IPV6 routing issue: building a router extender
Clash Royale CLAN TAG#URR8PPP
up vote
0
down vote
favorite
I trying to configure a Linux Debian home router to extend the service from my cable company.
IPv4 NAT using iptables is very simple, well documented and is not presented here.
I'm not using ip6tables for the IPV6 side.
I'm sure that I'm missing a route but... which one?
(addresses redacted to use 2001:DB8: prefix)
diagram:
Vendor gateway address 2001:DB8:ed00::1/56
Public eth1 2001:DB8:ed00::
Private eth0 2001:DB8:ed01::
+--
+---------+ +------------+ | +---------+
| ROUTER | |home router | | | windows |
| cable |<------>|ETH1 ETH0 |<------> +---+ test box|
| vendor | | | | | |
+---------+ +------------+ | +---------+
+--
home router:
sysctl -w net.ipv6.conf.all.forwarding=1
# add a public ipv6 address on the PRIVATE Network
ip -6 address add 2001:DB8:ed01::20/64 dev eth0
# just for consistency, not strictly required
ip -6 address add 2001:DB8:ed00::20/64 dev eth1
windows test device
netsh int ipv6 add add "intranet" 2001:DB8:ed01::30/64
netsh int ipv6 add rou ::/0 "Intranet" 2001:DB8:ed00::20
tests:
home router
From the router, I can ping the windows box
ping 2001:DB8:ed01::30
PING 2001:DB8:ed01::30(2001:DB8:ed01::30) 56 data bytes
64 bytes from 2001:DB8:ed01::40: icmp_seq=1 ttl=128 time=0.411 ms
....
and google:
ping6 ipv6.google.com
PING ipv6.google.com(mia07s48-in-x0e.1e100.net) 56 data bytes
64 bytes from mia07s48-in-x0e.1e100.net: icmp_seq=1 ttl=54 time=42.5 ms
....
windows
From the windows test device I can ping both, the public and private router interface:
ping 2001:DB8:ed01::20
Pinging 2001:DB8:ed01::20 with 32 bytes of data:
Reply from 2001:DB8:ed01::20: time<1ms
...
ping 2001:DB8:ed00::20
Pinging 2001:DB8:ed00::20 with 32 bytes of data:
Reply from 2001:DB8:ed00::20: time<1ms
...
However, when trying:
ping 2607:f8b0:4008:802::200e
Pinging 2607:f8b0:4008:802::200e with 32 bytes of data:
Request timed out.
Request timed out.
or on google:
tracert 2607:f8b0:4008:802::200e
Tracing route to mia07s48-in-x0e.1e100.net [2607:f8b0:4008:802::200e]
over a maximum of 30 hops:
1 * * * Request timed out.
2 ^C
Ping statistics for 2607:f8b0:4008:802::200e:
Packets: Sent = 2, Received = 0, Lost = 2 (100% loss)
linux debian networking ipv6
asked Aug 8 at 21:45
fcm
15710
add a comment |Â
up vote
0
down vote
favorite
I trying to configure a Linux Debian home router to extend the service from my cable company.
IPv4 NAT using iptables is very simple, well documented and is not presented here.
I'm not using ip6tables for the IPV6 side.
I'm sure that I'm missing a route but... which one?
(addresses redacted to use 2001:DB8: prefix)
diagram:
Vendor gateway address 2001:DB8:ed00::1/56
Public eth1 2001:DB8:ed00::
Private eth0 2001:DB8:ed01::
+--
+---------+ +------------+ | +---------+
| ROUTER | |home router | | | windows |
| cable |<------>|ETH1 ETH0 |<------> +---+ test box|
| vendor | | | | | |
+---------+ +------------+ | +---------+
+--
home router:
sysctl -w net.ipv6.conf.all.forwarding=1
# add a public ipv6 address on the PRIVATE Network
ip -6 address add 2001:DB8:ed01::20/64 dev eth0
# just for consistency, not strictly required
ip -6 address add 2001:DB8:ed00::20/64 dev eth1
windows test device
netsh int ipv6 add add "intranet" 2001:DB8:ed01::30/64
netsh int ipv6 add rou ::/0 "Intranet" 2001:DB8:ed00::20
tests:
home router
From the router, I can ping the windows box
ping 2001:DB8:ed01::30
PING 2001:DB8:ed01::30(2001:DB8:ed01::30) 56 data bytes
64 bytes from 2001:DB8:ed01::40: icmp_seq=1 ttl=128 time=0.411 ms
....
