NAT64采用tayga實現,DNS64采用bind9.8實現。
1 平臺搭建
平臺為ubuntu12.04 Desktop版本。正常安裝即可。
2 NAT64(tayga)
2.1 安裝
在終端模式下輸入
sudo apt-get install tayga
2.2 配置
2.2.1 相關設置
sudo gedit /etc/tayga.conf
按照說明配置,目前實現方案不需要修改。
2.2.2 創建、啟動設備
tayga –mktun
ip link set nat64 up
2.2.3 地址、路由配置
ip addr add 192.168.0.1 dev nat64 (修改為本機IPv4地址)
ip addr add 2001:db8:1::1 dev nat64 (修改為本機IPv6地址)
ip route add 192.168.255.0/24 dev nat64(不需要修改)
ip route add 2001:db8:1:ffff::/96 dev nat64(不需要修改)
2.2.4 啟動IPv4、IPv6轉發
sysctl -w net.ipv4.conf.all.forwarding=1
sysctl -w net.ipv6.conf.all.forwarding=1
2.2.5 啟動tayga
tayga
可使用tayga –d進入debug模式。
ping6 2001:db8:1:ffff::192.168.0.1(192.168.0.1修改為本機IPv4地址)
2.2.6 NAT64設置
iptables -t nat -A POSTROUTING -s 192.168.255.0/24 -j SNAT --to-source 192.168.0.1 (修改為本機IPv4地址)
iptables -A FORWARD -s 192.168.255.0/24 -i nat64 -j ACCEPT
3 DNS64 bind9
3.1 安裝
sudo apt-get install bind9
3.2 配置
sudo gedit /etc/bind/named.conf.options
修改為如下:
options {
directory "/var/cache/bind";
// If there is a firewall between you and nameservers you want
// to talk to, you may need to fix the firewall to allow multiple
// ports to talk. See http://www.kb.cert.org/vuls/id/800113
// If your ISP provided one or more IP addresses for stable
// nameservers, you probably want to use them as forwarders.
// Uncomment the following block, and insert the addresses replacing
// the all-0's placeholder.
listen-on-v6 { any; };
allow-query { any; };
dns64 2001:db8:1:ffff::/96 {
clients { any; };
};
forwarders {
8.8.8.8; //DNS地址
};
//=================================================================
// If BIND logs error messages about the root key being expired,
// you will need to update your keys. See https://www.isc.org/bind-keys
//================================================================
dnssec-validation auto;
auth-nxdomain no; # conform to RFC1035
listen-on-v6 { any; };
};
修改完成后,輸入 named.conf查看修改是否成功。
3.3 啟動bind9
Bind9默認安裝后開機啟動。設置完成后,輸入
/etc/init.d/bind restart
4 使用
4.1 Windows
用管理員權限進入cmd,輸入
netsh
>interface ipv6
>add route 2001:db8:1:ffff::/96(修改為機器的ipv6地址) "本地連接" 2001:db8:1::1(修改為服務器的ipv6地址)
然后設置DNS服務器為NAT64地址即可
4.2 Linux
添加路由
ip route add 2001:db8:1:ffff::/96 (修改為機器的ipv6地址) via 2001:db8:1::1
(為服務器的ipv6地址)
然后設置DNS服務器為NAT64地址即可
注:
本文中服務器地址為:192.168.130.42
2400:dd01:1001:130:250:c2ff:fe23:f051/64