I have a server in a datacenter with native IPv6 connectivity. (I have a /48 block at my disposal.)
I want to use this server as a ipv6 tunnel server over openvpn, but I can't get it to work completely.
My server: Linux, Centos 5.2 eth0 dual stacked ipv4/ipv6
ip addr list: eth0 inet aa.bb.cc.dd/24 (my global IP address) inet6 2001:aaaa:bbb::2/48 (2001:aaaa:bbb::1 is the default GW of my ISP) sit2 link/sit 10.8.0.1 peer 10.8.0.2 inet6 2001:aaaa:bbb:2::1/64 tun0 inet 10.8.0.1 peer 10.8.0.2/32
My client: Mac OS 10.6
tun0: 10.8.0.2 --> 10.8.0.1 gif0 2001:aaaa:bbb:2::2 --> 2001:aaaa:bbb:2::1 prefixlen 128
route to default gw 2001:aaaa:bbb:2::1 (the ip of my server on the sit interface)
I think the mac side is OK, as a traceroute6 to ipv6.google.com gives 2001:aaaa:bbb:2::1 as the next hop, but it stalls there. Pinging ipv6.google.com from the server works. Ip6tables is turned off, and I did echo "1" to /proc/sys/net/ipv6/conf/all/forwarding.
Output from ip6tables -L:
ip6tables -L Chain INPUT (policy ACCEPT) target prot opt source destination Chain FORWARD (policy ACCEPT) target prot opt source destination Chain OUTPUT (policy ACCEPT) target prot opt source destination
Output from sysctl -a |grep forward|grep ipv6:
net.ipv6.conf.sit2.forwarding = 1 net.ipv6.conf.eth1.forwarding = 1 net.ipv6.conf.eth0.forwarding = 1 net.ipv6.conf.default.forwarding = 1 net.ipv6.conf.all.forwarding = 1 net.ipv6.conf.lo.forwarding = 1
What's keeping my router from forwarding the packages between his two interfaces?