{"id":96,"date":"2011-02-09T15:11:48","date_gmt":"2011-02-09T15:11:48","guid":{"rendered":"http:\/\/gigihfordanama.wordpress.com\/?p=96"},"modified":"2012-08-08T00:14:47","modified_gmt":"2012-08-08T00:14:47","slug":"tunneling-ipv6-on-bsd-6-2","status":"publish","type":"post","link":"https:\/\/dosen.unila.ac.id\/gigih\/2011\/02\/09\/tunneling-ipv6-on-bsd-6-2\/","title":{"rendered":"Tunneling IPv6 on BSD 6.2"},"content":{"rendered":"

IPv6<\/strong> adalah keluarga protokol TCP\/IP<\/strong> yang baru, dan diproyeksikan akan menggantikan IPv4<\/strong>
\nyang telah menjadi standar de-facto protokol komunikasi di Internet<\/strong>.
\nBeberapa keterbatasan yang ada pada pendahulunya telah di perbaiki pada protokol baru ini,
\nseperti keleluasaan ruang pengalamatan, security yg lebih baik dengan masuknya IPSec <\/strong>dalam protokol requirement, adanya extension header yg memberi fleksibilitas terhadap penambahan fitur (di masa mendatang) dll. –>><\/strong>(taken From ipv6.itb.ac.id<\/strong>)Transisi<\/strong><\/p>\n

Ada beberapa mekanisme transisi dari IPv4 ke IPv6.
\nBerdasarkan draft IETF draft-ietf-v6ops-mech-v2-00.txt Mekanisme tersebut adalah:
\n \u2022 <\/strong> Dual IP layer
\n\u2022\u00a0\u00a0 \u00a0Tunneling<\/strong><\/p>\n

Dual IP layer <\/strong>adalah sebuah cara dimana host dan router secara lengkap mendukung protokol IPv4<\/strong> dan IPv6<\/strong>.
\nTunneling<\/strong> adalah sebuah cara melakukan koneksi point-to-point dimana paket IPv6 <\/strong>
\nditumpangkan dalam header paket IPv4 <\/strong>melalui infrastruktur routing IPv4<\/strong>. Pada praktiknya kedua hal tersebut bisa dilakukan secara bersama atau masing-masing tergantung situasi setempat.\u00a0 Contohnya adalah bisa sebuah universitas belum mempunyai jaringan yang mendukung IPv6 <\/strong>ke internet maka universitas tersebut harus melakukan tunneling <\/strong>dahulu ke penyedia jaringan IPv6<\/strong>, baru kemudian menjalankan teknik Dual IP Layer.<\/p>\n

OK Dude lets Play on\u00a0 FreeBSD<\/strong><\/p>\n

Pertama Pastikan Kernel sudah direcompile dengan options Berikut
\n(By default dari versi 5.xx ke atas options ini sudah diembed di kernel
\nanda cukup mengaktifkan saja)
\n
\nOPTIONS\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0INET6 \u00a0\u00a0 \u00a0#IPv6 communications protocols
\nOPTIONS\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0IPSEC \u00a0\u00a0 \u00a0#IP Security
\ndevice\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0\u00a0\u00a0 gif \u00a0\u00a0 \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 #IPv6 and IPv4 tunneling
\ndevice \u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0\u00a0 stf \u00a0\u00a0 \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 #6to4 tunneling<\/strong><\/p>\n

untuk mengaktifkan fitur IPv6 <\/strong>di BSD
\nanda cukup mengedit file \/etc\/rc.conf
\n
\nipv6_enable = \u201cYES\u201d<\/strong><\/p>\n

Tunneling pada FreeBSD<\/p>\n

Disebut tunneling karena harus mendefinisikan alamat IPv4 <\/strong>dari sisi client dan sisi ISP<\/strong>,
\nUntuk keperluan 6over4 ini penyedia tunnel atau disebut juga tunnel broker antara lain:
\n
\n\u2022\u00a0\u00a0 \u00a0http:\/\/www.freenet6.net
\n\u2022\u00a0\u00a0 \u00a0http:\/\/ipv6tb.he.net<\/strong><\/p>\n

Kita akan mencoba mengimplementasikan 6over4 tunneling,
\nuntuk itu kita harus mendaftar terlebih dahulu ke penyedia tunnel \/ tunnelbroker.
\nGue telah mendaftar di http:\/\/ipv6tb.he.net<\/strong>
\ndan mendapat account sebagai berikut :<\/p>\n

