 3: enp5s6: mtu 1500 qdisc pfifo_fast state UNKNOWN group default qlen 1000 link/ether 00:50:04:22:fd:33 brd ff:ff:ff:ff:ff:ff inet 174.1xx.xxx.xxx/20 brd 255.255.255.255 scope global enp5s6 valid_lft forever preferred_lft forever inet6 fe80::250:4ff:fe22:fd33/64 scope link valid_lft forever preferred_lft forever 5: br0: mtu 1500 qdisc noqueue state UP group default qlen 1000 link/ether 50:e5:49:c6:1a:e0 brd ff:ff:ff:ff:ff:ff inet 192.168.0.50/24 brd 192.168.0.255 scope global br0 valid_lft forever preferred_lft forever inet6 fe80::52e5:49ff:fec6:1ae0/64 scope link valid_lft forever preferred_lft forever I only have an fe80 address.

When I check in the journal my isp is giving my an ipv6 address

1250:~ # journalctl -b |grep wickedd-dhcp6 Dec 22 19:35:36 n1250 wickedd-dhcp6[937]: enp5s6: Request to acquire DHCPv6 lease with UUID e8b23d5a-d5d0-0600-ab03-000007000000 in mode auto Dec 22 19:35:54 n1250 wickedd-dhcp6[937]: enp5s6: Committed DHCPv6 lease with addresses: Dec 22 19:35:54 n1250 wickedd-dhcp6[937]: 2605:a000:xxxx:x:xxxx:b1bd: 1859:c410, pref-lft 604800, valid-lft 604800 Here's my 50-router.conf

How it is related to interface not getting address? Edit /etc/sysconfig/network/config, set WICKED_DEBUG="most", restart network, post or upload journalctl output. START=$(date +%s) systemctl restart network.service journalctl --since=@$START

...

n1250:~ # cat /etc/sysctl.d/50-router.conf net.ipv4.conf.all.forwarding = 1 net.ipv6.conf.all.forwarding = 1

net.ipv4.conf.all.rp_filter = 0

net.ipv6.conf.enp5s6.accept_ra = 2 net.ipv6.conf.enp5s6.autoconf = 0

Any ideas on how to assign the ipv6 address?

Thanks for any assistance.

Mark

-- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org

Mark Petersen

15:33

On Saturday, 23 December 2017 00:01:07 CST Andrei Borzenkov wrote:

...

23.12.2017 06:16, Mark Petersen пишет:

...
I have a computer running Tumbleweed that I'm using as a router. I am using wicked for network management.

I have 1 interface (enp5s6) connected to the wan using dhcp.

I have 1 interface (enp3s0 bridged br0) connected to the lan with a static ip address.

In YaST2 on the routing tab of network settings I have Enable IPv4 & IPv6

Show /etc/sysconfig/network/ifcfg-enp5s6

n1250:~# cat /etc/sysconfig/network/ifcfg-enp5s6 BOOTPROTO='dhcp' BROADCAST='' ETHTOOL_OPTIONS='' IPADDR='' MTU='' NAME='3c905B 100BaseTX [Cyclone]' NETMASK='' NETWORK='' REMOTE_IPADDR='' STARTMODE='auto' PREFIXLEN=''

...

...
Forwarding checked.

In Yast2 in the Masquerading section of Firewall, I have Masquerade Networks checked.

I have dnsmasq taking care of dns and dhcp.

This all works, but I would like to get IPv6 working. I found this guide https://doc.opensuse.org/documentation/leap/reference/html/ book.opensuse.reference/cha.basicnet.html and created the 50-router.conf file. After several reboots of the computer and modem, I'm not getting an IPv6 address assigned to the interface.

n1250:~ # ip a 1: lo: mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000

link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo

valid_lft forever preferred_lft forever

inet6 ::1/128 scope host

valid_lft forever preferred_lft forever

2: enp3s0: mtu 1500 qdisc pfifo_fast master br0 state UP group default qlen 1000

link/ether 50:e5:49:c6:1a:e0 brd ff:ff:ff:ff:ff:ff

3: enp5s6: mtu 1500 qdisc pfifo_fast state UNKNOWN group default qlen 1000

link/ether 00:50:04:22:fd:33 brd ff:ff:ff:ff:ff:ff inet 174.1xx.xxx.xxx/20 brd 255.255.255.255 scope global enp5s6

valid_lft forever preferred_lft forever

inet6 fe80::250:4ff:fe22:fd33/64 scope link

valid_lft forever preferred_lft forever

5: br0: mtu 1500 qdisc noqueue state UP group default qlen 1000

link/ether 50:e5:49:c6:1a:e0 brd ff:ff:ff:ff:ff:ff inet 192.168.0.50/24 brd 192.168.0.255 scope global br0

valid_lft forever preferred_lft forever

inet6 fe80::52e5:49ff:fec6:1ae0/64 scope link

valid_lft forever preferred_lft forever

I only have an fe80 address.

When I check in the journal my isp is giving my an ipv6 address

1250:~ # journalctl -b |grep wickedd-dhcp6 Dec 22 19:35:36 n1250 wickedd-dhcp6[937]: enp5s6: Request to acquire DHCPv6 lease with UUID e8b23d5a-d5d0-0600-ab03-000007000000 in mode auto Dec 22 19:35:54 n1250 wickedd-dhcp6[937]: enp5s6: Committed DHCPv6 lease with addresses: Dec 22 19:35:54 n1250 wickedd-dhcp6[937]: 2605:a000:xxxx:x:xxxx:b1bd: 1859:c410, pref-lft 604800, valid-lft 604800 Here's my 50-router.conf

How it is related to interface not getting address?

From what I read at the kernel.org website https://www.kernel.org/doc/ Documentation/networking/ip-sysctl.txt when you set forwarding to true accepting router advertisements get disabled unless you set accept_ra=2

...

Edit /etc/sysconfig/network/config, set WICKED_DEBUG="most", restart network, post or upload journalctl output.

START=$(date +%s) systemctl restart network.service journalctl --since=@$START

Here is the journalctl output. http://susepaste.org/1342395

...

...
n1250:~ # cat /etc/sysctl.d/50-router.conf net.ipv4.conf.all.forwarding = 1 net.ipv6.conf.all.forwarding = 1

net.ipv4.conf.all.rp_filter = 0

net.ipv6.conf.enp5s6.accept_ra = 2 net.ipv6.conf.enp5s6.autoconf = 0

Any ideas on how to assign the ipv6 address?

Thanks for any assistance.

Mark

-- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org

Andrei Borzenkov

17:11

23.12.2017 18:33, Mark Petersen пишет:

...

Here is the journalctl output. http://susepaste.org/1342395

...

Thanks. Nothing really stands out. It looks fine from wicked side, it really sounds like kernel for some reasons won't assign address. Can you manually assign the same IP to your interface? Does it stick? There are some firewall blocking on this interface. If possible, I'd try to temporary disable it just to verify it does not interfere. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org

2334

Age (days ago)

2334

Last active (days ago)

List overview

Download

7 comments

4 participants

participants (4)

Andrei Borzenkov
James Knott
Mark Petersen
mark.petersen＠markofall.com