News: This forum is now permanently frozen.
linktree m0n0wall Forum  >  m0n0wall Support (English)  >  Bug Reports  >  Resolved
linktree Topic: 1.3b15, ipv6 + AICCU with private IPv4 address and no output NAT
Pages: [1]
Topic: 1.3b15, ipv6 + AICCU with private IPv4 address and no output NAT  (Read 3717 times)
« on: November 11, 2008, 19:49:55 »
yonailo *
Posts: 25
Hi guys,

I have this setup.  Monowall WAN IPv4 address 192.168.2.1,
ADSL router with IPv4 address 192.168.2.2

Monowall does not use output NAT, so to make reply packets go through the
corresponding LAN machines I am using the proxy ARP feature.

I requested a dynamic tunnel (heartbeat) from SixXS, but when I configure the parameters in the monowall WAN interface, nothing happens.  I copy some more info in case it helps to find out what the problem is.

$ ifconfig -a
sis0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
   options=8<VLAN_MTU>
   inet 192.168.1.1 netmask 0xffffff00 broadcast 192.168.1.255
   inet6 fe80::200:24ff:fec0:7d80%sis0 prefixlen 64 scopeid 0x1
   ether 00:00:24:c0:7d:80
   media: Ethernet autoselect (100baseTX <full-duplex>)
   status: active
sis1: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
   options=8<VLAN_MTU>
   inet6 fe80::200:24ff:fec0:7d81%sis1 prefixlen 64 scopeid 0x2
   inet 192.168.2.1 netmask 0xffff0000 broadcast 192.168.255.255
   ether 00:00:24:c0:7d:81
   media: Ethernet autoselect (100baseTX <full-duplex>)
   status: active
sis2: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
   options=8<VLAN_MTU>
   inet6 fe80::200:24ff:fec0:7d82%sis2 prefixlen 64 scopeid 0x3
   inet 192.168.0.1 netmask 0xffffff00 broadcast 192.168.0.255
   ether 00:00:24:c0:7d:82
   media: Ethernet autoselect (100baseTX <full-duplex>)
   status: active
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 16384
   inet 127.0.0.1 netmask 0xff000000
   inet6 ::1 prefixlen 128
   inet6 fe80::1%lo0 prefixlen 64 scopeid 0x4
enc0: flags=41<UP,RUNNING> mtu 1536
ng0: flags=8890<POINTOPOINT,NOARP,SIMPLEX,MULTICAST> mtu 1500
ng1: flags=8890<POINTOPOINT,NOARP,SIMPLEX,MULTICAST> mtu 1500
ng2: flags=8890<POINTOPOINT,NOARP,SIMPLEX,MULTICAST> mtu 1500
ng3: flags=8890<POINTOPOINT,NOARP,SIMPLEX,MULTICAST> mtu 1500
ng4: flags=8890<POINTOPOINT,NOARP,SIMPLEX,MULTICAST> mtu 1500
ng5: flags=8890<POINTOPOINT,NOARP,SIMPLEX,MULTICAST> mtu 1500
ng6: flags=8890<POINTOPOINT,NOARP,SIMPLEX,MULTICAST> mtu 1500
ng7: flags=8890<POINTOPOINT,NOARP,SIMPLEX,MULTICAST> mtu 1500
ng8: flags=8890<POINTOPOINT,NOARP,SIMPLEX,MULTICAST> mtu 1500
ng9: flags=8890<POINTOPOINT,NOARP,SIMPLEX,MULTICAST> mtu 1500
ng10: flags=8890<POINTOPOINT,NOARP,SIMPLEX,MULTICAST> mtu 1500
ng11: flags=8890<POINTOPOINT,NOARP,SIMPLEX,MULTICAST> mtu 1500
ng12: flags=8890<POINTOPOINT,NOARP,SIMPLEX,MULTICAST> mtu 1500
ng13: flags=8890<POINTOPOINT,NOARP,SIMPLEX,MULTICAST> mtu 1500
ng14: flags=8890<POINTOPOINT,NOARP,SIMPLEX,MULTICAST> mtu 1500
ng15: flags=8890<POINTOPOINT,NOARP,SIMPLEX,MULTICAST> mtu 1500
ng16: flags=8890<POINTOPOINT,NOARP,SIMPLEX,MULTICAST> mtu 1500
stf0: flags=0<> mtu 1280
gif0: flags=8050<POINTOPOINT,RUNNING,MULTICAST> mtu 1280
   tunnel inet 192.168.2.1 --> 82.102.0.131