and google:
ping6 ipv6.google.com
PING ipv6.google.com(mia07s48-in-x0e.1e100.net) 56 data bytes
64 bytes from mia07s48-in-x0e.1e100.net: icmp_seq=1 ttl=54 time=42.5 ms
....
windows
From the windows test device I can ping both, the public and private router interface:
ping 2001:DB8:ed01::20
Pinging 2001:DB8:ed01::20 with 32 bytes of data:
Reply from 2001:DB8:ed01::20: time<1ms
...
ping 2001:DB8:ed00::20
Pinging 2001:DB8:ed00::20 with 32 bytes of data:
Reply from 2001:DB8:ed00::20: time<1ms
...
However, when trying:
ping 2607:f8b0:4008:802::200e
Pinging 2607:f8b0:4008:802::200e with 32 bytes of data:
Request timed out.
Request timed out.
or on google:
tracert 2607:f8b0:4008:802::200e
Tracing route to mia07s48-in-x0e.1e100.net [2607:f8b0:4008:802::200e]
over a maximum of 30 hops:
1 * * * Request timed out.
2 ^C
Ping statistics for 2607:f8b0:4008:802::200e:
Packets: Sent = 2, Received = 0, Lost = 2 (100% loss)
linux debian networking ipv6
asked Aug 8 at 21:45
fcm
15710
1
you should check that your isp allows this: if the ISP's router doesn't care about router advertisements (you have to run radvd by the way, so you don't need to add a route command on windows) and can't be configured to know about 2001:DB8:ed01::/64 's gateway, you're stuck. there's still bridging or tinkering with ndppd
– A.B
Aug 8 at 22:13
1
You're supposed to get your prefix using DHCPv6-PD.
– Michael Hampton
Aug 9 at 13:09
My ISP offer a /56 prefix so, I have plenty of space to create internal sub networks. After finish testing, I will run radvd on the 'private' interface. My issue is that the route from 'windows test' to the public net (and vise versa)is not working, somehow, I need to (a) tell the ISP router where to find 2001:DB8:ed01::/64 or (b) teach the 'home router' how to handle them.
– fcm
Aug 9 at 14:11
add a comment |Â
up vote
0
down vote
favorite
up vote
0
down vote
favorite
I trying to configure a Linux Debian home router to extend the service from my cable company.
IPv4 NAT using iptables is very simple, well documented and is not presented here.
I'm not using ip6tables for the IPV6 side.
I'm sure that I'm missing a route but... which one?
(addresses redacted to use 2001:DB8: prefix)
diagram:
Vendor gateway address 2001:DB8:ed00::1/56
Public eth1 2001:DB8:ed00::
Private eth0 2001:DB8:ed01::
+--
+---------+ +------------+ | +---------+
| ROUTER | |home router | | | windows |
| cable |<------>|ETH1 ETH0 |<------> +---+ test box|
| vendor | | | | | |
+---------+ +------------+ | +---------+
+--
home router:
sysctl -w net.ipv6.conf.all.forwarding=1
# add a public ipv6 address on the PRIVATE Network
ip -6 address add 2001:DB8:ed01::20/64 dev eth0
# just for consistency, not strictly required
ip -6 address add 2001:DB8:ed00::20/64 dev eth1
windows test device
netsh int ipv6 add add "intranet" 2001:DB8:ed01::30/64
netsh int ipv6 add rou ::/0 "Intranet" 2001:DB8:ed00::20
tests:
home router
From the router, I can ping the windows box
ping 2001:DB8:ed01::30
PING 2001:DB8:ed01::30(2001:DB8:ed01::30) 56 data bytes
64 bytes from 2001:DB8:ed01::40: icmp_seq=1 ttl=128 time=0.411 ms
....
and google:
ping6 ipv6.google.com
PING ipv6.google.com(mia07s48-in-x0e.1e100.net) 56 data bytes
64 bytes from mia07s48-in-x0e.1e100.net: icmp_seq=1 ttl=54 time=42.5 ms
....
windows
From the windows test device I can ping both, the public and private router interface:
ping 2001:DB8:ed01::20
Pinging 2001:DB8:ed01::20 with 32 bytes of data:
Reply from 2001:DB8:ed01::20: time<1ms
...
ping 2001:DB8:ed00::20
Pinging 2001:DB8:ed00::20 with 32 bytes of data:
Reply from 2001:DB8:ed00::20: time<1ms
...
