RE: More Quick 'n' Easy IPv6 for Debian, Wireless
-----BEGIN PGP SIGNED MESSAGE-----
John Goerzen [mailto:jgoerzen@complete.org] wrote:
> On Tue, Jan 20, 2004 at 10:46:52AM -0800, Marc Singer wrote:
> > What I'm not finding is how to get this working where there are hosts
> > behind NAT'ing routers. In this case, a wireless AP that provides
> > limited configurability and no ipv6 support. Using the already
>
> If you can configure it to let protocol 41 (ipv6) through, you may be
> able to make things work. (I have been able to do that going
> through a Shorewall IPV4-only NAT box.)
Setting up a box to have one internal IP as the "DMZ" helps too.
Most of the boxes allow it, but some do not.
> However, you may not be able to do that on your AP. You may
> need a more powerful router.
Please don't call these things routers ;)
> > What I've deduced is that there is a need for another kind of tunnel,
> > either ipip or ipsec. Am I on the right track?
>
> Well, that depends on what you're trying to do. If you're trying to
> join the global IPv6 network, that won't help. However, AFAIK, you'll
> run into the same issues with IPSec.
Why not? Routing IPv6 over a tunnel... is routing IPv6 over a tunnel,
doesn't matter if it goes over IPSec or whatever ;)
Using tinc for tunneling IPv6 into networks that are even firewalled
away is even a well used method for this.
Greets,
Jeroen
-----BEGIN PGP SIGNATURE-----
Version: Unfix PGP for Outlook Alpha 13 Int.
Comment: Jeroen Massar / http://unfix.org/~jeroen
iQA/AwUBQA2FmSmqKFIzPnwjEQKryACgqGihPVRXO7nggcBFnchTBqMyusYAoI/c
/Z0eNBgc/6A7Y5CeZNf8BJ/K
=llgF
-----END PGP SIGNATURE-----
Reply to: