Re: [gentoo-user] Re: To all IPv6-slackers among the Gentoo community

2019-12-05 Thread Ralph Seichter
* Ian Zimmerman:

> [OpenWrt] needs one crucial bit of configuration that's kind of hidden
> (can't be done via the GUI), to let the router advertisements through.

Glad to hear that you got things working. You have probably already
filed a GUI enhancement request. ;-)

-Ralph



[gentoo-user] Re: To all IPv6-slackers among the Gentoo community

2019-12-05 Thread Ian Zimmerman
On 2019-11-29 00:01, Ralph Seichter wrote:

> > The first reason [...] was that my router does _not_ assign fe80::1 to
> > itself, but rather some other arbitrary address in the fe80 prefix
> 
> I found an article[1] that I first read years ago. "One method to make
> things easier is to manually assign the link-local address to the
> upstream router’s interfaces." That's one of the firmware-dependent
> things, it may happen automatically. I know that my favourite data
> center has its routers set up this way as well. One does not have to use
> this method, of course.

> > I did enable the router advertisement feature, and I checked that the
> > daemon is running on the router. But I can see no output related to
> > that when I run tcpdump on the desktop system.
> 
> Anything that might be interfering with ICMPv6 ? That would prevent all
> NDP, including router advertisement.

> I only use a static IPv6 address for hosted machines, because I need DNS
>  records. The individual subnets are statically assigned by the data
> center to each machine.
> 
> At home, I don't configure clients with static IPv6, because it is not
> necessary for me. In fact, I'm happy to have the lowest 64 address bits
> scrambled (IPv6 Privacy Extensions) to make traffic analysis more
> difficult. All local clients can use NDP to locate each other anyway.
> 
> > https://openwrt.org/docs/guide-user/network/ipv6/start
> 
> Sadly I have no practical experience with OpenWrt. Hopefully somebody
> else here can help with that.

I did make it work with DHCP6.  The problems are all with my OpenWrt
router.  It is free software and I love it, but it has its
bu^H^Hquirks.  In particular it doesn't seem to be possible to force a
particular link-local address on the internal interface.  Apart from
that, it needs one crucial bit of configuration that's kind of hidden
(can't be done via the GUI), to let the router advertisements through.

-- 
Please don't Cc: me privately on mailing lists and Usenet,
if you also post the followup to the list or newsgroup.
To reply privately _only_ on Usenet and on broken lists
which rewrite From, fetch the TXT record for no-use.mooo.com.



Re: [gentoo-user] Re: To all IPv6-slackers among the Gentoo community

2019-11-29 Thread Dale
Ralph Seichter wrote:
> * Mick:
>
>> I have net-libs/libndp installed, but no ndp command ... where is it
>> hiding?
> Oh, I forgot that "ndp" is BSD Unix specific. On Gentoo, you can use
> sys-apps/iproute2 tools, e.g. "ip -6 neigh" to inspect the kernel's
> neighbour table.
>
>> PS. Thanks for your posts and links, at some point I will be replacing
>> my aging router with a dual stack device and all this is good
>> education for me.
> My pleasure. I am actually surprised that this thread gained some
> traction, instead of being wholly dismissed as networking nerdiness.
> Go Gentoo users! ;-)
>
> -Ralph
>
>


+1  I certainly learned a lot plus found a nice router out of it as well. 

Dale

:-)  :-) 



Re: [gentoo-user] Re: To all IPv6-slackers among the Gentoo community

2019-11-29 Thread Ralph Seichter
* Ralph Seichter:

> I just randomly picked [1] as a generator service

[1] being https://cd34.com/rfc4193/ . I need more sleep, I really do.

-Ralph



Re: [gentoo-user] Re: To all IPv6-slackers among the Gentoo community

2019-11-29 Thread Ralph Seichter
* Mick:

> I have net-libs/libndp installed, but no ndp command ... where is it
> hiding?

Oh, I forgot that "ndp" is BSD Unix specific. On Gentoo, you can use
sys-apps/iproute2 tools, e.g. "ip -6 neigh" to inspect the kernel's
neighbour table.

> PS. Thanks for your posts and links, at some point I will be replacing
> my aging router with a dual stack device and all this is good
> education for me.

My pleasure. I am actually surprised that this thread gained some
traction, instead of being wholly dismissed as networking nerdiness.
Go Gentoo users! ;-)

-Ralph



Re: [gentoo-user] Re: To all IPv6-slackers among the Gentoo community

2019-11-29 Thread Ralph Seichter
* Walter Dnes:

> Assume the following [...]

Pretty close. If you *really* want to set things up manually, I suggest
using ULA as per https://tools.ietf.org/html/rfc4193 . I just randomly
picked [1] as a generator service, entered a fictuous MAC address (you
should use one of your own), and clicked "Go". The outcome was:

  Your Private IPv6 network is:
  fdb3:fa69:3947::/48
  giving you access to the to the following /64s:
  fdb3:fa69:3947:0::/64 through fdb3:fa69:3947:::/64

The private /48 network contains 2^16 /64 subnets, so there is enough to
go round for LAN, DMZ, guest network, etc. As an example, let's pick
fdb3:fa69:3947:0::/64 as our local network.

> machine1 has a script in /etc/local.d/ that executes...
> ipv6 address fe80::1 link-local

I prefer this alternative:

  # /etc/conf.d/net for machine #5
  config_eth0="192.168.123.5/24
  fdb3:fa69:3947::5/64"
  # The previous line is the shortened representation of
  # fdb3:fa69:3947:0:0:0:0:5/64

You can now indeed use a shared hosts file as before:

  # /etc/hosts
  192.168.123.5  machine5-ipv4
  fdb3:fa69:3947::5  machine5

I cannot test this right now, but if I did not miss any typos, this
should get you going.

-Ralph



Re: [gentoo-user] Re: To all IPv6-slackers among the Gentoo community

2019-11-29 Thread Mick
On Friday, 29 November 2019 01:08:39 GMT Ralph Seichter wrote:
> * Walter Dnes:
> > I prefer man pages to rambling Youtube videos.
> 
> As you wish: man ndp  ;-)

Hmm ...

 $ man ndp
No manual entry for ndp

 $ which ndp
which: no ndp in (/usr/lib/llvm/8/bin:/usr/local/sbin:/usr/local/bin:/usr/
sbin:/usr/bin:/sbin:/bin:/opt/bin)

 # which ndp
which: no ndp in (/usr/lib/llvm/8/bin:/usr/local/sbin:/usr/local/bin:/usr/
sbin:/usr/bin:/sbin:/bin:/opt/bin)


I have net-libs/libndp installed, but no ndp command ... where is it hiding?


PS. Thanks for your posts and links, at some point I will be replacing my 
aging router with a dual stack device and all this is good education for me.

-- 
Regards,

Mick

signature.asc
Description: This is a digitally signed message part.


Re: [gentoo-user] Re: To all IPv6-slackers among the Gentoo community

2019-11-28 Thread Walter Dnes
On Fri, Nov 29, 2019 at 02:08:39AM +0100, Ralph Seichter wrote

> The ndp dump on 'argon' shows expired entries, entries that are still
> valid for the listed time, and permanent entries. As you can see, I can
> use 'ferrum.local' to identify a particular machine and login. There is
> also 'silver', which happens to be my smartphone. There is even an entry
> 'fd67::::10' which represents a static IPv6 address I used for
> testing earlier, with fd67:: being my obfuscated ULA prefix.
> 
> IPv6 clients are chatting link-local without user intervention, to say
> "I'm here" and to ask "Who is near me?". Routers actively advertise
> their services. After a little while, clients start to get an idea of
> their surroundings without an admin holding their hand. IPv6 is pretty
> nifty in that regard.

  Looking at 
https://techhub.hpe.com/eginfolib/networking/docs/switches/K-KA-KB/16-01/5200-0133_ipv6_config_k/content/ch01s10.html

  Assume the following...
machine1 has a script in /etc/local.d/ that executes...
ipv6 address fe80::1 link-local

machine2 has a script in /etc/local.d/ that executes...
ipv6 address fe80::2 link-local

machine3 has a script in /etc/local.d/ that executes...
ipv6 address fe80::3 link-local

etc, etc.  Can I enter...

#
fe80::1machine1
fe80::2machine2
fe80::3machine3
#

...in /etc/hosts and will it properly match them to the correponding
machine?  Forget about global addresses for the time being.  I simply
want to be able to scp and ssh between local machines first.

-- 
Walter Dnes 
I don't run "desktop environments"; I run useful applications



Re: [gentoo-user] Re: To all IPv6-slackers among the Gentoo community

2019-11-28 Thread Ralph Seichter
* Walter Dnes:

> Look Ma, we have a form of IPV6 NAT (Ducks back into foxhole before
> incoming artillery barrage from IPV6 purists).

Hehe. ;-) That's both provocative and wrong. An IPv6 router can, at a
glance, decide if a packet needs to be handled locally or pushed out. No
need for mangling/rewriting as IPv4 NAT would require. It does not
matter if the packet arrives at the router via a link-local address,
because it contains the sender's global scope address and replies can
therefore be sent back with another single glance.

-Ralph



Re: [gentoo-user] Re: To all IPv6-slackers among the Gentoo community

2019-11-28 Thread Ralph Seichter
* Walter Dnes:

> I prefer man pages to rambling Youtube videos.

As you wish: man ndp  ;-)

> given that SLAAC and DHCPV6 assign random addresses how do I
> accomplish the equivalant of "scp  i660:."

The world according to 'argon', a MacBook Pro I am using right now:

argon $ ndp -a
NeighborLinklayer Address  Netif ExpireSt Flgs Prbs
fd67::::10  (incomplete) en0 expired   N
fd67:::0:86a:e0ce:2999:7c4 4c:57:ca:dc:8d:5e en0 23h59m20s S
fd67:::0:882:c472:d94f:66e3 20:c9:d0:45:ee:af en0 permanent R
fd67:::0:a96:d7ff:fe8b:69dd 8:96:d7:8b:69:dd en0 23h53m10s S  R
fd67:::0:553c:9719:22e0:af74 4c:57:ca:dc:8d:5e en0 23h52m30s S
fd67:::0:9d4c:8017:ae:c5af 20:c9:d0:45:ee:af en0 permanent R
argon.local (incomplete) lo0 permanent R
fe80::1%en0 (incomplete) en0 expired   N
fe80::a96:d7ff:fe8b:69dd%en08:96:d7:8b:69:dd en0 36s   R  R
silver.local4c:57:ca:dc:8d:5een0 23h59m10s S
argon.local 20:c9:d0:45:ee:afen0 permanent R
ferrum.local3c:7:54:7d:50:c1 en0 23h28m48s S
argon.local (incomplete)   utun0 permanent R
argon.local (incomplete)   utun1 permanent R
[... more addresses removed ...]

argon $ ssh ferrum.local
Last login: Fri Nov 29 01:06:17 2019 from 192.168.235.17
ferrum $ who
ralph  ttys000  Nov 29 01:45  (fe80::1444:5bd9:f47c:663c%en0)

The ndp dump on 'argon' shows expired entries, entries that are still
valid for the listed time, and permanent entries. As you can see, I can
use 'ferrum.local' to identify a particular machine and login. There is
also 'silver', which happens to be my smartphone. There is even an entry
'fd67::::10' which represents a static IPv6 address I used for
testing earlier, with fd67:: being my obfuscated ULA prefix.

IPv6 clients are chatting link-local without user intervention, to say
"I'm here" and to ask "Who is near me?". Routers actively advertise
their services. After a little while, clients start to get an idea of
their surroundings without an admin holding their hand. IPv6 is pretty
nifty in that regard.

-Ralph



Re: [gentoo-user] Re: To all IPv6-slackers among the Gentoo community

2019-11-28 Thread Walter Dnes
On Fri, Nov 29, 2019 at 12:01:10AM +0100, Ralph Seichter wrote

> I think that, as long as the clients use link-local routing to connect
> to the router, and the router correctly passes IPv6 traffic in both
> directions, it should work without a global-scope address on the
> router's LAN-facing NIC.

  Lan machines with link-local IPV6 addresses to link-local IPV6 address
on the router, which talks to the world.

  Is that like lan machines with RFC1918 IPV4 addresses to RFC1918 IPV4
address on the router, which talks to the world???

  Look Ma, we have a form of IPV6 NAT (Ducks back into foxhole before
incoming artillery barrage from IPV6 purists).

-- 
Walter Dnes 
I don't run "desktop environments"; I run useful applications



Re: [gentoo-user] Re: To all IPv6-slackers among the Gentoo community

2019-11-28 Thread Walter Dnes
On Thu, Nov 28, 2019 at 06:46:57PM +0100, Ralph Seichter wrote
> * Walter Dnes:
> 
> > How would this be accomplished under IPV6?
> 
> You may find https://youtu.be/A3LFt7CHpgs helpful. It is a video about
> Neighbor Discovery Protocol (NDP), provided by RIPE NCC.

  I prefer man pages to rambling Youtube videos.  I checked it out, but
it doesn't appear to answer my question.  My /etc/hosts contains...

192.168.1.249i3.waltdnes.org   i3
192.168.1.250  i660.waltdnes.org   i660
192.168.1.251  d531.waltdnes.org   d531
192.168.1.2   thimk.waltdnes.org  thimk
192.168.1.3  thimk3.waltdnes.org thimk3

  Neighborhood Discovery Protocol will discover all machines on my local
LAN.  Questions...

* which machine is which?
* given that SLAAC and DHCPV6 assign random addresses how do I
  accomplish the equivalant of "scp  i660:."  I.e. how do I
  *CONSISTENTLY* match hostnames to IP addresses.  And no, I don't want
  to have to "scp  [1234:2345:3456:4567:5678:etc]:."

-- 
Walter Dnes 
I don't run "desktop environments"; I run useful applications



Re: [gentoo-user] Re: To all IPv6-slackers among the Gentoo community

2019-11-28 Thread Ralph Seichter
* Ian Zimmerman:

> The first reason [...] was that my router does _not_ assign fe80::1 to
> itself, but rather some other arbitrary address in the fe80 prefix

I found an article[1] that I first read years ago. "One method to make
things easier is to manually assign the link-local address to the
upstream router’s interfaces." That's one of the firmware-dependent
things, it may happen automatically. I know that my favourite data
center has its routers set up this way as well. One does not have to use
this method, of course.

[1] 
https://blogs.infoblox.com/ipv6-coe/fe80-1-is-a-perfectly-valid-ipv6-default-gateway-address/

> while the router seems to obtain a delegated prefix from upstream, it
> doesn't assign any address from that range to the internal
> interface. The only ipv6 addresses on the internal interface are the
> link-local address and the ULA address.

I think that, as long as the clients use link-local routing to connect
to the router, and the router correctly passes IPv6 traffic in both
directions, it should work without a global-scope address on the
router's LAN-facing NIC.

> I did enable the router advertisement feature, and I checked that the
> daemon is running on the router. But I can see no output related to
> that when I run tcpdump on the desktop system.

Anything that might be interfering with ICMPv6 ? That would prevent all
NDP, including router advertisement.

> so  you _do_ self-assign a static ipv6 address after all. How do
> you know it is the right one?

I only use a static IPv6 address for hosted machines, because I need DNS
 records. The individual subnets are statically assigned by the data
center to each machine.

At home, I don't configure clients with static IPv6, because it is not
necessary for me. In fact, I'm happy to have the lowest 64 address bits
scrambled (IPv6 Privacy Extensions) to make traffic analysis more
difficult. All local clients can use NDP to locate each other anyway.

> https://openwrt.org/docs/guide-user/network/ipv6/start

Sadly I have no practical experience with OpenWrt. Hopefully somebody
else here can help with that.

-Ralph



[gentoo-user] Re: To all IPv6-slackers among the Gentoo community

2019-11-28 Thread Ian Zimmerman
On 2019-11-28 18:41, Ralph Seichter wrote:

> >  What am I missing?
> 
> I can't really tell, based on what you posted. Is there an IPv6 Router
> Advertisment service running, either on your router or another machine
> in your local network?

Thanks for answering; I got a bit further meanwhile.  The first reason my
initial tests (following your advice literally) didn't work was that my
router does _not_ assign fe80::1 to itself, but rather some other
arbitrary address in the fe80 prefix; on close inspection it looks based
on the MAC address just like a host is supposed to do.  When I ping6 or
traceroute6 that specific address, it works.

Secondly, while the router seems to obtain a delegated prefix from
upstream, it doesn't assign any address from that range to the internal
interface.  The only ipv6 addresses on the internal interface are the
link-local address and the ULA address.  Is that normal?

I did enable the router advertisement feature, and I checked that the
daemon is running on the router.  But I can see no output related to
that when I run tcpdump on the desktop system.

> Here is some data from the Gentoo machine I am currently working on. It
> is hosted in a data center and uses a /64 subnet. I obfuscated the IP
> addresses, but I'm sure you get the gist:
> 
> # cat /etc/conf.d/net
> dns_domain_lo="example.com"
> modules="iproute2"
> config_enp0s31f6="99.88.77.50/26
> 2a01:11:22:33::44/64"
> routes_enp0s31f6="default via 99.88.77.1
> default via fe80::1"

... so  you _do_ self-assign a static ipv6 address after all.  How do
you know it is the right one?

> In my home network, my FRITZ!Box router assigns both a ULA and a global
> scope address to each client, without any manual configuration on the
> clients. The optional ULA assignment means that, should my uplink
> connection die, the local clients can still talk to each other.

My router doesn't give me a global address.  Its documentation is at the
url below and I think I have followed it correctly.

https://openwrt.org/docs/guide-user/network/ipv6/start

-- 
Please don't Cc: me privately on mailing lists and Usenet,
if you also post the followup to the list or newsgroup.
To reply privately _only_ on Usenet and on broken lists
which rewrite From, fetch the TXT record for no-use.mooo.com.



Re: [gentoo-user] Re: To all IPv6-slackers among the Gentoo community

2019-11-28 Thread Dale
Grant Edwards wrote:
> On 2019-11-28, Dale  wrote:
>
>> One more question Grant, if you know.  Do you know about the range of
>> the wireless on this router?  You ever tested to see how far say a cell
>> phone or something will hold a signal and work?  I had to move my
>> printer to the kitchen, a far bedroom was to far away.  It would get a
>> signal at times but not often enough.  It's about 60 feet away and
>> really only two thin interior walls between the router and printer.  My
>> cell phone does better for some reason.  I can go outside and be about
>> 100 feet away and it still update the weather info fairly quickly.  I'm
>> just curious if you have tested this and can share some experience with
>> how it works in the real world. 
> The range on the TP-Link seems better than average, but I haven't done
> any real testing.
>
> --
> Grant
>

Given the range of my current router is not real good, maybe it will be
better.  For my printer, it doesn't have to be to fast anyway. 
Generally my cell phone is within 10 feet if I'm updating so it should
do fine within that range.

Thanks for the info.  At least I can figure it will be better. 

Dale

:-)  :-) 



Re: [gentoo-user] Re: To all IPv6-slackers among the Gentoo community

2019-11-28 Thread Ralph Seichter
* Walter Dnes:

> How would this be accomplished under IPV6?

You may find https://youtu.be/A3LFt7CHpgs helpful. It is a video about
Neighbor Discovery Protocol (NDP), provided by RIPE NCC.

-Ralph



Re: [gentoo-user] Re: To all IPv6-slackers among the Gentoo community

2019-11-28 Thread Ralph Seichter
* Ian Zimmerman:

>  What am I missing?

I can't really tell, based on what you posted. Is there an IPv6 Router
Advertisment service running, either on your router or another machine
in your local network?

Here is some data from the Gentoo machine I am currently working on. It
is hosted in a data center and uses a /64 subnet. I obfuscated the IP
addresses, but I'm sure you get the gist:

# cat /etc/conf.d/net
dns_domain_lo="example.com"
modules="iproute2"
config_enp0s31f6="99.88.77.50/26
2a01:11:22:33::44/64"
routes_enp0s31f6="default via 99.88.77.1
default via fe80::1"

# route -6n
Kernel IPv6 routing table
DestinationNext Hop Flag Met Ref Use If
::1/128::   Un   0   110 lo
2a01:11:22:33::44/128  ::   Un   0   100 enp0s31f6
2a01:11:22:33::/64 ::   U256 2 0 enp0s31f6
fe80::4e52:62ff:fe0a:9d75/128  ::   Un   0   3 0 enp0s31f6
fe80::/64  ::   U256 3 0 enp0s31f6
ff00::/8   ::   U256 2 0 enp0s31f6
::/0   fe80::1  UG   3   9 0 enp0s31f6

# ping6 fe80::1
PING fe80::1(fe80::1) 56 data bytes
64 bytes from fe80::1%enp0s31f6: icmp_seq=1 ttl=64 time=2.01 ms
64 bytes from fe80::1%enp0s31f6: icmp_seq=2 ttl=64 time=2.38 ms
64 bytes from fe80::1%enp0s31f6: icmp_seq=3 ttl=64 time=0.763 ms

In my home network, my FRITZ!Box router assigns both a ULA and a global
scope address to each client, without any manual configuration on the
clients. The optional ULA assignment means that, should my uplink
connection die, the local clients can still talk to each other.

-Ralph



[gentoo-user] Re: To all IPv6-slackers among the Gentoo community

2019-11-28 Thread Grant Edwards
On 2019-11-28, Dale  wrote:

> One more question Grant, if you know.  Do you know about the range of
> the wireless on this router?  You ever tested to see how far say a cell
> phone or something will hold a signal and work?  I had to move my
> printer to the kitchen, a far bedroom was to far away.  It would get a
> signal at times but not often enough.  It's about 60 feet away and
> really only two thin interior walls between the router and printer.  My
> cell phone does better for some reason.  I can go outside and be about
> 100 feet away and it still update the weather info fairly quickly.  I'm
> just curious if you have tested this and can share some experience with
> how it works in the real world. 

The range on the TP-Link seems better than average, but I haven't done
any real testing.

--
Grant







Re: [gentoo-user] Re: To all IPv6-slackers among the Gentoo community

2019-11-28 Thread Walter Dnes
On Thu, Nov 28, 2019 at 03:07:43AM +0100, Ralph Seichter wrote

> Personally, I don't think static IPv6 addresses are very useful,
> because machines in a local IPv6 network can easily locate each other
> using link-local addressing, without the need to configure this in
> any way. In the example above, the link-local address fe80::1 means
> "the default IPv6 gateway out of here".

  I've got 4 PCs of various ages at home, and a couple of laptops.  By
using static RFC1918 IPV4 addresses and /etc/hosts entries, I can refer
to the PCs by short easy-to-remember names.  My router/modem serves out
DHCP addresses starting at the bottom of a range, so even the laptop is
effectively on a static IP.  This allows me to easily ssh+scp between
machines.  How would this be accomplished under IPV6?

-- 
Walter Dnes 
I don't run "desktop environments"; I run useful applications



Re: [gentoo-user] Re: To all IPv6-slackers among the Gentoo community

2019-11-27 Thread Dale
Grant Edwards wrote:
> On 2019-11-27, Dale  wrote:
>> Grant Edwards wrote:
>>> The TP-Link Archer C7 runs openwrt flawlessly:
>>>
>>>   
>>> https://www.bestbuy.com/site/tp-link-archer-ac1750-dual-band-wi-fi-5-router-black/5889900.p?skuId=5889900
>>>
>>> A couple months ago when I was shopping, there was also a newer A7
>>> version.  That still requires a bleeding edge version of OpenWRT.
>>> So I opted for the older hardware just to be safe.
>> I was planning to stick with Linksys but I'm liking the one you
>> linked too. By the way, TP-Link has a store on ebay and it's cheaper
>> there.   Anyway, it supports IPv6 according to the manual
> IPv6 support is purely a function of the firmware.  OpenWRT supports
> IPv6 and will do so even if the OEM firmware does not.
>
>> and it has LEDs on the front it seems. Am I seeing LEDs or am I
>> seeing something else? Also, does it have some holes on the bottom
>> that allows wall mounting? I'm trying to find a picture of the
>> bottom but so far, no luck. I've found pics of everything else tho.
> Yes, there are LEDs on the front and wall-mount screw holes on the bottom:
>
>   https://photos.app.goo.gl/V3KL8ZTDPHBUWB726
>
> The C7 and A7 versions are slightly different, so pay attention to
> that.  The C7 is the older, more expensive version that's supported by
> the released, stable version of OpenWRT.  The A7 is newer and requires
> the latest "snapshot" version of OpenWRT.
>
> I can't vouch for the OEM firmware, since I immediately installed
> OpenWRT on mine.
>
> --
> Grant
>
>
>


One more question Grant, if you know.  Do you know about the range of
the wireless on this router?  You ever tested to see how far say a cell
phone or something will hold a signal and work?  I had to move my
printer to the kitchen, a far bedroom was to far away.  It would get a
signal at times but not often enough.  It's about 60 feet away and
really only two thin interior walls between the router and printer.  My
cell phone does better for some reason.  I can go outside and be about
100 feet away and it still update the weather info fairly quickly.  I'm
just curious if you have tested this and can share some experience with
how it works in the real world. 

Thanks much.

Dale

:-)  :-) 



[gentoo-user] Re: To all IPv6-slackers among the Gentoo community

2019-11-27 Thread Ian Zimmerman
On 2019-11-28 04:11, Ralph Seichter wrote:

> > But what about connecting to the outside world? For that, the
> > link-local address doesn't work.
> 
> It does work, actually. fe80::1 is a perfectly valid way to specify the
> default gateway. Remember that NICs have several IPv6 addresses with
> different scopes.

Sorry, I'm still confused :-(  My host has to set the source address
field in outgoing packets to something.  If it's the link local address
the router can't just forward it unmodified, or upstream routers and
hosts won't know where it originally came from.  What am I missing?

wikipedia:

  In a computer network, a link-local address is a network address that
  is valid only for communications within the network segment or the
  broadcast domain that the host is connected to.

As for fe80::1 being good as it is ...

 matica!8 lc$ route -6
Kernel IPv6 routing table
DestinationNext Hop   Flag Met Ref Use If
localhost/128  [::]   Un   0   2 0 lo
fe80::52e5:49ff:fec0:504d/128  [::]   Un   0   3 0 
enp2s0
fe80::/64  [::]   U256 2 0 
enp2s0
ff00::/8   [::]   U256 2 0 
enp2s0
[::]/0 [::]   !n   -1  1 0 lo
 matica!9 lc$ ping -6 fe80::1
PING fe80::1(fe80::1) 56 data bytes
>From fe80::52e5:49ff:fec0:504d%enp2s0: icmp_seq=1 Destination unreachable: 
>Address unreachable
>From fe80::52e5:49ff:fec0:504d%enp2s0: icmp_seq=2 Destination unreachable: 
>Address unreachable
>From fe80::52e5:49ff:fec0:504d%enp2s0: icmp_seq=3 Destination unreachable: 
>Address unreachable
>From fe80::52e5:49ff:fec0:504d%enp2s0: icmp_seq=4 Destination unreachable: 
>Address unreachable
>From fe80::52e5:49ff:fec0:504d%enp2s0: icmp_seq=5 Destination unreachable: 
>Address unreachable
>From fe80::52e5:49ff:fec0:504d%enp2s0: icmp_seq=6 Destination unreachable: 
>Address unreachable
^C
--- fe80::1 ping statistics ---
7 packets transmitted, 0 received, +6 errors, 100% packet loss, time 143ms
pipe 3
 matica!10 lc$ traceroute -6 fe80::1
traceroute to fe80::1 (fe80::1), 30 hops max, 80 byte packets
connect: Invalid argument

> > No configuration needed for this ULA thing? How does it happen, then -
> > is it implemented entirely in the kernel?
> 
> Before I try to come up with my own explanation, I suggest you search
> for terms like Neighbor Discovery Protocol (NDP) and Stateless Address
> Autoconfiguration (SLAAC). The latter, for example, is the reason why
> DHCPv6 is often not necessary.

Ok, I'll do that ... I wonder if those can give me a real address though.

-- 
Please don't Cc: me privately on mailing lists and Usenet,
if you also post the followup to the list or newsgroup.
To reply privately _only_ on Usenet and on broken lists
which rewrite From, fetch the TXT record for no-use.mooo.com.



[gentoo-user] Re: To all IPv6-slackers among the Gentoo community

2019-11-27 Thread Ian Zimmerman
On 2019-11-28 03:07, Ralph Seichter wrote:

> Personally, I don't think static IPv6 addresses are very useful,
> because machines in a local IPv6 network can easily locate each other
> using link-local addressing, without the need to configure this in any
> way. In the example above, the link-local address fe80::1 means "the
> default IPv6 gateway out of here".

But what about connecting to the outside world?  For that, the
link-local address doesn't work.  If I'm relying on the router to
rewrite the source address for such connections, I'm already doing the
equivalent of NAT, and IPv6 was supposed to do away with those :-P

> IPv6 has more convenient mechanisms, like unique local addresses (ULA),
> that can be configured but don't need to be. If your router is smart
> enough, no configuration is required on the end nodes; be it Linux,
> macOS, Windows, or various smartphones.

> One of the many available sources of information is hosted by The Linux
> Documentation Project[1].

I knew about LDP, but I thought I needed some gentoo specifics, such as
the conf.d/net syntax.  You answered that and thanks.  Still, I feel I'm
floating in an exoplanetary orbit.  No configuration needed for this ULA
thing?  How does it happen, then - is it implemented entirely in the kernel?

-- 
Please don't Cc: me privately on mailing lists and Usenet,
if you also post the followup to the list or newsgroup.
To reply privately _only_ on Usenet and on broken lists
which rewrite From, fetch the TXT record for no-use.mooo.com.



Re: [gentoo-user] Re: To all IPv6-slackers among the Gentoo community

2019-11-27 Thread Ralph Seichter
* Ian Zimmerman:

> So, how to configure IPv6 on an end user gentoo box (not a router)?

