IPv6 Support in Bridge/QOS Mode

Home Page Forums Network Management ZeroShell IPv6 Support in Bridge/QOS Mode

This topic contains 1 reply, has 0 voices, and was last updated by  marcoskf 8 years, 8 months ago.

Viewing 3 posts - 1 through 3 (of 3 total)
  • Author
    Posts
  • #42741

    marcoskf
    Member

    Hi,

    Does anyone know how activate IPv6 support in bridge/qos mode in Zeroshell ???

    I’m testing in my dual stack network and ipv6 traffic is blocking by zeroshell.

    Can anyone help me ?

    Thanks.

    Marcos (UNESP – Sao Paulo University)

    #51352

    AtroposX
    Member

    Looks like if you use Schoopy’s development image, and follow my steps on that thread, then go into /Database/linux-2.6.25.20, and run the command “make menuconfig”, in there, there are some ipv6 options that are disabled, you can enable them, exit, and save the config.

    I have not tested it yet though, just found that those options are there. Still looking around on how to shape the traffic though, perhaps with tc somehow, rather than an iptables rule.

    I see that the iptables module “ipmark”, which is not part of ZS modules, states some things about ipv6 shaping. Hope this helps

    #51353

    AtroposX
    Member

    Looks like instead of using iptables, you can use ip6tables. ip6tables appears to already be built as a command. “ip6tables -h” states the help list and all of its options. ip6tables should be able to use “-j MARK –set-mark X” to tag packets to a class.

    Instead of using:
    iptables -A FORWARD -s 192.168.1.100/32 -j MARK –set-mark 0x39

    you could instead use:
    ip6tables -A FORWARD -s 2001:618:x::x -j MARK –set-mark 0x39
    to shape an ipv6 address’s outbound traffic in a bridge

    but, i get an error when trying to filter traffic.

    “FATAL: Module ip6_tables not found.”
    “ip6tables v1.4.0: can’t initialize ip6tables table ‘filter’: Address family not supported by protocol”
    “Perhaps ip6tables or your kernel needs to be upgraded.”

    Still in the process of trying to enable in kernel though…

    Looks like the same thing with ipp2p, it is usable to view the help and its options, but it is not built into the kernel, thus not usable to filter traffic.

Viewing 3 posts - 1 through 3 (of 3 total)

You must be logged in to reply to this topic.