Differences between revisions 67 and 68
Revision 67 as of 2018-04-04 15:39:45
Size: 6850
Editor: ?TongKhuyet
Revision 68 as of 2018-04-04 16:06:40
Size: 6701
Editor: ?TongKhuyet
Comment: does it need to disable eth0?
Deletions are marked like this. Additions are marked like this.
Line 89: Line 89:
or better,

edit {{{/etc/sysctl.conf}}} and add those parameters to kernel. Also be sure to add extra lines for other network interfaces you want to disable IPv6.
or better, edit {{{/etc/sysctl.conf}}} and add those parameters to kernel. Also be sure to add extra lines for other network interfaces you want to disable IPv6.
Line 97: Line 95:
net.ipv6.conf.eth0.disable_ipv6 = 1
Line 99: Line 96:

On Debian Stretch, {{{net.ipv6.conf.eth0.disable_ipv6}}} should be {{{net.ipv6.conf.eno1.disable_ipv6}}}.

Debian IPv6 Project

The purpose of the project is to provide a central place to find out about IP version 6 in Debian. All computers that talk on the Internet use a communications protocol called IP (Internet Protocol) and they all use version 4 of this protocol.

Full IPv6 support was a Release Goal for Squeeze. Please see Full IPv6 Support for more details.

Native IPv6

If you already have native connectivity, Debian should pick it up automatically from router advertisements, and generate addresses for you. You can also use the "static" method in /etc/network/interfaces to set up addresses manually. PPP users may have to add +ipv6 to /etc/ppp/options, as not all PPP RAS servers advertise IPv6 support, even if they will negotiate it upon request.

If your router doesn't have advertisements, you may want to try to bring IPv6 manually:

ip -6 addr add 2002:c000:203::1/64 dev eth0

Of course, replace the address by the one corresponding to your IPv4 or anything that you want to assign to your eth0. You can remove an IPv6 from the device the same way:

ip -6 addr del 2002:c000:203::1/64 dev eth0

If you have both native IPv6 and IPv4 (a dual-stack host), you may still want to use 6to4 addresses as well as your native addresses; IPv6 specifies address selection rules that ensure that native hosts will use your native IPv6 connectivity, but 6to4 hosts will use your 6to4 connectivity (removing public relay routers, and reducing the number of points of failure in your setup).

IPv6 6to4 Configuration

You may not know this, but if you have a public IPv4 address you already have IPv6 addresses reserved. There is a transitional system called 6to4 (sometimes written stf or 6 to 4) that maps any IPv4 address an entire subnet of IPv6 addresses. You can use it to assign a single address to your system, or as the prefix for your local IPv6 network. You can also use the method for making a private IPv6 network by using a private IPv4 (RFC 1918) address instead of the deprecated "site-local" fec0::/10 addresses.

Assuming you have a static IPv4 address, you can enable 6to4 in the following way. Edit /etc/network/interfaces and add an interface stanza like this:

auto 6to4
iface 6to4 inet6 6to4

where is your IPv4 address. Now run

ifup 6to4

to enable the interface. In this example, the 6to4 interface would get the IPv6 address 2002:c000:0203::1.

See also:

Setting up a 6to4 relay router using Debian

If you have a dual-stacked host (one with both IPv4 and IPv6 native connectivity), you may wish to offer a relay router for the rest of your network. A relay router also helps with connectivity for IPv6-only hosts on your network; rather than relying on a public 6to4 relay router to communicate with 6to4 hosts, your router can encapsulate IPv6 into IPv4.

There are two ways to do this; one is to have the relay on a normal address, which you share with your clients. The other is to add to your IPv4 addresses and routing, so that clients that use 6to4 will pick up your relay router automatically. If you run a relay router on an address other than, you will need to change the gateway on your clients to match.

A relay router should already be configured to forward IPv6 packets natively for its clients; you then add a sit0 interface without a gateway for the 6to4 relay. In /etc/network/interfaces, this looks like:

auto sit0
iface sit0 inet6 static
        address 2002:c000:0203::1
        netmask 16

Note that this is almost identical to a plain 6to4 setup; the only difference is that as you already have native connectivity, you do not need to use a relay router to act as your gateway.

IPv6 Tunnel Configuration

An IPv6 tunnel can be configured using /etc/network/interfaces on Debian:

auto 6in4
iface 6in4 inet6 v4tunnel
  address [Your IPv6 Endpoint]
  netmask [Prefix Length]
  endpoint [PoP IPv4 Endpoint]
  gateway [PoP IPv6 Endpoint]
  ttl 64
  up ip link set mtu 1280 dev $IFACE

Now you can use ifup(8) and ifdown(8) to control your tunnel. What's even better about it, is that the tunnel is set up at boot time, because in /etc/init.d/networking, "ifup -a" is called, which brings up all interfaces from /etc/network/interfaces configured with the "auto" option.

Automated Tunnel Configuration

Try the aiccu, for SixXS or gogoc previously known as 'tspc', for Hexago to automate most of the tunnel configuration. Installing the miredo package should also enable IPv6 connectivity via a tunnel, albeit using a dynamic address.

Manual Tunnel Configuration

Hurricane Electric operates a free tunnel broker, with simple web based registration and forums. Examples for Debian using ifconfig or ip commands available. Configuration instructions for use with ifupdown (/etc/network/interfaces) are available on the tunnelbroker.net forum.

How to turn off IPv6

  1. Append IPV6_DISABLE=1 to the GRUB_CMDLINE_LINUX variable in /etc/default/grub.

  2. Run update-grub and reboot.

or better, edit /etc/sysctl.conf and add those parameters to kernel. Also be sure to add extra lines for other network interfaces you want to disable IPv6.

net.ipv6.conf.all.disable_ipv6 = 1
net.ipv6.conf.default.disable_ipv6 = 1
net.ipv6.conf.lo.disable_ipv6 = 1

After editing sysctl.conf, you should run sysctl -p to activate changes or reboot system.

See Also