News: This forum is now permanently frozen.
Pages: [1]
Topic: [SOLVED] [HELP] IPv6 Static, no acces from LAN  (Read 2956 times)
« on: November 03, 2011, 10:54:45 »
timemaster *
Posts: 4

Hi,
I have strange problem with IPv6 static configurtation. ..

I got  ipv6 subnet with gateway 2001:xxxx:yyyy::1/48..
So WAN interface has ip 2001:xxxx:yyyy::2/64 and LAN interface has 2001:xxxx:yyyy:1000::1/64

I can ping:
GW from WAN iface only
LAN iface IP from any hosts in LAN network
WAN iface IP from any hosts in LAN network

and I can't ping GW or any other site from LAN network Sad It seems like problem with packet forwarding, but I don't know how can I solve this Sad please help
« Last Edit: November 10, 2011, 17:35:03 by timemaster »
« Reply #1 on: November 05, 2011, 22:09:25 »
f41thr *
Posts: 28

Which provider?

Is your ipv6 tunnled?

F41THR
« Reply #2 on: November 05, 2011, 22:58:33 »
timemaster *
Posts: 4

Hello,

I do not use any tunel provider, my ISP provide me whole subnet 2001:xxxx:yyyy::/48 with gateway on 2001:xxxx:yyyy::1, natively on wan interface together with ipv4 public address. Not a bug in the division of subnet? My division is 2001:xxxx:yyyy::2/64 for wan interface and I can ping gateway from this iface. And 2001:xxxx:yyyy:1000::1/64 for LAN and I can not ping gateway 2001:xxxx:yyyy::1 but only WAN address 2001:xxxx:yyyy::2..

« Reply #3 on: November 07, 2011, 23:14:48 »
iridris ***
Posts: 145

Hello,

I do not use any tunel provider, my ISP provide me whole subnet 2001:xxxx:yyyy::/48 with gateway on 2001:xxxx:yyyy::1, natively on wan interface together with ipv4 public address. Not a bug in the division of subnet? My division is 2001:xxxx:yyyy::2/64 for wan interface and I can ping gateway from this iface. And 2001:xxxx:yyyy:1000::1/64 for LAN and I can not ping gateway 2001:xxxx:yyyy::1 but only WAN address 2001:xxxx:yyyy::2..

It may indeed be subnetting. If your ISP has configured their end of the IPv6 tunnel as a /48, then your WAN side must match. Try changing your WAN interface to the /48 and see what happens.
« Reply #4 on: November 07, 2011, 23:40:11 »
timemaster *
Posts: 4

Hello,

I do not use any tunel provider, my ISP provide me whole subnet 2001:xxxx:yyyy::/48 with gateway on 2001:xxxx:yyyy::1, natively on wan interface together with ipv4 public address. Not a bug in the division of subnet? My division is 2001:xxxx:yyyy::2/64 for wan interface and I can ping gateway from this iface. And 2001:xxxx:yyyy:1000::1/64 for LAN and I can not ping gateway 2001:xxxx:yyyy::1 but only WAN address 2001:xxxx:yyyy::2..

It may indeed be subnetting. If your ISP has configured their end of the IPv6 tunnel as a /48, then your WAN side must match. Try changing your WAN interface to the /48 and see what happens.


OK I changed my end to /48, but situation is same Sad I can ping ISP gateway and other ipv6 address from WAN interface, but not from LAN.. From LAN I can ping only WAN ip address..
« Reply #5 on: November 08, 2011, 22:15:50 »
brushedmoss ****
Posts: 446

Are you Cable Modem or DSL or ... ?

Sounds like you ISP doesn't expect you to be a router, it expects all of the /48 to be on the WAN.  if you take a /64 of this and put it on your LAN, your ISP has to then route the packets through m0n0wall.
« Reply #6 on: November 10, 2011, 17:34:48 »
timemaster *
Posts: 4

Are you Cable Modem or DSL or ... ?

Sounds like you ISP doesn't expect you to be a router, it expects all of the /48 to be on the WAN.  if you take a /64 of this and put it on your LAN, your ISP has to then route the packets through m0n0wall.

Hi, thanks, you're right.. It's server in datacenter, with virtualization and they did not anticipate divisions of subnets..


THANKS
 
Pages: [1]
 
 
Powered by SMF 1.1.20 | SMF © 2013, Simple Machines