luci-app-nat6-helper icon indicating copy to clipboard operation
luci-app-nat6-helper copied to clipboard

更新 1.2 后下游设备无法访问 IPv6 公网

Open Glucy-2 opened this issue 1 year ago • 7 comments

已经重新初始化,尝试过重启网络 设置正确并启用 NAT6 也会显示未在运行 目前的解决方法是手动将 IPv6 ULA 前缀fd00:6666:6666::1/64 改成 dfff::/64 改了之后的配置:

[root@207-2-AX6s:12:14 AM ~] # cat /etc/config/nat6-helper 

config nat6-helper
        option name 'vwan2_6'
        option enabled '1'

[root@207-2-AX6s:12:16 AM ~] # ifconfig
br-lan    Link encap:Ethernet  HWaddr 5C:02:14:FB:A1:BF  
          inet addr:192.168.6.1  Bcast:192.168.6.255  Mask:255.255.255.0
          inet6 addr: dfff::1/64 Scope:Global
          inet6 addr: fe80::5e02:14ff:fefb:a1bf/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:13216 errors:0 dropped:4 overruns:0 frame:0
          TX packets:12649 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:1791642 (1.7 MiB)  TX bytes:10385174 (9.9 MiB)

eth0      Link encap:Ethernet  HWaddr 5C:02:14:FB:A1:BF  
          inet6 addr: fe80::5e02:14ff:fefb:a1bf/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1504  Metric:1
          RX packets:50750 errors:0 dropped:0 overruns:0 frame:0
          TX packets:50667 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:25552723 (24.3 MiB)  TX bytes:16056112 (15.3 MiB)
          Interrupt:30 

lan1      Link encap:Ethernet  HWaddr 5C:02:14:FB:A1:BF  
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:18609 errors:0 dropped:20 overruns:0 frame:0
          TX packets:20141 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:3413634 (3.2 MiB)  TX bytes:10916437 (10.4 MiB)

lan2      ...

lan3      ...

lo        ...

macvlan1  Link encap:Ethernet  HWaddr 5C:02:14:48:76:11  
          inet addr:10.161.162.203  Bcast:10.161.255.255  Mask:255.255.128.0
          inet6 addr: fe80::8d2:8bff:fe33:6a34/64 Scope:Link
          inet6 addr: 2001:da8:xxxx:xxxx::xxxx/128 Scope:Global
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:3769 errors:0 dropped:48 overruns:0 frame:0
          TX packets:5149 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:1740870 (1.6 MiB)  TX bytes:796786 (778.1 KiB)

macvlan2  Link encap:Ethernet  HWaddr 5C:02:14:48:76:12  
          inet addr:10.161.162.199  Bcast:10.161.255.255  Mask:255.255.128.0
          inet6 addr: fe80::1a0f:a1ff:fe06:c37/64 Scope:Link
          inet6 addr: 2001:da8:xxxx:xxxx::xxxx/128 Scope:Global
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:18465 errors:0 dropped:48 overruns:0 frame:0
          TX packets:15605 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:10706900 (10.2 MiB)  TX bytes:1992662 (1.8 MiB)

macvlan3  ...

macvlan4  ...

macvlan5  ...

macvlan6  ...

wan       Link encap:Ethernet  HWaddr xx:xx:xx:xx:xx:xx  
          inet6 addr: fe80::5e02:14ff:fe48:7669/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:32141 errors:0 dropped:74 overruns:0 frame:0
          TX packets:29333 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:21225589 (20.2 MiB)  TX bytes:4598398 (4.3 MiB)

wlan0     ...

wlan1     ...

还有一个问题就是如果我配置了多拨,那么只能用一个接口(上述配置中就用的是vwan2_6(macvlan2))

Glucy-2 avatar Mar 25 '23 16:03 Glucy-2

  1. 最近比较忙,有空的时候修一下未在运行的问题,可以先用 1.0 版本
  2. 暂时未有多接口的打算,欢迎 PR

Ausaci avatar Mar 26 '23 13:03 Ausaci

对未在运行的问题进行了以下修改

  1. 默认 IPv6 ULA 前缀修改为了 dfff::/64
  2. 可以在插件内自定义 IPv6 ULA 前缀 及 IPv6 DNS

我用 1.3 版本的测试显示正常,你可以测试一下 luci-app-nat6-helper_v1.3-1_all.zip

Ausaci avatar Apr 02 '23 10:04 Ausaci

如果测试完了,麻烦告知一下可行不可行

Ausaci avatar Apr 02 '23 11:04 Ausaci

image 还是没有解决状态信息显示错误的问题

Glucy-2 avatar Apr 02 '23 14:04 Glucy-2

看一下 ip -6 route | grep '2000::/3'ip6tables-save -t nat | grep "v6NAT" 的输出

Ausaci avatar Apr 02 '23 15:04 Ausaci

都是空的,没有输出结果

Glucy-2 avatar Apr 03 '23 00:04 Glucy-2

对未在运行的问题进行了以下修改

  1. 默认 IPv6 ULA 前缀修改为了 dfff::/64
  2. 可以在插件内自定义 IPv6 ULA 前缀 及 IPv6 DNS

我用 1.3 版本的测试显示正常,你可以测试一下 luci-app-nat6-helper_v1.3-1_all.zip

我也试了1.3,显示nat6未运行,但是可以ping通ipv6。试了去年[关于依赖问题]中的那个版本,设置后重启路由,可以显示nat6 运行状态 已运行

我无线路由系统是ImmortalWrt 21.02-SNAPSHOT r20306-483b605b59

lgs2007m avatar Sep 12 '23 02:09 lgs2007m