Re: IPv6: can a link-site (or global) address be configured in rc.conf?

2000-03-11 Thread Jun-ichiro itojun Hagino

I applied a variant of your patch to my NetBSD/i386 -currentish box that
also uses the KAME stack and was able to ping6 your 6to4 address.

For NetBSD-current, I'll bring in cleaner 6to4 code (since netbsd is
not that close to the deadline).
please wait for a while...

itojun


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-current" in the body of the message



Re: IPv6: can a link-site (or global) address be configured in rc.conf?

2000-03-11 Thread Brad Spencer


   I applied a variant of your patch to my NetBSD/i386 -currentish box that
   also uses the KAME stack and was able to ping6 your 6to4 address.

   For NetBSD-current, I'll bring in cleaner 6to4 code (since netbsd is
   not that close to the deadline).
   please wait for a while...

   itojun


This is what I expected.  I was just messing around some and was pleased
that it didn't panic my machine.


Brad Spencer - [EMAIL PROTECTED]   http://anduin.eldar.org
[finger [EMAIL PROTECTED] for PGP public key]


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-current" in the body of the message



Re: IPv6: can a link-site (or global) address be configured in rc.conf?

2000-03-11 Thread itojun


 For NetBSD-current, I'll bring in cleaner 6to4 code (since netbsd is
 not that close to the deadline).
 please wait for a while...
This is what I expected.  I was just messing around some and was pleased
that it didn't panic my machine.

Thanks.  BTW, please be sure to read this before you configure 6to4
interface.  I recommend you to run configured tunnels.
(I missed the i-d cutoff date...)

http://playground.iijlab.net/i-d/draft-itojun-ipv6-transition-abuse-00.txt

itojun


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-current" in the body of the message



Re: IPv6: can a link-site (or global) address be configured in rc.conf?

2000-03-10 Thread Richard Seaman, Jr.

On Fri, Mar 10, 2000 at 08:09:04PM +0900, Yoshinobu Inoue wrote:

 6to4 support seems to be very important for initial IPv6
 deployment on FreeBSD4.0, so I tried small additinal patches
 to make it available. And It seems to work.
 
 Could some FreeBSD4.0 user with direct internet connectivity
 please try this patches and try to ping6 to my host's 6to4
 address?
 The procedure is,

For the benefit of the lists, and confirming private mail I sent,
ping6 works using the second of the patches sent (I didn't try the
first).

-- 
Richard Seaman, Jr.   email: [EMAIL PROTECTED]
5182 N. Maple Lanephone: 262-367-5450
Chenequa WI 53058 fax:   262-367-5852


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-current" in the body of the message



Re: IPv6: can a link-site (or global) address be configured in rc.conf?

2000-03-10 Thread Richard Seaman, Jr.

On Fri, Mar 10, 2000 at 07:35:08AM -0600, Richard Seaman, Jr. wrote:
 On Fri, Mar 10, 2000 at 08:09:04PM +0900, Yoshinobu Inoue wrote:
 
  6to4 support seems to be very important for initial IPv6
  deployment on FreeBSD4.0, so I tried small additinal patches
  to make it available. And It seems to work.
  
  Could some FreeBSD4.0 user with direct internet connectivity
  please try this patches and try to ping6 to my host's 6to4
  address?
  The procedure is,
 
 For the benefit of the lists, and confirming private mail I sent,
 ping6 works using the second of the patches sent (I didn't try the
 first).

Ok.  In addition to your instructions I also configured the
box as an IPv6 router (using the rc.conf switches) and
used a prefix of 2002:cc5f:bb02::0/64 on the interior
ethernet interface de0 with 2002:cc5f:bb02::1/16 on stf0. I'm
not sure if this is quite right.

Anyway, I can ping6 to 2002:cbb2:8dd8::1 from my interior ipv6
box as well as from the router box.  I also configured DNS
for the two boxes, assigning ipv6 addresses to test.ipv6.tar.com
and ns.ipv6.tar.com.  One of my DNS secondaries does not update
immediately on notification, so you might not get the ipv6
resolution until it updates on schedule if you happen to query
that box.  However, once all the secondaries are up, i hope
you can ping6 to both ns.ipv6.tar.com (router) and 
test.ipv6.tar.com (interior).

I also had to adjust my ipv4 firewall rules to allow protocol
ipv6 through.  Strange that I didn't have to do that when
doing a gif tunnel to freenet6.net.  Also, what do I have to
do to enable ip6fw?


-- 
Richard Seaman, Jr.   email: [EMAIL PROTECTED]
5182 N. Maple Lanephone: 262-367-5450
Chenequa WI 53058 fax:   262-367-5852


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-current" in the body of the message



Re: IPv6: can a link-site (or global) address be configured in rc.conf?

2000-03-10 Thread Richard Seaman, Jr.

On Sat, Mar 11, 2000 at 02:50:28AM +0900, Yoshinobu Inoue wrote:

 By the way, I'm now very much interested in next round of
 test, that non 6to4 IPv6 prefix routing via 6to4 cloud.
 
 Could you please assign some non 6to4 prefix inside your
 environment?

Ok. c000::/64 

   route add -inet6 3ffe:501:4819:2000:: -prefixlen 64 2002:cbb2:8dd8::1

Did it on the router.

 Then I believe I can ping to some of your non 6to4 addresses
 from my non 6to4 address.

Try:

c000::2a0:c9ff:feb1:23ae   (border router)
c000::200:c0ff:fe34:41c6   (interior box)

 Also, I think you can ping to my non
 6to4 addr, 3ffe:501:4819:2000:210:5aff:fe86:b65a, from your
 non 6to4 address.

I tried deleting the 6to4 address from an interface on the 
interior node and did a ping6, but I get no replies (I think
you have to configure the route on your end first?).  Is
there a simpler way to force ping6 to use the non 6to4
address as the source?

I can ping6 your non 6to4 address from my 6to4 address, see
attached.

-- 
Richard Seaman, Jr.   email: [EMAIL PROTECTED]
5182 N. Maple Lanephone: 262-367-5450
Chenequa WI 53058 fax:   262-367-5852


PING6(56=40+8+8 bytes) 2002:cc5f:bb02:0:2a0:c9ff:feb1:23ae -- 
3ffe:501:4819:2000:210:5aff:fe86:b65a
16 bytes from 3ffe:501:4819:2000:210:5aff:fe86:b65a, icmp_seq=0 hlim=63 time=530.244 ms
16 bytes from 3ffe:501:4819:2000:210:5aff:fe86:b65a, icmp_seq=1 hlim=63 time=360.666 ms
16 bytes from 3ffe:501:4819:2000:210:5aff:fe86:b65a, icmp_seq=2 hlim=63 time=360.621 ms
16 bytes from 3ffe:501:4819:2000:210:5aff:fe86:b65a, icmp_seq=3 hlim=63 time=410.744 ms
16 bytes from 3ffe:501:4819:2000:210:5aff:fe86:b65a, icmp_seq=4 hlim=63 time=350.658 ms
16 bytes from 3ffe:501:4819:2000:210:5aff:fe86:b65a, icmp_seq=5 hlim=63 time=350.743 ms
16 bytes from 3ffe:501:4819:2000:210:5aff:fe86:b65a, icmp_seq=6 hlim=63 time=350.836 ms
16 bytes from 3ffe:501:4819:2000:210:5aff:fe86:b65a, icmp_seq=7 hlim=63 time=350.761 ms

--- 3ffe:501:4819:2000:210:5aff:fe86:b65a ping6 statistics ---
9 packets transmitted, 8 packets received, 11% packet loss
round-trip min/avg/max = 350.658/383.159/530.244 ms



Re: IPv6: can a link-site (or global) address be configured in rc.conf?

2000-03-10 Thread Richard Seaman, Jr.

On Sat, Mar 11, 2000 at 05:22:09AM +0900, Yoshinobu Inoue wrote:

  I tried deleting the 6to4 address from an interface on the 
  interior node and did a ping6, but I get no replies (I think
  you have to configure the route on your end first?).
 
 Yes, I have configured it, so it should work now.

Yes, it does. It all looks good.

PING6(56=40+8+8 bytes) c000::2a0:c9ff:feb1:23ae -- 
3ffe:501:4819:2000:210:5aff:fe86:b65a
16 bytes from 3ffe:501:4819:2000:210:5aff:fe86:b65a, icmp_seq=0 hlim=63 time=452.312 ms
16 bytes from 3ffe:501:4819:2000:210:5aff:fe86:b65a, icmp_seq=1 hlim=63 time=361.945 ms
16 bytes from 3ffe:501:4819:2000:210:5aff:fe86:b65a, icmp_seq=2 hlim=63 time=421.628 ms
16 bytes from 3ffe:501:4819:2000:210:5aff:fe86:b65a, icmp_seq=4 hlim=63 time=341.997 ms
16 bytes from 3ffe:501:4819:2000:210:5aff:fe86:b65a, icmp_seq=5 hlim=63 time=582.145 ms

--- 3ffe:501:4819:2000:210:5aff:fe86:b65a ping6 statistics ---
7 packets transmitted, 5 packets received, 28% packet loss
round-trip min/avg/max = 341.997/432.005/582.145 ms


-- 
Richard Seaman, Jr.   email: [EMAIL PROTECTED]
5182 N. Maple Lanephone: 262-367-5450
Chenequa WI 53058 fax:   262-367-5852


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-current" in the body of the message



Re: IPv6: can a link-site (or global) address be configured in rc.conf?

