Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
[Solved] IPv6 router with static subnets from /48 to /56
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Networking & Security
View previous topic :: View next topic  
Author Message
svirusxxx
n00b
n00b


Joined: 28 Dec 2018
Posts: 10

PostPosted: Mon May 29, 2023 8:34 am    Post subject: [Solved] IPv6 router with static subnets from /48 to /56 Reply with quote

Hi
I just recive from my LIR /48 IPv6
My main router is Edgerouter where I have setup connection addresses /127 on WAN, and my /48 on switch0 where most my servers is connected.
Now I try on one of my gentoo servers setup as router more deep in my network like in this diagram:
Code:

ISP <===> (eth4) Edgerouter (switch0) <====>  (eth0) server1 (eth1) <====> (eth2) client1
                                         ==>  (eth0) server2

Now I have configured
Edgerouter switch0 have 2a01:1150:1::1/48
server1 eth0 2a01:1150:1::2/48 with gateway to 2a01:1150:1::1
server1 eth1 2a01:1150:1:100:1/56
client1 eth2 2a01:1150:1:100:2/56 with gateway 2a01:1150:1:100:1
server2 eth0 2a01:1150:1::2/48 with gateway to 2a01:1150:1::1

On server1 and server2 I have full connection worldwide to IPv6
On client1 I can ping6 only to server1

also from server2 I can't ping6 2a01:1150:1:100:1


Also on server1 I set
Code:

net.ipv6.conf.all.forwarding = 1
net.ipv6.conf.all.accept_ra = 2
net.ipv6.conf.all.accept_redirects = 1
net.ipv6.conf.all.accept_source_route = 1

What I miss or what I'am doing wrong ?


Thanks in advanced[/code]


Last edited by svirusxxx on Tue May 30, 2023 6:57 am; edited 1 time in total
Back to top
View user's profile Send private message
NeddySeagoon
Administrator
Administrator


Joined: 05 Jul 2003
Posts: 54793
Location: 56N 3W

PostPosted: Mon May 29, 2023 11:33 am    Post subject: Reply with quote

svirusxxx,

It rooks like you have a routing problem.

Please share the output of
Code:
ip -6 route show
and
Code:
ip -6 addr show
for all the systems on the route you expect the packets to traverse.
_________________
Regards,

NeddySeagoon

Computer users fall into two groups:-
those that do backups
those that have never had a hard drive fail.
Back to top
View user's profile Send private message
svirusxxx
n00b
n00b


Joined: 28 Dec 2018
Posts: 10

PostPosted: Mon May 29, 2023 12:50 pm    Post subject: Reply with quote

server1:
# ip -6 route show
Code:

::1 dev lo proto kernel metric 256 pref medium
2a01:1150:1:100::/56 dev eth1 proto kernel metric 256 pref medium
2a01:1150:1::/48 dev eth0 proto kernel metric 256 pref medium
fe80::/64 dev eth0 proto kernel metric 256 pref medium
fe80::/64 dev eth1 proto kernel metric 256 pref medium
default via 2a01:1150:1::1 dev eth0 metric 1024 pref medium

# ip -6 addr show
Code:

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 state UNKNOWN qlen 1000
    inet6 ::1/128 scope host
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 state UP qlen 1000
    inet6 2a01:1150:1::2/48 scope global
       valid_lft forever preferred_lft forever
    inet6 fe80::887:80ff:fef5:855f/64 scope link
       valid_lft forever preferred_lft forever
3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 state UP qlen 1000
    inet6 2a01:1150:1:100::1/56 scope global
       valid_lft forever preferred_lft forever
    inet6 fe80::643c:10ff:fe9a:ae07/64 scope link
       valid_lft forever preferred_lft forever


client1:
ip -6 route show
Code:

::1 dev lo proto kernel metric 256 pref medium
2a01:1150:1:100::/56 dev eth2 proto kernel metric 256 pref medium
fe80::/64 dev eth1 proto kernel metric 256 pref medium
fe80::/64 dev eth0 proto kernel metric 256 pref medium
fe80::/64 dev eth2 proto kernel metric 256 pref medium
default via 2a01:1150:1:100::1 dev eth2 metric 1024 pref medium

ip -6 addr show
Code:

