Hi to all. I'm trying to setup a 6to4 tunnel with route64.org. It's the first time I configure such a thing. I'm issuing the following command:

# dladm create-iptun -T 6to4 -a local=x.x.x.x -a remote=y.y.y.y iptun0

but I receive this error: "dladm: could not create tunnel: invalid argument"

anyone can suggest me what I'm doing wrong?

warden: "-T 6toa" doesn't take a remote= address. It is (as the man-page says) point-to-multipoint and used to connect 2002:V4ADDR::/48 islands with each other automatically.

To help you testing I have temporarily setup a 6to4 network on one of my boxes. Once you have your tunnel up, you should be able to ping 2002:d90d:4196::1

You'll get the 2002::/16 route to all 6to4 islands automatically. Note that RFC 3068 giving us the 192.88.99.0/24 anycast prefix for Relay Routers and the corresponding 2002:c058:6301:: default router address out of 2002:: land has been deprecated 11 years ago by RFC 7526.

I'm just noticing your "route64.org" note. I cannot read their webpages with dillo(1), but I think your are confusing "6over4"/"6in4" tunneling with "-T 6to4" RFC 3056 tunnels.

It's much more likely you'll need a "-T ipv4" tunnel with route64.org.

neitzel: thank you very much, in fact I have near zone knowledge about this, but I've the need to obtain an IPv6 address range.

now I've created a tunnel with this command, and it looks ok:

# dladm create-iptun -T ipv4 -a local=x.x.x.x -a remote=y.y.y.y iptun0

Then I added an IPv6 configuration with this command:

# ipadm create-addr -T addrconf iptun0/v6auto

But then the following command (which should configure the IPv6 addr route64 assigned me) failed with the error "ipadm: Could not create address: Invalid argument provided":

# ipadm create-addr -T static -a yyy:yyy:yy:yy::2/64 iptun0/v6

neitzel: meanwhile I successfully tested the 6to4 tunnel... I was able to reach you at 2002:d90d:4196::1 , and it looks like I'm at 2002:a772:d1d0::1

warden: after the "dladm create-iptun ... iptun0" and before the "ipadm create-addr ... iptun0/xxx", you need an "ipadm create-ip iptun0".

yes, I did so

here is my current status: paste.omnios.org/?4e412e2b92ca0e31#…m7E3XMJy4NLdM4JBgN3QuiN5zBxyBC4tWUq

I switched to my desk with a full-flegded brower and am looking at the "route64.org" site. I cannot guess which option you have chosen, and it appears that I cannot delve into the menues without creating an account (which I won't). Which tunnel type did you select? SIT?

yes, I selected the SIT option

Did you get static v6 addresses to configure for (a) your network (b) their gateway router?

yes, they provided me both. And that what they assigned to me was that yyy:yyy:yy:yy::2/64 in my previous command:

# ipadm create-addr -T static -a yyy:yyy:yy:yy::2/64 iptun0/v6

I read they assign a /56 to users as network... if they hand a out just a /64, then that is not for your tunnel interface but your LAN interface.

they assigned me a /56 actually, which they say they'll route to my yyy:yyy:yy:yy::2

OJ, then the ..::2/64 is for a transfer net on the tunnel and correct.

*OK, even.

yes. FWIU, I should assign the yyy:yyy:yy:yy::2 as iptun0/v6 and then set their yyy:yyy:yy:yy::1 as my default IPv6 router

Your "ipadm create-addr -T static -a yyy:yyy:yy:yy::2/64 iptun0/v6" looks perfectly fine to me then.

here is a screenshot from their web console: ibb.co/HjZmdHf

I really cannot understand what could cause that error "ipadm: Could not create address: Invalid argument provided"... maybe a syntax issue?!

Maybe the point-to-point tunnel end device doesn't go along with a /64 (network type) addr spec. Try a plain ....::2 addr without the /64, if that fails: a /128 prefix.

thanks, I supposed me too... I tried with no prefix mask, /128, /127, but I always got the same error! :'(

neitzel: I have to give up as for today... thank you very much for your help and explanation. I'll go on studying this config tomorrow!

I think I got it. Adopted from the Sol-11.3 manpage, "Example 6":

ipadm create-addr -T static \

-a local=yyyy...::2,remote=yyyyy...::1 iptun0/v6

Wow, thank you! It seems to work: now I'm able to ping yyy...::1

actually it's the right way to configure static IP addresses for a tunnel interface. You saved my day! :)

congrats -- i'll do some weekend shopping now.

thanks, and have a nice weekend!

you're welcome!