ZAP/Configuration/IPv6

Quelques exemples en attendant une vraie doc'...

Liaison 6to4 automatique sur liaison dynamique

Ceci est la configuration mise en place au CAI de Đà Nẵng.

Fichier /etc/init.d/6to4 (à rendre exécutable) :

#
# 6to4  Script to configure a 6to4 "tunnel" device
#
#               Written by Daniel Lawson <daniel@meta.net.nz>

PATH=/sbin:/bin:/usr/sbin:/usr/bin

test -f $DAEMON || exit 0

# Source configuration file
. /etc/default/6to4

start_6to4_tunnel() {
  # GET EXTIF IP Address
  PPPIP=`ip -4 addr list $EXTIF | grep inet | awk '{ print $2'}`
  # From IanKumlien:
  # If you get a /netmask-bits suffix, then change the PPPIP line to:
  # PPPIP=`ip -4 addr list $EXTIF | grep inet | awk '{ print $2 }' | cut -d/ -f1`
  echo $PPPIP 
  # Set up the tunnel
  ip tunnel add ${IF} mode sit remote any local $PPPIP ttl 255
  ip link set dev ${IF} mtu 1472 up
}

start_routes() {
  # Route outgoing 6to4 via the tunnel
  ip -6 route add 2002::/16 dev ${IF}
  # If this is your only IPv6 connection, add some more routes as well:
  if [ ${ONLYCONN} == "yes" ]; then
    # This line seems necessary, but I've never found documented 
    # anywhere. Try without if you can.
    ip -6 route add ::/96 dev ${IF} metric 1 
    # Add a route toe the 6to4 Anycast address?
    ip -6 route add 2000::/3 via ::${GWADDR} dev tun6to4 metric 1
  fi
}
 
start_local_network() {
  # Add a 6to4 Address to ${INTIF}
  if [ -n ${INTIF} ]; then
    ip -6 addr add $(printf "2002:%02x%02x:%02x%02x::1/64" $(echo ${PPPIP} | tr '.' ' ')) dev ${INTIF}
  fi
}

stop_local_network() {
  if [ -n ${INTIF} ]; then
    # GET the *old* tunnel ip
    OLDIP=`ip -6 addr list dev ${IF} | grep inet6 | cut -d ":" -f 3 | cut -d '/' -f 1`
    # Remove the route via ${INTIF}
    ip -6 route del $(printf "2002:%02x%02x:%02x%02x::/64" $(echo ${OLDIP} | tr '.' ' ')) dev ${INTIF}
    # Remove the 6to4 IP assigned to ${INTIF}
    ip -6 addr del $(printf "2002:%02x%02x:%02x%02x::1/64" $(echo ${OLDIP} | tr '.' ' ')) dev ${INTIF}
  fi
}

stop_routes() {
  ip -6 route del 2002::/16 dev ${IF}
  if [ ${ONLYCONN} == "yes" ]; then
    ip -6 route del ::/96 dev ${IF} metric 1
    ip -6 route del 2000::/3 via ::${GWADDR} dev ${IF} metric 1
  fi
}

stop_6to4_tunnel() {
  ip -6 route flush dev ${IF}
  ip link set dev ${IF} down
        ip tunnel del ${IF} 
}

restart_6to4_ad () {
  [ "yes" == "${RADVD}" ] &&
  killall -1 radvd
}

case "$1" in
  start)
        echo -n "Setting up 6to4 IPv6 tunnel ($IF): "
        start_6to4_tunnel
        start_routes
        start_local_network
        restart_6to4_ad
        ;;
  stop)
        echo -n "Shutting down 6to4 IPv6 tunnel ($IF): "
        stop_local_network
        stop_routes
        stop_6to4_tunnel
        restart_6to4_ad
        ;;
  restart|force-reload)
        echo -n "Resetting 6to4 IPv6 tunnel ($IF): "
        stop_local_network
        stop_routes
        stop_6to4_tunnel
        start_6to4_tunnel
        start_routes
        start_local_network
        restart_6to4_ad
        ;;
  *)
        echo "Usage: $0 {start|stop|restart|force-reload}" >&2
        exit 1
        ;;
esac

exit 0

Fichier /etc/default/6to4 :