However, when trying:
ping 2607:f8b0:4008:802::200e
Pinging 2607:f8b0:4008:802::200e with 32 bytes of data:
Request timed out.
Request timed out.
or on google:
tracert 2607:f8b0:4008:802::200e
Tracing route to mia07s48-in-x0e.1e100.net [2607:f8b0:4008:802::200e]
over a maximum of 30 hops:
1 * * * Request timed out.
2 ^C
Ping statistics for 2607:f8b0:4008:802::200e:
Packets: Sent = 2, Received = 0, Lost = 2 (100% loss)
linux debian networking ipv6
asked Aug 8 at 21:45
fcm
15710
I trying to configure a Linux Debian home router to extend the service from my cable company.
IPv4 NAT using iptables is very simple, well documented and is not presented here.
I'm not using ip6tables for the IPV6 side.
I'm sure that I'm missing a route but... which one?
(addresses redacted to use 2001:DB8: prefix)
diagram:
Vendor gateway address 2001:DB8:ed00::1/56
Public eth1 2001:DB8:ed00::
Private eth0 2001:DB8:ed01::
+--
+---------+ +------------+ | +---------+
| ROUTER | |home router | | | windows |
| cable |<------>|ETH1 ETH0 |<------> +---+ test box|
| vendor | | | | | |
+---------+ +------------+ | +---------+
+--
home router:
sysctl -w net.ipv6.conf.all.forwarding=1
# add a public ipv6 address on the PRIVATE Network
ip -6 address add 2001:DB8:ed01::20/64 dev eth0
# just for consistency, not strictly required
ip -6 address add 2001:DB8:ed00::20/64 dev eth1
windows test device
netsh int ipv6 add add "intranet" 2001:DB8:ed01::30/64
netsh int ipv6 add rou ::/0 "Intranet" 2001:DB8:ed00::20
tests:
home router
From the router, I can ping the windows box
ping 2001:DB8:ed01::30
PING 2001:DB8:ed01::30(2001:DB8:ed01::30) 56 data bytes
64 bytes from 2001:DB8:ed01::40: icmp_seq=1 ttl=128 time=0.411 ms
....
and google:
ping6 ipv6.google.com
PING ipv6.google.com(mia07s48-in-x0e.1e100.net) 56 data bytes
64 bytes from mia07s48-in-x0e.1e100.net: icmp_seq=1 ttl=54 time=42.5 ms
....
windows
From the windows test device I can ping both, the public and private router interface:
ping 2001:DB8:ed01::20
Pinging 2001:DB8:ed01::20 with 32 bytes of data:
Reply from 2001:DB8:ed01::20: time<1ms
...
ping 2001:DB8:ed00::20
Pinging 2001:DB8:ed00::20 with 32 bytes of data:
Reply from 2001:DB8:ed00::20: time<1ms
...
However, when trying:
ping 2607:f8b0:4008:802::200e
Pinging 2607:f8b0:4008:802::200e with 32 bytes of data:
Request timed out.
Request timed out.
or on google:
tracert 2607:f8b0:4008:802::200e
Tracing route to mia07s48-in-x0e.1e100.net [2607:f8b0:4008:802::200e]
over a maximum of 30 hops:
1 * * * Request timed out.
2 ^C
Ping statistics for 2607:f8b0:4008:802::200e:
Packets: Sent = 2, Received = 0, Lost = 2 (100% loss)
linux debian networking ipv6
linux debian networking ipv6
asked Aug 8 at 21:45
fcm
15710
asked Aug 8 at 21:45
fcm
15710
asked Aug 8 at 21:45
fcm
15710
asked Aug 8 at 21:45
fcm
15710
asked Aug 8 at 21:45
fcm
15710
15710
1
you should check that your isp allows this: if the ISP's router doesn't care about router advertisements (you have to run radvd by the way, so you don't need to add a route command on windows) and can't be configured to know about 2001:DB8:ed01::/64 's gateway, you're stuck. there's still bridging or tinkering with ndppd
– A.B
Aug 8 at 22:13
1
You're supposed to get your prefix using DHCPv6-PD.
