IPv6 setup Hurricane Electric Tunnel Broker

From DD-WRT Wiki

(Difference between revisions)
Jump to: navigation, search
Revision as of 07:28, 22 February 2011 (edit)
Mofunzone (Talk | contribs)
(See Also)
← Previous diff
Revision as of 07:29, 22 February 2011 (edit) (undo)
Mofunzone (Talk | contribs)
(About)
Next diff →
Line 16: Line 16:
You should have an account and tunnel created on the website. This post will not cover that. Install steps are below the script. This script will only work with /64 tunnels/addresses. Don't use it if you're using /48 You should have an account and tunnel created on the website. This post will not cover that. Install steps are below the script. This script will only work with /64 tunnels/addresses. Don't use it if you're using /48
-###############################################################################+[http://www.dd-wrt.com/phpBB2/viewtopic.php?p=522943]
-# v1.1 Jan 23, 2011 DAVE_SPAM VERSION (original by ac1115) +
-# HURRICANE ELECTRIC IPv6 TUNNEL SCRIPT +
-#****************************************************************************** +
-# USE THE LATEST VERSION OF DD-WRT, ie 15962 +
-# see: ftp://dd-wrt.com/others/eko/BrainSlayer-V24-preSP2/12-24-10-r15962/ +
-# tested with DD-WRT 15962 voip version on WRT610nv2 with PPPoE WAN connection +
-# +
-# +
-# +
-#****************************************************************************** +
-#Settings start here +
-#****************************************************************************** +
- +
-#### basic connection settings FROM http://www.tunnelbroker.net/tunnel_detail.php?tunnelid=NNNNNN +
-SERVER_IP4_ADDR="enter ip here" +
-CLIENT_IPV6_ADDR="enter ip here" +
-ROUTED_64_ADDR="enter ip here" +
- +
-#### account info to auto update endpoint FROM http://www.tunnelbroker.net/main.php +
-USERID="enter the long hex code - NOT text username" +
-PASSWD="plain text password" +
-TUNNELID="your numeric GLOBAL tunnel id" +
- +
-#####Optional/Advanced Settings###### +
-#logging settings (set to /dev/null for no logging) +
-STARTUP_SCRIPT_LOG_FILE="/tmp/ipv6.log" +
-CRON_STATUS_LOG_FILE="/tmp/ipv6_lastHEUpdate.log" +
- +
-#Generated files paths +
-CRON_JOB_FILE="/tmp/ipv6_reload.sh" +
-SCRIPT_FILE="/tmp/ipv6_run.sh" +
-RADVD_CONFIG="/tmp/radvd.conf" +
- +
-#****************************************************************************** +
-#Settings end here +
-#****************************************************************************** +
- +
-echo "HE IPv6 Script started" > $STARTUP_SCRIPT_LOG_FILE +
-date >> $STARTUP_SCRIPT_LOG_FILE +
- +
-insmod ipv6 +
-#maybe needs to be incresed for slow boxes. +
-sleep 1.5 +
- +
-#get a hash of the plaintext password +
-MD5PASSWD=`echo -n $PASSWD | md5sum | sed -e 's/ -//g'` +
-echo "" >> $STARTUP_SCRIPT_LOG_FILE +
- +
-#cut out the "/64" if user typed it in +
-ROUTED_64_ADDR=`echo $ROUTED_64_ADDR|cut -f1 -d/` +
-SERVER_IP4_ADDR=`echo $SERVER_IP4_ADDR|cut -f1 -d/` +
-CLIENT_IPV6_ADDR=`echo $CLIENT_IPV6_ADDR|cut -f1 -d/` +
-echo "User added addresses cleaned/checked" >> $STARTUP_SCRIPT_LOG_FILE +
- +
-#do HE update +
-echo "Do HE Update" >> $STARTUP_SCRIPT_LOG_FILE +