$ ps axuwww
USER     PID %CPU %MEM   VSZ   RSS  TT  STAT STARTED      TIME COMMAND
root    6793 79.1 17.6  8324  7828  ??  SN    7:47PM   0:03.38 /usr/local/bin/php exec.php
root      10 78.0  0.0     0     8  ??  RL   Sun09PM 2507:56.07 [idle]
root      12  3.8  0.0     0     8  ??  RL   Sun09PM 117:01.41 [swi4: clock sio]
root       0  0.0  0.0     0     0  ??  WLs  Sun09PM   0:00.01 [swapper]
root       1  0.0  1.7  1452   764  ??  ILs  Sun09PM   0:00.21 /sbin/init --
root       2  0.0  0.0     0     8  ??  DL   Sun09PM   1:33.05 [g_event]
root       3  0.0  0.0     0     8  ??  DL   Sun09PM   1:16.81 [g_up]
root       4  0.0  0.0     0     8  ??  DL   Sun09PM   1:31.83 [g_down]
root       5  0.0  0.0     0     8  ??  DL   Sun09PM   0:00.00 [crypto]
root       6  0.0  0.0     0     8  ??  DL   Sun09PM   0:00.00 [crypto returns]
root       7  0.0  0.0     0     8  ??  DL   Sun09PM   0:00.00 [xpt_thrd]
root       8  0.0  0.0     0     8  ??  DL   Sun09PM   0:00.00 [kqueue taskq]
root       9  0.0  0.0     0     8  ??  DL   Sun09PM   0:00.00 [thread taskq]
root      11  0.0  0.0     0     8  ??  WL   Sun09PM   1:23.04 [swi1: net]
root      13  0.0  0.0     0     8  ??  WL   Sun09PM   0:00.00 [swi3: vm]
root      14  0.0  0.0     0     8  ??  DL   Sun09PM   1:39.36 [yarrow]
root      15  0.0  0.0     0     8  ??  WL   Sun09PM   0:00.00 [swi2: cambio]
root      16  0.0  0.0     0     8  ??  WL   Sun09PM   0:00.00 [swi5: +]
root      17  0.0  0.0     0     8  ??  WL   Sun09PM   0:00.00 [swi6: Giant taskq]
root      18  0.0  0.0     0     8  ??  WL   Sun09PM   0:00.03 [swi6: task queue]
root      19  0.0  0.0     0     8  ??  WL   Sun09PM   0:32.03 [irq10: sis0]
root      20  0.0  0.0     0     8  ??  WL   Sun09PM   0:08.51 [irq11: sis1]
root      21  0.0  0.0     0     8  ??  WL   Sun09PM   0:00.88 [irq5: sis2]
root      22  0.0  0.0     0     8  ??  WL   Sun09PM   0:00.81 [irq14: ata0]
root      23  0.0  0.0     0     8  ??  WL   Sun09PM   0:00.00 [irq15: ata1]
root      24  0.0  0.0     0     8  ??  WL   Sun09PM   0:00.00 [swi0: sio]
root      25  0.0  0.0     0     8  ??  DL   Sun09PM   0:09.52 [md0]
root      26  0.0  0.0     0     8  ??  DL   Sun09PM   0:02.11 [pagedaemon]
root      27  0.0  0.0     0     8  ??  RL   Sun09PM   0:02.82 [idlepoll]
root      28  0.0  0.0     0     8  ??  DL   Sun09PM   4:02.57 [pagezero]
root      29  0.0  0.0     0     8  ??  DL   Sun09PM   0:11.16 [bufdaemon]
root      30  0.0  0.0     0     8  ??  DL   Sun09PM   0:11.42 [vnlru]
root      31  0.0  0.0     0     8  ??  DL   Sun09PM   0:24.02 [syncer]
root      32  0.0  0.0     0     8  ??  DL   Sun09PM   0:09.46 [softdepflush]
root      33  0.0  0.0     0     8  ??  DL   Sun09PM   0:54.49 [schedcpu]
root     133  0.0  3.1  1952  1364  ??  Ss   Sun09PM   0:41.77 /sbin/ipmon -sD
root     140  0.0  1.9  1404   828  ??  Ss   Sun09PM   1:24.62 /usr/sbin/syslogd -ss
root     143  0.0  3.6  2648  1620  ??  Ss   Sun09PM   0:00.79 /usr/local/sbin/mini_httpd -S -E /var/etc/cert.pem -c **.php|**.cgi -u root -maxproc 16 -i /var/run/mini_httpd.pid
root     167  0.0  5.5  4620  2464  ??  Is   Sun09PM   0:02.02 /usr/local/sbin/mpd4 -b -d /var/etc/mpd-vpn -p /var/run/mpd-vpn.pid pptpd
root     203  0.0  3.0  2620  1340  ??  Is   Sun09PM   0:00.49 /usr/local/sbin/mini_httpd -a -M 0 -u root -maxproc 16 -maxperip 4 -p 8000 -i /var/run/mini_httpd.cp.pid -cpelement /var/db/cpelements 192.168.1.1:8000
root     206  0.0  3.6  2648  1624  ??  Is   Sun09PM   0:00.45 /usr/local/sbin/mini_httpd -S -a -M 0 -E /var/etc/cert-portal.pem -u root -maxproc 16 -maxperip 4 -p 8001 -i /var/run/mini_httpd.cps.pid -cpelement /var/db/cpelements m0n0wall.micasa.es:8001
root     209  0.0  1.4  1268   624  ??  Is   Sun09PM   0:07.16 /usr/local/bin/minicron 60 /var/run/minicron.pid /etc/rc.prunecaptiveportal
root     234  0.0  2.3  1728  1008  ??  I    Sun09PM   0:00.11 /bin/sh /etc/rc.initial console
root    6345  0.0  2.6  1580  1156  ??  INs   7:13PM   0:00.14 /usr/local/sbin/sixxs-aiccu start /var/etc/aiccu.conf
nobody  6445  0.0  2.6  1464  1176  ??  IN    7:14PM   0:00.39 /usr/local/sbin/dnsmasq -l /var/db/dhcpd.leases -s micasa.es
root    6451  0.0  4.4  2344  1972  ??  INs   7:14PM   0:00.02 /usr/local/sbin/dhcpd -cf /var/etc/dhcpd.conf sis0 sis2
root    6642  0.0  2.0  1332   880  ??  SNs   7:24PM   0:01.08 /usr/sbin/rtadvd -D -c /var/etc/rtadvd.conf sis0
root    6795  0.0  4.5  2736  1988  ??  S     7:47PM   0:00.09 /usr/local/sbin/mini_httpd -S -E /var/etc/cert.pem -c **.php|**.cgi -u root -maxproc 16 -i /var/run/mini_httpd.pid
root    6796  0.0  2.6  1724  1144  ??  SN    7:47PM   0:00.06 sh -c ps axuwww
root    6797  0.0  2.2  1472   960  ??  RN    7:47PM   0:00.06 ps axuwww
root     157  0.0  3.1  1924  1364  d0- I    Sun09PM   0:00.14 /usr/local/sbin/snmpd -c /var/etc/snmpd.conf -P /var/run/snmpd.pid
root     161  0.0  1.4  1280   604  d0- S    Sun09PM   0:00.64 /usr/local/sbin/choparp sis1 auto 192.168.0.0/24 192.168.1.0/24
root     163  0.0  2.2  1724   968  d0- I    Sun09PM   0:00.09 /bin/sh /usr/local/bin/runmsntp.sh /var/run/runmsntp.pid /var/run/msntp.pid 300  europe.pool.ntp.org
root     166  0.0  2.0  1484   912  d0- I    Sun09PM   0:00.11 /usr/local/bin/msntp -r -P no -l /var/run/msntp.pid -x 300 europe.pool.ntp.org


$ cat /var/etc/aiccu.conf
username <hidden stuff here>
password <hidden stuff here>
tunnel_id T17913
ipv6_interface gif0
daemonize true
automatic true
requiretls false
pidfile /var/run/aiccu.pid
defaultroute true



Help ! Smiley
JFRH
« Reply #1 on: November 19, 2008, 02:18:05 »
Manuel Kasper
Administrator 		*****
Posts: 364
The tunneled IPv6 support in m0n0wall (including AICCU) expects a public WAN IP address to be available on the WAN interface. Try setting your ADSL modem to bridge mode and have m0n0wall handle PPPoE instead.
« Reply #2 on: November 19, 2008, 13:10:06 »
yonailo *
Posts: 25
Manuel,

I have been reading about AICCU in Sixxs webpage and it seems that AICCU + hearbeat should work even with private addressing, if the ADSL modem can be configured to send all packets (including ip protocol 41) to the private tunnel endpoint (monowall in my setup).

At least that is what you can read here:
http://www.sixxs.net/faq/aiccu/?faq=nat

I think that my problem is that my ADSL router is not able to forward ip protocol 41, I can only forward TCP, UDP and TCP/UDP.

I am looking forward to installing a monowall version with AICCU + AYIYA, that should work with my setup, IMHO.

Thanks Manuel for your support!, I reallly love monowall ! Smiley
JFRH
 
Pages: [1]
 
 
Powered by SMF 1.1.20 | SMF © 2013, Simple Machines