[solved] Ubuntu as VirtualBox host and router not working

[daincredibleholg]

Hi.

One of my servers has it's IPv6 connectivity via HE. This server is running Ubuntu 12.04. This host is working fine - I can use IPv6 connections from it and connect to it via IPv6.
Now I have set up a VirtualBox on this server. I will host some dev servers on it. My first test server is running Ubuntu 12.10. It should be available only via IPv6. So I have followed these instructions here: https://wiki.ubuntu.com/IPv6#Configure_your_Ubuntu_box_as_a_IPv6_router. This means, this is my config now...

Host system:
Client IPv6: 2001:470:1f10:43c::2
Routed network: 2001:470:1f11:43c::/64
Interface configuration:

Code Select Expand


auto eth0
iface eth0 inet static
 address 69.64.62.133
 network 69.64.62.0
 netmask 255.255.255.0
 broadcast 69.64.62.255
 gateway 69.64.62.1

iface eth0 inet6 static
 address 2001:470:1f11:43c::1
 netmask 64

# virtual interfaces
auto he-ipv6
iface he-ipv6 inet6 v4tunnel
 address 2001:470:1f10:43c::2
 netmask 64
 endpoint 209.51.181.2
 gateway 2001:470:1f10:43c::1

/etc/radvd.conf:

Code Select Expand


interface vboxnet0 {
       AdvSendAdvert on;
#       MinRtrAdvInterval 3;
#       MaxRtrAdvInterval 10;
       prefix 2001:470:1f11:43c::/64 {
               AdvOnLink on;
               AdvAutonomous on;
#               AdvRouterAddr on;
       };
};

Route -6:

Code Select Expand


Kernel IPv6 routing table
Destination                    Next Hop                   Flag Met Ref Use If
2001:470:1f10:43c::1/128       ::                         U    1024 0     1 he-ipv6
2001:470:1f10:43c::/64         ::                         Un   256 0     0 he-ipv6
2001:470:1f11:43c::/64         ::                         U    256 0     0 eth0
fe80::/64                      ::                         U    256 0     0 eth0
fe80::/64                      ::                         Un   256 0     0 he-ipv6
fe80::/64                      ::                         U    256 0     0 vboxnet0
::/0                           2001:470:1f10:43c::1       UG   1024 0     0 he-ipv6
::/0                           ::                         !n   -1  1  2181 lo
::1/128                        ::                         Un   0   1    39 lo
2001:470:1f10:43c::/128        ::                         Un   0   1     0 lo
2001:470:1f10:43c::2/128       ::                         Un   0   1 11181 lo
2001:470:1f11:43c::/128        ::                         Un   0   1     0 lo
2001:470:1f11:43c::1/128       ::                         Un   0   1    27 lo
fe80::/128                     ::                         Un   0   1     0 lo
fe80::/128                     ::                         Un   0   1     0 lo
fe80::/128                     ::                         Un   0   1     0 lo
fe80::4540:3e85/128            ::                         Un   0   1     0 lo
fe80::219:99ff:fece:148f/128   ::                         Un   0   1     5 lo
fe80::/64                      ::                         U    256 0     0 eth0
fe80::/64                      ::                         Un   256 0     0 he-ipv6
fe80::/64                      ::                         U    256 0     0 vboxnet0
::/0                           2001:470:1f10:43c::1       UG   1024 0     0 he-ipv6
::/0                           ::                         !n   -1  1  2181 lo
::1/128                        ::                         Un   0   1    39 lo
2001:470:1f10:43c::/128        ::                         Un   0   1     0 lo
2001:470:1f10:43c::2/128       ::                         Un   0   1 11429 lo
2001:470:1f11:43c::/128        ::                         Un   0   1     0 lo
2001:470:1f11:43c::1/128       ::                         Un   0   1    27 lo
fe80::/128                     ::                         Un   0   1     0 lo
fe80::/128                     ::                         Un   0   1     0 lo
fe80::/128                     ::                         Un   0   1     0 lo
fe80::4540:3e85/128            ::                         Un   0   1     0 lo
fe80::219:99ff:fece:148f/128   ::                         Un   0   1     5 lo
fe80::800:27ff:fe00:0/128      ::                         Un   0   1     2 lo
ff00::/8                       ::                         U    256 0     1 eth0
ff00::/8                       ::                         U    256 0     0 he-ipv6
ff00::/8                       ::                         U    256 0     0 vboxnet0
::/0                           ::                         !n   -1  1  2181 lo

Output of ip -6 addr:

