Hallo!
Ich habe heute mein Proxmox 4.3 System auf Proxmox 5 geupdatet.
Soweit hat auch alles geklappt, nur funktionieren meine VMs nichtmehr, die nur über eine IPv6 Adresse verfügen. Bei einigen VMs funktioniert IPv6, bei anderen widerrum nicht. Ich konnte es bisher noch nicht reproduzieren.
Den Gateway (das Hostsystem) erreiche ich jedoch immer über die IPv6 Adresse.
Der Server steht bei OVH und ich habe das Setup nach der folgenden Anleitung vorgenommen:
https://gist.github.com/panperla/77c169b1a8a1b745277d67f0979c86fd
Mein IPv6 Subnet: 2001:xxxx:2:8054::/64
Netzwerkconfig des Hosts:
Netzwerkconfig der VM:
sysctl.conf Hostsystem:
Ich habe heute mein Proxmox 4.3 System auf Proxmox 5 geupdatet.
Soweit hat auch alles geklappt, nur funktionieren meine VMs nichtmehr, die nur über eine IPv6 Adresse verfügen. Bei einigen VMs funktioniert IPv6, bei anderen widerrum nicht. Ich konnte es bisher noch nicht reproduzieren.
Den Gateway (das Hostsystem) erreiche ich jedoch immer über die IPv6 Adresse.
Der Server steht bei OVH und ich habe das Setup nach der folgenden Anleitung vorgenommen:
https://gist.github.com/panperla/77c169b1a8a1b745277d67f0979c86fd
Mein IPv6 Subnet: 2001:xxxx:2:8054::/64
Netzwerkconfig des Hosts:
Code:
# This file describes the network interfaces available on your system
# and how to activate them. For more information, see interfaces(5).
# The loopback network interface
auto lo
iface lo inet loopback
# for Routing
auto vmbr1
iface vmbr1 inet manual
post-up /etc/pve/kvm-networking.sh
bridge_ports dummy0
bridge_stp off
bridge_fd 0
# vmbr0: Bridging. Make sure to use only MAC adresses that were assigned to you.
auto vmbr0
iface vmbr0 inet static
address xx.xx.253.84
netmask 255.255.255.0
network xx.xx.253.0
broadcast xx.xx.253.255
gateway xx.xx.253.254
bridge_ports eth0
bridge_stp off
bridge_fd 0
iface vmbr0 inet6 static
address 2001:xxxx:0002:8054::
netmask 64
post-up /sbin/ip -f inet6 route add 2001:xxxx:0002:80ff:ff:ff:ff:ff dev vmbr0
post-up /sbin/ip -f inet6 route add default via 2001:xxxx:0002:80ff:ff:ff:ff:ff
pre-down /sbin/ip -f inet6 route del default via 2001:xxxx:0002:80ff:ff:ff:ff:ff
pre-down /sbin/ip -f inet6 route del 2001:xxxx:0002:80ff:ff:ff:ff:ff dev vmbr0Netzwerkconfig der VM:
Code:
source /etc/network/interfaces.d/*
# The loopback network interface
auto lo
iface lo inet loopback
# The primary network interface
allow-hotplug ens18
iface ens18 inet6 static
address 2001:xxxx:2:8054::209
netmask 64
gateway 2001:xxxx:2:8054::sysctl.conf Hostsystem:
Code:
# Uncomment the next two lines to enable Spoof protection (reverse-path filter)
# Turn on Source Address Verification in all interfaces to
# prevent some spoofing attacks
#net.ipv4.conf.default.rp_filter=1
#net.ipv4.conf.all.rp_filter=1
# Uncomment the next line to enable TCP/IP SYN cookies
# See http://lwn.net/Articles/277146/
# Note: This may impact IPv6 TCP sessions too
#net.ipv4.tcp_syncookies=1
# Uncomment the next line to enable packet forwarding for IPv4
#net.ipv4.ip_forward=1
# Uncomment the next line to enable packet forwarding for IPv6
# Enabling this option disables Stateless Address Autoconfiguration
# based on Router Advertisements for this host
#net.ipv6.conf.all.forwarding=1
###################################################################
# Additional settings - these settings can improve the network
# security of the host and prevent against some network attacks
# including spoofing attacks and man in the middle attacks through
# redirection. Some network environments, however, require that these
# settings are disabled so review and enable them as needed.
#
# Do not accept ICMP redirects (prevent MITM attacks)
#net.ipv4.conf.all.accept_redirects = 0
#net.ipv6.conf.all.accept_redirects = 0
# _or_
# Accept ICMP redirects only for gateways listed in our default
# gateway list (enabled by default)
# net.ipv4.conf.all.secure_redirects = 1
#
# Do not send ICMP redirects (we are not a router)
#net.ipv4.conf.all.send_redirects = 0
#
# Do not accept IP source route packets (we are not a router)
#net.ipv4.conf.all.accept_source_route = 0
#net.ipv6.conf.all.accept_source_route = 0
#
# Log Martian Packets
#net.ipv4.conf.all.log_martians = 1
#
# Disable IPv6 autoconf
net.ipv6.conf.all.autoconf = 0
net.ipv6.conf.default.autoconf = 0
net.ipv6.conf.vmbr0.autoconf = 0
net.ipv6.conf.all.accept_ra = 0
net.ipv6.conf.default.accept_ra = 0
net.ipv6.conf.vmbr0.accept_ra = 0
net.ipv6.conf.vmbr0.accept_ra = 0
net.ipv6.conf.vmbr0.autoconf = 0
net.ipv6.conf.default.proxy_ndp = 1
net.ipv6.conf.all.proxy_ndp = 1
net.ipv6.conf.default.forwarding = 1
net.ipv6.conf.all.forwarding = 1
net.ipv6.conf.all.accept_ra_defrtr = 0
net.ipv6.conf.default.accept_ra_defrtr = 0
net.ipv6.conf.vmbr0.accept_ra_defrtr = 0
net.ipv6.conf.all.accept_ra_pinfo = 0
net.ipv6.conf.default.accept_ra_pinfo = 0
net.ipv6.conf.vmbr0.accept_ra_pinfo = 0