2000-03-10 Thread Richard Seaman, Jr.

On Sat, Mar 11, 2000 at 02:50:28AM +0900, Yoshinobu Inoue wrote:

  I also had to adjust my ipv4 firewall rules to allow protocol
  ipv6 through.  Strange that I didn't have to do that when
  doing a gif tunnel to freenet6.net.  Also, what do I have to
  do to enable ip6fw?
 
 Wmmm, it is strange that freenet6 was OK.

Just to clarify, I had to configure a hole in ipfw for freenet6.net
too.  I had just forgotten about it. :)

-- 
Richard Seaman, Jr.   email: [EMAIL PROTECTED]
5182 N. Maple Lanephone: 262-367-5450
Chenequa WI 53058 fax:   262-367-5852


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-current" in the body of the message



Re: IPv6: can a link-site (or global) address be configured in rc.conf?

2000-03-07 Thread itojun


Very unfortunately, 6to4 is not yet supported in FreeBSD/KAME.
So now available options will be,
 -Use freenet6 (for one hosts).
 -Get IPv6 address block and connect to 6bone using gif tunnel.

We hope to add 6to4 support for KAME/FreeBSD very soon (next week is a
good guess).   We may need some more testing before real use,
but it should work.  it is in KAME/NetBSD already, I just don't have
time to make it work on othre *BSDs yet...

itojun


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-current" in the body of the message



Re: IPv6: can a link-site (or global) address be configured in rc.conf?

2000-03-06 Thread Bruce A. Mah

If memory serves me right, "Jose M. Alcaide" wrote:

 Now that I have several machines running FreeBSD 4.0, I started to
 play with IPv6. It's fun! I have plans to set up a v6-over-v4 tunnel
 and connect to the 6Bone.
 
 I read /usr/share/examples/IPv6/USAGE, /usr/share/doc/IPv6/IMPLEMENTATION
 and some documents at the KAME web site.  However, I still have to figure out
 how to assign a not-link-local address (i.e., a site or global address) to
 the [unique] Ethernet interface of each host in an automatic manner (from
 /etc/rc.conf).  After reading /etc/rc.network6 I concluded that no addresses
 apart from the link-local ones are assigned to the interfaces.  I am using
 ifconfig manually to do this (BTW, I found that there is no need to specify
 "alias").

/etc/rc.network6 assumes that you'll get your non-link-local address(es)
from your router(s) using rtsol(8).  The router, in turn, needs to be
running something like rtadvd(8).

 I am new to IPv6, so maybe I am asking for something with no
 sense...

IPv6 autoconfiguration is very roughly analogous to using DHCP in the
IPv4 world.  (It's not exactly the same though.  In fact, there exists 
a DHCP for IPv6.)

Hope this helps,

Bruce.




 PGP signature


Re: IPv6: can a link-site (or global) address be configured in rc.conf?

2000-03-06 Thread Bill Fenner


Bruce is right that machines expect to learn their prefixes from their
local router; however if you're just playing around you might want to
set it yourself.  The easiest way I've found to do this is to say that
this machine is a router:

# sysctl -w net.inet6.ip6.forwarding=1
net.inet6.ip6.forwarding: 0 - 1

and then run "prefix" to set a site-local prefix:

# prefix dc0 fec0:0:0:1::
# ifconfig dc0
dc0: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST mtu 1500
inet6 fe80::2a0:ccff:fe36:7410%dc0 prefixlen 64  scopeid 0x1
inet6 fec0::1:2a0:ccff:fe36:7410 prefixlen 64 

Of course, if you have global address space too you can assign that prefix
too.

  Bill


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-current" in the body of the message



Re: IPv6: can a link-site (or global) address be configured in rc.conf?

2000-03-06 Thread Jose M. Alcaide

Bill Fenner wrote:
 
 Bruce is right that machines expect to learn their prefixes from their
 local router; however if you're just playing around you might want to
 set it yourself.  The easiest way I've found to do this is to say that
 this machine is a router:
 
 # sysctl -w net.inet6.ip6.forwarding=1
 net.inet6.ip6.forwarding: 0 - 1
 
 and then run "prefix" to set a site-local prefix:
 
 # prefix dc0 fec0:0:0:1::
 # ifconfig dc0
 dc0: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST mtu 1500
 inet6 fe80::2a0:ccff:fe36:7410%dc0 prefixlen 64  scopeid 0x1
 inet6 fec0::1:2a0:ccff:fe36:7410 prefixlen 64
 
 Of course, if you have global address space too you can assign that prefix
 too.
 


Thanks Bruce and Bill!. I suspected something like this. I read
about IPv6 autoconfiguration, but since I am playing with site-local
addresses and I have no IPv6 router [yet], I wondered about how
to configure the IPv6 site-local address. Well, my problem is
solved, and now I understand IPv6 better.

