On 02/12/2010 06:51 PM, Tom Marble wrote: > Jon Schewe wrote: > >> I've got a setup with Xen using bridging. The host is OpenSUSE Linux, >> the guest is NetBSD. I have a bridge named br0 that bridges eth0 (my >> physical interface) and vif22.0 (the interface for the NetBSD guest). My >> NetBSD guest sends out an IPv6 packet. If I tcpdump on the network >> interface inside the guest, I see the packet go out. If I tcpdump on >> vif22.0 I see the packet, if I tcpdump on br0 I see the packet. If I >> tcpdump on eth0 I don't see the packet. This means the packet isn't >> going on the wire and it should. This all works fine with IPv4. >> > Have you enabled IPv6 *completely* in the host kernel? > > Does the following return anything? > % ifconfig eth0 | grep inet6 > > Is this output informative? > % grep -E 'I(P|PV|NET)6' /boot/config-`uname -r` > > Kernel modules to consider: > ip6tables (for module names like ip6t_*) > iptunnel6 > ipv6 > nf_conntrack_ipv6 > sit > > Packages to consider for convenience > (not required to get IPv6 pkts on eth0, names from Debian): > ipv6calc > ndisc6 > netcat6 > oping > radvd > rdisc6 > sipcalc > traceroute > ucspi-tcp-ipv6 > wireshark > > Here's the firewall output as well: mn-server:/etc/xen # ip6tables -L Chain INPUT (policy ACCEPT) target prot opt source destination Chain FORWARD (policy ACCEPT) target prot opt source destination Chain OUTPUT (policy ACCEPT) target prot opt source destination mn-server:/etc/xen # iptables -L Chain INPUT (policy ACCEPT) target prot opt source destination Chain FORWARD (policy ACCEPT) target prot opt source destination ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED PHYSDEV match --physdev-out vif22.0 ACCEPT all -- anywhere anywhere PHYSDEV match --physdev-in vif22.0 ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED PHYSDEV match --physdev-out vif17.0 ACCEPT all -- anywhere anywhere PHYSDEV match --physdev-in vif17.0 ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED PHYSDEV match --physdev-out vif8.1 ACCEPT all -- anywhere anywhere PHYSDEV match --physdev-in vif8.1 ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED PHYSDEV match --physdev-out vif8.0 ACCEPT all -- anywhere anywhere PHYSDEV match --physdev-in vif8.0 ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED PHYSDEV match --physdev-out vif6.0 ACCEPT all -- anywhere anywhere PHYSDEV match --physdev-in vif6.0 ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED PHYSDEV match --physdev-out vif5.0 ACCEPT all -- anywhere anywhere PHYSDEV match --physdev-in vif5.0 ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED PHYSDEV match --physdev-out vif4.0 ACCEPT all -- anywhere anywhere PHYSDEV match --physdev-in vif4.0 ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED PHYSDEV match --physdev-out vif2.0 ACCEPT all -- anywhere anywhere PHYSDEV match --physdev-in vif2.0 ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED ACCEPT all -- anywhere anywhere LOG all -- anywhere anywhere LOG level warning ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED ACCEPT all -- anywhere anywhere LOG all -- anywhere anywhere LOG level warning Chain OUTPUT (policy ACCEPT) target prot opt source destination -- Jon Schewe | http://mtu.net/~jpschewe If you see an attachment named signature.asc, this is my digital signature. See http://www.gnupg.org for more information. For I am convinced that neither death nor life, neither angels nor demons, neither the present nor the future, nor any powers, neither height nor depth, nor anything else in all creation, will be able to separate us from the love of God that is in Christ Jesus our Lord. - Romans 8:38-39