IPv6 Tunnel

Version 2 (Rich Brown, 03/17/2012 06:45 am) → Version 3/23 (Rich Brown, 03/17/2012 06:46 am)


h1. IPv6 Tunnelling

Hurricane Electric (http://he.net) provides a free IPv6 "6in4" tunnel that works well with CeroWrt. This lets you have a globally routable IPv6 address so that you can connect to other IPv6 resources on the Internet.

It's straightforward to do this: first you create a tunnel through Hurricane Electric and then configure your CeroWrt router. This procedure has been tested with the 3.3-rc7-5 build; newer builds should be similar.

NB: 17Mar2012 - These instructions are under construction...

*To create an IPv6 6in4 tunnel*

# Go to the IPv6 Tunnel Broker site at http://tunnelbroker.net
# Register to create an account. After you're logged in...
# Click the Create Regular Tunnel link (circled in Figure 1, below) You'll see the "Create New Tunnel" page (Figure 2).
# Fill in the "IPv4 Endpoint (Your side):" field with your router's external IP address. This is shown in the "You are viewing from:" line.
# Click the button that corresponds to the closest Tunnel Server. The page may suggest a server recommendation, as shown in the image. If so, use it.
# Scroll to the bottom of the page and click the "Create Tunnel" button. It will take a few moments (less than a minute) to create and register your new tunnel, and show the Tunnel Details page.
# TheTunnel Details page shows everything you need to know about your tunnel:

* Your Tunnel ID and its creation date.
* A text field where you can fill in a human-readable name for the tunnel
* The IPv6 Tunnel endpoints: both an IPv4 and IPv6 address for the server (far) endpoint, and the IPv4 & IPv6 address for your end of the tunnel.
* DNS resolver addresses (IPv4 & IPv6)
* Routed IPv6 prefixes for a /64 (single network) or /48 address.
* rDNS name servers for this block of addresses.
# You can click on any of the legends ("Tunnel ID", "Routed /64", etc.) to see more details. NB: All the IPv6 addresses shown on this page have a "/64" block indicator - this not part of the IPv6 address itself.

You have now created the tunnel. Hurricane Electric is listening on their end waiting to pass IPv6 traffic to and from your external address listed above. The Tunnel Broker home page lists all the tunnels that you have established.

*Configuring CeroWrt to use the IPv6 Tunnel*

# Stay on the Tunnel Details page of the Tunnel Broker web site.
# Click the Example Configurations tab on the Tunnel Details page. This lists a number of configurations for common routers/operating systems.
# Select "OpenWrt Backfire 10.03.1". (This works fine for CeroWrt as well.) You will see a set of commands listed.
# Copy those commands, ssh into the CeroWrt router, and paste them in. NB: You must replace YOUR_PASSWORD in the script with your actual password. Alternatively, save the text to file in /tmp and execute the script.

*To re-register an IPv4 address*

If you do not have a static IPv4 address for the client end of the tunnel (perhaps you have a DSL or cable modem connection), your tunnel will go down when the address changes.

The Tunnel Broker has a facility for re-registering your new client IPv4 address. The page at https://ipv4.tunnelbroker.net/ipv4_end.php has details. As a quick fix, you can visit the URL below to inform the Tunnel Broker to update your TUNNELID to autodetect your IPv4 address:

@https://USERNAME:PASSWORD@ipv4.tunnelbroker.net/ipv4_end.php?tid=TUNNELID@

If the update goes properly, you get a response similar to this:

@+OK: Tunnel endpoint updated to: 123.45.67.89@