[Solved] IPv6 router with static subnets from /48 to /56

[svirusxxx]

Hi
I just recive from my LIR /48 IPv6
My main router is Edgerouter where I have setup connection addresses /127 on WAN, and my /48 on switch0 where most my servers is connected.
Now I try on one of my gentoo servers setup as router more deep in my network like in this diagram:

Code: Select all

ISP <===> (eth4) Edgerouter (switch0) <====>  (eth0) server1 (eth1) <====> (eth2) client1
                                         ==>  (eth0) server2

Now I have configured
Edgerouter switch0 have 2a011::1/48
server1 eth0 2a011::2/48 with gateway to 2a011::1
server1 eth1 2a0111/56
client1 eth2 2a0112/56 with gateway 2a0111
server2 eth0 2a011::2/48 with gateway to 2a011::1

On server1 and server2 I have full connection worldwide to IPv6
On client1 I can ping6 only to server1

also from server2 I can't ping6 2a0111


Also on server1 I set

Code: Select all

net.ipv6.conf.all.forwarding = 1
net.ipv6.conf.all.accept_ra = 2
net.ipv6.conf.all.accept_redirects = 1
net.ipv6.conf.all.accept_source_route = 1

What I miss or what I'am doing wrong ?


Thanks in advanced[/code]

[NeddySeagoon]

svirusxxx,

It rooks like you have a routing problem.

Please share the output of

Code: Select all

ip -6 route show

and

Code: Select all

ip -6 addr show

for all the systems on the route you expect the packets to traverse.

[svirusxxx]

server1:
# ip -6 route show

Code: Select all

::1 dev lo proto kernel metric 256 pref medium
2a01:1150:1:100::/56 dev eth1 proto kernel metric 256 pref medium
2a01:1150:1::/48 dev eth0 proto kernel metric 256 pref medium
fe80::/64 dev eth0 proto kernel metric 256 pref medium
fe80::/64 dev eth1 proto kernel metric 256 pref medium
default via 2a01:1150:1::1 dev eth0 metric 1024 pref medium

# ip -6 addr show

Code: Select all

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 state UNKNOWN qlen 1000
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 state UP qlen 1000
    inet6 2a01:1150:1::2/48 scope global 
       valid_lft forever preferred_lft forever
    inet6 fe80::887:80ff:fef5:855f/64 scope link 
       valid_lft forever preferred_lft forever
3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 state UP qlen 1000
    inet6 2a01:1150:1:100::1/56 scope global 
       valid_lft forever preferred_lft forever
    inet6 fe80::643c:10ff:fe9a:ae07/64 scope link 
       valid_lft forever preferred_lft forever

client1:
ip -6 route show

Code: Select all

::1 dev lo proto kernel metric 256 pref medium
2a01:1150:1:100::/56 dev eth2 proto kernel metric 256 pref medium
fe80::/64 dev eth1 proto kernel metric 256 pref medium
fe80::/64 dev eth0 proto kernel metric 256 pref medium
fe80::/64 dev eth2 proto kernel metric 256 pref medium
default via 2a01:1150:1:100::1 dev eth2 metric 1024 pref medium

ip -6 addr show

Code: Select all

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 state UNKNOWN qlen 1000
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 state UP qlen 1000
    inet6 fe80::64a4:28ff:fef1:d9d6/64 scope link 
       valid_lft forever preferred_lft forever
3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 state UP qlen 1000
    inet6 fe80::f01d:83ff:fe91:f11d/64 scope link 
       valid_lft forever preferred_lft forever
4: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 state UP qlen 1000
    inet6 2a01:1150:1:100::2/56 scope global 
       valid_lft forever preferred_lft forever
    inet6 fe80::9007:afff:fec7:c800/64 scope link 
       valid_lft forever preferred_lft forever

server2:
ip -6 r s

Code: Select all

::1 dev lo proto kernel metric 256 pref medium
2a01:1150:1::/48 dev eth0 proto kernel metric 256 pref medium
fe80::/64 dev eth0 proto kernel metric 256 pref medium
fe80::/64 dev eno1 proto kernel metric 256 pref medium

ip -6 a s

Code: Select all

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 state UNKNOWN qlen 1000
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: eno1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 state UP qlen 1000
    inet6 fe80::7a2b:cbff:fe4e:a275/64 scope link 
       valid_lft forever preferred_lft forever
3: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 state UP qlen 1000
    inet6 2a01:1150:1:33::1/48 scope global 
       valid_lft forever preferred_lft forever
    inet6 fe80::7a2b:cbff:fe4e:a276/64 scope link 
       valid_lft forever preferred_lft forever

I can't ping from server2 2a011:1 and I can't ping6 2a011:2 (nothing on tcpdump on client1)

When I try ping6 server2 from client1 I see this on tcpdump (on server2):

Code: Select all

14:48:47.973872 IP6 fe80::7a2b:cbff:fe4e:a276 > fe80::d221:f9ff:febe:bde3: ICMP6, neighbor solicitation, who has fe80::d221:f9ff:febe:bde3, length 32
14:48:47.974238 IP6 fe80::d221:f9ff:febe:bde3 > fe80::7a2b:cbff:fe4e:a276: ICMP6, neighbor advertisement, tgt is fe80::d221:f9ff:febe:bde3, length 24
14:48:50.113708 IP6 2a01:1150:1:100::2 > 2a01:1150:1:33::1: ICMP6, echo request, seq 1, length 64
14:48:50.113765 IP6 2a01:1150:1:33::1 > ff02::1:ff00:2: ICMP6, neighbor solicitation, who has 2a01:1150:1:100::2, length 32
14:48:51.131179 IP6 2a01:1150:1:100::2 > 2a01:1150:1:33::1: ICMP6, echo request, seq 2, length 64
14:48:51.145859 IP6 2a01:1150:1:33::1 > ff02::1:ff00:2: ICMP6, neighbor solicitation, who has 2a01:1150:1:100::2, length 32
14:48:52.155323 IP6 2a01:1150:1:100::2 > 2a01:1150:1:33::1: ICMP6, echo request, seq 3, length 64
14:48:52.165896 IP6 2a01:1150:1:33::1 > ff02::1:ff00:2: ICMP6, neighbor solicitation, who has 2a01:1150:1:100::2, length 32
14:48:52.986171 IP6 fe80::d221:f9ff:febe:bde3 > fe80::7a2b:cbff:fe4e:a276: ICMP6, neighbor solicitation, who has fe80::7a2b:cbff:fe4e:a276, length 32
14:48:52.986219 IP6 fe80::7a2b:cbff:fe4e:a276 > fe80::d221:f9ff:febe:bde3: ICMP6, neighbor advertisement, tgt is fe80::7a2b:cbff:fe4e:a276, length 24
14:48:53.179229 IP6 2a01:1150:1:100::2 > 2a01:1150:1:33::1: ICMP6, echo request, seq 4, length 64

[svirusxxx]

ok I found bug

I needed add static routing to my Edgerouter on console:

Code: Select all

set protocols static route6 2a01:1150:1:100::/56 next-hop 2a01:1150:1::2
commit; save;