Quote:

Original Posted By nahinidia ►

Quote:

Original Posted By nahinidia ►
Assalamualaikum Gan Isnaini,

Nah gan, tadi siang saya cek di host ternyata HILANG lagi koneksi ke ::1 (
setelah dari ::1 ngeping ke ::111 baru deh terbentuk OTOMATIS :

Destination Next Hop Flags Metric Ref Use Iface
2001:df0:xxx::1/128 2001:df0:xxx::1 UGH 1 1 0 eth0

jadi yang :
::/0 2001:df0:xxx::1 UG 1 1772461 2 eth0

ngga ngaruh, padahal ada kalau di route -n --inet6

ada apa gerangan ya gan

Quote:

Original Posted By risnaini ►
Kayaknya harus simulasi niy..
Mikrotik ku dipakai production semua.

Jadi gateway harus trigger ping dulu ke client, baru muncul lagi ya.

Quote:

Original Posted By nahinidia ►
BETULLL gann

tapi kalau ke mikrotik ::2 (international gw) ngga pernah hilang

aneh, atau ada mekanisme khusus / rules dalam v6 ya dalam advertise router dalam 1 network ?

di mikrotik untuk save config yg readable apa ya gan seperti sh run gitu ?

Quote:

Original Posted By nahinidia ►
sepertinya ada yang aneh gan di arp, apa karena dua mikrotik ini digabung dalam satu mesin ya. mesinnya x86 4 ethernet 2 ethernet untuk mikrotik oixp dan 2 ethernet untuk mikrotik international, VM-nya XEN dan masing2 imagenya menggunakan SATU license.

apa karena itu ?

Quote:

Original Posted By risnaini ►
Skr dah OK ?
Mantabs

Ini VM client nya menggunakan VM Mikrotik sbg gateway...ya
Ada berapa interface fisik ?
VSwitch diconfig vlan atau based on physical interface saja...

Kalo boleh dishare config2nya
Bagi yang akan coba IPv6 di VM

Quote:

Original Posted By nahinidia ►
VM-nya pakai XEN yg gratis

kondisi: 4 ethernet, 2 onboard 2 double in pci-express.

besok tak share dimari ya gan, nah ceritanya udah lumayan desperado nih, ditambah lagi mesinnya ngga bisa diremote gara2 ngga tau kenapa, untung tadi siang interface ke oixp sudah dipisah ke mesin sendiri, jadi mikrotiknya dishutdown dulu, karena dah pada ngamuk koneksi ke indo mati2

ini akhirnya pake quagga dulu, sudah receive route tapi koq ngga mau outgoing ya ?

berikut confignya:

!
router bgp 450xx
bgp router-id 218.100.27.xx
bgp log-neighbor-changes
neighbor 218.100.27.129 remote-as 7717
neighbor 218.100.27.129 description OIXP
neighbor 218.100.27.129 prefix-list v4-out out
neighbor 2001:7fa:f::1 remote-as 7717
neighbor 2001:7fa:f::1 prefix-list v6-out out
neighbor 2001:7fa:f::1 route-map set-nexthop out
!
address-family ipv6
network 2001:df0:xxx::/48
neighbor 2001:7fa:f::1 activate
neighbor 2001:7fa:f::1 soft-reconfiguration inbound
exit-address-family
!
access-list all permit any
!
ip prefix-list v4-out seq 5 permit any
!
ipv6 access-list all permit any
!
ipv6 prefix-list v6-out seq 5 permit any



sebagian hasil route:
#ip -6 r
2001:d30:3::/48 via fe80::214:a8ff:fec8:7c00 dev eth1 proto zebra metric 1024 mtu 1500 advmss 1440 hoplimit 4294967295
2001:d30:103::/48 via fe80::214:a8ff:fec8:7c00 dev eth1 proto zebra metric 1024 mtu 1500 advmss 1440 hoplimit 4294967295
2001:d68:5300::/42 via fe80::214:a8ff:fec8:7c00 dev eth1 proto zebra metric 1024 mtu 1500 advmss 1440 hoplimit 4294967295
2001:d68:5340::/42 via fe80::214:a8ff:fec8:7c00 dev eth1 proto zebra metric 1024 mtu 1500 advmss 1440 hoplimit 4294967295
2001:dc6:ff00::/48 via fe80::214:a8ff:fec8:7c00 dev eth1 proto zebra metric 1024 mtu 1500 advmss 1440 hoplimit 4294967295
2001:dc6:ff24::/48 via fe80::214:a8ff:fec8:7c00 dev eth1 proto zebra metric 1024 mtu 1500 advmss 1440 hoplimit 4294967295
2001:dc6:ff33::/48 via fe80::214:a8ff:fec8:7c00 dev eth1 proto zebra metric 1024 mtu 1500 advmss 1440 hoplimit 4294967295
2001:dc6:ff4f::/48 via fe80::214:a8ff:fec8:7c00 dev eth1 proto zebra metric 1024 mtu 1500 advmss 1440 hoplimit 4294967295
2001:dc6:ff55::/48 via fe80::214:a8ff:fec8:7c00 dev eth1 proto zebra metric 1024 mtu 1500 advmss 1440 hoplimit 4294967295


sebagian hasil dari: sh ipv6 bgp

Network Next Hop Metric LocPrf Weight Path
>* 2001:470:a860::/48
2001:7fa:f::1 0 7717 17884 i
>* 2001:678:4::/48 2001:7fa:f::1 0 7717 42909 i
>* 2001:678:5::/48 2001:7fa:f::1 0 7717 42909 i
>* 2001:d10::/32 2001:7fa:f::1 0 7717 4787 i
>* 2001:d30:3::/48 2001:7fa:f::1 0 7717 4796 i
>* 2001:d30:103::/48



contoh hasil traceroute:
root@AS:~# traceroute6 2001:d68:2000::2
traceroute to 2001:d68:2000::2 (2001:d68:2000::2), 30 hops max, 80 byte packets
1 (2001:df0:xxx::1) 3008.181 ms !H 3008.176 ms !H 3008.170 ms !H

Quote:

Original Posted By risnaini ►
IPv6 BGP step by step quagga..
http://www.ip-stories.com/?p=1141
Prefix Agan perlu dicheck di OIXP, coba PM prefixnya ;)

Quote:

Original Posted By nahinidia ►
router bgp 450xx
bgp router-id 218.100.27.xx
bgp log-neighbor-changes
network 202.xxx.xxx.xx/23
network 202.xxx.xxx.xx/23
neighbor 218.100.27.129 remote-as 7717
neighbor 218.100.27.129 description OIXP
neighbor 218.100.27.129 prefix-list v4-out out
neighbor 2001:7fa:f::1 activate
neighbor 2001:7fa:f::1 remote-as 7717
!
address-family ipv6
network 2001:df0:xxx::/48
neighbor 2001:7fa:f::1 route-map IPv6-USPTREAM-IN in
neighbor 2001:7fa:f::1 route-map IPv6-UPSTREAM-OUT out
exit-address-family
!
access-list all permit any
!
ip prefix-list v4-out seq 5 permit any
!
ipv6 prefix-list IPv6-UPSTREAM-OUT seq 10 permit 2001:df0:xxx::/48
ipv6 prefix-list IPv6-UPSTREAM-OUT seq 100 deny ::/0 le 128
!
route-map IPv6-OIXP-IN permit 10
match ipv6 address prefix-list IPv6-UPSTREAM-IN
!
route-map IPv6-OIXP-OUT permit 10
match ipv6 address prefix-list IPv6-UPSTREAM-OUT
!
line vty


dengan ini receive routes dsb sama sperti sebelumnya sudah bisa, tapi tetep belum bisa ngeping ke v6 mana2, iptables sudah accept semua. kalau ngeping6 misal ke www.access.net.id baliknya ke diri sendiri ipv6 di eth0 2001:df0:xxx::1/64

Quote:

Original Posted By nahinidia ►
Alhamdulillah,
setelah upgrade quagga, SUDAH Up dan bisa inbound outbound
next step tinggal migrate ke XEN insyaAllah siang ini diaktivate:
berikut confignya:

Distributor ID: Ubuntu
Description: Ubuntu 10.04.3 LTS
Release: 10.04
Codename: lucid
quagga version: quagga_0.99.20.1-0ubuntu0.10.04.2_amd64
processor :Intel(R) Xeon(R) CPU E3120 @ 3.16GHz
stepping : 10
cpu MHz : 2000.000
cache size : 6144 KB
RAM : 1GB

final config LAN-OIXP IPv4-IPv6:

router bgp XXXXX
bgp router-id 218.100.27.XX
bgp log-neighbor-changes
network 202.xx.xx.0/23
network 202.xx.xx.0/23
neighbor oixp peer-group
neighbor oixp remote-as 7717
neighbor oixp filter-list 2 out
neighbor 218.100.27.129 peer-group oixp
neighbor 2001:7fa:f::1 remote-as 7717
distance bgp 150 150 150
!
address-family ipv6
network 2001:df0:xxx::/48
neighbor 2001:7fa:f::1 activate
neighbor 2001:7fa:f::1 route-map IPv6-USPTREAM-IN in
neighbor 2001:7fa:f::1 route-map IPv6-UPSTREAM-OUT out
exit-address-family
!
access-list 3 deny 10.0.0.0 0.0.0.255
access-list 3 deny 192.168.0.0 0.0.255.255
access-list 3 deny 172.16.0.0 0.15.255.255
access-list 3 permit any
access-list 4 permit 202.xxx.xxx.0 0.0.0.255
access-list 4 permit 202.xxx.xxx.0 0.0.0.255
access-list 4 permit 202.xxx.xxx.0 0.0.0.255
access-list 4 permit 202.xxx.xxx.0 0.0.0.255
!
ipv6 prefix-list IPv6-UPSTREAM-IN description ALLOW-IPv6-/32-LESS-ONLY
ipv6 prefix-list IPv6-UPSTREAM-IN seq 10 permit ::/0 le 32
ipv6 prefix-list IPv6-UPSTREAM-OUT seq 10 permit 2001:df0:xxx::/48
ipv6 prefix-list IPv6-UPSTREAM-OUT seq 100 deny ::/0 le 128
!
ip as-path access-list 2 permit ^$
!
route-map IPv6-OIXP-IN permit 10
match ipv6 address prefix-list IPv6-UPSTREAM-IN
!
route-map IPv6-OIXP-OUT permit 10
match ipv6 address prefix-list IPv6-UPSTREAM-OUT
!
line vty




PR selanjutnya migrasi ke XEN mudah2an ngga ada problem seperti di mikrotik kemarin yg aneh nanti tak share config xen dll

Quote:

Original Posted By slither ►
mo tanya beda eui-64, Global Unicast Address, Link Local Unicast Address ?

kalo 2001 itu masuk mana ?

Quote:

Original Posted By autonix ►
gan bisa dijelaskan dengan bantuan gambar gitu gak??

ane jadi bingung nih banyak angka2 berkeliaran

mungkin ada prasyarat khusus sebelum mempelajari IPv6

Quote:

Original Posted By nahinidia ►
sekedar saran dalam mencoba interkoneksi setelah terbangun routing table, kadang2 susah mencari ipv6 yg bisa diping

jika routing sudah terbangun:
di linux:

misal detik..com 2402:a000:0:1::100

ip -6 r | grep 2402:a000

kalau ada artinya v6-nya sudah teradvertise dan mungkin bisa ditest ping. Soalnya ada beberapa yg hanya advertise di international saja, atau oixp saja.

Quote:

Original Posted By risnaini ►
EUI-64 pengalamatan IPv6 dengan menambahkan mac address hardware di bagian 64 bit kedua dengan diinsert FFFE ditengah antara 24 bit pertama dan 24 bit kedua

Global Unicast > IPv6 yang diassign buat user dan 2001 masuk disini
Link Local Unicast Address > Setiap enable IPv6 di OS, akan ada ini selalu (FE80.. dst)

------
EUI-64

Traditional interface identifiers for network adapters are 48-bit MAC address. This address consists of a 24-bit manufacturer ID and a 24-bit board ID.

IEEE EUI-64 is a new standard for network interface addressing. The company ID is still 24-bits in length, but the extension ID is 40 bits, creating a much larger address space for a network adapters.

To create an EUI-64 address from the interface MAC address:

0xFFFE is inserted into the MAC address between the manufacturer ID and the board ID.
seventh bit of the first byte is reversed.


Lets make an example with following MAC address 00:0C:42:28:79:45. Ipv6eui64.png Image above illustrates conversation process. When the result is converted to colon-hexadecimal notation, we get the interface identifier 20C:42FF:FE28:7945. As the result, corresponds link-local address is

Quote:

Original Posted By autonix ►
gan bisa dijelaskan dengan bantuan gambar gitu gak??

ane jadi bingung nih banyak angka2 berkeliaran

mungkin ada prasyarat khusus sebelum mempelajari IPv6

Quote:

Original Posted By risnaini ►
Belun nemu ane gan, persih gambar.
Soale memang angka semua