Date: Wed, 6 Aug 2014 22:20:54 -0700 From: David Benfell <benfell@parts-unknown.org> To: "John R. Levine" <johnl@iecc.com> Cc: freebsd-questions@freebsd.org Subject: Re: he.net IPv6 tunnel Message-ID: <20140807052054.GA1791@home.parts-unknown.org> In-Reply-To: <alpine.BSF.2.11.1408070032050.14519@joyce.lan> References: <20140804105020.GD94656@home.parts-unknown.org> <20140806231738.13354.qmail@joyce.lan> <20140807041023.GA1656@home.parts-unknown.org> <alpine.BSF.2.11.1408070032050.14519@joyce.lan>
next in thread | previous in thread | raw e-mail | index | archive | help
--Nq2Wo0NMKNjxTN9z Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Thu, Aug 07, 2014 at 12:35:50AM -0400, John R. Levine wrote: >=20 > Numbering the aliases is obsolete. Now we glom them into one big string= =20 > like this: >=20 > NMASK=3D"netmask 0xffffff00" > ifconfig_bce0_aliases=3D"inet6 fe80::2 prefixlen 64" > ifconfig_bce0_aliases=3D"$ifconfig_bce0_aliases inet $NETNUM.100 $NMASK" > ifconfig_bce0_aliases=3D"$ifconfig_bce0_aliases inet $NETNUM.101 $NMASK"= =20 > ifconfig_bce0_aliases=3D"$ifconfig_bce0_aliases inet $NETNUM.102 $NMASK" >=20 With a change in the variable name. That's actually a good thing. And now I see it in the man page in the discussion of IPv4 address configuration. >=20 > > # all the other addresses > > ifconfig_em0_ipv6=3D"inet6 ${V6NETNUM}::2 prefixlen 64" > > #ifconfig_em0_alias11=3D"inet6 ${V6NETNUM}::3 prefixlen 64" > > #ifconfig_em0_alias12=3D"inet6 ${V6NETNUM}::4 prefixlen 64" >=20 > If you don't want to route the v6 addresses on your LAN, put them on the= =20 > loopback lo0 rather than a real interface. I think I do want them on a real interface. They need to be addressable from the outside world. Am I misunderstanding aliasing? I just don't have a LAN relative to the server. It has only a cable modem between it and the Big Bad Internet (TM), so I think of it as being on a WAN. There is a wireless router at 50.250.218.173. Nothing behind it now has IPv6 access, so it would actually be really cool to offer that. Can I use the configuration bits you had for bce0 on my em0? And if I do, is there a way to set it up so I'm only being nice to that wireless router rather than the whole Big Bad Internet? Back to the original problem, however. I still have lost my tunnel. Here is the revised configuration from rc.conf: ifconfig_em0=3D"inet 50.250.218.161 netmask 255.255.255.240" ifconfig_em0_aliases=3D"inet 50.250.218.162 netmask 255.255.255.255" ifconfig_em0_aliases=3D"${ifconfig_em0_aliases} inet 50.250.218.163 netmask 255.255.255.255" ifconfig_em0_aliases=3D"${ifconfig_em0_aliases} inet 50.250.218.164 netmask 255.255.255.255" ifconfig_em0_aliases=3D"${ifconfig_em0_aliases} inet 50.250.218.165 netmask 255.255.255.255" ifconfig_em0_aliases=3D"${ifconfig_em0_aliases} inet 