Íàñòðîéêà IPv6 íà Asus RT-N16

[TReX]

ïîòîìó ÷òî dnsmasq ìîæåò çàìåíèòü radvd+dhcps.


ïîðæàë. ïðîñòî íàñòðîé, êàê ÿ íàïèñàë, è ïîñìîòðè, êàê ðàáîòàåò.
çàõî÷åøü áîëüøå - íàñòðîé ïîëíîöåííûé dhcpv6 â dnsmasq, ïðèìåðû â google://dnsmasq.conf

ýòî ÿ âñå ïîíèìàþ, à ÷åì ïëîõî ðåøåíèå Àçóçà?)

[lly]

ýòî ÿ âñå ïîíèìàþ, à ÷åì ïëîõî ðåøåíèå Àçóçà?)

Èñïîëüçîâàíèåì 3-õ äåìîíîâ(dnsmasq,radvd,dhcp6s) âìåñòî îäíîãî.

[TReX]

Èñïîëüçîâàíèåì 3-õ äåìîíîâ(dnsmasq,radvd,dhcp6s) âìåñòî îäíîãî.

Ñïàñèáî, æäåì ïåðåõîäà âàøåé çàìå÷àòåëüíîé ïðîøèâêè ñ radvd íà dhcp6 )

[Pasha_ZZZ]

RT-N16, 1.9.2.7-rtn-r3702
Âñå ðàáîòàåò, íåïîíÿòíî, êàê îáíîâëÿòü Client IPv4 Address íà ÍÅ àâòîìàòîì.

[ryzhov_al]

RT-N16, 1.9.2.7-rtn-r3702
Âñå ðàáîòàåò, íåïîíÿòíî, êàê îáíîâëÿòü Client IPv4 Address íà ÍÅ àâòîìàòîì.

Ìîæíî ëþáûì ñêðèïòîì (ïðèìåð), îáðàùàÿñü ïî îïðåäåë¸ííîìó URL:

$ wget https://USERNAME:PASSWORD@ipv4.tunnelbroker.net/ipv4_end.php?tid=TUNNELID

[Pasha_ZZZ]

Ñïàñèáî, ïîëó÷èëîñü òàê:

wget --no-check-certificate -O- https://user:pass@ipv4.tunnelbroker.net/ipv4_end.php?tid=TUNNELID

ß òàê ïîíèìàþ, ýòî âñòàâèòü â post-firewall - è ïðîáëåìà ðåøåíà?

Íå îòðàáàòûâàåò â post-firewall êîìàíäà. Êàê áóäòî âîîáùå wget íå çàïóñêàåòñÿ. Çàäàë -o/tmp/local/root/ipv6_upd.log -O/tmp/local/root/ipv6_res.log - íå ñîçäàþòñÿ äàæå ôàéëû. È îáíîâëåíèå àäðåñà íå ïðîèñõîäèò. Âðó÷íóþ çàïóñêàåøü - âñå ðàáîòàåò.

[MercuryV]

Êàê áóäòî âîîáùå wget íå çàïóñêàåòñÿ.

Ïðîâåðüòå, ÷òî:

1. ôàéë post-firewall ÿâëÿåòñÿ èñïîëíÿåìûì
2. â ïåðâîé ñòðîêå post-firewall åñòü #!/bin/sh
3. âûçîâ wget èäåò ñ ïîëíûì ïóò¸ì (/usr/bin/wget - äëÿ wget èç ïðîøèâêè)

[Pasha_ZZZ]

Ïðîâåðüòå, ÷òî:

1. ôàéë post-firewall ÿâëÿåòñÿ èñïîëíÿåìûì
2. â ïåðâîé ñòðîêå post-firewall åñòü #!/bin/sh
3. âûçîâ wget èäåò ñ ïîëíûì ïóò¸ì (/usr/bin/wget - äëÿ wget èç ïðîøèâêè)

1. 100755, êàê è ó äðóãèõ
2. Åñòü
3. èçìåíèë íà ïîëíûé ïóòü - ýôôåêòà íåò

Ïîìåñòèë òàêóþ êîìàíäó â post-firewall

echo WAN IP = $(nvram get wan0_ipaddr)>/tmp/local/root/wan_ip.txt

ïåðåä âûçîâîì wget - ôàéë ñ àêòóàëüíûì àäðåñîì ñîçäàåòñÿ ïîñëå ðåêîííåêòà. À àäðåñ òóííåëÿ íå îáíîâëÿåòñÿ è ëîã ñ âûâîäîì wget íå ñîçäàåòñÿ.

[theMIROn]

îáíîâëåíèå HE ïîääåðæèâàåòñÿ ïðÿìî èç web ìîðäû, íè÷åãî íå íóæíî ãîðîäèòü.

[Pasha_ZZZ]

íè÷åãî íå íóæíî ãîðîäèòü.

ß áû íå ãîðîäèë, åñëè áû â âåáìîðäå íå áûë óæå çàáèò DynDNS

Î áîæå! Ëþáèòåëè õàëÿâíîé àêòèâàöèè Windows 8 è ñþäà äîïîëçëè )))

Ýò â î ÷åì? Ó ìåíÿ Âûíü ÕÏ...

[theMIROn]

ß áû íå ãîðîäèë, åñëè áû â âåáìîðäå íå áûë óæå çàáèò DynDNS Ýò â î ÷åì? Ó ìåíÿ Âûíü ÕÏ...

ïðîïèñûâàåì äîïîëíèòåëüíûå ddns ñåðâèñû è èõ íàñòðîéêè â /usr/local/etc/ddns.conf
ïîñëå ýòîãî - flashfs save && flashfs commit && flashfs enable è âñå, âñå îíè áóäóò îáíîâëÿòüñÿ + òîò, ÷òî â web ìîðäå

êàê óçíàòü, ÷òî èìåííî íóæíî ïðîïèñûâàòü - ïðîïèñûâàåì íàñòðîéêè ddns â web ìîðäå è ñìîòðèì ïîòîì â /etc/ddns.conf

[Omega]

Íó ïîõîæå, ÷òî IPv6 çàðàáîòàëî è íà Asus RT-N56U ...

Òàê, ñ ãëþêîì dnsmasq DHCPv6 ðàçîáðàëèñü, ñïàñèáî theMIROn

http://forum.ixbt.com/topic.cgi?id=14:57589-57 http://www.test-ipv6.ru/

[Basile]

Ðàç ïîøëà òàêàÿ ïüÿíêà...

Ìíå âîò èíòåðåñíî, ìíîãèå ëè çäåøíèå ïîëüçîâàòåëè èñïîëüçóþò IPv6 îò he.net ñ äèíàìè÷åñêèì IP?

À ìíå ïðèøëîñü: òàêîâû óñëîâèÿ ðàáîòû óñëóãè "Êîííåêò" (óæå íå ïîäêëþ÷èòü). Âêðàòöå: âàì âûäàåòñÿ ïîäñåòü áåëûõ àäðåñîâ ðàçìåðîì /29 è äèíàìè÷åñêèé áåëûé IP íà ppp0, ÷åðåç êîòîðûé "âèäèòñÿ" âûäàííàÿ ïîäñåòü. È ïåðâàÿ ïðîáëåìà, ñ êîòîðîé ÿ ñòîëêíóëñÿ, ýòî îáíîâëåíèå äèíàìè÷åñêîãî IP íà he.net (âåäü òîííåëü six0 ñòðîèòñÿ îò ppp0, ãäå äèíàìèêà, à âîò áû ïîñòðîèòü åãî îò br0, ãäå ñòàòèêà!). Inadyn çàìóñîðèë ìíå âñå ëîãè îäèíàêîâûìè ñîîáùåíèÿìè:

Nov 30 08:45:21 INADYN[327]: E: The response of DYNDNS svr was an error! Aborting.
Nov 30 08:45:22 INADYN[327]: W:Error validating DYNDNS svr answer. Check usr,pass,hostname,abuse...!
Nov 30 08:45:22 INADYN[327]: W:DYNDNS Server response: HTTP/1.1 200 OK^M Date: Tue, 30 Nov 2010 05:45:21 GMT^M Server: Apache/2.2.8 (Ubuntu) DAV/2 SVN/1.4.6 PHP/5.2.4-2ubuntu5.10 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g^M X-Powered-By: PHP/5.2.4-2ubuntu5.10^M Set-Cookie: PHPSESSID=96ccbeffd9aa4e4f5d78b0f4a4f47767; path=/^M Expires: Thu, 19 Nov 1981 08:52:00 GMT^M Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0^M Pragma: no-cache^M Content-Length: 37^M Connection: close^M Cont
Nov 30 08:45:22 INADYN[327]: W:'RC_DYNDNS_RSP_NOTOK' (0x48) updating the IPs. (it 0)
Nov 30 08:45:22 INADYN[327]: E: The response of DYNDNS svr was an error! Aborting.
Nov 30 08:45:23 INADYN[327]: W:Error validating DYNDNS svr answer. Check usr,pass,hostname,abuse...!
Nov 30 08:45:23 INADYN[327]: W:DYNDNS Server response: HTTP/1.1 200 OK^M Date: Tue, 30 Nov 2010 05:45:22 GMT^M Server: Apache/2.2.8 (Ubuntu) DAV/2 SVN/1.4.6 PHP/5.2.4-2ubuntu5.10 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g^M X-Powered-By: PHP/5.2.4-2ubuntu5.10^M Set-Cookie: PHPSESSID=21155c4d140bd0960556ccab9ec7ed50; path=/^M Expires: Thu, 19 Nov 1981 08:52:00 GMT^M Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0^M Pragma: no-cache^M Content-Length: 37^M Connection: close^M Cont
Nov 30 08:45:23 INADYN[327]: W:'RC_DYNDNS_RSP_NOTOK' (0x48) updating the IPs. (it 0)
Nov 30 08:45:23 INADYN[327]: E: The response of DYNDNS svr was an error! Aborting.
Nov 30 08:45:23 INADYN[327]: W:Error validating DYNDNS svr answer. Check usr,pass,hostname,abuse...!
Nov 30 08:45:23 INADYN[327]: W:DYNDNS Server response: HTTP/1.1 200 OK^M Date: Tue, 30 Nov 2010 05:45:23 GMT^M Server: Apache/2.2.8 (Ubuntu) DAV/2 SVN/1.4.6 PHP/5.2.4-2ubuntu5.10 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g^M X-Powered-By: PHP/5.2.4-2ubuntu5.10^M Set-Cookie: PHPSESSID=19e891feb404f45d186b59ef5159cbdd; path=/^M Expires: Thu, 19 Nov 1981 08:52:00 GMT^M Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0^M Pragma: no-cache^M Content-Length: 37^M Connection: close^M Cont
Nov 30 08:45:23 INADYN[327]: W:'RC_DYNDNS_RSP_NOTOK' (0x48) updating the IPs. (it 0)
Nov 30 08:45:23 INADYN[327]: E: The response of DYNDNS svr was an error! Aborting.
Nov 30 08:45:24 INADYN[327]: W:Error validating DYNDNS svr answer. Check usr,pass,hostname,abuse...!

Èç ýòîãî íå áûëî ïîíÿòíî, â ÷åì äåëî, è ÿ ïîëåç íà ñàéò tunnelbroker.net, ãäå íàøåë èíñòðóêöèþ, êàê ñêîíñòðóèðîâàòü URL äëÿ îáíîâëåíèÿ äèíàìè÷åñêîãî IP òîííåëÿ, çàêèíóë âñå â áðàóçåð è ïîëó÷èë îòâåò: "Âàø õîñò íå ïèíãóåòñÿ". Íå ïîìíþ, êàê ÿ îïðåäåëèë àäðåñ, ñ êîòîðîãî äîëæåí ïèíãîâàòüñÿ IP'øíèê (òî ëè â â òîé æå èíñòðóêöèè, òî ëè âîñïîëüçîâàëñÿ tcpdump, òî ëè îí áûë â ñàìîì ñîîáùåíèè îá îøèáêå), â èòîãå â post-firewall ïðèøëîñü äîáàâèòü ñòðîêè:

iptables -D INPUT -j DROP
iptables -A INPUT -s 66.220.2.74 -p icmp -j ACCEPT
iptables -A INPUT -j DROP

Âîò ê ñòàòè òîïèê íà tunnelbroker.net, íî îí ïîÿâèëñÿ ïîçæå.