This depends on how clever your existing router is. If it provides
Router Advertisement, like the FRITZ!Box 7xxx line does, IPv6 clients
should be configured automatically. As an alternative, you can run
net-misc/radvd in your network. It is also possible to use fixed
addresses like so (2001::: is an imaginary /64 subnet and
the rest is based on what you posted):

  config_enp2s0="192.168.1.10/24
  2001:::::10/64"
  routes_enp2s0="default via 192.168.1.1
  default via fe80::1"

In case you're wondering, the variables config_x and routes_x can indeed
contain line breaks. Personally, I don't think static IPv6 addresses are
very useful, because machines in a local IPv6 network can easily locate
each other using link-local addressing, without the need to configure
this in any way. In the example above, the link-local address fe80::1
means "the default IPv6 gateway out of here".

IPv6 has more convenient mechanisms, like unique local addresses (ULA),
that can be configured but don't need to be. If your router is smart
enough, no configuration is required on the end nodes; be it Linux,
macOS, Windows, or various smartphones.

One of the many available sources of information is hosted by The Linux
Documentation Project[1].

-Ralph

[1] https://www.tldp.org/HOWTO/Linux+IPv6-HOWTO/index.html



[gentoo-user] Re: To all IPv6-slackers among the Gentoo community

2019-11-27 Thread Ian Zimmerman
On 2019-11-25 15:53, Ralph Seichter wrote:

> https://www.ripe.net/ripe/mail/archives/ripe-list/2019-November/001712.html
> 
> This does not come as a surprise, of course, but I consider it a good
> point in time to pause and ask oneself what each individual can do to
> move further towards IPv6. The end is neigh(ish).

So, how to configure IPv6 on an end user gentoo box (not a router)?
This is my entire etc/conf.d/net right now:

dns_domain_lo="foo.bar.baz"
config_enp2s0="192.168.1.10 netmask 255.255.255.0"
routes_enp2s0="default via 192.168.1.1"

(and a couple of fixed nameservers in /etc/resolv.conf)

Note it's a static IPv4 address.  I don't run a DHCP client, and I don't
want to start one just for IPv6.  I hoped to find instructions on how to
do the equivalent for IPv6, but a search on the wiki didn't return
anything obvious - the hits are for router configuration.

My router (running OpenWRT) already has an IPv6 prefix, so I assume all
I need to do is to assign myself a full IPv6 address in that range.  But
I don't know how.

-- 
Please don't Cc: me privately on mailing lists and Usenet,
if you also post the followup to the list or newsgroup.
To reply privately _only_ on Usenet and on broken lists
which rewrite From, fetch the TXT record for no-use.mooo.com.



Re: [gentoo-user] Re: To all IPv6-slackers among the Gentoo community

2019-11-27 Thread Dale
Grant Edwards wrote:
> On 2019-11-27, Dale  wrote:
>> Grant Edwards wrote:
>>> The TP-Link Archer C7 runs openwrt flawlessly:
>>>
>>>   
>>> https://www.bestbuy.com/site/tp-link-archer-ac1750-dual-band-wi-fi-5-router-black/5889900.p?skuId=5889900
>>>
>>> A couple months ago when I was shopping, there was also a newer A7
>>> version.  That still requires a bleeding edge version of OpenWRT.
>>> So I opted for the older hardware just to be safe.
>> I was planning to stick with Linksys but I'm liking the one you
>> linked too. By the way, TP-Link has a store on ebay and it's cheaper
>> there.   Anyway, it supports IPv6 according to the manual
> IPv6 support is purely a function of the firmware.  OpenWRT supports
> IPv6 and will do so even if the OEM firmware does not.
>
>> and it has LEDs on the front it seems. Am I seeing LEDs or am I
>> seeing something else? Also, does it have some holes on the bottom
>> that allows wall mounting? I'm trying to find a picture of the
>> bottom but so far, no luck. I've found pics of everything else tho.
> Yes, there are LEDs on the front and wall-mount screw holes on the bottom:
>
>   https://photos.app.goo.gl/V3KL8ZTDPHBUWB726
>
> The C7 and A7 versions are slightly different, so pay attention to
> that.  The C7 is the older, more expensive version that's supported by
> the released, stable version of OpenWRT.  The A7 is newer and requires
> the latest "snapshot" version of OpenWRT.
>
> I can't vouch for the OEM firmware, since I immediately installed
> OpenWRT on mine.
>
> --
> Grant
>

I checked on my old router, Openwrt doesn't work on it.  So, new router
it is. 

That C7 and A7 was throwing me for a bit.  The first ones I found were
A7 but after doing some searching, I realized they are different
hardware wise.  After that, I made sure which I was looking at.  I've
found a few C7s that range in price from around $50 to $75.  Some are
refurbed, some are open box.  As long as it works, I'm fine with that. 

I am glad those are LEDs.  I may be able to see those better than the
ones on the Linksys.  Later on, I found a review site that had a pic of
the bottom.  I saw two holes on the side in the middle.  Given those
things tend to be light in weight, that should be fine.  I wish I could
wall mount my old Linksys.  I've thought about using zip ties or
something to wall mount it.  I don't have a large enough desk for all
this stuff.  I do like the speakers I built tho.  I sat my monitor on
it.  It thumps pretty good.  ;-)

Thanks for the info.  I think this has led me to a much better path and
product.  Having someone tell me they have one and it works, that takes
a lot of doubt out of it. 

Thanks much.

Dale

:-)  :-) 



[gentoo-user] Re: To all IPv6-slackers among the Gentoo community

2019-11-27 Thread Grant Edwards
On 2019-11-27, Dale  wrote:
> Grant Edwards wrote:

>> The TP-Link Archer C7 runs openwrt flawlessly:
>>
>>   
>> https://www.bestbuy.com/site/tp-link-archer-ac1750-dual-band-wi-fi-5-router-black/5889900.p?skuId=5889900
>>
>> A couple months ago when I was shopping, there was also a newer A7
>> version.  That still requires a bleeding edge version of OpenWRT.
>> So I opted for the older hardware just to be safe.

> I was planning to stick with Linksys but I'm liking the one you
> linked too. By the way, TP-Link has a store on ebay and it's cheaper
> there.   Anyway, it supports IPv6 according to the manual

IPv6 support is purely a function of the firmware.  OpenWRT supports
IPv6 and will do so even if the OEM firmware does not.

> and it has LEDs on the front it seems. Am I seeing LEDs or am I
> seeing something else? Also, does it have some holes on the bottom
> that allows wall mounting? I'm trying to find a picture of the
> bottom but so far, no luck. I've found pics of everything else tho.

Yes, there are LEDs on the front and wall-mount screw holes on the bottom:

  https://photos.app.goo.gl/V3KL8ZTDPHBUWB726

The C7 and A7 versions are slightly different, so pay attention to
that.  The C7 is the older, more expensive version that's supported by
the released, stable version of OpenWRT.  The A7 is newer and requires
the latest "snapshot" version of OpenWRT.

I can't vouch for the OEM firmware, since I immediately installed
OpenWRT on mine.

--
Grant




Re: [gentoo-user] Re: To all IPv6-slackers among the Gentoo community

2019-11-26 Thread Dale
Grant Edwards wrote:
> On 2019-11-27, Dale  wrote:
>
>> I went to your link for Openwrt.  I found Linksys E2500 in the list. 
>> When I go search for one, ebay etc, I then find E2500-NP with N600 also
>> mentioned.  Some even say E2500 and E2500-NP in the same description.  I
>> think the N600 has something to do with the wireless stuff.  If I want
>> to use Openwrt, does the -NP make any difference?  The link doesn't
>> mention the -NP version.  The N600 affect anything?  I'm trying to get a
>> dual band version since my current cell phone supports both I think but
>> if I get a new cell phone, it may want the other band, N I think it is
>> called.  :/
> The TP-Link Archer C7 runs openwrt flawlessly:
>
>   
> https://www.bestbuy.com/site/tp-link-archer-ac1750-dual-band-wi-fi-5-router-black/5889900.p?skuId=5889900
>
> A couple months ago when I was shopping, there was also a newer A7
> version.  That still requires a bleeding edge version of OpenWRT.  So
> I opted for the older hardware just to be safe.
>
> The Linksys WRT3200ACM claims to be designed to run OpenWRT, but I had
> constant problems with it and finally gave up.
>
> For OpenWRT, the usual advice is to avoid Broadcom hardware: the
> driver support is close-source and rather marginal.
>

I was planning to stick with Linksys but I'm liking the one you linked
too.  By the way, TP-Link has a store on ebay and it's cheaper there. 
Anyway, it supports IPv6 according to the manual and it has LEDs on the
front it seems.  Am I seeing LEDs or am I seeing something else?  Also,
does it have some holes on the bottom that allows wall mounting?  I'm
trying to find a picture of the bottom but so far, no luck.  I've found
pics of everything else tho. 

Going to research some more but so far, I'm kinda liking it. 

Thanks for the link.

Dale

:-)  :-) 



[gentoo-user] Re: To all IPv6-slackers among the Gentoo community

2019-11-26 Thread Grant Edwards
On 2019-11-27, Dale  wrote:

> I went to your link for Openwrt.  I found Linksys E2500 in the list. 
> When I go search for one, ebay etc, I then find E2500-NP with N600 also
> mentioned.  Some even say E2500 and E2500-NP in the same description.  I
> think the N600 has something to do with the wireless stuff.  If I want
> to use Openwrt, does the -NP make any difference?  The link doesn't
> mention the -NP version.  The N600 affect anything?  I'm trying to get a
> dual band version since my current cell phone supports both I think but
> if I get a new cell phone, it may want the other band, N I think it is
> called.  :/

The TP-Link Archer C7 runs openwrt flawlessly:

  
https://www.bestbuy.com/site/tp-link-archer-ac1750-dual-band-wi-fi-5-router-black/5889900.p?skuId=5889900

A couple months ago when I was shopping, there was also a newer A7
version.  That still requires a bleeding edge version of OpenWRT.  So
I opted for the older hardware just to be safe.

The Linksys WRT3200ACM claims to be designed to run OpenWRT, but I had
constant problems with it and finally gave up.

For OpenWRT, the usual advice is to avoid Broadcom hardware: the
driver support is close-source and rather marginal.