Tunnel access for all computers on LAN

[rnolen]

Hello,

What special steps need to be taken for several computers behind a router to be access the tunnel? I'm trying out two computers to start.

I run the following commands:

First computer:

Code Select Expand

ip tunnel add he-ipv6 mode sit remote 216.66.22.2 local 192.168.5.20 ttl 255
ip link set he-ipv6 up
ip addr add 2001:470:7:a::2/64 dev he-ipv6
ip route add ::/0 dev he-ipv6
ip -f inet6 addr
ip -6 addr add 2001:470:8:a::1:1/128 dev he-ipv6

Second computer:

Code Select Expand

ip tunnel add he-ipv6 mode sit remote 216.66.22.2 local 192.168.5.21 ttl 255
ip link set he-ipv6 up
ip addr add 2001:470:7:a::2/64 dev he-ipv6
ip route add ::/0 dev he-ipv6
ip -f inet6 addr
ip -6 addr add 2001:470:8:a::1:2/128 dev he-ipv6

Only one computer can access IPv6 sites at a time, but the one which cannot, ping6 will return hostnames (just no responses).

Also, is the last line the proper way to assign each computer it's own IPv6 address in the block allocated to me?

Thanks for the help!

[bombcar]

You should add the tunnel at the router if it all possible. Tunnels go to one endpoint - if you want to have additional machines you'll need to configure routing and the easiest way to do that is with radvd.

[bombcar]

Also, I think you can setup radvd and routing even if the machine that is the tunnel endpoint is not actually the IPv4 router, but I've not tried it yet.

[jimb]

Only one machine acts as the router and has the tunnel.  The other machines use addresses from the routed /64 given to you by HE.

Just add an address from the routed /64 on the LAN interface of your router (for instance if HE assigned you 2001:db8:1234::/64, you could use 2001:db8:1234::1/64 on the LAN interface of your IPv6 router).  Then you can either manually add IPv6 addresses from the same /64 to the machines on your LAN, plus a default route to the router, or run RADVD to have your LAN auto configure, or DHCHv6 to do stateful configuration.