|
How to configure subnet ?
![[ca]](/s/countries/ca.gif) Shadow Hawkins on Friday, 12 March 2010 08:32:40
The FAQ is broken - at least for me. I can't see any of the topics.
I have a working tunnel and a subnet allocation. I have a Fedora Core box with 2 NICs that acts as an IPv4 NAT gateway - eth1 is the local network.
I ran radvd on eth1 with the prefix I was given by sixxs, and my laptop on the local net generated itself a global IPv6 address using the prefix. But it would not route.
From previous experience with another tunnel broker, I suspected that I needed to create a global IPv6 address on eth1. Which I did, and it worked. But I don't know what address I am supposed to use - I just made one up in the same range as the laptop's. What is the correct procedure ?
Another issue was that sixxs allocated me a /48 subnet, but when I gave that to radvd, it said that only /64 was valid
A third issue - I have aiccu from my Linux distro - aiccu-2007.01.15-5.fc9.x86_64.
It installs with a sysinit start/stop script in /etc/init.d
"service aiccu start" seems to create a tunnel successfully. But then
"service aiccu status" says "aiccu dead but subsys locked", and aiccu is no longer running.
Is it supposed to be, or is it supposed to quit after creating the tunnel ?
How to configure subnet ?
[..] But it would not route.
Where are the routing tables? and of course, did you enable forwarding?
I suspected that I needed to create a global IPv6 address on eth1
This is indeed a weird thing, some combinations of kernel/OS/radvd don't need this, some don't. I tend to just force it, generally picking either <subnet>::1/64 or the EUI-64 address of the interface.
What is the correct procedure ?
What you did ;)
Another issue was that sixxs allocated me a /48 subnet, but when I gave that to radvd, it said that only /64 was valid
A /48 is 65536 /64's, thus, you'll have to pick one of them ;)
And indeed anything but a /64 will work for RA.
But then "service aiccu status" says "aiccu dead but subsys locked", and aiccu is no longer running.
Depends on the tunnel type:
Static proto-41 tunnels don't need to have AICCU running, and thus AICCU properly exits; on most platforms setting up a static tunnel the way your OS does it is the best way to do it.
Heartbeat/AYIYA tunnels require AICCU to be running, thus it keeps on running.
Unfortunately there are several distributions which seem to want to second guess what AICCU is supposed to do and then don't bother to ask upstream (eg us) what it is about and then implement things wrongly; not much we can do about that though.
How to configure subnet ?
Shadow Hawkins on Saturday, 13 March 2010 20:26:52Where are the routing tables? and of course, did you enable forwarding?
One default route on the laptop goes out eth0 to the global IPv6 address I assigned to eth1 on the
machine with the tunnel. So when that's up, it works.
I didn't enable forwarding myself. The other tunnel software I had tried did it for me, and left it that way when I stopped it. I guess it didn't do a total teardown job, or restoring the previous state.
Thanks for explaining the dead AICCU issue. Indeed, when I ran it with debugging, it logged
a "quitting" message with no errors.
I'm not sure how it would be possible to fix the Fedora init script, if AICCU stays running or not depending on the configuration file. Short of parsing the config file and adding various conditionals to
disable the "stop" command and remove the lock. I'm not a Fedora maintainer so I'm not going to mess with it.
How to configure subnet ?
Shadow Hawkins on Sunday, 14 March 2010 19:05:51
Re. AICCU initscript in Fedora Core
aiccu.spec from the Fedora source lists you (Jeroen) as the author.
I don't see that Fedora has done anything to it, except that Matt Domsch added an LSB initscript header - I presume aiccu-lsb-initscript.patch - which does not appear to change the functionality
http://fedora.mirror.iweb.ca/releases/12/Everything/x86_64/os/Packages/aiccu-2007.01.15-7.fc12.x86_64.rpm
How to configure subnet ?
aiccu.spec from the Fedora source lists you (Jeroen) as the author.
Check the bottom of that file, there is a changelog there, nothing I had to do with that, or the rest of how that system works and interacts.
Static tunnels should be configured per the distro, AICCU can do it too, but then it won't deamonize.
|
![[ch]](/s/countries/ch.gif)
on Saturday, 13 March 2010 16:17:37
Posting is only allowed when you are