# Defaults for 6to4 initscript
# sourced by /etc/init.d/6to4
# installed at /etc/default/6to4 by the maintainer scripts

#
# This is a POSIX shell fragment
#

# What is the name of your tunnel interface?
IF=tun6to4

# What is the name of your external (real-world) interface?
EXTIF=ppp0

# What is the name of your internal (rfc1918) interface?
# If you do not wish to use this feature, then leave this blank. 
# If your internal hosts have real-world addresses themselves, then this
# set of scripts currently wont help you.
INTIF=eth1

# Do you use radvd for dynamic IPv6 addressing within your network?
RADVD=yes

# IS this your only IPv6 connection? If you have a freenet6, or some other 
# form of IPv6 connection, then set the following to no. If you are sure
# that this is your only IPv6 connection, set it to yes.
ONLYCONN=yes

# If this is your only IPv6 connection, you need a gateway to forward
# your 6to4 packets onto the 6bone. You should find a gateway that is
# as close to you as possible!
# Helsinki or somewhere similar
GWADDR=192.88.99.1
# AARNET in australia
#GWADDR=192.231.212.5

Fichier /etc/ppp/ip-up.d/ipv6-6to4-up (à rendre exécutable) :
```
/etc/init.d/6to4 stop
/etc/init.d/6to4 start
```
Fichier /etc/ppp/ip-down.d/ipv6-6to4-down (à rendre exécutable) :
```
/etc/init.d/6to4 stop
```

Fichier /etc/radvd.conf :

interface eth1
{
        AdvSendAdvert on;
        # IgnoreIfMissing on;
        MinRtrAdvInterval 30;
        MaxRtrAdvInterval 60;
        AdvDefaultPreference high;
        AdvHomeAgentFlag off;

        prefix fec0::/64
        {
        };
#       prefix 3ffe:...:1::/64
#       {
#       };

        prefix 0:0:0:0::/64
        {
                AdvOnLink on;
                AdvAutonomous on;
                AdvRouterAddr off;
                Base6to4Interface ppp0;
                AdvPreferredLifetime 30;
                AdvValidLifetime 60;
        };
};

Liaison 6to4 « à la main »

Ceci est la configuration mise en place au BAP.

* Extrait du fichier /etc/network/interfaces :

auto tun6to4
iface tun6to4 inet6 v4tunnel
        address 2002:d2f5:3dce:feed::1
        netmask 64
        endpoint any
        local 210.245.61.206
        ttl 64
        up ip -6 route add 2000::/3 via ::192.88.99.1 dev tun6to4
        up sysctl -w net.ipv6.conf.all.forwarding=1
        up sysctl -w net.ipv6.conf.all.autoconf=0
        up sysctl -w net.ipv6.conf.all.accept_ra=0
        up sysctl -w net.ipv6.conf.all.accept_redirects=0
        up sysctl -w net.ipv6.conf.all.router_solicitations=0
        down ip -6 route flush dev tun6to4

On remarquera que la partie 6to4 de l'adresse IPv6 (d2f5:3dce) correspond à l'adresse IPv4 locale (210.245.61.206). C'est impératif si on veut que les réponses reviennent vers cette adresse IPv4.

Pour calculer l'adresse IPv6 on peut utiliser la commande suivante qui se trouve dans le paquet éponyme :

$ ipv6calc -I ipv4addr -O ipv6addr -A conv6to4 210.245.61.206
2002:d2f5:3dce::

WikiTeki / ZAP / Configuration / IPv6

Liaison 6to4 automatique sur liaison dynamique

Liaison 6to4 « à la main »