[Lab] IPv6 Tunnel

1

Create an Interconnected IPv4 Network

2

NB1 NB2

PC1 PC2

AP

ICMP reachable betweenPC1-NB1NB1-NB2NB2-PC2

Enable IP Routing on Gateways• On the two gateways (NB1 and NB2), run

“Control Panel – Administrative Tools – Services”.– Or you may run “services.msc” directly.

• On the services list, choose “Routing and Remote Access”, right-click to show “Properties”.– StartType: Manual– Apply– Start

3

Modify Routing Table

• ROUTE ADD dest_address MASK mask_address gw_address– ROUTE ADD 172.16.1.0 MASK 255.255.255.0

10.103.64.1• All the four nodes should be able to ping

each other now.• To remove routing rules,

– ROUTE DELETE 172.16.1.0• If necessary, turn off Windows Firewall.

4

Create IPv6 Tunnels

• netsh • interface ipv6• add v6v4tunnel "T1" <my_addr>

<remote_addr>• add address "T1" 2001::F• add route 2001::C/127 "T1"

5

Wireshark

• Capture ICMPv6 packets.– capture filter: ip

6

• Remember to turn on your firewall.

7

8

Configuring IPv6 Tunnels and Routing Table on Windows XP,

Ubuntu Linux, and FreeBSDPresent by

Miss Kuljaree TantayakulCentre for Network Research (CNR)

Prince of Songkla University (PSU), Thailand

http://ipv6.coe.psu.ac.th

9

Outline• Introduction• Concept of IPv6 Tunneling

• How to configure IPv6 over IPv4 tunnel?• Windows XP• Ubuntu Linux• FreeBSD

• How to check the tunnel is working correctly?• Conclusion

10

Introduction

• What’s Tunneling Mechanism?• Used for communication between two hosts

• IPv6 <== IPv4 ==> IPv6• IPv4 <== IPv6 ==> IPv4

• When do you use Tunneling?• No native IPv6 infrastructure exists between two

points

11

Introduction

• Configured Tunneling• Connecting to IPv6• Communication between IPv6 node and IPv6 node

by through the IPv4 infrastructure. • Encapsulation of the IPv6 packets in an IPv4 packet.

• Requirements• Public IPv4 address• Global IPv6 Address• Host/Router is support Dual-Stacks.

12

Concept of 6 over 4 Tunneling

IPv6 Payload

IPv6 PayloadIPv6 PayloadIPv4

IPv6 Tunnel

13

Configured Tunneling

• Summary• Simple to deploy• Must be manually configured.• Great way to provide IPv6 connectivity by through the

existing IPv4 network.• Suitable for one or more hosts resides the large

number of IPv4-only networks that requires IPv6 connectivity.

14

How to configure manually Tunnel?

15

How to configure manually Tunnel?• Requirements

• Public IPv4 address• Global IPv6 address• Host/Router is support Dual-Stacks.

• Before Setup• Check IPv4 Connection • Local and Remote Endpoint should contact before

• IPv4 Local and IPv6 Remote• IPv6 Global at tunnel endpoint

16

Windows XP

• Configure IPv6 address on the tunnel• #netsh interface ipv6 address “Automatic Tunneling

Pseudo-Interface” IPv6 Address

• Configure Static Routes• #netsh interface ipv6 add route IPv6 Network

“Automatic Tunneling Pseudo-Interface” ::IPv4 Remote Address

3ffe:b80:53:1234::1

3ffe:b80:53:1234::/64 203.145.207.11 2001:c38:9007:1::/64

17

Ubuntu Linux

• Configure the tunnel endpoint• #ip tunnel add sit1 mode sit ttl 3 LoAddr ReAdd

• Configure IPv6 address on the tunnel• #ip -6 addr add IPv6 Address/112 dev sit1

202.12.74.238 203.145.202.11

3ffe:b80:53:1234::1

• Configure sit1 interface up• #ifconfig sit1 up

18

Ubuntu Linux (Cont.)

• Configure Static Routes• #route -A inet6 add IPv6 network/prefixlen dev sit1

2001:3c8:9007:1:: 64

19

FreeBSD• Create gif interface (gif0, gif1, gif2, …)

• #ifconfig gif1 create• Configure the tunnel endpoint

• #ifconfig gif1 tunnel Local Addr Remote Add

• Configure IPv6 address on the tunnel• #ifconfig gif1 inet6 IPv6 Address prefixlen 112

202.12.74.238 203.145.202.11

3ffe:b80:53:1234::1

20

FreeBSD (Cont.)

• Configure Static Routes• #route add -inet6 IPv6 network -prefixlen 64 ::1 ifp gif1

2001:3c8:9007:1::

21

How to check tunnel is working correctly?

• Use ping6, traceroute6, or tracepath6 ping6 • #ping6 2001:3c8:9007:1::222• #traceroute6 2001:3c8:9007:1::222• #tracepath6 2001:3c8:9007:1::222

• Here are items to look at if you are having trouble: • Make sure you don’t have a NAT box between you

and the peer• Make sure you don’t have any IPv4 packet filters

between you and peer.

22

Conclusion

• Described the concept of configured IPv6 Tunneling.

• Described how to configure the manually tunnel on Windows XP, Ubuntu, and FreeBSD

23

Thanks you

Questions and Comments

24

6to4 Tunnel

• Address Block Allocation • 2002::/16• 2002:{Public IPv4 in Hex}::/48• Ex.

125.27.131.622002:7D1B:833E::/48

• 6to4 and IPv6 Routing• Set route to 6to4 Relay