50.250.218.166 netmask 255.255.255.255" ifconfig_em0_aliases=3D"${ifconfig_em0_aliases} inet 50.250.218.167 netmask 255.255.255.255" ifconfig_em0_aliases=3D"${ifconfig_em0_aliases} inet 50.250.218.168 netmask 255.255.255.255" ifconfig_em0_aliases=3D"${ifconfig_em0_aliases} inet 50.250.218.169 netmask 255.255.255.255" ifconfig_em0_aliases=3D"${ifconfig_em0_aliases} inet 50.250.218.170 netmask 255.255.255.255" ifconfig_em0_aliases=3D"${ifconfig_em0_aliases} inet 50.250.218.171 netmask 255.255.255.255" ifconfig_em0_aliases=3D"${ifconfig_em0_aliases} inet 50.250.218.172 netmask 255.255.255.255" defaultrouter=3D"50.250.218.174" #ipv6_enable=3D"YES" (apparently deprecated) ipv6_activate_all_interfaces=3D"YES" # IPv6-over-IPv4 tunnel supplied by he.net; ID 258129 V6TUNNUM=3D"2001:470:66:119" V6NETNUM=3D"2001:470:67:119" V4TUNSERVER=3D"64.62.134.130" V4TUNCLIENT=3D"50.250.218.161" V6TUNSERVER=3D"${V6TUNNUM}::1" V6TUNCLIENT=3D"${V6TUNNUM}::2" ipv6_network_interfaces=3D"em0" #gif_interfaces=3D"gif0" (apparently deprecated) cloned_interfaces=3D"gif0" gifconfig_gif0=3D"${V4TUNCLIENT} ${V4TUNSERVER}" ipv6_ifconfig_gif0=3D"inet6 ${V6TUNCLIENT} ${V6TUNSERVER} prefixlen 128" ipv6_defaultrouter=3D"${V6TUNSERVER}" # I don't have a LAN, but this would route on my LAN #ipv6_gateway_enable=3D"YES" #rtadvd_enable=3D"YES" #rtadvd_interfaces=3D"em0" # Interfaces rtadvd sends RA packets. # all the other addresses ifconfig_em0_ipv6=3D"inet6 ${V6NETNUM}::2 prefixlen 64" ifconfig_em0_aliases=3D"${ifconfig_em0_aliases} inet6 ${V6NETNUM}::3 prefixlen 64" ifconfig_em0_aliases=3D"${ifconfig_em0_aliases} inet6 ${V6NETNUM}::4 prefixlen 64" ifconfig_em0_aliases=3D"${ifconfig_em0_aliases} inet6 ${V6NETNUM}::5 prefixlen 64" ifconfig_em0_aliases=3D"${ifconfig_em0_aliases} inet6 ${V6NETNUM}::6 prefixlen 64" ifconfig_em0_aliases=3D"${ifconfig_em0_aliases} inet6 ${V6NETNUM}::7 prefixlen 64" ifconfig_em0_aliases=3D"${ifconfig_em0_aliases} inet6 ${V6NETNUM}::8 prefixlen 64" ifconfig_em0_aliases=3D"${ifconfig_em0_aliases} inet6 ${V6NETNUM}::9 prefixlen 64" ifconfig_em0_aliases=3D"${ifconfig_em0_aliases} inet6 ${V6NETNUM}::10 prefixlen 64" ifconfig_em0_aliases=3D"${ifconfig_em0_aliases} inet6 ${V6NETNUM}::11 prefixlen 64" ifconfig_em0_aliases=3D"${ifconfig_em0_aliases} inet6 ${V6NETNUM}::12 prefixlen 64" ifconfig_em0_aliases=3D"${ifconfig_em0_aliases} inet6 ${V6NETNUM}::13 prefixlen 64" ifconfig_em0_aliases=3D"${ifconfig_em0_aliases} inet6 ${V6NETNUM}::14 prefixlen 64" It works except for the tunnel: em0: flags=3D8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500 options=3D4019b<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM,T= SO4,VLAN_HWTSO> ether 44:39:c4:3a:d7:ea inet 50.250.218.161 netmask 0xfffffff0 broadcast 50.250.218.175=20 inet6 fe80::4639:c4ff:fe3a:d7ea%em0 prefixlen 64 scopeid 0x1=20 inet6 2001:470:67:119::2 prefixlen 64=20 inet 50.250.218.162 netmask 0xffffffff broadcast 50.250.218.162=20 inet 50.250.218.163 netmask 0xffffffff broadcast 50.250.218.163=20 inet 50.250.218.164 netmask 0xffffffff broadcast 50.250.218.164=20 inet 50.250.218.165 netmask 0xffffffff broadcast 50.250.218.165=20 inet 50.250.218.166 netmask 0xffffffff broadcast 50.250.218.166=20 inet 50.250.218.167 netmask 0xffffffff broadcast 50.250.218.167=20 inet 50.250.218.168 netmask 0xffffffff broadcast 50.250.218.168=20 inet 50.250.218.169 netmask 0xffffffff broadcast 50.250.218.169=20 inet 50.250.218.170 netmask 0xffffffff broadcast 50.250.218.170=20 inet 50.250.218.171 netmask 0xffffffff broadcast 50.250.218.171=20 inet 50.250.218.172 netmask 0xffffffff broadcast 50.250.218.172=20 inet6 2001:470:67:119::3 prefixlen 64=20 inet6 2001:470:67:119::4 prefixlen 64=20 inet6 2001:470:67:119::5 prefixlen 64=20 inet6 2001:470:67:119::6 prefixlen 64=20 inet6 2001:470:67:119::7 prefixlen 64=20 inet6 2001:470:67:119::8 prefixlen 64=20 inet6 2001:470:67:119::9 prefixlen 64=20 inet6 2001:470:67:119::10 prefixlen 64=20 inet6 2001:470:67:119::11 prefixlen 64=20 inet6 2001:470:67:119::12 prefixlen 64=20 inet6 2001:470:67:119::13 prefixlen 64=20 inet6 2001:470:67:119::14 prefixlen 64=20 nd6 options=3D21<PERFORMNUD,AUTO_LINKLOCAL> media: Ethernet autoselect (1000baseT <full-duplex>) status: active lo0: flags=3D8049<UP,LOOPBACK,RUNNING,MULTICAST> metric 0 mtu 16384 options=3D600003<RXCSUM,TXCSUM,RXCSUM_IPV6,TXCSUM_IPV6> inet6 ::1 prefixlen 128=20 inet6 fe80::1%lo0 prefixlen 64 scopeid 0x2=20 inet 127.0.0.1 netmask 0xff000000=20 nd6 options=3D21<PERFORMNUD,AUTO_LINKLOCAL> gif0: flags=3D8011<UP,POINTOPOINT,MULTICAST> metric 0 mtu 1280 inet6 fe80::4639:c4ff:fe3a:d7ea%gif0 prefixlen 64 scopeid 0x3=20 nd6 options=3D21<PERFORMNUD,AUTO_LINKLOCAL> No endpoints are listed for gif0 and while I can ping my original IPv6 address and its aliases.... home# for i in $(gseq 2 14) do ping6 -c 3 "2001:470:67:119::${i}" done PING6(56=3D40+8+8 bytes) 2001:470:67:119::2 --> 2001:470:67:119::2 16 bytes from 2001:470:67:119::2, icmp_seq=3D0 hlim=3D64 time=3D0.048 ms 16 bytes from 2001:470:67:119::2, icmp_seq=3D1 hlim=3D64 time=3D0.044 ms 16 bytes from 2001:470:67:119::2, icmp_seq=3D2 hlim=3D64 time=3D0.049 ms --- 2001:470:67:119::2 ping6 statistics --- 3 packets transmitted, 3 packets received, 0.0% packet loss round-trip min/avg/max/std-dev =3D 0.044/0.047/0.049/0.002 ms PING6(56=3D40+8+8 bytes) 2001:470:67:119::3 --> 2001:470:67:119::3 16 bytes from 2001:470:67:119::3, icmp_seq=3D0 hlim=3D64 time=3D0.046 ms 16 bytes from 2001:470:67:119::3, icmp_seq=3D1 hlim=3D64 time=3D0.046 ms 16 bytes from 2001:470:67:119::3, icmp_seq=3D2 hlim=3D64 time=3D0.048 ms --- 2001:470:67:119::3 ping6 statistics --- 3 packets transmitted, 3 packets received, 0.0% packet loss round-trip min/avg/max/std-dev =3D 0.046/0.047/0.048/0.001 ms PING6(56=3D40+8+8 bytes) 2001:470:67:119::4 --> 2001:470:67:119::4 16 bytes from 2001:470:67:119::4, icmp_seq=3D0 hlim=3D64 time=3D0.053 ms 16 bytes from 2001:470:67:119::4, icmp_seq=3D1 hlim=3D64 time=3D0.059 ms 16 bytes from 2001:470:67:119::4, icmp_seq=3D2 hlim=3D64 time=3D0.070 ms --- 2001:470:67:119::4 ping6 statistics --- 3 packets transmitted, 3 packets received, 0.0% packet loss round-trip min/avg/max/std-dev =3D 0.053/0.061/0.070/0.007 ms PING6(56=3D40+8+8 bytes) 2001:470:67:119::5 --> 2001:470:67:119::5 16 bytes from 2001:470:67:119::5, icmp_seq=3D0 hlim=3D64 time=3D0.069 ms 16 bytes from 2001:470:67:119::5, icmp_seq=3D1 hlim=3D64 time=3D0.068 ms 16 bytes from 2001:470:67:119::5, icmp_seq=3D2 hlim=3D64 time=3D0.075 ms --- 2001:470:67:119::5 ping6 statistics --- 3 packets transmitted, 3 packets received, 0.0% packet loss round-trip min/avg/max/std-dev =3D 0.068/0.071/0.075/0.003 ms PING6(56=3D40+8+8 bytes) 2001:470:67:119::6 --> 2001:470:67:119::6 16 bytes from 2001:470:67:119::6, icmp_seq=3D0 hlim=3D64 time=3D0.073 ms 16 bytes from 2001:470:67:119::6, icmp_seq=3D1 hlim=3D64 time=3D0.092 ms 16 bytes from 2001:470:67:119::6, icmp_seq=3D2 hlim=3D64 time=3D0.078 ms --- 2001:470:67:119::6 ping6 statistics --- 3 packets transmitted, 3 packets received, 0.0% packet loss round-trip min/avg/max/std-dev =3D 0.073/0.081/0.092/0.008 ms PING6(56=3D40+8+8 bytes) 2001:470:67:119::7 --> 2001:470:67:119::7 16 bytes from 2001:470:67:119::7, icmp_seq=3D0 hlim=3D64 time=3D0.088 ms 16 bytes from 2001:470:67:119::7, icmp_seq=3D1 hlim=3D64 time=3D0.068 ms 16 bytes from 2001:470:67:119::7, icmp_seq=3D2 hlim=3D64 time=3D0.064 ms --- 2001:470:67:119::7 ping6 statistics --- 3 packets transmitted, 3 packets received, 0.0% packet loss round-trip min/avg/max/std-dev =3D 0.064/0.073/0.088/0.010 ms PING6(56=3D40+8+8 bytes) 2001:470:67:119::8 --> 2001:470:67:119::8 16 bytes from 2001:470:67:119::8, icmp_seq=3D0 hlim=3D64 time=3D0.072 ms 16 bytes from 2001:470:67:119::8, icmp_seq=3D1 hlim=3D64 time=3D0.062 ms 16 bytes from 2001:470:67:119::8, icmp_seq=3D2 hlim=3D64 time=3D0.064 ms --- 2001:470:67:119::8 ping6 statistics --- 3 packets transmitted, 3 packets received, 0.0% packet loss round-trip min/avg/max/std-dev =3D 0.062/0.066/0.072/0.004 ms PING6(56=3D40+8+8 bytes) 2001:470:67:119::9 --> 2001:470:67:119::9 16 bytes from 2001:470:67:119::9, icmp_seq=3D0 hlim=3D64 time=3D0.070 ms 16 bytes from 2001:470:67:119::9, icmp_seq=3D1 hlim=3D64 time=3D0.053 ms 16 bytes from 2001:470:67:119::9, icmp_seq=3D2 hlim=3D64 time=3D0.058 ms --- 2001:470:67:119::9 ping6 statistics --- 3 packets transmitted, 3 packets received, 0.0% packet loss round-trip