Âñå áû õîðîøî, íî òóò ñîâñåì íåäàâíî ñâàëèëàñü åùå îäíà "ðàäîñòü": îòâàëèëñÿ IPv6-òîííåëü, ñìîòðþ ëîãè, à ìíå Inadyn ïèøåò, ÷òî òîííåëÿ ñ òàêèì ID íå ñóùåñòâóåò (äà, Inadyn ñòàë áîëåå èíôîðìàòèâíûì, íî âñå òàê æå ëþáèò çàìóñîðèâàòü ëîãè)! ß ñðàçó æå ñòðî÷ó â ñàïïîðò, à ìíå Kelly Cochran îòâå÷àåò:

I see it was purged for not replying to a ping to the client IPv6 address for the past two years.

à ÿ åìó, ìîë ñòîëüêî ëåò, ñòîëüêî çèì âñå ðàáîòàëî ïðåêðàñíî, ñòîëüêî ãèãîâ òðàôèêà ïðîêà÷àíî, à òóò âäðóã, íà òåáå, óäàëèëè; îáúÿñíèë åìó, ÷òî ðîóòåð íå ïèíãóåòñÿ ñïåöèàëüíî, à îí ìíå:

If you're blocking all ICMPv6, you're actually impeding a fair bit of some required functionality of IPv6, such as Path MTU Discovery. See RFC4890 for guidelines of IPv6 ICMPv6 filtering.

We also need to be able to ping that address as it's really the only way to ensure there's something properly speaking v6 on the other side.

 èòîãå ÿ åãî óãîâîðèë âåðíóòü ìîé òîííåëü îáðàòíî, à çà ýòî ìíå ïðèøëîñü äîáàâèòü â post-firewall åùå ïàðó ñòðî÷åê:

ip6tables -D INPUT -p ipv6-icmp -m icmp6 ! --icmpv6-type 128 -j ACCEPT
ip6tables -I INPUT 2 -p ipv6-icmp -j ACCEPT

Âîò òàêàÿ èñòîðèÿ...

[Destroyer107]

òàê è íå ïîíÿë DHCPV6 â òåêóùåé ïðîøèâêå ðàáîòàåò èëè íåò?

[eugene_s04]

Óñòàíîâèë gogoclient èç Optware, ò.ê. íóæíî ïîëó÷èòü äîñòóï íà ðîóòåð ïî ssh èçâíå. Ïðîâàéäåð Éîòà, ïîýòîìó ñïîñîá ïîêà åäèíñòâåííûé.
Òóííåëü óñòàíàâëèâàåòñÿ, ipv6.google.com ïèíãóåòñÿ, íî ñêàíåð ïîðòîâ subnetonline.com ãîâîðèò, ÷òî ïîðò ssh çàêðûò.
ip6tables -L ïîêàçûâàåò, ÷òî íèêàêèõ ïðàâèë íåò.
Ïðîáîâàë äîáàâèòü ip6tables -A INPUT -p tcp --dport 8822 -j ACCEPT, íå ïîìîãëî (dropbear ñëóøàåò 8822-é ïîðò).
IPv6 â âåáìîðäå îòêëþ÷åí. Åñëè íóæíî âêëþ÷èòü, òî êàêîé òèï òóííåëÿ âûáðàòü? Èëè ïîäñêàæèòå, ÷òî íóæíî äîáàâèòü â ïðàâèëà ôèëüòðàöèè iptables è ip6tables, ÷òîáû îòêðûòü ïîðò. Çàðàíåå áëàãîäàðåí çà ïîìîùü.
P.S. Íà âñÿêèé ñëó÷àé: RT-N16, ïðîøèâêà r4667.