This is an old revision of the document!
IPv6 Setup Notes
Commands
sudo vim /etc/netplan/network.yaml
netplan generate (to test)
netplan apply
https://www.tomicki.net/ipv6.router.php https://netplan.io/examples https://www.e2enetworks.com/help/knowledge-base/how-to-assign-ipv6-on-ubuntu-server/ https://subatomicsolutions.org/8-freebsd/17-isc-dhcp-ipv4-ipv6-server-on-a-dual-stack-network https://blog.marquis.co/configuring-a-dual-stacked-dhcp-server/ http://sophiedogg.com/radvd-and-dhcpd6-server-configuration-for-dynamic-dns/
modprobe ipv6
ip tunnel add he-ipv6 mode sit remote 216.218.142.50 local 112.213.222.19 ttl 255
ip link set he-ipv6 up
ip addr add 2001:470:1f2c:20c::2/64 dev he-ipv6
ip route add ::/0 dev he-ipv6
ip -f inet6 addr
NFTables Rules to consider for IPv6
https://wiki.nftables.org/wiki-nftables/index.php/Quick_reference-nftables_in_10_minutes
sudo nft add rule inet firewall forward iifname “he-ipv6” counter jump base_checks
sudo nft add rule inet firewall forward iifname “br0” oifname “he-ipv6” counter accept
- IPv4 list network neighbors:
arp -a
- IPv6 list network neighbors:
ip -6 neigh show
- MS Windows list IPv6 neighbors:
netsh int ipv6 show neigh
- Standard systemd nftables configuration file location:
sudo vim /etc/nftables.conf
- List all defined nftables tables:
sudo nft list tables
- List a specific nftables table definition:
sudo nft list table inet firewall -a -n -nn
- List a specific nftables table definiton:
sudo nft list table ip nat -a
-a
is list handles-n
is ?-nn
is ?
- Delete a specific rull by handle:
sudo nft delete rule ip nat postrouting handle 12
- Delete a specific rull by handle:
sudo nft delete rule inet firewall forward handle 32
- Add a speecific rull after a handle:
sudo nft add rule inet firewall input position 39 tcp dport domain counter