GATE.🇫🇷.◕‿◕.ST 4A00::1/64

Linux Debian router connected to the Livebox5 (DMZ for IPv4) with connection ASN 3215 Orange S.A. in Valdeblore (FR), France (UTC+1). All traffic passes through this machine (except the TV box).

Network IPv4 + IPv6

IPv4 Public address : 90.116.205.63/32

IPv6 GUA Network : 2a01:cb1d:813:4a00:0000:0000:0000:0000/56
IPv6 GUA Network range : 2a01:cb1d:813:4a00:0000:0000:0000:0000-2a01:cb1d:813:4aff:ffff:ffff:ffff:ffff

gate.fr.◕‿◕.st

IPv6 GUA Network : 2a01:cb1d:813:4a00:0000:0000:0000:0000/64
IPv6 GUA Network range : 2a01:cb1d:813:4a00:0000:0000:0000:0000-2a01:cb1d:813:4a00:ffff:ffff:ffff:ffff

Orange_FR assigns me an IPv6 address of type IPv6::/56 for my home internet connection, with default access to the first IPv6::/64 block without delegation to a local NS server to configure reverse DNS - with the possibility of activating multiple IPv6::/64 blocks.

IPv6 SLA Network : fec1::/16
IPv6 SLA Network range : fec1:0000:0000:0000:0000:0000:0000:0000-fec1:ffff:ffff:ffff:ffff:ffff:ffff:ffff

/ infos /

Ethernet Interfaces :

root@gate:~ # lshw -C network
  *-network:0
       description: Ethernet interface
       produit: NetXtreme II BCM57810 10 Gigabit Ethernet
       fabriquant: Broadcom Inc. and subsidiaries
       identifiant matériel: 0
       information bus: pci@0000:01:00.0
       nom logique: enp1s0f0
       version: 10
       numéro de série: 98:b7:85:20:46:e0
       taille: 10Gbit/s
       capacité: 10Gbit/s
       bits: 64 bits
       horloge: 33MHz
       fonctionnalités: pm vpd msi msix pciexpress bus_master cap_list rom ethernet physical fibre 1000bt-fd 10000bt-fd
       configuration: autonegotiation=off broadcast=yes driver=bnx2x driverversion=6.1.0-30-amd64 duplex=full firmware=7.13b.4.1c bc 7.13.75 latency=0 link=yes multicast=yes speed=10Gbit/s
       ressources: irq:16 mémoire:fd000000-fd7fffff mémoire:fc800000-fcffffff mémoire:fdef0000-fdefffff mémoire:fe880000-fe8fffff
  *-network:1
       description: Ethernet interface
       produit: NetXtreme II BCM57810 10 Gigabit Ethernet
       fabriquant: Broadcom Inc. and subsidiaries
       identifiant matériel: 0.1
       information bus: pci@0000:01:00.1
       nom logique: enp1s0f1
       version: 10
       numéro de série: 98:b7:85:20:46:e1
       taille: 10Gbit/s
       capacité: 10Gbit/s
       bits: 64 bits
       horloge: 33MHz
       fonctionnalités: pm vpd msi msix pciexpress bus_master cap_list rom ethernet physical fibre 1000bt-fd 10000bt-fd
       configuration: autonegotiation=off broadcast=yes driver=bnx2x driverversion=6.1.0-30-amd64 duplex=full firmware=7.13b.4.1c bc 7.13.75 latency=0 link=yes multicast=yes port=fibre speed=10Gbit/s
       ressources: irq:17 mémoire:fc000000-fc7fffff mémoire:fb800000-fbffffff mémoire:fdee0000-fdeeffff mémoire:fe800000-fe87ffff
  *-network
       description: Ethernet interface
       produit: RTL8125 2.5GbE Controller
       fabriquant: Realtek Semiconductor Co., Ltd.
       identifiant matériel: 0
       information bus: pci@0000:04:00.0
       nom logique: enp4s0
       version: 05
       numéro de série: 00:e0:4c:2a:03:f4
       taille: 1Gbit/s
       capacité: 1Gbit/s
       bits: 64 bits
       horloge: 33MHz
       fonctionnalités: pm msi pciexpress msix vpd bus_master cap_list ethernet physical tp mii 10bt 10bt-fd 100bt 100bt-fd 1000bt-fd autonegotiation
       configuration: autonegotiation=on broadcast=yes driver=r8169 driverversion=6.1.0-30-amd64 duplex=full firmware=rtl8125b-2_0.0.2 07/13/20 latency=0 link=yes multicast=yes port=twisted pair speed=1Gbit/s
       ressources: irq:19 portE/S:c800(taille=256) mémoire:fe9f0000-fe9fffff mémoire:fe9ec000-fe9effff
  *-network
       description: Ethernet interface
       produit: RTL8125 2.5GbE Controller
       fabriquant: Realtek Semiconductor Co., Ltd.
       identifiant matériel: 0
       information bus: pci@0000:05:00.0
       nom logique: enp5s0
       version: 05
       numéro de série: 00:e0:4c:2a:03:f5
       capacité: 1Gbit/s
       bits: 64 bits
       horloge: 33MHz
       fonctionnalités: pm msi pciexpress msix vpd bus_master cap_list ethernet physical tp mii 10bt 10bt-fd 100bt 100bt-fd 1000bt-fd autonegotiation
       configuration: autonegotiation=on broadcast=yes driver=r8169 driverversion=6.1.0-30-amd64 firmware=rtl8125b-2_0.0.2 07/13/20 latency=0 link=no multicast=yes port=twisted pair
       ressources: irq:19 portE/S:d800(taille=256) mémoire:feaf0000-feafffff mémoire:feaec000-feaeffff

root@gate:~ # brctl show
bridge name     bridge id               STP enabled     interfaces
lanbr0          8000.eaa1ead7899a       no              enp1s0f0
netbr0          8000.768478e541f1       no              enp4s0
srvbr0          8000.7e18ddbb3f7d       no              enp1s0f1
wlanbr0         8000.ea5168b1130e       no              enp5s0

Not to joke, because you never know with all this information, I'm adding the files /.well-known/security.txt to the default WebServers directory ; hoping you're not too mean.

🔥 My Firewall ICMPv6 - IPv6 Netfilter GNU/Linux : https://howto.zw3b.fr/linux/securite/comment-faire-un-reseau-ipv6-firewall-icmpv6 (Translate Page).
🔑 How to configure strongSwan v6 Post-Quantum Cryptography NIST compliant #2731 : https://github.com/strongswan/strongswan/discussions/2731
🌐 Create your network map with GestióIP IPv4/IPv6 subnet calculator : http://www.gestioip.net/cgi-bin/subnet_calculator.cgi
🖧 The IPv6 ULA (Unique Local Address) network configuration from my home to the servers ; shown in the image : https://howto.zw3b.fr/pub/vpn/strongSwan-v6.0/network_map-ipv10.jpg

Read the INFOS.txt file in my StrongSwan 6.0.1 Configuration files n°7 ; there is some nice information - I like my "traceroute" tests from home (gate-fr / command-traceroute6.txt). It's tempting.

ZW3B.FR IP❤10.WS