public ipv6 only KVM

pmloikju

New Member
Nov 28, 2014
16
0
1
Hi,

I want to develop my ipv6 skills with openvz and kvm virtualisation.
I have aleready used ipv6/ipv4 public ip with container without trouble (veth / vmbr0).

Now, i want to try debian KVM with only public ipv6.

I have made some change on host an vm but i can't ping.

My host ipv6 on vmbr0 2001:41d0:1:b51b::/64
My vmipv6 on eth0 2001:41d0:1:b51b::100/64
default ipv6 gateway is 2001:41d0:1:bFF:FF:FF:FF:FF

vmbr network config
Code:
 iface vmbr0 inet6 static address 2001:41d0:1:b51b::/64 netmask 64
 post-up /sbin/ip -f inet6 route add 2001:41d0:1:bFF:FF:FF:FF:FF dev vmbr0
 post-up /sbin/ip -f inet6 route add default via 2001:41d0:1:bFF:FF:FF:FF:FF
 pre-down /sbin/ip -f inet6 route del default via 2001:41d0:1:bFF:FF:FF:FF:FF
 pre-down /sbin/ip -f inet6 route del 2001:41d0:1:bFF:FF:FF:FF:FF dev vmbr0


host sysctl.conf
Code:
net.ipv4.ip_forward=1
net.ipv6.conf.all.forwarding=1
net.ipv6.conf.all.autoconf = 0
net.ipv6.conf.default.autoconf = 0
net.ipv6.conf.vmbr0.autoconf = 0
net.ipv6.conf.all.accept_ra = 0
net.ipv6.conf.default.accept_ra = 0
net.ipv6.conf.vmbr0.accept_ra = 0
net.ipv6.conf.vmbr0.accept_ra = 0
net.ipv6.conf.vmbr0.autoconf = 0
net.ipv6.conf.all.proxy_ndp=1


begin of
Code:
route -6

Code:
Table de routage IPv6 du noyauDestination                    Next Hop                   Flag Met Ref Use If
2001:41d0:1:bff:ff:ff:ff:ff/128 ::                         U    1024 0     1 vmbr0
2001:41d0:1:b51b::100/128      ::                         U    1024 0     0 vmbr0
2001:41d0:1:b51b::/64          ::                         U    256 0     0 vmbr0
2001:41d0:1:b500::/56          ::                         UAe  256 0    29 vmbr0
fe80::1/128                    ::                         U    256 0     0 venet0
fe80::/64                      ::                         U    256 0     0 dummy0
fe80::/64                      ::                         U    256 0     0 vmbr1
fe80::/64                      ::                         U    256 0     0 venet0
fe80::/64                      ::                         U    256 0     0 tap104i0
fe80::/64                      ::                         U    256 0     0 tap104i1
fe80::/64                      ::                         U    256 0     0 tap105i0
fe80::/64                      ::                         U    256 0     0 tap105i1
fe80::/64                      ::                         U    256 0     0 tap108i0
fe80::/64                      ::                         U    256 0     0 tap115i0
fe80::/64                      ::                         U    256 0     0 tap119i0
fe80::/64                      ::                         U    256 0     0 tap129i0
fe80::/64                      ::                         U    256 0     0 tap132i0
fe80::/64                      ::                         U    256 0     0 vmbr0
fe80::/64                      ::                         U    256 0     0 vmbr2
fe80::/64                      ::                         U    256 0     0 eth0
fe80::/64                      ::                         U    256 0     0 tap106i0
fe80::/64                      ::                         U    256 0     0 tap106i1
fe80::/64                      ::                         U    256 0     0 veth120.0
fe80::/64                      ::                         U    256 0     0 veth103.0
fe80::/64                      ::                         U    256 0     0 veth102.0
fe80::/64                      ::                         U    256 0     0 tap109i0
fe80::/64                      ::                         U    256 0     0 tap109i1
::/0                           2001:41d0:1:bff:ff:ff:ff:ff UG   1024 0    56 vmbr0
::/0                           ::                         !n   -1  1 35621 lo
::1/128                        ::                         Un   0   1 78488 lo
2001:41d0:1:b51b::/128         ::                         Un   0   1    60 lo

VM interfaces conf
Code:
auto lo
iface lo inet loopback
allow-hotplug eth0

iface eth0 int6 static
pre-up modprobe ipv6
address 2001:41d0:1:b51b::100
netmask 64
gateway 2001:41d0:1:bff:ff:ff:ff:ff

OR
Code:
auto lo
iface lo inet loopback
allow-hotplug eth0

iface eth0 int6 static
pre-up modprobe ipv6
address 2001:41d0:1:b51b::100
netmask 64
post-up ip -6 route add 2001:41d0:1:b51b:: dev eth0
post-up ip -6 route add default via 2001:41d0:1:b51b:: 
pre-down ip -6 route del 2001:41d0:1:b51b:: dev eth0
pre-down ip -6 route del default via 2001:41d0:1:b51b::

In resolv.conf i add my ISP ipv6 DNS

When i type
Code:
route -A inet6 add default gw 2001:41d0:1:b51b::

ping failed with address unreachable




So... What i have forgot ?
i think i have a bad config on host and bad route on vm.


Thanks for your help !
 
I have my anwser, it need to enable "proxying" cause there is no ARP on ipv6 and i can't generate virtual mac address on my ISP panel.

So just 2 commands,

On ct:
ip neigh add proxy <IPV6 gateway address> dev eth0
eth0 or venet0




Host:
ip neigh add proxy <VM ipv6> dev eth0