我知道如何做ipv4转发,并期望ipv6转发几乎相同的方式工作。 所以我configuration了一个VirtualBox主机,configuration了从我的ISPconfiguration的networking地址。 现在,这是我有的networking:
http://tmp.hjts.nl/vboxnetwork.png
我能够在Debian路由器上ping所有ipv6地址,但是我无法访问Debian必须将数据包(例如从Fedora客户端)转发到Debian上的eth0的地址。
Debian服务器被configuration为允许IPV6转发:
root@6server:~# sysctl -p net.ipv6.conf.all.forwarding = 1 net.ipv6.conf.all.accept_ra = 2 net.ipv6.conf.all.accept_redirects = 1 net.ipv6.conf.all.accept_source_route = 1
Iptables应该允许它。
root@6server:~# ip6tables -L Chain INPUT (policy ACCEPT) target prot opt source destination Chain FORWARD (policy ACCEPT) target prot opt source destination ACCEPT all anywhere anywhere state RELATED,ESTABLISHED ACCEPT all anywhere anywhere Chain OUTPUT (policy ACCEPT) target prot opt source destination
这里是我的地址和路线信息:
root@6server:~# ip -6 addr 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 inet6 ::1/128 scope host valid_lft forever preferred_lft forever 2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qlen 1000 inet6 2001:981:ec6a::aa:0/48 scope global valid_lft forever preferred_lft forever inet6 fe80::a00:27ff:fed6:b45c/64 scope link valid_lft forever preferred_lft forever 3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qlen 1000 inet6 2001:981:ec6a::ae:1/48 scope global valid_lft forever preferred_lft forever inet6 fe80::a00:27ff:fe77:f6e8/64 scope link valid_lft forever preferred_lft forever root@6server~# ip -6 route show 2001:981:ec6a::aa:0/112 dev eth0 metric 1024 2001:981:ec6a::ae:0/112 dev eth1 metric 1024 2001:981:ec6a::be:0/112 dev eth1 metric 1024 fe80::/64 dev eth1 proto kernel metric 256 fe80::/64 dev eth0 proto kernel metric 256 default via 2001:981:ec6a::2 dev eth0 metric 1024
在Fedora客户端上,这是networking路由:
[root@localhost henk]# ip -6 route show 2001:981:ec6a::/48 dev enp0s3 proto kernel metric 256 fe80::/64 dev enp0s3 proto kernel metric 256 default via 2001:981:ec6a::ae:1 dev enp0s3 metric 1024