/ Networking

6rd based tunnel on SRX

I started using IPv6 with a SixXS 6in4 tunnel back in May 2009.

Since SixXS is doing Call-Your-ISP-For-IPv6 actions through 2016, I contacted my ISP (OnsBrabantNet) and asked them if and when I will get native IPv6.
Unfortunately, they will only provide IPv6 with their 6rd setup.

I’m using a SRX210HE2 as home gateway, which doesn’t support 6rd (it’s not capable to calculate the 6rd prefix) but does support IP tunneling.

IP tunneling allows the encapsulation of one IP packet over another IP packet. Packets are routed to an internal interface (ip-0/0/0) where they are encapsulated with an IP packet and then forwarded to the encapsulating packet’s destination address.
RIPE has good detailed information on both 6rd and 6in4 (and other transition mechanisms).

I was wondering if it would be possible to create a tunnel based on the 6rd information provided by OnsBrabantNet:

6rd gegevens voor

6rd-prefix: 2a01:670:6a00
6rd-prefix-length: 40
IPv4-mask-bits: 16

-- OnsBrabantNet

So I calculated my IPv6 subnet, using ipv6calc:

# ipv6calc --in ipv4 --out ipv6 --action 6rd_local_prefix --6rd_prefix 2a01:670:6a00::/40 --6rd_relay_prefix 88.159.X.Y

This /56 subnet is routed over the tunnel. This differs from the SixXS setup, which routes a /64 subnet over the tunnel and routes aan additional /48 subnet to an address from the /64 subnet (configured on the tunnel interface).

The following configuration snippet is currently providing me with IPv6 at home:

set interfaces ip-0/0/0 unit 0 description onsbrabantnet-6rd-tunnel
set interfaces ip-0/0/0 unit 0 tunnel source 88.159.X.Y
set interfaces ip-0/0/0 unit 0 tunnel destination
set interfaces vlan unit 3 description vlan-lab3
set interfaces vlan unit 3 family inet6 address 2a01:670:6aXX:YY03::1/64
set interfaces vlan unit 4 description vlan-lab4
set interfaces vlan unit 4 family inet6 address 2a01:670:6aXX:YY04::1/64
set interfaces vlan unit 5 description vlan-lab5
set interfaces vlan unit 5 family inet6 address 2a01:670:6aXX:YY05::1/64
set routing-options rib inet6.0 static route ::/0 next-hop ip-0/0/0.0
set security zones security-zone untrust interfaces ip-0/0/0.0 host-inbound-traffic system-services ping

Still hoping OnsBrabantNet will rollout native IPv6 this year though.