IPv6 updated instructions and scripts for v24

Post new topic   Reply to topic    DD-WRT Forum Forum Index -> Broadcom SoC based Hardware
Goto page Previous  1, 2, 3, 4, 5, 6, 7, 8
Author Message
cmfodera
DD-WRT Novice


Joined: 31 Dec 2010
Posts: 1

PostPosted: Sat Jan 22, 2011 16:18    Post subject: Reply with quote
can someone let me know if I should follow the instructions listed on page one of this thread or from the wiki: http://www.dd-wrt.com/wiki/index.php/IPv6

I don't even have Radvd listed as an option on my Admin/Mgmt page. I am running v24-sp2 (08/12/10) std - build 14929 on a WRT54GL.

Thanks in advance.
Sponsor
jmichae3
DD-WRT Novice


Joined: 08 Nov 2009
Posts: 25

PostPosted: Sat Feb 19, 2011 8:52    Post subject: Reply with quote
I am fairly new to dd-wrt and IPV6. I know that IPV4 is being phased out.

The last of the IPV4 adddresses is being served out somewhere around october, I don't remember 2010 or 2011.

so don't you think IPV6 should be a built-in common part of the firmware defaults really quick?

and since I have older router firmware, could someone please come up with an IPV6 script for me for the Linksys WRT54GSv4.0?

thanks. as far as the first part goes, you won't be just doing me a favor, you'll be doing the entire dd-wrt.com community a favor.

I had thought about having an IPV6 checkbox. I don't know if all networks MUST have IPV6, but I would make sure that checkbox was on by default, so it will do people service.
zymax
DD-WRT Novice


Joined: 13 Jun 2011
Posts: 1

PostPosted: Mon Jun 13, 2011 1:44    Post subject: Ipv6 tab on dir-615 e3 build 16785 Reply with quote
hey i am trying to find a build version anywhere that enables the ipv6 on my DIR-615 E3 router anyone know where i can find a dd-wrt firmware that will allow me to have this ipv6 tab?
mpyusko
DD-WRT User


Joined: 09 Apr 2009
Posts: 156
Location: Rochester NY

PostPosted: Fri Aug 26, 2011 14:28    Post subject: IPv6 DNS? Reply with quote
Are there any provisions to use an IPv6 DNS server?
_________________
-mpyusko
chuggo
DD-WRT Novice


Joined: 30 Mar 2008
Posts: 10

PostPosted: Sun Sep 18, 2011 6:32    Post subject: Reply with quote
I was able to get ipv6 going using an older version of v24 (SP1), but I want to have a more recent version and would like to keep up with updates (whenever that happens).

But the newer versions, even the "standard" release which the wiki says supports ipv6 does not contain radvd. None of these scripts work without radvd and I want to use a recent version rather than one that is vulnerable to milw0rm. Any ideas?
aLIEnTxC
DD-WRT Novice


Joined: 26 Oct 2008
Posts: 16

PostPosted: Sat Oct 08, 2011 11:09    Post subject: Reply with quote
lazytom wrote:
> post the modules here ...?
Sure, I thought since nobody really asking for them, everybody got 'em. And compiling them was just following the wiki. Well, with the exception of nf_conntrack_ipv6 which was complaining about JHASH_GOLDEN_RATIO not beeing defined altough the jhash.h file was included (solved that the lazy way Wink )


Hi,

I am use your kernel modules on Firmware Version

DD-WRT v24-sp2 (04/11/11) mega - build 16773M NEWD-2 K2.6 Eko

My problem is, that the ip6t_rt module is not working or is it a error of the iptables command?

insmod works without errors... but when I wanne use it I get this:


Code:
root@wrt01:~# insmod /jffs/lib/modules/2.6.24.111/ip6t_rt.ko
root@wrt01:~# lsmod
Module                  Size  Used by
ip6t_rt                 4096  0
nf_nat_pptp             4096  0
nf_conntrack_pptp       4096  1 nf_nat_pptp
nf_nat_proto_gre        4096  1 nf_nat_pptp
nf_conntrack_proto_gre     4096  1 nf_conntrack_pptp
sit                     8192  0
nf_conntrack_ipv6      16384  2
ipv6                  249856  26 sit,nf_conntrack_ipv6
ip6table_filter         4096  1
ip6_tables             12288  2 ip6t_rt,ip6table_filter
etherip                 8192  0
ext2                   36864  1
mbcache                 4096  0
usb_storage            32768  1
sd_mod                 20480  2
scsi_wait_scan           416  0
scsi_mod               69632  3 usb_storage,sd_mod,scsi_wait_scan
ohci_hcd               16384  0
uhci_hcd               20480  0
ehci_hcd               28672  0
usbcore                98304  5 usb_storage,ohci_hcd,uhci_hcd,ehci_hcd
switch_robo             4096  0
switch_core             8192  1 switch_robo
bcm57xx               106496  0 
root@wrt01:~# ip6tables -I FORWARD -m rt --rt-type 0 -j DROP
ip6tables v1.3.7: Couldn't find match `rt'

Try `ip6tables -h' or 'ip6tables --help' for more information.
root@wrt01:~#


any idea?