– Michael Hampton
Aug 9 at 13:09
My ISP offer a /56 prefix so, I have plenty of space to create internal sub networks. After finish testing, I will run radvd on the 'private' interface. My issue is that the route from 'windows test' to the public net (and vise versa)is not working, somehow, I need to (a) tell the ISP router where to find 2001:DB8:ed01::/64 or (b) teach the 'home router' how to handle them.
– fcm
Aug 9 at 14:11
add a comment |Â
1
you should check that your isp allows this: if the ISP's router doesn't care about router advertisements (you have to run radvd by the way, so you don't need to add a route command on windows) and can't be configured to know about 2001:DB8:ed01::/64 's gateway, you're stuck. there's still bridging or tinkering with ndppd
– A.B
Aug 8 at 22:13
1
You're supposed to get your prefix using DHCPv6-PD.
– Michael Hampton
Aug 9 at 13:09
My ISP offer a /56 prefix so, I have plenty of space to create internal sub networks. After finish testing, I will run radvd on the 'private' interface. My issue is that the route from 'windows test' to the public net (and vise versa)is not working, somehow, I need to (a) tell the ISP router where to find 2001:DB8:ed01::/64 or (b) teach the 'home router' how to handle them.
– fcm
Aug 9 at 14:11
1
1
you should check that your isp allows this: if the ISP's router doesn't care about router advertisements (you have to run radvd by the way, so you don't need to add a route command on windows) and can't be configured to know about 2001:DB8:ed01::/64 's gateway, you're stuck. there's still bridging or tinkering with ndppd
– A.B
Aug 8 at 22:13
you should check that your isp allows this: if the ISP's router doesn't care about router advertisements (you have to run radvd by the way, so you don't need to add a route command on windows) and can't be configured to know about 2001:DB8:ed01::/64 's gateway, you're stuck. there's still bridging or tinkering with ndppd
– A.B
Aug 8 at 22:13
1
1
You're supposed to get your prefix using DHCPv6-PD.
– Michael Hampton
Aug 9 at 13:09
You're supposed to get your prefix using DHCPv6-PD.
– Michael Hampton
Aug 9 at 13:09
My ISP offer a /56 prefix so, I have plenty of space to create internal sub networks. After finish testing, I will run radvd on the 'private' interface. My issue is that the route from 'windows test' to the public net (and vise versa)is not working, somehow, I need to (a) tell the ISP router where to find 2001:DB8:ed01::/64 or (b) teach the 'home router' how to handle them.
– fcm
Aug 9 at 14:11
My ISP offer a /56 prefix so, I have plenty of space to create internal sub networks. After finish testing, I will run radvd on the 'private' interface. My issue is that the route from 'windows test' to the public net (and vise versa)is not working, somehow, I need to (a) tell the ISP router where to find 2001:DB8:ed01::/64 or (b) teach the 'home router' how to handle them.
– fcm
Aug 9 at 14:11
add a comment |Â
active
oldest
votes
active
oldest
votes
active
oldest
votes
active
oldest
votes
active
oldest
votes
Â
draft saved
draft discarded
Â
draft saved
draft discarded
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f461375%2fipv6-routing-issue-building-a-router-extender%23new-answer', 'question_page');
);
Post as a guest
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
1
you should check that your isp allows this: if the ISP's router doesn't care about router advertisements (you have to run radvd by the way, so you don't need to add a route command on windows) and can't be configured to know about 2001:DB8:ed01::/64 's gateway, you're stuck. there's still bridging or tinkering with ndppd
– A.B
Aug 8 at 22:13
1
You're supposed to get your prefix using DHCPv6-PD.
– Michael Hampton
Aug 9 at 13:09
My ISP offer a /56 prefix so, I have plenty of space to create internal sub networks. After finish testing, I will run radvd on the 'private' interface. My issue is that the route from 'windows test' to the public net (and vise versa)is not working, somehow, I need to (a) tell the ISP router where to find 2001:DB8:ed01::/64 or (b) teach the 'home router' how to handle them.
– fcm
Aug 9 at 14:11