(usagi-users 03960) AW: How to enable IPv6 only on a particular interface
"HOFMANN, Dirk" <[email protected]> Thu, 4 Oct 2007 09:42:05 +0200
| Newsgroups | gmane.linux.ipv6.usagi.users |
|---|---|
| Message-ID | <5D292AE4F796DF4BB3BE43548D642D477EFC02@SLFSNX.rcs.alcatel-research.de> |
Hi Pramendra, that should be no problem: If you configure manually IPv6 addresses only on one interface and delete all IPv6 link-local addresses (beginning with fe80::) on the other interfaces, than only one interface is able to handle IPv6 packets. Furthermore, in /proc/sys/net/ipv6/conf you should only see one eth-interface! Best regards, Dirk -----Ursprüngliche Nachricht----- Von: pramendra singh [mailto:[email protected]] Gesendet: Donnerstag, 4. Oktober 2007 05:36 An: [email protected] Betreff: (usagi-users 03958) How to enable IPv6 only on a particular interface Hi Is it possible to enable IPv6 only on a particular interface on a machine(say that my machine has eth0, eth1 and eth2 interfaces and I want to enable IPv6 support only on eth0 intrface). did anyone came across/worked on this scenario. Any suggestions/ remarks/ thoughts /views will be extremely helpful. Thanks and Regards Pramendra Singh --- Noriaki TAKAMIYA <[email protected]> wrote: > Hi, > > >> Tue, 2 Oct 2007 21:30:11 +0200 > >> [Subject: (usagi-users 03956) Re: UMIP-0.4 MN > Tunnel Setup and Binding Update Failure] > >> Alex <[email protected]> wrote... > > > problem has been solved and MN can now send BU > successfully to HA. I got > > another question, is it true that MN and HA cannot > ping each other when the > > tunnel is established? In my testbed, MN and HA > are both reachable from > > other IPv6 nodes and can ping other IPv6 nodes. > But they cannot ping each > > other. > ¡Á > > > IPsecPolicy called "TunnelMh" needs to be > deprecated. We will remove > > > it from the next version. > > > > > > IPsecPolicySet { > > > HomeAgentAddress 2001:5c0:8ffe::2; > > > HomeAddress 2001:5c0:8ffe::5/64; > > > > > > IPsecPolicy Mh UseESP; > > > IPsecPolicy TunnelHomeTesting UseESP; > > > ^^^^^^^^^^^^^^^^^ > > > } > > Did you reflect Shinta-san's to your configuration? > > And Arnaud says, could you show your IPsec configuraiton? > > In my environment, ping6 between HA and MN is done each other. > > Regareds, > > The following is the example of my MN's configuration > > <part of mip6d.conf> > -------------------------------------------------- > IPsecPolicySet { > HomeAgentAddress <address of HA>; > HomeAddress <address of MN>/64; > > IPsecPolicy Mh UseESP 1 2; > IPsecPolicy ICMP UseESP 5 6; > IPsecPolicy TunnelHomeTesting UseESP 3 4; } > -------------------------------------------------- > > <IPsec configuration> > -------------------------------------------------- > # BU > add <address of MN> <address of HA> esp 0xaaaa2001 -m transport -u > 1 -E 3des-cbc "V6LC-000--12345678901234" -A > hmac-sha1 "V6LC-000--1234567890"; > # BA > add <address of HA> <address of MN> esp 0xaaaa2002 -m transport -u > 2 -E 3des-cbc "V6LC-000--12345678901234" -A > hmac-sha1 "V6LC-000--1234567890"; > # HoTI > add <address of MN> <address of HA> esp 0xaaaa2003 -m tunnel -u 3 -E > 3des-cbc "V6LC-000--12345678901234" -A hmac-sha1 > "V6LC-000--1234567890"; # HoT add <address of HA> <address of MN> esp > 0xaaaa2004 -m tunnel -u 4 -E 3des-cbc "V6LC-000--12345678901234" -A > hmac-sha1 "V6LC-000--1234567890"; # MPS add <address of MN> <address > of HA> esp 0xaaaa2005 -m transport -u > 5 -E 3des-cbc "V6LC-000--12345678901234" -A > hmac-sha1 "V6LC-000--1234567890"; > # MPA > add <address of HA> <address of MN> esp 0xaaaa2006 -m transport -u > 6 -E 3des-cbc "V6LC-000--12345678901234" -A > hmac-sha1 "V6LC-000--1234567890"; > # TNRV > > # TNFW > -------------------------------------------------- > > -- > Noriaki TAKAMIYA > > > > ______________________________________________________________________ > > ______________________________________________________________________ > This email has been scanned by the MessageLabs Email Security System. > For more information please visit > http://www.messagelabs.com/email > ______________________________________________________________________ > 5, 50, 500, 5000 - Store N number of mails in your inbox. Go to http://help.yahoo.com/l/in/yahoo/mail/yahoomail/tools/tools-08.html