Hi David,

Excellent.

This is the obligatory IPv6 test site, you should get 10/10 from any HTTP 
browser if it supports IPv6 ...
http://test-ipv6.com

Speed test site that does both IPv4 and IPv6 (requires flash, so use Chrome)
http://speedtest.xfinity.com/

The Status tab does not show any IPv6 info in the top section, not sure if that 
would be helpful.

Looks like you are in business.  Here is a nice overview of IPv6...

IPv6 Basics
http://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/srnd/ipv6/ipv6srnd/basics.pdf

BTW, personally I prefer "ip a" instead of "ifconfig".

Lonnie


On Feb 5, 2016, at 10:35 PM, David Kerr <da...@kerr.net> wrote:

> Okay, got some learning to do.  I've rebooted with IPv6 enabled.  My iMac is 
> now assigned an IPv6 address, interestingly it seems to have been assigned 
> two addresses (on the wired ethernet, I have WiFi turned off).  As for the 
> AstLinux box, status page is not showing my assigned IPv6 address, only my 
> IPv4 address.  Firewall states however shows quite a few v6 addresses in lieu 
> of the v4 address and the system log is showing that the firewall is blocking 
> some v6 traffic.
> 
> Meanwhile at the command line, output from ifconfig shows...
> eth0 assigned two IPv6 addresses, one marked /128 Scope:Global the other /64 
> Scope:Link
> br1 (eth1/eth2 bridged) also assigned two IPv6 addresses, one marked /64 
> Scope:Global the other /64 Scope:Link
> eth1 and eth2 both have one IPv6 address, both /64 Scope:Link
> eth1's IPv6 address is identical to one of the br1 interface's IPv6 address
> lo interface has ::1/128 Scope:Host which I assume is the v6 equivalent to 
> 127.0.0.1
> 
> So I think I'm in business.  Now to start reading up on IPv6.
> 
> Should the web interface status page be updated to display the IPv6 addresses 
> of EXTIF and INTIF ?
> 
> David.
> 
> 
> 
> 
> 
> 
> 
> On Fri, Feb 5, 2016 at 9:26 AM, Lonnie Abelbeck <li...@lonnie.abelbeck.com> 
> wrote:
> David,
> 
> With DHCPv6 and "Prefix Delegation" you leave the "IPv6/nn:" filed blank 
> (actually, it will be ignored).  "IPv6/nn:" is only used for static 
> addressing.
> 
> There is a lot to learn about IPv6, not rocket science, but a lot of details 
> that any self-respecting geek should know. :-)
> 
> Lonnie
> 
> 
> On Feb 5, 2016, at 8:10 AM, David Kerr <da...@kerr.net> wrote:
> 
> > Okay, cool.  Something to play with over the weekend.  For IP Autoconfig on 
> > the internal LANs.... do I leave the field after it blank, or do I have to 
> > enter something akin to IPv4's 192.168.x.y ?  Forgive me is that is a dumb 
> > question, but I am not at all familiar with IPv6 yet.
> >
> > Thanks
> > David
> >
> > On Fri, Feb 5, 2016 at 9:00 AM, Lonnie Abelbeck <li...@lonnie.abelbeck.com> 
> > wrote:
> > Hi David,
> >
> > We recently added DHCPv6 client support (which Comcast requires), so if you 
> > built an image recently you should have it:
> >
> > *If* you wanted to enable IPv6:
> > --
> > Network tab -> IP Version: [ IPv4 & IPv6 ]
> >
> > Network tab -> Connection Type: [ DHCP/DHCPv6 ]
> >
> > Network tab -> Internal Interfaces: -> IPv6 Autoconfig: [ enabled ]  for 
> > any internal LAN that you want IPv6 Enabled using "Prefix Delegation"
> >
> > Network tab -> External DHCPv6 Client Settings: (the defaults should be 
> > fine)
> > --
> >
> > > Which now begs the question whether I should enable it on my AstLinux box 
> > > which is what is ordinarily connected to the cable modem.  If I do enable 
> > > it, what affect does it have.... will systems on my local LAN be issued 
> > > IPv6 addresses as well as IPv4?  Are there any security or firewall 
> > > implications?  Is there any benefit?
> >
> >
> > Do you need IPv6 enabled now ?  most likely no.
> >
> > Will enabling IPv6 have any security or firewall implications ?  most 
> > likely no, a lot of effort has been made to make dual-stack IPv4/IPv6 
> > seamless.  But never say never.
> >
> > Should you enable it ?  your call, but I would think you do, if not only to 
> > learn about IPv6.  Worst case the "Network tab -> IP Version:" master 
> > switch can disable IPv6 if needed.
> >
> > Personally, I have had IPv6 enabled for well over 5 years using Hurricane 
> > Electric's https://www.tunnelbroker.net . Looking forward to getting 
> > "native" IPv6 support from my ISP some day.
> >
> > One thing to remember is IPv6 is 'routed' so you are protected by 
> > iptables's stateful inspection and not by NAT.  You don't port-forward to 
> > internal devices, but rather you selectively route IPv6 to internal devices.
> >
> > If you currently have firewall rules limiting kids "screen time" make sure 
> > they are not IPv4-only rules.  The time-schedule-host-block plugin should 
> > also work with IPv6.  Most all modern devices today will try to support 
> > IPv6 if available.
> >
> > Lonnie
> >
> >
> > On Feb 4, 2016, at 9:13 PM, David Kerr <da...@kerr.net> wrote:
> >
> > > Yesterday I connected my MacBook directly to my cable modem as I was 
> > > testing whether AstLinux impacted speedtest results having just been 
> > > upgraded to Comcast higher speed service -- answer no, or if it does it 
> > > is negligible.
> > >
> > > However I happened to notice in Network Settings that in addition to the 
> > > regular IPv4 address, DHCP had also returned a IPv6 address.  This is the 
> > > first time I have noticed this and I suppose it means that Comcast now 
> > > supports IPv6
> > >
> > > Which now begs the question whether I should enable it on my AstLinux box 
> > > which is what is ordinarily connected to the cable modem.  If I do enable 
> > > it, what affect does it have.... will systems on my local LAN be issued 
> > > IPv6 addresses as well as IPv4?  Are there any security or firewall 
> > > implications?  Is there any benefit?
> > >
> > > Anyone done this and/or have advice?
> > >
> > > Thanks
> > > David


------------------------------------------------------------------------------
Site24x7 APM Insight: Get Deep Visibility into Application Performance
APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month
Monitor end-to-end web transactions and take corrective actions now
Troubleshoot faster and improve end-user experience. Signup Now!
http://pubads.g.doubleclick.net/gampad/clk?id=272487151&iu=/4140
_______________________________________________
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

Reply via email to