EDIT: ok found the problem... I installed ip6tables from http://downloads.openwrt.org/kamikaze/7.09/brcm47xx-2.6/packages/ip6tables_1.3.7-1_mipsel.ipk and exported the IP6TABLES_LIB_DIR

now it works.. Smile

Only one think is left:

When I set up a simple reject rule I get in syslog this:

Code:
kernel: ip6t_REJECT: Unknown symbol xfrm_lookup


and on the command line this:

Code:
/jffs/usr/sbin/ip6tables -A FORWARD -i sixxs -p udp --dport 33434:33523 -j REJECT
ip6tables: No chain/target/match by that name


Can you fix this? Or can I do it?
saudiqbal
DD-WRT Novice


Joined: 28 Mar 2012
Posts: 10

PostPosted: Tue Apr 10, 2012 19:42    Post subject: Reply with quote
rtoledo wrote:
socal87 wrote:
So I'm coming back to this after a while...recently changed ISPs, and while I have no idea if Time Warner Cable supports ipv6, I was wondering...is there any additional configuration necessary (beyond enabling ipv6 under Administration) to set up native ipv6 on DD-WRT?

If that's confusing, what I'm asking is...say your ISP supports ipv6 to the consumer, and you want your router running DD-WRT to act in native ipv6 mode (though preferably dual with ipv4 and ipv6), get an ipv6 DHCP lease, and provide appropriate addresses to devices on your network...how would one accomplish this?


from what I've read so far, and IF I understood it, if you have a ISP that provides native, that is the easiest way to do it.

all you would need is turn on IPV6 in administration , and RADVD , then just have radvd advertise the first 4 octects of the address and each computer inside your router space then sets up it's address using the 4 first octects and choosing their last 4 from a combination that includes the MAC address.

if those computers are WIN7 boxes then they use a non-standard way that is suppossed to give you some privacy as the MAC address is NOT revealed and also changes every so often


I have TWC and when I connect directly to Motorola modem I can open ipv6 website without any problems but I enabled Ipv6 on my ddwrt (wrt160n) and I still cannot open any ipv6 sites. What I can type in Radvd config to get ipv6 to work.

When I go to test-ipv6.com I get
Your IPv6 address on the public Internet appears to be 2001:0:.......................
Your IPv6 service appears to be: Teredo

I used this script in my radvd
interface br0 {
MinRtrAdvInterval 3;
MaxRtrAdvInterval 10;
AdvLinkMTU 1280;
AdvSendAdvert on;
prefix 0:0:0:1::/64 {
AdvOnLink on;
AdvAutonomous on;
AdvValidLifetime 86400;
AdvPreferredLifetime 86400;
Base6to4Interface vlan1;
AdvRouterAddr on;
};
}

Anything I m not doing properly?

_________________
Linksys WRT160N V3
Firmware: DD-WRT v24-sp2 (03/19/12) std-nokaid-small
aLIEnTxC
DD-WRT Novice


Joined: 26 Oct 2008
Posts: 16

PostPosted: Sun May 06, 2012 19:46    Post subject: Reply with quote
aLIEnTxC wrote:

Only one thing is left:

When I set up a simple reject rule I get in syslog this:

Code:
kernel: ip6t_REJECT: Unknown symbol xfrm_lookup


and on the command line this:

Code:
/jffs/usr/sbin/ip6tables -A FORWARD -i sixxs -p udp --dport 33434:33523 -j REJECT
ip6tables: No chain/target/match by that name


any update?

looks like xfrm_lookup.ko or xfrm6_lookup.ko is missing?

I also looked at /lib/modules/2.6.24.111/* but there is no module with that name...

I need the REJECT module Cool

EDIT: I compiled now myself the modules fresh:

when I grep for xfrm_lookup I see:

Quote:

Binary file ./net/built-in.o matches
Binary file ./net/xfrm/xfrm_policy.o matches
./net/xfrm/xfrm_policy.c:EXPORT_SYMBOL(xfrm_lookup);
Binary file ./net/xfrm/built-in.o matches
Binary file ./vmlinux matches


so it is exported in xfrm_policy but in which modules it goes? Or it goes direct into the kernel, because it is written into built-in.o/vmlinux?

