Differences

This shows you the differences between two versions of the page.

--- lab_with_ipv6_tunnel [2018/01/16 21:15] – samer
+++ lab_with_ipv6_tunnel [2018/01/16 21:28] – samer
@@ Line 13: / Line 13: @@
 [{{ :ipv6-tunnel-2.png?nolink&600 | Figure 2. 6in4 Tunnel for extending IPv6 connectivity}}]
-Hurricane Electric provides a free service for 6in4 tunnels. Subscription is available on [[https://tunnelbroker.net]]. Start by creating a ''Regular Tunnel''. Then put the IPv4 address of your TEP in the field ''IPv4 Endpoint (Your side)'' and select the nearest tunnel server. Verify that everything is set accordingly in the tunnel details page. Click on ''Example Configurations'' and copy the commands for your operating system. For example, if you are using an Debian based TEP:
+Hurricane Electric provides a free service for 6in4 tunnels. Subscription is available on [[https://tunnelbroker.net]]. Start by creating a ''Regular Tunnel''. Then put the IPv4 address of your TEP in the field ''IPv4 Endpoint (Your side)'' and select the nearest tunnel server. Verify that everything is set accordingly in the tunnel details page. Click on ''Example Configurations'' and copy the commands for your operating system. For example, if you are using an Debian based TEP, you can use the following configuration in your ''/etc/network/interfaces'' file:
 <code bash>
@@ Line 25: / Line 25: @@
         gateway #Tunnel_server_IPv6_address
 </code>
+<WRAP center round tip 100%>
+When behind a firewall appliance, make sure that protocol 41 is not filtered. Note well that 41 is the IPv6 protocol number encapsulated in IPv4 (and not a port number) and should be authorized. For instance, the [[https://www.cisco.com/c/en/us/support/docs/ip/access-lists/43920-iacl.html | configuration]] on a Cisco firewall uses the following syntax: ''access-list 101 permit 41 source destination''
+</WRAP>