VM kein ipv6

[mad170782]

Hallo,
ich habe ein Problem. Ich habe auf einem root Proxmox installiert.
IPv4 bekomme ich ans laufen. Jedoch habe ich das Problem mit ipv6. In der VM bekomme ich es nicht hin, das dieser eine ipv6 Addresse nach aussen hat.

Root: /etc/network/interface

### Hetzner Online GmbH installimage

source /etc/network/interfaces.d/*

auto lo
iface lo inet loopback
iface lo inet6 loopback

auto enp2s0
iface enp2s0 inet static
  address 25.*.*.75
  netmask 255.255.255.224
  pointopoint 25.*.*.65
  gateway 25.*.*.65

iface enp2s0 inet6 static
  address affe:affe:affe:affe::2
  netmask 128
  gateway fe80::1
  up sysctl -p

auto vmbr0
iface vmbr0 inet static
  address 25.*.*.75
  netmask 255.255.255.224
  bridge_ports none
  bridge_stp off
  bridge_fd 0
  up ip route add 25.*.*.90/27 dev vmbr0

iface vmbr0 inet6 static
  address affe:affe:affe:affe::2
  netmask 64

Auf dem Client habe ich folgende einstellungen gemacht:
IPv6: affe:affe:affe:affe::10
Prefix: 64
Gateway ipv6: affe:affe:affe:affe::2


Auf dem Host habe ich zusätzlich folgendes eingegeben (bisher nicht fest in /etc/sysctl.conf eingetragen):

sysctl -w net.ipv4.ip_forward=1
sysctl -w net.ipv6.conf.all.forwarding=1

Habt ihr noch einen tipp was ich machen kann damit die vm auch eine ipv6 bekommt?

Gruß Armin

 

[Stoiko Ivanov]

• kannst du die ip affe:affe:affe:affe::2 aus dem gastsystem heraus pingen?
• was auffaellt ist dass du die $prefix::2 2 mal vergeben hast (einmal auf enp2s0 und einmal auf vmbr0) - auf den ersten blick wuerde ich schaetzen, dass die ip nur einmal hochgenommen werden kann und es nicht sicher ist auf welchen von beiden interfaces (enp2s0/vmbr0)
• koenntest du uU das output von ip -6 r und ip -6 a posten?
• vl. auch gleich versuchen der vmbr0 eine andere ip aus dem /64 zu geben
• tcpdump -envi vmbr0 ip6 (auf dem host) koennte beim debuggen helfen
• sysctl -a |grep ipv6 kann helfen rauszufinden ob ipv6 uU disabled ist (im gast)
• wahrscheinlich ein typo aber in der /etc/sysctl.conf muessen die key/value werte ohne dem 'sysctl -w' eingetragen werden

hth

 

[mad170782]

Hallo,
danke für die schnelle antwort.

• kannst du die ip affe:affe:affe:affe::2 aus dem gastsystem heraus pingen?

Nein. Host -> VM, VM - Host sind nicht über Ipv6 erreichbar.

• was auffaellt ist dass du die $prefix::2 2 mal vergeben hast (einmal auf enp2s0 und einmal auf vmbr0) - auf den ersten blick wuerde ich schaetzen, dass die ip nur einmal hochgenommen werden kann und es nicht sicher ist auf welchen von beiden interfaces (enp2s0/vmbr0)

ja, ich war der Anleitung im Hetzner Wiki der gefolgt haben. Dort war das als Beispiel unter den punkt "Network configuration host system KVM/Routed"

• koenntest du uU das output von ip -6 r und ip -6 a posten?

root@pve ~ # ip -6 r
affe:affe:affe:affe::2 dev enp2s0 proto kernel metric 256 pref medium
fe80::/64 dev enp2s0 proto kernel metric 256 pref medium
fe80::/64 dev vmbr0 proto kernel metric 256 pref medium
default via fe80::1 dev enp2s0 metric 1024 pref medium

root@pve ~ # ip -6 a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 state UNKNOWN qlen 1000
    inet6 ::1/128 scope host
       valid_lft forever preferred_lft forever
2: enp2s0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 state UP qlen 1000
    inet6 affe:affe:affe:affe::2/128 scope global
       valid_lft forever preferred_lft forever
    inet6 fe80::d63d:7eff:fee3:11f/64 scope link
       valid_lft forever preferred_lft forever
3: vmbr0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 state UP qlen 1000
    inet6 fe80::b49c:98ff:fe1c:aa5d/64 scope link
       valid_lft forever preferred_lft forever

• vl. auch gleich versuchen der vmbr0 eine andere ip aus dem /64 zu geben

Dem host habe ich Testweise affe:affe:affe:affe::8 gegeben. Das gleiche Problem ist immer noch vorhanden.

• tcpdump -envi vmbr0 ip6 (auf dem host) koennte beim debuggen helfen

An der Stelle stehe ich noch auf den Schlauch, ich habe es eingegeben und bekomme nur:

root@pve ~ # tcpdump -envi vmbr0 ip6
tcpdump: listening on vmbr0, link-type EN10MB (Ethernet), capture size 262144 bytes

• sysctl -a |grep ipv6 kann helfen rauszufinden ob ipv6 uU disabled ist (im gast)

Leider kann ich da ich neuer benutzer bin die Ausgabe nicht auf nopaste schreiben. Tut mir leid das es an der Stelle nun länger wird.

test@VirtuellerPC:~
$ sysctl -a |grep ipv6
sysctl: permission denied on key 'fs.protected_hardlinks'
sysctl: permission denied on key 'fs.protected_symlinks'
sysctl: permission denied on key 'kernel.cad_pid'
sysctl: permission denied on key 'kernel.unprivileged_userns_apparmor_policy'
sysctl: permission denied on key 'kernel.usermodehelper.bset'
sysctl: permission denied on key 'kernel.usermodehelper.inheritable'
sysctl: permission denied on key 'net.core.bpf_jit_harden'
sysctl: permission denied on key 'net.core.bpf_jit_kallsyms'
sysctl: permission denied on key 'net.ipv4.tcp_fastopen_key'
sysctl: permission denied on key 'net.ipv6.conf.all.stable_secret'
net.ipv6.anycast_src_echo_reply = 0
net.ipv6.auto_flowlabels = 1
net.ipv6.bindv6only = 0
net.ipv6.conf.all.accept_dad = 0
net.ipv6.conf.all.accept_ra = 1
net.ipv6.conf.all.accept_ra_defrtr = 1
net.ipv6.conf.all.accept_ra_from_local = 0
net.ipv6.conf.all.accept_ra_min_hop_limit = 1
net.ipv6.conf.all.accept_ra_mtu = 1
net.ipv6.conf.all.accept_ra_pinfo = 1
net.ipv6.conf.all.accept_ra_rt_info_max_plen = 0
net.ipv6.conf.all.accept_ra_rt_info_min_plen = 0
net.ipv6.conf.all.accept_ra_rtr_pref = 1
net.ipv6.conf.all.accept_redirects = 1
net.ipv6.conf.all.accept_source_route = 0
net.ipv6.conf.all.addr_gen_mode = 0
net.ipv6.conf.all.autoconf = 1
net.ipv6.conf.all.dad_transmits = 1
net.ipv6.conf.all.disable_ipv6 = 0
net.ipv6.conf.all.disable_policy = 0
net.ipv6.conf.all.drop_unicast_in_l2_multicast = 0
net.ipv6.conf.all.drop_unsolicited_na = 0
net.ipv6.conf.all.enhanced_dad = 1
net.ipv6.conf.all.force_mld_version = 0
net.ipv6.conf.all.force_tllao = 0
net.ipv6.conf.all.forwarding = 0
net.ipv6.conf.all.hop_limit = 64
net.ipv6.conf.all.ignore_routes_with_linkdown = 0
net.ipv6.conf.all.keep_addr_on_down = 0
net.ipv6.conf.all.max_addresses = 16
net.ipv6.conf.all.max_desync_factor = 600
net.ipv6.conf.all.mc_forwarding = 0
net.ipv6.conf.all.mldv1_unsolicited_report_interval = 10000
net.ipv6.conf.all.mldv2_unsolicited_report_interval = 1000
net.ipv6.conf.all.mtu = 1280
net.ipv6.conf.all.ndisc_notify = 0
net.ipv6.conf.all.ndisc_tclass = 0
net.ipv6.conf.all.optimistic_dad = 0
net.ipv6.conf.all.proxy_ndp = 0
net.ipv6.conf.all.regen_max_retry = 3
net.ipv6.conf.all.router_probe_interval = 60
net.ipv6.conf.all.router_solicitation_delay = 1
net.ipv6.conf.all.router_solicitation_interval = 4
net.ipv6.conf.all.router_solicitation_max_interval = 3600
net.ipv6.conf.all.router_solicitations = -1
net.ipv6.conf.all.seg6_enabled = 0
net.ipv6.conf.all.seg6_require_hmac = 0
sysctl: permission denied on key 'net.ipv6.conf.default.stable_secret'
net.ipv6.conf.all.suppress_frag_ndisc = 1
net.ipv6.conf.all.temp_prefered_lft = 86400
net.ipv6.conf.all.temp_valid_lft = 604800
net.ipv6.conf.all.use_oif_addrs_only = 0
net.ipv6.conf.all.use_optimistic = 0
net.ipv6.conf.all.use_tempaddr = 0
net.ipv6.conf.default.accept_dad = 1
net.ipv6.conf.default.accept_ra = 1
net.ipv6.conf.default.accept_ra_defrtr = 1
net.ipv6.conf.default.accept_ra_from_local = 0
net.ipv6.conf.default.accept_ra_min_hop_limit = 1
net.ipv6.conf.default.accept_ra_mtu = 1
net.ipv6.conf.default.accept_ra_pinfo = 1
net.ipv6.conf.default.accept_ra_rt_info_max_plen = 0
net.ipv6.conf.default.accept_ra_rt_info_min_plen = 0
net.ipv6.conf.default.accept_ra_rtr_pref = 1
net.ipv6.conf.default.accept_redirects = 1
net.ipv6.conf.default.accept_source_route = 0
net.ipv6.conf.default.addr_gen_mode = 0
net.ipv6.conf.default.autoconf = 1
net.ipv6.conf.default.dad_transmits = 1
net.ipv6.conf.default.disable_ipv6 = 0
net.ipv6.conf.default.disable_policy = 0
net.ipv6.conf.default.drop_unicast_in_l2_multicast = 0
net.ipv6.conf.default.drop_unsolicited_na = 0
net.ipv6.conf.default.enhanced_dad = 1
net.ipv6.conf.default.force_mld_version = 0
net.ipv6.conf.default.force_tllao = 0
net.ipv6.conf.default.forwarding = 0
net.ipv6.conf.default.hop_limit = 64
net.ipv6.conf.default.ignore_routes_with_linkdown = 0
net.ipv6.conf.default.keep_addr_on_down = 0
net.ipv6.conf.default.max_addresses = 16
net.ipv6.conf.default.max_desync_factor = 600
net.ipv6.conf.default.mc_forwarding = 0
net.ipv6.conf.default.mldv1_unsolicited_report_interval = 10000
net.ipv6.conf.default.mldv2_unsolicited_report_interval = 1000
net.ipv6.conf.default.mtu = 1280
net.ipv6.conf.default.ndisc_notify = 0
net.ipv6.conf.default.ndisc_tclass = 0
net.ipv6.conf.default.optimistic_dad = 0
net.ipv6.conf.default.proxy_ndp = 0
net.ipv6.conf.default.regen_max_retry = 3
net.ipv6.conf.default.router_probe_interval = 60
net.ipv6.conf.default.router_solicitation_delay = 1
net.ipv6.conf.default.router_solicitation_interval = 4
net.ipv6.conf.default.router_solicitation_max_interval = 3600
net.ipv6.conf.default.router_solicitations = -1
net.ipv6.conf.default.seg6_enabled = 0
net.ipv6.conf.default.seg6_require_hmac = 0
sysctl: permission denied on key 'net.ipv6.conf.eth0.stable_secret'
net.ipv6.conf.default.suppress_frag_ndisc = 1
net.ipv6.conf.default.temp_prefered_lft = 86400
net.ipv6.conf.default.temp_valid_lft = 604800
net.ipv6.conf.default.use_oif_addrs_only = 0
net.ipv6.conf.default.use_optimistic = 0
net.ipv6.conf.default.use_tempaddr = 0
net.ipv6.conf.eth0.accept_dad = 1
net.ipv6.conf.eth0.accept_ra = 1
net.ipv6.conf.eth0.accept_ra_defrtr = 0
net.ipv6.conf.eth0.accept_ra_from_local = 0
net.ipv6.conf.eth0.accept_ra_min_hop_limit = 1
net.ipv6.conf.eth0.accept_ra_mtu = 1
net.ipv6.conf.eth0.accept_ra_pinfo = 0
net.ipv6.conf.eth0.accept_ra_rt_info_max_plen = 0
net.ipv6.conf.eth0.accept_ra_rt_info_min_plen = 0
net.ipv6.conf.eth0.accept_ra_rtr_pref = 0
net.ipv6.conf.eth0.accept_redirects = 1
net.ipv6.conf.eth0.accept_source_route = 0
net.ipv6.conf.eth0.addr_gen_mode = 1
net.ipv6.conf.eth0.autoconf = 1
net.ipv6.conf.eth0.dad_transmits = 1
net.ipv6.conf.eth0.disable_ipv6 = 0
net.ipv6.conf.eth0.disable_policy = 0
net.ipv6.conf.eth0.drop_unicast_in_l2_multicast = 0
net.ipv6.conf.eth0.drop_unsolicited_na = 0
net.ipv6.conf.eth0.enhanced_dad = 1
net.ipv6.conf.eth0.force_mld_version = 0
net.ipv6.conf.eth0.force_tllao = 0
net.ipv6.conf.eth0.forwarding = 0
net.ipv6.conf.eth0.hop_limit = 64
net.ipv6.conf.eth0.ignore_routes_with_linkdown = 0
net.ipv6.conf.eth0.keep_addr_on_down = 0
net.ipv6.conf.eth0.max_addresses = 16
net.ipv6.conf.eth0.max_desync_factor = 600
net.ipv6.conf.eth0.mc_forwarding = 0
net.ipv6.conf.eth0.mldv1_unsolicited_report_interval = 10000
net.ipv6.conf.eth0.mldv2_unsolicited_report_interval = 1000
net.ipv6.conf.eth0.mtu = 1500
net.ipv6.conf.eth0.ndisc_notify = 0
net.ipv6.conf.eth0.ndisc_tclass = 0
net.ipv6.conf.eth0.optimistic_dad = 0
net.ipv6.conf.eth0.proxy_ndp = 0
net.ipv6.conf.eth0.regen_max_retry = 3
net.ipv6.conf.eth0.router_probe_interval = 60
net.ipv6.conf.eth0.router_solicitation_delay = 1
net.ipv6.conf.eth0.router_solicitation_interval = 4
net.ipv6.conf.eth0.router_solicitation_max_interval = 3600
net.ipv6.conf.eth0.router_solicitations = -1
net.ipv6.conf.eth0.seg6_enabled = 0
net.ipv6.conf.eth0.seg6_require_hmac = 0
sysctl: permission denied on key 'net.ipv6.conf.lo.stable_secret'
net.ipv6.conf.eth0.suppress_frag_ndisc = 1
net.ipv6.conf.eth0.temp_prefered_lft = 86400
net.ipv6.conf.eth0.temp_valid_lft = 604800
net.ipv6.conf.eth0.use_oif_addrs_only = 0
net.ipv6.conf.eth0.use_optimistic = 0
net.ipv6.conf.eth0.use_tempaddr = 0
net.ipv6.conf.lo.accept_dad = -1
net.ipv6.conf.lo.accept_ra = 1
net.ipv6.conf.lo.accept_ra_defrtr = 1
net.ipv6.conf.lo.accept_ra_from_local = 0
net.ipv6.conf.lo.accept_ra_min_hop_limit = 1
net.ipv6.conf.lo.accept_ra_mtu = 1
net.ipv6.conf.lo.accept_ra_pinfo = 1
net.ipv6.conf.lo.accept_ra_rt_info_max_plen = 0
net.ipv6.conf.lo.accept_ra_rt_info_min_plen = 0
net.ipv6.conf.lo.accept_ra_rtr_pref = 1
net.ipv6.conf.lo.accept_redirects = 1
net.ipv6.conf.lo.accept_source_route = 0
net.ipv6.conf.lo.addr_gen_mode = 0
net.ipv6.conf.lo.autoconf = 1
net.ipv6.conf.lo.dad_transmits = 1
net.ipv6.conf.lo.disable_ipv6 = 0
net.ipv6.conf.lo.disable_policy = 0
net.ipv6.conf.lo.drop_unicast_in_l2_multicast = 0
net.ipv6.conf.lo.drop_unsolicited_na = 0
net.ipv6.conf.lo.enhanced_dad = 1
net.ipv6.conf.lo.force_mld_version = 0
net.ipv6.conf.lo.force_tllao = 0
net.ipv6.conf.lo.forwarding = 0
net.ipv6.conf.lo.hop_limit = 64
net.ipv6.conf.lo.ignore_routes_with_linkdown = 0
net.ipv6.conf.lo.keep_addr_on_down = 0
net.ipv6.conf.lo.max_addresses = 16
net.ipv6.conf.lo.max_desync_factor = 600
net.ipv6.conf.lo.mc_forwarding = 0
net.ipv6.conf.lo.mldv1_unsolicited_report_interval = 10000
net.ipv6.conf.lo.mldv2_unsolicited_report_interval = 1000
net.ipv6.conf.lo.mtu = 65536
net.ipv6.conf.lo.ndisc_notify = 0
net.ipv6.conf.lo.ndisc_tclass = 0
net.ipv6.conf.lo.optimistic_dad = 0
net.ipv6.conf.lo.proxy_ndp = 0
net.ipv6.conf.lo.regen_max_retry = 3
net.ipv6.conf.lo.router_probe_interval = 60
net.ipv6.conf.lo.router_solicitation_delay = 1
net.ipv6.conf.lo.router_solicitation_interval = 4
net.ipv6.conf.lo.router_solicitation_max_interval = 3600
net.ipv6.conf.lo.router_solicitations = -1
net.ipv6.conf.lo.seg6_enabled = 0
net.ipv6.conf.lo.seg6_require_hmac = 0
net.ipv6.conf.lo.suppress_frag_ndisc = 1
net.ipv6.conf.lo.temp_prefered_lft = 86400
net.ipv6.conf.lo.temp_valid_lft = 604800
net.ipv6.conf.lo.use_oif_addrs_only = 0
net.ipv6.conf.lo.use_optimistic = 0
net.ipv6.conf.lo.use_tempaddr = -1
net.ipv6.flowlabel_consistency = 1
net.ipv6.flowlabel_reflect = 0
net.ipv6.flowlabel_state_ranges = 0
net.ipv6.fwmark_reflect = 0
net.ipv6.icmp.ratelimit = 1000
net.ipv6.idgen_delay = 1
net.ipv6.idgen_retries = 3
net.ipv6.ip6frag_high_thresh = 4194304
net.ipv6.ip6frag_low_thresh = 3145728
net.ipv6.ip6frag_secret_interval = 0
net.ipv6.ip6frag_time = 60
net.ipv6.ip_nonlocal_bind = 0
net.ipv6.max_dst_opts_length = 2147483647
net.ipv6.max_dst_opts_number = 8
net.ipv6.max_hbh_length = 2147483647
net.ipv6.max_hbh_opts_number = 8
net.ipv6.mld_max_msf = 64
net.ipv6.mld_qrv = 2
net.ipv6.neigh.default.anycast_delay = 100
net.ipv6.neigh.default.app_solicit = 0
net.ipv6.neigh.default.base_reachable_time_ms = 30000
net.ipv6.neigh.default.delay_first_probe_time = 5
net.ipv6.neigh.default.gc_interval = 30
net.ipv6.neigh.default.gc_stale_time = 60
net.ipv6.neigh.default.gc_thresh1 = 128
net.ipv6.neigh.default.gc_thresh2 = 512
net.ipv6.neigh.default.gc_thresh3 = 1024
net.ipv6.neigh.default.locktime = 0
net.ipv6.neigh.default.mcast_resolicit = 0
net.ipv6.neigh.default.mcast_solicit = 3
net.ipv6.neigh.default.proxy_delay = 80
net.ipv6.neigh.default.proxy_qlen = 64
net.ipv6.neigh.default.retrans_time_ms = 1000
net.ipv6.neigh.default.ucast_solicit = 3
net.ipv6.neigh.default.unres_qlen = 101
net.ipv6.neigh.default.unres_qlen_bytes = 212992
net.ipv6.neigh.eth0.anycast_delay = 100
net.ipv6.neigh.eth0.app_solicit = 0
net.ipv6.neigh.eth0.base_reachable_time_ms = 30000
net.ipv6.neigh.eth0.delay_first_probe_time = 5
net.ipv6.neigh.eth0.gc_stale_time = 60
net.ipv6.neigh.eth0.locktime = 0
net.ipv6.neigh.eth0.mcast_resolicit = 0
net.ipv6.neigh.eth0.mcast_solicit = 3
net.ipv6.neigh.eth0.proxy_delay = 80
net.ipv6.neigh.eth0.proxy_qlen = 64
net.ipv6.neigh.eth0.retrans_time_ms = 1000
net.ipv6.neigh.eth0.ucast_solicit = 3
net.ipv6.neigh.eth0.unres_qlen = 101
net.ipv6.neigh.eth0.unres_qlen_bytes = 212992
net.ipv6.neigh.lo.anycast_delay = 100
net.ipv6.neigh.lo.app_solicit = 0
net.ipv6.neigh.lo.base_reachable_time_ms = 30000
net.ipv6.neigh.lo.delay_first_probe_time = 5
net.ipv6.neigh.lo.gc_stale_time = 60
net.ipv6.neigh.lo.locktime = 0
net.ipv6.neigh.lo.mcast_resolicit = 0
net.ipv6.neigh.lo.mcast_solicit = 3
net.ipv6.neigh.lo.proxy_delay = 80
net.ipv6.neigh.lo.proxy_qlen = 64
net.ipv6.neigh.lo.retrans_time_ms = 1000
net.ipv6.neigh.lo.ucast_solicit = 3
net.ipv6.neigh.lo.unres_qlen = 101
net.ipv6.neigh.lo.unres_qlen_bytes = 212992
net.ipv6.route.gc_elasticity = 9
net.ipv6.route.gc_interval = 30
net.ipv6.route.gc_min_interval = 0
net.ipv6.route.gc_min_interval_ms = 500
net.ipv6.route.gc_thresh = 1024
net.ipv6.route.gc_timeout = 60
net.ipv6.route.max_size = 4096
net.ipv6.route.min_adv_mss = 1220
net.ipv6.route.mtu_expires = 600
net.ipv6.xfrm6_gc_thresh = 32768
sysctl: permission denied on key 'vm.mmap_rnd_bits'
sysctl: permission denied on key 'vm.mmap_rnd_compat_bits'
sysctl: permission denied on key 'vm.stat_refresh'

• wahrscheinlich ein typo aber in der /etc/sysctl.conf muessen die key/value werte ohne dem 'sysctl -w' eingetragen werden

Ich habe es noch nicht fest eingetragen. Ich habe den Proxmox auf einem frischen Debian installiert nach https://pve.proxmox.com/wiki/Install_Proxmox_VE_on_Debian_Jessie danach habe ich mir die Netzwerkonfiguration auf im Hetzner Wiki angeschaut und eingetragen. Ich habe noch keine Einstellungen in /etc/sysctl.conf gemacht sondern gebe nach jedem reboot die befehle von Hand ein. Soweit das ich es fest eingebaut habe bin ich noch nicht gekommen.

Gruß Armin

 

[Stoiko Ivanov]

Hallo,

• Hatte Hetzner's netzwerkempfehlung nicht gekannt - erklaert das mit der ip-addresse auf 2 interfaces - danke
• tcpdump ist ein tool zum mitschneiden von netzwerkverbindungen - es kann dazu verwendet werden um zu sehen ob traffic z.b. vom gast am host ankommt (siehe z.b. http://mirrors.deepspace6.net/Linux+IPv6-HOWTO/x805.html) - ich lasse das immer in einer virtuellen console laufen und lasse nebenbei einen ping (oder curl oder aehnliches) laufen.
• immer vom einfachsten fall loslegen (ping aus dem guest zum host, und vom host zum guest)
• in deinem gepasteten sysctl-output steht: net.ipv6.conf.all.forwarding = 0

 

[mad170782]

• immer vom einfachsten fall loslegen (ping aus dem guest zum host, und vom host zum guest)

Beide richtungen gehen nicht.

root@pve2 ~ # ip -6 a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 state UNKNOWN qlen 1000
    inet6 ::1/128 scope host
       valid_lft forever preferred_lft forever
2: enp2s0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 state UP qlen 1000
    inet6 affe:affe:affe:affe::2/128 scope global
       valid_lft forever preferred_lft forever
    inet6 fe80::468a:5bff:fed8:80b7/64 scope link
       valid_lft forever preferred_lft forever
3: vmbr0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 state UP qlen 1000
    inet6 fe80::7026:b5ff:fe1d:9fcd/64 scope link
       valid_lft forever preferred_lft forever
root@pve2 ~ # ping6 affe:affe:affe:affe::10
PING affe:affe:affe:affe::10(affe:affe:affe:affe::10) 56 data bytes
From affe:affe:affe:affe::2 icmp_seq=1 Time exceeded: Hop limit
From affe:affe:affe:affe::2 icmp_seq=2 Time exceeded: Hop limit
From affe:affe:affe:affe::2 icmp_seq=3 Time exceeded: Hop limit
^C
--- affe:affe:affe:affe::10 ping statistics ---
3 packets transmitted, 0 received, +3 errors, 100% packet loss, time 2002ms

root@VirtuellerPC:/home/test# ip -6 a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 state UNKNOWN qlen 1000
    inet6 ::1/128 scope host
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 state UP qlen 1000
    inet6 affe:affe:affe:affe::10/64 scope global
       valid_lft forever preferred_lft forever
    inet6 fe80::17d6:424f:a4d5:b120/64 scope link
       valid_lft forever preferred_lft forever
root@VirtuellerPC:/home/test# ping6 affe:affe:affe:affe::2
PING affe:affe:affe:affe::2(affe:affe:affe:affe::2) 56 data bytes
From affe:affe:affe:affe::10 icmp_seq=1 Destination unreachable: Address unreachable
From affe:affe:affe:affe::10 icmp_seq=2 Destination unreachable: Address unreachable
From affe:affe:affe:affe::10 icmp_seq=3 Destination unreachable: Address unreachable
^C
--- affe:affe:affe:affe::2 ping statistics ---
4 packets transmitted, 0 received, +3 errors, 100% packet loss, time 3048ms

• in deinem gepasteten sysctl-output steht: net.ipv6.conf.all.forwarding = 0

Muss das nicht so sein? Du sagtest doch ich sollte den Output von dem Virtuellen PC aus machen. Das war nicht der Root / Host Server. Das war der Output vom VirtuellenPc. Da muss das IP forward nicht aktiviert sein ... oder?


Hier noch vom Root / Host

root@pve2 ~ # sysctl -a |grep ipv6
sysctl: reading key "net.ipv6.conf.all.stable_secret"
net.ipv6.anycast_src_echo_reply = 0
net.ipv6.auto_flowlabels = 1
net.ipv6.bindv6only = 0
net.ipv6.calipso_cache_bucket_size = 10
net.ipv6.calipso_cache_enable = 1
net.ipv6.conf.all.accept_dad = 0
net.ipv6.conf.all.accept_ra = 0
net.ipv6.conf.all.accept_ra_defrtr = 0
net.ipv6.conf.all.accept_ra_from_local = 0
net.ipv6.conf.all.accept_ra_min_hop_limit = 1
net.ipv6.conf.all.accept_ra_mtu = 1
net.ipv6.conf.all.accept_ra_pinfo = 0
net.ipv6.conf.all.accept_ra_rt_info_max_plen = 0
net.ipv6.conf.all.accept_ra_rt_info_min_plen = 0
net.ipv6.conf.all.accept_ra_rtr_pref = 0
net.ipv6.conf.all.accept_redirects = 0
net.ipv6.conf.all.accept_source_route = 0
net.ipv6.conf.all.addr_gen_mode = 0
net.ipv6.conf.all.autoconf = 0
net.ipv6.conf.all.dad_transmits = 1
net.ipv6.conf.all.disable_ipv6 = 0
net.ipv6.conf.all.disable_policy = 0
net.ipv6.conf.all.drop_unicast_in_l2_multicast = 0
net.ipv6.conf.all.drop_unsolicited_na = 0
net.ipv6.conf.all.enhanced_dad = 1
net.ipv6.conf.all.force_mld_version = 0
net.ipv6.conf.all.force_tllao = 0
net.ipv6.conf.all.forwarding = 1
net.ipv6.conf.all.hop_limit = 64
net.ipv6.conf.all.ignore_routes_with_linkdown = 0
net.ipv6.conf.all.keep_addr_on_down = 0
net.ipv6.conf.all.max_addresses = 16
net.ipv6.conf.all.max_desync_factor = 600
net.ipv6.conf.all.mc_forwarding = 0
net.ipv6.conf.all.mldv1_unsolicited_report_interval = 10000
net.ipv6.conf.all.mldv2_unsolicited_report_interval = 1000
net.ipv6.conf.all.mtu = 1280
net.ipv6.conf.all.ndisc_notify = 0
net.ipv6.conf.all.ndisc_tclass = 0
net.ipv6.conf.all.proxy_ndp = 0
net.ipv6.conf.all.regen_max_retry = 3
net.ipv6.conf.all.router_probe_interval = 60
net.ipv6.conf.all.router_solicitation_delay = 1
net.ipv6.conf.all.router_solicitation_interval = 4
net.ipv6.conf.all.router_solicitation_max_interval = 3600
net.ipv6.conf.all.router_solicitations = -1
net.ipv6.conf.all.seg6_enabled = 0
net.ipv6.conf.all.seg6_require_hmac = 0
sysctl: reading key "net.ipv6.conf.default.stable_secret"
net.ipv6.conf.all.suppress_frag_ndisc = 1
net.ipv6.conf.all.temp_prefered_lft = 86400
net.ipv6.conf.all.temp_valid_lft = 604800
net.ipv6.conf.all.use_oif_addrs_only = 0
net.ipv6.conf.all.use_tempaddr = 0
net.ipv6.conf.default.accept_dad = 0
net.ipv6.conf.default.accept_ra = 0
net.ipv6.conf.default.accept_ra_defrtr = 0
net.ipv6.conf.default.accept_ra_from_local = 0
net.ipv6.conf.default.accept_ra_min_hop_limit = 1
net.ipv6.conf.default.accept_ra_mtu = 1
net.ipv6.conf.default.accept_ra_pinfo = 0
net.ipv6.conf.default.accept_ra_rt_info_max_plen = 0
net.ipv6.conf.default.accept_ra_rt_info_min_plen = 0
net.ipv6.conf.default.accept_ra_rtr_pref = 0
net.ipv6.conf.default.accept_redirects = 0
net.ipv6.conf.default.accept_source_route = 0
net.ipv6.conf.default.addr_gen_mode = 0
net.ipv6.conf.default.autoconf = 0
net.ipv6.conf.default.dad_transmits = 1
net.ipv6.conf.default.disable_ipv6 = 0
net.ipv6.conf.default.disable_policy = 0
net.ipv6.conf.default.drop_unicast_in_l2_multicast = 0
net.ipv6.conf.default.drop_unsolicited_na = 0
net.ipv6.conf.default.enhanced_dad = 1
net.ipv6.conf.default.force_mld_version = 0
net.ipv6.conf.default.force_tllao = 0
net.ipv6.conf.default.forwarding = 1
net.ipv6.conf.default.hop_limit = 64
net.ipv6.conf.default.ignore_routes_with_linkdown = 0
net.ipv6.conf.default.keep_addr_on_down = 0
net.ipv6.conf.default.max_addresses = 16
net.ipv6.conf.default.max_desync_factor = 600
net.ipv6.conf.default.mc_forwarding = 0
net.ipv6.conf.default.mldv1_unsolicited_report_interval = 10000
net.ipv6.conf.default.mldv2_unsolicited_report_interval = 1000
net.ipv6.conf.default.mtu = 1280
net.ipv6.conf.default.ndisc_notify = 0
net.ipv6.conf.default.ndisc_tclass = 0
net.ipv6.conf.default.proxy_ndp = 0
net.ipv6.conf.default.regen_max_retry = 3
net.ipv6.conf.default.router_probe_interval = 60
net.ipv6.conf.default.router_solicitation_delay = 1
net.ipv6.conf.default.router_solicitation_interval = 4
net.ipv6.conf.default.router_solicitation_max_interval = 3600
net.ipv6.conf.default.router_solicitations = -1
net.ipv6.conf.default.seg6_enabled = 0
net.ipv6.conf.default.seg6_require_hmac = 0
sysctl: reading key "net.ipv6.conf.enp2s0.stable_secret"
net.ipv6.conf.default.suppress_frag_ndisc = 1
net.ipv6.conf.default.temp_prefered_lft = 86400
net.ipv6.conf.default.temp_valid_lft = 604800
net.ipv6.conf.default.use_oif_addrs_only = 0
net.ipv6.conf.default.use_tempaddr = 0
net.ipv6.conf.enp2s0.accept_dad = 1
net.ipv6.conf.enp2s0.accept_ra = 0
net.ipv6.conf.enp2s0.accept_ra_defrtr = 1
net.ipv6.conf.enp2s0.accept_ra_from_local = 0
net.ipv6.conf.enp2s0.accept_ra_min_hop_limit = 1
net.ipv6.conf.enp2s0.accept_ra_mtu = 1
net.ipv6.conf.enp2s0.accept_ra_pinfo = 1
net.ipv6.conf.enp2s0.accept_ra_rt_info_max_plen = 0
net.ipv6.conf.enp2s0.accept_ra_rt_info_min_plen = 0
net.ipv6.conf.enp2s0.accept_ra_rtr_pref = 1
net.ipv6.conf.enp2s0.accept_redirects = 1
net.ipv6.conf.enp2s0.accept_source_route = 0
net.ipv6.conf.enp2s0.addr_gen_mode = 0
net.ipv6.conf.enp2s0.autoconf = 0
net.ipv6.conf.enp2s0.dad_transmits = 1
net.ipv6.conf.enp2s0.disable_ipv6 = 0
net.ipv6.conf.enp2s0.disable_policy = 0
net.ipv6.conf.enp2s0.drop_unicast_in_l2_multicast = 0
net.ipv6.conf.enp2s0.drop_unsolicited_na = 0
net.ipv6.conf.enp2s0.enhanced_dad = 1
net.ipv6.conf.enp2s0.force_mld_version = 0
net.ipv6.conf.enp2s0.force_tllao = 0
net.ipv6.conf.enp2s0.forwarding = 1
net.ipv6.conf.enp2s0.hop_limit = 64
net.ipv6.conf.enp2s0.ignore_routes_with_linkdown = 0
net.ipv6.conf.enp2s0.keep_addr_on_down = 0
net.ipv6.conf.enp2s0.max_addresses = 16
net.ipv6.conf.enp2s0.max_desync_factor = 600
net.ipv6.conf.enp2s0.mc_forwarding = 0
net.ipv6.conf.enp2s0.mldv1_unsolicited_report_interval = 10000
net.ipv6.conf.enp2s0.mldv2_unsolicited_report_interval = 1000
net.ipv6.conf.enp2s0.mtu = 1500
net.ipv6.conf.enp2s0.ndisc_notify = 0
net.ipv6.conf.enp2s0.ndisc_tclass = 0
net.ipv6.conf.enp2s0.proxy_ndp = 0
net.ipv6.conf.enp2s0.regen_max_retry = 3
net.ipv6.conf.enp2s0.router_probe_interval = 60
net.ipv6.conf.enp2s0.router_solicitation_delay = 1
net.ipv6.conf.enp2s0.router_solicitation_interval = 4
net.ipv6.conf.enp2s0.router_solicitation_max_interval = 3600
net.ipv6.conf.enp2s0.router_solicitations = -1
net.ipv6.conf.enp2s0.seg6_enabled = 0
net.ipv6.conf.enp2s0.seg6_require_hmac = 0
sysctl: reading key "net.ipv6.conf.lo.stable_secret"
net.ipv6.conf.enp2s0.suppress_frag_ndisc = 1
net.ipv6.conf.enp2s0.temp_prefered_lft = 86400
net.ipv6.conf.enp2s0.temp_valid_lft = 604800
net.ipv6.conf.enp2s0.use_oif_addrs_only = 0
net.ipv6.conf.enp2s0.use_tempaddr = 0
net.ipv6.conf.lo.accept_dad = -1
net.ipv6.conf.lo.accept_ra = 1
net.ipv6.conf.lo.accept_ra_defrtr = 1
net.ipv6.conf.lo.accept_ra_from_local = 0
net.ipv6.conf.lo.accept_ra_min_hop_limit = 1
net.ipv6.conf.lo.accept_ra_mtu = 1
net.ipv6.conf.lo.accept_ra_pinfo = 1
net.ipv6.conf.lo.accept_ra_rt_info_max_plen = 0
net.ipv6.conf.lo.accept_ra_rt_info_min_plen = 0
net.ipv6.conf.lo.accept_ra_rtr_pref = 1
net.ipv6.conf.lo.accept_redirects = 1
net.ipv6.conf.lo.accept_source_route = 0
net.ipv6.conf.lo.addr_gen_mode = 0
net.ipv6.conf.lo.autoconf = 1
net.ipv6.conf.lo.dad_transmits = 1
net.ipv6.conf.lo.disable_ipv6 = 0
net.ipv6.conf.lo.disable_policy = 0
net.ipv6.conf.lo.drop_unicast_in_l2_multicast = 0
net.ipv6.conf.lo.drop_unsolicited_na = 0
net.ipv6.conf.lo.enhanced_dad = 1
net.ipv6.conf.lo.force_mld_version = 0
net.ipv6.conf.lo.force_tllao = 0
net.ipv6.conf.lo.forwarding = 1
net.ipv6.conf.lo.hop_limit = 64
net.ipv6.conf.lo.ignore_routes_with_linkdown = 0
net.ipv6.conf.lo.keep_addr_on_down = 0
net.ipv6.conf.lo.max_addresses = 16
net.ipv6.conf.lo.max_desync_factor = 600
net.ipv6.conf.lo.mc_forwarding = 0
net.ipv6.conf.lo.mldv1_unsolicited_report_interval = 10000
net.ipv6.conf.lo.mldv2_unsolicited_report_interval = 1000
net.ipv6.conf.lo.mtu = 65536
net.ipv6.conf.lo.ndisc_notify = 0
net.ipv6.conf.lo.ndisc_tclass = 0
net.ipv6.conf.lo.proxy_ndp = 0
net.ipv6.conf.lo.regen_max_retry = 3
net.ipv6.conf.lo.router_probe_interval = 60
net.ipv6.conf.lo.router_solicitation_delay = 1
net.ipv6.conf.lo.router_solicitation_interval = 4
net.ipv6.conf.lo.router_solicitation_max_interval = 3600
net.ipv6.conf.lo.router_solicitations = -1
net.ipv6.conf.lo.seg6_enabled = 0
net.ipv6.conf.lo.seg6_require_hmac = 0
sysctl: reading key "net.ipv6.conf.tap100i0.stable_secret"
net.ipv6.conf.lo.suppress_frag_ndisc = 1
net.ipv6.conf.lo.temp_prefered_lft = 86400
net.ipv6.conf.lo.temp_valid_lft = 604800
net.ipv6.conf.lo.use_oif_addrs_only = 0
net.ipv6.conf.lo.use_tempaddr = -1
net.ipv6.conf.tap100i0.accept_dad = 0
net.ipv6.conf.tap100i0.accept_ra = 0
net.ipv6.conf.tap100i0.accept_ra_defrtr = 0
net.ipv6.conf.tap100i0.accept_ra_from_local = 0
net.ipv6.conf.tap100i0.accept_ra_min_hop_limit = 1
net.ipv6.conf.tap100i0.accept_ra_mtu = 1
net.ipv6.conf.tap100i0.accept_ra_pinfo = 0
net.ipv6.conf.tap100i0.accept_ra_rt_info_max_plen = 0
net.ipv6.conf.tap100i0.accept_ra_rt_info_min_plen = 0
net.ipv6.conf.tap100i0.accept_ra_rtr_pref = 0
net.ipv6.conf.tap100i0.accept_redirects = 0
net.ipv6.conf.tap100i0.accept_source_route = 0
net.ipv6.conf.tap100i0.addr_gen_mode = 0
net.ipv6.conf.tap100i0.autoconf = 0
net.ipv6.conf.tap100i0.dad_transmits = 1
net.ipv6.conf.tap100i0.disable_ipv6 = 1
net.ipv6.conf.tap100i0.disable_policy = 0
net.ipv6.conf.tap100i0.drop_unicast_in_l2_multicast = 0
net.ipv6.conf.tap100i0.drop_unsolicited_na = 0
net.ipv6.conf.tap100i0.enhanced_dad = 1
net.ipv6.conf.tap100i0.force_mld_version = 0
net.ipv6.conf.tap100i0.force_tllao = 0
net.ipv6.conf.tap100i0.forwarding = 1
net.ipv6.conf.tap100i0.hop_limit = 64
net.ipv6.conf.tap100i0.ignore_routes_with_linkdown = 0
net.ipv6.conf.tap100i0.keep_addr_on_down = 0
net.ipv6.conf.tap100i0.max_addresses = 16
net.ipv6.conf.tap100i0.max_desync_factor = 600
net.ipv6.conf.tap100i0.mc_forwarding = 0
net.ipv6.conf.tap100i0.mldv1_unsolicited_report_interval = 10000
net.ipv6.conf.tap100i0.mldv2_unsolicited_report_interval = 1000
net.ipv6.conf.tap100i0.mtu = 1500
net.ipv6.conf.tap100i0.ndisc_notify = 0
net.ipv6.conf.tap100i0.ndisc_tclass = 0
net.ipv6.conf.tap100i0.proxy_ndp = 0
net.ipv6.conf.tap100i0.regen_max_retry = 3
net.ipv6.conf.tap100i0.router_probe_interval = 60
net.ipv6.conf.tap100i0.router_solicitation_delay = 1
net.ipv6.conf.tap100i0.router_solicitation_interval = 4
net.ipv6.conf.tap100i0.router_solicitation_max_interval = 3600
net.ipv6.conf.tap100i0.router_solicitations = -1
net.ipv6.conf.tap100i0.seg6_enabled = 0
net.ipv6.conf.tap100i0.seg6_require_hmac = 0
sysctl: reading key "net.ipv6.conf.vmbr0.stable_secret"
net.ipv6.conf.tap100i0.suppress_frag_ndisc = 1
net.ipv6.conf.tap100i0.temp_prefered_lft = 86400
net.ipv6.conf.tap100i0.temp_valid_lft = 604800
net.ipv6.conf.tap100i0.use_oif_addrs_only = 0
net.ipv6.conf.tap100i0.use_tempaddr = 0
net.ipv6.conf.vmbr0.accept_dad = 0
net.ipv6.conf.vmbr0.accept_ra = 0
net.ipv6.conf.vmbr0.accept_ra_defrtr = 0
net.ipv6.conf.vmbr0.accept_ra_from_local = 0
net.ipv6.conf.vmbr0.accept_ra_min_hop_limit = 1
net.ipv6.conf.vmbr0.accept_ra_mtu = 1
net.ipv6.conf.vmbr0.accept_ra_pinfo = 0
net.ipv6.conf.vmbr0.accept_ra_rt_info_max_plen = 0
net.ipv6.conf.vmbr0.accept_ra_rt_info_min_plen = 0
net.ipv6.conf.vmbr0.accept_ra_rtr_pref = 0
net.ipv6.conf.vmbr0.accept_redirects = 0
net.ipv6.conf.vmbr0.accept_source_route = 0
net.ipv6.conf.vmbr0.addr_gen_mode = 0
net.ipv6.conf.vmbr0.autoconf = 0
net.ipv6.conf.vmbr0.dad_transmits = 1
net.ipv6.conf.vmbr0.disable_ipv6 = 0
net.ipv6.conf.vmbr0.disable_policy = 0
net.ipv6.conf.vmbr0.drop_unicast_in_l2_multicast = 0
net.ipv6.conf.vmbr0.drop_unsolicited_na = 0
net.ipv6.conf.vmbr0.enhanced_dad = 1
net.ipv6.conf.vmbr0.force_mld_version = 0
net.ipv6.conf.vmbr0.force_tllao = 0
net.ipv6.conf.vmbr0.forwarding = 1
net.ipv6.conf.vmbr0.hop_limit = 64
net.ipv6.conf.vmbr0.ignore_routes_with_linkdown = 0
net.ipv6.conf.vmbr0.keep_addr_on_down = 0
net.ipv6.conf.vmbr0.max_addresses = 16
net.ipv6.conf.vmbr0.max_desync_factor = 600
net.ipv6.conf.vmbr0.mc_forwarding = 0
net.ipv6.conf.vmbr0.mldv1_unsolicited_report_interval = 10000
net.ipv6.conf.vmbr0.mldv2_unsolicited_report_interval = 1000
net.ipv6.conf.vmbr0.mtu = 1500
net.ipv6.conf.vmbr0.ndisc_notify = 0
net.ipv6.conf.vmbr0.ndisc_tclass = 0
net.ipv6.conf.vmbr0.proxy_ndp = 0
net.ipv6.conf.vmbr0.regen_max_retry = 3
net.ipv6.conf.vmbr0.router_probe_interval = 60
net.ipv6.conf.vmbr0.router_solicitation_delay = 1
net.ipv6.conf.vmbr0.router_solicitation_interval = 4
net.ipv6.conf.vmbr0.router_solicitation_max_interval = 3600
net.ipv6.conf.vmbr0.router_solicitations = -1
net.ipv6.conf.vmbr0.seg6_enabled = 0
net.ipv6.conf.vmbr0.seg6_require_hmac = 0
net.ipv6.conf.vmbr0.suppress_frag_ndisc = 1
net.ipv6.conf.vmbr0.temp_prefered_lft = 86400
net.ipv6.conf.vmbr0.temp_valid_lft = 604800
net.ipv6.conf.vmbr0.use_oif_addrs_only = 0
net.ipv6.conf.vmbr0.use_tempaddr = 0
net.ipv6.flowlabel_consistency = 1
net.ipv6.flowlabel_reflect = 0
net.ipv6.flowlabel_state_ranges = 0
net.ipv6.fwmark_reflect = 0
net.ipv6.icmp.ratelimit = 1000
net.ipv6.idgen_delay = 1
net.ipv6.idgen_retries = 3
net.ipv6.ip6frag_high_thresh = 4194304
net.ipv6.ip6frag_low_thresh = 3145728
net.ipv6.ip6frag_secret_interval = 0
net.ipv6.ip6frag_time = 60
net.ipv6.ip_nonlocal_bind = 0
net.ipv6.max_dst_opts_length = 2147483647
net.ipv6.max_dst_opts_number = 8
net.ipv6.max_hbh_length = 2147483647
net.ipv6.max_hbh_opts_number = 8
net.ipv6.mld_max_msf = 64
net.ipv6.mld_qrv = 2
net.ipv6.neigh.default.anycast_delay = 100
net.ipv6.neigh.default.app_solicit = 0
net.ipv6.neigh.default.base_reachable_time_ms = 30000
net.ipv6.neigh.default.delay_first_probe_time = 5
net.ipv6.neigh.default.gc_interval = 30
net.ipv6.neigh.default.gc_stale_time = 60
net.ipv6.neigh.default.gc_thresh1 = 128
net.ipv6.neigh.default.gc_thresh2 = 512
net.ipv6.neigh.default.gc_thresh3 = 1024
net.ipv6.neigh.default.locktime = 0
net.ipv6.neigh.default.mcast_resolicit = 0
net.ipv6.neigh.default.mcast_solicit = 3
net.ipv6.neigh.default.proxy_delay = 80
net.ipv6.neigh.default.proxy_qlen = 64
net.ipv6.neigh.default.retrans_time_ms = 1000
net.ipv6.neigh.default.ucast_solicit = 3
net.ipv6.neigh.default.unres_qlen = 101
net.ipv6.neigh.default.unres_qlen_bytes = 212992
net.ipv6.neigh.enp2s0.anycast_delay = 100
net.ipv6.neigh.enp2s0.app_solicit = 0
net.ipv6.neigh.enp2s0.base_reachable_time_ms = 30000
net.ipv6.neigh.enp2s0.delay_first_probe_time = 5
net.ipv6.neigh.enp2s0.gc_stale_time = 60
net.ipv6.neigh.enp2s0.locktime = 0
net.ipv6.neigh.enp2s0.mcast_resolicit = 0
net.ipv6.neigh.enp2s0.mcast_solicit = 3
net.ipv6.neigh.enp2s0.proxy_delay = 80
net.ipv6.neigh.enp2s0.proxy_qlen = 64
net.ipv6.neigh.enp2s0.retrans_time_ms = 1000
net.ipv6.neigh.enp2s0.ucast_solicit = 3
net.ipv6.neigh.enp2s0.unres_qlen = 101
net.ipv6.neigh.enp2s0.unres_qlen_bytes = 212992
net.ipv6.neigh.lo.anycast_delay = 100
net.ipv6.neigh.lo.app_solicit = 0
net.ipv6.neigh.lo.base_reachable_time_ms = 30000
net.ipv6.neigh.lo.delay_first_probe_time = 5
net.ipv6.neigh.lo.gc_stale_time = 60
net.ipv6.neigh.lo.locktime = 0
net.ipv6.neigh.lo.mcast_resolicit = 0
net.ipv6.neigh.lo.mcast_solicit = 3
net.ipv6.neigh.lo.proxy_delay = 80
net.ipv6.neigh.lo.proxy_qlen = 64
net.ipv6.neigh.lo.retrans_time_ms = 1000
net.ipv6.neigh.lo.ucast_solicit = 3
net.ipv6.neigh.lo.unres_qlen = 101
net.ipv6.neigh.lo.unres_qlen_bytes = 212992
net.ipv6.neigh.tap100i0.anycast_delay = 100
net.ipv6.neigh.tap100i0.app_solicit = 0
net.ipv6.neigh.tap100i0.base_reachable_time_ms = 30000
net.ipv6.neigh.tap100i0.delay_first_probe_time = 5
net.ipv6.neigh.tap100i0.gc_stale_time = 60
net.ipv6.neigh.tap100i0.locktime = 0
net.ipv6.neigh.tap100i0.mcast_resolicit = 0
net.ipv6.neigh.tap100i0.mcast_solicit = 3
net.ipv6.neigh.tap100i0.proxy_delay = 80
net.ipv6.neigh.tap100i0.proxy_qlen = 64
net.ipv6.neigh.tap100i0.retrans_time_ms = 1000
net.ipv6.neigh.tap100i0.ucast_solicit = 3
net.ipv6.neigh.tap100i0.unres_qlen = 101
net.ipv6.neigh.tap100i0.unres_qlen_bytes = 212992
net.ipv6.neigh.vmbr0.anycast_delay = 100
net.ipv6.neigh.vmbr0.app_solicit = 0
net.ipv6.neigh.vmbr0.base_reachable_time_ms = 30000
net.ipv6.neigh.vmbr0.delay_first_probe_time = 5
net.ipv6.neigh.vmbr0.gc_stale_time = 60
net.ipv6.neigh.vmbr0.locktime = 0
net.ipv6.neigh.vmbr0.mcast_resolicit = 0
net.ipv6.neigh.vmbr0.mcast_solicit = 3
net.ipv6.neigh.vmbr0.proxy_delay = 80
net.ipv6.neigh.vmbr0.proxy_qlen = 64
net.ipv6.neigh.vmbr0.retrans_time_ms = 1000
net.ipv6.neigh.vmbr0.ucast_solicit = 3
net.ipv6.neigh.vmbr0.unres_qlen = 101
net.ipv6.neigh.vmbr0.unres_qlen_bytes = 212992
net.ipv6.route.gc_elasticity = 9
net.ipv6.route.gc_interval = 30
net.ipv6.route.gc_min_interval = 0
net.ipv6.route.gc_min_interval_ms = 500
net.ipv6.route.gc_thresh = 1024
net.ipv6.route.gc_timeout = 60
net.ipv6.route.max_size = 4096
net.ipv6.route.min_adv_mss = 1220
net.ipv6.route.mtu_expires = 600
net.ipv6.xfrm6_gc_thresh = 32768

• tcpdump ist ein tool zum mitschneiden von netzwerkverbindungen - es kann dazu verwendet werden um zu sehen ob traffic z.b. vom gast am host ankommt (siehe z.b. http://mirrors.deepspace6.net/Linux+IPv6-HOWTO/x805.html) - ich lasse das immer in einer virtuellen console laufen und lasse nebenbei einen ping (oder curl oder aehnliches) laufen

Aha nun habe ich eine Ausgabe.
Wenn ich das Programm auf dem Host laufen lasse und vom VirtuellenPc einen Ping auf den Host ausführe erhalte ich diese ausgabe:

root@pve2 ~ # tcpdump -envi vmbr0 ip6
tcpdump: listening on vmbr0, link-type EN10MB (Ethernet), capture size 262144 bytes
18:16:53.732915 66:61:a6:8e:3e:89 > 33:33:ff:00:00:02, ethertype IPv6 (0x86dd), length 86: (hlim 255, next-header ICMPv6 (58) payload length: 32) affe:affe:affe:affe::10 > ff02::1:ff00:2: [icmp6 sum ok] ICMP6, neighbor solicitation, length 32, who has affe:affe:affe:affe::2
          source link-address option (1), length 8 (1): 66:61:a6:8e:3e:89
18:16:54.769767 66:61:a6:8e:3e:89 > 33:33:ff:00:00:02, ethertype IPv6 (0x86dd), length 86: (hlim 255, next-header ICMPv6 (58) payload length: 32) affe:affe:affe:affe::10 > ff02::1:ff00:2: [icmp6 sum ok] ICMP6, neighbor solicitation, length 32, who has affe:affe:affe:affe::2
          source link-address option (1), length 8 (1): 66:61:a6:8e:3e:89
18:16:55.793747 66:61:a6:8e:3e:89 > 33:33:ff:00:00:02, ethertype IPv6 (0x86dd), length 86: (hlim 255, next-header ICMPv6 (58) payload length: 32) affe:affe:affe:affe::10 > ff02::1:ff00:2: [icmp6 sum ok] ICMP6, neighbor solicitation, length 32, who has affe:affe:affe:affe::2
          source link-address option (1), length 8 (1): 66:61:a6:8e:3e:89
18:16:56.817839 66:61:a6:8e:3e:89 > 33:33:ff:00:00:02, ethertype IPv6 (0x86dd), length 86: (hlim 255, next-header ICMPv6 (58) payload length: 32) affe:affe:affe:affe::10 > ff02::1:ff00:2: [icmp6 sum ok] ICMP6, neighbor solicitation, length 32, who has affe:affe:affe:affe::2
          source link-address option (1), length 8 (1): 66:61:a6:8e:3e:89
18:16:57.841767 66:61:a6:8e:3e:89 > 33:33:ff:00:00:02, ethertype IPv6 (0x86dd), length 86: (hlim 255, next-header ICMPv6 (58) payload length: 32) affe:affe:affe:affe::10 > ff02::1:ff00:2: [icmp6 sum ok] ICMP6, neighbor solicitation, length 32, who has affe:affe:affe:affe::2
          source link-address option (1), length 8 (1): 66:61:a6:8e:3e:89
18:16:58.865705 66:61:a6:8e:3e:89 > 33:33:ff:00:00:02, ethertype IPv6 (0x86dd), length 86: (hlim 255, next-header ICMPv6 (58) payload length: 32) affe:affe:affe:affe::10 > ff02::1:ff00:2: [icmp6 sum ok] ICMP6, neighbor solicitation, length 32, who has affe:affe:affe:affe::2
          source link-address option (1), length 8 (1): 66:61:a6:8e:3e:89
18:17:11.111300 66:61:a6:8e:3e:89 > 33:33:ff:00:00:02, ethertype IPv6 (0x86dd), length 86: (hlim 255, next-header ICMPv6 (58) payload length: 32) affe:affe:affe:affe::10 > ff02::1:ff00:2: [icmp6 sum ok] ICMP6, neighbor solicitation, length 32, who has affe:affe:affe:affe::2
          source link-address option (1), length 8 (1): 66:61:a6:8e:3e:89
18:17:12.113676 66:61:a6:8e:3e:89 > 33:33:ff:00:00:02, ethertype IPv6 (0x86dd), length 86: (hlim 255, next-header ICMPv6 (58) payload length: 32) affe:affe:affe:affe::10 > ff02::1:ff00:2: [icmp6 sum ok] ICMP6, neighbor solicitation, length 32, who has affe:affe:affe:affe::2
          source link-address option (1), length 8 (1): 66:61:a6:8e:3e:89
18:17:13.137649 66:61:a6:8e:3e:89 > 33:33:ff:00:00:02, ethertype IPv6 (0x86dd), length 86: (hlim 255, next-header ICMPv6 (58) payload length: 32) affe:affe:affe:affe::10 > ff02::1:ff00:2: [icmp6 sum ok] ICMP6, neighbor solicitation, length 32, who has affe:affe:affe:affe::2
          source link-address option (1), length 8 (1): 66:61:a6:8e:3e:89
18:24:14.768148 66:61:a6:8e:3e:89 > 33:33:ff:00:00:01, ethertype IPv6 (0x86dd), length 86: (hlim 255, next-header ICMPv6 (58) payload length: 32) affe:affe:affe:affe::10 > ff02::1:ff00:1: [icmp6 sum ok] ICMP6, neighbor solicitation, length 32, who has fe80::1
          source link-address option (1), length 8 (1): 66:61:a6:8e:3e:89
18:24:15.792129 66:61:a6:8e:3e:89 > 33:33:ff:00:00:01, ethertype IPv6 (0x86dd), length 86: (hlim 255, next-header ICMPv6 (58) payload length: 32) affe:affe:affe:affe::10 > ff02::1:ff00:1: [icmp6 sum ok] ICMP6, neighbor solicitation, length 32, who has fe80::1
          source link-address option (1), length 8 (1): 66:61:a6:8e:3e:89
18:24:16.816141 66:61:a6:8e:3e:89 > 33:33:ff:00:00:01, ethertype IPv6 (0x86dd), length 86: (hlim 255, next-header ICMPv6 (58) payload length: 32) affe:affe:affe:affe::10 > ff02::1:ff00:1: [icmp6 sum ok] ICMP6, neighbor solicitation, length 32, who has fe80::1
          source link-address option (1), length 8 (1): 66:61:a6:8e:3e:89
18:24:17.840119 66:61:a6:8e:3e:89 > 33:33:ff:00:00:01, ethertype IPv6 (0x86dd), length 86: (hlim 255, next-header ICMPv6 (58) payload length: 32) affe:affe:affe:affe::10 > ff02::1:ff00:1: [icmp6 sum ok] ICMP6, neighbor solicitation, length 32, who has fe80::1
          source link-address option (1), length 8 (1): 66:61:a6:8e:3e:89
18:24:18.864095 66:61:a6:8e:3e:89 > 33:33:ff:00:00:01, ethertype IPv6 (0x86dd), length 86: (hlim 255, next-header ICMPv6 (58) payload length: 32) affe:affe:affe:affe::10 > ff02::1:ff00:1: [icmp6 sum ok] ICMP6, neighbor solicitation, length 32, who has fe80::1
          source link-address option (1), length 8 (1): 66:61:a6:8e:3e:89
18:25:09.119149 66:61:a6:8e:3e:89 > 33:33:00:00:00:fb, ethertype IPv6 (0x86dd), length 107: (flowlabel 0x9f3c9, hlim 255, next-header UDP (17) payload length: 53) affe:affe:affe:affe::10.5353 > ff02::fb.5353: [bad udp cksum 0xb55b -> 0x1f22!] 0 [2q] PTR (QM)? _ipps._tcp.local. PTR (QM)? _ipp._tcp.local. (45)

 

[Stoiko Ivanov]

• ipv6-forwarding muss nur am host nicht am virtuellen guest aktiv sein
• versuch mal der vmbr0 die ip affe:affe:affe:affe::8/64 (netmask von /64 beachten) zu geben (die config von enp2s0 so lassen wie sie ist)
• vom virtuellen guest aus affe:affe:affe:affe::8 zu pingen
• vom host aus affe:affe:affe:affe::10 zu pingen
• wenn dass funktioniert affe:affe:affe:affe::2 auch vom virtuellen guest aus pingen
• output von ip neigh (arp/ndp eintraege zu den interfaces) kann beim debuggen helfen
• output von ip route get affe:affe:affe:affe::2 (oder jede andere ip/ipv6 addresse) zeigt dir wie der kernel das packet schicken wuerde (und ueber welches interface
• tcpdump kannst du auf vmbr0 versuchen oder auch auf dem tap der vm (z.b. tap$VMIDi0)

HTH