Hetzner - IPV6 Not rechable

plumberg

I have Debian stretch installed on Hetzner Dedi. Fresh install. I checked that an IPv6 is activated, but, when I try to ping/ ssh to the server via IPV6, it does not respond. Any help is appreciated:

Here is my /etc/network/interfaces config....

root@Debian-94-stretch-64-minimal ~ # cat /etc/network/interfaces

Hetzner Online GmbH installimage

source /etc/network/interfaces.d/*

auto lo

iface lo inet loopback

iface lo inet6 loopback

auto enp2s0

iface enp2s0 inet static

address 46.4.XX.XX

netmask 255.255.255.192

gateway 46.4.19.65

# route 46.4.19.64/26 via 46.4.19.65

up route add -net 46.4.19.64 netmask 255.255.255.192 gw 46.4.19.65 dev enp2s0

iface enp2s0 inet6 static

address 2a01:X4X8:XXX:XXXX::2

netmask 64

gateway fe80::1

nobizzle

First of all.. I banned IPv6 from my hetzner machines. It was a lot of work to make it work, but I had several problems later on (mainly caused by openvpn), so i dropped the config.

When I had it on my host I installed bridge-utils and got the following settings which made the machine reachable via ipv6:

source-directory /etc/network/interfaces.d

auto lo
iface lo inet loopback

auto vmbr0
iface vmbr0 inet static
address 1.2.3.10
netmask 255.255.255.224
gateway 1.2.3.1
pointopoint 1.2.3.1
bridge_ports eth0
bridge_stp off
bridge_maxwait 5

iface vmbr0 inet6 static
address 2a01:4f8:1234:1234::2
netmask 64
gateway fe80::1

bridge_ports eth0
bridge_stp off
bridge_maxwait 5

of course youll have to change the settings for the bridge_ports accordingly

Have a look at this topic too

Mr_Tom

I had an issue with IPv6 on one of my dedis with them - opened a ticket and they fixed it as it was a routing issue.

plumberg

@nobizzle said:
First of all.. I banned IPv6 from my hetzner machines. It was a lot of work to make it work, but I had several problems later on (mainly caused by openvpn), so i dropped the config.

When I had it on my host I installed bridge-utils and got the following settings which made the machine reachable via ipv6:

source-directory /etc/network/interfaces.d

auto lo
iface lo inet loopback

auto vmbr0
iface vmbr0 inet static
address 1.2.3.10
netmask 255.255.255.224
gateway 1.2.3.1
pointopoint 1.2.3.1
bridge_ports eth0
bridge_stp off
bridge_maxwait 5

iface vmbr0 inet6 static
address 2a01:4f8:1234:1234::2
netmask 64
gateway fe80::1

bridge_ports eth0
bridge_stp off
bridge_maxwait 5

of course youll have to change the settings for the bridge_ports accordingly

Have a look at this topic too

Seems it was a temp issue with the network, my host is reachable via IPV6.

I was interested in Proxmox, and seems like your referenced topic is relevant. I will go through that and try to get the same setup on a guest OS.

Thanks

plumberg

@nobizzle said:
First of all.. I banned IPv6 from my hetzner machines. It was a lot of work to make it work, but I had several problems later on (mainly caused by openvpn), so i dropped the config.

...

Have a look at this topic too

So I got ProxMox Installed. I created a Debian Guest VM. But, I have no connectivity on the guest. I am trying to see if I can get the guest vms (multiple) be accessible via IPv6 because of the /64 subnet available

Host Settings (it is reachable via both ipv4 and IPv6 (2a01:4f8:XXXX:XXXX::2) without issues.

source /etc/network/interfaces.d/*

    auto lo
    iface lo inet loopback
    iface lo inet6 loopback
    auto enp2s0
    iface enp2s0 inet static
      address 46.4.XX.YY
      netmask 255.255.255.192
      gateway 46.4.19.65
      up route add -net 46.4.19.64 netmask 255.255.255.192 gw 46.4.19.65 dev enp2s0


    iface enp2s0 inet6 static
      address 2a01:4f8:XXXX:XXXX::2
      netmask 128
      gateway fe80::1
      up sysctl -p

    auto vmbr0
    iface vmbr0 inet static
           address   46.4.XX.XX
           netmask   255.255.255.192
           bridge_ports none
           bridge_stp off
           bridge_fd 0

    iface vmbr0 inet6 static
      address 2a01:4f8:XXXX:XXXX::2
      netmask 64

On Guest:

    iface ems12 inet6 static
      address 2a01:4f8:XXXX:XXXX::10
      netmask 64

Not sure what I am doing wrong. The Guest can SSH to my host via ipv6 (::2).

Thanks

Falzo

you're lacking a gateway on the guest (should be your hosts) and most likely need to enable ipv6 forwarding on the host (sysctl)

plumberg

@Falzo said:
you're lacking a gateway on the guest (should be your hosts) and most likely need to enable ipv6 forwarding on the host (sysctl)

i added the gateway (hosts ipv6 ip).

Also, here is the op of sysctl -p on host:

root@Debian-94-stretch-64-minimal ~ # sysctl -p net.ipv4.ip_forward = 1 net.ipv6.conf.all.forwarding = 1
Thanks