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 state UNKNOWN qlen 1000
    inet6 ::1/128 scope host
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 state UP qlen 1000
    inet6 fe80::64a4:28ff:fef1:d9d6/64 scope link
       valid_lft forever preferred_lft forever
3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 state UP qlen 1000
    inet6 fe80::f01d:83ff:fe91:f11d/64 scope link
       valid_lft forever preferred_lft forever
4: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 state UP qlen 1000
    inet6 2a01:1150:1:100::2/56 scope global
       valid_lft forever preferred_lft forever
    inet6 fe80::9007:afff:fec7:c800/64 scope link
       valid_lft forever preferred_lft forever



server2:
ip -6 r s
Code:

::1 dev lo proto kernel metric 256 pref medium
2a01:1150:1::/48 dev eth0 proto kernel metric 256 pref medium
fe80::/64 dev eth0 proto kernel metric 256 pref medium
fe80::/64 dev eno1 proto kernel metric 256 pref medium

ip -6 a s
Code:

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 state UNKNOWN qlen 1000
    inet6 ::1/128 scope host
       valid_lft forever preferred_lft forever
2: eno1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 state UP qlen 1000
    inet6 fe80::7a2b:cbff:fe4e:a275/64 scope link
       valid_lft forever preferred_lft forever
3: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 state UP qlen 1000
    inet6 2a01:1150:1:33::1/48 scope global
       valid_lft forever preferred_lft forever
    inet6 fe80::7a2b:cbff:fe4e:a276/64 scope link
       valid_lft forever preferred_lft forever



I can't ping from server2 2a01:1150:1:100::1 and I can't ping6 2a01:1150:1:100::2 (nothing on tcpdump on client1)

When I try ping6 server2 from client1 I see this on tcpdump (on server2):
Code:

14:48:47.973872 IP6 fe80::7a2b:cbff:fe4e:a276 > fe80::d221:f9ff:febe:bde3: ICMP6, neighbor solicitation, who has fe80::d221:f9ff:febe:bde3, length 32
14:48:47.974238 IP6 fe80::d221:f9ff:febe:bde3 > fe80::7a2b:cbff:fe4e:a276: ICMP6, neighbor advertisement, tgt is fe80::d221:f9ff:febe:bde3, length 24
14:48:50.113708 IP6 2a01:1150:1:100::2 > 2a01:1150:1:33::1: ICMP6, echo request, seq 1, length 64
14:48:50.113765 IP6 2a01:1150:1:33::1 > ff02::1:ff00:2: ICMP6, neighbor solicitation, who has 2a01:1150:1:100::2, length 32
14:48:51.131179 IP6 2a01:1150:1:100::2 > 2a01:1150:1:33::1: ICMP6, echo request, seq 2, length 64
14:48:51.145859 IP6 2a01:1150:1:33::1 > ff02::1:ff00:2: ICMP6, neighbor solicitation, who has 2a01:1150:1:100::2, length 32
14:48:52.155323 IP6 2a01:1150:1:100::2 > 2a01:1150:1:33::1: ICMP6, echo request, seq 3, length 64
14:48:52.165896 IP6 2a01:1150:1:33::1 > ff02::1:ff00:2: ICMP6, neighbor solicitation, who has 2a01:1150:1:100::2, length 32
14:48:52.986171 IP6 fe80::d221:f9ff:febe:bde3 > fe80::7a2b:cbff:fe4e:a276: ICMP6, neighbor solicitation, who has fe80::7a2b:cbff:fe4e:a276, length 32
14:48:52.986219 IP6 fe80::7a2b:cbff:fe4e:a276 > fe80::d221:f9ff:febe:bde3: ICMP6, neighbor advertisement, tgt is fe80::7a2b:cbff:fe4e:a276, length 24
14:48:53.179229 IP6 2a01:1150:1:100::2 > 2a01:1150:1:33::1: ICMP6, echo request, seq 4, length 64
Back to top
View user's profile Send private message
svirusxxx
n00b
n00b


Joined: 28 Dec 2018
Posts: 10

PostPosted: Mon May 29, 2023 2:35 pm    Post subject: Reply with quote

ok I found bug

I needed add static routing to my Edgerouter on console:
Code:

set protocols static route6 2a01:1150:1:100::/56 next-hop 2a01:1150:1::2
commit; save;
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Networking & Security All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum