I've decided on the options disabled, managed, unmanaged, combined. Fix forthcoming later.

@iFloris:

There is a script on the he.net website to change your ip. By installing cron and calling the script every 24 (or so) hours, you can sort of automatically update your endpoint.

That sounds like something that would make a good candidate for a dyndns update type.

@databeestje:

Outside of the snapshots I don't have these binaries

Download a snapshot, extract the racoon, setkey and racoonctl binaries from /usr/local/sbin and upload those to your install

thanks for the quick reply… As I was driving into work after posting this, I thought of trying that in-case there is not binaries to download.

2.0-RC1-IPv6 (i386)
built on Tue Mar 15 13:14:13 EDT 2011

Not entirely sure if this is an IPv6 thing or just an RC2 thing… searched a bit but didnt find anything on it over in that forum.

Since last Thursday, i'm not sowing any wan-out data (IPv6 or 4) in my rrd traffic or packets graphs. Nothing sticking out at me in the logs either. Anyone else seeing this?

Create a 1.2.3 vm, create 2 routes to a lan IP. Upgrade that and it should trigger it

ofcourse linksys and dd-wrt are not really comparable.

I've just setup a other customer from the bounty forum with a working IPv6 setup. With a gif tunnel or static addressing on the wan it does work with v6. With recent fixes I've made it should be safe to run either v4 or v6 on the same interface. I fixed the issue that made it drop it's v4 default route.

If you do not mind giving me remote access to that install to develop working ipv6 support then I'd love to get that working. It is probably the most significant building block for IPv6 deployment on cable internet networks.

And there are a lot of those.

If you have questions, feel free to climb into the email to seth.mos@dds.nl and we'll see what we can arrange.
I've just made some fixes to filter.inc for dhcpd, the webui listen port on the v6 address and a DNS rebinding attack fix.

I've also added v6 network support for the ipsec phase2 page. Maybe I can fix the phase1 too.

Well, it's not uncommon for rules to reload if it has something like hostnames and other factors.

I think what's biting here is that firewall rules for proper multi-wan support are missing. When that falls through the reply-to is skipped and the default route is relied on.

I'll have a quick look if I can make the filter process intelligent enough to find out the proper v6 wan gateway.

It appears there is no support in DHCP v6 for static IP address assignments based on "raw" MAC address but assignments can be based on various forms of UIDs, some of which can be derived from a MAC address.

I installed net/dhcp6 now and playing with it.
IPv6 is new for me.

Same as before, don't toggle port forward.

Add a firewall rule on the IPv6 WAN interface that allows traffic from Any to IPv6 address of the client behind it with the port you want to give them access to.

No interest at this point, directing resources elsewhere.

You can, I just use the last octet, which is already good for 65k hosts or so.

I like the addresses simplere over autoconfig

From what I heard, the Native dual stack is only being enabled in Colorado for now. it will be a while before rest of us see it.

Databeestje, I do have a question if your code handles a 6RD configuration as comcast is supposedly set up to handle that across their entire network already. if not, I dont think its worth it as Comcast is dropping it after June 30, 2011 anyway in favor of dual stack.

Thanks for the response.  I changed my configs to use dhcpdv6.  This could have been the reason why it kept dying on me.

Thank you very much, Databeestje; that did the trick. I have a Verizon FiOS connection that terminates by PPPoE with an MTU less than 1500, so that was definitely my problem. I am now happily exploring and learning about the IPv6 realm.

Thanks again,
Rain

Thanks all for the help.

Just a status update.  I've been working with my ISP, who's never really done this before for anybody yet.  They've made a number of changes and assigned me two /64 blocks.

After I assigned the 64 addresses to the two interfaces, added the default route, and configured rtadvd, everything worked fine.  I'm now able to ipv6.

Thanks again for the help.  I think the problem was part with me and part with my ISP.

That's not the case for me. Check the attachments showing version number, the unticked boxes and the IPv6 packets in the logs. This happens on both my work setup and my home setup.


@Cino:

@wallabybob:

Why not allocate more addresses to your subnets? There are over 65000 address in 192,168.0.0/16 and over 16 million in 10.0.0.0/8.

Why not (for example) use 192.168.0.0/18, 192.168.64.0/18, 192.168.128.0/18 (over 16,000 addresses each) 192.168.192.0/18 for further subdivision and future expansion (e.g 192.168.192.0/24 for servers, 192.168.193.0/24 for teachers's and admin PCs etc).

I can't speak for brcisna but most school network environments use Public IP Subnets instead of Private IP Subnets. So I'm thinking that is why they are running out of IPs.

The company I work for, we used to use Public IPs for our internal servers but over the last 3 years we have moved them to 10.x.x.x and re-use the public ip for any internet facing servers.. Then again Public IP space for my company isnt running low yet

Many higher ed institutions already have IPv6 allocations, it's simply a matter of architecting and deploying.  Generally most have been too apathetic about IPv6 and now everyone is behind and scrambling to figure it out and port their old tools to support it and begging for money to upgrade infrastructure to do IPv6.  It's really not that hard, especially for anyone that has done another protocol in addition to IPv4.  For a long time our IPv6 path wasn't the same as v4, nor does it need to be, as its a totally different protocol.   
Internet2 has a workshop that they put on (that I have been an instructor for in the past) that teaches v6 deployment / theory, etc. to networking folks.

This is interesting too. http://bgpmon.net/blog/?p=340

thank you very much :)

The link local addressing (fe80::) will have something to do with that, so that won't work.

I'll add bridging to the Todo