Erinevus lehekülje "IPv6 kasutamine OpenBSDga" redaktsioonide vahel
Allikas: Kuutõrvaja
(Uus lehekülg: '===Sissejuhatus=== TODO ===Tunneli seadistamine=== Tunneli seadistamiseks tuleb öelda, vastavalt konkreetse tunneli parameetreid kasutades # ifconfig gif0 create # ifconfig…') |
(→Tunneli kasutamine) |
||
| 14. rida: | 14. rida: | ||
# sysctl -w net.inet6.ip6.forwarding=1 | # sysctl -w net.inet6.ip6.forwarding=1 | ||
| + | |||
| + | ===Paketifiltri seadistamine=== | ||
| + | |||
| + | Piiranguteta IPv6 liiklust lubaval juhtumil sobib kasutada selliseid ridu paketifiltri seadistusfailis | ||
| + | |||
| + | pass quick on gif0 inet6 | ||
| + | pass quick on fxp0 proto ipv6 | ||
| + | |||
| + | kus | ||
| + | |||
| + | * gif0 - tunneli seade | ||
| + | * fxp0 - füüsiline seade | ||
===Tunneli kasutamine=== | ===Tunneli kasutamine=== | ||
Redaktsioon: 11. jaanuar 2010, kell 02:12
Sisukord
Sissejuhatus
TODO
Tunneli seadistamine
Tunneli seadistamiseks tuleb öelda, vastavalt konkreetse tunneli parameetreid kasutades
# ifconfig gif0 create # ifconfig gif0 tunnel 84.50.96.138 194.126.101.242 # ifconfig gif0 inet6 2001:7d0:0:f000::1341 2001:7d0:0:f000::1340 prefixlen 128
IPv6 ruutingu sisselülitamiseks tuleb öelda
# sysctl -w net.inet6.ip6.forwarding=1
Paketifiltri seadistamine
Piiranguteta IPv6 liiklust lubaval juhtumil sobib kasutada selliseid ridu paketifiltri seadistusfailis
pass quick on gif0 inet6 pass quick on fxp0 proto ipv6
kus
- gif0 - tunneli seade
- fxp0 - füüsiline seade
Tunneli kasutamine
# ping6 2001:7d0:0:f000::1340 PING6(56=40+8+8 bytes) 2001:7d0:0:f000::1341 --> 2001:7d0:0:f000::1340 16 bytes from 2001:7d0:0:f000::1340, icmp_seq=0 hlim=64 time=8.573 ms 16 bytes from 2001:7d0:0:f000::1340, icmp_seq=1 hlim=64 time=8.208 ms
Tunneli seadmel
# tcpdump -nei gif0 ip6 tcpdump: listening on gif0, link-type NULL 01:09:46.308727 2001:7d0:0:f000::1341 > 2001:7d0:0:f000::1340: icmp6: echo request 01:09:46.317070 2001:7d0:0:f000::1340 > 2001:7d0:0:f000::1341: icmp6: echo reply 01:09:47.314576 2001:7d0:0:f000::1341 > 2001:7d0:0:f000::1340: icmp6: echo request 01:09:47.323035 2001:7d0:0:f000::1340 > 2001:7d0:0:f000::1341: icmp6: echo reply
Füüsilisel seadmel
# tcpdump -nei fxp0 proto ipv6 tcpdump: listening on fxp0, link-type EN10MB 01:08:48.480402 00:50:8b:cd:11:6d 00:14:7f:f4:e3:6a 0800 90: 2001:7d0:0:f000::1341 > 2001:7d0:0:f000::1340: icmp6: echo request (encap) 01:08:48.488495 00:14:7f:f4:e3:6a 00:00:5e:00:01:07 0800 90: 2001:7d0:0:f000::1340 > 2001:7d0:0:f000::1341: icmp6: echo reply (encap) 01:08:49.480454 00:50:8b:cd:11:6d 00:14:7f:f4:e3:6a 0800 90: 2001:7d0:0:f000::1341 > 2001:7d0:0:f000::1340: icmp6: echo request (encap) 01:08:49.488744 00:14:7f:f4:e3:6a 00:00:5e:00:01:07 0800 90: 2001:7d0:0:f000::1340 > 2001:7d0:0:f000::1341: icmp6: echo reply (encap)
