ungleich-public/ungleich-tools
6
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

[openwrt/nat64] disable source routing to fix routing issue

Browse source
This commit is contained in:
Nico Schottelius 2024-08-04 12:05:09 +02:00
parent 4c1c08ca4a
commit 91dcf00992
1 changed files with 19 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

20
openwrt/openwrt-nat64-bootstrap.sh
View file

@ -24,7 +24,6 @@ routerid=$1; shift
babelpw=$1; shift babelpw=$1; shift
ibgp_peers="$@" ibgp_peers="$@"
# Now $@ only contains iBGP peers
cat <<EOF | ssh -t "root@${address}" cat <<EOF | ssh -t "root@${address}"
set -x set -x
@ -43,6 +42,7 @@ uci delete network.lan.ip6assign
uci set firewall.@defaults[0].input=ACCEPT uci set firewall.@defaults[0].input=ACCEPT
uci set firewall.@defaults[0].forward=ACCEPT uci set firewall.@defaults[0].forward=ACCEPT
# Set hostname # Set hostname
uci set system.@system[0].hostname="${hostname}" uci set system.@system[0].hostname="${hostname}"
@ -58,6 +58,21 @@ uci delete network.lan.netmask
uci delete network.lan.gateway uci delete network.lan.gateway
uci set network.lan.proto="dhcpv6" uci set network.lan.proto="dhcpv6"
# Need to remove ipv6 source based routing - leads to route not working
# Symptom:
# root@vigir28:~# ip route get 2a0a:e5c1:700::7
# ip: RTNETLINK answers: Network unreachable
# root@vigir28:~# ping -c2 2a0a:e5c1:700::7
# PING 2a0a:e5c1:700::7 (2a0a:e5c1:700::7): 56 data bytes
# 64 bytes from 2a0a:e5c1:700::7: seq=0 ttl=62 time=10.774 ms
# 64 bytes from 2a0a:e5c1:700::7: seq=1 ttl=62 time=8.597 ms
#
# --- 2a0a:e5c1:700::7 ping statistics ---
# 2 packets transmitted, 2 packets received, 0% packet loss
# round-trip min/avg/max = 8.597/9.685/10.774 ms
# root@vigir28:~#
uci set network.lan.sourcefilter=0
# Disable DHCP on LAN # Disable DHCP on LAN
uci delete dhcp.lan.dhcpv4 uci delete dhcp.lan.dhcpv4
uci delete dhcp.lan.dhcpv6 uci delete dhcp.lan.dhcpv6
@ -138,7 +153,10 @@ cat > /etc/jool/jool-nat64.conf.json <<BBB
BBB BBB
uci set jool.general.enabled=1 uci set jool.general.enabled=1
# if nat64 is on, disable siit and vice versa
uci set jool.nat64.enabled=1 uci set jool.nat64.enabled=1
uci set jool.siit.enabled=0
uci commit uci commit