Using the WIDE DHCPv6 Client on Online.net dedicated servers

Вы находитесь здесь: version6.ru » Welcome! » Using the WIDE DHCPv6 Client on Online.net dedicated servers

Эта страница — только для чтения. Вы можете посмотреть исходный текст, но не можете его изменить. Сообщите администратору, если считаете, что это неправильно.

====== Using the WIDE DHCPv6 Client on Online.net dedicated servers ======
//Initially published on 2014-08-29//

...and switching to it from Dibbler. Debian-only.

===== Pre-requisites =====
Check the file ''/etc/modprobe.d/local.conf'', it may contain a line like this one:
<code>options ipv6 disable=1</code>
Remove it or comment it out, then execute:
<code>rmmod ipv6 && modprobe ipv6</code>
...or reboot.

===== Installing WIDE DHCPv6 =====
<file shell setup-dhcpv6.sh>
#!/bin/bash

DUID=$1

skill -9 dibbler-client
dpkg -P dibbler-client
rm -rvf /etc/dibbler /var/log/dibbler /var/lib/dibbler

apt-get install -y wide-dhcpv6-client vim-common

/etc/init.d/wide-dhcpv6-client stop

echo 'profile default { script "/etc/wide-dhcpv6/dhcp6c-script"; };' > /etc/wide-dhcpv6/dhcp6c.conf
echo 'id-assoc pd { prefix-interface eth0 { }; };' >> /etc/wide-dhcpv6/dhcp6c.conf
echo 'id-assoc na { };' >> /etc/wide-dhcpv6/dhcp6c.conf
echo 'interface eth0 { send ia-na 0; send ia-pd 0; };' >> /etc/wide-dhcpv6/dhcp6c.conf
echo $DUID | awk '{ gsub(":"," "); printf "0: 0a 00 %s\n", $0 }' | xxd -r > /var/lib/dhcpv6/dhcp6c_duid

/etc/init.d/wide-dhcpv6-client start</file>

Download and run this with your online.net DUID specified, for example:
<code>
wget -O setup-dhcpv6.sh https://version6.ru/_export/code/en/online.net-wide-dhcpv6?codeblock=0
chmod +x setup-dhcpv6.sh

./setup-dhcpv6.sh 00:03:00:01:23:45:67:89:ab:cd</code>
When the WIDE setup screen appears and asks on which interfaces to listen for DHCPv6, leave that as "eth0" (the default value), i.e. just press Enter.

===== Prevent outgoing request flood =====
Very rarely (happened just once yet, in months), WIDE can fail in a mysterious way and start [[https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=765453|sending SOLICIT requests continuously]], without any back-off time in between. This can be detected by upstream as malicious flood and make them unhappy.

To prevent this issue, add the following into your ip6tables configuration:
<code>ip6tables -A OUTPUT -p udp --dport 547 -m limit --limit 10/min  --limit-burst 5 -j ACCEPT
ip6tables -A OUTPUT -p udp --dport 547 -j DROP
</code>
...or just add this into ''/etc/rc.local'' if you don't use any other ip6tables rules.

===== Other HOWTOs =====
  * [[http://barfooze.de/stuff/online_ipv6.txt|Online.net IPv6 prefix discovery using KAME-dhcp6c on FreeBSD]] (thanks for the awk+xxd line)

en/online.net-wide-dhcpv6.1417592603.txt.gz · Последние изменения: 2014-12-03 07:43 UTC От rm

	Новости
	Сообщество
	Twitter
	IRC

Views

Навигация

Personal Tools

Поиск

Инструменты

Ссылки