Skip to content

Commit

Permalink
nat64: config expliziet 'other' pool
Browse files Browse the repository at this point in the history
  • Loading branch information
genofire committed Jul 25, 2019
1 parent dfab66f commit d045842
Showing 1 changed file with 15 additions and 1 deletion.
16 changes: 15 additions & 1 deletion README.md
Original file line number Diff line number Diff line change
Expand Up @@ -85,13 +85,26 @@ On this way the other vpns got the new internal routing in ```bird``` and ```bir

## Babel

**NAT64**

if installed nat64 maybe extends port pool by reconfigure local range `sysctl net.ipv4.ip_local_port_range`

Or use other address-pool (and firewall) `/etc/systemd/system/jool.service`:
```
...
ExecStart=/usr/local/bin/jool instance add --iptables --pool6=64:ff9b::/96
ExecStartPost=/usr/local/bin/jool pool4 add --icmp 185.117.213.250 1601:3000
ExecStartPost=/usr/local/bin/jool pool4 add --udp 185.117.213.250 3001:65535
ExecStartPost=/usr/local/bin/jool pool4 add --tcp 185.117.213.250 1601:65535
...
```


### Babel Gateway
A babel gateway is a maschine which allow to exit ipv6 default route and recieve the client and nodes subnet

Such a gateway need some special configuration.
- (A bigget nat64 whould be nice)
- (A bigger nat64 whould be nice)
- ip routes for exit
- `post-up ip -r r add default via 2a06:8782:ff00::1 dev $IFACE proto 159 table default-freifunk`
- firewall rules /etc/firewall.d/20-exit
Expand All @@ -117,3 +130,4 @@ TODO: respondd firewall:
ipt6 -A INPUT -i babel-+ -p udp --dport 1001 -j ACCEPT
ipt6 -A INPUT -i mmfd0 -p udp --dport 1001 -j ACCEPT
```

0 comments on commit d045842

Please sign in to comment.