
                               Linux IPv6 HOWTO

Author:Peter Bieringer pb@bieringer.de
Ķ: ӼC expns@yahoo.com

   Revision Release 0.31 2002-09-29 Revised by: PB ½Ķ: 2002-10-14 ,
   2002-11-19 ĤGץ
     _________________________________________________________________

   Linux IPv6 HOWTO ئaO^b Linux @~tΤW]wIPv6/i
   D.oHOWTOΤbLinux@~tΤWw,]wMϥIPv6ѨT.
     _________________________________________________________________

1. z

     * 1.1 
     * 1.2 v,\iP䥦
     * 1.3 @
     * 1.4 pô
     * 1.5 O
     * 1.6 , vM
     * 1.7 v
     * 1.8 v
     * 1.9 
     * 1.10 ½Ķ
     * 1.11 wy
     * 1.12 䥦yt
     * 1.13 i
     * 1.14 Ķ
     * 1.15 ޳N譱
     * 1.16 NXʸ
     * 1.17 SGML
     * 1.18 2HTMLbuؿ(linking/anchors)
     * 1.19 MΪ
     * 1.20 h֭ LinuxMIPv6 HOWTOܰʪ?
     * 1.21 Linux IPv6 FAQ/HOWTO (Lɪ)
     * 1.22 IPv6 & Linux - HowTo (b@)
     * 1.23 Linux IPv6 HOWTO ({boHOWTO)
     * 1.24 Long code line wrapping signal char
     * 1.25 Placeholders ()
     * 1.26 Commands in the shell(shell ̪RO)
     * 1.27 ϥγoHOWTOݱ

2. OIPv6?

     * 2.1 IPv6bLinux@~tΤWv
     * 2.2 }l
     * 2.3 䶡
     * 2.4 {b
     * 2.5 N
     * 2.6 IPv6 a}|O ?
     * 2.7 FAQ(¦)

3. a}

     * 3.1 Se󪺦a}
     * 3.2 ,]se
     * 3.3 a}(D)
     * 3.4 Ѫe

4. ǳIPv6Bt

     * 4.1 IPv6-ready kernel
     * 4.2 IPv6-ready ]wu
     * 4.3 IPv6-ready /զ {
     * 4.4 IPv6-ready programs(MIPv6Pu@{)
     * 4.5 IPv6-ready Ȥݵ{ (selection)
     * 4.6 IPv6-ready server {

5. ]winterfaces(ɭ)

     * 5.1 P]
     * 5.2 Bringing interfaces up/down(]wɭ}/)

6. ]wIPv6a}

     * 6.1 CLeIPv6a}
     * 6.2 W[@IPv6a}
     * 6.3 IPv6a}

7. ]wIPv6

     * 7.1 CL{
     * 7.2 ]wIPv6ѳqLhD
     * 7.3  IPv6ѳqLhD
     * 7.4 W[IPv6Ѧinterface(ɭ)
     * 7.5 qinterface(ɭ)IPv6
     * 7.6 FAQ for IPv6 routes(IPv6 Ѫg`ݵ)

8. Neighbor Discovery(o{ھF)

     * 8.1 Displaying neighbors using "ip" ("ip"ROCLھF)
     * 8.2  "ip" ھFCLiBz

9. Configuring IPv6-in-IPv4 tunnels(]wED)

     * 9.1 ED
     * 9.2 CL{stunnels(ED)
     * 9.3 Setup of point-to-point tunnel(]wIIED)
     * 9.4 Setup of 6to4 tunnels (]w IPv6IPv4ED)

10. ]w IPv4-in-IPv6 ED

11. ֤߳]w in /proc-filesystem

     * 11.1 ˶iJ /proc-filesystem
     * 11.2 /proc-filesystems ̪ƭ.
     * 11.3 Entries in /proc/sys/net/ipv6/
     * 11.4 IPv6-related entries in /proc/sys/net/ipv4/
     * 11.5 IPv6-related entries in /proc/net/

12. Netlink-Interface to kernel

13.  debugging

     * 13.1 Server socket binding(jw)
     * 13.2 Using "netstat" for server socket binding check
     * 13.3 Examples for tcpdump packet dumps

14. Support for persistent IPv6 configuration in Linux distributions(bPo
檩]wIPv6)

     * 14.1 Red Hat Linux and "clones"(pUM̥SXf)
     * 14.2 Mandrake(ҼwܧJ)Linux 
     * 14.3 SuSE(ĬA)Linux 
     * 14.4 Debian(}w)Linux

15. 

     * 15.1 ϥ netfilter6
     * 15.2 hT:
     * 15.3 ǳ
     * 15.4 ϥΤk
     * 15.5 ϥip6tables

16. w

     * 16.1 Access limitations
     * 16.2 IPv6wf
     * 16.3 Security auditing using IPv6-enabled netcat(ϥξAIPv6
       netcat)
     * 16.4 Security auditing using IPv6-enabled nmap
     * 16.5 Security auditing using IPv6-enabled strobe
     * 16.6 fֵG

17. Encryption and Authentication([KM{)

     * 17.1 Ϊk

18. uWդu

19. 䥦T

     * 19.1 uWT
     * 19.2 hT
     * 19.3 qH׾

20. v
     _________________________________________________________________

1. z

1.1 

Revision Release 0.31 2002-09-29 Revised by: PB
See revision history for more
Revision Release 0.30 2002-09-27 Revised by: PB
See revision history for more
Revision Release 0.29 2002-09-18 Revised by: PB

1.2 v,\iP䥦

  vҦ: Peter Bieringer

Copyright
Written and Copyright (C) 2001-2002 by Peter Bieringer

1.1.2. License
This Linux IPv6 HOWTO is published under GNU GPL version 2:

The Linux IPv6 HOWTO, a guide how to configure and use IPv6 on Linux systems.

Copyright (C) 2001-2002 Peter Bieringer

    This documentation is free software; you can redistribute it and/or modify
it
  under the terms of the GNU General Public License as published by the Free
  Software Foundation; either version 2 of the License, or (at your option)
  any later version.

    This program is distributed in the hope that it will be useful,
  but WITHOUT ANY WARRANTY; without even the implied warranty of
  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
  See the GNU General Public License for more details.

    You should have received a copy of the GNU General Public License along
  with this program; if not, write to the Free Software Foundation, Inc.,
  59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.

1.3 @

@̱Ĳ Internet/IPv6 v
         1993: ѩϥe-mailMsDն}lĲInternet.
         1996: ܩ@IPv6ҵ{. ]AFLinuxIPv6.
         1997: }lgbLinux̦w,]wMϥIPv6n.
         2001: }lgoӷsHOWTO.

1.4 pô

   iHqLe-mail pb@bieringer.deέ [1]http://www.bieringer.de/pb/ L
   {bbMunich [northern part of Schwabing] / Bavaria / Germany
   (south) / Europe (middle) / Earth (surface/mainland).

1.5 O

   b"Networking/Protocols".

1.6 , vM

   b̤WYLF.

1.7 v

Dnv
2001-11-30: }l]wsHOWTO
2002-01-02: F@I,oFĤ@` (version 0.10).
2002-01-14: Fh,[F,oFҦe(version 0.14).
2002-08-16: i½Ķbi.
2002-10-14: Ķ½Ķ}l.

1.8 v

   See revision history at the end of this document.

1.9 

   ɯʺ|.e˵.

1.10 ½Ķ

   ̥]tURL,,@v.

1.11 wy

   ѧڦۤv(wyOڪy)bC볣ܤƪɭԬO|
   . åB٭nŶɶ,pGzɶ,դ@,jjaӱާa.

1.12 䥦yt

   @뱡pU,е@ӤHWLܰʪɭԶi½Ķ, version0.27 O̪.

1.13 i

   ۱q 2002-08-16 Lukasz Jokiel Lukasz.Jokiel@klonex.com.pl}l,{b.
   L_lO 0.27

1.14 Ķ

   q 2002-10-14 _, Ķ½ĶFe, _lO 0.31

1.15 ޳N譱

   HOWTOlΦO bLinux Red Hat7.3 LyX version 1.2.0 g,榡
   OSGML. http://cvsview.tldp.org/index.cgi/LDP/users/Peter-Bieringer/
   ̥iHo.

1.16 NXʸ

   NXʸˬOѦۤvgu"lyxcodelinewrapper.pl" ӧ. ziH
   bhttp://cvsview.tldp.org/index.cgi/LDP/users/ ̨o

1.17 SGML

   OLyXX\{. ]@ǬOΩTwNX.(
   http://cvsview.tldp.org/index.cgi/LDP/users/Peter-Bieringer/) Export
   of LyX table does not create proper "colspan" tags - tool for fixing:
   "sgmllyxtabletagfix.pl" (fixed since LyX 1.2.0)

   LyX sometimes uses special left/right entities for quotes instead the
   normal one, which will still exist in generated HTML. Some browsers
   don't parse this very well (known: Opera 6 TP 2 or Konqueror) - tool
   for fixing: "sgmllyxquotefix.pl"

1.18 2HTMLbuؿ(linking/anchors)

   D @ӻ,OQ˪

1.19 MΪ

   ]HTMLOSGMLͦ, HTMLWOH, @ǦWٳQw.oO
   Ϊ,æbHᤣ|. pGz{ں|Ftag, ڪD,ڷ|[ih.

1.20 h֭ LinuxMIPv6 HOWTOܰʪ?

   [Wo, TөO. p,OIӦh.

1.21 Linux IPv6 FAQ/HOWTO (Lɪ)

   Ĥ@ӥ Eric Osborne Ҽg. s Linux IPv6
   FAQ/HOWTO(http://www.linuxhq.com/IPv6/). ֪Dl,
   e-mailiD, ΨӼgv.

1.22 IPv6 & Linux - HowTo (b@)

   ̦@ӧ(Peter Bieringer)gĤG, s IPv6 & Linux -
   HowTo(http://www.bieringer.de/linux/IPv6/), 榡OHTML, 1997~4}
   l, æbP~7oFĤ@ӭ^媩, ڷ|~@. |QCCaeX
   i{bzŪoHOWTO.

1.23 Linux IPv6 HOWTO ({boHOWTO)

   ѩIPv6 & Linux - HowTo(http://www.bieringer.de/linux/IPv6/) O
   HTMLg, P Linux ɭp(www.linuxdoc.org)ݮe. (Peter
   Bieringer)F@ӱN IPv6 & Linux - HowTo gSGML榡ШD. ]N
   ngHOWTO(NӪIPv6 & Linux - HowTo), HIPv6VӶVзǤ, 
   Mwg@ӷsbӴX~eDna쪺[, ]AF򥻪M
   Ū. ʺAT̵M|bNӪl̲K[ĤGHOWTO̥h(IPv6 &
   Linux - HowTo).http://www.bieringer.de/linux/IPv6/

1.24 Long code line wrapping signal char

   "?"oӯSrŬOsXbPDF M PS on.

1.25 Placeholders ()

   ziH``bҤlݨpUe:

   < myipaddress >

   bztΩROscripts̷|QeҨN(MON "< >" h
   ), Gܦo:

   1.2.3.4

1.26 Commands in the shell(shell ̪RO)

   i檺RO(DrootΤ), "$" }Y, p:

   $ whoami

   i檺RO(rootΤ), "#" }Y, p:

   # whoami

1.27 ϥγoHOWTOݱ

  ӤHҭnƪ.

   zݼxDnUNIXu,pgrep, awk, find, ... , M̪@Ϊk.

  D@Ǻz

   znDlayers, protocls, addresses , cables ,plugs, . pGziJ
   oӻ, oӳsUz: [2]
   http://www.linuxports.com/howto/intro_to_networking/

  ]wIPv4g

   zݦTIPv4]wg.M,zNDpiUh.

  Domain Name System (DNS ʺAW٨ͪAt)g

   z̤֭nDpϥtcpdump, iDzO. M,zӻM׬۷
   j.

  Linux @~tΪݮew

   zݦڪާ@g, åBnbHOWTOɭԨBW. :)

2. OIPv6?

   IPv6OsĤThǿĳ(
   http://www.linuxports.com/howto/intro_to_networking/c4412.htm#PAGE10
   3HTML),NΨӨNIPv4(]sIP).

   IPv4OܦHe]p,{bIPv4ѧha}Mʯ譱ۧ󰪪nD.
   bIPv6DnܭOs]pFY. ]ANa}쪺jpq32 bits W[
   128 bits. ]ĤThǿDntdend-to-end(ݹ)a}ƾڥ]
   . ݥ]tsIPv6a}(ӷMؼ),oINIPv4@.

   UoӳsѤFhIPv6T, MRFC Ҫ:

   http://www.switch.ch/lan/ipv6/references.html

2.1 IPv6bLinux@~tΤWv

   Nn: nɶƦC, he...

2.2 }l

   Ĥ@NPIPv6NX[J Linux kernel 2.1.8 u@OPedro Roque
   b1996~11맹. BSD API:
       ______________________________________________________________

diff -u --recursive --new-file v2.1.7/linux/include/linux/in6.h
 linux/include/linux/in6.h
--- v2.1.7/linux/include/linux/in6.h Thu Jan 1 02:00:00 1970
+++ linux/include/linux/in6.h Sun Nov 3 11:04:42 1996
@@ -0,0 +1,99 @@
+/*
+ * Types and definitions for AF_INET6
+ * Linux INET6 implementation
+ * + * Authors:
+ * Pedro Roque <******>
+ *
+ * Source:
+ * IPv6 Program Interfaces for BSD Systems
+ * <draft-ietf-ipngwg-bsd-api-05.txt>
       ______________________________________________________________

   HWNXӦpatch-2.1.8 (e-mail a}bƻs&KWɺ|F)

2.3 䶡

   ]ʤ֤H, b֤ߥ[JIPv6pӰQתηsRFCs.

   b2000~10, @ӥsUSAGI(http://www.linux-ipv6.org/)pb饻
   Ұ. ؼЬOҦF, L(IPv6 support in Linux)p.
   pH KAME project (http://www.kame.net/) }B. ̾ vanilla
   Linux ֤߷NXiEB.

2.4 {b

   O USAGI  patch(ɤB)ܤj, Linux networking @HLkN]
   ti{bLinux 2.4.x tCNXh. ]2.4.x hF@(h)Ai
   , åBҦe]pMRFCs. oɭPFM䥦@~tη|ͤ@
   PD.

2.5 N

   USAGI {bbNeAi[J Linux 2.5.x ֤߷.

   Ʊ2.6.x tC֤߯঳@ӯuM̷sIPv6\.

2.6 IPv6 a}|O ?

   ~L, IPv6 a}128 bits . o˪ bits iH39ӤQir
   r:
       ______________________________________________________________

2^128-1: 340282366920938463463374607431768211455
       ______________________________________________________________

   o˪a}Oo. IPv6a}Ovw쪺(NIPv4, o[IO
   {). ҥHQinaNoǼƦr, 4 bits(]s"nibble"){
   Ʀr(0-9)Φr a-f(10-15). oخ榡NIPv6a}Y32r.
       ______________________________________________________________

2^128-1: 0xffffffffffffffffffffffffffffffff
       ______________________________________________________________

   oت{ΦMܤK. (iVcο|ӤQiƦr), ҥHIPv6
   ]p̱Na}ΦwC16bitN":"Ϥ}. }Y"0x"(b{]p
   ΨӪܤQiƭ)QF:
       ______________________________________________________________

2^128-1: ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff
       ______________________________________________________________

   @ӦĪa}(yЬݦa})pU:
       ______________________________________________________________

3ffe:ffff:0100:f101:0210:a4ff:fee3:9566
       ______________________________________________________________

   F², C16bit}Y0iHQٲ:
       ______________________________________________________________

3ffe:ffff:0100:f101:0210:a4ff:fee3:9566  ->
 3ffe:ffff:100:f101:210:a4ff:fee3:9566
       ______________________________________________________________

   s򪺨åBƭȬ016bita}qiH"::". O@IPv6a}u
   X{@, MoؤkOFh[.
       ______________________________________________________________

3ffe:ffff:100:f101:0:0:0:1  ->  3ffe:ffff:100:f101::1
       ______________________________________________________________

   ²Ʊo̵uIPv6 localhosta}:
       ______________________________________________________________

0000:0000:0000:0000:0000:0000:0000:0001  ->  ::1
       ______________________________________________________________

   oؤk]s compact (base85 coded) representation defined RFC 1924
   / A IPv6a}ܪk(w1996), S_L, Ҧp:
       ______________________________________________________________

# ipv6calc --addr_to_base85 3ffe:ffff:0100:f101:0210:a4ff:fee3:9566
Itu&-ZQ82s>J%s99FJXT
       ______________________________________________________________

   T: ipv6calc O@IPv6a}榡pMഫp, ziHbo̧:
   http://www.bieringer.de/linux/IPv6/ipv6calc/

2.7 FAQ(¦)

  sIPv6,ӤনIPv4᪺IPv5 ?

   bIPY, e4bits OĳҫOd. ҥHzפW@Өĳ
   b0M15OĪ:

     * 4 vgIPv4Ҩϥ.
     * 5  Stream ĳҫOd(STP, RFC 1819 http://rfc.net/rfc1819.html
       S}L)

   IPv4iΪO6, ] IPv6 No˥ͤF!