min/avg/max/std-dev =3D 0.053/0.060/0.070/0.007 ms PING6(56=3D40+8+8 bytes) 2001:470:67:119::10 --> 2001:470:67:119::10 16 bytes from 2001:470:67:119::10, icmp_seq=3D0 hlim=3D64 time=3D0.057 ms 16 bytes from 2001:470:67:119::10, icmp_seq=3D1 hlim=3D64 time=3D0.070 ms 16 bytes from 2001:470:67:119::10, icmp_seq=3D2 hlim=3D64 time=3D0.041 ms --- 2001:470:67:119::10 ping6 statistics --- 3 packets transmitted, 3 packets received, 0.0% packet loss round-trip min/avg/max/std-dev =3D 0.041/0.056/0.070/0.012 ms PING6(56=3D40+8+8 bytes) 2001:470:67:119::11 --> 2001:470:67:119::11 16 bytes from 2001:470:67:119::11, icmp_seq=3D0 hlim=3D64 time=3D0.042 ms 16 bytes from 2001:470:67:119::11, icmp_seq=3D1 hlim=3D64 time=3D0.044 ms 16 bytes from 2001:470:67:119::11, icmp_seq=3D2 hlim=3D64 time=3D0.049 ms --- 2001:470:67:119::11 ping6 statistics --- 3 packets transmitted, 3 packets received, 0.0% packet loss round-trip min/avg/max/std-dev =3D 0.042/0.045/0.049/0.003 ms PING6(56=3D40+8+8 bytes) 2001:470:67:119::12 --> 2001:470:67:119::12 16 bytes from 2001:470:67:119::12, icmp_seq=3D0 hlim=3D64 time=3D0.054 ms 16 bytes from 2001:470:67:119::12, icmp_seq=3D1 hlim=3D64 time=3D0.062 ms 16 bytes from 2001:470:67:119::12, icmp_seq=3D2 hlim=3D64 time=3D0.051 ms --- 2001:470:67:119::12 ping6 statistics --- 3 packets transmitted, 3 packets received, 0.0% packet loss round-trip min/avg/max/std-dev =3D 0.051/0.056/0.062/0.005 ms PING6(56=3D40+8+8 bytes) 2001:470:67:119::13 --> 2001:470:67:119::13 16 bytes from 2001:470:67:119::13, icmp_seq=3D0 hlim=3D64 time=3D0.058 ms 16 bytes from 2001:470:67:119::13, icmp_seq=3D1 hlim=3D64 time=3D0.057 ms 16 bytes from 2001:470:67:119::13, icmp_seq=3D2 hlim=3D64 time=3D0.059 ms --- 2001:470:67:119::13 ping6 statistics --- 3 packets transmitted, 3 packets received, 0.0% packet loss round-trip min/avg/max/std-dev =3D 0.057/0.058/0.059/0.001 ms PING6(56=3D40+8+8 bytes) 2001:470:67:119::14 --> 2001:470:67:119::14 16 bytes from 2001:470:67:119::14, icmp_seq=3D0 hlim=3D64 time=3D0.066 ms 16 bytes from 2001:470:67:119::14, icmp_seq=3D1 hlim=3D64 time=3D0.076 ms 16 bytes from 2001:470:67:119::14, icmp_seq=3D2 hlim=3D64 time=3D0.068 ms --- 2001:470:67:119::14 ping6 statistics --- 3 packets transmitted, 3 packets received, 0.0% packet loss round-trip min/avg/max/std-dev =3D 0.066/0.070/0.076/0.004 ms I cannot ping the tunnel endpoints: home# for i in $(gseq 1 2)=20 do ping6 -c 3 "2001:470:66:119::${i}" done ping6: UDP connect: No route to host ping6: UDP connect: No route to host There's no IPv6 default route, which I suppose makes sense given that gif0 seems not to be up: home# netstat -rn Routing tables Internet: Destination Gateway Flags Netif Expire default 50.250.218.174 UGS em0 50.250.218.160/28 link#1 U em0 50.250.218.161 link#1 UHS lo0 