Skip to content

Instantly share code, notes, and snippets.

@jitomesky
Created May 23, 2015 11:27
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save jitomesky/0309c00b03c174f21779 to your computer and use it in GitHub Desktop.
Save jitomesky/0309c00b03c174f21779 to your computer and use it in GitHub Desktop.
EdgeOS DHCPv6-DP(fail)
firewall {
all-ping enable
broadcast-ping disable
ipv6-name tun-in {
default-action drop
description "IPv6 Traffice to Internal"
rule 10 {
action accept
description "Accept Established-Related"
state {
established enable
related enable
}
}
}
ipv6-name tun-local {
default-action drop
description "IPv6 Traffic to Router"
rule 10 {
action accept
description "Accept Established-Related"
state {
established enable
related enable
}
}
}
ipv6-receive-redirects disable
ipv6-src-route disable
ip-src-route disable
log-martians enable
modify pppoe-out {
rule 1 {
action modify
modify {
tcp-mss 1414
}
protocol tcp
tcp {
flags SYN
}
}
}
name OUTSIDE-IN {
default-action drop
rule 10 {
action accept
state {
established enable
related enable
}
}
}
name OUTSIDE-LOCAL {
default-action drop
rule 10 {
action accept
state {
established enable
related enable
}
}
rule 20 {
action accept
icmp {
type-name echo-request
}
protocol icmp
state {
new enable
}
}
rule 30 {
action drop
destination {
port 22
}
protocol tcp
recent {
count 4
time 60
}
state {
new enable
}
}
rule 31 {
action drop
destination {
port 22
}
log enable
protocol tcp
state {
new enable
}
}
}
options {
}
receive-redirects disable
send-redirects enable
source-validation disable
syn-cookies enable
}
interfaces {
ethernet eth0 {
duplex auto
ipv6 {
dup-addr-detect-transmits 1
}
mtu 1500
pppoe 0 {
default-route auto
firewall {
in {
name OUTSIDE-IN
}
local {
name OUTSIDE-LOCAL
}
out {
modify pppoe-out
}
}
mtu 1454
name-server auto
password XXXXXXX
user-id imhXXXXXXXX@iij.ad.jp
}
pppoe 1 {
default-route auto
dhcpv6-pd {
pd 0 {
interface eth1 {
service dhcpv6-stateful
}
}
rapid-commit enable
}
firewall {
in {
ipv6-name tun-in
}
local {
ipv6-name tun-local
}
out {
modify pppoe-out
}
}
ipv6 {
dup-addr-detect-transmits 1
enable {
}
}
mtu 1454
name-server auto
password XXXXXXXXX
user-id imhXXXXXXXX@bnf6.iij.ad.jp
}
speed auto
}
ethernet eth1 {
address 192.168.11.1/24
description Local
duplex auto
firewall {
out {
}
}
ipv6 {
address {
}
router-advert {
prefix ::/64 {
}
}
}
speed auto
}
ethernet eth2 {
duplex auto
speed auto
}
loopback lo {
}
}
service {
dhcp-server {
disabled false
hostfile-update disable
shared-network-name LAN1 {
authoritative disable
subnet 192.168.11.0/24 {
default-router 192.168.11.1
dns-server 192.168.11.1
lease 86400
start 192.168.11.30 {
stop 192.168.11.90
}
}
}
}
dns {
forwarding {
cache-size 150
listen-on eth1
}
}
gui {
https-port 443
}
nat {
rule 5000 {
outbound-interface pppoe0
protocol all
source {
address 192.168.11.0/24
}
type masquerade
}
}
ssh {
port 22
protocol-version v2
}
}
system {
host-name ubnt
login {
user ubnt {
authentication {
encrypted-password XXXXXXXX
plaintext-password ""
}
level admin
}
}
ntp {
server 0.ubnt.pool.ntp.org {
}
server 1.ubnt.pool.ntp.org {
}
server 2.ubnt.pool.ntp.org {
}
server 3.ubnt.pool.ntp.org {
}
}
offload {
ipv4 {
forwarding enable
pppoe enable
}
ipv6 {
forwarding enable
pppoe enable
}
}
syslog {
global {
facility all {
level notice
}
facility protocols {
level debug
}
}
}
time-zone Asia/Tokyo
}
root@ubnt# cat /var/log/dhcp6c.log
May/23/2015 18:56:00: ifreset: invalid interface(pppoe1): No such device
May/23/2015 18:56:00: main: failed to initialize pppoe1
root@ubnt# /sbin/ifconfig
eth0 Link encap:Ethernet HWaddr XX:XX:XX:XX:XX:XX
inet6 addr: fe80::XXXX:XXXX:XXXX:XXXX/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:672650 errors:0 dropped:13390 overruns:0 frame:0
TX packets:594227 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:563733231 (537.6 MiB) TX bytes:135585963 (129.3 MiB)
eth1 Link encap:Ethernet HWaddr XX:XX:XX:XX:XX:XX
inet addr:192.168.11.1 Bcast:192.168.11.255 Mask:255.255.255.0
inet6 addr: fe80::XXXX:XXXX:XXXX:XXXX/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:630267 errors:0 dropped:8 overruns:0 frame:0
TX packets:678015 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:137087607 (130.7 MiB) TX bytes:575373438 (548.7 MiB)
eth2 Link encap:Ethernet HWaddr XX:XX:XX:XX:XX:XX
UP BROADCAST MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:65536 Metric:1
RX packets:945 errors:0 dropped:0 overruns:0 frame:0
TX packets:945 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:150172 (146.6 KiB) TX bytes:150172 (146.6 KiB)
ppp1 Link encap:Point-to-Point Protocol
inet6 addr: fe80::XXXX:XXXX:XXXX:XXXX/10 Scope:Link
UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1454 Metric:1
RX packets:2 errors:0 dropped:0 overruns:0 frame:0
TX packets:123 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:100
RX bytes:28 (28.0 B) TX bytes:3978 (3.8 KiB)
pppoe0 Link encap:Point-to-Point Protocol
inet addr:XXX.XXX.XXX.XXX P-t-P:XXX.XXX.XXX.XXX Mask:255.255.255.255
UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1454 Metric:1
RX packets:86145 errors:0 dropped:0 overruns:0 frame:0
TX packets:78906 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:100
RX bytes:18810682 (17.9 MiB) TX bytes:19475886 (18.5 MiB)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment