[Bglug] IPv6

[Logan Streondj]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512



On 2018-09-23 08:13 PM, Remi Gauvin wrote:
> On 2018-09-23 07:49 PM, Logan Streondj wrote:
>> Hi all, As I recently managed to learn a bunch about IPv6 in
>> practice including how tunneling and routing subnets I figure
>> could do a presentation on it at our next meeting if anyone is
>> interested.
> 
> I would be very interested.  There are a few details I've been
> unable to figure out, and haven't had much time to test figure it
> all out.
> 
> One question that I really want to figure out is, how do I get an
> IP6 Address for a subnet from ISP (in this case, Rogers is the only
> one that really matters for our area.  Please correct me if you
> know of others.) and then redistribute/route that, (either router
> advert, or DHCP6)

Well I haven't had much success when dealing with Canadian ISP's
though it's been a few years since I've tried. However you can get
free /64 and /48 prefixes from https://tunnelbroker.net/

You need either a static or dynamic ipv4 address on at least one
machine to get a tunnel.

Once you have a tunnel, can route various prefixes to other computers
on it.

For example:

I have 2001:470:b09a::/48 prefix routed to my home openwrt box.

And I want to give a /60 prefix to one of my computers which the
router accesses over the br-lan interface.

then on my openwrt box I can setup a static route or on any linux machin
e:

ip route add 2001:470:b09a:e8c1::/60 via fe80::403f:97ff:fe2d:45c9 dev
br-lan


note the fe80:: address which is the link-local address, basically
it's fe80::<Mac Address>

so as long as you know the mac address of any computer you can connect
to it over ipv6 regardless of dhcp and w/e. which is a cool feature
that I use in some networks where they have old routers that don't
support reserving IP's for laptops that are taken offsite and so can't
have a static IP.

interesting note is that if you're using a link-local address often
have to add the interface name, so I wanted to ssh into it, I would do:

ssh -6 fe80::403f:97ff:fe2d:45c9%eth0 or w/e the interface actually is


though for global addresses like over the internet don't need to,
since they are routed via your gateway.
> 
> 
> _______________________________________________ Group mailing list 
> Group at bglug.ca http://bglug.ca/mailman/listinfo/group_bglug.ca
> 

- -- 
Logan Streondj,
A dream of Gaia's future.
twitter: https://twitter.com/streondj

You can use encrypted email with me,
how to: https://emailselfdefense.fsf.org/en/
key fingerprint:
BD7E 6E2A E625 6D47 F7ED 30EC 86D8 FC7C FAD7 2729
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEvX5uKuYlbUf37TDshtj8fPrXJykFAluoPYcACgkQhtj8fPrX
Jyk1SBAAoAHcgVBQXzwszCvgLFDu4qlKNrM6xrJ86p9GWjQBhW95ym4aAVS7Ysxf
UfZJp7/5YR6HIUwv6UVtgSlmDEA2pkJFkx7JzocQI3NsrLdSl/L+b76EwC0TnP6f
SYa1ORDQnKo+bK1pEl0T75+haq+wPLuy9l6+MEwge4SjxwwGQmmbY8wYnkgEI18W
+KL2MlDIn7CzLtk/wDGTR2hUUt8B+3VBzjiUPY2qHL/ovHT4pNRBl0i2gnGGAW48
ZUvrwmL/JOtQVSSb3qcb1r9cCPifA4RFieUPKy/Ukga/ZLsy3O5gn/KVuefmOsIf
r3yt94uKcu9A92oHBkAMfhdHJUUZwk1lHqxovS3+ihDKHws0fButiEmFBfcuICCc
B6OegJJIqEzKQ3k+uzsmS/o5uvvaOP+IBLN0W6+btbIXdT9tV26SedUpWy3CV1AQ
pdEmEeumEjmEmCygE8XJ87gMpw+CEI1dHyaJWM+HD4VEdOVZwQQ2ZMC6mqQyRL1Y
zqMoByVdFKW4fnoJ6qUuO/cAkKlPMiI4I3U18KdooFfr1rmFEHz25CyxG1HN14S2
9eK5D+DJMGc49rc7zz7sHh3khwFfNo0FwAet76yEq+7dUAgFStkquswefMndTGsE
JGY1IfyUSrDy4Fnb039cbEtWXV5J6QA9hPfdFpPG7FQaux766c0=
=Gapt
-----END PGP SIGNATURE-----