| Both sides previous revision Previous revision Next revision | Previous revision Next revisionBoth sides next revision |
| docs:guide-user:network:ipv6_ipv4_transitioning [2021/09/05 05:41] – ==> 21.02 migration / use the previous page version for 19.07 <== vgaetera | docs:guide-user:network:ipv6_ipv4_transitioning [2023/01/28 12:12] – [IPv4/IPv6 transition technologies] vgaetera |
|---|
| ====== IPv4/IPv6 Transition Technologies ====== | ====== IPv4/IPv6 transition technologies ====== |
| See also: [[docs:guide-user:network:ipv6:ipv6.nat6|NAT64]] | See also: [[docs:guide-user:network:ipv6:nat64|NAT64 for IPv6-only networks]] |
| |
| Transitioning technologies can be installed using the packages with the same names. | Transition technologies can be installed using the following packages: |
| * IPv6-in-IPv4 tunnels: [[packages:pkgdata:6rd]], [[packages:pkgdata:6to4]], [[packages:pkgdata:6in4]]. | * IPv6-in-IPv4 tunnels: [[packages:pkgdata:6rd]], [[packages:pkgdata:6to4]], [[packages:pkgdata:6in4]]. |
| * IPv4-in-IPv6 tunnels: [[packages:pkgdata:ds-lite]]. | * IPv4-in-IPv6 tunnels: [[packages:pkgdata:ds-lite]]. |
| config interface 'wan6' | config interface 'wan6' |
| option proto '6in4' | option proto '6in4' |
| option tunlink 'wan' | |
| option ipaddr '178.24.115.19' | option ipaddr '178.24.115.19' |
| option peeraddr '216.66.80.30' | option peeraddr '216.66.80.30' |
| config interface 'wan6' | config interface 'wan6' |
| option proto '6in4' | option proto '6in4' |
| option tunlink 'wan' | |
| option mtu '1424' # the IPv6 tunnel MTU (optional) | option mtu '1424' # the IPv6 tunnel MTU (optional) |
| option peeraddr '216.66.80.30' # the IPv4 tunnel endpoint at the tunnel provider | option peeraddr '216.66.80.30' # the IPv4 tunnel endpoint at the tunnel provider |
| | ''ip6addr'' | IPv6 address (CIDR) | yes | //(none)// | Local IPv6 address delegated to the tunnel endpoint | | | ''ip6addr'' | IPv6 address (CIDR) | yes | //(none)// | Local IPv6 address delegated to the tunnel endpoint | |
| | ''ip6prefix'' | IPv6 prefix | no | //(none)// | Routed IPv6 prefix for downstream interfaces (Barrier Breaker and later only) | | | ''ip6prefix'' | IPv6 prefix | no | //(none)// | Routed IPv6 prefix for downstream interfaces (Barrier Breaker and later only) | |
| | ''tunlink'' | Logical Interface | no | //(none)// | Tunnel base interface | | | ''tunlink'' | Logical Interface | no | //(none)// | Tunnel base interface. Define which Interface, for example WAN, should be used for outgoing IPv4 traffic to the Remote IPv4 Address | |
| | ''defaultroute'' | boolean | no | ''1'' | Whether to create an IPv6 default route over the tunnel | | | ''defaultroute'' | boolean | no | ''1'' | Whether to create an IPv6 default route over the tunnel | |
| | ''ttl'' | integer | no | ''64'' | TTL used for the tunnel interface | | | ''ttl'' | integer | no | ''64'' | TTL used for the tunnel interface | |
| |
| If this line isn't present, you need to obtain the correct values for peeraddr, ip6prefix, ip6prefixlen and ip4prefixlen from your ISP. | If this line isn't present, you need to obtain the correct values for peeraddr, ip6prefix, ip6prefixlen and ip4prefixlen from your ISP. |
| The above ip6rd or the obtained values can be used to hardcode the 6RD tunnel. | The above ip6rd or the obtained values can be used to hardcode the 6rd tunnel. |
| Remove or comment out the iface6rd line in the wan section. | Remove or comment out the iface6rd line in the wan section. |
| |
| :!: If you choose a name for your tunnel-interface that is different from 'wan6' make sure to add that name to the network-option of the firewall-zone 'wan' in /etc/config/firewall. | :!: If you choose a name for your tunnel-interface different from ''wan6'', be sure to add that network to the ''wan'' firewall-zone. |
| |
| Below configuration options are only needed for hardcoding the 6rd tunnel. | Below configuration options are only needed for hardcoding the 6rd tunnel. |
| | ''defaultroute'' | boolean | no | ''1'' | Whether to create an IPv6 default route over the tunnel | | | ''defaultroute'' | boolean | no | ''1'' | Whether to create an IPv6 default route over the tunnel | |
| | ''ttl'' | integer | no | ''64'' | TTL used for the tunnel interface | | | ''ttl'' | integer | no | ''64'' | TTL used for the tunnel interface | |
| | ''tos'' | string | no | //(none)// | Type Of Service : either "inherit" (the outer header inherits the value of the inner header) or an hexadecimal value (Chaos Calmer and later only) | | | ''tos'' | string | no | //(none)// | Type Of Service: either "inherit" (the outer header inherits the value of the inner header) or an hexadecimal value | |
| | ''mtu'' | integer | no | ''1280'' | MTU used for the tunnel interface | | | ''mtu'' | integer | no | ''1280'' | MTU used for the tunnel interface | |
| | ''iface6rd'' | logical interface | no | //(none)// | Logical interface template for auto-configuration of 6rd | | | ''iface6rd'' | logical interface | no | //(none)// | Logical interface template for auto-configuration of 6rd | |
| | ''zone6rd'' | firewall zone | no | //system default// | Firewall zone to which the 6rd interface should be added | | | ''zone6rd'' | firewall zone | no | //system default// | Firewall zone to which the 6rd interface should be added | |
| |
| :!: This protocol type does not need a ''device'' option set in the interface section. | :!: This protocol type does not need the ''device'' option set in the interface section. |
| The interface name is derived from the section name, e.g. ''config interface wan6'' would result in an interface named ''6rd-wan6''. | The interface name is derived from the section name, e.g. ''config interface wan6'' would result in an interface named ''6rd-wan6''. |
| |
| config interface 'wan6' | config interface 'wan6' |
| option proto '6to4' | option proto '6to4' |
| | |
| | # /etc/config/firewall |
| | config rule |
| | option target 'ACCEPT' |
| | option name '6to4' |
| | option src 'wan' |
| | option proto '41' |
| </code> | </code> |
| |
| :!: If you choose a name for your tunnel-interface that is different from 'wan6' make sure to add that name to the network-option of the firewall-zone 'wan' in /etc/config/firewall. | :!: If you choose a name for your tunnel-interface different from ''wan6'', be sure to add that network to the ''wan'' firewall-zone. |
| |
| See below for advanced configuration options. | See below for advanced configuration options. |
| </code> | </code> |
| |
| :!: If you choose a name for your tunnel-interface that is different from 'wan' make sure to add that name to the network-option of the firewall-zone 'wan' in /etc/config/firewall. | :!: If you choose a name for your tunnel-interface different from ''wan'', be sure to add that network to the ''wan'' firewall-zone. |
| |
| See below for advanced configuration options. | See below for advanced configuration options. |