!!! Warning !!!

This testbed has been deprecated an will soon be dismantled because IPv6 is now available everywhere at CERN

Using the CERN IPv6 Testbed

Create a Virtual Machine

• You need to be part of the egroup ipv6-testbed-users in order to access the testbed. You can submit your request to join via the egroup web interface
• Login to the Virtual Machine Manager
• Click on Request Virtual Machine
• Fill the form with the necessary information. Please don't exagerate with the hardware specs!. Choose the Host Group:
  • "IT-CS\IPv6 testbed\LCG" to get a machine in the LCG domain (v4 address 128.142.0.0/16, LHCOPN access to the Tier1s)
  • "IT-CS\IPv6 testbed\GPN" to get a machine in the GPN domain (v4 address 137.138.0.0/16, normal campus machine)
  • WARNING: SLC5 images have the ipv6 module disabled. Please edit the file /etc/modprobe.conf and remove the lines disabling ipv6 (#alias ipv6 off, #options ipv6 disable=1); then reboot.
  • WARNING: SLC6 images may have the ipv6 module disabled. Please edit the file /etc/modprobe.d/ipv6.conf and remove the lines disabling ipv6 (# options ipv6 disable=1); edit the file /etc/avahi/avahi-daemon.conf and set use-ipv6=yes; then reboot.
  • WARNING: for PXE booting, you have to connect to the console of the machine and select NET from the boot menu. To connect to the console, you need access to the SCVMM Admin Console .
  • WARNING: for PXE installed machines, there's an isue with NTP. With SLC5, run yum install kmod-mshvic. With SLC6, refer to this page
• Click OK and you will receive a request confirmation email. After 30 minutes you'' receive the confirmation the machine has been created.
• Follow the link on the email to connect to the machine.
• Check the network parameters; the interface should have an IPv6 address from the prefix 2001:1458::/32 (for example using ifconfig on linux)
• Enjoy the IPv6 Internet!

Configure the IPv6 network connectivity

The IPv6 network should be configured out of the box. But if you have problem or you want to play with your IPv6 address, you can check the notes below.

DNS servers

• 2001:1458:201:1000::5
• 2001:1458:201:1100::5

DHCP servers

• 2001:1458:201:1000::9
• 2001:1458:201:1100::9

Autoconfiguration

Until a DHCPv6 implementation is able to provide full network configuration (end of 2011), testbed client operating systems are expected to use stateless autoconfiguration. The routers will provide prefix information in router advertisements signalling clients to retrieve other information (like dns servers and domain) from DHCPv6.

In detail, routers will advertise the Managed flag set to 0 and the Other flag set to 1. Prefixes will be onlink and autoconf. DHCPv6 requests for other information will be forwarded to testbed servers which will provide DNSv6 server addresses.

Windows 7

The default configuration (automatic) should autoconfigure prefixes, default v6 router and DNS servers automatically.

SLC5

If SLC5 is installed via PXE booting, when Network Devices are configured, edit eth0 and enable IPv6 support with automatic neighbor discovery.

SLC6

• install the latest ISC client with IPv6 support: yum install dhcp

Manual configuration

SLC5

• If you want to manually configure your host you'll need to request the IPv6 address(es) and the default gateway.
• Edit /etc/sysconfig/network and replace the IPv6 gateway by the provided one.

NETWORKING_IPV6=yes
IPV6_DEFAULTGW=2001:1458:201:1000::1

• Edit /etc/sysconfig/network-scripts/ifcfg-eth0 and replace the IPv6 address by the one provided. If you want to have multiple addresses add IPV6ADDR_SECONDARIES to the configuration, otherwise remove it from the file.

IPV6INIT=yes
IPV6_AUTOCONF=no
IPV6ADDR=2001:1458:201:1000::4/64
IPV6ADDR_SECONDARIES="space_separated_list_of_secondaries"
ONBOOT=yes

• More information
  • IPv6 on redhat-centos-fedora
  • Linux IPv6 HOWTO

Firewall opening

Firewall opening for servers are handled manually. Please send a request by email to neteng@cernNOSPAMPLEASE.ch stating:

• IPv6 address of the server
• Protocol and port to be be opened (i.e. TCP/80)
• Reason for the request