NAME

qjail-ipv6-testing — Details explaining how to perform testing of ipv6 addresses used in qjail non-vnet and vnet jails.

THINGS NOT COVERED HERE

Setting up host ipv6 connectivity from your public ISP or local ipv6 connectivity across your LAN.

TESTING DESCRIPTION

This testing setup is limited to just the host where qjail is running. It's intended to be used to test the connectivity between the hosts ipv6 address and the ipv6 addresses you assigned to your qjail non-vnet jails and vnet jails to verify things are working as they should. To simplify things the hosts firewall should have a rule to default to passing all ipv6 packets from the ping6 command.

ipv6 has a range of ipv6 ip address numbers reserved for local LAN use. Defined as fc00::/7 this is just like 10.0.0.0/8

To test qjail non-vnet jails and vnet jails for local ipv6 connectivity, the host needs a default local ipv6 ip address. Use this command on the host to create one. Replace fxp0 with the interface name your jails are using.

ifconfig fxp0 inet6 fc00::1 alias
and to remove it
ifconfig fxp0 inet6 fc00::1 -alias

The ipv6 addresses used for jail testing are coded like this.

qjail create -4 10.0.10.10 -6 fc00::2 # non-vnet1   qjail create -4 10.0.10.20 -6 fc00::3,fc00::4,fc00::5 # non-vnet2 qjail create -4 10.0.20.10 -6 fc00::6,fc00::7,fc00::8 # vnet10

From a vnet jail console you can ping6 the hosts ipv6 address this way
ping6 -c 2 fc00::1

From the host you can ping6 any jail using its ipv6 address this way
ping6 -c 2 fc00::4 # This is the non-vnet2 jail
ping6 -c 2 fc00::7 # This is the vnet10 jail

NOTE.

There is a bug for assigning link local ipv6 addresses to a jail. Bug number 206012. This bug is five years old all ready so not likly to get any attention soon.

ALSO SEE

qjail(8), qjail-intro(8), qjail-drive-traffic(8), qjail-vnet-howto.8

AUTHOR

Joe Barbish ⟨qjail1@a1poweruser.com⟩