  IPv6 a}: |obits

   b]pIPv4ɭ,H̻{32bitר@ɨϥ. ݤ@ݳoǦ~,
   32bit N{bMӴX~ӻO. M, 32bits bNӺyU
   غ]ƹIPa}ݨD. Q@QNӭnsʹq, T(]Aq
   l`t), Nѥ],Bc, ө}...

   ҥH]p̱ĥΤF128bits, OIPv4 jp(2^96)Pת4.

   ڨϥΪjpi񥦬ݰ_Ӫ٭np. ]{bwqa}]p, 64bits
   Ωinterface identifiers(ɭ). t~64bitsΩ. H{bY
   hƶX(/48, /35, ...), IPv6 үണѪa}Ŷ٬Oiण, Ʊo
   رpnb᪺X~̵o.

  IPv6 a}: bs]pbitsop?

   M, (i)ǤH(bInternet)Ҽ{IPv8MIPv6, ]pLױqM泣
   O򪺻. b䶡128bitYMƾڶǿӻǪΪ.

   Ҽ{bIPv4MIPv6̤j/̤pǿ(MTU,̤OO576byte M
   1280 byte), IPv4 YO20 byte(̤p,iHqLո`IPv4ﶵWj
   60byte), IPv6 YO48 byte(Twܪ), YOeMTU3.4%
   M3.8%, oNN۳YFܤj@}P. jbitsa}ݭnjY,
   ]Ӧڧj}P.

   P,UΨMTU`s̤j({bHӺ): 1500byte(FSOC
   l:9k byte Φb Jumbo frames ). ̲,pGnǿbĤThƾڥ]
   e10%20%Y, o˪IPa}b]pW]NSNqF.

3. a}

3.1 Se󪺦a}

  Localhost a}

   oO@ӯSOloopback interface(^eɭ¶)wqa}, NIPv4
   "127.0.0.1" IPv6 localhost address O:
       ______________________________________________________________

0000:0000:0000:0000:0000:0000:0000:0001
       ______________________________________________________________

   Y
       ______________________________________________________________

::1
       ______________________________________________________________

   oӦa}ƾڥ]N@host(D)oeӷMؼ.

  a}

   oO@ӦbIPv4 "Ҧ" "0.0.0.0". IPv6:
       ______________________________________________________________

0000:0000:0000:0000:0000:0000:0000:0000
       ______________________________________________________________

   Ϊ̬O:
       ______________________________________________________________

::
       ______________________________________________________________

   oǦa}jh Φb/ socket j(ҦIPv6a})θѪ.

   `N:a}ؼЦa}Өϥ.

  ӤJFIPv4a}IPv6a}

   ]tFӦa}䤤@ӬIPv4a}.

  IPv4MgIPv6a}

   IPv4-only IPv6-compatible OIPv6xͪ Ω sockets .
   ujIPv4a}.

   oǦa}Qwq֦׬96eSa}(a.b.c.d OIPv4a}):
       ______________________________________________________________

0:0:0:0:0:ffff:a.b.c.d/96
       ______________________________________________________________

   Ϊ̨ϥYgΦ
       ______________________________________________________________

::ffff:a.b.c.d/96
       ______________________________________________________________

   oǦa}]Ω۰ʹED, wgQ6to4tunnelingN.

3.2 ,]se

   ]p̩wqùwdF@ŶHKNӹJ칳{bo˪ݨD. RFC 2373
   [July 1998] / IP Version 6 Addressing Architecture
   (http://rfc.net/rfc2373.html) wqF{ba}]p, wgFs
   (ftp://ftp.ietf.org/internet-drafts/)draft-ietf-ipngwg-addr-arch-*.txt

   ڭ̨Ӭݤ@UPewq(Ma}):

  saa}

   oǦa}~(Internet)s. HoǦa}ؼЪƾڥ]|qL
   Ѿ. oسsΩHU:

     * P䥦N@Ӥ]ϥγoӳsHiqT.
     * P䥦N@Ӿ֦Sa}siqT.(ҦpM)

   ̪a}ѥHUoǶ}Y("x"ONQir,@O"0")
       ______________________________________________________________

fe8x:  <- ثeuoӦb.
fe9x:
feax:
febx:
       ______________________________________________________________

   @Ӷ}YHWoǫe󪺦a}, IPv6SbɭwIPa}ɭԳХ.

   ثeufe80bϥ.

  aIa}wq

   oǦa}MIPv4ۦ(http://rfc.net/rfc1918.html RFC 1918 / Address
   Allocation for Private Internets) u: u16bits NiHwq65536
   Ӥl.PIPv410.0.0.0/8ۦ.

   t@u:bIPv6ɭWiHwqhIPa}, bwaIa}¦
   W٥iH[W@global()a}.

   ̪a}ѥHUoǶ}Y("x"ONQir,@O"0")
       ______________________________________________________________

fecx:  <- jhƨϥγo
fedx:
feex:
fefx:
       ______________________________________________________________

  Global()a} "(Aggregatable) global unicast"iEXߤ@a}.

   ,u@ӥa}wq(Ĥ@ӳ]p,]Oh~HӤ@ϥΪs
   "provider based," [3]RFC 1884 / IP Version 6 Addressing Architecture
   [obsolete]) zb֤߷NX@.

   ̪a}ѥHUoǶ}Y("x"ONQir,@O"0")
       ______________________________________________________________

2xxx:
3xxx:
       ______________________________________________________________

   `N: e"aggregatable" Qeש߱F. U@ǧ󦳷Nql
   wq:

  6bone test addresses

   oǬO̪wqMϥΪa}. ̪}YO
       ______________________________________________________________

3ffe:
       ______________________________________________________________

   Ҥl
       ______________________________________________________________

3ffe:ffff:100:f102::1
       ______________________________________________________________

   @ӵLߤ@ƪSO6boneҤl
       ______________________________________________________________

3ffe:ffff:100:f102::1
       ______________________________________________________________

   oǥDnOҤl, ]pGϥίuꪺa},i|ǤHN&KW 
   L̦ۤvtmh. qӤ`NaƻsFߤ@a}, o˷|ɭPӾ֦
   oӦa}Dͤ@ǰD(p,ШD^]|Qoe.) ziHqo
   eӽФ@, ݳo: "p[J6bone" ]@Ǧb tunnel brokers L
   ̵oGΩ6bone a}e.

  6to4 a}

   oǦa}OSOtunneling]p. [4][RFC 3056 / Connection of IPv6
   Domains via IPv4 Clouds M [5]RFC 2893 / Transition Mechanisms for
   IPv6 Hosts and Routers], IPv4a}Mi઺lsXåHUΦ
   }Y:
       ______________________________________________________________

2002:
       ______________________________________________________________

   Ҥl,s192.168.1.1/5sX:
       ______________________________________________________________

2002:c0a8:0101:5::1
       ______________________________________________________________

   oshellRONUzΤ@IPv4a}ͳo˪a}:
       ______________________________________________________________

ipv4="1.2.3.4"; sla="5"; printf "2002:%02x%02x:%02x%02x:%04x::1" `echo $ipv4 |
tr "." " "` $sla
       ______________________________________________________________

   ѷtunneling using 6to4 and information about 6to4 relay routers.

  qŸѤt쪺a}

   oǦa}tInternetAȨѰ(ISP)åBpU}Y:
       ______________________________________________________________

2001:
       ______________________________________________________________

   DISP(֦F)eOlocal registriest, åB{bL̤t
   e׬35.

   DISPsq`tUISPse׬48.

  Multicast addresses(hIǰea})

   Multicast addresses ΩAȷ.

   `OPU}Y(xxOd)
       ______________________________________________________________

ffxy:
       ______________________________________________________________

   ̦ۤPdM:

  Multicast scopes(hIǹFed)

   Multicast scope OΨөwqoe骺multicast ƾڥ]ĳ̻ǿȪ
   .

   q`,UdwgQwq:
     * ffx1: a`I, ƾڥ]|}`I.
     * ffx2: as, ƾڥ]|Q,ҥH̤|}oӯSOs.
     * ffx5: aI, ƾڥ]|}I.
     * ffx8: a´, ƾڥ]|}´(_Ӥe,̾a
       ĳ)
     * ffxe: d.
     * 䥦QOd

  Multicast(hIǰe)

   \hwgwq/Od(Ӹ`аѷ [6]RFC 2373 / IP Version 6
   Addressing Architecture). o̦@ǨҤl:
     * Ҧ`Ia}: ID=1h, Ҧa`IDa}(ff01:0:0:0:0:0:0:1) 
       wsna}(ff02:0:0:0:0:0:0:1).
     * ҦѦa}:ID=2h,Ҧa`IѦa}(ff01:0:0:0:0:0:0:2), w
       s(ff02:0:0:0:0:0:0:2), ΥaI(ff05:0:0:0:0:0:0:2).

  Solicited node link-local multicast address(ahШD`Ia})

   bneighborhood discovery(ho{)ؼЦa}ϥΪSOha}.
   PIPv4P,ARP(a}ѪRĳ)NbIPv6ϥ.

   Ҥl:
       ______________________________________________________________

ff02::1:ff00:1234
       ______________________________________________________________

   ϥΫeܥO@ӥaha}, ѥؼЦa}. oӨҤlN
   @Ӽƾڥ]o"fe80::1234", ǪäDĤGhMAC(hCq
   ). NW104 bits אּ "ff02:0:0:0:0:1:ff00::/104" U24
   bits . {boӦa}Hon-link(bu)ΦM`I(oӸ`I
   oeF]tĤGh MAC a}^])

  Anycast addresses(Ha})

   Anycast addressesO@ӯSOa}, ΩFDNSDHCPA, ΥΩ
   dynamic groups(ʺAոs). a}q unicast address (漽a
   }aggregatable global or site-local at the moment)Ŷo. Ha}
   (qȤݪ[IӬ)ѰʺAѨĳ.

   `N:Ha}ন@ӷa}, ݥHؼЦa}X{.

  Subnet-router Anycast addresses(lHѾ)

   @Subnet-router Anycast addressesҤl. ]@ӤtFpUIPv6a}
   `I:
       ______________________________________________________________

3ffe:ffff:100:f101:210:a4ff:fee3:9566/64  <- `Ia}
       ______________________________________________________________

   Subnet-routerNϥΨS󪺦a} (least significant 64 bits):
       ______________________________________________________________

3ffe:ffff:100:f101::/64  <- subnet-router anycast address
       ______________________________________________________________

3.3 a}(D)

   ]۰ʪts/Ht,bea}DϥΧC 64 bitsa}.
   ]Csubnet(l)iH֦jqa}.

   Da}tiHpUXاΦ:

  ۰ʤt(also known as stateless)

   b۰ʤt,Da}ѬɭMACa}Mw. ϥEUI-64k,w@
   IPv6 a}. pGSiΪMAC(p:]), NΨ䥦N(pIPv4a}
   ΪzɭMACa})

   Aݤ@UeҤl:
       ______________________________________________________________

3ffe:ffff:100:f101:210:a4ff:fee3:9566
       ______________________________________________________________

   o:
       ______________________________________________________________

210:a4ff:fee3:9566
       ______________________________________________________________

   Da}NICMACa}Mw:
       ______________________________________________________________

00:10:A4:E3:95:66
       ______________________________________________________________

    [7]IEEE-Tutorial EUI-64 @EUI-48 Ѳ.

  ۰ʤtaӪpD

   ]۰ʤtOߤ@a},ȤݦbqLNzpUeQ. o
   OӤ{D,ѨMkO:privacy extension,wq [8]RFC 3041 /
   Privacy Extensions for Stateless Address Autoconfiguration in IPv6 o
   ̤]@ӯ: [9]draft-ietf-ipngwg-temp-addresses-*.txt ϥΤPR
   Aƭ, Cͤ@ӷs. `N: uclient s, servers
   SγB.

  ʳ]w

   serversӻ, jܮeO_²檺a}. Pɤ]iHVɭK[@
   IPv6a}:
       ______________________________________________________________

3ffe:ffff:100:f101::1
       ______________________________________________________________

   ʳ]w"::1",Ҥḽn6 bits]w"0", anycast
   addresses(Nǰea})Od (the universal/local bit of the
   automatically generated identifier).

3.4 Ѫe

   b]p,ϥΧѤŨӳ̤jhצaYpѪ. Ҫ
   kOϥηeIPv4֤߸Ѽƥ(> 104 thousand in May 2001) ֵwO
   骺ݨDӱѪMt(֪ӼƨϬdtץ[).

  e(]slBn)

   PIPv4ۦ, ͥiѪ|. ]128 bitsзǪnetmasks ݰ_Ӥ
   . ]p̭ųFIPv4: Classless Inter Domain Routing (CIDR
   [10]RFC 1519 / Classless Inter-Domain Routing) ̬OΩIPa}
   bitsX. ]s"/"

   Ҥl:
       ______________________________________________________________

3ffe:ffff:100:1:2:3:4:5/48
       ______________________________________________________________

   ̥iHQXi:
       ______________________________________________________________

:
3ffe:ffff:0100:0000:0000:0000:0000:0000
       ______________________________________________________________
       ______________________________________________________________

lBn:
ffff:ffff:ffff:0000:0000:0000:0000:0000
       ______________________________________________________________

  Matching a route(Ѥǰt)

   b@뱡pU(no QoS), bѪ̬d@ӭna}ƭȷN۸ѫe
   ץݥǰt.

   Ҥl, pGѪU(M楼ҥX):
       ______________________________________________________________

3ffe:ffff:100::/48     ::            U  1 0 0 sit1
2000::/3               ::192.88.99.1 UG 1 0 0 tun6to4
       ______________________________________________________________

   IPv6ؼЦa}NQU]Ƹ:
       ______________________________________________________________


3ffe:ffff:100:1:2:3:4:5/48  ->  routed through device sit1
3ffe:ffff:200:1:2:3:4:5/48  ->  routed through device tun6to4
       ______________________________________________________________

4. ǳIPv6Bt

4.1 IPv6-ready kernel

   {bLinuxo檩֤߳ƤFBIPv6. IPv6\QsĶ@ӥi
   JҲ. b@뱡pUҲդ|b}ɭԦ۰ʸJ.

   ѷӧsT: [11]IPv6+Linux-Status-Distribution

  ˹{btάO_IPv6

   `Nz/proc-file-system.ݦpUc:
       ______________________________________________________________

/proc/net/if_inet6
       ______________________________________________________________

   @²檺:
       ______________________________________________________________

# test -f /proc/net/if_inet6 && echo "Running kernel is IPv6 ready"
       ______________________________________________________________

   pG, ҲըSJ.

  յ۸JҲ

   JҲժRO:
       ______________________________________________________________

# modprobe ipv6
       ______________________________________________________________

   pG\, Ҳշ|bC,pURO:
       ______________________________________________________________

# lsmod |grep -w 'ipv6' && echo "IPv6 module successfully loaded"
       ______________________________________________________________

  Ҳզ۰ʸJ

   ҲլOiH۰ʸJ,unb֤߼Ҳճ]w( /etc/modules.conf 
   /etc/conf.modules)[J:
       ______________________________________________________________

alias net-pf-10 ipv6  # automatically load IPv6 module on demand
       ______________________________________________________________

   ]iHIPv6Ҳժ۰ʸJ:
       ______________________________________________________________

alias net-pf-10 off   # disable automatically load of IPv6 module on demand
       ______________________________________________________________

  sĶ IPv6 \઺֤

   pGHWӵGҹF֤ߤ㦳IPv6\, ziHpU:
     * ɯŦ~]˦IPv6Linuxo檩(˷sϥ)Aݤ@Uo:
       [12]IPv6+Linux-Status-Distribution
     * sĶ@ӷsvanilla֤(pGzDӫ,|²).
     * ssĶz{b֦o檩֤(Ӯe).
     * N֤ߦP USAGI Xi@_sĶ.

   pGzMwsĶ@Ӯ֤,zŪL [13]Linux Kernel HOWTO. Hγo譱
   g.

   `N:zݨϥή֤2.4.xtCΧ. ]IPv62.2.xtCʤ֬.
   åBݭnICMPv6 M 6to4 ɤB.(ɤBiHb [14]kernel series 2.2.x
   IPv6 patches).

  N֤ߦP USAGI Xi@_sĶ.

   u˼x֤߽sĶMIPv6Τϥ. ѷ: [15]USAGI project / FAQ.

  IPv6-ready network devices

   OҦ]ƳOǿIPv6ƾڥ], o̦@Ӳ{: [16]
   IPv6+Linux-status-kernel.html#transport.

  {q|IPv6s

     * Serial Line IP (SLIP, [17]RFC 1055), should be better called now
       to SLIPv4, device named: slX
     * Parallel Line IP (PLIP), same like SLIP, device names: plipX
     * ISDN with encapsulation rawip, device names: isdnX

  bNӳ|IPv6]

     * ISDN with encapsulation syncppp, device names: ipppX (design issue
       of the ipppd, will be merged into more general PPP layer in kernel
       series 2.5.x)

4.2 IPv6-ready ]wu

   OӻF, pGz@ӥbBIPv6֤,|S]wuO? w
   ˥]̦NXӳo˪uF.

  net-tools package

   net-tools package ]t@Ǥup: ifconfig ,route. oǥiHOzbɭ
   W]wIPv6. bRO(shell) ifocnig -?  route -? dݽѦpIPv6 
   inet6.pG,hIPv6]wO.

   JHUROiˬd:
       ______________________________________________________________

# /sbin/ifconfig -? 2>& 1|grep -qw 'inet6' && echo "utility 'ifconfig' is
?IPv6-ready"
       ______________________________________________________________

   ]iHϥroute:
       ______________________________________________________________

# /sbin/route -? 2>& 1|grep -qw 'inet6' && echo "utility 'route' is IPv6-ready"
       ______________________________________________________________

  iproute package

   Alexey N. Kuznetsov (Linux NX{q@) gF@tool-seti
   HqLnetlink ]ƨӳ]w.iHnet-toolѧh\, Sh
   ֤ɨåBOxpH]p.
       ______________________________________________________________

# /sbin/ip 2>&1 |grep -qw 'inet6' && echo "utility 'ip' is IPv6-ready"
       ______________________________________________________________

   pGS /sbin/ip ڷO˱zwiproute package.
     * iHbzo檩(pG)
     * b [18]Original FTP sourceUýsĶ.
     * iHw˪RPM]: [19]RPMfind/iproute (˽sĶ SRPMS )

4.3 IPv6-ready /զ {

   bIPv6ǳƦnFtΫ,ziHIPv6iqT. zݾǲߦp
   屴{ˬdIPv6ƾڥ]. jP˳o˰,]
   bdebugging/troubleshooting QֳtE_.

  IPv6 ping

   oӵ{@biputils], ΨӴ²ǿoe ICMPv6 ^ШDõ
   ICMPv6 ^].

   Ϊk:
       ______________________________________________________________

# ping6 < hostwithipv6address >
# ping6 < ipv6address >
# ping6 [-I < device >] < link-local-ipv6address >
       ______________________________________________________________

   Ҥl:
       ______________________________________________________________

# ping6 -c 1 ::1
PING ::1(::1) from ::1 : 56 data bytes
64 bytes from ::1: icmp_seq=0 hops=64 time=292 usec
--- ::1 ping statistics ---
1 packets transmitted, 1 packets received, 0% packet loss
round-trip min/avg/max/mdev = 0.292/0.292/0.292/0.000 ms
       ______________________________________________________________

    ping6ݦArootv~ϥ, pGOrootեΤ,ϥήɥi
   ͰD:

   1.ping6 bΤ᪺| (probably, because ping6 is generally
   stored in /usr/sbin -> add path (not really recommended)

   2.ping6 QT, q`SAv chmod u+s /usr/sbin/ping6

  ping6wɭ

   local-addresses @ping6 ؼХݫw@Ӭɭ. _h֤߱NDƾ
   ]oӳ]. bSwpU|o˪X:
       ______________________________________________________________

# ping6 fe80::212:34ff:fe12:3456
connect: Invalid argument
       ______________________________________________________________

   ping6wɭG:
       ______________________________________________________________

# ping6 -I eth0 -c 1 fe80::2e0:18ff:fe90:9205
PING fe80::212:23ff:fe12:3456(fe80::212:23ff:fe12:3456) from
?fe80::212:34ff:fe12:3478 eth0: 56 data bytes
64 bytes from fe80::212:23ff:fe12:3456: icmp_seq=0 hops=64 time=445 usec
--- fe80::2e0:18ff:fe90:9205 ping statistics ---
1 packets transmitted, 1 packets received, 0% packet loss round-trip
?min/avg/max/mdev = 0.445/0.445/0.445/0.000 ms
       ______________________________________________________________

  Ping6 to multicast addresses(ha})

   @ӵo{IPv6-active hosts 쪺:
       ______________________________________________________________

# ping6 -I eth0 ff02::1 PING ff02::1(ff02::1) from fe80:::2ab:cdff:feef:0123 et
h0: 56 data bytes
64 bytes from ::1: icmp_seq=1 ttl=64 time=0.104 ms
64 bytes from fe80::212:34ff:fe12:3450: icmp_seq=1 ttl=64 time=0.549 ms (DUP!)
       ______________________________________________________________

   PIPv4PO, ping ^bsa}OiH̽,ثeuIPv6
   iH.

  IPv6 traceroute6

   oӵ{@biputils], MIPv4traceroute{ۦ, Pe
   POIPv6ॿTaϥICMP echo-request. ݤUoӨҤl:
       ______________________________________________________________

# traceroute6 www.6bone.net
traceroute to 6bone.net (3ffe:b00:c18:1::10) from 3ffe:ffff:0000:f101::2, 30
?hops max, 16 byte packets
 1 localipv6gateway (3ffe:ffff:0000:f101::1) 1.354 ms 1.566 ms 0.407 ms
 2 swi6T1-T0.ipv6.switch.ch (3ffe:2000:0:400::1) 90.431 ms 91.956 ms 92.377 ms
 3 3ffe:2000:0:1::132 (3ffe:2000:0:1::132) 118.945 ms 107.982 ms 114.557 ms
 4 3ffe:c00:8023:2b::2 (3ffe:c00:8023:2b::2) 968.468 ms 993.392 ms 973.441 ms
 5 3ffe:2e00:e:c::3 (3ffe:2e00:e:c::3) 507.784 ms 505.549 ms 508.928 ms
 6 www.6bone.net (3ffe:b00:c18:1::10) 1265.85 ms * 1304.74 ms
       ______________________________________________________________

  IPv6 tracepath6

   oӵ{@biputils], ΨӰlMTU|.ݤUҤl:
       ______________________________________________________________

# tracepath6 www.6bone.net
 1?: [LOCALHOST] pmtu 1480
 1: 3ffe:401::2c0:33ff:fe02:14 150.705ms
 2: 3ffe:b00:c18::5 267.864ms
 3: 3ffe:b00:c18::5 asymm 2 266.145ms pmtu 1280
 3: 3ffe:3900:5::2 asymm 4 346.632ms
 4: 3ffe:28ff:ffff:4::3 asymm 5 365.965ms
 5: 3ffe:1cff:0:ee::2 asymm 4 534.704ms
 6: 3ffe:3800::1:1 asymm 4 578.126ms !N
Resume: pmtu 1280
       ______________________________________________________________

  IPv6 tcpdump

   bLinux@~tΤ tcpdump ODnƾڥ]u.IPv6 3.6 .

   tcpdumpΩ󭰧Cƾڥ]TѼ:
     * icmp6: LoaICMPv6qT.
     * ip6: LoaIPv6qT.(]A ICMPv6)
     * proto ipv6: filters tunneled IPv6-in-IPv4 traffic
     * not port ssh: b{SSH|ܤTSSHƾڥ]. to suppress
       displaying SSH packets for running tcpdump in a remote SSH session

   ϥΩROѼƤ]iHq@Ӽƾڥ]/CLT.
     * "-s 512": W[򭭩w512 bytes.
     * "-vv": ԲӦCL.
     * "-n": Na}ഫW,bW٪AȦDɥiHΨ.

  IPv6 ping to 3ffe:ffff:100:f101::1 native over a local link
       ______________________________________________________________

 # tcpdump -t -n -i eth0 -s 512 -vv ip6 or proto ipv6
tcpdump: listening on eth0
3ffe:ffff:100:f101:2e0:18ff:fe90:9205 > 3ffe:ffff:100:f101::1: icmp6: echo
?request (len 64, hlim 64)
3ffe:ffff:100:f101::1 > 3ffe:ffff:100:f101:2e0:18ff:fe90:9205: icmp6: echo
?reply (len 64, hlim 64)
       ______________________________________________________________

  IPv6 ping to 3ffe:ffff:100::1 routed through an IPv6-in-IPv4-tunnel

   1.2.3.4M5.6.7.8OEDI(oǳOҤl).
       ______________________________________________________________

# tcpdump -t -n -i ppp0 -s 512 -vv ip6 or proto ipv6
tcpdump: listening on ppp0
1.2.3.4 > 5.6.7.8: 2002:ffff:f5f8::1 > 3ffe:ffff:100::1: icmp6: echo request
?(len 64, hlim 64) (DF) (ttl 64, id 0, len 124)
5.6.7.8 > 1.2.3.4: 3ffe:ffff:100::1 > 2002:ffff:f5f8::1: icmp6: echo reply (len
?64, hlim 61) (ttl 23, id 29887, len 124)
1.2.3.4 > 5.6.7.8: 2002:ffff:f5f8::1 > 3ffe:ffff:100::1: icmp6: echo request
?(len 64, hlim 64) (DF) (ttl 64, id 0, len 124)
5.6.7.8 > 1.2.3.4: 3ffe:ffff:100::1 > 2002:ffff:f5f8::1: icmp6: echo reply (len
?64, hlim 61) (ttl 23, id 29919, len 124)
       ______________________________________________________________

4.4 IPv6-ready programs(MIPv6Pu@{)

   beo檩wg]tFMIPv6Pu@{(AȺ/Ȥ)
   ѷ: [20]IPv6+Linux-Status-Distribution.
   Ϊˬd [21]
   http://www.bieringer.de/linux/IPv6/status/IPv6+Linux-status-apps.html
   @ǥiε{u: [22]IPv6 & Linux - HowTo - Part 3 [23]IPv6 &
   Linux - HowTo - Part 4.

4.5 IPv6-ready Ȥݵ{ (selection)

   QniU, z@~tΥݾ֦IPv6O. ǨҤlOuas
   F6bonepU.

  ˬdDNSIPv6a}ѪRO

   ]oX~Domain Name System (DNS)w_ɯ, ̤j
   FIPv6 a}AAAAѪRO. (sA6 uBIND9M󰪪
   )ˬdDNSIPv6a}ѪRO:
       ______________________________________________________________

# host -t AAAA www.join.uni-muenster.de
       ______________________________________________________________

   NoUG:
       ______________________________________________________________

www.join.uni-muenster.de. is an alias for ns.join.uni-muenster.de.
ns.join.uni-muenster.de. has AAAA address 3ffe:400:10:100:201:2ff:feb5:3806
       ______________________________________________________________

  IPv6-ready telnet clients

   IPv6-ready telnet Ȥ. 復i@²檺:
       ______________________________________________________________

$ telnet 3ffe:400:100::1 80
Trying 3ffe:400:100::1...
Connected to 3ffe:400:100::1.
Escape character is '^]'.
HEAD / HTTP/1.0
HTTP/1.1 200 OK
Date: Sun, 16 Dec 2001 16:07:21
GMT Server: Apache/2.0.28 (Unix)
Last-Modified: Wed, 01 Aug 2001 21:34:42 GMT
ETag: "3f02-a4d-b1b3e080"
Accept-Ranges: bytes
Content-Length: 2637
Connection: close
Content-Type: text/html; charset=ISO-8859-1
Connection closed by foreign host.
       ______________________________________________________________

   pGtelnetuX{"cannot resolve hostname", @~tΪIPv6٥E.

  openssh

   opensshwgIPv6, ݹ復ΥHUѼƶisĶ~ϥ:
     * --without-ipv4-default: the client tries an IPv6 connect first
       automatically and fall back to IPv4 if not working
     * --with-ipv4-default: default connection is IPv4, IPv6 connection
       must be force like following example shows:
       ______________________________________________________________

$ ssh -6 ::1
user@::1's password: ******
[user@ipv6host user]$
       ______________________________________________________________

   pGzssh -6 i, i@~tΪIPv6٥E,ssh
   ӧC.

  ssh.com

   L̪Ȥ/AȺݵ{OKO.

  IPv6-ready web y

   ثeIPv6web yC: [24]IPv6+Linux-status-apps.html#HTTP.

   oǬyjsbD:
     * pG proxy(Nz)uIPv4, IPv6ШDN|. k: ɯproxy
     * Automatic proxy settings (*.pac) IPv6PШDiAB
       z (written in Java-script and well hard coded in source like to
       be seen in Maxilla source code).

   @ǦIPv6a}i楿Tާ@, p: [25]
   http://[3ffe:400:100::1]/ 

   @Ӥp,ܦbSNzpU URL M y.

  URLs for testing

   IPv6̤KkOX: [26]http://www.kame.net/. pGtO
   , sOqLIPv6i檺, ʪ, sOqLIPv4i檺.

4.6 IPv6-ready server {

   ]A:sshd, httpd, telnetd,

5. ]winterfaces(ɭ)

5.1 P]

   @Ӹ`IsbP], iH復̶ipU:
     * Physically bounded, like eth0, tr0
     * Virtually existing, like ppp0, tun0, tap0, sit0, isdn0, ippp0

  Physically bounded(zjw)

   ]A Ethernet Ϊ Token-Ring ̤ݭnSOBz.

  Virtually bounded(jw)

   ݭnSO.

  IPv6-in-IPv4 tunnel interfaces

   ointerfaces(ɭ)]٧@sitx, sit O"Simple Internet Transition" 
   Yg. iHNIPv6ƾڥ]iIPv4, qLIPv4Ft@ӦaI.

   sit0 ϥΦbMΪtunnels W.

  5.1.2.2. PPP interfaces

   PPP interfaces qIPv6 enabled PPP daemon o IPv6 O.

  5.1.2.3. ISDN HDLC interfaces

   㦳IPʸ˪HDLC IPv6 OHg]tb֤߷.

  5.1.2.4. ISDN PPP interfaces

   ثe ISDN PPP interfaces (ippp) aren't IPv6 enabled by kernel.
   Also there are also no plans to do that because in kernel 2.5.+ they
   will be replaced by a more generic ppp interface layer.

  5.1.2.5. SLIP + PLIP

   ثeLike mentioned earlier, this interfaces don't support IPv6
   transport (sending is OK, but dispatching on receiving don't work).

  5.1.2.6. Ether-tap device

   Ether-tap devicesϥΦ۰ʪ]w.bϥΤeN "ethertap" Ҳձi.

  5.1.2.7. tun devices

   Nsڳ٨SչLO! Currently not tested by me.

  5.1.2.8. ATM

   01/2002: vanilla֤ߥثe, USAGI XiATM-IPv6

  5.1.2.9. 䥦

   ں|F?

5.2 Bringing interfaces up/down(]wɭ}/)

  ϥ "ip"

   ϥΤk:
       ______________________________________________________________

# ip link set dev <interface> up
# ip link set dev <interface> down
       ______________________________________________________________

   Ҥl:
       ______________________________________________________________

# ip link set dev eth0 up
# ip link set dev eth0 down
       ______________________________________________________________

  ϥ "ifconfig"

   ϥΤk:
       ______________________________________________________________

# /sbin/ifconfig <interface> up
# /sbin/ifconfig <interface> down
       ______________________________________________________________

   Ҥl:
       ______________________________________________________________

# /sbin/ifconfig eth0 up
# /sbin/ifconfig eth0 down
       ______________________________________________________________

6. ]wIPv6a}

6.1 CLeIPv6a}

  ϥ "ip"

   ϥΤk:
       ______________________________________________________________

# /sbin/ip -6 addr show dev <interface>
       ______________________________________________________________

   Ҥl:@RADa}
       ______________________________________________________________

# /sbin/ip -6 addr show dev eth0
2: eth0: <BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_ fast qlen 100
inet6 fe80::210:a4ff:fee3:9566/10 scope link
inet6 3ffe:ffff:0:f101::1/64 scope global
inet6 fec0:0:0:f101::1/64 scope site
       ______________________________________________________________

   ۰ʳ]wa}Msɶ:
       ______________________________________________________________

# /sbin/ip -6 addr show dev eth0
3: eth0: <BROADCAST,MULTICAST,PROMISC,UP> mtu 1500 qdisc pfifo_fast qlen
? 100
inet6 2002:d950:f5f8:f101:2e0:18ff:fe90:9205/64 scope global dynamic
valid_lft 16sec preferred_lft 6sec
inet6 3ffe:400:100:f101:2e0:18ff:fe90:9205/64 scope global dynamic
valid_lft 2591997sec preferred_lft 604797sec inet6 fe80::2e0:18ff:fe90:9205/10
? scope link
       ______________________________________________________________

  ϥ "ifconfig"

   ϥΤk:
       ______________________________________________________________

# /sbin/ifconfig <interface>
       ______________________________________________________________

   Ҥl, uCLIPv6a}:
       ______________________________________________________________

# /sbin/ifconfig eth0 |grep "inet6 addr:"
inet6 addr: fe80::210:a4ff:fee3:9566/10 Scope:Link
inet6 addr: 3ffe:ffff:0:f101::1/64 Scope:Global
inet6 addr: fec0:0:0:f101::1/64 Scope:Site
       ______________________________________________________________

6.2 W[@IPv6a}

   zPIPv4"IP ALIAS"(IPOW)ۦP

   ϥ "ip"

   ϥΤk:
       ______________________________________________________________

# /sbin/ip -6 addr add <ipv6address>/<prefixlength> dev <interface>
       ______________________________________________________________

   Ҥl:
       ______________________________________________________________

# /sbin/ip -6 addr add 3ffe:ffff:0:f101::1/64 dev eth0
       ______________________________________________________________

  ϥ "ifconfig"

   ϥΤk:
       ______________________________________________________________

# /sbin/ifconfig <interface> inet6 add <ipv6address>/<prefixlength>
       ______________________________________________________________

   Ҥl:
       ______________________________________________________________

# /sbin/ifconfig eth0 inet6 add 3ffe:ffff:0:f101::1/64
       ______________________________________________________________

6.3 IPv6a}

   oӤ`, nΥsba}, @Ǧ֤߷|]Fӱ
   .

  ϥ "ip"

   ϥΤk:
       ______________________________________________________________

# /sbin/ip -6 addr del <ipv6address>/<prefixlength> dev <interface>
       ______________________________________________________________

   Ҥl:
       ______________________________________________________________

# /sbin/ip -6 addr del 3ffe:ffff:0:f101::1/64 dev eth0
       ______________________________________________________________

  ϥ "ifconfig"

   ϥΤk:
       ______________________________________________________________

# /sbin/ifconfig <interface> inet6 del <ipv6address>/<prefixlength>
       ______________________________________________________________

   Ҥl:
       ______________________________________________________________

# /sbin/ifconfig eth0 inet6 del 3ffe:ffff:0:f101::1/64
       ______________________________________________________________

7. ]wIPv6

7.1 CL{

  ϥ"ip"

   ϥΤk:
       ______________________________________________________________

# /sbin/ip -6 route show [dev <device>]
       ______________________________________________________________

   Ҥl:
       ______________________________________________________________

# /sbin/ip -6 route show dev eth0
3ffe:ffff:0:f101::/64 proto kernel metric 256 mtu 1500 advmss 1440
fe80::/10             proto kernel metric 256 mtu 1500 advmss 1440
ff00::/8              proto kernel metric 256 mtu 1500 advmss 1440
default               proto kernel metric 256 mtu 1500 advmss 1440
       ______________________________________________________________

  ϥ "route"

   ϥΤk:
       ______________________________________________________________

# /sbin/route -A inet6
       ______________________________________________________________

   Ҥl:bP@ӬɭWPIPv6.
       ______________________________________________________________

# /sbin/ip -6 route show dev eth0
# /sbin/route -A inet6 |grep -w "eth0"
3ffe:ffff:0:f101 ::/64 :: UA  256 0 0 eth0 <- Interface route for global
? address
fe80::/10        ::       UA  256 0 0 eth0 <- Interface route for link-local
? address
ff00::/8         ::       UA  256 0 0 eth0 <- Interface route for all multicast
? addresses
::/0             ::       UDA 256 0 0 eth0 <- Automatic default route
       ______________________________________________________________

7.2 ]wIPv6ѳqLhD

  ϥ"ip"

   ϥΤk:
       ______________________________________________________________

# /sbin/ip -6 route add <ipv6network>/<prefixlength> via <ipv6address>
? [dev <device>]
       ______________________________________________________________

   Ҥl:
       ______________________________________________________________

# /sbin/ip -6 route add 2000::/3 via 3ffe:ffff:0:f101::1
       ______________________________________________________________

  ϥ "route"

   ϥΤk:
       ______________________________________________________________

# /sbin/route -A inet6 add <ipv6network>/<prefixlength> gw
? <ipv6address> [dev <device>]
       ______________________________________________________________

   Ҥl:eҦ(a}global addresses 2000::/3)}qLh
   D3ffe:ffff:0:f101::1
       ______________________________________________________________

# /sbin/route -A inet6 add 2000::/3 gw 3ffe:ffff:0:f101::1
       ______________________________________________________________

7.3  IPv6ѳqLhD

  ϥ"ip"

   ϥΤk:
       ______________________________________________________________

# /sbin/ip -6 route del <ipv6network>/<prefixlength> via <ipv6address>
? [dev <device>]
       ______________________________________________________________

   Ҥl:
       ______________________________________________________________

# /sbin/ip -6 route del 2000::/3 via 3ffe:ffff:0:f101::1
       ______________________________________________________________

  ϥ "route"

   ϥΤk:
       ______________________________________________________________

# /sbin/route -A inet6 del <network>/<prefixlength> [dev <device>]
       ______________________________________________________________

   Ҥl:eҦ(a}global addresses 2000::/3)}qLh
   D3ffe:ffff:0:f101::1
       ______________________________________________________________

# /sbin/route -A inet6 del 2000::/3 gw 3ffe:ffff:0:f101::1
       ______________________________________________________________

7.4 W[IPv6Ѧinterface(ɭ)

  ϥ "ip"

   ϥΤk:
       ______________________________________________________________

# /sbin/ip -6 route add <ipv6network>/<prefixlength> dev <device>
? metric 1
       ______________________________________________________________

   Ҥl:
       ______________________________________________________________

# /sbin/ip -6 route add 2000::/3 dev eth0 metric 1
       ______________________________________________________________

  ϥ "route"

   ϥΤk:
       ______________________________________________________________

# /sbin/route -A inet6 add <network>/<prefixlength> dev <device>
       ______________________________________________________________

   Ҥl:
       ______________________________________________________________

# /sbin/route -A inet6 add 2000::/3 dev eth0
       ______________________________________________________________

7.5 qinterface(ɭ)IPv6

  ϥ "ip"

   ϥΤk:
       ______________________________________________________________

# /sbin/ip -6 route del <ipv6network>/<prefixlength> dev <device>
? metric 1
       ______________________________________________________________

   Ҥl:
       ______________________________________________________________

# /sbin/ip -6 route del 2000::/3 dev eth0
       ______________________________________________________________

  ϥ "route"

   ϥΤk:
       ______________________________________________________________

# /sbin/route -A inet6 del <network>/<prefixlength> dev <device>
       ______________________________________________________________

   Ҥl:
       ______________________________________________________________

# /sbin/route -A inet6 del 2000::/3 dev eth0
       ______________________________________________________________

7.6 FAQ for IPv6 routes(IPv6 Ѫg`ݵ)

  Support of an IPv6 default route

   IPv6@ӤkOhierachical routing(Ÿ).],ŷֻ̤ݭn@
   Ӹ.

   bثe֤ߤ@ǰD:

  Clients (not routing any packet!)Sƾڥ]Q.

   Clinets iH]w@ӯʬ٪prefix "::/0"(e ::/0 ).
       ______________________________________________________________

# ip -6 route show | grep ^default
default via fe80::212:34ff:fe12:3450 dev eth0 proto kernel metric 1024 expires
? 29sec mtu 1500 advmss 1440
       ______________________________________________________________

  Routers on packet forwarding (ѥ]H)

   ثeDyLinux֤(̤֬O <=2.4.17) ʬٸ. ziH]w,
   boeƾڥ]¶|. ҥH,ثeʬٸѥiHQ]w e
   "2000::/3" global (a}). USAGI oӦۨ}n.

   `N: `NSa}z諸tѾʬٸ, M|hlmulticast
    site-local ǿqtX.

8. Neighbor Discovery(o{ھF)

   IPv6  Neighbor Discovery~ӤFIPv4  ARP (Address Resolution
   Protocola}ѪRĳ). ziHsoھFT. åBiHs/R.

   Neighbor detection(ھFi汴)

   ֤߭tdﱴ\ھFil. ziH "ip" ӫ䤤H.

8.1 Displaying neighbors using "ip" ("ip"ROCLھF)

   ϥΥHURO,ziHDھF]w.
       ______________________________________________________________

# ip -6 neigh show [dev <device>]
       ______________________________________________________________

   UҤlCLF@ӪھF,O@ӥiFѾ.
       ______________________________________________________________

# ip -6 neigh show
fe80::201:23ff:fe45:6789 dev eth0 lladdr 00:01:23:45:67:89 router nud reachable
       ______________________________________________________________

8.2  "ip" ھFCLiBz

  ΥHUROiH[J@entry(CL)
       ______________________________________________________________

# ip -6 neigh add <IPv6 address> lladdr <link-layer address> dev <device>
       ______________________________________________________________

   Ҥl:
       ______________________________________________________________

# ip -6 neigh add fec0::1 lladdr 02:01:02:03:04:05 dev eth0
       ______________________________________________________________

  ΥHUROiH@entry(CL)
       ______________________________________________________________

# ip -6 neigh del <IPv6 address> lladdr <link-layer address> dev <device>
       ______________________________________________________________

   Ҥl:
       ______________________________________________________________

# ip -6 neigh del fec0::1 lladdr 02:01:02:03:04:05 dev eth0
       ______________________________________________________________

  󰪶]w

   "ip"uD`jj, SUT.
       ______________________________________________________________

# ip -6 neigh help
Usage: ip neigh { add | del | change | replace } { ADDR [ lladdr LLADDR ]
          [ nud { permanent | noarp | stale | reachable } ]
          | proxy ADDR } [ dev DEV ]
       ip neigh {show|flush} [ to PREFIX ] [ dev DEV ] [ nud STATE ]
       ______________________________________________________________

   IIPv4CL, pGzDԲӥΪk, send @L.

9. Configuring IPv6-in-IPv4 tunnels(]wED)

9.1 ED

   NIPv6ƾڥ]ǿIPv4su@إi.

  Static point-to-point tunneling: 6bone (HII覡cتED)

   IPv6MIPv4EDwqb [27]RFC 2893 / Transition Mechanisms for IPv6
   Hosts and Routers

   Ʊ:
     * EDt@ݪIPv4a}ݬOstatic(RA).global unique and
       reachable from the foreign tunnel endpoint
     * zHg֦@global IPv6 prefix(e),ѷ 6bone registry.
     * @ӥiHNzIPv6 prefix Ѩ쥻aݪ~tunnel(q`ݭni
       滷ݾާ@)

  Automatically tunneling(EDާ@۰ʤ)

   @Ӹ`IPt@Ӹ`Iis,bo`IIPv4a}e,`IN|
   EDާ@۰ʤ.

  6to4-Tunneling(EDާ@)

   ϥΤ@²檺Tunneling(EDާ@) [28]RFC 3056 / Connection
   of IPv6 Domains via IPv4 Clouds. CӸ`Iglobal unique IPv4 (ߤ@
   a})iH 6to4 tunnel I(pGSIPv4𭭨qT).
   6to4-Tunneling(EDާ@)OMΩ@@ED, oӮרҥiH}w
   upstream and downstream (WũMU)EDާ@. P,@ӯSOIPv6
   a}|XoӸ`Iϥ6to4-TunnelP@ɪ IPv6 is.

  Generation of 6to4 prefix(6to4e).

   6to4 a}Uo˩wq:( [29]RFC 3056 / Connection of IPv6
   Domains via IPv4 Clouds)
       ______________________________________________________________

__________________________________________________________________
|   3+13   |    32     |    16  |            64 bits             |
+---+------+-----------+--------+--------------------------------+
|  FP+TLA  |  V4ADDR   | SLA ID |           Interface ID         |
|  0x2002  |           |        |                                |
+---+------+-----------+--------+--------------------------------+
       ______________________________________________________________

   FPOglobal addresses(a})e. TLAOtop level aggregator(̰h
   ) V4ADDROIPv4ߤ@a}((in hexadecimal notation). SLAOl
   o(65536 local subnets possible). oǫe󲣥ͮɪSLA "0000" O
   "::1" ät6to4 tunnel interface(ɭ).

  6to4 upstream tunneling(WŹEDާ@)

   `IDV̵oetIPv6ƾڥ]IPv4ƾڥ]. 6to4ED,ݳ]w
   @ӱMΪWŸѾoؾާ@. ѷ [30]NSayer's 6to4 information 
   ̪ѦCL. {b 6to4WŸѾiHϥanycast address 192.88.99.1
   ѫxѨĳ. ѷ [31]RFC 3068 / An Anycast Prefix for 6to4
   Relay Routers

  6to4 downstream tunneling(UŹEDާ@)

   The downstream (6bone -> your 6to4 enabled node) is not really fix and
   can vary from foreign host which originated packets were send to.
   There exist two possibilities: ٨Sץƾڥ]ӷTw, s
   bHUإi:
     * ~Dϥ6to4IPv6ƾڥ]o^z.
     * ~DqLyIPv6, ̾aʺAإߤ@automatic tunnel 
       NIPv6ƾڥ]o^z.

  Possible 6to4 traffic(6to4XسqTk)

     * q 6to4  6to4: q`b 6to4 enabled DiEDާ@
       tunneled between the
     * q 6to4  non-6to4: qLWŹEDާ@oeƾڥ].
     * q non-6to4  6to4: qLUŹEDާ@oeƾڥ].

9.2 CL{stunnels(ED)

  ϥ "ip"

   Ϊk:
       ______________________________________________________________

# /sbin/ip -6 tunnel show [<device>]
       ______________________________________________________________

   Ҥl:
       ______________________________________________________________

# /sbin/ip -6 tunnel show
sit0: ipv6/ip remote any local any ttl 64 nopmtudisc
sit1: ipv6/ip remote 195.226.187.50 local any ttl 64
       ______________________________________________________________

  ϥ "route"

   Ϊk:
       ______________________________________________________________

# /sbin/route -A inet6
       ______________________________________________________________

   Ҥl:uCLqsit0ɭqLED.
       ______________________________________________________________

# /sbin/route -A inet6 | grep "\Wsit0\W*$"
::/96      ::               U   256  2  0  sit0
2002::/16  ::               UA  256  0  0  sit0
2000::/3   ::193.113.58.75  UG    1  0  0  sit0
fe80::/10  ::               UA  256  0  0  sit0
ff00::/8   ::               UA  256  0  0  sit0
       ______________________________________________________________

9.3 Setup of point-to-point tunnel(]wIIED)

   3ؤkiH[J/point-to-point tunnel

  Add point-to-point tunnels ([J)

  ϥ "ip"

   ثewֶqtunnelsk

   ]wtunnel device (|߬Jҥ.TTLݫw, ]lȬO0)
       ______________________________________________________________

# /sbin/ip tunnel add < device > mode sit ttl < ttldefault > remote
? < ipv4addressofforeigntunnel > local < ipv4addresslocal >
       ______________________________________________________________

   Ϊk(oӨҤlTӹED)
       ______________________________________________________________

# /sbin/ip tunnel add sit1 mode sit ttl <ttldefault> remote
? <ipv4addressofforeigntunnel1> local <ipv4addresslocal>
# /sbin/ip set dev sit1 up
# /sbin/ip -6 route add <prefixtoroute1> dev sit1 metric 1
# /sbin/ip tunnel add sit2 mode sit ttl <ttldefault>
? <ipv4addressofforeigntunnel2> local <ipv4addresslocal>
# /sbin/ip set dev sit2 up
# /sbin/ip -6 route add <prefixtoroute2> dev sit2 metric 1
# /sbin/ip tunnel add sit3 mode sit ttl <ttldefault>
? <ipv4addressofforeigntunnel3> local <ipv4addresslocal>
# /sbin/ip set dev sit3 up
# /sbin/ip -6 route add <prefixtoroute3> dev sit3 metric 1
       ______________________________________________________________

  ϥ "ifconfig" and "route" (deprecated)

   ˤ@N Non Broadcast Multiple Access (NBMA)oh,]zpGuQ
   Ĥ@ӦSn䥦~B,I.u[@ӬOSD.
       ______________________________________________________________

# /sbin/ifconfig sit0 up
# /sbin/ifconfig sit0 tunnel <ipv4addressofforeigntunnel1>
# /sbin/ifconfig sit1 up
# /sbin/route -A inet6 add <prefixtoroute1> dev sit1
# /sbin/ifconfig sit0 tunnel <ipv4addressofforeigntunnel2>
# /sbin/ifconfig sit2 up
# /sbin/route -A inet6 add <prefixtoroute2> dev sit2
# /sbin/ifconfig sit0 tunnel <ipv4addressofforeigntunnel3>
# /sbin/ifconfig sit3 up
# /sbin/route -A inet6 add <prefixtoroute3> dev sit3
       ______________________________________________________________

   ĵi:o˰ܤjI, ]HiHqInternetaI
   "automatic tunneling"Pzis.ڤ˱zo˰.

  ϥ "route" only

   MiH]wtunnelϥ Non Broadcast Multiple Access (NBMA)Dha}s
   覡 oؤkiH@N[Jܦhtunnel. ϥΤk (Ttunnel
   Ҥl):
       ______________________________________________________________

# /sbin/ifconfig sit0 up
# /sbin/route -A inet6 add <prefixtoroute1> gw
? ::<ipv4addressofforeigntunnel1> dev sit0
# /sbin/route -A inet6 add <prefixtoroute2> gw
? ::<ipv4addressofforeigntunnel2> dev sit0
# /sbin/route -A inet6 add <prefixtoroute3> gw
? ::<ipv4addressofforeigntunnel3> dev sit0
       ______________________________________________________________

   ĵi:o˰ܤjI, ]HiHqInternetaI
   "automatic tunneling"Pzis.ڤ˱zo˰.

  Removing point-to-point tunnels(ED)

   u覡g`ϥ,iHscripts/s]wIPv6tunnels

  ϥ "ip"

   ED]ƪΪk:
       ______________________________________________________________

# /sbin/ip tunnel del <device>
       ______________________________________________________________

   Usage (Ttunnel򥻨Ҥl):
       ______________________________________________________________

# /sbin/ip -6 route del <prefixtoroute1> dev sit1
# /sbin/ip set sit1 down
# /sbin/ip tunnel del sit1
# /sbin/ip -6 route del <prefixtoroute2> dev sit2
# /sbin/ip set sit2 down
# /sbin/ip tunnel del sit2
# /sbin/ip -6 route del <prefixtoroute3> dev sit3
# /sbin/ip set sit3 down
# /sbin/ip tunnel del sit3
       ______________________________________________________________

  ϥ "ifconfig" and "route" (]򦳽ҥH٦o)

   Usage (Ttunnel򥻨Ҥl):zݤϦV, ]NOإߪݥ
   .
       ______________________________________________________________

# /sbin/route -A inet6 del <prefixtoroute3> dev sit3
# /sbin/ifconfig sit3 down
# /sbin/route -A inet6 del <prefixtoroute2> dev sit2
# /sbin/ifconfig sit2 down
# /sbin/route -A inet6 add <prefixtoroute1> dev sit1
# /sbin/ifconfig sit1 down
# /sbin/ifconfig sit0 down
       ______________________________________________________________

  ϥ "route"

   IPv6. ϥΤk (Ttunnel򥻨Ҥl):
       ______________________________________________________________

# /sbin/route -A inet6 del <prefixtoroute1> gw
? ::<ipv4addressofforeigntunnel1> dev sit0
# /sbin/route -A inet6 del <prefixtoroute2> gw
? ::<ipv4addressofforeigntunnel2> dev sit0
# /sbin/route -A inet6 del <prefixtoroute3> gw
? ::<ipv4addressofforeigntunnel3> dev sit0
# /sbin/ifconfig sit0 down
       ______________________________________________________________

  Numbered point-to-point tunnels(IIED)

   ɻݭn]w@point-to-point ED MIPv6a}, kuĤ@
   (ifconfig+route - deprecated)MĤT(ip+route)i. boǮרҤz
   iH[J@IPv6a} tunnel interface(ΩEDާ@Ӭɭ)

9.4 Setup of 6to4 tunnels (]w IPv6IPv4ED)

   `N:6to4 tunnels ثeʥFvanilla 2.2.xtC֤ߪ. P˭n`N
   O6to4a}e׬O16 Ҧ 6to4 DbۦPĤGh.

  Add a 6to4 tunnel(W[@ 6to4 ED)

   , zݥΥiѪaIPv4 global a}ӭp 6to4 e. (pGz
   DSiѪaIPv4 global a}, bhDtNATa}] in
   special cases NAT on border gateways is possible):

   wzIPv4a}:
       ______________________________________________________________

1.2.3.4
       ______________________________________________________________

   ͪ6to4 prefix(e) :
       ______________________________________________________________

2002:0102:0304::
       ______________________________________________________________

   a 6to4 hDݭnu]w"::1", ]z6to4a}N:
       ______________________________________________________________

2002:0102:0304::1
       ______________________________________________________________

   HU̾ګwIPv4a}6to4a}:
       ______________________________________________________________

ipv4="1.2.3.4"; printf "2002:%02x%02x:%02x%02x::1" `echo $ipv4 | tr "." " "`
       ______________________________________________________________

   ثeؤkiH]w6to4ED

  ϥ "ip" MMΪED].

   oOQ˪k. Ыؤ@ӹED].
       ______________________________________________________________

# /sbin/ip tunnel add tun6to4 mode sit remote any local <localipv4address>
       ______________________________________________________________

   Bring interface up(E)
       ______________________________________________________________

# /sbin/ip link set dev tun6to4 up
       ______________________________________________________________

   Na6to4a}[Jɭ.(`N:eץݬO16)
       ______________________________________________________________

# /sbin/ip -6 addr add <local6to4address>/16 dev tun6to4
       ______________________________________________________________

   [J@ӥall-6to4-routers IPv4 anycast a}@Fglobal IPv6 
   (ʬ٪)
       ______________________________________________________________

# /sbin/ip -6 route add 2000::/3 via ::192.88.99.1 dev tun6to4 metric 1
       ______________________________________________________________

  ϥ "ifconfig" and "route" and generic tunnel device "sit0" (Q˪k)

   QˬO]tunnel device sit0 SOL{ΦbCӳ]ƤW.

   Bring generic tunnel interface sit0 up(Nɭsit0E)
       ______________________________________________________________

# /sbin/ifconfig sit0 up
       ______________________________________________________________

   Add local 6to4 address to interface(VɭK[a 6to4 a})
       ______________________________________________________________

# /sbin/ifconfig sit0 add <local6to4address>/16
       ______________________________________________________________

   [J@ӥall-6to4-relays IPv4 anycasta}@Fglobal IPv6 
   (ʬ٪)
       ______________________________________________________________

# /sbin/route -A inet6 add 2000::/3 gw ::192.88.99.1 dev sit0
       ______________________________________________________________

  Remove a 6to4 tunnel( 6to4 ED)

  ϥ "ip" and a MιED]

   qdedicated tunnel device Ҧ
       ______________________________________________________________

# /sbin/ip -6 route flush dev tun6to4
       ______________________________________________________________

   Shut down interface(ɭ)
       ______________________________________________________________

# /sbin/ip link set dev tun6to4 down
       ______________________________________________________________

   Remove created tunnel device(ED])
       ______________________________________________________________

# /sbin/ip tunnel del tun6to4
       ______________________________________________________________

  ϥ "ifconfig" and "route" and generic tunnel device "sit0" (Q˪k)

    6to4 ɭWED
       ______________________________________________________________

# /sbin/route -A inet6 del 2000::/3 gw ::192.88.99.1 dev sit0
       ______________________________________________________________

   Remove local 6to4 address to interface(qɭa 6to4 a})
       ______________________________________________________________

# /sbin/ifconfig sit0 del <local6to4address>/16
       ______________________________________________________________

   ó generic tunnel device (, i०٦bϥη)
       ______________________________________________________________

# /sbin/ifconfig sit0 down
       ______________________________________________________________

10. ]w IPv4-in-IPv6 ED

   o̪e|bNӲK[,ثeoعEDBb綥q.ѷ: [32]RFC 2473 /
   Generic Packet Tunneling in IPv6 Specification

11. ֤߳]w in /proc-filesystem

11.1 ˶iJ /proc-filesystem

  ϥ "cat"M "echo"

   ϥ "cat"M "echo" OiJ /proc-filesystem²k. ݨƤU
   Xӱ:

     * b֤ߤ} /proc-filesystem , bsĶɭԥiHqL
       CONFIG_PROC_FS=y .
     * /proc-filesystem wgit,iHΥHUk:
       ______________________________________________________________

# mount | grep "type proc"
none on /proc type proc (rw)
       ______________________________________________________________

     * zݪD/proc-filesystem Uؾާ@.

   q`/proc/sys/* Oig, 䥦OuŪΥuѬT.

  o@ӭ

   iHϥ "cat" o@ӭ.
       ______________________________________________________________

# cat /proc/sys/net/ipv6/conf/all/forwarding
0
       ______________________________________________________________

  ]w@ӭ

   iHϥ "echo" ]w@ӭ.
       ______________________________________________________________

# echo "1" >/proc/sys/net/ipv6/conf/all/forwarding
       ______________________________________________________________

  ϥ "sysctl"

   ϥ "sysctl" ]w֤߬Oey檺k, z]. pG/proc-filesystem
   Si, zuiHX/proc/sys/*

   "sysctl"{b"procps"w˥].(Red Hat Linux systems)

   sysctl-interface ݭnb֤ߤiE, bsĶɭԥiHqLHUﶵ
   :
       ______________________________________________________________

CONFIG_SYSCTL=y
       ______________________________________________________________

  ]w@ӭ

   A new value can be set (if entry is writable):
       ______________________________________________________________

# sysctl -w net.ipv6.conf.all.forwarding=1
net.ipv6.conf.all.forwarding = 1
       ______________________________________________________________

   b "=" 䤣X{spacesŸ,]๳Uˤ@]whӭ:
       ______________________________________________________________

# sysctl -w net.ipv4.ip_local_port_range="32768 61000"
net.ipv4.ip_local_port_range = 32768 61000
       ______________________________________________________________

  t~

   sysctlϥ "/" N "." ԲӸTЬsysctlmanpage

   :ֳtd]wT,iHpXϥαa"-a"grep.

11.2 /proc-filesystems ̪ƭ.

     * BOOLEAN: simple a "0" (false) or a "1" (true)
     * INTEGER: an integer value, can be unsigned, too
     * more sophisticated lines with several values: sometimes a header
       line is displayed also, if not, have a look into the kernel source
       to retrieve information about the meaning of each value...

11.3 Entries in /proc/sys/net/ipv6/

  conf/default/*

   Change the interface-specific default settings

  conf/all/*

   ܩҦ interface-specific ]w.

   F: "conf/all/forwarding" Ptq.

  conf/all/forwarding

     * Type: BOOLEAN

   bӬɭiglobal IPv6 forwarding (ƾڥ]H.)

   IPv6 zW@ӳ]ƪ forwarding (ƾڥ]H). forwarding
   IPv6-netfilter . Ȭ"0" ƾڥ]HOQ,ƾڥ]
   |}U۪ɭ(]Az/)p tunnel. Ȭ"1" ƾڥ]H
   OQ}.

  conf/interface/*

   ܳӬɭ]w. ̾local forwarding O enabled  not.

  accept_ra

     * Type: BOOLEAN
     * q{: enabled if local forwarding is disabled. disabled if local
       forwarding is enabled.

   IPv6Ѽsi.åBھڱo쪺H۰ʳ]w.

  accept_redirectsc

     * Type: BOOLEAN
     * Functional default: enabled if local forwarding is disabled.
       disabled if local forwarding is enabled.

   IPv6ѾwV.

  autoconf

     * Type: BOOLEAN
     * Default: TRUE

   ]wasa}ϥL2wa}. ̾ڬɭL2-MAC address۰ʲͤ@
   a}p:"fe80::201:23ff:fe45:6789"

  dad_transmits

     * Type: INTEGER
     * Default: 1

   oeƦa}屴`.

  forwarding

     * Type: BOOLEAN
     * Default: FALSE if global forwarding is disabled (default),
       otherwise TRUE

   ]wD/Ѫinterface-specificʧ@.

   `N:˩Ҧinterface(ɭ)ϥάۦP]w.VXѾ/DQkuO
   o.
     * Value FALSE: By default, Host behaviour is assumed. This means:
          + IsRouter нoSbNeighbour Advertisements.
          + ݭnɭԴNoeѽШD.
          + pGaccept_raOTRUE (default), Ѽsi.
          + pGaccept_redirects O TRUE (default), wV.
     * Value TRUE: pGƥaforwarding(H),Ѿʧ@w.oMW
       pۤ:
          + IsRouter нosbNeighbour Advertisements.
          + oeѽШD.
          + Ѽsi.
          + wV.

  hop_limit

     * Type: INTEGER
     * Default: 64

   ʬhop.

  mtu

     * Type: INTEGER
     * Default: 1280 (IPv6 nD̤p)

   ʬٳ̤jǿ椸.

  router_solicitation_delay

     * Type: INTEGER
     * Default: 1

   boeѽШDeɭݮɶ().

  router_solicitation_interval

     * Type: INTEGER
     * Default: 4

   bCӸѽШDݮɶ().

  router_solicitations

     * Type: INTEGER
     * Default: 3

   wSѪpUoeШDӼ.

  neigh/default/*

   Change default settings for neighbor detection and some special global
   interval and threshold values:

  gc_thresh1

     * Type: INTEGER
     * Default: 128

   More to be filled.

  gc_thresh2

     * Type: INTEGER
     * Default: 512

   More to be filled.

  gc_thresh3

     * Type: INTEGER
     * Default: 1024

   ھFCLjpո`.

   pGz\hɭ,θѪ{ϱ` յۼWjƭ. Or if a running Zebra
   (routing daemon) reports:
       ______________________________________________________________

ZEBRA: netlink-listen error: No buffer space available, type=RTM_NEWROUTE(24),
seq=426, pid=0
       ______________________________________________________________

  gc_interval

     * Type: INTEGER
     * Default: 30

   More to be filled.

  neigh/interface/*

   Change special settings per interface for neighbor detection.

  anycast_delay

     * Type: INTEGER
     * Default: 100

   More to be filled.

  gc_stale_time

     * Type: INTEGER
     * Default: 60

   More to be filled.

  proxy_qlen

     * Type: INTEGER
     * Default: 64

   More to be filled.

  unres_qlen

     * Type: INTEGER
     * Default: 3

   More to be filled.

  app_solicit

     * Type: INTEGER
     * Default: 0

   More to be filled.

  locktime

     * Type: INTEGER
     * Default: 0

   More to be filled.

  retrans_time

     * Type: INTEGER
     * Default: 100

   More to be filled.

  base_reachable_time

     * Type: INTEGER
     * Default: 30

   More to be filled.

  mcast_solicit

     * Type: INTEGER
     * Default: 3

   More to be filled.

  ucast_solicit

     * Type: INTEGER
     * Default: 3

   More to be filled.

  delay_first_probe_time

     * Type: INTEGER
     * Default: 5

   More to be filled.

  proxy_delay

     * Type: INTEGER
     * Default: 80

   More to be filled.

  route/*

   ]wglobal()

  flush

   Removed in newer kernel releases - more to be filled.

  gc_interval

     * Type: INTEGER
     * Default: 30

   More to be filled.

  gc_thresh

     * Type: INTEGER
     * Default: 1024

   More to be filled.

  mtu_expires

     * Type: INTEGER
     * Default: 600

   More to be filled.

  gc_elasticity

     * Type: INTEGER
     * Default: 0

   More to be filled.

  gc_min_interval

     * Type: INTEGER
     * Default: 5

   More to be filled.

  gc_timeout

     * Type: INTEGER
     * Default: 60

   More to be filled.

  min_adv_mss

     * Type: INTEGER
     * Default: 12

   More to be filled.

  max_size

     * Type: INTEGER
     * Default: 4096

   More to be filled.

11.4 IPv6-related entries in /proc/sys/net/ipv4/

   ثe(IPv4֤߼Ҳ),@Ƕ}]iHIPv6Ҩϥ.

  ip_*

  ip_local_port_range

   ]iHIPv6ϥ.

  tcp_*

   ]iHIPv6ϥ.

  ICMP_*

   ରIPv6ϥ. E ICMPv6 v rate limting (O,]
   m ICMPv6 ɪO) netfilter-v6 rules must be used.

  䥦

   D, ରIPv6ϥΧa.

11.5 IPv6-related entries in /proc/net/

   oӦaOuŪ, zqL "sysctl" oT,iHϥ "cat"

  if_inet6

   C@a}]thӭ.

   oIPv6a}OίS榡CL,ҤluCL¶interface(ɭ)tqbU
   
       ______________________________________________________________

# cat /proc/net/if_inet6
00000000000000000000000000000001 01 80 10 80 lo
+------------------------------+ ++ ++ ++ ++ ++
|                                |  |  |  |  |
1                                2  3  4  5  6
       ______________________________________________________________

   1. a}32Ӥ]t":"QiCL.

   2. s]Ƽƭ(interface index)ϥΤQiCL.

   3. e󪺪רϥΤQiCL.

   4. Scope value (see kernel source " include/net/ipv6.h" and
   "net/ipv6/addrconf.c" for more)

   5. Interface flags (see "include/linux/rtnetlink.h" and
   "net/ipv6/addrconf.c" for more)

   6. ]ƦW.

  ipv6_route

   C@a}]thӭ.

   oIPv6a}OίS榡CL,ҤluCL¶interface(ɭ)tqbU
   
       ______________________________________________________________

# cat /proc/net/ipv6_route
00000000000000000000000000000000 00 00000000000000000000000000000000 00
+------------------------------+ ++ +------------------------------+ ++
|                                |  |                                |
1                                2  3                                4
? 00000000000000000000000000000000 ffffffff 00000001 00000001 00200200 lo
? +------------------------------+ +------+ +------+ +------+ +------+ ++
? |                                |        |        |        |        |
? 5                                6        7        8        9        10
       ______________________________________________________________

   1. IPv6ؼк32Ӥ]t":"QiCL.

   2. IPv6prefix(e)רϥΤQiCL.

   3. IPv6ӷ32Ӥ]t":"QiCL.

   4. IPv6ӷprefix(e)רϥΤQiCL.

   5. IPv6U@hop(DI)32Ӥ]t":"QiCL.

   6. Metric in hexadecimal

   7. Reference counter

   8. Use counter

   9. Flags(нo)

   10.Device name

  sockstat6

   C@a}]thӭ.

   IPv6 socketsέp:
       ______________________________________________________________

# cat /proc/net/sockstat6
TCP6: inuse 7
UDP6: inuse 2
RAW6: inuse 1
FRAG6: inuse 0 memory 0
       ______________________________________________________________


 tcp6
To be filled.

 udp6
To be filled.

 igmp6
To be filled.

 raw6
To be filled.

 ip6_flowlabel
To be filled.

 rt6_stats
To be filled.

 snmp6

Type: One line per SNMP description and value

SNMP statistics, can be retrieved via SNMP server and related MIB table by netw
ork management software.

 ip6_tables_names
Available netfilter6 tables

12. Netlink-Interface to kernel

   eݼW[... o譱ڨSg...

13.  debugging

13.1 Server socket binding(jw)

13.2 Using "netstat" for server socket binding check

   ϥ "netstat" OooǫH|.

   ϥοﶵ: -nlptu

   Ҥl:
       ______________________________________________________________

# netstat -nlptu
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address           Foreign Address         State
? PID/Program name
tcp        0      0 0.0.0.0:32768           0.0.0.0:*               LISTEN
? 1258/rpc.statd
tcp        0      0 0.0.0.0:32769           0.0.0.0:*               LISTEN
? 1502/rpc.mountd
tcp        0      0 0.0.0.0:515             0.0.0.0:*               LISTEN
? 22433/lpd Waiting
tcp        0      0 1.2.3.1:139             0.0.0.0:*               LISTEN
? 1746/smbd
tcp        0      0 0.0.0.0:111             0.0.0.0:*               LISTEN
? 1230/portmap
tcp        0      0 0.0.0.0:6000            0.0.0.0:*               LISTEN
? 3551/X
tcp        0      0 1.2.3.1:8081            0.0.0.0:*               LISTEN
? 18735/junkbuster
tcp        0      0 1.2.3.1:3128            0.0.0.0:*               LISTEN
? 18822/(squid)
tcp        0      0 127.0.0.1:953           0.0.0.0:*               LISTEN
? 30734/named
tcp        0      0 ::ffff:1.2.3.1:993      :::*                    LISTEN
? 6742/xinetd-ipv6
tcp        0      0 :::13                   :::*                    LISTEN
? 6742/xinetd-ipv6
tcp        0      0 ::ffff:1.2.3.1:143      :::*                    LISTEN
? 6742/xinetd-ipv6
tcp        0      0 :::53                   :::*                    LISTEN
? 30734/named
tcp        0      0 :::22                   :::*                    LISTEN
? 1410/sshd
tcp        0      0 :::6010                 :::*                    LISTEN
? 13237/sshd
udp        0      0 0.0.0.0:32768           0.0.0.0:*
? 1258/rpc.statd
udp        0      0 0.0.0.0:2049            0.0.0.0:*
? -
udp        0      0 0.0.0.0:32770           0.0.0.0:*
? 1502/rpc.mountd
udp        0      0 0.0.0.0:32771           0.0.0.0:*
? -
udp        0      0 1.2.3.1:137             0.0.0.0:*
? 1751/nmbd
udp        0      0 0.0.0.0:137             0.0.0.0:*
? 1751/nmbd
udp        0      0 1.2.3.1:138             0.0.0.0:*
? 1751/nmbd
udp        0      0 0.0.0.0:138             0.0.0.0:*
? 1751/nmbd
udp        0      0 0.0.0.0:33044           0.0.0.0:*
? 30734/named
udp        0      0 1.2.3.1:53              0.0.0.0:*
? 30734/named
udp        0      0 127.0.0.1:53            0.0.0.0:*
? 30734/named
udp        0      0 0.0.0.0:67              0.0.0.0:*
? 1530/dhcpd
udp        0      0 0.0.0.0:67              0.0.0.0:*
? 1530/dhcpd
udp        0      0 0.0.0.0:32858           0.0.0.0:*
? 18822/(squid)
udp        0      0 0.0.0.0:4827            0.0.0.0:*
? 18822/(squid)
udp        0      0 0.0.0.0:111             0.0.0.0:*
? 1230/portmap
udp        0      0 :::53                   :::*
? 30734/named
       ______________________________________________________________

13.3 Examples for tcpdump packet dumps

   UO@ǳQ򪺼ƾڥ] ...U@ڷ|hˤ@I...:

  Router discovery(ѵo{)

   Router advertisement
       ______________________________________________________________

15:43:49.484751 fe80::212:34ff:fe12:3450 > ff02::1: icmp6: router
? advertisement(chlim=64, router_ltime=30, reachable_time=0,
? retrans_time=0)(prefix info: AR valid_ltime=30, preffered_ltime=20,
? prefix=2002:0102:0304:1::/64)(prefix info: LAR valid_ltime=2592000,
? preffered_ltime=604800, prefix=3ffe:ffff:0:1::/64)(src lladdr:
? 0:12:34:12:34:50) (len 88, hlim 255)
       ______________________________________________________________

   Ѿϥlink-local a} "fe80::212:34ff:fe12:3450" oesi
   all-node-on-link multicast address "ff02::1"
   bۤv layer 2 MAC a} "0:12:34:12:34:50",
   ]tӫe2002:0102:0304:1::/64" (lifetime 30 s) M
   "3ffe:ffff:0:1::/64" (lifetime 2592000 s)

  Router solicitation(ѽШD)
       ______________________________________________________________

15:44:21.152646 fe80::212:34ff:fe12:3456 > ff02::2: icmp6: router solicitation
? (src lladdr: 0:12:34:12:34:56) (len 16, hlim 255)
       ______________________________________________________________

   ֦link-locala} "fe80::212:34ff:fe12:3456" M layer 2 MAC a}
   "0:12:34:12:34:56"`IMbu Ѿ. ҥHoe@ӸѽШDҦ
   buѾa}multicast address "ff02::2"

  Neighbor discovery(o{ھF)

  Neighbor discovery solicitation for duplicate address detection(ھF
   "ƪa}" iˬd)

   Hۼƾڥ]qlayer 2 MAC a} "0:12:34:12:34:56" oeXhPˬdO_
   `IάۦPa}oeƾڥ]. Following packets are sent by a node
   with layer 2 MAC address "0:12:34:12:34:56" during autoconfiguration
   to check whether a potential address is already used by another node
   on the link sending this to the solicited-node link-local multicast
   address

     * `INϥΦa}"fe80::212:34ff:fe12:3456"@asˬdƪ
       a}.
       ______________________________________________________________

                       15:44:17.712338 :: > ff02::1:ff12:3456: icmp6: neighbor
sol: who has
                       ? fe80::212:34ff:fe12:3456(src lladdr: 0:12:34:12:34:56)
 (len 32, hlim 255)
       ______________________________________________________________

     * `INϥΦa}"2002:0102:0304:1:212:34ff:fe12:3456"@global(
       )sˬdƪa}(oWsi).
       ______________________________________________________________

                      15:44:21.905596 :: > ff02::1:ff12:3456: icmp6: neighbor s
ol: who has
                      ? 2002:0102:0304:1:212:34ff:fe12:3456(src lladdr: 0:12:34
:12:34:56) (len 32,
                      ? hlim 255)
       ______________________________________________________________

     * `INϥΦa}"3ffe:ffff:0:1:212:34ff:fe12:3456" @global(
       )sˬdƪa}(oWsi).
       ______________________________________________________________

                      15:44:22.304028 :: > ff02::1:ff12:3456: icmp6: neighbor s
ol: who has
                      ? 3ffe:ffff:0:1:212:34ff:fe12:3456(src lladdr: 0:12:34:12
:34:56) (len 32, hlim
                      ? 255)
       ______________________________________________________________

  Neighbor discovery solicitation for looking for host or gateway(d@xD
  ιhD)

     * `IQnoeƾڥ]"3ffe:ffff:0:1::10",OSlayer 2 MAC oe
       a},OoeШD.
       ______________________________________________________________

                      13:07:47.664538 2002:0102:0304:1:2e0:18ff:fe90:9205 > ff0
2::1:ff00:10: icmp6:
                      ? neighbor sol: who has 3ffe:ffff:0:1::10(src lladdr: 0:e
0:18:90:92:5) (len 32,
                      ? hlim 255)
       ______________________________________________________________

     * `I{bd"fe80::10"
       ______________________________________________________________

                       13:11:20.870070 fe80::2e0:18ff:fe90:9205 > ff02::1:ff00:
10: icmp6: neighbor
                       ? sol: who has fe80::10(src lladdr: 0:e0:18:90:92:5) (le
n 32, hlim 255)
       ______________________________________________________________

14. Support for persistent IPv6 configuration in Linux distributions(bPo
檩]wIPv6)

14.1 Red Hat Linux and "clones"(pUM̥SXf)

   ۱qڶ}lg [33]IPv6 & Linux - HowTo.ڥ]w@ӫ[IPv6tm,]
   t: host-only, router-only, dual-homed-host, router with second stub
   network, normal tunnels, 6to4 tunnels M䥦.{bڼgF@
   configuration and script files oscriptۤvHOWTO:

   [34]IPv6-HOWTO/scripts/current. BO, Red Hat Linux q 7.1 }lN
   ]tFoscript.hFPekka SavolaU.

14.2 Mandrake(ҼwܧJ)Linux

   q8.0]]tF IPv6-enabled initscript packageOIp
   D("ifconfig" misses "inet6" before "add").

  IPv6]w scripts 

   script libraryӦsb:
       ______________________________________________________________

                     /etc/sysconfig/network-scripts/network-functions-ipv6
       ______________________________________________________________

   ۰ʴ:
       ______________________________________________________________

                     # test -f /etc/sysconfig/network-scripts/network-functions
-ipv6 && echo "Main
                     ? IPv6 script library exists"
       ______________________________________________________________

   libraryܭn, 󰪪]tFh\.ziHqLo˵:
       ______________________________________________________________

                     # source /etc/sysconfig/network-scripts/network-functions-
ipv6 &&
                     ? getversion_ipv6_functions
                     20011124
       ______________________________________________________________

  Short hint for enabling IPv6 on current RHL 7.1, 7.2, 7.3, ...(@Ǥp)

     * ˵IPv6ҲլO_wgit.
       ______________________________________________________________

                    # modprobe -c | grep net-pf-10
                    alias net-pf-10 off
       ______________________________________________________________

     * pGO"off" b /etc/sysconfig/network [JIPv6.
       ______________________________________________________________

                    NETWORKING_IPV6=yes
       ______________________________________________________________

     * sl:
       ______________________________________________________________

                    # service network restart
       ______________________________________________________________

     * IPv6ҲӱiӤF:
       ______________________________________________________________

                    # modprobe -c | grep ipv6
                    alias net-pf-10 ipv6
       ______________________________________________________________

   pGzѸѼsiautoconfiguration |۰ʬz]w, hTЬ
   /usr/share/doc/initscripts-$version/sysconfig.txt.

14.3 SuSE(ĬA)Linux

   7.x HW, IPv6. b/etc/rc.config ̦hT. ]P]w
   kMscriptsc, ҥHNRed Hat Linux kӷhL.

  ԺɪTЬ:

   [35]How to setup 6to4 IPv6 with SuSE 7.3

14.4 Debian(}w)Linux

   ѷ: [36]IPv6 on Debian Linux

15. 

15.1 ϥ netfilter6

   netfilter6u2.4HW֤.2.2֤߱zu41ĳL
   oIPv6-in-IPv4.

   ĵi: ӨҤl˳]wäuaO@z@~t.

15.2 hT:

     * [37]Netfilter project
     * [38]maillist archive of netfilter users
     * [39]maillist archive of netfilter developers
     * [40]Unofficial status informations

15.3 ǳ

   U̷s֤:
   [41]http://www.kernel.org/

   U̷siptables:

   tar:
   [42]http://www.netfilter.org/

   Source RPM for rebuild of binary (for RedHat systems):
   [43]ftp://ftp.redhat.com/redhat/linux/rawhide/SRPMS/SRPMS/

  Ѷ}NX

   Ѷ}NXPW
       ______________________________________________________________

        # tar z|jxf kernel-version.tar.gz|bz2
        # mv linux linux-version-iptables-version+IPv6
       ______________________________________________________________

   Ѷ} iptables NX
       ______________________________________________________________

         # tar z|jxf iptables-version.tar.gz|bz2
       ______________________________________________________________

   Apply pending patches
       ______________________________________________________________

         # make pending-patches KERNEL_DIR=/path/to/src/linux-version-iptables-
version/
       ______________________________________________________________

   Apply additional IPv6 related patches (still not in the vanilla kernel
   included)
       ______________________________________________________________

         # make patch-o-matic KERNEL_DIR=/path/to/src/linux-version-iptables-ve
rsion/
       ______________________________________________________________

   bU椤^yes:
     * ah-esp.patch
     * masq-dynaddr.patch (only needed for systems with dynamic IP
       assigned WAN connections like PPP or PPPoE)
     * ipv6-agr.patch.ipv6
     * ipv6-ports.patch.ipv6
     * LOG.patch.ipv6
     * REJECT.patch.ipv6

   ˵IPv6Ai:
       ______________________________________________________________

         # make print-extensions
         Extensions found: IPv6:owner IPv6:limit IPv6:mac IPv6:multiport
       ______________________________________________________________

  Configure, build and install new kernel(]w,sĶ,w˷s֤)

   iJNXؿ:
       ______________________________________________________________

        # cd /path/to/src/linux-version-iptables-version/
       ______________________________________________________________

   Makefile
       ______________________________________________________________

         - EXTRAVERSION =
         + EXTRAVERSION = -iptables-version+IPv6-try
       ______________________________________________________________

   B]w:Run configure, enable IPv6 related
       ______________________________________________________________

         Code maturity level options
                  Prompt for development and/or incomplete code/drivers : yes
            Networking options
                  Network packet filtering: yes
                  The IPv6 protocol: module
                       IPv6: Netfilter Configuration
                             IP6 tables support: module
                             All new options like following:
                                   limit match support: module
                                   MAC address match support: module
                                   Multiple port match support: module
                                   Owner match support: module
                                   netfilter MARK match support: module
                                   Aggregated address check: module
                                   Packet filtering: module
                                        REJECT target support: module
                                        LOG target support: module
                                   Packet mangling: module
                                   MARK target support: module
       ______________________________________________________________

   btΪ䥦譱iק.

  Rebuild and install binaries of iptables (y@ӷsiptables)

   Twz֤߷NXsb: /usr/src/linux/

   Rename older directory
       ______________________________________________________________

         # mv /usr/src/linux /usr/src/linux.old
       ______________________________________________________________

   Create a new softlink
       ______________________________________________________________

         # ln /path/to/src/linux-version-iptables-version /usr/src/linux
       ______________________________________________________________

   Rebuild SRPMS
       ______________________________________________________________

         # rpm --rebuild /path/to/SRPMS/iptables-version-release.src.rpm
       ______________________________________________________________

   Install new iptables packages (iptables + iptables-ipv6) w˷s
   iptables
     * On RH 7.1 systems, q`wg@ӧ󦭪, therefore use
       "freshen"
       ______________________________________________________________

         # rpm -Fhv /path/to/RPMS/cpu/iptables*-version-release.cpu.rpm
       ______________________________________________________________

     * pGSw,zN˦ۨӧa:
       ______________________________________________________________

         # rpm -ihv /path/to/RPMS/cpu/iptables*-version-release.cpu.rpm
       ______________________________________________________________

     * pGbRH6.2Ww,n[W"--nodep":
       ______________________________________________________________

         # rpm -ihv --nodep /path/to/RPMS/cpu/iptables*-version-release.cpu.rpm

       ______________________________________________________________

     * iniptables[W@softlink:
       ______________________________________________________________

          # ln -s /lib/iptables/ /usr/lib/iptables
       ______________________________________________________________

15.4 ϥΤk

  ˵

   NҲձi:
       ______________________________________________________________

         # modprobe ip6_tables
       ______________________________________________________________

   ˵
       ______________________________________________________________

         # [ ! -f /proc/net/ip6_tables_names ] && echo "Current kernel doesn't
support
         ? 'ip6tables' firewalling (IPv6)!"
       ______________________________________________________________

15.5 ϥip6tables

16.3.2.1. List all IPv6 netfilter entries

Short

# ip6tables -L



Extended

# ip6tables -n -v --line-numbers -L


List specified filter
# ip6tables -n -v --line-numbers -L INPUT


 [J@Ӥx:
# ip6tables --table filter --append INPUT  -j LOG --log-prefix "INPUT:"
? --log-level 7


[J@ӤJ󪺱:
# ip6tables --table filter --append INPUT  -j DROP


@ӱ:
# ip6tables --table filter --delete INPUT 1


\ ICMPv6:
Using older kernels (unpatched kernel 2.4.5 and iptables-1.2.2) no type can be
specified


\J ICMPv6 gL tunnels

# ip6tables -A INPUT -i sit+ -p icmpv6 -j ACCEPT



\X ICMPv6 gL tunnels
# ip6tables -A OUTPUT -o sit+ -p icmpv6 -j ACCEPT


Newer kernels allow specifying of ICMPv6 types:

# ip6tables -A INPUT -p icmpv6 --icmpv6-type echo-request -j ACCEPT


Rate-limiting
Because it can happen (author already saw it to times) that an ICMPv6 storm wil
l raise up, you should use available rate limiting for at least ICMPv6 ruleset.
 In addition logging rules should also get rate limiting to prevent DoS attacks
 against syslog and storage of log file partition. An example for a rate limite
d ICMPv6 looks like:

# ip6tables -A INPUT --protocol icmpv6 --icmpv6-type echo-request -j ACCEPT --m
atch limit --limit 30/minute


 \J SSH
Here an example is shown for a ruleset which allows incoming SSH connection fro
m a specified IPv6 address


  \Ӧ 3ffe:ffff:100::1/128  SSH J

# ip6tables -A INPUT -i sit+ -p tcp -s 3ffe:ffff:100::1/128 --sport 512:65535
? --dport 22 -j ACCEPT



\^]Allow response packets ( IPv6 slܤb mainstream netfilter6
implemented )

# ip6tables -A OUTPUT -o sit+ -p tcp -d 3ffe:ffff:100::1/128 --dport 512:65535
? --sport 22 ! --syn j ACCEPT


R\ tunneled IPv6-in-IPv4
Tto accept tunneled IPv6-in-IPv4 packets, bIPv4 𰵬]w firewall se
tup relating to such packets, for example


R\ interface ppp0  IPv6-in-IPv4 J

# iptables -A INPUT -i ppp0 -p ipv6 -j ACCEPT



R\ interface ppp0  IPv6-in-IPv4 X

# iptables -A OUTPUT -o ppp0 -p ipv6 -j ACCEPT


If you have only a static tunnel, you can specify the IPv4 addresses, too, like



R\Ӧ endpoint 1.2.3.4  IPv6-in-IPv4 qL interface ppp0 J

# iptables -A INPUT -i ppp0 -p ipv6 -s 1.2.3.4 -j ACCEPT



R\Ӧ endpoint 1.2.3.4  IPv6-in-IPv4 qL interface ppp0 J

# iptables -A OUTPUT -o ppp0 -p ipv6 -d 1.2.3.4 -j ACCEPT


16.3.2.10. Protection against incoming TCP connection requests
O! XwҼ{ z[J@ӪTCP sШDJ . Adapt "-i" op
tion, if other interface names are in use!


J TCP sШD

# ip6tables -I INPUT -i sit+ -p tcp --syn -j DROP


bѾ᭱ J TCP sШD

# ip6tables -I FORWARD -i sit+ -p tcp --syn -j DROP


ioǱHgsb䥦a,oOzQMQk.̦nؤ@ӥ]tܦh scri
pt M.

16.3.2.11.J UDP sШD

O! _LڪTiHX UDP/TCP |ܪݤf. ҥHpGza
IPv6tΨϥΥaݤf p:q 32768  60999 z]iHo˹LoUDPs (s
ܥ`u@) like:


J UDP ƾڥ] , _ШDX^ƾڥ]

# ip6tables -I INPUT -i sit+ -p udp ! --dport 32768:60999 -j DROP



bѾWJ UDP ƾڥ]HѾ᭱D

ip6tables -I FORWARD -i sit+ -p udp ! --dport 32768:60999 -j DROP


  :

   UoӹҬO@Ӹg,  Happy netfilter6 ruleset ͦ:
       ______________________________________________________________

# ip6tables -n -v -L
Chain INPUT (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination
    0     0 extIN      all      sit+   *       ::/0                 ::/0
    4   384 intIN      all      eth0   *       ::/0                 ::/0
    0     0 ACCEPT     all      *      *       ::1/128              ::1/128
    0     0 ACCEPT     all      lo     *       ::/0                 ::/0
    0     0 LOG        all      *      *       ::/0                 ::/0
?        LOG flags 0 level 7 prefix `INPUT-default:'
    0     0 DROP       all      *      *       ::/0                 ::/0

Chain FORWARD (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination
?
    0     0 int2ext    all      eth0   sit+    ::/0                 ::/0
    0     0 ext2int    all      sit+   eth0    ::/0                 ::/0
    0     0 LOG        all      *      *       ::/0                 ::/0
?        LOG flags 0 level 7 prefix `FORWARD-default:'
    0     0 DROP       all      *      *       ::/0                 ::/0

Chain OUTPUT (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination
?
    0     0 extOUT     all      *      sit+    ::/0                 ::/0
    4   384 intOUT     all      *      eth0    ::/0                 ::/0
    0     0 ACCEPT     all      *      *       ::1/128              ::1/128
    0     0 ACCEPT     all      *      lo      ::/0                 ::/0
    0     0 LOG        all      *      *       ::/0                 ::/0
?        LOG flags 0 level 7 prefix `OUTPUT-default:'
    0     0 DROP       all      *      *       ::/0                 ::/0

Chain ext2int (1 references)
 pkts bytes target     prot opt in     out     source               destination
?
    0     0 ACCEPT     icmpv6    *      *       ::/0                 ::/0
    0     0 ACCEPT     tcp      *      *       ::/0                 ::/0
?        tcp spts:1:65535 dpts:1024:65535 flags:!0x16/0x02
    0     0 LOG        all      *      *       ::/0                 ::/0
?        LOG flags 0 level 7 prefix `ext2int-default:'
    0     0 DROP       tcp      *      *       ::/0                 ::/0
    0     0 DROP       udp      *      *       ::/0                 ::/0
    0     0 DROP       all      *      *       ::/0                 ::/0

Chain extIN (1 references)
 pkts bytes target     prot opt in     out     source               destination
?
    0     0 ACCEPT     tcp      *      *       3ffe:400:100::1/128  ::/0
?        tcp spts:512:65535 dpt:22
    0     0 ACCEPT     tcp      *      *       3ffe:400:100::2/128  ::/0
?        tcp spts:512:65535 dpt:22
    0     0 ACCEPT     icmpv6    *      *       ::/0                 ::/0
    0     0 ACCEPT     tcp      *      *       ::/0                 ::/0
?        tcp spts:1:65535 dpts:1024:65535 flags:!0x16/0x02
    0     0 ACCEPT     udp      *      *       ::/0                 ::/0
?        udp spts:1:65535 dpts:1024:65535
    0     0 LOG        all      *      *       ::/0                 ::/0
?        limit: avg 5/min burst 5 LOG flags 0 level 7 prefix `extIN-default:'
    0     0 DROP       all      *      *       ::/0                 ::/0

Chain extOUT (1 references)
 pkts bytes target     prot opt in     out     source               destination
?
    0     0 ACCEPT     tcp      *      *       ::/0
? 3ffe:ffff:100::1/128tcp spt:22 dpts:512:65535 flags:!0x16/0x02
    0     0 ACCEPT     tcp      *      *       ::/0
? 3ffe:ffff:100::2/128tcp spt:22 dpts:512:65535 flags:!0x16/0x02
    0     0 ACCEPT     icmpv6    *      *       ::/0                 ::/0
    0     0 ACCEPT     tcp      *      *       ::/0                 ::/0
?        tcp spts:1024:65535 dpts:1:65535
    0     0 ACCEPT     udp      *      *       ::/0                 ::/0
?        udp spts:1024:65535 dpts:1:65535
    0     0 LOG        all      *      *       ::/0                 ::/0
?        LOG flags 0 level 7 prefix `extOUT-default:'
    0     0 DROP       all      *      *       ::/0                 ::/0

Chain int2ext (1 references)
 pkts bytes target     prot opt in     out     source               destination
?
    0     0 ACCEPT     icmpv6    *      *       ::/0                 ::/0
    0     0 ACCEPT     tcp      *      *       ::/0                 ::/0
?        tcp spts:1024:65535 dpts:1:65535
    0     0 LOG        all      *      *       ::/0                 ::/0
?        LOG flags 0 level 7 prefix `int2ext:'
    0     0 DROP       all      *      *       ::/0                 ::/0
    0     0 LOG        all      *      *       ::/0                 ::/0
?        LOG flags 0 level 7 prefix `int2ext-default:'
    0     0 DROP       tcp      *      *       ::/0                 ::/0
    0     0 DROP       udp      *      *       ::/0                 ::/0
    0     0 DROP       all      *      *       ::/0                 ::/0

Chain intIN (1 references)
 pkts bytes target     prot opt in     out     source               destination
?
    0     0 ACCEPT     all      *      *       ::/0
? fe80::/ffc0::
    4   384 ACCEPT     all      *      *       ::/0                 ff02::/16

Chain intOUT (1 references)
 pkts bytes target     prot opt in     out     source               destination
?
    0     0 ACCEPT     all      *      *       ::/0
? fe80::/ffc0::
    4   384 ACCEPT     all      *      *       ::/0                 ff02::/16
    0     0 LOG        all      *      *       ::/0                 ::/0
?        LOG flags 0 level 7 prefix `intOUT-default:'
    0     0 DROP       all      *      *       ::/0                 ::/0
       ______________________________________________________________

16. w

16.1 Access limitations

   \hAȨϥ tcp_wrapper library X.Below is described the use
   of tcp_wrapper

   eݼW[...

16.2 IPv6wf

   ثeSnӷ~uӶi

  Legal issues

   ĵi:zu౽˦ۤvt,M,i|ĲΪk.}le,˹zn
   IPv6ؼЦa}⦸!.

16.3 Security auditing using IPv6-enabled netcat(ϥξAIPv6netcat)

   IPv6-enabled netcatԲӸTаѷ: [44]
   IPv6?status-apps/security-auditing

   Ҥl:
       ______________________________________________________________

         # nc6 ::1 daytime
         13 JUL 2002 11:22:22 CEST
       ______________________________________________________________

16.4 Security auditing using IPv6-enabled nmap

   @ɳ̬uq˵{@.: [45]
   http://www.insecure.org/nmap/ q 3.10ALPHA1 }lIPv6. Ҥl:
       ______________________________________________________________

         # nmap -6 -sT ::1
         Starting nmap V. 3.10ALPHA3 ( www.insecure.org/nmap/ )
         Interesting ports on localhost6 (::1):
         (The 1600 ports scanned but not shown below are in state: closed)
         Port       State       Service
         22/tcp     open        ssh
         53/tcp     open        domain
         515/tcp    open        printer
         2401/tcp   open        cvspserver
         Nmap run completed -- 1 IP address (1 host up) scanned in 0.525 second
s
       ______________________________________________________________

16.5 Security auditing using IPv6-enabled strobe

   Strobe P NMapۤ󤣨F,wg IPv6-enabling patch (see
   IPv6?status-apps/security-auditing for more). Usage example:
       ______________________________________________________________

         # ./strobe ::1 strobe 1.05 (c) 1995-1999 Julian Assange <proff@iq.org>
.
         ::1 2401 unassigned unknown
         ::1 22 ssh Secure Shell - RSA encrypted rsh
         ::1 515 printer spooler (lpd)
         ::1 6010 unassigned unknown
         ::1 53 domain Domain Name Server
       ______________________________________________________________

16.6 fֵG

   pGfֵGPzIPv6wXJ, аW˴X|}.

17. Encryption and Authentication([KM{)

   Support in kernel

   Currently missing in 2.4, perhaps in 2.5 (see below). There is an
   issue about keeping the Linux kernel source free of
   export/import-control-laws regarding encryption code. This is also one
   case why [46]FreeS/WAN project (IPv4 only IPsec) isn't still contained
   in vanilla source.

   Support in USAGI kernel

   The USAGI project has taken over in July 2001 the IPv6 enabled
   FreeS/WAN code from the [47]IABG / IPv6 Project and included in their
   kernel extensions, but still work in progress, means that not all IABG
   features are already working in USAGI extension.

17.1 Ϊk

   ѷ: [48]FreeS/WAN / Online documentation

18. uWդu

   eݼW[... wﴣĳ!
     * finger, nslookup, ping, traceroute, whois: [49]UK IPv6 Resource
       Centre / The test page
     * ping, traceroute, tracepath, 6bone registry, DNS: [50]JOIN /
       Testtools (German language only, but should be no problem for non
       German speakers)
     * traceroute6, whois: [51]IPng.nl

19. 䥦T

19.1 uWT

   [JIPv6 backboneF
   IPv6 test backbone: [52]6bone, [53]How to join 6bone

  DnUϰ

     * America: [54]ARIN [55]Ripe
     * Asia/Pacific: [56]APNIC
     * Latin America and Caribbea: [57]LACNIC

   Also a list of major (prefix length 35) allocations per local registry
   is available here:
   [58]Ripe NCC / IPv6 allocations

  Tunnel brokers

     * [59]Freenet6 Canada
     * [60]Hurricane Electric US backbone
     * [61]Centro Studi e Laboratory Telecomunicazioni Italy
     * [62]Wanadoo Belgium
     * [63]CERTNET-Nokia China
     * [64]Tunnelbroker Leipzig Germany - DialupUsers with dynamic IP's
       can get a fix IPv6 IP...
     * [65]Internet Initiative Japan Japan - with IPv6 native line
       service and IPv6 tunneling Service
     * [66]XS26 - Access to SixNetherland - with POPs in Slovak Republic,
       Czech Republic, Netherlands, Germany and Hungary.
     * [67]IPng Netherland Netherland - Intouch, SurfNet, AMS-IX, UUNet,
       Cistron, RIPE NCC and AT& T are connected at the AMS-IX. It is
       possible (there are requirements...) to get an static tunnel.
     * [68]UNINETT Norway - Pilot IPv6 Service (for Customers):
       tunnelbroker & address allocation
     * [69]NTT Europe [70]NTT Euroope United Kingdom - IPv6 Trial. IPv4
       Tunnel and native IPv6 leased Line connections. POPs are located
       in London, UK Dusseldorf, Germany New Jersey, USA (East Coast)
       Cupertino, USA (West Coast) Tokyo, Japan
     * [71]ESnet USA - Energy Sciences Network: Tunnel Registry & Address
       Delegation for directly connected ESnet sites and ESnet
       collaborators.
     * [72]6REN USA - The 6ren initiative is being coordinated by the
       Energy Sciences Network (ESnet), the network for the Energy
       Research program of the US Dept. of Energy, located at the
       University of California's Lawrence Berkeley National Laboratory

   hIPv6T: [73]ipv6-net.org

  6to4

     * [74]NSayer's 6to4 information
     * [75]RFC 3068 / An Anycast Prefix for 6to4 Relay Routers

  Latest news

     * [76]http://hs247.com/ name="hs247 / IPv6 news and information">
       also homepage for #ipv6 channel on EFnet
     * [77]bofh.st / latest IPv6 news but currently Jan 2002 outdated...,
       also homepage for IPv6 channel on IRCnet
     * [78]ipv6-net.org German forum

  ĳѦ

     * [79]HS247 / IPv6 RFC list Publishing the list of IPv6-related RFCs
       is beyond the scope of this document, but given URLs will lead you
       to such lists:
     * [80]IPng Standardization Status a little bit out-of-sync at the
       moment
     * [81]IPv6 Related Specifications on IPv6.org

  ثePIPv6:

     * [82]IP Version 6 ipv6
     * [83]Next Generation Transitition 
     * [84]Dynamic Host Configuration 
     * [85]Domain Name System Extension 
     * [86]Mobile IP mobileip

  䥦

     * [87]Network Sorcery / IPv6, Internet Protocol version 6 IPv6
       protocol header
     * [88]SWITCH IPv6 Pilot / References big list of IPv6 references
       maintained by Simon Leinen
     * [89]Advanced Network Management Laboratory / IPv6 Address Oracle
       shows you IPv6 addresses in detail

  έp

     * [90]IPv6 routing table history created by Gert Ding

19.2 hT

   ݥ[Jhe,wﴣĳ!

  Linux related

     * [91]IPv6-HowTo for Linux by Peter Bieringer - Germany, and his
     * [92]Bieringer / IPv6 - software archive
     * [93]Linux+IPv6 status by Peter Bieringer Germany
     * [94]USAGI project Japan, and their
     * [95]USAGI project - software archive
     * [96]Gav's Linux IPv6 Page
     * [97]Project6 - IPv6 Networking For Linux Italy, and their
     * [98]Project6 - software archive

19.3 qH׾

+------------------------------------------------------------------------------
-------------------------------------------------------------------------------
-------------------------------------------------------------+
|

                                                             |
|    Focus            Request e-mail address       What to subscribe
 Maillist e-mail address                Language                Access through
WWW                                                          |
+------------------------------------------------------------------------------
-------------------------------------------------------------------------------
-------------------------------------------------------------+
|  Linux kernel        majordomo (at)                oss.sgi.com netdev
 netdev (at) oss.sgi.com          English               http://oss.sgi.com/proj
ects/netdev/archive/                                         |
|  networking

                                                             |
|  including

                                                             |
|  IPv6

                                                             |
+------------------------------------------------------------------------------
-------------------------------------------------------------------------------
-------------------------------------------------------------+
|  Linux and          majordomo (at)                  linux-ipv6
 linux-ipv6 (at) list.f00f.org    English
                                                             |
|                       list.f00f.org

                                                             |
| IPv6 in
 (moderated)
                                                             |
| general (1)

                                                             |
+------------------------------------------------------------------------------
-------------------------------------------------------------------------------
-------------------------------------------------------------+
| Mobile IP           majordomo (at)
 mipl (at) list.mipl.             English               http://www.mipl.mediapo
li.com/mailinglist.html                                      |
| (v6) for            list.mipl.mediapoli.com            mipl
 mediapoli.com                                          http://www.mipl.mediapo
li.com/mail-archive/                                         |
|  Linux

                                                             |
|

                                                             |
+------------------------------------------------------------------------------
-------------------------------------------------------------------------------
-------------------------------------------------------------+
|Linux IPv6          usagi-users-ctl
 usagi-users                      English               http://www.mipl.mediapo
li.com/mailinglist.html                                      |
|users using         (at) linux-ipv6.org
 (at) linux-ipv6.org                                    http://www.mipl.mediapo
li.com/mail-archive/                                         |
|USAGI

                                                             |
|extension

                                                             |
+------------------------------------------------------------------------------
-------------------------------------------------------------------------------
-------------------------------------------------------------+
|

                                                             |
|IPv6 on Debian
 debian-ipv6 (at)                 English               http://lists.debian.org
/debian-ipv6/                                                |
|Linux               Web-based, see URL
 lists.debian.org
                                                             |
|Web-based

                                                             |
|

                                                             |
+------------------------------------------------------------------------------
-------------------------------------------------------------------------------
-------------------------------------------------------------+
|

                                                             |
|IPv6/6bone in        majordomo (at)
 ipv6 (at)                        German/English        http://www.join.uni-mue
nster.de/JOIN/ipv6/texte-englisch/mailingliste.html          |
| Germany             atlan.uni-muenster.de           ipv6
 uni-muenster.de                                        http://www.join.uni-mue
nster.de/local/majordomo/ipv6/                               |
|

                                                             |
+------------------------------------------------------------------------------
-------------------------------------------------------------------------------
-------------------------------------------------------------+
|

                                                             |
| 6bone                  majordomo (at)               6bone
 6bone (at)                       English               http://www.6bone.net/6b
one_email.html                                               |
|                       isi.edu
 isi.edu                                                http://ryouko.dgim.crc.
ca/ipv6/                                                     |
|
                                                        http://www.wcug.wwu.edu
/lists/6bone/                                                |
|

                                                             |
+------------------------------------------------------------------------------
-------------------------------------------------------------------------------
-------------------------------------------------------------+
|

                                                             |
|IPv6                    majordomo (at)               ipng
 ipng (at)                        English               http://playground.sun.c
om/pub/ipng/html/instructions.html                           |
|discussions             sunroof.eng.sun.com
 sunroof.eng.sun.com                                    ftp://playground.sun.co
m/pub/ipng/mail-archive/                                     |
|
                                                        http://www.wcug.wwu.edu
/lists/ipng/                                                 |
+------------------------------------------------------------------------------
-------------------------------------------------------------------------------
-------------------------------------------------------------+
|

                                                             |
| IPv6 users              majordomo (at)              users
 users (at) ipv6.org              English               http://www.ipv6.org/mai
ling-lists.html                                              |
| in general                 ipv6.org

                                                             |
|

                                                             |
+------------------------------------------------------------------------------
-------------------------------------------------------------------------------
-------------------------------------------------------------+
|

                                                             |
| Bugtracking of         bugtraq-subscribe (at)
 bugtraq (at)                     English               http://online.securityf
ocus.com/popups/forums/bugtraq/intro.shtml                   |
| Internet               securityfocus.com
 securityfocus.com (moderated)                          http://online.securityf
ocus.com/archive/1                                           |
| applications (2)

                                                             |
|

                                                             |
+------------------------------------------------------------------------------
-------------------------------------------------------------------------------
-------------------------------------------------------------+
|

                                                             |
| IPv6 in general          Web-based, see URL
 ipv6 (at) ipng.nl                English              http://mailman.ipng.nl/m
ailman/listinfo/ipv6/                                        |
|
                                                       http://mailman.ipng.nl/p
ipermail/ipv6/                                               |
|

                                                             |
+------------------------------------------------------------------------------
-------------------------------------------------------------------------------
-------------------------------------------------------------+


|

                                                             |

|

                                                             |
|

                                                             |
|

                                                             |
| majordomo (at)             majordomo (at)            ipv6
 ipv6 (at) mfa.eti.br             Portuguese           http://www.mfa.eti.br/li
stas.html                                                    |
|  mfa.eti.br                mfa.eti.br

                                                             |
|

                                                             |
+------------------------------------------------------------------------------
-------------------------------------------------------------------------------
-------------------------------------------------------------+





 (1) recommended for common Linux & IPv6 issues.

 (2) very recommended if you provide server applications.

 OO|? wAĳ!

 o٦t@M:        http://www.join.uni-muenster.de/JOIN/ipv6/texte-eng
lisch/ipv6.infoquellen.html

  o檩

     * [99]Polish(ed) Linux Distribution ("market leader" in containing
       IPv6 enabled packages)
     * [100]Red Hat Linux
     * [101]Pekka Savola's IPv6 packages Germany
     * [102]Debian Linux
     * [103]Craig Small's IPv6 information and status
     * [104]SuSE Linux
     * [105]Linux Mandrake

20. v

   x.y oGbInternetW.
   x.y.z ܥbi檺and only published as LyX file on CVS.

 Releases 0.x

0.31
2002-09-29/PB: Extend information in proc-filesystem entries

0.30
2002-09-27/PB: Add some maillists

0.29
2002-09-18/PB: Update statement about nmap (triggered by Fyodor)

0.28.1
2002-09-16/PB: Add note about ping6 to multicast addresses, add some labels

0.28
2002-08-17/PB: Fix broken LDP/CVS links, add info about Polish translation, add
 URL of the IPv6 Address Oracle

0.27
2002-08-10/PB: Some minor updates

0.26.2
2002-07-15/PB: Add information neighbor discovery, split of firewalling (got so
me updates) and security into extra chapters

0.26.1
2002-07-13/PB: Update nmap/IPv6 information

0.26
2002-07-13/PB: Fill /proc-filesystem chapter, update DNS information about depr
icated A6/DNAME, change P-t-P tunnel setup to use of "ip" only

0.25.2
2002-07-11/PB: Minor spelling fixes

0.25.1
2002-06-23/PB: Minor spelling and other fixes

0.25
2002-05-16/PB: Cosmetic fix for 2\^{ }128, thanks to Jos Ablio Oliveira Mat
os for help with LyX

0.24
2002-05-02/PB: Add entries in URL list, minor spelling fixes

0.23
2002-03-27/PB: Add entries in URL list and at maillists, add a label and minor
information about IPv6 on RHL

0.22
2002-03-04/PB: Add info about 6to4 support in kernel series 2.2.x and add an en
try in URL list and at maillists

0.21
2002-02-26/PB: Migrate next grammar checks submitted by John Ronan

0.20.4
2002-02-21/PB: Migrate more grammar checks submitted by John Ronan, add some ad
ditional hints at DNS section

0.20.3
2002-02-12/PB: Migrate a minor grammar check patch submitted by John Ronan

0.20.2
2002-02-05/PB: Add mipl to maillist table

0.20.1
2002-01-31/PB: Add a hint how to generate 6to4 addresses

0.20
2002-01-30/PB: Add a hint about default route problem, some minor updates

0.19.2
2002-01-29/PB: Add many new URLs

0.19.1
2002-01-27/PB: Add some forgotten URLs

0.19
2002-01-25/PB: Add two German books, fix quote entinities in exported SGML code

0.18.2
2002-01-23/PB: Add a FAQ on the program chapter

0.18.1
2002-01-23/PB: Move "the end" to the end, add USAGI to maillists

0.18
2002-01-22/PB: Fix bugs in explanation of multicast address types

0.17.2
2002-01-22/PB: Cosmetic fix double existing text in history (at 0.16), move all
 credits to the end of the document

0.17.1
2002-01-20/PB: Add a reference, fix URL text in online-test-tools

0.17
2002-01-19/PB: Add some forgotten information and URLs about global IPv6 addres
ses

0.16
2002-01-19/PB: Minor fixes, remove "bold" and "emphasize" formats on code lines
, fix "too long unwrapped code lines" using selfmade utility, extend list of UR
Ls.

0.15
2002-01-15/PB: Fix bug in addresstype/anycast, move content related credits to
end of document

0.14
2002-01-14/PB: Minor review at all, new chapter "debugging", review "addresses"
, spell checking, grammar checking (from beginning to 3.4.1) by Martin Krafft,
add tcpdump examples, copy firewalling/netfilter6 from IPv6+Linux-HowTo, minor
enhancements

0.13
2002-01-05/PB: Add example BIND9/host, move revision history to end of document
, minor extensions

0.12
2002-01-03/PB: Merge review of David Ranch

0.11
2002-01-02/PB: Spell checking and merge review of Pekka Savola

0.10
2002-01-02/PB: First public release of chapter 1

References

   1. http://www.bieringer.de/pb/
   2. http://www.linuxports.com/howto/intro_to_networking/
   3. http://rfc.net/rfc1884.html
   4. http://rfc.net/rfc3056.html/
   5. http://rfc.net/rfc2893.html
   6. http://rfc.net/rfc2373.html
   7. http://standards.ieee.org/regauth/oui/tutorials/EUI64.html
   8. http://rfc.net/rfc3041.html
   9. ftp://ftp.ietf.org/internet-drafts/
  10. http://rfc.net/rfc1519.html
  11. http://www.bieringer.de/linux/IPv6/status/IPv6+Linux-status-distributions.html
  12. http://www.bieringer.de/linux/IPv6/status/IPv6+Linux-status-distributions.html
  13. http://www.linuxdoc.org/HOWTO/Kernel-HOWTO.html
  14. ftp://ftp.bieringer.de/pub/linux/IPv6/kernel
  15. http://www.linux-ipv6.org/faq.html
  16. http://www.bieringer.de/linux/IPv6/status/IPv6+Linux-status-kernel.html#transport
  17. http://rfc.net/rfc1055.html
  18. ftp://ftp.inr.ac.ru/ip-routing/
  19. http://rpmfind.net/linux/rpm2html/search.php?query=iproute
  20. http://www.bieringer.de/linux/IPv6/status/IPv6+Linux-status-distributions.html
  21. file://localhost/tmp/zh-sgmltools.21666/IPv6&Linux-CurrentStatus-Applications
  22. http://www.bieringer.de/linux/IPv6/IPv6-HOWTO/IPv6-HOWTO-3.html
  23. http://www.bieringer.de/linux/IPv6/IPv6-HOWTO/IPv6-HOWTO-4.html
  24. http://www.bieringer.de/linux/IPv6/status/IPv6+Linux-status-apps.html#HTTP
  25. http://[3ffe:400:100::1]/
  26. http://www.kame.net/
  27. http://rfc.net/rfc2893.html
  28. http://rfc.net/rfc3056.html
  29. http://rfc.net/rfc3056.html
  30. http://www.kfu.com/~nsayer/6to4/
  31. http://www.faqs.org/rfcs/rfc3068.html
  32. http://rfc.net/rfc2473.html
  33. http://www.bieringer.de/linux/IPv6/
  34. http://www.bieringer.de/linux/IPv6/IPv6-HOWTO/scripts/current/
  35. http://www.feyrer.de/IPv6/SuSE73-IPv6+6to4-setup.html
  36. http://people.debian.org/~csmall/ipv6/
  37. http://www.netfilter.org/
  38. http://lists.samba.org/pipermail/netfilter/
  39. http://lists.samba.org/pipermail/netfilter-devel/
  40. http://www.bieringer.de/linux/IPv6/status/IPv6+Linux-status-kernel.html#netfilter6
  41. http://www.kernel.org/
  42. http://www.netfilter.org/
  43. ftp://ftp.redhat.com/redhat/linux/rawhide/SRPMS/SRPMS/
  44. http://www.bieringer.de/linux/IPv6/status/IPv6?status-apps.html#security-auditing
  45. http://www.insecure.org/nmap/
  46. http://www.freeswan.org/
  47. http://www.ipv6.iabg.de/downloadframe/
  48. http://www.freeswan.org/doc.html
  49. file://localhost/tmp/zh-sgmltools.21666/Linux-IPv6-HOWTO.txt.html
  50. http://www.join.uni-muenster.de/lab/testtools.html
  51. http://www.ipng.nl/
  52. http://www.6bone.net/6bone_hookup.html
  53. http://www.6bone.net/6bone_hookup.html
  54. http://www.arin.net/
  55. http://www.ripe.net/
  56. http://www.apnic.net/
  57. http://lacnic.org/
  58. http://www.ripe.net/ripencc/mem-services/registration/ipv6/ipv6allocs.html
  59. http://www.freenet6.net/
  60. http://ipv6tb.he.net/
  61. https://carmen.cselt.it/ipv6tb/
  62. http://tunnel.be.wanadoo.com/
  63. http://tb.6test.edu.cn/
  64. http://joshua.informatik.uni-leipzig.de/
  65. http://www.iij.ad.jp/IPv6/index-e.html
  66. http://www.xs26.net/
  67. http://www.ipng.nl/
  68. http://www.uninett.no/testnett/index.en.html
  69. http://www.uk.v6.ntt.net/
  70. http://www.nttv6.net/
  71. http://www.es.net/hypertext/welcome/pr/ipv6.html
  72. http://www.6ren.net/
  73. http://www.ipv6-net.de/
  74. http://www.kfu.com/~nsayer/6to4/
  75. http://www.faqs.org/rfcs/rfc3068.html
  76. http://hs247.com/
  77. http://bofh.st/ipv6/
  78. http://www.ipv6-net.de/
  79. http://www.hs247.com/ipv6rfc.html
  80. http://playground.sun.com/pub/ipng/html/specs/standards.html
  81. http://www.ipv6.org/specs.html
  82. http://www.ietf.org/ids.by.wg/ipv6.html
  83. http://www.ietf.org/ids.by.wg/ngtrans.html
  84. http://www.ietf.org/ids.by.wg/dhc.html
  85. http://www.ietf.org/ids.by.wg/dnsext.html
  86. http://www.ietf.org/ids.by.wg/mobileip.html
  87. http://www.networksorcery.com/enp/protocol/ipv6.htm
  88. http://www.switch.ch/lan/ipv6/references.html
  89. http://steinbeck.ucs.indiana.edu:47401/
  90. http://www.space.net/~gert/RIPE/
  91. http://www.bieringer.de/linux/IPv6/
  92. ftp://ftp.bieringer.de/pub/linux/IPv6/
  93. http://www.bieringer.de/linux/IPv6/status/IPv6+Linux-status.html
  94. http://www.linux-ipv6.org/
  95. ftp://ftp.linux-ipv6.org/pub/
  96. http://www.bugfactory.org/~gav/ipv6/
  97. http://project6.ferrara.linux.it/
  98. ftp://ftp.ferrara.linux.it/pub/project6/
  99. http://www.pld.org.pl/
 100. http://www.redhat.com/
 101. http://www.netcore.fi/pekkas/linux/ipv6/
 102. http://www.debian.org/
 103. http://people.debian.org/~csmall/ipv6/
 104. http://www.suse.com/
 105. http://www.linux-mandrake.com/