-wget -q "http://ipv4.tunnelbroker.net/ipv4_end.php?ipv4b=AUTO&pass=$MD5PASSWD&user_id=$USERID&tunnel_id=$TUNNELID" -O - >> $STARTUP_SCRIPT_LOG_FILE +
- +
-#get wan ip for our own use from internal variable +
-WANIP=$(nvram get wan_ipaddr); +
-echo " External IP detected as:" $WANIP >> $STARTUP_SCRIPT_LOG_FILE +
-echo " External IP detected as:" $WANIP +
- +
-if [ -n $WANIP ] +
-then +
-echo "configuring tunnel" >> $STARTUP_SCRIPT_LOG_FILE +
-echo "configuring tunnel" +
- +
-### create/update tunnel code +
-#fixes ioctl: No buffer space available ERROR +
-ip tunnel del he-ipv6 +
-# The following commands are from HE's website +
-ip tunnel add he-ipv6 mode sit remote $SERVER_IP4_ADDR local $WANIP ttl 255 +
-ip link set he-ipv6 up +
-ip addr add $CLIENT_IPV6_ADDR/64 dev he-ipv6 +
-ip route add ::/0 dev he-ipv6 +
-ip -f inet6 addr +
-TEMP_ADDR=`echo $ROUTED_64_ADDR'1'` +
-# These commands aren't on HE's website, but they're necessary for the tunnel to work +
-ip -6 addr add $TEMP_ADDR/64 dev br0 +
-ip route add 2000::/3 dev he-ipv6 +
- +
-#Enable IPv6 forwarding +
-echo 1 > /proc/sys/net/ipv6/conf/all/forwarding +
- +
-# make sure to accept proto-41 +
-iptables -I INPUT 2 -p ipv6 -i vlan1 -j ACCEPT +
- +
-#make sure to not NAT proto-41 +
-iptables -t nat -A POSTROUTING --proto ! 41 -o eth0 -j MASQUERADE +
-echo "creating radvd conf" >> $STARTUP_SCRIPT_LOG_FILE +
- +
-#creating radvd.conf +
-echo "#generated by startup script" > $RADVD_CONFIG +
-echo "interface br0 {" >> $RADVD_CONFIG +
-echo "AdvSendAdvert on;" >> $RADVD_CONFIG +
-echo "prefix "$ROUTED_64_ADDR"/64 {" >> $RADVD_CONFIG +
-echo "AdvOnLink on;" >> $RADVD_CONFIG +
-echo "AdvAutonomous on;" >> $RADVD_CONFIG +
-echo "AdvRouterAddr on;" >> $RADVD_CONFIG +
-echo "};" >> $RADVD_CONFIG +
-echo "};" >> $RADVD_CONFIG +
- +
-#kill old versions of radvd +
-echo "killing any old versions of radvd" >> $STARTUP_SCRIPT_LOG_FILE +
-kill -s 9 $(cat /var/run/radvd.pid) +
-sleep 1 +
- +
-echo "starting radvd" >> $STARTUP_SCRIPT_LOG_FILE +
-radvd -C $RADVD_CONFIG & +
- +
- +
-#create cron script to run this all later +
-# take this file from memory and put it into shell script file, so cron job can run it. +
-echo "nvram get rc_startup > $SCRIPT_FILE" >$CRON_JOB_FILE +
-echo "chmod +x $SCRIPT_FILE" >>$CRON_JOB_FILE +
-echo "$SCRIPT_FILE" >> $CRON_JOB_FILE +
-chmod +x $CRON_JOB_FILE +
-echo "Cron script created" >> $STARTUP_SCRIPT_LOG_FILE +
- +
- +
-echo "HE IPv6 Script finished" >> $STARTUP_SCRIPT_LOG_FILE +
-fi+
- +
-###############################################################################+
-# v1.1 Jan 23, 2011 DAVE_SPAM VERSION (original by ac1115) +
-# HURRICANE ELECTRIC IPv6 TUNNEL SCRIPT +
-#****************************************************************************** +
-# USE THE LATEST VERSION OF DD-WRT, ie 15962 +
-# see: ftp://dd-wrt.com/others/eko/BrainSlayer-V24-preSP2/12-24-10-r15962/ +
-# tested with DD-WRT 15962 voip version on WRT610nv2 with PPPoE WAN connection +
-# +
-# +
-# +
-#****************************************************************************** +
-#Settings start here +
-#****************************************************************************** +
- +
-#### basic connection settings FROM http://www.tunnelbroker.net/tunnel_detail.php?tunnelid=NNNNNN +
-SERVER_IP4_ADDR="enter ip here" +
-CLIENT_IPV6_ADDR="enter ip here" +
-ROUTED_64_ADDR="enter ip here" +
- +
-#### account info to auto update endpoint FROM http://www.tunnelbroker.net/main.php +
-USERID="enter the long hex code - NOT text username" +
-PASSWD="plain text password" +
-TUNNELID="your numeric GLOBAL tunnel id" +
- +
-#####Optional/Advanced Settings###### +
-#logging settings (set to /dev/null for no logging) +
-STARTUP_SCRIPT_LOG_FILE="/tmp/ipv6.log" +
-CRON_STATUS_LOG_FILE="/tmp/ipv6_lastHEUpdate.log" +
- +
-#Generated files paths +
-CRON_JOB_FILE="/tmp/ipv6_reload.sh" +
-SCRIPT_FILE="/tmp/ipv6_run.sh" +
-RADVD_CONFIG="/tmp/radvd.conf" +
- +
-#****************************************************************************** +
-#Settings end here +
-#****************************************************************************** +
- +
-echo "HE IPv6 Script started" > $STARTUP_SCRIPT_LOG_FILE +
-date >> $STARTUP_SCRIPT_LOG_FILE +
- +
-insmod ipv6 +
-#maybe needs to be incresed for slow boxes. +
-sleep 1.5 +
- +
-#get a hash of the plaintext password +
-MD5PASSWD=`echo -n $PASSWD | md5sum | sed -e 's/ -//g'` +
-echo "" >> $STARTUP_SCRIPT_LOG_FILE +
- +
-#cut out the "/64" if user typed it in +
-ROUTED_64_ADDR=`echo $ROUTED_64_ADDR|cut -f1 -d/` +
-SERVER_IP4_ADDR=`echo $SERVER_IP4_ADDR|cut -f1 -d/` +
-CLIENT_IPV6_ADDR=`echo $CLIENT_IPV6_ADDR|cut -f1 -d/` +
-echo "User added addresses cleaned/checked" >> $STARTUP_SCRIPT_LOG_FILE +
- +
-#do HE update +
-echo "Do HE Update" >> $STARTUP_SCRIPT_LOG_FILE +
-wget -q "http://ipv4.tunnelbroker.net/ipv4_end.php?ipv4b=AUTO&pass=$MD5PASSWD&user_id=$USERID&tunnel_id=$TUNNELID" -O - >> $STARTUP_SCRIPT_LOG_FILE +
- +
-#get wan ip for our own use from internal variable +
-WANIP=$(nvram get wan_ipaddr); +
-echo " External IP detected as:" $WANIP >> $STARTUP_SCRIPT_LOG_FILE +
-echo " External IP detected as:" $WANIP +
- +
-if [ -n $WANIP ] +
-then +
-echo "configuring tunnel" >> $STARTUP_SCRIPT_LOG_FILE +
-echo "configuring tunnel" +
- +
-### create/update tunnel code +
-#fixes ioctl: No buffer space available ERROR +
-ip tunnel del he-ipv6 +
-# The following commands are from HE's website +
-ip tunnel add he-ipv6 mode sit remote $SERVER_IP4_ADDR local $WANIP ttl 255 +
-ip link set he-ipv6 up +
-ip addr add $CLIENT_IPV6_ADDR/64 dev he-ipv6 +
-ip route add ::/0 dev he-ipv6 +
-ip -f inet6 addr +
-TEMP_ADDR=`echo $ROUTED_64_ADDR'1'` +
-# These commands aren't on HE's website, but they're necessary for the tunnel to work +
-ip -6 addr add $TEMP_ADDR/64 dev br0 +
-ip route add 2000::/3 dev he-ipv6 +
- +
-#Enable IPv6 forwarding +
-echo 1 > /proc/sys/net/ipv6/conf/all/forwarding +
- +
-# make sure to accept proto-41 +
-iptables -I INPUT 2 -p ipv6 -i vlan1 -j ACCEPT +
- +
-#make sure to not NAT proto-41 +
-iptables -t nat -A POSTROUTING --proto ! 41 -o eth0 -j MASQUERADE +
-echo "creating radvd conf" >> $STARTUP_SCRIPT_LOG_FILE +
- +
-#creating radvd.conf +
-echo "#generated by startup script" > $RADVD_CONFIG +
-echo "interface br0 {" >> $RADVD_CONFIG +
-echo "AdvSendAdvert on;" >> $RADVD_CONFIG +
-echo "prefix "$ROUTED_64_ADDR"/64 {" >> $RADVD_CONFIG +
-echo "AdvOnLink on;" >> $RADVD_CONFIG +
-echo "AdvAutonomous on;" >> $RADVD_CONFIG +
-echo "AdvRouterAddr on;" >> $RADVD_CONFIG +
-echo "};" >> $RADVD_CONFIG +
-echo "};" >> $RADVD_CONFIG +
- +
-#kill old versions of radvd +
-echo "killing any old versions of radvd" >> $STARTUP_SCRIPT_LOG_FILE +
-kill -s 9 $(cat /var/run/radvd.pid) +
-sleep 1 +
- +
-echo "starting radvd" >> $STARTUP_SCRIPT_LOG_FILE +
-radvd -C $RADVD_CONFIG & +
- +
- +
-#create cron script to run this all later +
-# take this file from memory and put it into shell script file, so cron job can run it. +
-echo "nvram get rc_startup > $SCRIPT_FILE" >$CRON_JOB_FILE +
-echo "chmod +x $SCRIPT_FILE" >>$CRON_JOB_FILE +
-echo "$SCRIPT_FILE" >> $CRON_JOB_FILE +
-chmod +x $CRON_JOB_FILE +
-echo "Cron script created" >> $STARTUP_SCRIPT_LOG_FILE +
- +
- +
-echo "HE IPv6 Script finished" >> $STARTUP_SCRIPT_LOG_FILE +
-fi+
- +
-###############################################################################+
-# v1.1 Jan 23, 2011 DAVE_SPAM VERSION (original by ac1115) +
-# HURRICANE ELECTRIC IPv6 TUNNEL SCRIPT +
-#****************************************************************************** +
-# USE THE LATEST VERSION OF DD-WRT, ie 15962 +
-# see: ftp://dd-wrt.com/others/eko/BrainSlayer-V24-preSP2/12-24-10-r15962/ +
-# tested with DD-WRT 15962 voip version on WRT610nv2 with PPPoE WAN connection +
-# +
-# +
-# +
-#****************************************************************************** +
-#Settings start here +
-#****************************************************************************** +
- +
-#### basic connection settings FROM http://www.tunnelbroker.net/tunnel_detail.php?tunnelid=NNNNNN +
-SERVER_IP4_ADDR="enter ip here" +
-CLIENT_IPV6_ADDR="enter ip here" +
-ROUTED_64_ADDR="enter ip here" +
- +
-#### account info to auto update endpoint FROM http://www.tunnelbroker.net/main.php +
-USERID="enter the long hex code - NOT text username" +
-PASSWD="plain text password" +
-TUNNELID="your numeric GLOBAL tunnel id" +
- +
-#####Optional/Advanced Settings###### +
-#logging settings (set to /dev/null for no logging) +
-STARTUP_SCRIPT_LOG_FILE="/tmp/ipv6.log" +
-CRON_STATUS_LOG_FILE="/tmp/ipv6_lastHEUpdate.log" +
- +
-#Generated files paths +
-CRON_JOB_FILE="/tmp/ipv6_reload.sh" +
-SCRIPT_FILE="/tmp/ipv6_run.sh" +
-RADVD_CONFIG="/tmp/radvd.conf" +
- +
-#****************************************************************************** +
-#Settings end here +
-#****************************************************************************** +
- +
-echo "HE IPv6 Script started" > $STARTUP_SCRIPT_LOG_FILE +
-date >> $STARTUP_SCRIPT_LOG_FILE +
- +
-insmod ipv6 +
-#maybe needs to be incresed for slow boxes. +
-sleep 1.5 +
- +
-#get a hash of the plaintext password +
-MD5PASSWD=`echo -n $PASSWD | md5sum | sed -e 's/ -//g'` +
-echo "" >> $STARTUP_SCRIPT_LOG_FILE +
- +
-#cut out the "/64" if user typed it in +
-ROUTED_64_ADDR=`echo $ROUTED_64_ADDR|cut -f1 -d/` +
-SERVER_IP4_ADDR=`echo $SERVER_IP4_ADDR|cut -f1 -d/` +
-CLIENT_IPV6_ADDR=`echo $CLIENT_IPV6_ADDR|cut -f1 -d/` +
-echo "User added addresses cleaned/checked" >> $STARTUP_SCRIPT_LOG_FILE +
- +
-#do HE update +
-echo "Do HE Update" >> $STARTUP_SCRIPT_LOG_FILE +
-wget -q "http://ipv4.tunnelbroker.net/ipv4_end.php?ipv4b=AUTO&pass=$MD5PASSWD&user_id=$USERID&tunnel_id=$TUNNELID" -O - >> $STARTUP_SCRIPT_LOG_FILE +
- +
-#get wan ip for our own use from internal variable +
-WANIP=$(nvram get wan_ipaddr); +
-echo " External IP detected as:" $WANIP >> $STARTUP_SCRIPT_LOG_FILE +
-echo " External IP detected as:" $WANIP +
- +
-if [ -n $WANIP ] +
-then +
-echo "configuring tunnel" >> $STARTUP_SCRIPT_LOG_FILE +
-echo "configuring tunnel" +
- +
-### create/update tunnel code +
-#fixes ioctl: No buffer space available ERROR +
-ip tunnel del he-ipv6 +
-# The following commands are from HE's website +
-ip tunnel add he-ipv6 mode sit remote $SERVER_IP4_ADDR local $WANIP ttl 255 +
-ip link set he-ipv6 up +
-ip addr add $CLIENT_IPV6_ADDR/64 dev he-ipv6 +
-ip route add ::/0 dev he-ipv6 +
-ip -f inet6 addr +
-TEMP_ADDR=`echo $ROUTED_64_ADDR'1'` +
-# These commands aren't on HE's website, but they're necessary for the tunnel to work +
-ip -6 addr add $TEMP_ADDR/64 dev br0 +
-ip route add 2000::/3 dev he-ipv6 +
- +
-#Enable IPv6 forwarding +
-echo 1 > /proc/sys/net/ipv6/conf/all/forwarding +
- +
-# make sure to accept proto-41 +
-iptables -I INPUT 2 -p ipv6 -i vlan1 -j ACCEPT +
- +
-#make sure to not NAT proto-41 +
-iptables -t nat -A POSTROUTING --proto ! 41 -o eth0 -j MASQUERADE +
-echo "creating radvd conf" >> $STARTUP_SCRIPT_LOG_FILE +
- +
-#creating radvd.conf +
-echo "#generated by startup script" > $RADVD_CONFIG +
-echo "interface br0 {" >> $RADVD_CONFIG +
-echo "AdvSendAdvert on;" >> $RADVD_CONFIG +
-echo "prefix "$ROUTED_64_ADDR"/64 {" >> $RADVD_CONFIG +
-echo "AdvOnLink on;" >> $RADVD_CONFIG +
-echo "AdvAutonomous on;" >> $RADVD_CONFIG +
-echo "AdvRouterAddr on;" >> $RADVD_CONFIG +
-echo "};" >> $RADVD_CONFIG +
-echo "};" >> $RADVD_CONFIG +
- +
-#kill old versions of radvd +
-echo "killing any old versions of radvd" >> $STARTUP_SCRIPT_LOG_FILE +
-kill -s 9 $(cat /var/run/radvd.pid) +
-sleep 1 +
- +
-echo "starting radvd" >> $STARTUP_SCRIPT_LOG_FILE +
-radvd -C $RADVD_CONFIG & +
- +
- +
-#create cron script to run this all later +
-# take this file from memory and put it into shell script file, so cron job can run it. +
-echo "nvram get rc_startup > $SCRIPT_FILE" >$CRON_JOB_FILE +
-echo "chmod +x $SCRIPT_FILE" >>$CRON_JOB_FILE +
-echo "$SCRIPT_FILE" >> $CRON_JOB_FILE +
-chmod +x $CRON_JOB_FILE +
-echo "Cron script created" >> $STARTUP_SCRIPT_LOG_FILE +
- +
- +
-echo "HE IPv6 Script finished" >> $STARTUP_SCRIPT_LOG_FILE +
-fi <nowiki>Insert non-formatted text here</nowiki>+

Revision as of 07:29, 22 February 2011

About

This will...
Set up HE's tunnel broker service.
Automatically finds your wan ip at boot using whatismyip.com
Automatically updates HE's endpoint on boot
Generates a radvd.conf on boot, and applies it automatically
Generates a executable file that can be used with cron to keep HE's endpoint up-to-date if you have a dynamic IP


My setup for reference.
Optimum Online Cable ISP
WRT610Nv2
v24-sp2 (Aug 12, 2010)
build 14929

You should have an account and tunnel created on the website. This post will not cover that. Install steps are below the script. This script will only work with /64 tunnels/addresses. Don't use it if you're using /48

[1]