Re: [Shorewall-users] Generalized IPSec

2018-01-09 Thread Tom Eastep
On 01/09/2018 04:22 PM, Colony.three via Shorewall-users wrote: > We have LAN, made up of a number of KVM virtual machines, one of which > is the router for the WAN and another is the IPSec gateway. (Libreswan) > > I have DNAT working fine from the (internal) IPSec gateway through the > router to

[Shorewall-users] Generalized IPSec

2018-01-09 Thread Colony.three via Shorewall-users
We have LAN, made up of a number of KVM virtual machines, one of which is the router for the WAN and another is the IPSec gateway. (Libreswan) I have DNAT working fine from the (internal) IPSec gateway through the router to my phone and back. A while ago Tom gave me an iptables command to allow

Re: [Shorewall-users] ProxyNDP with radvd / DHCPv6 (i.e. not static configuration)

2018-01-09 Thread Bill Shirley
Model:DPC3939B Vendor:Cisco Hardware Revision:1.0 Serial Number:274340915 Processor Speed:447.28 MHz DRAM:524288 MB Flash:128 MB I have a business account with static IPv4 addresses and a static IPv6 of /56. Even if I could get IPv6 PD to work, I couldn't be guaranteed to get the same PD each tim

Re: [Shorewall-users] ProxyNDP with radvd / DHCPv6 (i.e. not static configuration)

2018-01-09 Thread Tom Eastep
On 01/09/2018 02:05 PM, Bill Shirley wrote: > I don't use SLAAC as stated in my previous email.  I use DHCP.  I have > radvd configured so that a device must get a lease.  My setup works. > > Sadly, this leaves Android devices out in the cold IPv6 wise. **cough**, > Lorenzo, **cough**. > https://w

Re: [Shorewall-users] ProxyNDP with radvd / DHCPv6 (i.e. not static configuration)

2018-01-09 Thread Bill Shirley
I don't use SLAAC as stated in my previous email.  I use DHCP.  I have radvd configured so that a device must get a lease.  My setup works. Sadly, this leaves Android devices out in the cold IPv6 wise. **cough**, Lorenzo, **cough**. https://www.techrepublic.com/article/androids-lack-of-dhcpv6-su

Re: [Shorewall-users] ProxyNDP with radvd / DHCPv6 (i.e. not static configuration)

2018-01-09 Thread Tuomo Soini
On Tue, 9 Jan 2018 11:46:06 +0100 Oliver Freyermuth via Shorewall-users wrote: > > radvd.conf: > > interface lan4 { > >   ... > >   prefix 2603::::4::1/80 { > >     ... > >   } > > } > > It complains about it not being a /64 but it works. /64 is absolute requirement for stateless aut

Re: [Shorewall-users] ProxyNDP with radvd / DHCPv6 (i.e. not static configuration)

2018-01-09 Thread Oliver Freyermuth via Shorewall-users
Dear Bill, Am 09.01.2018 um 10:51 schrieb Bill Shirley: > I'm unfamiliar with ProxyNDP and it's unclear what you want to do. > > I have radvd running on my shorewall gateway.  Since I can't > get my Comcast modem to issue me a slice of my static /56 that > Comcast issued to me, I split my static

Re: [Shorewall-users] ProxyNDP with radvd / DHCPv6 (i.e. not static configuration)

2018-01-09 Thread Bill Shirley
I'm unfamiliar with ProxyNDP and it's unclear what you want to do. I have radvd running on my shorewall gateway.  Since I can't get my Comcast modem to issue me a slice of my static /56 that Comcast issued to me, I split my static routed /64 into /80 subnets for my internal networks.  I know, I k