On Tue, 30 Jul 2013 16:27:45 +0200
Frank Lanitz <[email protected]> wrote:

> On Tue, 30 Jul 2013 07:45:30 +0200
> Frank Lanitz <[email protected]> wrote:
> 
> > On Mon, 29 Jul 2013 11:45:47 -0300
> > Luiz Angelo Daros de Luca <[email protected]> wrote:
> > 
> > > First disable the firewall and try again. Without firewall, you
> > > would, at least, be able to ping from the
> > > router.
> > 
> > Even with firewall I'm able. Disabling firewall is allowing me to
> > IPv6 also from LAN clients. 
> 
> the main issue seems to be that the ipv6 interface is not adding to
> zone. 
> 
> Jul 30 14:22:20 OpenWrt user.info firewall: adding lan (br-lan) to
> zone lan Jul 30 14:22:21 OpenWrt user.info firewall: adding wan
> (eth0.2) to zone wan
> 
> My corrosponding entry from /etc/config/firewall are 
> 
> config 'zone' 
>       option 'name' 'wan6' 
>       option 'network' 'ipv6wan' 
>       option 'family' 'ipv6' 
>       option 'input' 'REJECT' 
>       option 'output' 'ACCEPT' 
>       option 'forward' 'REJECT' 
>       option 'conntrack' '1'
> 
> config 'forwarding' 
>       option 'dest' 'wan6' 
>       option 'src' 'lan' 
>       option 'family' 'ipv6'
> 
> At this point I don't see any big differences from 
> https://forum.openwrt.org/viewtopic.php?id=33007
> 
> When I apply the rules with no error is reported from init-script:
> 
> root@OpenWrt:~# /etc/init.d/firewall start
> Loading defaults
> Loading synflood protection
> Adding custom chains
> Loading zones
> Loading forwardings
> Loading rules
> Loading redirects
> Loading includes
> Loading interfaces


Setting the interface proto to none seems to did the trick. After
playing around another time my interface entry show this: 

config 'interface' 'ipv6wan'
    option 'proto' 'none'
    option 'ifname' 'sixxs'
    option 'auto' '1'
    option 'ip6addr' '2001:6f8:900:1032::2/64'
    option 'ip6gw' '2001:6f8:900:1032::1/64'
    option 'send_rs' '0'

in combination with firewall

config 'zone' 
        option 'name' 'wan6' 
        option 'network' 'ipv6wan' 
        option 'family' 'ipv6' 
        option 'input' 'REJECT' 
        option 'output' 'ACCEPT' 
        option 'forward' 'REJECT' 
        option 'conntrack' '1'

config 'forwarding' 
        option 'dest' 'wan6' 
        option 'src' 'lan' 
        option 'family' 'ipv6'

is at least enabling IPv6 for lan too. Still some issues (e.g.
undefined interface on luci) and some packet loss on sixxs but next
steps ;) 

Cheers, 
Frank
-- 
Frank Lanitz <[email protected]>

Attachment: pgpssnnhstiOC.pgp
Description: PGP signature

_______________________________________________
openwrt-users mailing list
[email protected]
https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-users

Reply via email to