EDIT2: because I build the complete stuff new, I made a updated package with all modules (also usb serial)



2.6.24.111.tar.bz2
 Description:
Missing Kernel Modules for Mega Build

Download
 Filename:  2.6.24.111.tar.bz2
 Filesize:  256.71 KB
 Downloaded:  501 Time(s)

totaluser
DD-WRT User


Joined: 31 May 2010
Posts: 128

PostPosted: Sun Jan 13, 2013 1:13    Post subject: Reply with quote
I am successfully running IPv6 setup with ip6tables FW

I was tweaking it a bit to prevent bruteforce attacks using match recent as I do in IPv4
Code:
ip6tables -A FORWARD -p udp --dport 9999 -i vlan2 -m state --state NEW -m recent --set --name OPENVPN

Code:
ip6tables v1.3.7: Couldn't find match `recent'


I downloaded sources from SVN and crossompiled netfilter ipv6 modules but none seems to provide match recent

which module do I need to have?
Do I need to patch that 2.6.24.111 kernel (because there is no such option in make menuconfig)

I found a patch but I failed to compile it after applying
http://code.google.com/searchframe#kjJ_yLEz2oM/trunk/kernel-2.6/615-xt_recent.patch&q=recent%20package:wl500g%5C.googlecode%5C.com&ct=rc&cd=14&sq=

I also found this post
http://lists.fedoraproject.org/pipermail/test/2006-October/052900.html

but it still would not produce a module needed



did anybody succeed in using match state with ip6tables?

I am running 16994 BIG on Netgear WNR3500L




Joined: 01 Jan 1970
Posts:

PostPosted: Sun Jan 13, 2013 15:52    Post subject: Reply with quote
There's also the issue of the ip command not working anymore so any startup scripts that require it won't work post r18777.

http://svn.dd-wrt.com:8000/ticket/2590

Confused
iav
DD-WRT Novice


Joined: 11 Feb 2010
Posts: 7

PostPosted: Tue Apr 30, 2013 2:44    Post subject: Reply with quote
line
Code:
WANIP="$(ifconfig vlan2 | sed -n '/inet /{s/.*addr://;s/ .*;p}')"

not work for me (returns nothing) - at least on wrt310n, with DD-WRT v24-sp2 std (c) 2010 NewMedia-NET GmbH
Release: 08/07/10 (SVN revision: 14896)

this line does the work:
Code:
WANIP="$(ifconfig vlan2 | grep 'inet addr' | cut -d : -f2 | cut -d ' ' -f1)"


Can somebody do tests and, possible, fix wiki?
idaadi
DD-WRT Novice


Joined: 30 Aug 2013
Posts: 2

PostPosted: Fri Aug 30, 2013 1:10    Post subject: Reply with quote
iav wrote:
line
Code:
WANIP="$(ifconfig vlan2 | sed -n '/inet /{s/.*addr://;s/ .*;p}')"

not work for me (returns nothing) - at least on wrt310n, with DD-WRT v24-sp2 std (c) 2010 NewMedia-NET GmbH
Release: 08/07/10 (SVN revision: 14896)

this line does the work:
Code:
WANIP="$(ifconfig vlan2 | grep 'inet addr' | cut -d : -f2 | cut -d ' ' -f1)"


Can somebody do tests and, possible, fix wiki?


The final script for me was:

Code:
insmod ip_tunnel
insmod /lib/modules/`uname -r`/kernel/net/ipv6/sit.ko
sleep 5
radvd -C /tmp/radvd.conf start
sleep 5
WANIP="$(ifconfig vlan2 | grep 'inet addr' | cut -d : -f2 | cut -d ' ' -f1)"
if [ -n "$WANIP" ]
then
V6PREFIX=$(printf '2002:%02x%02x:%02x%02x' $(echo $WANIP | tr . ' '))
ip tunnel add tun6to4 mode sit ttl 255 remote any local $WANIP
ip link set tun6to4 mtu 1480
ip link set tun6to4 up
ip addr add $V6PREFIX:0::1/16 dev tun6to4
ip addr add $V6PREFIX:1::1/64 dev br0
ip -6 route add 2000::/3 via ::192.88.99.1 dev tun6to4
kill -HUP $(cat /var/run/radvd.pid)
fi
sleep 10
radvd -C /tmp/radvd.conf start


UPDATE THE WIKI PLEASE !!!! Shocked Rolling Eyes Crying or Very sad Working on DD-WRT v24-sp2 (07/24/13) mega - build 22118 on E2000

BR
Goto page Previous  1, 2, 3, 4, 5, 6, 7, 8 Display posts from previous:    Page 8 of 8
Post new topic   Reply to topic    DD-WRT Forum Forum Index -> Broadcom SoC based Hardware All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum