On 5/23/2014 2:37 PM, Eric Teeter wrote: > Dear Tom: > > I am trying to do IPv6 using the the peramaters that Charter gave me the > following for Shorewall6 version 4.5.21.6. > > Prefix = 2602:100::/32 > Boarder Relay Address 68.114.165.1 > Prefix length = 32 > IPv4 mask length = 0 > > DNS 1 Address = 2607:f428:1::5353:1 > DNS 2 Address = 2607:f428:2::5353:1 > > I was using Shorewall 6to4 and 6in4 Tunnels > <http://www.shorewall.net/6to4.htm#idp1977151680> > > I had to modify your script so that I could use it for dynamic address's > enclosed.
A couple of things: a) That script was written 6 years ago before the distributions has much support for IPv6. I certainly wouldn't use it today and will remove mention to it as soon as I have a moment. You really should be using your distribution's configuration tools to configure the tunnel. b) You need to give some thought to how you are going to use the /32. Your current configuration is totally unusable (the same /32 is defined on eth0 and eth1). Unless the two interfaces connect to the same network, you must subnet such that the networks on eth0 and eth1 are disjoint. For starters, delete the IPv6 addresses and routes on the ethernet interfaces, and get the tunnel working first. > > > when I ping I get the following > #ping6 -c3 www.kame.net > PING www.kame.net(2001:200:dff:fff1:216:3eff:feb1:44d7) 56 data bytes > From 2602:100:6153:810d::1 icmp_seq=1 Destination unreachable: Address > unreachable > From 2602:100:6153:810d::1 icmp_seq=1 Destination unreachable: Address > unreachable > From 2602:100:6153:810d::1 icmp_seq=1 Destination unreachable: Address > unreachable > > --- www.kame.net ping statistics --- > 0 packets transmitted, 0 received, +3 errors > > The fact that I am getting a ipv6 address in the above shows that > something is working. > It means that you have configured IPv6 addresses. Does 'ping6 ::68.114.165.1' work? Have you enabled IPv6 in your Shorewall configuration? -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------------ "Accelerate Dev Cycles with Automated Cross-Browser Testing - For FREE Instantly run your Selenium tests across 300+ browser/OS combos. Get unparalleled scalability from the best Selenium testing platform available Simple to use. Nothing to install. Get started now for free." http://p.sf.net/sfu/SauceLabs
_______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
