IPv6Tunnels/ExampleConfigs - Revision history

Ignisf: Add an equal cost multipath switch and a description for it for bird 1.6.2+ users

2016-10-11T23:11:15Z

Add an equal cost multipath switch and a description for it for bird 1.6.2+ users

@@ Line 98: / Line 98: @@
 protocol kernel {
 	export all;
+}

Ignisf: /* bird */

2016-08-09T20:31:37Z

bird

← Older revision		Revision as of 23:31, 9 August 2016
Line 76:		Line 76:

	# Configure logging		# Configure logging
	#log syslog {		log syslog { debug, trace, info, remote, warning, error, auth, fatal, bug };
	~~#log stderr all;~~
	~~#log "tmp" all~~;

	~~log syslog { debug, trace, info, remote, warning, error, auth, fatal, bug };~~		# Listen only on IPv6
	listen bgp v6only;		listen bgp v6only;

Line 99:		Line 97:
	# protocol and synchronize different kernel tables with different BIRD tables.		# protocol and synchronize different kernel tables with different BIRD tables.
	protocol kernel {		protocol kernel {
	~~learn;~~
	~~persist;~~
	~~scan time 20;~~
	export all;		export all;
	}		}
Line 107:		Line 102:
	# This pseudo-protocol watches all interface up/down events.		# This pseudo-protocol watches all interface up/down events.
	protocol device {		protocol device {
	scan time 10;		# Time in seconds between two scans of the network interface list. On
			# systems where we are notified about interface status changes
			# asynchronously (such as newer versions of Linux), we need to scan the
			# list only in order to avoid confusion by lost notification messages,
			# so the default time is set to a large value.
			#scan time 10; # Scan interfaces every 10 seconds
			}

			protocol static {
			# REPLACE WITH YOUR NET HERE
			route 2001:67c:21bc:4::/64 unreachable; # Sink route
	}		}

	filter ext_originate_ip6 {		filter ext_originate_ip6 {
	# REPLACE WITH YOUR NET HERE		# REPLACE WITH YOUR NET HERE
	if (net = 2001:67c:21bc:4::/64 ) then accept;		if (net = 2001:67c:21bc:4::/64 ) then accept;
	else reject;		else reject;
	}		}

	template bgp t_ext_ip6 {		template bgp t_ext_ip6 {
	# replace ASN here!		# replace ASN here!
	local as 65532;		local as 65532;
	export filter ext_originate_ip6;		export filter ext_originate_ip6;
	}		}



	# REPLACE NEIGHBOR IPs HERE		# REPLACE NEIGHBOR IPs HERE

	# ~~Ipv6~~ bgp link to marla		# IPv6 bgp link to marla
	protocol bgp marla_tbc_ip6 from t_ext_ip6 {		protocol bgp marla_tbc_ip6 from t_ext_ip6 {
	description "uplink to marla/tbc over ipv6";		description "uplink to marla/tbc over ipv6";
	neighbor 2001:67c:21bc:7fff:1:9:0:1 as 200533;		neighbor 2001:67c:21bc:7fff:1:9:0:1 as 200533;
			# preference 110; # Set higher preference for Marla
	}		}

	# ~~Ipv6~~ bgp link to ~~marla~~		# IPv6 bgp link to tyler
	protocol bgp tyler_tbc_ip6 from t_ext_ip6 {		protocol bgp tyler_tbc_ip6 from t_ext_ip6 {
	description "uplink to tyler/tbc over ipv6";		description "uplink to tyler/tbc over ipv6";
	neighbor 2001:67c:21bc:7fff:2:9:0:1 as 200533;		neighbor 2001:67c:21bc:7fff:2:9:0:1 as 200533;
	}		}

Maniax: /* Tunnel interface on OpenWRT */

2015-07-06T21:55:43Z

Tunnel interface on OpenWRT

← Older revision		Revision as of 00:55, 7 July 2015
Line 18:		Line 18:
	== Tunnel interface on OpenWRT ==		== Tunnel interface on OpenWRT ==

	~~Add~~ something like this to /etc/config/network (change the addresses):		Install the 6in4 package, and add something like this to /etc/config/network (change the addresses):
	<pre>		<pre>
	config interface 'crock6'		config interface 'crock6'

Maniax: /* Juniper SRX */

2015-07-06T20:55:24Z

Juniper SRX

← Older revision		Revision as of 23:55, 6 July 2015
Line 171:		Line 171:

	== Juniper SRX ==		== Juniper SRX ==

			* XX.XX.XX.XX is your local ip address

	<pre>		<pre>
Line 178:		Line 180:
	unit 0 {		unit 0 {
	tunnel {		tunnel {
	source 95.87.~~195~~.62;		source XX.XX.XX.XX;
	destination 79.98.105.18;		destination 79.98.105.18;
	ttl 255;		ttl 255;
Line 188:		Line 190:
	unit 1 {		unit 1 {
	tunnel {		tunnel {
	source 95.87.~~195~~.62;		source XX.XX.XX.XX;
	destination 78.128.1.18;		destination 78.128.1.18;
	ttl 255;		ttl 255;
Line 210:		Line 212:
	}		}
	}		}
	~~static {~~		router-id XX.XX.XX.XX;
	~~route 0.0.0.0/0 next-hop 95.87.195.33;~~
	}
	router-id 95.87.~~195~~.62;
	autonomous-system 65529;		autonomous-system 65529;
	}		}

Maniax at 20:50, 6 July 2015

2015-07-06T20:50:50Z

@@ Line 166: / Line 166: @@
 add address-families=ipv6 name=marla remote-address=\
 :67c:21bc:7fff:1:4:0:1 remote-as=200533 ttl=default
 </pre>

Maniax at 18:21, 6 July 2015

2015-07-06T18:21:42Z

← Older revision		Revision as of 21:21, 6 July 2015
Line 3:		Line 3:
	= Linux =		= Linux =

	== Tunnel interface ==		== Tunnel interface on Debian ==
	<pre>		<pre>
	auto marla-ipv6-spn		auto marla-ipv6-spn
Line 14:		Line 14:
	endpoint 79.98.105.18		endpoint 79.98.105.18
	gateway 2001:67c:21bc:7fff:0001:2:0:1		gateway 2001:67c:21bc:7fff:0001:2:0:1
			</pre>

			== Tunnel interface on OpenWRT ==

			Add something like this to /etc/config/network (change the addresses):
			<pre>
			config interface 'crock6'
			option proto '6in4'
			option peeraddr '79.98.105.18'
			option ip6addr '2001:67c:21bc:7fff:0001:10:0:2/64'
			option ip6gw '2001:67c:21bc:7fff:0001:10:0:1'
			option ip6prefix '2001:67c:21bc:c::/64'
			option ttl '255'
	</pre>		</pre>

Maniax at 16:20, 6 July 2015

2015-07-06T16:20:31Z

@@ Line 54: / Line 54: @@
 route-map external-out deny 20
+!
 </pre>

Slackware at 07:32, 24 June 2015

2015-06-24T07:32:26Z

← Older revision		Revision as of 10:32, 24 June 2015
Line 58:		Line 58:

	= Mikrotik =		= Mikrotik =
			TODO: explain config

			<pre>
			/interface 6to4
			add comment="initlab ipv6" local-address=46.47.81.47 mtu=1480 name=\
			marla-ipv6-bsc remote-address=79.98.105.18
			add comment="initlab ipv6" local-address=46.47.81.47 mtu=1480 name=\
			tyler-ipv6-bst remote-address=78.128.1.18
			/routing bgp instance
			set default as=65531
			/ipv6 address
			add address=2001:67c:21bc:7fff:1:4:0:2/120 advertise=no comment=uplink-marla \
			interface=marla-ipv6-bsc
			add address=2001:67c:21bc:2:4e5e:cff:feb5:3e93 comment="lan" eui-64=\
			yes interface=bridge-lan
			add address=2001:67c:21bc:7fff:2:4:1:2/120 advertise=no comment=uplink-tyler \
			interface=tyler-ipv6-bst
			/routing bgp network
			add network=2001:67c:21bc:2::/64 synchronize=no
			/routing bgp peer
			add address-families=ipv6 name=tyler remote-address=\
			2001:67c:21bc:7fff:2:4:1:1 remote-as=200533 ttl=default
			add address-families=ipv6 name=marla remote-address=\
			2001:67c:21bc:7fff:1:4:0:1 remote-as=200533 ttl=default
			</pre>

Maniax: /* quagga */

2015-06-23T19:29:47Z

quagga

← Older revision		Revision as of 22:29, 23 June 2015
Line 18:		Line 18:
	== quagga ==		== quagga ==

	In this example, 2001:67c:21bc:7fff:2:1:0:1 and 2001:67c:21bc:7fff:2:1:1:1 are the remote end-points of the tunnels, 2001:67c:21bc:4::/62 is the assigned network, and 65535 is the ASN delegated to this peer.(this is actually the live configuration of initLab)		In this example, 2001:67c:21bc:7fff:2:1:0:1 and 2001:67c:21bc:7fff:2:1:1:1 are the remote end-points of the tunnels, 2001:67c:21bc:4::/62 is the assigned network, and 65535 is the ASN delegated to this peer.

			Basically, this configuration says "connect to the two peers, and filter what I announce to them to be just my own network".

			(this is actually the live configuration of initLab)

	bgpd.conf:		bgpd.conf:

Maniax: /* quagga */

2015-06-23T19:05:29Z

quagga

← Older revision		Revision as of 22:05, 23 June 2015
Line 17:		Line 17:

	== quagga ==		== quagga ==

			In this example, 2001:67c:21bc:7fff:2:1:0:1 and 2001:67c:21bc:7fff:2:1:1:1 are the remote end-points of the tunnels, 2001:67c:21bc:4::/62 is the assigned network, and 65535 is the ASN delegated to this peer.(this is actually the live configuration of initLab)

			bgpd.conf:

			<pre>
			!
			router bgp 65535
			bgp router-id 192.168.232.1
			no bgp default ipv4-unicast
			neighbor 2001:67c:21bc:7fff:2:1:0:1 remote-as 200533
			neighbor 2001:67c:21bc:7fff:2:1:0:1 interface lab-ipv6-od
			neighbor 2001:67c:21bc:7fff:2:1:0:1 timers 3 10
			neighbor 2001:67c:21bc:7fff:2:1:1:1 remote-as 200533
			neighbor 2001:67c:21bc:7fff:2:1:1:1 interface lab-ipv6-tbc
			neighbor 2001:67c:21bc:7fff:2:1:1:1 timers 3 10
			!
			address-family ipv6
			network 2001:67c:21bc:4::/62
			neighbor 2001:67c:21bc:7fff:2:1:0:1 activate
			neighbor 2001:67c:21bc:7fff:2:1:0:1 route-map external-out out
			neighbor 2001:67c:21bc:7fff:2:1:1:1 activate
			neighbor 2001:67c:21bc:7fff:2:1:1:1 route-map external-out out
			exit-address-family
			!
			ipv6 prefix-list mine seq 5 permit 2001:67c:21bc:4::/62
			ipv6 prefix-list mine seq 15 deny any
			!
			route-map external-out permit 10
			match ipv6 address prefix-list mine
			!
			route-map external-out deny 20
			!

			</pre>

	= Mikrotik =		= Mikrotik =