From owner-freebsd-questions@freebsd.org Wed Jul 8 18:38:23 2015 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 6D905995C58 for ; Wed, 8 Jul 2015 18:38:23 +0000 (UTC) (envelope-from idefix@fechner.net) Received: from anny.lostinspace.de (anny.lostinspace.de [IPv6:2a01:138:a006::2]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 2534218BE for ; Wed, 8 Jul 2015 18:38:23 +0000 (UTC) (envelope-from idefix@fechner.net) Received: from server.idefix.lan (aftr-88-217-181-87.dynamic.mnet-online.de [88.217.181.87]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: idefix@fechner.net) by anny.lostinspace.de (Postfix) with ESMTPSA id 312D483B3E for ; Wed, 8 Jul 2015 20:38:19 +0200 (CEST) DMARC-Filter: OpenDMARC Filter v1.3.1 anny.lostinspace.de 312D483B3E Authentication-Results: anny.lostinspace.de; dmarc=none header.from=fechner.net DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=fechner.net; s=default; t=1436380699; bh=m0U+s6Oi8yRwFZzihWLL0oSOkxDrJSiCgUHQS9egfcE=; h=Date:From:To:Subject; b=g69N3i1/mbPPzanTLzCQdYacdIJL/p3HoIHrAYQR1Yq5w/UgIJT7aZiUg8yqWmblH pfgg4LMLhB/zkBVb83ij+DrH90WJ8I4Pi7c39QitE8l9QJyMGFn/Rtl6DnkHdLRXUA ovCM+AUCnvlA/FGgs6OTsvwCO3kIgzO8mobni4dU= Received: from server.idefix.lan (localhost [IPv6:::1]) by server.idefix.lan (Postfix) with ESMTP id D43109205 for ; Wed, 8 Jul 2015 20:38:18 +0200 (CEST) X-Virus-Scanned: amavisd-new at fechner.net Received: from server.idefix.lan ([127.0.0.1]) by server.idefix.lan (server.idefix.lan [127.0.0.1]) (amavisd-new, port 10024) with LMTP id hoLVEzQiyS9C for ; Wed, 8 Jul 2015 20:38:17 +0200 (CEST) Received: from [192.168.0.33] (aftr-88-217-181-87.dynamic.mnet-online.de [88.217.181.87]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by server.idefix.lan (Postfix) with ESMTPSA id 8114391F9 for ; Wed, 8 Jul 2015 20:38:17 +0200 (CEST) Message-ID: <559D6E16.3020305@fechner.net> Date: Wed, 08 Jul 2015 20:38:14 +0200 From: Matthias Fechner User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:31.0) Gecko/20100101 Thunderbird/31.4.0 MIME-Version: 1.0 To: freebsd-questions@freebsd.org Subject: IPv6 prefix delegation over a freebsd router that sits between internet router and local network X-Enigmail-Version: 1.6 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 08 Jul 2015 18:38:23 -0000 Dear all, I have a problem with IPv6 configuration and I'm not sure if it is even possible. I'm using an internet connection from mnet (a German internet provider). The fritzbox 7490 will get an /56 IPv6 prefix that changes every 24 hours. Behind the fritzbox I have a FreeBSD router with two network interfaces. Internet | Fritzbox 7490 internet interface Fritzbox 7490 local interface | Freebsd interface re0 Freebsd interface em0 | Internal lan The network interface in the fritzbox is configured to forward the prefix. If I check the interfaces the re0 (interface to fritzbox) is getting an ipv6 address and I can ping6 from the freebsd machine without problems. But if I try to to ping from a computer in "Internal lan" it fails. The internal pc resolves the hostname to ipv6 adress but the freebsd machine shows in /var/log/messages: Jul 8 20:33:01 server kernel: cannot forward src fe80:1::88d:dbdc:2c49:ac3a, dst , nxt 58, rcvif em0, outif re0 So I think I have to forward the delegated prefix to the internal network. Could maybe anyone point me into the right direction what I have to configure/read to continue with the setup? Thanks Matthias -- "Programming today is a race between software engineers striving to build bigger and better idiot-proof programs, and the universe trying to produce bigger and better idiots. So far, the universe is winning." -- Rich Cook