Re: IPV6 routing issue

2015-07-28 Thread Giancarlo Razzolini
Em 25-07-2015 11:50, Stuart Henderson escreveu: > Actually that's fine, a point-to-point interface can be unnumbered, > or in the case of IPv6, it can just have a link-local address. In my case I don't have a ppp interface, my CPE talks to my OpenBSD firewall through normal LAN. > DHCPv6 PD would

Re: IPV6 routing issue

2015-07-25 Thread Stuart Henderson
On 2015-06-26, Christian Weisgerber wrote: > On 2015-06-26, Giancarlo Razzolini wrote: > >> I've recently changed my ISP and they have native IPv6. My customer >> premises equipment, which is a GPON, supports both stateless as DHCPv6 >> on it's LAN interface. I want to put a OpenBSD firewa

Re: IPV6 routing issue

2015-06-26 Thread Giancarlo Razzolini
Em 26-06-2015 16:44, Christian Weisgerber escreveu: Well, you can add an IPv6 address for each internal host to the external interface of your firewall, use private addresses on the internal network, and then use pf's binat to map between the two. This will preserve port numbers, although it may

Re: IPV6 routing issue

2015-06-26 Thread Christian Weisgerber
On 2015-06-26, Giancarlo Razzolini wrote: > I don't know if OpenBSD does have any NDP proxying functionality, > besides the one in ndp(8). But it seems to me that, besides a bridge, a > NDP proxy is the only viable solution (besides my ISP allowing me to > change my router configuration). Wel

Re: IPV6 routing issue

2015-06-26 Thread Giancarlo Razzolini
Em 26-06-2015 16:17, Christian Weisgerber escreveu: So you have TWO networks. One between the CPE and your OpenBSD firewall, and one containing the firewall and your internal machines. Yes. Two interfaces, to be more exactly. So you get ONE network address. I get a prefix on the CPE. And I

Re: IPV6 routing issue

2015-06-26 Thread Christian Weisgerber
On 2015-06-26, Giancarlo Razzolini wrote: > I've recently changed my ISP and they have native IPv6. My customer > premises equipment, which is a GPON, supports both stateless as DHCPv6 > on it's LAN interface. I want to put a OpenBSD firewall between this CPE > and my internal network. S

Re: IPV6 routing issue

2015-06-26 Thread Giancarlo Razzolini
Em 26-06-2015 10:43, Gregor Best escreveu: https://github.com/DanielAdolfsson/ndppd This doesn't compile on OpenBSD. I'm correcting it's includes and headers, but it seems it's linux centric. I'll probably need to change it's code. I've found some other tools but it seems almost all of them a

Re: IPV6 routing issue

2015-06-26 Thread Giancarlo Razzolini
Em 26-06-2015 10:43, Gregor Best escreveu: I've also seen something similar. A friend of mine suggested [0], though I haven't tried it. I circumvented my problem by using a routed /64 on a Hurricane Electric tunnel. I wouldn't like to use a tunnel, since my ISP is (kind of) providing native IP

Re: IPV6 routing issue

2015-06-26 Thread Giancarlo Razzolini
Em 26-06-2015 10:07, Patrik Lundin escreveu: I have struggled with a similar problem a few years back. Can it be that the upstream equipment does not create a route for the delegated prefix pointing to your openbsd machine? This would explain why you see neighbour solicitations on the outside in

Re: IPV6 routing issue

2015-06-26 Thread Gregor Best
On Fri, Jun 26, 2015 at 03:07:41PM +0200, Patrik Lundin wrote: > [...] > This would explain why you see neighbour solicitations on the outside > interface. The upstream router is not aware that the prefix should be > routed to you. > [...] I've also seen something similar. A friend of mine suggest

Re: IPV6 routing issue

2015-06-26 Thread Patrik Lundin
the prefix should be routed to you. -- Patrik Lundin - Original message - From: Giancarlo Razzolini To: "Openbsd-Misc" Subject: IPV6 routing issue Date: Thu, 25 Jun 2015 21:06:51 -0300 HI all, I've recently changed my ISP and they have native IPv6. My cus

IPV6 routing issue

2015-06-25 Thread Giancarlo Razzolini
HI all, I've recently changed my ISP and they have native IPv6. My customer premises equipment, which is a GPON, supports both stateless as DHCPv6 on it's LAN interface. I want to put a OpenBSD firewall between this CPE and my internal network. I'm using OpenBSD 5.7 stable. My CPE receive

Re: strange ipv6 routing issue

2006-02-18 Thread Olivier Mehani
On Sat, Feb 18, 2006 at 07:22:16AM -0500, David Hill wrote: > > I'm playing with IPv6 in 3.8 and came up to this strange problem. > What do your PF rules look like? arf... I thought about it for a minute or so and discarded the idea. ... and that was the problem... after adding pass quick pro

Re: strange ipv6 routing issue

2006-02-18 Thread David Hill
On Sat, Feb 18, 2006 at 12:57:05PM +0100, Olivier Mehani wrote: > Hello list, > > I'm playing with IPv6 in 3.8 and came up to this strange problem. > > My IPv6 connectivity is given by a broker (xs26.net) and I have set up a gif > interface to use it (gif0): > > /etc/hostname.gif0 contains: > >

strange ipv6 routing issue

2006-02-18 Thread Olivier Mehani
Hello list, I'm playing with IPv6 in 3.8 and came up to this strange problem. My IPv6 connectivity is given by a broker (xs26.net) and I have set up a gif interface to use it (gif0): /etc/hostname.gif0 contains: tunnel SIS0IPv4 BROKERIPv4 inet6 IPv6PREFIX::1 !route add -inet6 default IPv6PREFIX