Re: [Cerowrt-devel] Still trouble with 6in4 tunnel

Re: [Cerowrt-devel] Still trouble with 6in4 tunnel

[Richard Brown]

Dave,

On Jun 10, 2012, at 3:00 PM, Richard Brown <richard.e.brown@dartware.com> wrote:

> I have been working off and on to get IPv6 addressing working on multiple interfaces on CeroWrt 3.3.6-2. I can make it work on any single interface, but not two at once
> ... 

As I noted in the earlier message (10 June), I'm on the air with IPv6 on a single interface, which is sufficient for my testing purposes. 

Any chance that you'll get a chance to look at this? (I'm out of town from this weekend for two weeks, so I won't be looking after that...)

Thanks for all your good work!

Rich Brown
Hanover, NH USA

Re: [Cerowrt-devel] Still trouble with 6in4 tunnel

[Dave Taht]

I note full 6rd support for all sorts of netmasks just landed in
openwrt (and I'll have it in cerowrt-3.3.8-6), and that apparently it
works on AT&T's network as well as things like free.fr. 6to4 support
has also been improved...

As for the issue with multiple ipv6 interfaces, I'm away from the
bloatlab#1 and between releases of cerowrt so I don't think I'll be
able to get to it until cero stablizes again next week.

I am trying to get a "bloatlab  #2" up on comcast in particular somehow,
using openwrt in part and cerowrt in others - basically eventually
entirely replacing the local wifi network where I'm living in
california  - but am bottlenecked on funds for the needed hardware
(need 6 ubiquity nanostation 5Ms and a 3-5 radios with omnis in
addition to 3 3800s)

and of course, time/energy/food money. Goal in life on this setup is to

0) Get ipv6 working well

1) get some real-life data on how all the work done so far works in real life
    This includes things like getting constant monitoring done via dartware (:))

2) prototype the eventual wireless fixes to the mac80211 layer.
FQ_codel is actually doing a surprisingly good job with the current
hacks on top of wifi, but we think we can do much better, although the
work looks to take 6-9 months with the all volunteer effort....

3) Test out some of the new mesh networking code - authenticated
routing has landed in quagga! woo-hoo!


This is just one project proposal among many I'm dealing with, it
really comes down to what project shows up with funding first. I
happen to be motivated to do it because the network where I am is
terrible - and actually based on hardware designed and deployed almost
10 years ago based on recommendations in my/greg's old arlan wireless
howto! - so I'm willing to fix it for everyone in this complex just to
get it *right* for me, and gain some more operational experience.....
and lastly the hw budget is under 1.5k for the basic gear...


On Tue, Jun 19, 2012 at 11:26 AM, Richard Brown
<richard.e.brown@dartware.com> wrote:
> Dave,
>
> On Jun 10, 2012, at 3:00 PM, Richard Brown <richard.e.brown@dartware.com> wrote:
>
>> I have been working off and on to get IPv6 addressing working on multiple interfaces on CeroWrt 3.3.6-2. I can make it work on any single interface, but not two at once
>> ...
>
> As I noted in the earlier message (10 June), I'm on the air with IPv6 on a single interface, which is sufficient for my testing purposes.
>
> Any chance that you'll get a chance to look at this? (I'm out of town from this weekend for two weeks, so I won't be looking after that...)
>
> Thanks for all your good work!
>
> Rich Brown
> Hanover, NH USA
> _______________________________________________
> Cerowrt-devel mailing list
> Cerowrt-devel@lists.bufferbloat.net
> https://lists.bufferbloat.net/listinfo/cerowrt-devel



-- 
Dave Täht
SKYPE: davetaht
http://ronsravings.blogspot.com/

Re: [Cerowrt-devel] Still trouble with 6in4 tunnel

[Chris Lawrence]

[-- Attachment #1: Type: text/plain, Size: 255 bytes --]

There may be a similar problem with the 6in4.sh script that was in the
6to4.sh script in /lib/network (look for the CeroWRT bug report on 6to4
lossage for my patch). I was having similar 6to4 issues due to there being
multiple LAN side interfaces.

Chris

[-- Attachment #2: Type: text/html, Size: 273 bytes --]

Re: [Cerowrt-devel] Still trouble with 6in4 tunnel

[Dave Taht]

I will take a look at this after I get 3.3.8-2 done

On Sun, Jun 10, 2012 at 10:23 AM, Richard Brown
<richard.e.brown@dartware.com> wrote:
> Folks,
>
> I have been working off and on to get IPv6 addressing working on multiple interfaces on CeroWrt 3.3.6-2. I can make it work on any single interface, but not two at once.
>
> I did ask on the openwrt-devel list, but got some unhelpful answers (they said that my demo file had the wrong info because I had obfuscated my userid and password). Furthermore CeroWrt *is* somewhat different in that each of its interfaces has a different subnet, and I suspect this may be related, and thus my question:
>
> Here's my setup: I have a 6in4 tunnel from Hurricane Electric working fine. When I ssh into CeroWrt and ping and traceroute to IPv6 addresses, everything work as expected.
>
> I tested the attached script from a fresh installation of CeroWrt 3.3.6-2. The script assigns two interfaces with IPv6 addresses from the /48 that HE assigns, like this:
>
> uci set network.se00.ip6addr='2001:470:8a63:100::1/64'
> uci set network.sw10.ip6addr='2001:470:8a63:200::1/64'
>
> Restarting the router with this configuration allows one to work, but not the other. Specifically, my MacBook gets an IPv6 address on one interface, but after unplugging and switching to the other interface, it does not get an IPv6 address. (It may be related to which interfaces was up/had something connected when the router  when it restarted.)
>
> My questions:
>
> 1) Are the commands in the attached script "going in the right direction"?
>
> 2) Should I be assigning separate /64s on each of the interfaces?
>
> 3) What other information could I provide?
>
> Once I get this working, I'll update my posting on the wiki - http://www.bufferbloat.net/projects/cerowrt/wiki/IPv6_Tunnel Many thanks.
>
> Rich Brown
> Hanover, NH USA
>
>
> _______________________________________________
> Cerowrt-devel mailing list
> Cerowrt-devel@lists.bufferbloat.net
> https://lists.bufferbloat.net/listinfo/cerowrt-devel
>



-- 
Dave Täht
SKYPE: davetaht
http://ronsravings.blogspot.com/

[Cerowrt-devel] Still trouble with 6in4 tunnel

[Richard Brown]

[-- Attachment #1: Type: text/plain, Size: 1702 bytes --]

Folks,

I have been working off and on to get IPv6 addressing working on multiple interfaces on CeroWrt 3.3.6-2. I can make it work on any single interface, but not two at once. 

I did ask on the openwrt-devel list, but got some unhelpful answers (they said that my demo file had the wrong info because I had obfuscated my userid and password). Furthermore CeroWrt *is* somewhat different in that each of its interfaces has a different subnet, and I suspect this may be related, and thus my question:

Here's my setup: I have a 6in4 tunnel from Hurricane Electric working fine. When I ssh into CeroWrt and ping and traceroute to IPv6 addresses, everything work as expected.

I tested the attached script from a fresh installation of CeroWrt 3.3.6-2. The script assigns two interfaces with IPv6 addresses from the /48 that HE assigns, like this:

uci set network.se00.ip6addr='2001:470:8a63:100::1/64'
uci set network.sw10.ip6addr='2001:470:8a63:200::1/64'

Restarting the router with this configuration allows one to work, but not the other. Specifically, my MacBook gets an IPv6 address on one interface, but after unplugging and switching to the other interface, it does not get an IPv6 address. (It may be related to which interfaces was up/had something connected when the router  when it restarted.)

My questions:

1) Are the commands in the attached script "going in the right direction"?

2) Should I be assigning separate /64s on each of the interfaces?

3) What other information could I provide?

Once I get this working, I'll update my posting on the wiki - http://www.bufferbloat.net/projects/cerowrt/wiki/IPv6_Tunnel Many thanks.

Rich Brown
Hanover, NH USA


[-- Attachment #2: tunnelbroker-pub.sh --]
[-- Type: application/octet-stream, Size: 4262 bytes --]

#!/bin/sh
# Script for setting CeroWrt (and OpenWrt) to create an IPv6 tunnel 
# to Hurricane Electric at http://www.tunnelbroker.net/
# There are two steps:
# 1) Go to the Tunnelbroker.net site to set up your free account
# 2) Run the script below, using the parameters supplied by Tunnelbroker
# This CeroWrt page gives detailed instructions for setting up an IPv6 tunnel: 
#    http://www.bufferbloat.net/projects/cerowrt/wiki/IPv6_Tunnel  
# 
# Once you've created your account and a tunnel, get the "Example
# Configurations" for OpenWRT Backfire, and paste them into this file
# named "tunnel.sh" Finally, ssh into the router and execute this script 
# with these steps:
# 
# ssh root@172.30.42.1
# cd /tmp
# cat > tunnel.sh 
# [paste in the contents of this file, then hit ^D]
# sh tunnel.sh
# [Restart your router. This seems to make a difference.]
#
# Presto! Your tunnel is set up. You should now be able 
#   communicate directly with IPv6 devices. 

# ==============================================
# Download and update all the interesting packages
# Some of these are pre-installed, but there is no 
# harm in updating/installing them a second time.
opkg update
opkg install 6in4

# Set the credentials for the tunnel login
# NB: These lines are automatically generated 
# specifically for *your* tunnel when you set it up
# Copy/paste them from the Example Configurations
# generated for the OpenWRT Backfire 10.03.1 dropdown
#
echo 'Setting up HE.net tunnel'
# ------- PASTE YOUR EXAMPLE CONFIGURATION LINES HERE --------
uci set network.henet=interface
uci set network.henet.proto=6in4
uci set network.henet.peeraddr=209.51.161.14
uci set network.henet.ip6addr='2001:470:1f06:64::2/64'
uci set network.henet.tunnelid=######
uci set network.henet.username=#####
uci set network.henet.password='###############'
# uci commit network

# ------ Set IPv6 subnets on the LAN interfaces...
# Addresses should be from the *routed* /48 address range assigned by HE.net
# Assigning se00 (secure wired LAN) and sw10 (secure wireless 5GHz - CEROwrt5)
echo 'Setting IPv6 addresses on local interfaces'
uci set network.se00.ip6addr='2001:470:8a63:100::1/64'
uci set network.sw10.ip6addr='2001:470:8a63:200::1/64'
#uci set network.sw00.ip6addr='2001:470:1f07:64::1/64'
#uci set network.gw00.ip6addr='2001:470:1f07:64::1/64'
#uci set network.gw01.ip6addr='2001:470:1f07:64::1/64' 
#uci set network.gw10.ip6addr='2001:470:1f07:64::1/64'
#uci set network.gw11.ip6addr='2001:470:1f07:64::1/64'
uci commit network

echo 'Restarting network...'
/etc/init.d/network restart

# CeroWrt puts WAN stuff in zone[0], not zone[1] as suggested by henet
uci set firewall.@zone[0].network='ge00 henet'
uci commit firewall

ifup henet
echo 'Restarting firewall...'
/etc/init.d/firewall restart

echo 'Done. You should restart the router now to make these take effect.'
# ------- END OF EXAMPLE CONFIGURATION LINES --------

# ==============================================
# Re-establishing the Tunnel
#
# NB: As of April 2012 (CeroWrt 3.3.1-4), the automatic re-establishment code 
# of the 6in4 module appears not to be working. You will need to re-establish 
# the tunnel manually when your external IP address changes.
#
# To re-establish the tunnel, say, because your external IP address changed,
# you can also use the following URL with these parameters. Note that the 
# USERNAME and PASSWORD are what you type to log into the Tunnelbroker site.
#
# USERNAME is the Account Name 
# PASSWORD is the current password
# TUNNELID is the Tunnel ID  
# https://USERNAME:PASSWORD@ipv4.tunnelbroker.net/ipv4_end.php?tid=TUNNELID
# 
# You can also use a non-HTTPS URL and parameters to re-establish the link.
# This form relies on hashed representations of the credentials since they're
# not carried on a secure connection. You can get more information about the
# parameters at https://ipv4.tunnelbroker.net/ipv4_end.php
#
# USERID is the "User ID" from the Tunnelbroker site's Main Page
# PWHASH is the MD5 hash of the password
# TUNNELID is the Tunnel ID
# http://ipv4.tunnelbroker.net/ipv4_end.php?ip=AUTO&apikey=USERID&pass=PWHASH&tid=TUNNELID
#
# --- end of script ---