https://docs.opennet-initiative.de/index.php?action=history&feed=atom&title=Benutzer%3ALeo%2Ftayga 2026-10-07T08:57:10Z Versionsgeschichte dieser Seite in Opennet MediaWiki 1.43.9 https://docs.opennet-initiative.de/index.php?title=Benutzer:Leo/tayga&diff=36328&oldid=prev 2020-11-01T20:53:45Z

<p>Die Seite wurde neu angelegt: „==Beispiel für NAT64 tayga Installation auf Server gai== root@gai:~/tayga# cat README.md &lt;nowiki&gt; see /etc/tayga.conf Before starting the TAYGA daemon, th…“</p> <p><b>Neue Seite</b></p><div>==Beispiel für NAT64 tayga Installation auf Server gai==<br /> <br /> root@gai:~/tayga# cat README.md <br /> &lt;nowiki&gt;<br /> see /etc/tayga.conf<br /> <br /> Before starting the TAYGA daemon, the routing setup on your system will need<br /> to be changed to send IPv4 and IPv6 packets to TAYGA. First create the TUN<br /> network interface:<br /> <br /> # tayga --mktun<br /> <br /> If TAYGA prints any errors, you will need to fix your config file before<br /> continuing. Otherwise, the new nat64 interface can be configured and the<br /> proper routes can be added to your system:<br /> <br /> ip link set nat64 up<br /> ip addr add 2a0a:4580:1010:2002::1 dev nat64 # replace with your router&#039;s address<br /> ip addr add 10.253.0.1 dev nat64 # replace with your router&#039;s address<br /> ip route add 2a0a:4580:1010:2002::/96 dev nat64 # from tayga.conf<br /> ip route add 10.253.0.0/24 dev nat64 # from tayga.conf<br /> <br /> Firewalling your NAT64 prefix from outside access is highly recommended:<br /> <br /> # ip6tables -A FORWARD -s 2001:db8:1::/48 -d 2001:db8:1:ffff::/96 -j ACCEPT<br /> # ip6tables -A FORWARD -d 2001:db8:1:ffff::/96 -j DROP<br /> <br /> At this point, you may start the tayga process:<br /> <br /> # tayga<br /> <br /> Check your system log (/var/log/syslog or /var/log/messages) for status<br /> information.<br /> <br /> If you are having difficulty configuring TAYGA, use the -d option to run the<br /> tayga process in the foreground and send all log messages to stdout:<br /> <br /> # tayga -d<br /> <br /> &lt;/nowiki&gt;<br /> <br /> cat 330_ugw-nat64-native-on-gai.inc <br /> <br /> &lt;nowiki&gt;<br /> <br /> #todo: test whether the br-.... interface name change in the meantime<br /> <br /> @def $IF_ONI_NAT64 = nat64;<br /> @def $IF_WAN = eth0;<br /> @def $IF_BABEL_MESH = babel-vpn;<br /> <br /> domain (ip ip6) table filter {<br /> chain service-input {<br /> # erlaube input weil NAT64 Adressbereich geroutet wird<br /> interface $IF_ONI_NAT64 ACCEPT;<br /> }<br /> }<br /> <br /> domain (ip ip6) chain FORWARD outerface $IF_WAN {<br /> # erlaube Internet Traffic<br /> interface $IF_ONI_NAT64 ACCEPT;<br /> }<br /> <br /> domain (ip6) chain FORWARD interface $IF_ONI_NAT64 {<br /> # erlaube NAT64 Traffic, welcher ueber docker host geroutet wird. Deshalb in und out gleiches Interface.<br /> outerface $IF_ONI_NAT64 ACCEPT;<br /> }<br /> <br /> #dns64<br /> #TODO: auf Ziel IP + Port beschraenken<br /> domain ip6 chain FORWARD interface $IF_BABEL_MESH {<br /> # erlaube mesh Zugriff auf DNS64<br /> outerface $IF_ONI_NAT64 ACCEPT;<br /> }<br /> <br /> domain ip table nat {<br /> chain POSTROUTING {<br /> outerface $IF_WAN saddr (10.254.0.0/16) MASQUERADE;<br /> }<br /> }<br /> <br /> &lt;/nowiki&gt;</div>

Leo