Differences

This shows you the differences between two versions of the page.

--- documentation:examples:nat64 [2019/06/05 17:47] – [Stateful (lsn)] olivier
+++ documentation:examples:nat64 [2020/01/02 19:36] (current) – [Stateless (stl)] olivier
@@ Line 55: / Line 55: @@
 <code>
-sysrc hostname=VM1
+sysrc hostname=VM1 \
-sysrc gateway_enable=NO
+ gateway_enable=NO \
-sysrc ipv6_gateway_enable=NO
+ ipv6_gateway_enable=NO \
-sysrc ifconfig_vtnet0_ipv6="inet6 2001:db8:12::1 prefixlen 64"
+ ifconfig_vtnet0_ipv6="inet6 2001:db8:12::1 prefixlen 64" \
-sysrc ipv6_defaultrouter="2001:db8:12::2"
+ ipv6_defaultrouter="2001:db8:12::2"
 service hostname restart
 service netif restart
@@ Line 71: / Line 71: @@
 <code>
-sysrc hostname=VM2
+sysrc hostname=VM2 \
-sysrc ifconfig_vtnet1="inet 2.2.2.2/24"
+ ifconfig_vtnet1="inet 2.2.2.2/24" \
-sysrc ifconfig_vtnet0_ipv6="inet6 2001:db8:12::2 prefixlen 64"
+ ifconfig_vtnet0_ipv6="inet6 2001:db8:12::2 prefixlen 64"
 service hostname restart
 service netif restart
@@ Line 85: / Line 85: @@
 <code>
-sysrc hostname=VM3
+sysrc hostname=VM3 \
-sysrc gateway_enable=NO
+ gateway_enable=NO \
-sysrc ipv6_gateway_enable=NO
+ ipv6_gateway_enable=NO \
-sysrc ifconfig_vtnet1="inet 2.2.2.3/24"
+ ifconfig_vtnet1="inet 2.2.2.3/24" \
-sysrc defaultrouter="2.2.2.2"
+ defaultrouter="2.2.2.2"
 service hostname restart
 service netif restart
@@ Line 103: / Line 103: @@
 <code>
-sysrc tayga_enable=yes
+service tayga enable
 sed -i "" 's/192.168.255./2.2.1./g' /usr/local/etc/tayga.conf
 sed -i "" 's/2001:db8:1:ffff::/64:ff9b::/g' /usr/local/etc/tayga.conf
@@ Line 131: / Line 131: @@
 </code>
 ==== Testing ====
+From VM4, start a tcpdump to check IPv4 source address seen by VM3:
+<code>
+[root@VM3]~# tcpdump -c 2 -pni vtnet1
+tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
+listening on vtnet1, link-type EN10MB (Ethernet), capture size 262144 bytes
+...
+</code>
 From VM1 (IPv6 only host), ping NAT64 IPv6 address corresponding to VM3 IPv4 address:
@@ Line 146: / Line 155: @@
 </code>
-And check IPv4 source address seen by VM3:
+From VM3, check source IP addresses of ICMP:
 <code>
-[root@VM3]~# tcpdump -c 2 -pni vtnet1
+...
-tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
-listening on vtnet1, link-type EN10MB (Ethernet), capture size 262144 bytes
 :43:03.094975 IP 2.2.1.249 > 2.2.2.3: ICMP echo request, id 6575, seq 0, length 16
 :43:03.094983 IP 2.2.2.3 > 2.2.1.249: ICMP echo reply, id 6575, seq 0, length 16
@@ Line 158: / Line 164: @@
 packets dropped by kernel
 </code>
 ===== IPFW NAT64 (kernel space) =====
@@ Line 170: / Line 175: @@
 <code>
-sysrc firewall_enable=YES
+service ipfw enable
 sysrc firewall_script="/etc/ipfw.rules"
 echo "# Temporary fix to avoid panicing a 12-stable:" >> /etc/sysctl.conf
@@ Line 217: / Line 222: @@
 </code>
-==== Stateless ====
+==== Stateless (stl) ====
 === VM2 ===
@@ Line 224: / Line 229: @@
 <code>
-sysrc firewall_enable=YES
+service ipfw enable
 sysrc firewall_script="/etc/ipfw.rules"
@@ Line 234: / Line 239: @@
 ${fwcmd} table T46 create type addr valtype ipv6
 ${fwcmd} table T64 create type addr valtype ipv4
+${fwcmd} table T46 add 2.2.1.1 2001:db8:12::1
+${fwcmd} table T64 add 2001:db8:12::1 2.2.1.1
 ${fwcmd} nat64stl NAT64 create table4 T46 table6 T64
 ${fwcmd} add allow icmp6 from any to any icmp6types 135,136
@@ Line 242: / Line 249: @@
 service ipfw start
-sysctl net.inet.ip.fw.verbose=1
 </code>
 === Testing ===
@@ Line 248: / Line 254: @@
 From IPv6 only host, ping NAT64 IPv6 address corresponding to VM3 IPv4 address:
-Need to fix setup.
+<code>
+[root@VM1]~# ping6 -c 3 64:ff9b::2.2.2.3
+PING6(56=40+8+8 bytes) 2001:db8:12::1 --> 64:ff9b::202:203
+bytes from 64:ff9b::202:203, icmp_seq=0 hlim=63 time=1.037 ms
+bytes from 64:ff9b::202:203, icmp_seq=1 hlim=63 time=1.048 ms
+bytes from 64:ff9b::202:203, icmp_seq=2 hlim=63 time=1.560 ms
+--- 64:ff9b::2.2.2.3 ping6 statistics ---
+packets transmitted, 3 packets received, 0.0% packet loss
+round-trip min/avg/max/std-dev = 1.037/1.215/1.560/0.244 ms
+</code>
+From IPv4 only host, ping NAT64 IPv4 address corresponding to VM3 IPv6 address:
+<code>
+[root@VM3]~# ping -c 3 2.2.1.1
+PING 2.2.1.1 (2.2.1.1): 56 data bytes
+bytes from 2.2.1.1: icmp_seq=0 ttl=63 time=17.147 ms
+bytes from 2.2.1.1: icmp_seq=1 ttl=63 time=1.409 ms
+bytes from 2.2.1.1: icmp_seq=2 ttl=63 time=5.017 ms
+--- 2.2.1.1 ping statistics ---
+packets transmitted, 3 packets received, 0.0% packet loss
+round-trip min/avg/max/stddev = 1.409/7.858/17.147/6.732 ms
+</code>
+And check on the NAT router VM2 some stats:
+<code>
+[root@VM2]~# ipfw nat64stl NAT64 stats
+nat64stl NAT64
+packets translated from IPv6 to IPv4
+packets translated from IPv4 to IPv6
+IPv6 fragments created
+IPv4 fragments received
+output packets dropped due to no bufs, etc.
+output packets discarded due to no IPv4 route
+output packets discarded due to no IPv6 route
+packets discarded due to unsupported protocol
+packets discarded due to memory allocation problems
+packets discarded due to some errors
+</code>