Wednesday, August 19, 2009

Dabbling With IPv6

I'm experimenting with IPv6 tunnels and got my first one working today. There's a reason for doing this but I'll explain that another time. To gain access to the IPv6 universe, I created an account at tunnelbroker.net and created a basic tunnel.

I added the following to /etc/network/interfaces.
auto he-ipv6
iface he-ipv6 inet6 v4tunnel
endpoint 216.66.38.58
local 206.248.172.224
ttl 255
address 2001:470:1c:137::2
netmask 64
mtu 1480
up ip route add default via 2001:470:1c:137::1 dev he-ipv6
This configuration will ensure the tunnel will be initialized when the system boots.

I also installed shorewall6 so that I can firewall the IPv6 connections. Shorewall's approach to IPv6 firewalling is to make it a completely separate system from the IPv4 firewall. Fortunately I've had lots of practice with shorewall so it didn't take too long to get a minimal configuration setup.

At this point I can ping and connect to IPv6 hosts but I cannot ping my IPv6 address using an online tool. Next step is the real reason for this experiment.

No comments:

Post a Comment