|
NAMEqjail-ipv6-testing —
Details explaining how to perform testing of ipv6 addresses used
in qjail non-vnet and vnet jails.
THINGS NOT COVERED HERESetting up host ipv6 connectivity from your public ISP or local ipv6 connectivity across your LAN.TESTING DESCRIPTIONThis testing setup is limited to just the host where qjail is running. It's intended to be used to test the connectivity between the hosts ipv6 address and the ipv6 addresses you assigned to your qjail non-vnet jails and vnet jails to verify things are working as they should. The host's firewall should not have any bearing on this testing, But a firewall in the vnet jail will have an effect. To simplify things the vnet jail should not have any firewall running, or must have a rule to default to passing all ipv6 packets from the ping6 command.ipv6 has a range of ipv6 ip address numbers reserved for local LAN use. Defined as fc00::/7 this is just like 10.0.0.0/8 To test qjail non-vnet jails and vnet jails for local ipv6 connectivity, the host needs a default local ipv6 ip address. Use this command on the host to create one. Replace fxp0 with the interface name your jails are using.
The ipv6 addresses used for jail testing are coded like this. qjail create -4 10.0.10.10 -6 fc00::2 non-vnet1 qjail create -4 10.0.10.20 -6 fc00::3,fc00::4,fc00::5 non-vnet2 qjail create -4 10.0.10.30 -6 fc00::6,fc00::7,fc00::8 vnet10 From a vnet jail console you can ping6 the hosts ipv6 address this
way
From the host you can ping6 any jail using its ipv6 address this
way
For your information; as of 2016, Time Warner cable provider who is merging with spectrum provides ipv6 service as part of their normal internet service at no extra cost. This is becoming normal for all large internet services providers. ALSO SEEqjail(8), qjail-intro(8), qjail-howto(8), qjail-vnet-howto.8AUTHORJoe Barbish ⟨qjail1@a1poweruser.com⟩
Visit the GSP FreeBSD Man Page Interface. |