Account: unila<\/p>\n

Tunnel Information\u00a0\u00a0\u00a0 \u00a0 :
\nServer IPv4 address\u00a0 \u00a0 : \u00a0\u00a0 \u00a064.71.128.83
\nServer IPv6 address\u00a0\u00a0\u00a0 : \u00a0\u00a0 \u00a02001:470:1F03:37d::1\/64
\nClient IPv4 address\u00a0\u00a0\u00a0\u00a0\u00a0 : \u00a0\u00a0 \u00a0222.124.196.97
\nClient IPv6 address\u00a0\u00a0\u00a0\u00a0\u00a0 : \u00a0\u00a0 \u00a02001:470:1F03:37d::2\/64
\nAssigned \/64\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0 : \u00a0\u00a0 \u00a0none
\nASN\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 : \u00a0\u00a0 \u00a0none
\nLast Ping6\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 : \u00a0\u00a0 \u00a0none
\nLast Inbound Packet\u00a0\u00a0 : \u00a0\u00a0 \u00a0none
\nRegistration Date\u00a0 \u00a0\u00a0\u00a0 \u00a0\u00a0 : \u00a0\u00a0 \u00a0Sun, Aug 19, 2007
\n<\/strong>
\n
\nJika anda mendaftar, Account anda baru bisa aktif dalam 1×24 Jam<\/strong><\/span><\/p>\n

OK karena gue udah dapet account di tunnelbroker, langsung aja pake account tsb
\ncaranya adalah sbb;<\/p>\n

router-inherent# <\/strong>ifconfig gif0 create
\nrouter-inherent# <\/strong>ifconfig gif0 tunnel 222.124.196.97 64.71.128.83
\nrouter-inherent# <\/strong>ifconfig gif0 inet6 2001:470:1F03:37d::2 2001:470:1F03:37d::1 prefixlen 128
\nrouter-inherent# <\/strong>route -n add -inet6 default 2001:470:1F03:37d::1
\nrouter-inherent# <\/strong>ifconfig gif0 up<\/p>\n

atau langsung klik Example Configs dari profil account anda di web tunnelbroker<\/strong>.<\/p>\n

agar setting tsb permanen, dan diload pada saat startup server,
\nkita perlu modifikasi file \/etc\/rc.conf<\/strong><\/p>\n

######### Cutedd #######################
\nquagga_enable=”YES”
\nquagga_flags=”-d”
\nquagga_daemons=”bgpd zebra ripd ospfd”<\/p>\n

# Bagian IPV6
\nipv6_enable=”YES”
\nipv6_network_interfaces=”auto”
\nipv6_defaultrouter=”2001:470:1F03:37c::1″
\nipv6_router_enable=”YES”
\nipv6_router=”\/usr\/sbin\/route6d”
\nipv6_gateway_enable=”YES”
\nipv6_ifconfig_rl0=”2001:470:1F03:37c::2 prefixlen 128″<\/p>\n

gif_interfaces=”gif0 gif1 gif2 gif3″
\ngifconfig_gif0=”222.124.196.102 64.71.128.83″
\nipv6_ifconfig_gif0=”2001:470:1F03:37d::2″<\/strong><\/p>\n

########## Cutedd ########################<\/p>\n

Ok Sip reboot server anda , dan cek koneksi ke site yang udah support IPv6<\/p>\n

router-inherent<\/strong>~>ping6 www.itb.ac.id<\/strong>
\nPING6(56=40+8+8 bytes) 2001:470:1f03:37d::2 –> 2001:d30:3:508::136
\n16 bytes from 2001:d30:3:508::136, icmp_seq=0 hlim=49 time=874.248 ms
\n16 bytes from 2001:d30:3:508::136, icmp_seq=1 hlim=49 time=842.328 ms
\n16 bytes from 2001:d30:3:508::136, icmp_seq=2 hlim=50 time=845.175 ms
\n16 bytes from 2001:d30:3:508::136, icmp_seq=3 hlim=50 time=814.509 ms
\n^C
\n— www.itb.ac.id ping6 statistics —
\n4 packets transmitted, 4 packets received, 0.0% packet loss
\nround-trip min\/avg\/max\/std-dev = 814.509\/844.065\/874.248\/21.147 ms<\/p>\n

router-inherent<\/strong> ~>ping6 kame.net<\/strong>
\nping6: hostname nor servname provided, or not known
\nns1 ~>ping6 www.kame.net
\nPING6(56=40+8+8 bytes) 2001:470:1f03:37d::2 –> 2001:200:0:8002:203:47ff:fea5:3085
\n16 bytes from 2001:200:0:8002:203:47ff:fea5:3085, icmp_seq=0 hlim=54 time=657.554 ms
\n16 bytes from 2001:200:0:8002:203:47ff:fea5:3085, icmp_seq=1 hlim=54 time=683.585 ms
\n16 bytes from 2001:200:0:8002:203:47ff:fea5:3085, icmp_seq=2 hlim=55 time=638.274 ms
\n^C
\n— www.kame.net ping6 statistics —
\n4 packets transmitted, 3 packets received, 25.0% packet loss
\nround-trip min\/avg\/max\/std-dev = 638.274\/659.804\/683.585\/18.566 ms
\nns1 ~><\/p>\n

router-inherent ~>traceroute6 www.itb.ac.id<\/strong>
\ntraceroute6 to www.itb.ac.id (2001:d30:3:508::136) from 2001:470:1f03:37d::2, 64 hops max, 12 byte packets
\n1\u00a0 unila.tunnel.tserv2.fmt.ipv6.he.net\u00a0 539.592 ms\u00a0 622.312 ms\u00a0 536.972 ms
\n2\u00a0 2001:470:0:1f::1\u00a0 544.779 ms\u00a0 579.046 ms\u00a0 705.310 ms
\n3\u00a0 2001:470:0:2c::1\u00a0 574.309 ms\u00a0 636.062 ms\u00a0 732.636 ms
\n4\u00a0 2001:470:0:2f::2\u00a0 587.534 ms\u00a0 736.939 ms\u00a0 630.455 ms
\n5\u00a0 2001:504:0:1::2497:1\u00a0 579.649 ms\u00a0 607.757 ms\u00a0 632.991 ms
\n6\u00a0 2001:48b0:bb00:f005::14\u00a0 810.049 ms\u00a0 824.113 ms\u00a0 879.552 ms
\n7\u00a0 tky001bb00.IIJ.Net\u00a0 849.526 ms\u00a0 827.604 ms\u00a0 837.802 ms
\n8\u00a0 tky001ix10.IIJ.Net\u00a0 916.215 ms\u00a0 841.055 ms\u00a0 874.527 ms
\n9\u00a0 pc6.otemachi.wide.ad.jp\u00a0 857.478 ms\u00a0 831.989 ms\u00a0 834.409 ms
\n10\u00a0 2001:200:0:1802:20c:dbff:fe1f:7200\u00a0 719.497 ms\u00a0 797.669 ms\u00a0 718.621 ms
\n11\u00a0 foundry1.fujisawa.wide.ad.jp\u00a0 745.826 ms\u00a0 719.167 ms\u00a0 695.979 ms
\n12\u00a0 ge1-0-100.cisco1.fujisawa.wide.ad.jp\u00a0 735.304 ms\u00a0 918.998 ms\u00a0 777.147 ms
\n13\u00a0 sfc-gate.ai3.net\u00a0 784.662 ms\u00a0 779.969 ms\u00a0 781.766 ms
\n14\u00a0 itb1-v6-router.itb.ac.id\u00a0 898.357 ms\u00a0 888.773 ms\u00a0 928.287 ms
\n15\u00a0 AI3-NOC.PAU-Cat6.Vlan.itb.ac.id\u00a0 902.033 ms\u00a0 1115.452 ms\u00a0 1504.171 ms
\n16\u00a0 itb2-v6-router.itb.ac.id\u00a0 973.283 ms\u00a0 917.063 ms\u00a0 1243.515 ms
\n17\u00a0 itb5-v6-router.itb.ac.id\u00a0 952.437 ms\u00a0 934.330 ms\u00a0 1004.583 ms
\n18\u00a0 www.itb.ac.id\u00a0 1539.625 ms\u00a0 946.367 ms\u00a0 1137.507 ms
\nns1 ~><\/p>\n

router-inherent ~>traceroute6 www.kame.net<\/strong>
\ntraceroute6 to www.kame.net (2001:200:0:8002:203:47ff:fea5:3085) from 2001:470:1f03:37d::2, 64 hops max, 12 byte packets
\n1\u00a0 unila.tunnel.tserv2.fmt.ipv6.he.net\u00a0 657.767 ms\u00a0 651.306 ms\u00a0 651.790 ms
\n2\u00a0 2001:470:0:1f::1\u00a0 660.996 ms\u00a0 651.035 ms\u00a0 700.221 ms
\n3\u00a0 2001:470:0:2c::1\u00a0 631.751 ms\u00a0 652.123 ms\u00a0 748.934 ms
\n4\u00a0 2001:470:0:2f::2\u00a0 642.458 ms\u00a0 637.262 ms\u00a0 619.501 ms
\n5\u00a0 2001:504:0:1::2497:1\u00a0 694.685 ms\u00a0 626.189 ms\u00a0 620.796 ms
\n6\u00a0 2001:48b0:bb00:f005::14\u00a0 803.121 ms\u00a0 924.459 ms\u00a0 870.305 ms
\n7\u00a0 tky001bb00.IIJ.Net\u00a0 959.271 ms\u00a0 918.264 ms\u00a0 934.759 ms
\n8\u00a0 tky001ix10.IIJ.Net\u00a0 1336.225 ms\u00a0 1247.022 ms\u00a0 838.785 ms
\n9\u00a0 hitachi1.otemachi.wide.ad.jp\u00a0 754.853 ms\u00a0 721.097 ms\u00a0 822.034 ms
\n10\u00a0 2001:200:0:1802:20c:dbff:fe1f:7200\u00a0 782.309 ms\u00a0 774.268 ms\u00a0 854.438 ms
\n11\u00a0 ve-4.nec2.yagami.wide.ad.jp\u00a0 894.672 ms\u00a0 828.339 ms\u00a0 826.645 ms
\n12\u00a0 lo0.alaxala1.k2.wide.ad.jp\u00a0 892.775 ms\u00a0 803.713 ms\u00a0 888.505 ms
\n13\u00a0 orange.kame.net\u00a0 1199.800 ms\u00a0 757.115 ms\u00a0 768.367 ms
\nns1 ~><\/p>\n


\nOK Beres, selamat IPV6 sudah jalan di mesin BSD anda<\/p>\n

Next on my blog
\n–\u00a0 Quagga on IPv6
\n–\u00a0 NS on IPv6<\/p>\n

Please Wait
\n<\/strong>
\n<\/p>\n","protected":false},"excerpt":{"rendered":"

IPv6 adalah keluarga protokol TCP\/IP yang baru, dan diproyeksikan akan menggantikan IPv4 yang telah menjadi standar de-facto protokol komunikasi di Internet. Beberapa keterbatasan yang ada pada pendahulunya telah di perbaiki pada protokol baru ini, seperti keleluasaan ruang pengalamatan, security yg lebih baik dengan masuknya IPSec dalam protokol requirement, adanya extension header yg memberi fleksibilitas terhadap … Continue reading “Tunneling IPv6 on BSD 6.2”<\/span><\/a><\/p>\n","protected":false},"author":25,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1348,5],"tags":[],"class_list":["post-96","post","type-post","status-publish","format-standard","hentry","category-kiat-sukses-menjadi-seorang-network-engineer-2","category-old-post-dari-unilanet"],"_links":{"self":[{"href":"https:\/\/dosen.unila.ac.id\/gigih\/wp-json\/wp\/v2\/posts\/96"}],"collection":[{"href":"https:\/\/dosen.unila.ac.id\/gigih\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dosen.unila.ac.id\/gigih\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dosen.unila.ac.id\/gigih\/wp-json\/wp\/v2\/users\/25"}],"replies":[{"embeddable":true,"href":"https:\/\/dosen.unila.ac.id\/gigih\/wp-json\/wp\/v2\/comments?post=96"}],"version-history":[{"count":0,"href":"https:\/\/dosen.unila.ac.id\/gigih\/wp-json\/wp\/v2\/posts\/96\/revisions"}],"wp:attachment":[{"href":"https:\/\/dosen.unila.ac.id\/gigih\/wp-json\/wp\/v2\/media?parent=96"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dosen.unila.ac.id\/gigih\/wp-json\/wp\/v2\/categories?post=96"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dosen.unila.ac.id\/gigih\/wp-json\/wp\/v2\/tags?post=96"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}