|
m0n0wall setup issues
![[us]](/s/countries/us.gif) Shadow Hawkins on Sunday, 01 February 2009 23:38:01
I'm trying to get my m0n0wall router set up with a sixxs IPv6 tunnel and haven't been able to get everything working. I have the following setup:
-I'm running m0n0wall 1.3b15 on a net48xx box.
-I have a sixxs tunnel with a subnet.
-Under WAN, I have selected AICCU and have entered my username, password, and tunnel id.
-Under LAN, I have set IPv6 mode to static, entered the "Your IPv6 IP" + 1 for LAN address as a /64, so the PoP IPv6 ends in 1, the WAN IP ends in 2, and the LAN IP ends in 3.
-In the IPv4 firewall settings, I have allowed all outgoing traffic, and all incoming IPv6 traffic.
-On the IPv6 firewall settings, I've allowed all traffic on both the LAN and WAN interfaces.
-I've rebooted the firewall after setting these.
Unfortunately, that did not work.
I can ping the router from a computer on the LAN, but cannot connect to any hosts on the internet. From the router, I can't even ping the WAN interface. The tun0 interface does exist on the router.
If I ping the router's IPv6 WAN address from another computer on the internet, I don't get any replies, and the packets are shown as blocked in the firewall logs. Pinging various sites on IPv6 from the router gets: ping6: sendmsg: Network is unreachable, and the packets are also shown as blocked.
I can't find any rules in the firewall configuration which would block those packets, and IPv6 pings from internet hosts show up as blocked on the firewall so the tunnel must be working, but I can't figure out what the problem is.
Any ideas?
m0n0wall setup issues
-Under LAN, I have set IPv6 mode to static, entered the "Your IPv6 IP" + 1 for LAN address as a /64, so the PoP IPv6 ends in 1, the WAN IP ends in 2, and the LAN IP ends in 3.
You really need to use a subnet (thus a /48 and not the tunnel prefix). As such the PoP address does not come into question here.
m0n0wall setup issues
Shadow Hawkins on Monday, 02 February 2009 17:46:36
I've tried it both ways and neither way seems to work. I am currently using the subnet.
Looking at the firewall logs, any IPv6 packets seem to be blocked on the tun0 interface. Using /exec.php, I looked at the ipfilter rules with "ipfstat -in" and the rules come to "block in log quick all" without anything to specifically allow traffic on tun0. Unfortunately, I don't know much about ipfilter, so I'm not sure if the rules actually filter packets on tun0 or not. There is nothing in the web interface to configure rules for tun0.
m0n0wall setup issues
Shadow Hawkins on Tuesday, 03 February 2009 03:16:54
Well, I tried adding a firewall rule manually, but it had no effect. I couldn't even ping the wan interface from the wan interface on IPv6. I also found a post on the m0n0wall forum which suggests AICCU support isn't really working yet.
Anyway, I got a static tunnel from Hurricane Electric and it worked perfectly on the first time. I also found that a static tunnel from SixXS seems to work (I can ping to/from the router), although I didn't get it working from the LAN.
I'm going to use the HE tunnel for a while since the PoP is much closer for that one. I went from 55 to -24 ISK since I was changing options while trying to get it working. I would like to keep my SixXS account, but don't plan to use it for a while. Will it be disabled if I don't increase the number of credits soon? Do I need to set up a machine just to maintain a connection to the AICCU tunnel for the sole purpose of increasing my credits?
m0n0wall setup issues
![[nl]](/s/countries/nl.gif) Carmen Sandiego on Sunday, 08 March 2009 15:29:05
Hi, I'm in the same situation as Robert. A Soekris 4801 running Monowall 1.3b15.
I've a tunnel from SixXS but no subnet yet. I have not enough credits anymore after switching the tunnel settings a few times. I cannot ping anything from the router except ::1 on the WAN interface. How can I check that the tunnel is up?
When reading the wiki I see an IPv6 address on the upper right on the page
That should give me some credits again since the Soekris is always on and always on the same IPv4 address (this is InternetPlusBellen van KPN in NL). I would be happy to write a Wiki page dedicated to Soekris/monowall but right now I have not much to write...
Egbert Jan (NL)
|
![[ch]](/s/countries/ch.gif)
on Monday, 02 February 2009 10:22:11
Posting is only allowed when you are