-----BEGIN PGP SIGNED MESSAGE----- Claudia Cordova Yamauchi wrote:
> Hi list > > Please I want to ask you for some help. I have an Ipv6 island (with > router GNU/Linux) and I was trying to make a tunnel for another island > to connect it to the 6bone. I did that a couple of times to connect > islands which routers with public IPs. > > Now there is an island behind a nat made it by a cisco router in this > configuration: > > R1(priv IP) R2(publ IP) R3(publ IP) > remote -> router IPv6 -> router -> INTERNET -> my_router > -> 6Bone > island GNU/Linux Cisco IPv6 GNU/L > > I read the Palet's IST-2001-32161 suggestion of replacing the private > address instead public address and left protocol 41 free in the Cisco > router, and the admin of the other island put this commands in his IPv6 > Linux router: The Cisco should be instructed to forward all the proto 41 packets to the private host. OR what sometimes with NAT's also work is to start the communication on the private host side. As then the NAT box will detect the flow, record it in it's tables and the traffic will enter and leave the network correctly, until the NAT entry times out. So it's better to point the proto 41 forwarding at the correct host. Another option might be to upgrade the Cisco so that it can do the IPv6. And as a last resort you could employ a tinc/vtund tunnel which simply uses tcp or udp and router your IPv6 over that. > #ip tunnel add <tunnelname> mode sit remote < R3 public IP> local > <R1 private IP> ttl 64 > #ip link set <tunnelname> up > #ip address add 3ffe:xxxx:xxxx:xxxx::2/64 dev <tunnelname> > #route -A inet6 add 3ffe::/15 gw 3ffe:xxxx:xxxx:xxxx::1 <tunnelname> If I where you I'd change that to 2000::/3 as there is more to then just 1 bit extra of the 6bone, you are not routing to the RIR space (2001::/16) now which contains quite a lot of hosts and thus content. <SNIP> Greets, Jeroen -----BEGIN PGP SIGNATURE----- Version: Unfix PGP for Outlook Alpha 13 Int. Comment: Jeroen Massar / [EMAIL PROTECTED] / http://unfix.org/~jeroen/ iQA/AwUBP0vpFSmqKFIzPnwjEQKcwwCfca8847TJtgH0ZHjnkNxGfQvx9csAn2ng /+3EF2xarBI4x8VoJXhdyZuM =0C8s -----END PGP SIGNATURE----- --------------------------------------------------------------------- The IPv6 Users Mailing List Unsubscribe by sending "unsubscribe users" to [EMAIL PROTECTED]
