Routing over another host to access LL address running FRRouting #18638
Unanswered
GamePlayer-8
asked this question in
Q&A
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
Hello,
I have a problem where I couldn't connect to FRRouting running at
[fe80::5400:5ff:fe60:e633]:179
at host 1 from host 3 running over WireGuard at[2001:db8:bb0:1::5%bgp0]
.Host 2 is in between those 2 FRRouting instances and runs WireGuard server.
Host 2 can access
[fe80::5400:5ff:fe60:e633%ens3]:179
but sees port 179 as filtered at[2001:db8:bb0:1::5%bgp0]
.Host 2 has assigned LL IP at ens3
fe80::5400:5ff:fe60:e633
and global link2001:db8:bb0:1::1
at bgp0.Host 2 has assigned LL IP for WireGuard
fe80::1a2b:3c4d:2e6e:4390
and for host 3 -fe80::1a2b:3c4d:2e6e:4895
. Both host 2 and 3 couldn't reach each other over LL IPs (Host 2 reports errorFrom fe80::1a2b:3c4d:2e6e:4390%bgp0 icmp_seq=1 Destination unreachable: Address unreachable
and Host 3 returns nothing from ping).WireGuard uses IP range
2001:db8:bb0:1::/64
withTable = off
andMTU = 1500
.On the WireGuard server side I run in PostUp:
ip6tables -A FORWARD -i bgp0 -j ACCEPT; ip6tables -t nat -I POSTROUTING -o ens3 -j MASQUERADE; ip -6 addr add fe80::1a2b:3c4d:2e6e:4390/64 dev bgp0 scope link
Both hosts 2 and 3 can reach other through ping and standard communication on
2001:db8:bb0:1::/64
IP range.FRRouting at host 3, to which I have access to stays in
Active
orConnect
mode.How to configure host 2 to forward port from
[fe80::5400:5ff:fe60:e633%ens3]:179
to host 3 and port[2001:db8:bb0:1::5%bgp0]:179
to host 1 as well as make communication possible? Should I run another FRRouting instance on host 2 with the same ASN and network range or there's a way to use ip6tables NAT / socat for such setup?Beta Was this translation helpful? Give feedback.
All reactions