I hope you'll excuse me, I'm sure I'm just missing something simple. I can't get my tunnel to work. I'm brand new to IPv6, my network admin skills are minimal, linux admin skills are ok. I have a dedicated hosting server (bare metal), and want to run a web site on IPv4 and IPv6, simultaneously. I assume I can do this with a single IPv4 address. I'm a little confused that I have a routed /64, because all I need is a single IP.
These questions are going to seem really dumb, but I hope you'll entertain them. I'm really struggling with this, and having a hard time finding anything dumbed down enough for me to get.
Given my tunnel details:
Server IPv4 address: 72.52.104.74
Server IPv6 address: 2001:470:1f04:3f2::1/64
Client IPv4 address: [Update] 208.109.223.133
Client IPv6 address: 2001:470:1f04:3f2::2/64
Routed /48: none
Routed /64: 2001:470:1f05:3f2::/64
Is 2001:470:1f04:3f2::1 the IP that routes to my server?
If I just want a single IPv6 IP to tunnel to my server, what IP do I use? The Server IPv6 address, or make one up from the "Routed /64"?
How do I bind a /128 to my server from my routed /64?
I ran the configuration script on my server, and then tried ping6 on a few ipv6 hostnames, but it's not working. So, I'm not getting out to the IPv6 world. I'm going to dump everything I can, I hope you can help me. I feel like I'm missing something.
IP: 208.109.223.133
OS: CentOS 5
Firewall: none
I setup with this script:
ifconfig sit0 up
ifconfig sit0 inet6 tunnel ::72.52.104.74
ifconfig sit1 up
ifconfig sit1 inet6 add 2001:470:1f04:3f2::2/64
route -A inet6 add ::/0 dev sit1
And now my ifconfig shows:
# ifconfig
eth0 Link encap:Ethernet HWaddr 00:30:1B:43:50:2F
inet addr:208.109.223.133 Bcast:208.109.223.255 Mask:255.255.255.0
inet6 addr: fe80::230:1bff:fe43:502f/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:4486 errors:0 dropped:0 overruns:0 frame:0
TX packets:1574 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:396895 (387.5 KiB) TX bytes:238388 (232.8 KiB)
Interrupt:185
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:70 errors:0 dropped:0 overruns:0 frame:0
TX packets:70 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:9933 (9.7 KiB) TX bytes:9933 (9.7 KiB)
sit0 Link encap:IPv6-in-IPv4
inet6 addr: ::208.109.223.133/96 Scope:Compat
inet6 addr: ::127.0.0.1/96 Scope:Unknown
UP RUNNING NOARP MTU:1480 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:0 (0.0 b) TX bytes:0 (0.0 b)
sit1 Link encap:IPv6-in-IPv4
inet6 addr: 2001:470:1f04:3f2::2/64 Scope:Global
inet6 addr: fe80::d06d:df85/64 Scope:Link
UP POINTOPOINT RUNNING NOARP MTU:1480 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:8 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:0 (0.0 b) TX bytes:992 (992.0 b)
And I can tell it's not working by:
# ping6 ipv6.google.com
PING ipv6.google.com(2001:4860:0:2001::68) 56 data bytes
From dkoopman-pt.tunnel.tserv3.fmt2.ipv6.he.net icmp_seq=2 Destination unreachable: Address unreachable
From dkoopman-pt.tunnel.tserv3.fmt2.ipv6.he.net icmp_seq=3 Destination unreachable: Address unreachable
--- ipv6.google.com ping statistics ---
5 packets transmitted, 0 received, +2 errors, 100% packet loss, time 3999ms
But, I can ping my own inside IPv6 IP:
# ping6 2001:470:1f04:3f2::2
PING 2001:470:1f04:3f2::2(2001:470:1f04:3f2::2) 56 data bytes
64 bytes from 2001:470:1f04:3f2::2: icmp_seq=0 ttl=64 time=0.027 ms
64 bytes from 2001:470:1f04:3f2::2: icmp_seq=1 ttl=64 time=0.015 ms
64 bytes from 2001:470:1f04:3f2::2: icmp_seq=2 ttl=64 time=0.022 ms
--- 2001:470:1f04:3f2::2 ping statistics ---
3 packets transmitted, 3 received, 0% packet loss, time 1999ms
rtt min/avg/max/mdev = 0.015/0.021/0.027/0.006 ms, pipe 2
but not my outside:
# ping6 2001:470:1f04:3f2::1
PING 2001:470:1f04:3f2::1(2001:470:1f04:3f2::1) 56 data bytes
From 2001:470:1f04:3f2::2 icmp_seq=1 Destination unreachable: Address unreachable
From 2001:470:1f04:3f2::2 icmp_seq=2 Destination unreachable: Address unreachable
--- 2001:470:1f04:3f2::1 ping statistics ---
3 packets transmitted, 0 received, +2 errors, 100% packet loss, time 1999ms
Here is my IPv6 route:
# route -A inet6
Kernel IPv6 routing table
Destination Next Hop Flags Metric Ref Use Iface
*/96 * U 256 0 0 sit0
2001:470:1f04:3f2::/64 * U 256 4 0 sit1
fe80::/64 * U 256 0 0 eth0
fe80::/64 * U 256 0 0 sit1
*/0 * U 1 0 0 sit1
::1/128 * U 0 1 1 lo
localhost/128 * U 0 0 1 lo
ip-208-109-223-133.ip.secureserver.net/128 * U 0 0 1 lo
dkoopman-pt.tunnel.tserv3.fmt2.ipv6.he.net/128 * U 0 15 1 lo
fe80::d06d:df85/128 * U 0 0 1 lo
fe80::230:1bff:fe43:502f/128 * U 0 0 1 lo
ff00::/8 * U 256 0 0 eth0
ff00::/8 * U 256 0 0 sit1
Nothing weird in ip6tables:
# ip6tables --list
Chain INPUT (policy ACCEPT)
target prot opt source destination
Chain FORWARD (policy ACCEPT)
target prot opt source destination
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
Let me know if you need anything else. I really hope I'm just skipping a step or something. I'd like to be able to get this to work.
Thanks in advance,
Dave.