You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 51 Next »

Our office has a /24 IPv4 and a /48 IPv6 network.
Test to see if it would be possible to run parts of the TERENA Secretariat office network on IPv6 only.
This page keeps track of progress, bugs, and issues with this transition.
I will start with all systems and services that are used only internally.

Milestones

(tick)

All linux servers use IPv6 resolvers

Only statically configured IPv6 addresses in /etc/resolv.conf

(tick)

All linux managed by SSH on IPv6 only

Configure ListenAddress :: in sshd_config.

(tick)

All linux servers run Postfix on IPv6 only (except public mail server)

Remove IPv4 address from $mynetworks, and set inet_protocols = ipv6

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="65133158-2139-4e18-8ee0-177f031ffd2a"><ac:plain-text-body><![CDATA[

(tick)

Nagios runs only on IPv6

Configure Listen [2001:610:158:98d::42]:80 in /etc/apache/ports.conf.

]]></ac:plain-text-body></ac:structured-macro>

(tick)

Entire host IPv6 (removed IPv4 address and A record) (smile)

svn.terena.org

To avoid name resolution problems, it was necessary to copy to the legacy 127.0.1.1 entries to ::1:

127.0.0.1       localhost
127.0.1.1       ldap.terena.org ldap

# The following lines are desirable for IPv6 capable hosts
::1     localhost ip6-localhost ip6-loopback ldap.terena.org ldap

Misc issues

status

description

 

(question)

NAT64

TAYGA?, Ecdysis?

(question)

DNS64

Ecdysis?

(error)

Cisco 3750 does not support IPv6 access lists on VLANs

Needs replacing in 2011 anyway. New box might support NAT64?

(error)

Google Mini does not support IPv6

Needs replacing in 2011 anyway, but don't forget to check!!

(question)

Windows 2003 + MS SQL 2005 + Exact Globe 2003 != ??

Check if this works...

Some tests indicate the Ecdysis works well.
Also, they presented at our own conference last year (wink)
Take into consideration!

Linux issues

(error)

PECL radius

IPv6 doesn't work. Needed for TERENA web site. Considering rewriting code to use LDAP.

(tick)

apt-get

security.ubuntu.com does not work, so no security updates. Workaround: use local mirror nl.archive.ubuntu.com for security updates.

(tick)

Pear Net_Socket

Does not like IPv6 addresses, wrote patch.

(tick)

ntp

ntp.ubuntu.com does not work. Use our own NTP server graham.terena.org, or one of the many SURFnet chimes.

(tick)

ntp

dumps core without IPv4 loopback address. Keep legacy 127.0.0.1 address

(tick)

Confluence and JIRA LDAP auth via IPv6 = b0rked

Workaround: use IPv6 only hostname: ldap.ipv6.terena.org

(tick)

Radiator

Cannot use IPv6 LDAP server. Filed support ticket at Open.com.au. Fixed as of 2011-02-12. Also make sure to add flags to any custom perl hooks:
my $ldap = Net::LDAP->new('ldap://ldap.terena.org',inet6=>1);

(tick)

Listmanager

Custom email list manager, running on Erasmus. 2 lists were doing queries to ldap.terena.org. Unfortunately the Net::LDAP in Ubuntu Hardy (libnet-ldap-perl) is too old and does not recognise the inet6 paramater. Hacked Fixed by copying /usr/share/perl5/Net/LDAP.pm from a Lucid box.

Windows issues

(tick)

WinSCP

Upgrade to 4.2.8 or later to get IPv6 going

(error)

EMS PostgresQL manager

Tunneling via SSH does not work. Native Postgres connections work, so the bug must be in sshfwd.dll.

(tick)

TurtoiseSVN

I had some repositories checked out with TurtoiseSVN, using my SSH keys from Putty/Pageant. Any actions on the repository started to have a really long delay after switching off IPv4 on the subversion server. Fixed after using the right repository URL format, in my case using the Putty session name instead of the host name. This session has everything set properly already. In my case the hostname is svn.terena.org, and the PuTTY session name is svn.

Mac OS X issues

(error)

Autoconfiguring name servers does not work for Mac OS X

Macs need manually configured name servers, boo!

(error)

CIFS client on Mac OS X does not support IPv6

Unable to file bug report due to lame web site ("An error has occurred. Please report the error to Apple Inc. by emailing the error detail to devbugs@apple.com.")

(tick)

CyberDuck does not work with IPv6 hostnames

Use either literal IPv6 address, or IPv6-only host name godzilla.ipv6.terena.org.
Fixed in 4.0

Misc

(error)

Axis Q1755 web cam

Can be configured to do IPv6, but only PING works (sad)

(tick)

VMware ESXi, Vcenter, VCB. These SHOULD work. Curious if it really works

(tick)

HP and Sharp printers, but we need IPv6 ACLs first

  • No labels