Thanks again,

-- JMA
---
José Mª Alcaide | mailto:[EMAIL PROTECTED]
Universidad del País Vasco  | mailto:[EMAIL PROTECTED]
Dpto. de Electricidad y Electrónica | http://www.we.lc.ehu.es/~jose
Facultad de Ciencias - Campus de Lejona | Tel.:  +34-946012479
48940 Lejona (Vizcaya) - SPAIN  | Fax:   +34-946013071
---
 "Beware of Programmers who carry screwdrivers"  --  Leonard Brandwein


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-current" in the body of the message



Re: IPv6: can a link-site (or global) address be configured in rc.conf?

2000-03-06 Thread Bob Fink

Eugene,

At 09:00 AM 3/6/2000 -0800, Eugene M. Kim wrote:
(Cc'ed to the 6BONE mailing list in the hope that someone there could
answer my question as well)

Speaking of the address allocation, is there a way for an individual to
get a non-local address space (so that all of my machines can get an
unique IPv6 address)?  I've read through the 6BONE website, and it seems
to me that I somehow have to `qualify' in order to get one.  (And the
fact that I just need 10 addresses makes me feel guilty; AFAIK the
minimum allocation unit is 2^64-address block :-p.)

IPv6 "sites" own the right-most 80 bits of the 128 bits for local use (you 
know that, just restating for the wide list you have emailed to).

The external routing prefixes are the left-most 48 bits of the 128 and come 
from your IPv6 service provider... normally. These are currently either in 
the 3FFE::/16 or 2001::/16 TLA space.

The exception is for "6to4" prefixes which are in the 2002::/16 TLA space. 
See the I-D:

http://www.ietf.org/internet-drafts/draft-ietf-ngtrans-6to4-03.txt

Please read, then ask any questions you may have. 6to4 is currently 
supported, and there are relay routers up and running.


Thanks,

Bob



To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-current" in the body of the message



RE: IPv6: can a link-site (or global) address be configured in rc.conf?

2000-03-06 Thread Richard Draves

 The exception is for "6to4" prefixes which are in the 
 2002::/16 TLA space. 
 See the I-D:
 
 http://www.ietf.org/internet-drafts/draft-ietf-ngtrans-6to4-03.txt
 
 Please read, then ask any questions you may have. 6to4 is currently 
 supported, and there are relay routers up and running.

To summarize, with 6to4 all you need is one global/static IPv4 address and
you get a /48 IPv6 prefix for yourself.

Rich


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-current" in the body of the message



Re: IPv6: can a link-site (or global) address be configured in rc.conf?

2000-03-06 Thread Richard Seaman, Jr.

On Mon, Mar 06, 2000 at 09:22:45AM -0800, Bob Fink wrote:

 Please read, then ask any questions you may have. 6to4 is currently 
 supported, and there are relay routers up and running.

My apologies if I sound like I need "IPv6 for Dummies".

Just to clarify.  You mean that 6to4 is currently supported in FreeBSD/KAME?
Of course, I'm not quite sure what I mean by this.  I guess, if I configure
a FreeBSD/KAME host as an IPv6 router, will the router automatically do the
IPv6-IPv4 encapsulation when it encounters a destination prefix of 2002::/16
and vice versa for incoming packets?  Or, do I need to configure a pseudo
interface somehow (gif doesn't look quite like the right thing?). Also, will
FreeBSD/KAME hosts (both router and non-router hosts) somehow automatically
do the proper address selection algorithm when they encounter multiple IPv6
addresses, or is that an application level requirement?

Also, if I have (for example) IPv4 addresses of 204.95.187/24, I assume
I can use any of the 2002:[V4ADDR]:/48 prefixes within my allocation, but
for external 6to4 connectivity I should probably choose the V4ADDR of the
external interface of the 6to4 router?

And, finally, do some of the 6to4 relay routers that are "up and running" 
serve small isolated sites?  I assume the best case is that one's ISP
provides IPv6 connectivity in some shape or form.  But, if thats not the
case, I assume the main options are IPv6-IPv4 tunnel to a co-operative
IPv6 site, or 6to4 with a default route to a relay router (who I assume
must configure a static route back?).  Or, run a more sophisticated routing
protocol (BGP), but thats a little much for me, I think.

Of course, if everyone configures 6to4 (or at least everyone you want to reach)
then am I correct that you don't really need 6to4 "relay" routers?  This is
only for reaching native IPv6 sites without 6to4 addresses?

Thanks.

-- 
Richard Seaman, Jr.   email: [EMAIL PROTECTED]
5182 N. Maple Lanephone: 262-367-5450
Chenequa WI 53058 fax:   262-367-5852


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-current" in the body of the message