IPv6: teredo

From OnnoWiki
Jump to navigation Jump to search

Teredo mempunyai kemampuan untuk membuat "VPN" secara automatis di atas IPv4 dan menembus NAT untuk memberikan IPv6 ke client. Jadi untuk pengguna perorangan teredo menjadi menarik.


In computer networking, Teredo is a transition technology that gives full IPv6 connectivity for IPv6-capable hosts that are on the IPv4 Internet but have no native connection to an IPv6 network. Unlike similar protocols such as 6to4, it can perform its function even from behind network address translation (NAT) devices such as home routers.

Teredo operates using a platform independent tunneling protocol that provides IPv6 (Internet Protocol version 6) connectivity by encapsulating IPv6 datagram packets within IPv4 User Datagram Protocol (UDP) packets. Teredo routes these datagrams on the IPv4 Internet and through NAT devices. Teredo nodes elsewhere on the IPv6 network (called Teredo relays) receive the packets, un-encapsulate them, and pass them on.

Teredo is a temporary measure. In the long term, all IPv6 hosts should use native IPv6 connectivity. Teredo should be disabled when native IPv6 connectivity becomes available. Christian Huitema developed Teredo at Microsoft, and the IETF standardized it as RFC 4380. The Teredo server listens on UDP port 3544.


Instalasi

Di Debian dan Ubuntu, sambungan IPv6 mungkin paling mudah di peroleh dengan menginstalasi miredo,

sudo apt install miredo

Ini ini akan membuat tunnel IPv6 melalui sambungan IPv6 yang ada. Jadi anda tetap membutuhkan sambungan IPv4 untuk menjalankan miredo. Jika berhasil maka akan tampak interface teredo berikut

ifconfig teredo

isinya kira-kira

teredo: flags=4305<UP,POINTOPOINT,RUNNING,NOARP,MULTICAST>  mtu 1280
        inet6 2001:0:53aa:64c:308f:b6bf:98b1:8cdf  prefixlen 32  scopeid 0x0<global>
        inet6 fe80::ffff:ffff:ffff  prefixlen 64  scopeid 0x20<link>
        unspec 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00  txqueuelen 500  (UNSPEC)
        RX packets 54  bytes 5616 (5.6 KB)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 95  bytes 7884 (7.8 KB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

Konfigurasi teredo

Konfigurasi di lakukan melalui file

/etc/miredo.conf

Default-nya konfigurasi

InterfaceName 	teredo
ServerAddress	teredo-debian.remlab.net


Agar interface lain tidak mengganggu routing teredo

Ini terutama dibutuhkan kalau interface lain tidak ada IPv6-nya. Hasil,

route -n -A inet6 (ada entry ke fe80::1)
::/0    fe80::1  UGDAe 1024 5  1164 enp3s0

delete

ip route del ::/0 dev enp3s0
echo 0 >/proc/sys/net/ipv6/conf/enp3s0/accept_ra
/etc/init.d/networking restart
/etc/init.d/miredo restart

Cek

dig AAAA namasitus
dig AAAA www.kominfo.go.id
dig AAAA www.tni-au.mil.id
dig AAAA www.tniad.mil.id
dig AAAA www.tni.mil.id
ping6 -I teredo 2001:df2:a600::9
ping6 -I teredo 2001:df2:2a00::903:5
ping6 -I teredo 2001:df3:3800::903:8
ping6 -I teredo 2404:ba80:0:5::2


Hasil test-ipv6.com

Screenshot from 2019-01-30 12-29-02.png
Screenshot from 2019-01-30 12-29-07.png

Pranala Menarik