...
To allow any host at NTNU in Gjøvik to log in to your virtual machines over SSH you would need to add the following rule to the security-group assigned to the VM (The examples adds the rule to the group 'default'):
| Code Block | ||||||||
|---|---|---|---|---|---|---|---|---|
| ||||||||
$ openstack security group rule create --src-ip '2001:700:1d00::/48' --dst-port 22 --ethertype IPv6 --protocol tcp default |
It is important to emphasize that the IPv6 addresses are global routable. This means that they are "directly" connected to the internet. It is thus important with proper firewalling. You should therfore ONLY open what is needed trough the security groups, to the addresses needed. For example should SSH (TCP port 22) only be opened for networks which needs to log in to your VM's. Please see the section "IPv6 address prefixes" to see what prefixes which entities are using. If you miss some organisations here; please ask and we will try to figure out their address ranges.
IPv6 address prefixes
This section covers which IPv6 addresses certain organizations are using; to help you create proper IPv6 access group rules.
NTNU:
- 2001:700:300::/46 - NTNU i Trondheim
- 2001:700:b00::/48 - NTNU i Trondheim (Gamle HiST)
- 2001:700:1d00::/48 - NTNU i Gjøvik
- 2001:700:1200::/48 - NTNU i Ålesund
Norwegian ISP's:
This list covers some norwegian ISP's. Are you missing one, let us know and we will add it.
- Uninett:
- 2001:700::/32
- Altibox:
- 2a00:14d8::/29
- 2a00:ce60::/32
- 2a00:dec0::/32
- 2a00:fd00::/32
- 2a01:798::/29
- Eidsiva:
2a02:a18::/32
- Get
2a02:fe0::/29'
- Lynet:
- 2a00:c440::/29
- Netcom:
- 2001:2020::/32
- 2001:2021::/32
- Nextgentel:
- 2a03:96e0::/33
- 2a04:980::/29
- Powertech:
- 2001:840::/29
- 2a00:be40::/32
- 2a00:be44::/32
- Signal:
- 2a00:e08::/32
2a00:5d40::/32
- Telenor:
- 2001:4600::/24
- 2a00:6e80::/32
- 2a02:1400::/26
- 2a02:2120::/30
- 2a02:2580::/32
- 2a02:2640::/32
- 2a02:7720::/32
- 2a02:f300::/29
- 2a07:c40::/29
- 2a0a:2180::/29
Other ISP's:
- Nordunet:
2001:948::/32