yum -y install xl2tpd

[global]
auth file = /etc/ppp/chap-secrets

[lac L2TPIPv6Server]
lns = $l2tpserv
hostname = $userid
ppp debug = yes
pppoptfile = /etc/ppp/peers/l2tp-ipv6
length bit = yes
require chap = yes
refuse pap = yes
require authentication = yes
redial = yes
redial timeout = 10
max redials = 6

nodefaultroute
noip
+ipv6
usepeerdns
user $userid
mtu 1390
noipdefault
default-asyncmap
nopcomp
noaccomp
noccp
novj
nobsdcomp
nodeflate
lcp-echo-interval 30
lcp-echo-failure 2
lock
noauth
logfile /var/log/xl2tpd.l2tp-ipv6.log

sed -i '/^$userid/d' /etc/ppp/chap-secrets
echo "$userid * \"$password\" *" >> /etc/ppp/chap-secrets

yum -y install gcc flex bison
tar -xvzf wide-dhcpv6-20070507.tar.gz
cd wide-dhcpv6-20070507
./configure
make
make install
cd ..
rm -rf wide-dhcpv6-20070507*

interface $ppp {
        send ia-pd 0;
};

id-assoc pd 0{
        prefix-interface $eth {
                sla-id 1;
                sla-len 0;
        };
};

yum -y install radvd

interface $eth
{
        AdvSendAdvert on;
        MinRtrAdvInterval 30;
        MaxRtrAdvInterval 100;
        prefix $prefix
        {
                AdvOnLink on;
                AdvAutonomous on;
        };

};

sed -i '/IPV6FORWARDING/d' /etc/sysconfig/network
echo "IPV6FORWARDING=yes" >> /etc/sysconfig/network

#!/bin/sh
#
# processname: IPv6-init
# chkconfig: 2345 81 81
# description: Starting IPv6 Initialization
#

. /etc/init.d/functions
RETVAL=0

start(){
    echo "Starting PPP/L2TP IPv6-init"
    echo "c L2TPIPv6Server" > /var/run/xl2tpd/l2tp-control

    COUNTER=0
    while [ $COUNTER -lt 10 ]; do
      if [ -n "`/sbin/ifconfig | /bin/grep $ppp`" ]; then
        break
      fi
      sleep 1
      let COUNTER=COUNTER+1
    done

    chk=`ps ax | grep "/usr/local/sbin/dhcp6c" | grep $ppp`
    if [ -n chk ]; then
      /usr/local/sbin/dhcp6c -c /etc/dhcp6c.conf $ppp
    fi
    sleep 3
    /sbin/route -A inet6 add ::/0 dev $ppp
    /sbin/ifconfig $eth add $addrv6
    return $RETVAL;
}
stop(){
    echo "Stopping PPP/L2TP IPv6-init"
    echo "d L2TPIPv6Server" > /var/run/xl2tpd/l2tp-control
    /sbin/ifconfig $eth del $addrv6
    return $RETVAL;
}

case "$1" in
    start)
        start
        RETVAL=$?
        ;;
    stop)
        stop
        RETVAL=$?
        ;;
    restart|force-reload)
        stop ; start
        RETVAL=$?
        ;;
    status)
        status
        RETVAL=$?
        ;;
esac


exit $RETVAL

chmod 755 /etc/rc.d/init.d/IPv6-init
chkconfig IPv6-init on

#!/bin/sh

/etc/rc.d/init.d/ip6tables stop

#---------------------
# デフォルト設定
#---------------------
ip6tables -P INPUT   DROP   # 受信はすべて破棄
ip6tables -P OUTPUT  ACCEPT # 送信はすべて許可
ip6tables -P FORWARD DROP   # 通過はすべて破棄

#---------------------
# INPUT設定
#---------------------
# localhostからの接続は全て許可
ip6tables -A INPUT -i lo -j ACCEPT

# $ethからの接続、LinkLocalからの接続は全て許可
ip6tables -A INPUT -i $eth -j ACCEPT
ip6tables -A INPUT -s fe80::/64 -j ACCEPT

# 接続が確立したコネクションに対する応答は許可
ip6tables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT

#---------------------
# フォワーディング設定
#---------------------

# 自分の所有しているグローバルIPv6アドレスからの転送要求は許可
ip6tables -A FORWARD -s $prefix -j ACCEPT

# 接続が確立した転送に対する応答は許可
ip6tables -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT

#---------------------
# 設定保存/有効化
#---------------------

# 再起動時にも上記設定が有効となるようにルールを保存
/etc/rc.d/init.d/ip6tables save

# ファイアウォール起動
/etc/rc.d/init.d/ip6tables start

chmod 755 ip6tables.sh
./ip6tables.sh
chkconfig ip6tables on

yum -y install bind bind-chroot caching-nameserver
dig . ns \@198.41.0.4 > /var/named/chroot/var/named/named.ca

options {
        listen-on port 53 { 127.0.0.1; $addr; };
        listen-on-v6 port 53 { ::1; $addrv6; };
        directory       "/var/named";
        dump-file       "/var/named/data/cache_dump.db";
        statistics-file "/var/named/data/named_stats.txt";
        memstatistics-file "/var/named/data/named_mem_stats.txt";
        allow-query     { localhost; localnets; $prefix; };
        recursion yes;

        forwarders{
                $dns;
        };
};

logging {
        channel default_debug {
                file "data/named.run";
                severity dynamic;
        };
};

view "internal" {
        match-clients { localnets; $prefix; };
        match-destinations { localnets; $prefix; };

        zone "." IN {
                type hint;
                file "named.ca";
        };
        include "/etc/named.local.zone";
        include "/etc/named.rfc1912.zones";
};

zone "$domain" {
        type master;
        file "$domain.db";
};

zone "$rev_net.in-addr.arpa" {
        type master;
        file "$rev_net.in-addr.arpa.db";
};

zone "$rev_prefix.ip6.arpa" {
        type master;
        file "$rev_prefix.ip6.arpa.db";
};

$TTL    3d
@       IN      SOA     $domain.  root.$domain.(
                                      2007122201 ; Serial
                                      28800      ; Refresh
                                      14400      ; Retry
                                      3600000    ; Expire
                                      86400 )    ; Minimum
        IN NS    $domain.
@       IN A     $addr
gateway IN A     $addr
gateway IN AAAA  $addrv6_mini

$TTL    3d
@       IN      SOA     $domain.  root.$domain.(
                                      2007122202 ; Serial
                                      28800      ; Refresh
                                      14400      ; Retry
                                      3600000    ; Expire
                                      86400 )    ; Minimum
        IN      NS      $domain.
$addr_host     IN      PTR     gateway.$domain.

$TTL 3d 
@       IN SOA $domain. root.$domain. (
                        2007122203      ; Serial number (YYYYMMdd)
                        24h             ; Refresh time
                        30m             ; Retry time
                        2d              ; Expire time
                        3d )            ; Default TTL
        IN      NS     gateway.$domain.

$full_addrv6 IN      PTR     gateway.$domain.

search $domain
nameserver $addr

/etc/rc.d/init.d/named start
chkconfig named on