Hello,
My ISP (free.fr) now proposes to me a native connectivity in IPV6.
I wish to implement this functionality on my network, that here:
Switch Firewall ISP Box ISP Network/Internet
__ ___ ___
|PC1|-------| | vr0 | | vr1 | |
| x|-----------| |------------| |----------O
|PC2|-------|__| |___| |___|
Here some information :
- the ISP box is running as a bridge ;
- the firewall is running Openbsd 4.1 GENERIC#1435 i386 (upgrade to 4.2 not
yet done) ;
- workstations are running Win XP ;
- pf rules are quite simple (just filtering and NAT for IPV4) ;
- my ISP provided to me an IPV6 address of the type 2a01:5d8:X:X::/64
The problem :
The /64 provided by my ISP is made to fuel only one ethernet segment and no
more.
So, it is not possible to route a part of the /64 to another ethernet
segment (the private segment).
One solution :
The firewall NAT IPV4 traffic and bridge IPV6 traffic, that here:
Switch Firewall ISP Box ISP Network/Internet
__ ___ ___
|PC1|-------| | vr0 | | vr1 | |
| x|-----------| |------------| |----------O
|PC2|-------|__| | |___| | |___|
| | |
|bridge0 |
| _|_ |
| | | |
|_| |_ _|
|__|
IPV6 bridge only
Some clues :
I found some clues on the following web site where my need is summarized.
An English translation ->
http://64.233.179.104/translate_c?hl=fr&ie=UTF-8&oe=UTF-8&langpair=fr%7Cen&u=http://www.ip6.fr/free-broute/&prev=/language_tools
The original French link ->
http://ip6.fr/free-broute/
Second problem :
The author of the previously quoted web site is running under Linux.
Here used commands :
brctl addbr br0
ifconfig br0 up
brctl addif br0 eth0
brctl addif br0 eth1
ebtables -t broute -A BROUTING -p ! ipv6 -j DROP
The magic command is "ebtables -t broute -A BROUTING -p ! ipv6 -j DROP".
Questions :
1) Did you understand my problems ? :)
2) Is it the right solution to bridge only IPV6 traffic (I hope for it) ?
3) The most important question, how to do this type of bridging under
Openbsd (without ebtables) ?
According to the man page, "brconfig" can only perform layer 2 filtering.
Thank you for any help
Julien
