[SOLVED] Ipv6 proxmox?

Feb 1, 2013
9
0
1
Belgium
www.arowan.be
I've got some problems with my proxmox 3.4

This is my ipv6 range 2001:41D0:B:04aa::/64

This my host interface config and when I try a ping I've got a "Destination unreachable: Address unreachable"

PHP:
iface vmbr0 inet6 static
        address 2001:41D0:B:04aa::1
        netmask 64
        post-up /sbin/ip -f inet6 route add 2001:41D0:B:04ff:ff:ff:ff:ff dev vmbr0
        post-up /sbin/ip -f inet6 route add default via 2001:41D0:B:04ff:ff:ff:ff:ff
        pre-down /sbin/ip -f inet6 route del default via 2001:41D0:B:04ff:ff:ff:ff:ff
        pre-down /sbin/ip -f inet6 route del 2001:41D0:B:04ff:ff:ff:ff:ff dev vmbr0



ping6 2001:41D0:B:04aa::1 => ok

ping6 2001:41D0:B:04ff:ff:ff:ff:ff => ko => Destination unreachable: Address unreachable



root@master:~# traceroute ipv6.google.com
traceroute to ipv6.google.com (2a00:1450:4007:808::1009), 30 hops max, 80 byte p ackets
1 2001:41d0:b:4aa::1 (2001:41d0:b:4aa::1) 3000.713 ms !H 3000.716 ms !H 3000.714 ms !H

PHP:
Table de routage IPv6 du noyau
Destination                    Next Hop                   Flag Met Ref Use If
2001:41d0:b:4aa::/64           ::                         U    256 0     0 vmbr0
2001:41d0:b:4ff:ff:ff:ff:ff/128 ::                         U    1024 0     1 vmbr0
fe80::1/128                    ::                         U    256 0     0 venet0
fe80::/64                      ::                         U    256 0     0 dummy0
fe80::/64                      ::                         U    256 0     0 vmbr1
fe80::/64                      ::                         U    256 0     0 vmbr0
fe80::/64                      ::                         U    256 0     0 eth0
fe80::/64                      ::                         U    256 0     0 venet0
fe80::/64                      ::                         U    256 0     0 tap101i0
fe80::/64                      ::                         U    256 0     0 tap104i0
fe80::/64                      ::                         U    256 0     0 tap100i0
::/0                           2001:41d0:b:4ff:ff:ff:ff:ff UG   1024 0  1178 vmbr0
::/0                           ::                         !n   -1  1  1185 lo
::1/128                        ::                         Un   0   1    18 lo
2001:41d0:b:4aa::/128          ::                         Un   0   1     0 lo
2001:41d0:b:4aa::1/128         ::                         Un   0   1  2544 lo
fe80::/128                     ::                         Un   0   1     0 lo
fe80::/128                     ::                         Un   0   1     0 lo
fe80::/128                     ::                         Un   0   1     0 lo
fe80::/128                     ::                         Un   0   1     0 lo
fe80::/128                     ::                         Un   0   1     0 lo
fe80::/128                     ::                         Un   0   1     0 lo
fe80::1/128                    ::                         Un   0   1     0 lo
fe80::4c66:c8ff:fe69:7dc5/128  ::                         Un   0   1     0 lo
fe80::76d0:2bff:fe26:bdb3/128  ::                         Un   0   1     0 lo
fe80::a8b6:12ff:fe3d:44fd/128  ::                         Un   0   1     0 lo
fe80::b431:66ff:feca:cdf2/128  ::                         Un   0   1     0 lo
fe80::c4af:14ff:fed4:9206/128  ::                         Un   0   1     0 lo
fe80::c4af:14ff:fed4:9206/128  ::                         Un   0   1     0 lo
ff00::/8                       ::                         U    256 0     0 dummy0
ff00::/8                       ::                         U    256 0     0 vmbr1
ff00::/8                       ::                         U    256 0     0 vmbr0
ff00::/8                       ::                         U    256 0     0 eth0
ff00::/8                       ::                         U    256 0     0 venet0
ff00::/8                       ::                         U    256 0     0 tap101i0
ff00::/8                       ::                         U    256 0     0 tap104i0
ff00::/8                       ::                         U    256 0     0 tap100i0
::/0                           ::                         !n   -1  1  1185 lo




5: vmbr0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UNKNOWN
link/ether 74:d0:2b:26:bd:b3 brd ff:ff:ff:ff:ff:ff
inet 37.187.56.xx/24 brd 37.187.56.255 scope global vmbr0
inet6 2001:41d0:b:4aa::1/64 scope global
valid_lft forever preferred_lft forever
inet6 fe80::76d0:2bff:fe26:bdb3/64 scope link
valid_lft forever preferred_lft forever


Someone have an idea?

Thanks for your help :(
 
Is your firewall enabled? Maybe you're blocking neighbor/router solicitation packets.
Did you change any ipv6 related sysctl values? (specifically accept_ra and router solicitation values)
How many responses do you get when pinging ff02::2 over the ipv6 enabled interface?
 
Is your firewall enabled? Maybe you're blocking neighbor/router solicitation packets.
Did you change any ipv6 related sysctl values? (specifically accept_ra and router solicitation values)
How many responses do you get when pinging ff02::2 over the ipv6 enabled interface?

no modifications for accept_ra and router solicitation values

For pinging FF02::2 => I've got " unknown host ff02::2"
 
then you forgot the '6' in 'ping6' ;-) (also you should use -I to specify the interface you want to use when pinging multicast addresses).
 
then you forgot the '6' in 'ping6' ;-) (also you should use -I to specify the interface you want to use when pinging multicast addresses).

I don't forget the 6 :d

Look this

root@master:~# ping6 -I vmbr0 ff02::2
PING ff02::2(ff02::2) from fe80::76d0:2bff:fe26:bdb3 vmbr0: 56 data bytes
^C
--- ff02::2 ping statistics ---
13 packets transmitted, 0 received, 100% packet loss, time 12008ms
 
Can't believe I missed this. I don't see any bridge_ports in that config. Since the IP config you showed contains an IPv4 I'll assume they're in the ipv4 related section. But please confirm this for me, does the IPv4 connection work over that same bridge?
Because pinging ff02::2%vmbr0 should actually make all connected routers respond.
 
Last edited:
You haven't answered to the firewall question yet. Did you enable the firewall in PVE? Are you using any third party firewall?
Check the output of # ip6tables-save
And confirm the IPv6 address range you got. If the firewall is off and you don't get any response on ff02::2 I'd suggest asking your hosting provider for help.
Also confirm that vmbr0 correctly uses the same mac address as your eth0 in case your addresses are mac bound by your provider.
 
You haven't answered to the firewall question yet. Did you enable the firewall in PVE? Are you using any third party firewall?
Check the output of # ip6tables-save
And confirm the IPv6 address range you got. If the firewall is off and you don't get any response on ff02::2 I'd suggest asking your hosting provider for help.
Also confirm that vmbr0 correctly uses the same mac address as your eth0 in case your addresses are mac bound by your provider.

I don't use any firewall for this moment. It's a fresh install.

The range as given from my provider in this cas is ovh. 2001:41D0:B:04aa::/64

root@master:~# ip6tables-save
# Generated by ip6tables-save v1.4.14 on Mon Jul 13 14:19:38 2015
*mangle
:pREROUTING ACCEPT [29559:2585556]
:INPUT ACCEPT [4233:312014]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [586:56678]
:pOSTROUTING ACCEPT [597:57470]
COMMIT
# Completed on Mon Jul 13 14:19:38 2015
# Generated by ip6tables-save v1.4.14 on Mon Jul 13 14:19:38 2015
*filter
:INPUT ACCEPT [4233:312014]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [587:56734]
COMMIT
# Completed on Mon Jul 13 14:19:38 2015
 
Last edited:
I currently only have a FreeBSD based server with OVH to test on where things are working. The configuraiton's a bit different though on FreeBSD. Since I don't directly see anything strange in your settings I can only suggest asking OVH for help.
 
As far as I can tell OVH's IPv6 related documentation is a bit off, actually.
Eg this[1] claims you need a failover IP configured with a vMAC to be able to use more than one IPv6 address. We don't have that, yet are successfully using multiple addresses from our range.
The same document also says to set accept_ra=0(linux), whereas here[2] in the FreeBSD section they set accept_rtadv=1. (bsd)
They also seem to be having troubles counting the "FF"s in their examples ;-) so take whatever you get from their side with a grain of salt.

[1] http://docs.ovh.ca/en/guides-network-ipv6.html
[2] http://help.ovh.com/Ipv4Ipv6
 

About

The Proxmox community has been around for many years and offers help and support for Proxmox VE, Proxmox Backup Server, and Proxmox Mail Gateway.
We think our community is one of the best thanks to people like you!

Get your subscription!

The Proxmox team works very hard to make sure you are running the best software and getting stable updates and security enhancements, as well as quick enterprise support. Tens of thousands of happy customers have a Proxmox subscription. Get yours easily in our online shop.

Buy now!