50.250.218.162 link#1 UHS lo0 50.250.218.162/32 link#1 U em0 50.250.218.163 link#1 UHS lo0 50.250.218.163/32 link#1 U em0 50.250.218.164 link#1 UHS lo0 50.250.218.164/32 link#1 U em0 50.250.218.165 link#1 UHS lo0 50.250.218.165/32 link#1 U em0 50.250.218.166 link#1 UHS lo0 50.250.218.166/32 link#1 U em0 50.250.218.167 link#1 UHS lo0 50.250.218.167/32 link#1 U em0 50.250.218.168 link#1 UHS lo0 50.250.218.168/32 link#1 U em0 50.250.218.169 link#1 UHS lo0 50.250.218.169/32 link#1 U em0 50.250.218.170 link#1 UHS lo0 50.250.218.170/32 link#1 U em0 50.250.218.171 link#1 UHS lo0 50.250.218.171/32 link#1 U em0 50.250.218.172 link#1 UHS lo0 50.250.218.172/32 link#1 U em0 127.0.0.1 link#2 UH lo0 Internet6: Destination Gateway Flags Netif Expire ::/96 ::1 UGRS lo0 ::1 link#2 UH lo0 ::ffff:0.0.0.0/96 ::1 UGRS lo0 2001:470:67:119::/64 link#1 U em0 2001:470:67:119::2 link#1 UHS lo0 2001:470:67:119::3 link#1 UHS lo0 2001:470:67:119::4 link#1 UHS lo0 2001:470:67:119::5 link#1 UHS lo0 2001:470:67:119::6 link#1 UHS lo0 2001:470:67:119::7 link#1 UHS lo0 2001:470:67:119::8 link#1 UHS lo0 2001:470:67:119::9 link#1 UHS lo0 2001:470:67:119::10 link#1 UHS lo0 2001:470:67:119::11 link#1 UHS lo0 2001:470:67:119::12 link#1 UHS lo0 2001:470:67:119::13 link#1 UHS lo0 2001:470:67:119::14 link#1 UHS lo0 fe80::/10 ::1 UGRS lo0 fe80::/64 link#1 U em0 fe80::4639:c4ff:fe3a:d7ea link#1 UHS lo0 fe80::/64 link#2 U lo0 fe80::1 link#2 UHS lo0 fe80::/64 link#3 U gif0 fe80::4639:c4ff:fe3a:d7ea link#3 UHS lo0 ff01::/32 fe80::4639:c4ff:fe3a:d7ea U em0 ff01::/32 ::1 U lo0 ff01::/32 fe80::4639:c4ff:fe3a:d7ea U gif0 ff02::/16 ::1 UGRS lo0 ff02::/32 fe80::4639:c4ff:fe3a:d7ea U em0 ff02::/32 ::1 U lo0 ff02::/32 fe80::4639:c4ff:fe3a:d7ea U gif0 What did I miss? Thanks! --=20 David Benfell <benfell@parts-unknown.org> See https://parts-unknown.org/node/2 if you don't understand the attachment. --Nq2Wo0NMKNjxTN9z Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCgAGBQJT4wy2AAoJEBV64x4SNmArUGMP/0237ciqWoW8XKhUKRvOPssd yEH7Pk6UKh9DOG1ESqisDjhUX1+W8/AG2+ezPoq4G2pyOujeARpo/76pAgUZFpzU Aj4kYGc4iIUcM40aN0/38yUQGWuuIqtYpzFBgjSNltTsnLowBlv4eiUVvv7cbDNy isE1P/prGKhuwrXvWZYruvZmkcpEl60tZMhIkzXPx3FvVA+5rKdClZcv9yykTdY1 6rP0yJnz/DXdCEQc3e/13RTxqnT99GiEfrfaagZDC3hdo0IW3cvS3pJ6kXvIYiVY K5HjLjnnf0c/N+cLmJq8eWtYWuKYx/YN//Hd20nCXSPweYwMA0EHlKVqhW9LQHSL xtQ9yYFbQT3qmndNz3PYBjP0eUhfhv/56DFaFnKSBuUq/i/gt44FmNvzDWQNsdGq 9LjLIn3fBc7KQnOODPCoNS14DgG2NUN5IVImxVmlpctUhk5cBoYVHr/UmAD/a7ss RUokwXR1tAo/zj31am+lIx34uX6+Gw403CzOARoUV1MghyQ4x+a+fqjOX8b2Puej RvyfozrtIYg7198DnsY7MRGr7pRRdGrXKmofVzg73zUY81z6eno1pLNz0nXMOrIs 5FHMF8YZIEg0Xt/vh5EUFt4H98vmRyLryB/9vqxw8eRjwg69rpSud6VLFKP8aNvS iULSQlqVArNRaz0DtWEW =3zH9 -----END PGP SIGNATURE----- --Nq2Wo0NMKNjxTN9z--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20140807052054.GA1791>