Changes between Version 1 and Version 2 of TipAndDoc/service/sakura/ipv6

Timestamp:

Mar 2, 2011 12:03:43 AM (14 years ago)

Author:

mitty

Comment:

--

TipAndDoc/service/sakura/ipv6

@@ -1 +1 @@
 [[PageOutline]]
 
+ = using Sakura 6rd =
  * [http://research.sakura.ad.jp/6rd-trial/ さくらの6rd（トライアル） « さくらインターネット研究所]
   * [http://research.sakura.ad.jp/6rd-trial/6rd-trial-ubuntu1010/ 6rd設定方法（Ubuntu10.10編） « さくらインターネット研究所]
@@ -41 +42 @@
   > default via ::61.211.224.125 dev tun6rd  metric 1024  mtu 1280 advmss 1220 hoplimit 0
   > }}}
+
+ * howto on 10.04 [http://www.litech.org/6rd/ Linux 6RD HOWTO]
+
+ == re-enable IPv6 ==
+ * see wiki:TipAndDoc/network/ipv6#lucid
+
+ * $ sudo vim /etc/sysctl.conf
+{{{
+Index: /etc/ufw/sysctl.conf
+===================================================================
+--- /etc/ufw/sysctl.conf        (revision 530)
++++ /etc/ufw/sysctl.conf        (revision 531)
+@@ -30,8 +30,3 @@
+
+ #net/ipv4/tcp_fin_timeout=30
+ #net/ipv4/tcp_keepalive_intvl=1800
+-
+-#disable ipv6
+-net.ipv6.conf.all.disable_ipv6 = 1
+-net.ipv6.conf.default.disable_ipv6 = 1
+-net.ipv6.conf.lo.disable_ipv6 = 1
+}}}
+ * $ sudo vim /etc/ufw/sysctl.conf
+{{{
+Index: /etc/sysctl.conf
+===================================================================
+--- /etc/sysctl.conf    (revision 530)
++++ /etc/sysctl.conf    (revision 531)
+@@ -32,11 +32,6 @@
+ #net.ipv6.conf.all.forwarding=1
+
+
+-#disable ipv6
+-net.ipv6.conf.all.disable_ipv6 = 1
+-net.ipv6.conf.default.disable_ipv6 = 1
+-net.ipv6.conf.lo.disable_ipv6 = 1
+-
+ ###################################################################
+ # Additional settings - these settings can improve the network
+ # security of the host and prevent against some network attacks
+}}}
+
+ == backport maverick kernel ==
+ * $ sudo aptitude install linux-headers-generic-lts-backport-maverick linux-image-generic-lts-backport-maverick
+{{{
+  linux-headers-2.6.35-23{a} linux-headers-2.6.35-23-generic{a}
+  linux-headers-generic-lts-backport-maverick linux-image-2.6.35-23-generic
+  linux-image-generic-lts-backport-maverick
+}}}
+
+ == backport maverick iproute ==
+ * $ sudo aptitude install -R python-software-properties
+{{{
+  python-software-properties unattended-upgrades{a}
+}}}
+
+ * $ sudo add-apt-repository ppa:nathan-launchpad/iproute-lucid-ppa
+{{{
+Executing: gpg --ignore-time-conflict --no-options --no-default-keyring --secret-keyring /etc/apt/secring.gpg --trustdb-name /etc/apt/trustdb.gpg --keyring /etc/apt/trusted.gpg --primary-keyring /etc/apt/trusted.gpg --keyserver keyserver.ubuntu.com --recv 0ABF9419A50E06EF0E31A901F798C386A6A6010B
+gpg: requesting key A6A6010B from hkp server keyserver.ubuntu.com
+gpg: key A6A6010B: public key "Launchpad iproute-ppa" imported
+gpg: Total number processed: 1
+gpg:               imported: 1  (RSA: 1)
+}}}
+
+ * $ sudo aptitude update
+ * $ sudo aptitude install iproute
+{{{
+  iproute
+}}}
+
+ == apply settings ==
+ * printf "2001:e41:%02x%02x:%02x%02x::1\n" 59 106 180 123
+{{{
+2001:e41:3b6a:b47b::1
+}}}
+
+ * $ sudo vim /etc/network/interfaces
+{{{
+Index: /etc/default/ufw
+===================================================================
+--- /etc/default/ufw    (revision 532)
++++ /etc/default/ufw    (revision 533)
+@@ -4,7 +4,7 @@
+ # Set to yes to apply rules to support IPv6 (no means only IPv6 on loopback
+ # accepted). You will need to 'disable' and then 'enable' the firewall for
+ # the changes to take affect.
+-IPV6=no
++IPV6=yes
+
+ # Set the default input policy to ACCEPT, ACCEPT_NO_TRACK, DROP, or REJECT.
+ # ACCEPT enables connection tracking for NEW inbound packets on the INPUT
+Index: /etc/network/interfaces
+}}}
+ * $ sudo vim /etc/default/ufw
+{{{
+===================================================================
+--- /etc/network/interfaces     (revision 532)
++++ /etc/network/interfaces     (revision 533)
+@@ -16,3 +16,14 @@
+         # dns-* options are implemented by the resolvconf package, if installed
+         dns-nameservers 210.188.224.10
+         dns-search sakura.ne.jp
++
++auto tun6rd
++iface tun6rd inet6 v4tunnel
++       address 2001:e41:3b6a:b47b::1
++       netmask 32
++       local 59.106.180.123
++       endpoint any
++       gateway ::61.211.224.125
++       ttl 64
++       up ip tunnel 6rd dev tun6rd 6rd-prefix 2001:e41::/32
++       up ip link set mtu 1280 dev tun6rd
+}}}