Skip to content
 

IPv6 NAT, the day has come

So they finally made it:

router # ip6tables -t nat -A POSTROUTING -s 2001:db8:ffff::/64 -o eth1 -j MASQUERADE
client # ip -6 addr
1: lo:  mtu 16436 
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: eth0:  mtu 1500 qlen 1000
    inet6 2001:db8:ffff::cafe/64 scope global 
       valid_lft forever preferred_lft forever
    inet6 fe80::216:3eff:fec8:871e/64 scope link 
       valid_lft forever preferred_lft forever
client # ping6 -c 4 -n www.google.com
PING www.google.com(2a00:1450:4004:803::1010) 56 data bytes
64 bytes from 2a00:1450:4004:803::1010: icmp_seq=1 ttl=54 time=78.6 ms
64 bytes from 2a00:1450:4004:803::1010: icmp_seq=2 ttl=54 time=70.9 ms
64 bytes from 2a00:1450:4004:803::1010: icmp_seq=3 ttl=54 time=71.2 ms
64 bytes from 2a00:1450:4004:803::1010: icmp_seq=4 ttl=54 time=72.5 ms

--- www.google.com ping statistics ---
4 packets transmitted, 4 received, 0% packet loss, time 3003ms
rtt min/avg/max/mdev = 70.986/73.343/78.619/3.105 ms

Ah right, because NAT gives you, um, more security. Oh yeah.

Be Sociable, Share!

Leave a Reply

(required)