HOW TO: IPv6, 6in4 tunnel for begginers

Post new topic   Reply to topic    DD-WRT Forum Index -> Atheros WiSOC based Hardware
Goto page Previous  1, 2, 3, 4, 5, 6, 7  Next
View previous topic :: View next topic  
Author Message
bdg2
DD-WRT User


Joined: 18 Apr 2013
Posts: 319
PostPosted: Fri Jul 24, 2015 0:03    Post subject: Reply with quote
mrlanrat wrote:
I just tried lowering my MTU, it did not seem to have any affect.


Okay.
I thought it was a bit of a long shot, but worth trying.
Back to top View user's profile Send private message Visit poster's website
Sponsor
Juniorek
DD-WRT User


Joined: 14 Feb 2011
Posts: 72
PostPosted: Fri Jul 24, 2015 19:28    Post subject: Reply with quote
mrlanrat wrote:
I'm having some trouble getting a HE tunnel working.
I followed all the instructions in the first post, but the router is unable to ping any ipv6 address not on the LAN.

I'm using DD-WRT v3.0-r27506 on a WZR-HP-AG300H. I'm wondering is I have a build with broken ipv6, but I'l like to rule out any misconfigurations first.

Does anyone know what might be wrong with this configuration?

Thanks.


try installing 27096... i also had problems with latest builds... yesterday i`ve noticed no ipv6 even when the router had an ip... reverted back to 27096 and it works like a charm Smile
_________________
TP-Link TL-WDR4300 v1 - DD-WRT std svn 26372;? 6to4 Smile
Back to top View user's profile Send private message
bdg2
DD-WRT User


Joined: 18 Apr 2013
Posts: 319
PostPosted: Fri Jul 24, 2015 21:00    Post subject: Reply with quote
Juniorek wrote:
try installing 27096... i also had problems with latest builds... yesterday i`ve noticed no ipv6 even when the router had an ip... reverted back to 27096 and it works like a charm Smile

IPv6 is working well on my WNDR3700v2 with r27506 and a tunnelbroker tunnel.
Back to top View user's profile Send private message Visit poster's website
mrlanrat
DD-WRT Novice


Joined: 24 Nov 2007
Posts: 20
PostPosted: Fri Jul 24, 2015 23:27    Post subject: Reply with quote
I just got it working with r27506, it turns out my ISP's modem was blocking protocol 41.
Back to top View user's profile Send private message
bdg2
DD-WRT User


Joined: 18 Apr 2013
Posts: 319
PostPosted: Wed Aug 05, 2015 2:00    Post subject: Reply with quote
Mile-Lile wrote:
On the Administartion/Comannds tab save these as firewall script:

Code:
iptables -I INPUT 2 -s 66.220.2.74 -p icmp -j ACCEPT
ip6tables -I FORWARD 3 -p icmpv6 --icmpv6-type echo-request -j ACCEPT


That second line doesn't seem to do anything for me.
I'm assuming it is supposed to let icmpv6 through to my PCs so that, for instance, you don't get the error 'icmp filtered' under IPv6 connectivity on this test web page: http://ipv6-test.com/

Is that right?
Back to top View user's profile Send private message Visit poster's website
Mile-Lile
DD-WRT Guru


Joined: 24 Feb 2013
Posts: 1634
Location: Belgrade
PostPosted: Wed Aug 05, 2015 5:34    Post subject: Reply with quote
yes
Back to top View user's profile Send private message
bdg2
DD-WRT User


Joined: 18 Apr 2013
Posts: 319
PostPosted: Wed Aug 05, 2015 8:23    Post subject: Reply with quote
Mile-Lile wrote:
yes

For me it doesn't work to stop ICMPv6 coming up as filtered. Sad
Does it work for you?
Back to top View user's profile Send private message Visit poster's website
Mile-Lile
DD-WRT Guru


Joined: 24 Feb 2013
Posts: 1634
Location: Belgrade
PostPosted: Wed Aug 05, 2015 9:34    Post subject: Reply with quote
I can not test it right now, but last time I checked, it worked for me... I got 19/20 on that testing site... Good news is that Kong recently changed ipv6 firewall behaviour and added this rule so we wont be needing it in next public release...
Back to top View user's profile Send private message
bdg2
DD-WRT User


Joined: 18 Apr 2013
Posts: 319
PostPosted: Wed Aug 05, 2015 21:43    Post subject: Reply with quote
Mile-Lile wrote:
I can not test it right now, but last time I checked, it worked for me... I got 19/20 on that testing site... Good news is that Kong recently changed ipv6 firewall behaviour and added this rule so we wont be needing it in next public release...


