untitled



Similar documents
2 PC [1], [2], [3] 2.1 OS 2.1 ifconfig 2.1 lo ifconfig -a 2.1 enp1s0, enx0090cce7c734, lo 3 enp1s0 enx0090cce7c734 PC 2.1 (eth0, eth1) PC 14

install

$ ifconfig lo Link encap: inet : : inet6 : ::1/128 : UP LOOPBACK RUNNING MTU:65536 :1 RX :8 :0 :0 :0 :0 TX :8 :0 :0 :0 :0 (Collision

$ ifconfig lo Link encap: inet : : inet6 : ::1/128 : UP LOOPBACK RUNNING MTU:65536 :1 RX :8 :0 :0 :0 :0 TX :8 :0 :0 :0 :0 (Collision

第1回 ネットワークとは

スライド 1

6.2 基本的なネットワーク構成 6.2 基本的なネットワーク構成 このトピックではネットワークの基本的な設定ファイルやコマンドの使用法ついて出題されます 例題 NIC に設定されている IP アドレスを確認するコマンドを選択せよ A) traceroute B) route C) ifconfig

IP 2.2 (IP ) IP 2.3 DNS IP IP DNS DNS 3 (PC) PC PC PC Linux(ubuntu) PC TA 2

I j

第1回 ネットワークとは

untitled

ゴール インターネットの動作原理を理解する インターネットは様々な技術が連携して動作する 家族に聞かれて説明できるように主要技術を理解する

Microsoft PowerPoint - H10-server-textbook-jp ppt[読み取り専用] [互換モード]

065763J ping ping pw ping % ping -c 5 pw193.cs.ie.u-ryukyu.ac.jp PING pw193.cs.ie.u-ryukyu.ac.jp ( ): 56 data bytes 64 bytes from

untitled

Agenda IPv4 over IPv6 MAP MAP IPv4 over IPv6 MAP packet MAP Protocol MAP domain MAP domain ASAMAP ASAMAP 2

untitled

データセンタ,サーバ構築におけるIPv6トラブルシューティング

All Rights Reserved. Copyright(c)1997 Internet Initiative Japan Inc. 1

VyattaでのPPPoEとNetwork emulator

IP.dvi

集中講義 インターネットテクノロジー 第5回

2 1: OSI OSI,,,,,,,,, 4 TCP/IP TCP/IP, TCP, IP 2,, IP, IP. IP, ICMP, TCP, UDP, TELNET, FTP, HTTP TCP IP

FW Migration Guide(ipsec2)

帯域を測ってみよう (適応型QoS/QoS連携/帯域検出機能)

Cumulus Linux MLAG と vsphere vds の LACP 接続検証

FW Migration Guide(ipsec1)

ict2-.key

目 次 1 改 訂 履 歴 はじめに Cumulus Linux 基 本 設 定 ログイン 管 理 設 定 管 理 ポートに Static IP アドレスの 割 り 当 て ホスト 名 の 変


設定例集_Rev.8.03, Rev.9.00, Rev.10.01対応

SoftEther VPN(シングル構成)構築手順

IP... 2 IP... 2 IP... 2 IP... 2 VLAN... 3 IP ADD IP IPADDRESS... 5 DELETE IP... 7 PING SETIP SHOW IP IP CentreCOM FS9

DNS DNS(Domain Name System) named(bind), tinydns(djbdns), MicrosoftDNS(Windows), etc 3 2 (1) ( ) IP IP DNS 4

I TCP 1/2 1

wide93.dvi

tcp/ip.key

1 Linux UNIX-PC LAN. UNIX. LAN. UNIX. 1.1 UNIX LAN. 1.2 Linux PC Linux. 1.3 studenta odd kumabari studentb even kumabari studentc odd kumabari student

untitled

Inter-IX IX/-IX 10/21/2003 JAPAN2003 2

untitled

untitled

目次 1) コンソール使用について注意 ) 全体の流れ ) SSH キーの登録 ) Linux サーバーの作成... 4 Web サーバーへの Apache と WordPress インストール... 5 DB サーバーへの MariaDB インストール 設定..

Agenda /etc/network/interfaces とは? interfaces ファイルの構造 stanza の種類実設定ファイル紹介 1/40

てくろぐ・セレクト「自宅でもIIJをつかってみませんか?」

GA-1190J

IPv6 トラブルシューティング ホームネットワーク/SOHO編

SRT/RTX/RT設定例集

DNSを「きちんと」設定しよう

OpenVZ コンテナ型仮想化の現状

2011 NTT Information Sharing Platform Laboratories

IPSEC-VPN IPsec(Security Architecture for Internet Protocol) IP SA(Security Association, ) SA IKE IKE 1 1 ISAKMP SA( ) IKE 2 2 IPSec SA( 1 ) IPs

$ cal ) ( cal $ cal cal cal 1. () ( clear) 2. ( cal) 3. ( man) \() ( ) --() +()

演算増幅器

migrating_to_2-node_cluster_flyer.ps

SCREENOS NAT ScreenOS J-Series(JUNOS9.5 ) NAT ScreenOS J-Series(JUNOS9.5 ) NAT : Destination NAT Zone NAT Pool DIP IF NAT Pool Egress IF Loopback Grou

2008, 2009 TOSHIBA TEC CORPORATION All rights reserved

このたびは シンプルVPN のお申し込みありがとうございます 本書ではセットアップ方法について解説しています INDEX 1 2 クラウド接続とは セットアップの手順 3 ニフティクラウドサーバーの準備 サーバーの作成 2.2 申請に利用するサーバー情報を確認 ク

Teradici Corporation # Canada Way, Burnaby, BC V5G 4X8 Canada p f Teradici Corporation Teradi

MR1000 コマンド設定事例集

SoftEther VPN(冗長構成)構築手順

tp2ps output file

IP IPv4-IPv6

00.目次_ope

DNS (BIND, djbdns) JPNIC・JPCERT/CC Security Seminar 2005

1 IPv6 WG OS SWG PCOSIPv6 Windows Vista 2 3 KAMEUSAGIMacOSX IPv6 2

BSD Unix IPv6 WIDE Project / ( ) All rights reserved. Copyright(c)2006 WIDE Project 1


IIJ Technical WEEK SEILシリーズ開発動向:IPv6対応の現状と未来

Si-R30コマンドリファレンス

wide95.dvi

IP ICMP Redirec

I B :

FS900S_B

橡sirahasi.PDF

リング型IPカメラ監視ソリューション(マルチキャスト編)

BIND 9 BIND 9 IPv6 BIND 9 view lwres

橡C14.PDF

目次 1 Raspberry Pi の初期設定... 2 System 設定... 3 Interfaces 設定... 4 Localisation 設定 無線 LAN の設定... 7 GUI での設定... 7 CUI での設定 PC の設定 Bonjo

今からはじめるIPv6 ~IPv6標準化最新動向編~

ip nat outside source list コマンドを使用した設定例

untitled

Microsoft PowerPoint ppt [互換モード]

¥¤¥ó¥¿¡¼¥Í¥Ã¥È·×¬¤È¥Ç¡¼¥¿²òÀÏ Âè1²ó

untitled

r4.dvi

(Microsoft Word - \216\300\214\261\203e\203L\203X\203g-2_2007.doc)

nakayama15icm01_l7filter.pptx

VLAN.dvi

IPv6における

untitled

17 TCP (ACK:ACKnowledge) (RTT:Round Trip Time) TCP (Transmission Control Protocol) PSPacer (Precise Software Pacer) JGN2 TCP FAST TCP UDP PSPacer

SACSIS.TCP

IPv4aaSを実現する技術の紹介

worm hoihoi

IP L09( Tue) : Time-stamp: Tue 14:52 JST hig TCP/IP. IP,,,. ( ) L09 IP (2017) 1 / 28

設定例集

Dynamic VPN Dynamic VPN IPSec VPN PC SRX IPSec VPN SRX PC IPSec 2 Copyright 2010 Juniper Networks, Inc.

BGP ( ) BGP4 community community community community July 3, 1998 JANOG2: What is BGP Community? 2

Transcription:

BeaconNC IPv6IPv6Web CentOS(RedHatGNU/Debian

IPv6 LinuxIPv6 IPv6 IPv6 IPv6 LinuxIPv6 ApacheIPv6 IPv6

(32bit128bit) IPsec MobileIP IPv4MobileIP Header IPv4IPv6 79228162514264337593543950336 IPv4

IPv4/IPv6 IPv4 : 1073741824 IPv6 : 18446744073709551616 IPv4/30IPv6/64 IPv6 DHCPV6 RA RS RS

IP The Internet IPv4MobileIP The Internet

Mobile IPv6 MN CoAHA The Internet HA CoACN CoA CNMN MN CN

IPv4 192.0.2.1 10. IPv6 fe80:0000:0000:0000:02d0:b7ff:fea0:beea 16 : fe80:0000:0000:0000:02d0:b7ff:fea0:beea fe80:0000:0000:0000:2d0:b7ff:fea0:beea 0000 :: fe80::02d0:b7ff:fea0:beea fe80::2d0:b7ff:fea9:beea

2001:db8:0000:0000:fff0:0000:0000:000f 2001:db8::fff0:0:0:f 2001:db8:0:0:fff0::f 2001:db8::fff0::f

IPv6

IPv4

X

IPv4 IPv4 Unique Local IPv6 Unicast Address Unique Local IPv6 Unicast(ULA)

RA

IPv4 IPv4

IPv4127.0.0.1 IPv4IPv6 IPv4 ) 192.168.0.1 => ::192.168.0.1

IPv6IPv4 IPv4 192.168.0.1 => ::ffff:192.168.0.1 IPv6

IPv6/IPv4 www.example.com. IN IN A 192.0.2.1 mail.example.com. IN IN A 192.0.2.1 IN IN AAAA 2001:db8::1 AAAA DNSIPv6 AAAA RR, A RR IPv6 IPv6IPv4 The Internet IPv6 AAAA/A

include <stdio.h> include include <sys/types.h> <stdio.h> include include <sys/socket.h> <sys/types.h> include include <netdb.h> <sys/socket.h> include <netdb.h> int sock,err; struct int sock,err; addrinfo hints, *res0, *res; struct addrinfo hints, *res0, *res; memset(&hints, 0, sizeof(hints)); hints.ai_family memset(&hints, = 0, PF_UNSPEC; sizeof(hints)); hints.ai_socktype hints.ai_family = = PF_UNSPEC; SOCK_STREAM; hints.ai_socktype = SOCK_STREAM; /* getaddrinfo AAAAA*/ err /* = getaddrinfo getaddrinfo("www.linux-ipv6.org", AAAAA*/ "http", &hints, &res0); err = getaddrinfo("www.linux-ipv6.org", "http", &hints, &res0); if (err) { if fprintf(stderr, (err) { "error : %s", gai_strerror(err)); freeaddrinfo(res0); fprintf(stderr, "error : %s", gai_strerror(err)); exit(1); freeaddrinfo(res0); } exit(1); } /* getaddrinfo */ for /* (res getaddrinfo = res0; res; res = res->ai_next) { */ for (res sock = = res0; socket res; (res->ai_family, res = res->ai_next) res->ai_socktype, { res->ai_protocol); if sock (sock = socket < 0) (res->ai_family, res->ai_socktype, res->ai_protocol); if (sock continue; < 0) continue; IPv6 if (connect(sock, res->ai_addr, res->ai_addrlen) < 0) { if (connect(sock, close (sock); res->ai_addr, res->ai_addrlen) < 0) { continue; close (sock); } continue; break; } } break; freeaddrinfo(res0); } freeaddrinfo(res0); LinuxIPv6

IPv4/IPv6 IPv4/IPv6

IP ifconfig ip ifconfig interface [aftype] options address ip [OPTIONS] OBJECT { COMMAND help } IPv4 IPv4 IPv4 ifconfig ifconfig eth0 eth0 192.0.2.1 192.0.2.1 netmask netmask 255.255.255.0 255.255.255.0 ifconfig ifconfig eth0 eth0 eth0 eth0 Link Link encap:ethernet encap:ethernet HWaddr HWaddr 00:00:XX:XX:XX:XX inet inet addr:192.0.2.1 addr:192.0.2.1 Bcast:192.0.2.255 Mask:255.255.255.0 UP UP BROADCAST BROADCAST MULTICAST MULTICAST MTU:1500 MTU:1500 Metric:1 Metric:1 RX RX packets:0 packets:0 errors:0 errors:0 dropped:0 dropped:0 overruns:0 overruns:0 frame:0 frame:0 TX TX packets:0 packets:0 errors:0 errors:0 dropped:0 dropped:0 overruns:0 overruns:0 carrier:0 carrier:0 collisions:0 collisions:0 txqueuelen:1000 txqueuelen:1000 RX RX bytes:0 bytes:0 (0.0 (0.0 b) b) TX TX bytes:0 bytes:0 (0.0 (0.0 b) b) Interrupt:169 Interrupt:169 ifconfig ifconfig eth0 eth0 up up ifconfig ifconfig eth0 eth0 down down

IPv6 IPv6 IPv6 interface up ifconfig ifconfig eth0 eth0 add add 2001:db8::80/64 2001:db8::80/64 IPv6 IPv6 ifconfig ifconfig eth0 eth0 del del 2001:db8::80/64 2001:db8::80/64 ifconfig ifconfig eth0 eth0 eth0 eth0 Link Link encap:ethernet encap:ethernet HWaddr HWaddr 00:XX:XX:XX:XX:XX inet inet addr:192.0.2.1 addr:192.0.2.1 Bcast:192.0.2.255 Mask:255.255.255.0 inet6 inet6 addr: addr: 2001:db8::80/64 2001:db8::80/64 Scope:Global Scope:Global inet6 inet6 addr: addr: fe80::2d0:xxxx:xxxx:xxxx/64 Scope:Link Scope:Link UP UP BROADCAST BROADCAST MULTICAST MULTICAST MTU:1500 MTU:1500 Metric:1 Metric:1 RX RX packets:0 packets:0 errors:0 errors:0 dropped:0 dropped:0 overruns:0 overruns:0 frame:0 frame:0 TX TX packets:0 packets:0 errors:0 errors:0 dropped:0 dropped:0 overruns:0 overruns:0 carrier:0 carrier:0 collisions:0 collisions:0 txqueuelen:1000 txqueuelen:1000 RX RX bytes:0 bytes:0 (0.0 (0.0 b) b) TX TX bytes:0 bytes:0 (0.0 (0.0 b) b) Interrupt:169 Interrupt:169 (IP6 ifconfig ifconfig eth0 eth0 down down IPv4/IPv6 ip ip addr addr add add 192.0.2.1/24 192.0.2.1/24 dev dev eth0 eth0 ip ip addr addr add add 2001:db8::80/64 2001:db8::80/64 dev dev eth0 eth0 ip ip addr addr show show dev dev eth0 eth0 3: 3: eth0: eth0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu mtu 1500 1500 qdisc qdisc pfifo_fast pfifo_fast qlen qlen 1000 1000 4: 4: eth1: eth1: <BROADCAST,MULTICAST,UP> mtu mtu 1500 1500 qdisc qdisc pfifo_fast pfifo_fast qlen qlen 1000 1000 link/ether link/ether 00:xx:xx:xx:xx:xx brd brd ff:ff:ff:ff:ff:ff inet inet 10.0.0.1/8 10.0.0.1/8 brd brd 10.255.255.255 10.255.255.255 scope scope global global eth1 eth1 inet6 inet6 fe80::202:xxx:xxx:xxx:xxx/64 scope scope link link valid_lft valid_lft forever forever preferred_lft preferred_lft forever forever inet6 inet6 2001:2a0:102:2000::a000:1/64 scope scope global global valid_lft valid_lft forever forever preferred_lft preferred_lft forever forever ip ip link link set set eth0 eth0 up up ip ip link link set set eth0 eth0 down down

longest prefix match eth0: 192.0.2.1 192.0.2.254 192.0.2.0/24 192.0.0.0/8 eth1 network Next hop Metirc Interface 0.0.0.0/0 192.0.2.254 0 eth0 192.0.2.0/24 0.0.0.0 0 eth0 192.0.0.0/8 0.0.0.0 0 eth1

Default Default route route add add A A inet inet default default gw gw 192.0.2.254 192.0.2.254 dev dev eth0 eth0 route route add add A A inet6 inet6 default default gw gw fe80:x:x:x:x:x fe80:x:x:x:x:x dev dev eth0 eth0 route route add add net net 192.0.2.0 192.0.2.0 netmask netmask 255.255.255.0 255.255.255.0 gw gw 192.168.0.1 192.168.0.1 dev dev eth0 eth0 route route add add A A inet6 inet6 2001:db8::/64 2001:db8::/64 gw gw fe80::2d0:b7ff:fea0:beea fe80::2d0:b7ff:fea0:beea dev dev eth0 eth0 route route -n -n A A inet6 inet6 route route n n A A inet inet Default ip ip route route add add default default via via 10.0.0.1 10.0.0.1 dev dev eth0 eth0 ip ip route route add add default default via via fe80::202:b3ff:fe32:faa2 dev dev eth0 eth0 ip ip route route add add 192.0.2.0/24 192.0.2.0/24 via via 10.0.0.1 10.0.0.1 dev dev eth0 eth0 ip ip route route add add 2001:db8::/48 2001:db8::/48 via via fe80::202:b3ff:fe32:faa2 dev dev eth0 eth0 ip ip -4-4 route route show show ip ip -6-6 route route show show

/etc hosts - IP resolv.conf host.conf 127.0.0.1 127.0.0.1 hoge.example.jp hoge.example.jp localhost localhost hoge hoge The The following following lines lines are are desirable desirable for for IPv6 IPv6 capable capable hosts hosts ::1 ::1 ip6-localhost ip6-localhost ip6-loopback ip6-loopback fe00::0 fe00::0 ip6-localnet ip6-localnet ff00::0 ff00::0 ip6-mcastprefix ip6-mcastprefix ff02::1 ff02::1 ip6-allnodes ip6-allnodes ff02::2 ff02::2 ip6-allrouters search ip6-allrouters search example.jp example.jp ff02::3 ff02::3 ip6-allhosts nameserver ip6-allhosts nameserver 192.0.2.254 192.0.2.254 order order hosts,bind hosts,bind multi multi on on

/etc services : protocols : tcpmux tcpmux 1/tcp 1/tcp TCP TCP port port service service multiplexer multiplexer echo echo 7/tcp 7/tcp echo echo 7/udp 7/udp discard discard 9/tcp 9/tcp sink sink null null discard discard 9/udp 9/udp sink sink null null systat systat 11/tcp 11/tcp users users daytime daytime 13/tcp 13/tcp daytime daytime 13/udp 13/udp netstat netstat 15/tcp 15/tcp qotd qotd 17/tcp 17/tcp quote quote msp msp 18/tcp 18/tcp message message send send protocol ip 0 IP internet protocol, protocol pseudo protocol number msp ip msp 18/udp0 IP internet protocol, pseudo protocol number hopopt 18/udp 0 HOPOPT IPv6 Hop-by-Hop Option [RFC1883] chargen hopopt chargen 19/tcp 0 HOPOPT 19/tcp ttytst ttytst source IPv6 Hop-by-Hop Option [RFC1883] icmp 1 ICMP source internet control message protocol chargen icmp chargen 19/udp 1 ICMP 19/udp ttytst ttytst source internet control message protocol igmp 2 IGMP source Internet Group Management ftp-data igmp ftp-data 20/tcp2 IGMP Internet Group Management ggp 20/tcp 3 GGP gateway-gateway protocol ftp ggp ftp 21/tcp3 GGP gateway-gateway protocol ipencap 21/tcp 4 IP-ENCAP IP encapsulated in IP (officially ``IP'') fsp ipencap fsp 21/udp 4 IP-ENCAP 21/udp fspd IP encapsulated in IP (officially ``IP'') st 5 ST fspd ST datagram mode ssh st ssh 22/tcp 5 ST ST 22/tcp SSH datagram SSH Remote mode Remote Login Login Protocol tcp 6 TCP transmission control protocol Protocol ssh tcp ssh 22/udp6 TCP transmission control protocol egp 22/udp 8 EGP exterior gateway protocol egp 8 EGP exterior gateway protocol CentOS /etc sysconfig network : network-scripts Debian /etc network ifcfg-{dev} : options : interfaces :

/etc/sysconfig/network HOSTNAME=hoge.example.jp HOSTNAME=hoge.example.jp IPv4 IPv4 NETWORKING=yes NETWORKING=yes GATEWAY=192.0.2.254 GATEWAY=192.0.2.254 IPv6 IPv6 NETWORKING_IPV6=yes NETWORKING_IPV6=yes IPV6_DEFAULTGW=fe80::xxxx%eth0 IPV6_DEFAULTGW=fe80::xxxx%eth0 IPV6_AUTOCONF=no IPV6_AUTOCONF=no IPV6FORWARDING=no IPV6FORWARDING=no HOSTNAME FQDN NETWORKING yes: rc network GATEWAY IPv4default gateway NETWORKING_IPV6 yes: IPv6 IPV6_DEFAULTGW IPv6default gateway /etc/sysconfig/network-scripts/ifcfg-eth0 DEVICE=eth0 DEVICE=eth0 BOOTPROTO=none BOOTPROTO=none ONBOOT=yes ONBOOT=yes NETWORK=192.0.2.0 NETWORK=192.0.2.0 NETMASK=255.255.255.0 NETMASK=255.255.255.0 IPADDR=192.0.2.1 IPADDR=192.0.2.1 IPV6INIT=yes IPV6INIT=yes IPV6_AUTOCONF=no IPV6_AUTOCONF=no IPV6ADDR=2001:db8::80/64 IPV6ADDR=2001:db8::80/64 ETHTOOL_OPTS="autoneg ETHTOOL_OPTS="autoneg off off speed speed 100 100 duplex duplex full" full" DEVICE BOOTPROTO none : bootp: BOOTP dhcp : DHCP ONBOOT yes : no : NETWORK NETMASK IPADDR yes : no : NETWORK NETMASK IPV6INIT yes: IPv6 No : IPv6 IPV6ADDR IPv6/ ETHTOOL_OPTS ethtool

/etc/network/options ip_forward=no ip_forward=no spoofprotect=yes spoofprotect=yes syncookies=no syncookies=no ip_forward yes: LinuxRouter spoofprotect yes: Reverse PathStub network syncookies yes: TCP syn flooding attackcookie /etc/sysctl.conf /etc/network/options/etc/sysctl.conf net.ipv4.ip_forward net.ipv4.ip_forward = = 1 1 net.ipv4.conf.default.rp_filter net.ipv4.conf.default.rp_filter = = 1 1 net.ipv4.conf.all.rp_filter net.ipv4.conf.all.rp_filter = = 1 1 net.ipv4.tcp_syncookies net.ipv4.tcp_syncookies = = 1 1 /etc/network/interface auto auto lo lo iface iface lo lo inet inet loopback loopback auto auto eth0 eth0 iface iface eth0 eth0 inet inet static static address address 192.0.2.1 192.0.2.1 netmask netmask 255.255.255.0 255.255.255.0 gateway gateway 192.0.2.254 192.0.2.254 dns-serarch dns-serarch example.jp example.jp dns-nameservers dns-nameservers 192.0.2.254 192.0.2.254 up up ethtool ethtool -s -s eth0 eth0 autoneg autoneg off off speed speed 100 100 duplex duplex full full iface iface eth0 eth0 inet6 inet6 static static address address 2001:db8::80 2001:db8::80 netmask netmask 64 64 gateway gateway fe80::xxx%eth0 fe80::xxx%eth0 pre-up up up up post-up up Also See man interfaces pre-down down down down post-down down

ping traceroute traceroute

Default gatewayping IP4 $ ping ping -c -c 10 10 192.02.254 192.02.254 PING PING 192.0.2.254 192.0.2.254 (192.0.2.254) (192.0.2.254) 56(84) 56(84) bytes bytes of of data. data. 64 64 bytes bytes from from 192.0.2.254: 192.0.2.254: icmp_seq=1 icmp_seq=1 ttl=255 ttl=255 time=2.09 time=2.09 ms ms 64 64 bytes bytes from from 192.0.2.254: 192.0.2.254: icmp_seq=2 icmp_seq=2 ttl=255 ttl=255 time=2.04 time=2.04 ms ms 64 64 bytes bytes from from 192.0.2.254: 192.0.2.254: icmp_seq=3 icmp_seq=3 ttl=255 ttl=255 time=4.30 time=4.30 ms ms 64 64 bytes bytes from from 192.0.2.254: 192.0.2.254: icmp_seq=4 icmp_seq=4 ttl=255 ttl=255 time=2.00 time=2.00 ms ms 64 64 bytes bytes from from 192.0.2.254: 192.0.2.254: icmp_seq=5 icmp_seq=5 ttl=255 ttl=255 time=2.01 time=2.01 ms ms 64 64 bytes bytes from from 192.0.2.254: 192.0.2.254: icmp_seq=6 icmp_seq=6 ttl=255 ttl=255 time=2.02 time=2.02 ms ms 64 64 bytes bytes from from 192.0.2.254: 192.0.2.254: icmp_seq=7 icmp_seq=7 ttl=255 ttl=255 time=2.03 time=2.03 ms ms 64 64 bytes bytes from from 192.0.2.254: 192.0.2.254: icmp_seq=8 icmp_seq=8 ttl=255 ttl=255 time=2.62 time=2.62 ms ms 64 64 bytes bytes from from 192.0.2.254: 192.0.2.254: icmp_seq=9 icmp_seq=9 ttl=255 ttl=255 time=3.84 time=3.84 ms ms 64 64 bytes bytes from from 192.0.2.254: 192.0.2.254: icmp_seq=10 icmp_seq=10 ttl=255 ttl=255 time=4.77 time=4.77 ms ms --- --- 192.0.2.254 192.0.2.254 ping ping statistics statistics --- --- 10 10 packets packets transmitted, transmitted, 10 10 received, received, 0% 0% packet packet loss, loss, time time 9036ms 9036ms rtt rtt min/avg/max/mdev = 2.009/2.776/4.774/1.038 ms ms Default gatewayping IP6 IP6 経 路 $ ping6 ping6 -c -c 10 10 fe80::2000:1 fe80::2000:1 -I -I eth0 eth0 PING PING fe80::2000:1(fe80::2000:1) from from fe80::2d0:b7ff:fea0:beea eth1: eth1: 56 56 data data bytes bytes 64 64 bytes bytes from from fe80::2000:1: fe80::2000:1: icmp_seq=1 icmp_seq=1 ttl=64 ttl=64 time=2.38 time=2.38 ms ms 64 64 bytes bytes from from fe80::2000:1: fe80::2000:1: icmp_seq=2 icmp_seq=2 ttl=64 ttl=64 time=7.71 time=7.71 ms ms 64 64 bytes bytes from from fe80::2000:1: fe80::2000:1: icmp_seq=3 icmp_seq=3 ttl=64 ttl=64 time=7.47 time=7.47 ms ms 64 64 bytes bytes from from fe80::2000:1: fe80::2000:1: icmp_seq=4 icmp_seq=4 ttl=64 ttl=64 time=2.41 time=2.41 ms ms 64 64 bytes bytes from from fe80::2000:1: fe80::2000:1: icmp_seq=5 icmp_seq=5 ttl=64 ttl=64 time=2.39 time=2.39 ms ms 64 64 bytes bytes from from fe80::2000:1: fe80::2000:1: icmp_seq=6 icmp_seq=6 ttl=64 ttl=64 time=3.91 time=3.91 ms ms 64 64 bytes bytes from from fe80::2000:1: fe80::2000:1: icmp_seq=7 icmp_seq=7 ttl=64 ttl=64 time=5.00 time=5.00 ms ms 64 64 bytes bytes from from fe80::2000:1: fe80::2000:1: icmp_seq=8 icmp_seq=8 ttl=64 ttl=64 time=2.29 time=2.29 ms ms 64 64 bytes bytes from from fe80::2000:1: fe80::2000:1: icmp_seq=9 icmp_seq=9 ttl=64 ttl=64 time=2.30 time=2.30 ms ms 64 64 bytes bytes from from fe80::2000:1: fe80::2000:1: icmp_seq=10 icmp_seq=10 ttl=64 ttl=64 time=2.32 time=2.32 ms ms --- --- fe80::2000:1 fe80::2000:1 ping ping statistics statistics --- --- 10 10 packets packets transmitted, transmitted, 10 10 received, received, 0% 0% packet packet loss, loss, time time 9036ms 9036ms rtt rtt min/avg/max/mdev = 2.292/3.822/7.711/2.069 ms ms

Ethernet Card Full Duplex( ethtool ethtool eth0 eth0 Full-duplex ethtool ethtool -s -s eth0 eth0 autoneg autoneg off off speed speed 100 100 duplex duplex full full mii-tool mii-tool eth0 eth0 Full-duplex mii-tool mii-tool -F -F 100baseTx-FD 100baseTx-FD eth1 eth1 IPv6 UP sysctl sysctl w w net.ipv6.conf.eth0.accept_ra=0 TCP Syn flooding attack sysctl sysctl w w net.ipv4.tcp_syncookies=1 BroadcastICMP sysctl sysctl w w net.ipv4.icmp_echo_ignore_broadcasts

ps ps ps aux aux less less Listen netstat fuser

NetstatListen -l, --listening -p, --program PID -n, --numeric -t,--tcp tcp -u,--udp udp netstat -ltupn netstat -ltupn Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name tcp 0 0 127.0.0.1:993 0.0.0.0:* LISTEN 3785/famd tcp 0 0 127.0.0.1:993 0.0.0.0:* LISTEN 3785/famd tcp 0 0 127.0.0.1:111 0.0.0.0:* LISTEN 3175/portmap tcp 0 0 127.0.0.1:111 0.0.0.0:* LISTEN 3175/portmap tcp 0 0 192.0.2.1:53 0.0.0.0:* LISTEN 3380/named tcp 0 0 192.0.2.1:53 0.0.0.0:* LISTEN 3380/named tcp 0 0 127.0.0.1:53 0.0.0.0:* LISTEN 3380/named tcp 0 0 127.0.0.1:53 0.0.0.0:* LISTEN 3380/named tcp 0 0 0.0.0.0:5432 0.0.0.0:* LISTEN 3619/postmaster tcp 0 0 0.0.0.0:5432 0.0.0.0:* LISTEN 3619/postmaster tcp 0 0 0.0.0.0:25 0.0.0.0:* LISTEN 3596/master tcp 0 0 0.0.0.0:25 0.0.0.0:* LISTEN 3596/master tcp 0 0 127.0.0.1:953 0.0.0.0:* LISTEN 3380/named tcp 0 0 127.0.0.1:953 0.0.0.0:* LISTEN 3380/named tcp6 0 0 :::80 :::* LISTEN 11254/apache2 tcp6 0 0 :::80 :::* LISTEN 11254/apache2 tcp6 0 0 :::53 :::* LISTEN 3380/named tcp6 0 0 :::53 :::* LISTEN 3380/named tcp6 0 0 :::22 :::* LISTEN 3659/sshd tcp6 0 0 :::22 :::* LISTEN 3659/sshd tcp6 0 0 :::5432 :::* LISTEN 3619/postmaster tcp6 0 0 :::5432 :::* LISTEN 3619/postmaster udp 0 0 0.0.0.0:32768 0.0.0.0:* 3380/named udp 0 0 0.0.0.0:32768 0.0.0.0:* 3380/named udp 0 0 127.0.0.1:161 0.0.0.0:* 3653/snmpd udp 0 0 127.0.0.1:161 0.0.0.0:* 3653/snmpd udp 0 0 192.0.2.1:53 0.0.0.0:* 3380/named udp 0 0 192.0.2.1:53 0.0.0.0:* 3380/named udp 0 0 127.0.0.1:53 0.0.0.0:* 3380/named udp 0 0 127.0.0.1:53 0.0.0.0:* 3380/named udp 0 0 127.0.0.1:111 0.0.0.0:* 3175/portmap udp 0 0 127.0.0.1:111 0.0.0.0:* 3175/portmap udp6 0 0 :::32769 :::* 3380/named udp6 0 0 :::32769 :::* 3380/named udp6 0 0 :::53 :::* 3380/named udp6 0 0 :::53 :::* 3380/named -A (inet or inet6)

userlistenlisten fuser fuser -vn -vn tcp tcp 80 80 USER USER PID PID ACCESS ACCESS COMMAND COMMAND 80/tcp: 80/tcp: root root 4699 4699 F... F... apache apache www-data www-data 4706 4706 F... F... apache apache www-data www-data 4707 4707 F... F... apache apache www-data www-data 4708 4708 F... F... apache apache www-data www-data 4709 4709 F... F... apache apache www-data www-data 4710 4710 F... F... apache apache www-data www-data 8407 8407 F... F... apache apache www-data www-data 8408 8408 F... F... apache apache www-data www-data 8409 8409 F... F... apache apache Web

Apache2.0IPv6 IPv6

IPv4[] Listen [2001:db8::a00:20ff:fea7:ccea]:80 2001:db8:0:1000/64 AuthName Staff Only AuthType Basic AuthUserFile /var/www/www.example.jp/.htpasswd Require valid-user Order Deny,Allow Deny from all all Allow from 192.168.1.1 Allow from 2001:db8:0:1000::/64 Satisfy Any Any

ListenIPv4[] <VirtualHost *:80> <VirtualHost [2001:db8:0:1000::80]:80> ServerName www.example.co.jp..... </VirtualHost> 2001:db8:0:1000:211:24ff:dead:beaf - - [04/Nov/2008:09:30:59 +0900] "GET /favicon.ico HTTP/1.1" 404 272 192.0.2.1 - - [04/Nov/2008:09:35:59 +0900] "GET /favicon.ico HTTP/1.1" 404 272 LinuxApacheIPv6socketIPv4 IPv4::ffff:192.0.2.1 192.0.2.1

Q&A? IPv6 IPv6

ISPIPv6 IPv6iDC Tunnel Broker Feel6(dtcp) OCN IPv6(L2TP) http://ipv6.blog.ocn.ne.jp/ipv6/2006/04/linuxocn_ipv62_5915.html IPv6 IPv6

(upper layer) IPv6(TCP,UDP IPv6(Ethernet,PPP neighbors) IPv6 MTU MTU MTU