Code Select Expand


1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436
   inet6 ::1/128 scope host
      valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qlen 1000
   inet6 2001:470:1f11:43c::1/64 scope global
      valid_lft forever preferred_lft forever
   inet6 fe80::219:99ff:fece:148f/64 scope link
      valid_lft forever preferred_lft forever
4: he-ipv6: <POINTOPOINT,NOARP,UP,LOWER_UP> mtu 1480
   inet6 2001:470:1f10:43c::2/64 scope global
      valid_lft forever preferred_lft forever
   inet6 fe80::4540:3e85/64 scope link
      valid_lft forever preferred_lft forever
5: vboxnet0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qlen 1000
   inet6 fe80::800:27ff:fe00:0/64 scope link
      valid_lft forever preferred_lft forever

Example traceroute to tunnelbroker.net:

Code Select Expand


$ ping6 -c4 tunnelbroker.net
PING tunnelbroker.net(tunnelbroker.net) 56 data bytes
64 bytes from tunnelbroker.net: icmp_seq=1 ttl=59 time=77.9 ms
64 bytes from tunnelbroker.net: icmp_seq=2 ttl=59 time=77.8 ms
64 bytes from tunnelbroker.net: icmp_seq=3 ttl=59 time=77.8 ms
64 bytes from tunnelbroker.net: icmp_seq=4 ttl=59 time=77.9 ms

--- tunnelbroker.net ping statistics ---
4 packets transmitted, 4 received, 0% packet loss, time 3003ms
rtt min/avg/max/mdev = 77.867/77.903/77.947/0.199 ms


On the guest system:
Output of ip -6 addr:

Code Select Expand


1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436
   inet6 ::1/128 scope host
      valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qlen 1000
   inet6 fe80::a00:27ff:fe60:8cb5/64 scope link
      valid_lft forever preferred_lft forever
3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qlen 1000
   inet6 2001:470:1f11:43c:5963:1661:47e5:2cbd/64 scope global temporary dynamic
      valid_lft 85977sec preferred_lft 13977sec
   inet6 2001:470:1f11:43c:a00:27ff:fe4a:5ce3/64 scope global dynamic
      valid_lft 85977sec preferred_lft 13977sec
   inet6 fe80::a00:27ff:fe4a:5ce3/64 scope link
      valid_lft forever preferred_lft forever

Route:

Code Select Expand


$ route -6
Kernel-IPv6-Routentabelle
Destination                    Next Hop                   Flag Met Ref Use If
2001:470:1f11:43c::/64         ::                         UAe  256 0     0 eth1
fe80::/64                      ::                         U    256 0     0 eth1
fe80::/64                      ::                         U    256 0     0 eth0
::/0                           fe80::800:27ff:fe00:0      UGDAe 1024 0     0 eth1
::/0                           ::                         !n   -1  1     9 lo
::1/128                        ::                         Un   0   1     6 lo
2001:470:1f11:43c:a00:27ff:fe4a:5ce3/128 ::                         Un   0   1     0 lo
2001:470:1f11:43c:5963:1661:47e5:2cbd/128 ::                         Un   0   1     0 lo
fe80::a00:27ff:fe4a:5ce3/128   ::                         Un   0   1     2 lo
fe80::a00:27ff:fe60:8cb5/128   ::                         Un   0   1     0 lo
ff00::/8                       ::                         U    256 0     0 eth1
ff00::/8                       ::                         U    256 0     0 eth0
::/0                           ::                         !n   -1  1     9 lo

Ping output:

Code Select Expand


$ ping6 -c4 tunnelbroker.net
PING tunnelbroker.net(tunnelbroker.net) 56 data bytes

--- tunnelbroker.net ping statistics ---
4 packets transmitted, 0 received, 100% packet loss, time 3023ms

Firewall:

Code Select Expand


Chain INPUT (policy ACCEPT)
target     prot opt source               destination        

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination        

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination


Any ideas? I have this problem for several days now and cannot find the point where I missed something. But obviously there will be one :-/

Thanks in advance and greets,
Holger

[broquea]

need an ipv6 address on the vboxnet0 interface out of that routed /64

[daincredibleholg]

Hi.

Thanks for this really quick reply. And I knew, it can only be a little thing. Damn it. Now it works - great!

Thanks again and greets,
Holger

[kasperd]

Did you also remove the IPv6 address you had on eth0? Having the same /64 configured on both eth0 and vboxnet0 probably won't work out well.

[daincredibleholg]

Hi.

Thanks kasperd. It do not work, when the IP is also set on eth0 - the routing is then just mangled. After removing the IP from eth0 the guest system is available and can use IPv6 itself.

Great. Many thanks again!

Cheers,
Holger