I figured it out.
For some reason my Windows 7 PC wasn't responding to ICMPv6.

Makes me wonder if there is really any need for a response.
Back to top View user's profile Send private message Visit poster's website
bdg2
DD-WRT User


Joined: 18 Apr 2013
Posts: 319
PostPosted: Fri Aug 07, 2015 0:33    Post subject: Reply with quote
I've used
Code:
iptables -I INPUT 2 -s 66.220.2.74 -p icmp -j ACCEPT
ip6tables -I FORWARD 3 -p icmpv6 -j ACCEPT

in the end because I figure that surely all the new IPv6 ICMP functions need to get through for the new (neighbour discovery etc.) bits to work.

But since it seems okay without ICMPv6 maybe none are really needed. Perhaps the tunnel knows everything it needs to know about the connection.

I don't understand enough about the new stuff in ICMPv6.
Back to top View user's profile Send private message Visit poster's website
Mile-Lile
DD-WRT Guru


Joined: 24 Feb 2013
Posts: 1634
Location: Belgrade
PostPosted: Sat Sep 19, 2015 10:00    Post subject: Reply with quote
After some time, I upgraded my PCs to Windows 10 and tried again this tutorial and it did not worked for me:(
Didn't worked with radvd and dhcpc6! So, I started to dig.
Found this blog

I entered two of these in PowerShell

Code:
netsh interface ipv6 set global randomizeidentifiers=disabled store=persistent


Code:
netsh interface ipv6 set privacy state=disabled store=persistent


Then I noticed that DNSMasq conf has syntax error

line

Code:
ra-param=*,10,300


should be

Code:
ra-param=br0,10,300


* stands for interface name

finally if you use OpenDNS for filtering save this to your DNSMasq conf.:

Code:
interface=br0
enable-ra
dhcp-range=::1000,::FFFF,constructor:br0,ra-names,5m
dhcp-option=option6:dns-server,[::ffff:d043:dede],[::ffff:d043:dcdc]
ra-param=br0,10,300
quiet-ra
quiet-dhcp
quiet-dhcp6


save this as your firewall:

Code:
iptables -I INPUT 2 -s 66.220.2.74 -p icmp -j ACCEPT


and everything is working as a charm:)











Back to top View user's profile Send private message
bdg2
DD-WRT User


Joined: 18 Apr 2013
Posts: 319
PostPosted: Sat Sep 19, 2015 16:28    Post subject: Reply with quote
Mile-Lile wrote:
After some time, I upgraded my PCs to Windows 10 and tried again this tutorial and it did not worked for me:(
....[snip]


Strange.
The original way works fine for me with r27745 on my WNDR-3700v2.

I just leave the IPv6 address entries for DNS servers blank and my computers talk to DNSmasq using IPv6 if they like and that talks to OpenDNS via IPv4 so all the OpenDNS filtering I have configured still works.
Back to top View user's profile Send private message Visit poster's website
bdg2
DD-WRT User


Joined: 18 Apr 2013
Posts: 319
PostPosted: Tue Dec 29, 2015 16:22    Post subject: Reply with quote
bdg2 wrote:
Mile-Lile wrote:
After some time, I upgraded my PCs to Windows 10 and tried again this tutorial and it did not worked for me:(
....[snip]


Strange.
The original way works fine for me with r27745 on my WNDR-3700v2.

I just leave the IPv6 address entries for DNS servers blank and my computers talk to DNSmasq using IPv6 if they like and that talks to OpenDNS via IPv4 so all the OpenDNS filtering I have configured still works.


Still working fine with r28586.

What happened to all the graphics?
Back to top View user's profile Send private message Visit poster's website
Mile-Lile
DD-WRT Guru


Joined: 24 Feb 2013
Posts: 1634
Location: Belgrade
PostPosted: Wed Dec 30, 2015 6:52    Post subject: Reply with quote
site for hosting screenshots went down for good... so, I wroted wiki article... now you have it on ddwrt wiki... see my sig.
Back to top View user's profile Send private message
bdg2
DD-WRT User


Joined: 18 Apr 2013
Posts: 319
PostPosted: Fri Feb 26, 2016 23:11    Post subject: Reply with quote
Mile-Lile wrote:
site for hosting screenshots went down for good... so, I wroted wiki article... now you have it on ddwrt wiki... see my sig.


Not so useful without the discussion.
Some of the graphics seem to be missing too.
Back to top View user's profile Send private message Visit poster's website
Goto page Previous  1, 2, 3, 4, 5, 6, 7  Next Display posts from previous:    Page 6 of 7
Post new topic   Reply to topic    DD-WRT Forum Index -> Atheros WiSOC based Hardware All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You cannot download files in this forum