Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 25 Jul 2024 10:53:36 +0000
From:      bugzilla-noreply@freebsd.org
To:        net@FreeBSD.org
Subject:   [Bug 280390] NPTv6 not working
Message-ID:  <bug-280390-7501-aO9DYTLbaW@https.bugs.freebsd.org/bugzilla/>
In-Reply-To: <bug-280390-7501@https.bugs.freebsd.org/bugzilla/>
References:  <bug-280390-7501@https.bugs.freebsd.org/bugzilla/>

next in thread | previous in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D280390

--- Comment #15 from John Hay <john@sanren.ac.za> ---
I have made a test setup with roughly your setup, but added the ndproxy por=
t,
and added this to my rc.conf:

<snip>
ndproxy_enable=3D"YES"
ndproxy_uplink_interface=3D"vtnet0"
# mac and link-local address of upstream router
ndproxy_downlink_mac_address=3D"0c:07:42:82:00:01"
ndproxy_uplink_ipv6_addresses=3D"fe80::e07:42ff:fe82:1"
</snip>

I tweaked the /etc/ipfw.rules a little and left the ipv4 stuff out:
<snip>
#!/bin/sh
ipfw -q -f flush
cmd=3D"ipfw -q add "
ipfw disable one_pass
ipfw nptv6 NPT create int_prefix fdc9:281f:4d7:9ee9:: ext_if vtnet0 prefixl=
en
64
$cmd allow ip6 from fe80::/10 to ff02::/16
$cmd allow ip6 from fe80::/10 to fe80::/10
$cmd nptv6 NPT ip6 from any to any via vtnet0
$cmd allow icmp6 from any to any
$cmd allow icmp from any to any
$cmd allow ip6 from any to any
</snip>

With this I had a working ping6.

--=20
You are receiving this mail because:
You are on the CC list for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-280390-7501-aO9DYTLbaW>