Hi There My Name Is Michael And i live in Auckland,New zealand.
Im On Adsl2+ On Orcon@home network.
I wanted to get a tunnelbroker to my house so i can get a ipv6 address.
I Am Using Mac os x tiger
and my Ip Is 121.98.180.101
this is a error i get : Error: Your IPv4 endpoint is unreachable or unstable. Please make sure ICMP is not blocked. If you are blocking ICMP, please allow 66.220.2.74 through your firewall.
i was using my Ip as my IPv4 endpoint.
i have a THOMSON ST5x6v6 modem and to get into it i use 192.168.1.254
My Firewall is disable, my Remote Assistance is disable, my Intrusion Detection is enable , my Dynamic DNS is disable and my UPnP is enable.
When i change the endpoint to my modem Gateway or whatever i get a error. That IPv4 endpoint has been blocked (RFC1918 Private Address Space)
So does anyone know what i should do? ???
Thanks Michael.
Enable ping response on your router/firewall.
Quote from: jimb on January 21, 2011, 11:51:02 PM
Enable ping response on your router/firewall.
i did a Connectivity Check showed all green ticks
(http://i802.photobucket.com/albums/yy307/mikenzb/Picture3-5.png)
im not sure how to enable ping responses on my router
Easy.
Open a command window (it is called "Terminal" in OSX afaik). Then type "telnet 192.168.1.254", default credentials are user: Administrator (pay attention to the first capital letter since it's case sensitive) with a blank password (or your own credentials of course, it's the same username/password you use to log on to the web interface in case you set your own password).
Now enter this command:
service system ifadd name=PING_RESPONDER group=wan
followed by
saveall
and two times
exit
Afterwards try to recreate a tunnel at HE. It should work this time. By the way, for the tunnel to work you might need to disable the intrusion detection and/or the firewall in the web interface.
Let me know if it worked :)
you also need to use the 121 address instead of your 192.
Quote from: hisken on January 22, 2011, 03:28:57 AM
Easy.
Open a command window (it is called "Terminal" in OSX afaik). Then type "telnet 192.168.1.254", default credentials are user: Administrator (pay attention to the first capital letter since it's case sensitive) with a blank password (or your own credentials of course, it's the same username/password you use to log on to the web interface in case you set your own password).
Now enter this command:
service system ifadd name=PING_RESPONDER group=wan
followed by
saveall
and two times
exit
Afterwards try to recreate a tunnel at HE. It should work this time. By the way, for the tunnel to work you might need to disable the intrusion detection and/or the firewall in the web interface.
Let me know if it worked :)
It Keeps Saying : Failed to add interface group to unknown service access list.
Quote from: cholzhauer on January 22, 2011, 05:14:43 AM
you also need to use the 121 address instead of your 192.
that just says Trying 121.168.1.254...
Quote from: hisken on January 22, 2011, 03:28:57 AM
Easy.
Open a command window (it is called "Terminal" in OSX afaik). Then type "telnet 192.168.1.254", default credentials are user: Administrator (pay attention to the first capital letter since it's case sensitive) with a blank password (or your own credentials of course, it's the same username/password you use to log on to the web interface in case you set your own password).
Now enter this command:
service system ifadd name=PING_RESPONDER group=wan
followed by
saveall
and two times
exit
Afterwards try to recreate a tunnel at HE. It should work this time. By the way, for the tunnel to work you might need to disable the intrusion detection and/or the firewall in the web interface.
Let me know if it worked :)
Ah It worked after the 8th time. now i just need to know how to set up my tunnel on my mac. it doe stay ipv6 on my mac but i dont know what my Ipv6 address is?
its showing my ipv6 address but im still on the net with my ipv4 address.
Quote from: mikenzb on January 22, 2011, 09:55:00 AM
Quote from: hisken on January 22, 2011, 03:28:57 AM
Easy.
Open a command window (it is called "Terminal" in OSX afaik). Then type "telnet 192.168.1.254", default credentials are user: Administrator (pay attention to the first capital letter since it's case sensitive) with a blank password (or your own credentials of course, it's the same username/password you use to log on to the web interface in case you set your own password).
Now enter this command:
service system ifadd name=PING_RESPONDER group=wan
followed by
saveall
and two times
exit
Afterwards try to recreate a tunnel at HE. It should work this time. By the way, for the tunnel to work you might need to disable the intrusion detection and/or the firewall in the web interface.
Let me know if it worked :)
Ah It worked after the 8th time. now i just need to know how to set up my tunnel on my mac. it doe stay ipv6 on my mac but i dont know what my Ipv6 address is?
its showing my ipv6 address but im still on the net with my ipv4 address.
This is what i get when i try to set it up.
(http://i802.photobucket.com/albums/yy307/mikenzb/Picture1-15.png)
you need to be root
try using sudo before the commands
Quote from: broquea on January 22, 2011, 10:54:19 AM
you need to be root
try using sudo before the commands
Indeed. And since his Mac is behind NAT, he'll need to replace his public IP4 (121.98.180.101) with his local Mac IP (e.g. 192.168.1.x) in the commands.
Quote from: broquea on January 22, 2011, 10:54:19 AM
you need to be root
try using sudo before the commands
i did that and i think it works but im still on ipv4
i didnt enter any passwords cause my modem doesnt have a pass for the admin acc.
Quote from: mikenzb on January 22, 2011, 11:19:42 AM
i did that and i think it works but im still on ipv4
i didnt enter any passwords cause my modem doesnt have a pass for the admin acc.
Can you ping any IPv6 address?
In terminal, enter something like this to verify.
Quoteping6 www.he.net
Also take a look at my post just above yours, since we posted our replies at the same time.
Quote from: hisken on January 22, 2011, 11:21:36 AM
Quote from: mikenzb on January 22, 2011, 11:19:42 AM
i did that and i think it works but im still on ipv4
i didnt enter any passwords cause my modem doesnt have a pass for the admin acc.
Can you ping any IPv6 address?
In terminal, enter something like this to verify.
Quoteping6 www.he.net
Also take a look at my post just above yours, since we posted our replies at the same time.
Nope i cant ping any ipv6 address this is what i get :
(http://i802.photobucket.com/albums/yy307/mikenzb/Picture2-13.png)
----
i try using my mac address this is what it came up with :
(http://i802.photobucket.com/albums/yy307/mikenzb/Picture1-16.png)
Let's see if we can fix it. First of all reboot your Mac to start from scratch.
In terminal log on to your Speedtouch using the telnet command.
Try entering the following sequence of commands:
ids config state=disabled
firewall config state=disabled
One of the following:
connection unbind application=IP6TO4 port=1
OR if that command doesn't work:
nat unbind application=IP6TO4 port=1
And last but not least:
saveall
exit
Now try recreating the tunnel on your Mac using the commands supplied by HE, with "sudo" prefixed before them. Pay attention to using your local IP in the commands instead of your public IP. Good luck.
Edit: I see you're quite on the other side of the world.
And guess what? When tracing your IP from here, a large part of it is being routed over the HE network :)
http://pastebin.com/yJ8EfXQ6
Quote from: hisken on January 22, 2011, 11:31:14 AM
Let's see if we can fix it. First of all reboot your Mac to start from scratch.
In terminal log on to your Speedtouch using the telnet command.
Try entering the following sequence of commands:
ids config state=disabled
firewall config state=disabled
One of the following:
connection unbind application=IP6TO4 port=1
OR if that command doesn't work:
nat unbind application=IP6TO4 port=1
And last but not least:
saveall
exit
Now try recreating the tunnel on your Mac using the commands supplied by HE, with "sudo" prefixed before them. Pay attention to using your local IP in the commands instead of your public IP. Good luck.
Edit: I see you're quite on the other side of the world.
And guess what? When tracing your IP from here, a large part of it is being routed over the HE network :)
http://pastebin.com/yJ8EfXQ6
ok tis is whats showing up now : :-\
(http://i802.photobucket.com/albums/yy307/mikenzb/Picture2-14.png)
Quote
ok tis is whats showing up now : :-\
Does the following work (i.e. no error after pressing enter)?
connection unbind application=IP6TO4 port=0So instead of port=1 it's now port=0. On some Speedtouches you need port=0 instead of port=1 to unbind the protocol 41 helper.
Quote from: hisken on January 22, 2011, 11:58:14 AM
Quote
ok tis is whats showing up now : :-\
Does the following work (i.e. no error after pressing enter)?
connection unbind application=IP6TO4 port=0
So instead of port=1 it's now port=0. On some Speedtouches you need port=0 instead of port=1 to unbind the protocol 41 helper.
alright it worked with no error now what?
Quote from: mikenzb on January 22, 2011, 12:05:37 PM
Quote from: hisken on January 22, 2011, 11:58:14 AM
Quote
ok tis is whats showing up now : :-\
Does the following work (i.e. no error after pressing enter)?
connection unbind application=IP6TO4 port=0
So instead of port=1 it's now port=0. On some Speedtouches you need port=0 instead of port=1 to unbind the protocol 41 helper.
alright it worked with no error now what?
Do a "saveall" followed by "exit" on the Speedtouch.
Now try recreating the tunnel on your Mac using the commands supplied by HE (those from your tunnel overview page), with "sudo" prefixed before them. Pay attention to using your local IP in the commands instead of your public IP.
After this, it should (hopefully) be up and running.
Verify it with the terminal:
ping6 2001:470:d0e2::1
Quote from: hisken on January 22, 2011, 12:08:51 PM
Quote from: mikenzb on January 22, 2011, 12:05:37 PM
Quote from: hisken on January 22, 2011, 11:58:14 AM
Quote
ok tis is whats showing up now : :-\
Does the following work (i.e. no error after pressing enter)?
connection unbind application=IP6TO4 port=0
So instead of port=1 it's now port=0. On some Speedtouches you need port=0 instead of port=1 to unbind the protocol 41 helper.
alright it worked with no error now what?
Do a "saveall" followed by "exit" on the Speedtouch.
Now try recreating the tunnel on your Mac using the commands supplied by HE (those from your tunnel overview page), with "sudo" prefixed before them. Pay attention to using your local IP in the commands instead of your public IP.
After this, it should (hopefully) be up and running.
Verify it with the terminal:
ping6 2001:470:d0e2::1
Oh did i ave to do it on the speedtouch modem with that telnet code?
i only did it on the terminal not logged into my modem
Quote
Oh did i ave to do it on the speedtouch modem with that telnet code?
i only did it on the terminal not logged into my modem
The commands from your Tunnel overview and that ping command need to be entered directly in the terminal. All other commands (the connection and saveall things) are for your Speedtouch through telnet indeed.
To keep things understandable you could use two open terminals, one logged in to your Speedtouch using telnet and the other one just local.
Quote from: hisken on January 22, 2011, 12:14:14 PM
Quote
Oh did i ave to do it on the speedtouch modem with that telnet code?
i only did it on the terminal not logged into my modem
The commands from your Tunnel overview and that ping command need to be entered directly in the terminal. All other commands (the connection and saveall things) are for your Speedtouch through telnet indeed.
ya i did that
connection unbind application=IP6TO4 port=0 wth out the telnet i do it in the telnet now.
Quote from: hisken on January 22, 2011, 12:14:14 PM
Quote
Oh did i ave to do it on the speedtouch modem with that telnet code?
i only did it on the terminal not logged into my modem
The commands from your Tunnel overview and that ping command need to be entered directly in the terminal. All other commands (the connection and saveall things) are for your Speedtouch through telnet indeed.
To keep things understandable you could use two open terminals, one logged in to your Speedtouch using telnet and the other one just local.
still showing up with a
Failed to delete CONN binding.in telnet.
when not in telnet it works.
Quote from: mikenzb on January 22, 2011, 12:18:44 PM
Quote from: hisken on January 22, 2011, 12:14:14 PM
Quote
Oh did i ave to do it on the speedtouch modem with that telnet code?
i only did it on the terminal not logged into my modem
The commands from your Tunnel overview and that ping command need to be entered directly in the terminal. All other commands (the connection and saveall things) are for your Speedtouch through telnet indeed.
To keep things understandable you could use two open terminals, one logged in to your Speedtouch using telnet and the other one just local.
still showing up with a
Failed to delete CONN binding.in telnet.
when not in telnet it works.
That's because you already entered the command. It should be fine now.
You can continue with the commands that HE supplied you prefixed with "sudo". They obviously need to be executed in a local (no telnet) terminal window.
Quote from: hisken on January 22, 2011, 12:19:44 PM
Quote from: mikenzb on January 22, 2011, 12:18:44 PM
Quote from: hisken on January 22, 2011, 12:14:14 PM
Quote
Oh did i ave to do it on the speedtouch modem with that telnet code?
i only did it on the terminal not logged into my modem
The commands from your Tunnel overview and that ping command need to be entered directly in the terminal. All other commands (the connection and saveall things) are for your Speedtouch through telnet indeed.
To keep things understandable you could use two open terminals, one logged in to your Speedtouch using telnet and the other one just local.
should i be entering my pasword to log into the website when it asks for it cause i have not been doing that. as i have no pass on my modem so i didnt do should i be doing it?
still showing up with a
Failed to delete CONN binding.in telnet.
when not in telnet it works.
That's because you already entered the command. It should be fine now.
You can continue with the commands that HE supplied you prefixed with "sudo". They obviously need to be executed in a local (no telnet) terminal window.
FYI: your last post seems to be empty ;)
Quote from: hisken on January 22, 2011, 12:27:47 PM
FYI: your last post seems to be empty ;)
oh oops.
i was saying do you need to enter the password for it. i dont have a password on my modem.
i do have a password on how to log in on tunnelbroker.net should i be using that password?
You don't need any password to create the tunnel on your Mac. Last step now is to open a new terminal window and execute those HE commands.
Those commands are like (look at your Tunnel Details page, show config for OSX - don't forget to add "sudo"):
sudo ifconfig gif0 create
sudo ifconfig gif0 tunnel x.x.x.x x.x.x.x
sudo ifconfig gif0 inet6 *something*::2 *something*::1 prefixlen 128
sudo route -n add -inet6 default *something*::1
After each sudo command you need to enter your local Mac password (or just press enter if you don't have one).
Quote from: hisken on January 22, 2011, 12:34:06 PM
You don't need any password to create the tunnel on your Mac. Last step now is to open a new terminal window and execute those HE commands.
Those commands are like (look at your Tunnel Details page, show config for OSX - don't forget to add "sudo"):
sudo ifconfig gif0 create
sudo ifconfig gif0 tunnel x.x.x.x x.x.x.x
sudo ifconfig gif0 inet6 *something*::2 *something*::1 prefixlen 128
sudo route -n add -inet6 default *something*::1
After each sudo command you need to enter your local Mac password (or just press enter if you don't have one).
Ah that worked i think cause at the end it said
add net default: gateway 2001:470:c:d4b::1now i did run a ipv4 and 6 test it still shows i dont have a ipv6 address?
Does this work now?
Quoteping6 2001:470:d0e2::1
And what's the output of:
sudo ifconfig
Quote from: hisken on January 22, 2011, 12:41:47 PM
Does this work now?
Quoteping6 2001:470:d0e2::1
And what's the output of:
sudo ifconfig
ya it works how do i get the ping to stop?
iy keeps doing ping6:
sendmsg: Network is down
ping6: wrote sigma.tun.hisken.nl 16 chars, ret=-1
ping6: sendmsg: Network is down
ping6: wrote sigma.tun.hisken.nl 16 chars, ret=-1
You can stop the ping with control-C.
Sorry to say - but I think you'd better find someone in your neighborhood with some more network / command line experience. It's a bit hard to help you through this forum anyway.
A much easier solution for you to get IPv6 connectivity would be Teredo. It doesn't need any kind of configuration and will work straight out of the box. Despite I'm not familiar with Apple, this might be an interesting link for you: http://www.deepdarc.com/miredo-osx/. If you reboot your Mac right now, all earlier manual configurations will be gone and you can start from scratch again (then try using Teredo). There is a lot of information on Google about Teredo and Mac OSX.
Quote from: hisken on January 22, 2011, 12:58:28 PM
You can stop the ping with control-C.
Sorry to say - but I think you'd better find someone in your neighborhood with some more network / command line experience. It's a bit hard to help you through this forum this way. I'm pretty sure you will manage to get it working in the end anyhow.
An much easier solution for you to get IPv6 connectivity would be Teredo. It doesn't need any kind of configuration and will work straight out of the box. Despite I'm not familiar with Apple, this might be an interesting link for you: http://www.deepdarc.com/miredo-osx/. If you reboot your Mac right now, all earlier manual configurations will be gone and you can start from scratch again (then try using Teredo). There is a lot of information on Google about Teredo and Mac OSX.
na im alright. i just stay on 1pv4 untill my isp is ready
Heh. I think this is the first kiwi I've seen on this forum.
Does the speedtouch have some sort of web interface? I used to use one, but can't remember. I think that'd be easier to use for him. I kind of remember that mine didn't though. Just telnet and a fairly obscure cli. Like it was France or something. :P :P
Quote from: jimb on January 22, 2011, 06:34:25 PM
Heh. I think this is the first kiwi I've seen on this forum.
Does the speedtouch have some sort of web interface? I used to use one, but can't remember. I think that'd be easier to use for him. I kind of remember that mine didn't though. Just telnet and a fairly obscure cli. Like it was France or something. :P :P
What Web interface? you mean like this :
(http://i802.photobucket.com/albums/yy307/mikenzb/Picture1-17.png)
And ya i think im the first kiwi here.
Yeah something like that. I don't think my old speedtouch had one of those. It was only being used as a bridge anyway.
Quote from: jimb on January 23, 2011, 04:16:10 PM
Yeah something like that. I don't think my old speedtouch had one of those. It was only being used as a bridge anyway.
ha i get what you mean.
Its kind of like using MS-DOS with no GUI.
Quote from: mikenzb on January 23, 2011, 09:06:34 PM
Quote from: jimb on January 23, 2011, 04:16:10 PM
Yeah something like that. I don't think my old speedtouch had one of those. It was only being used as a bridge anyway.
ha i get what you mean.
Its kind of like using MS-DOS with no GUI.
Heck, since when did MS-DOS have a GUI? :P
@Jimb: Yup, all Speedtouches have those kind of crappy web interfaces. But I like the CLI anyhow, even though it's a really weird one 8). Are you by the way already on native IP6? My ISP here seems to be ready for it, but they don't offer it yet to mainstream consumers :-\
Quote from: hisken on January 24, 2011, 03:32:17 PM
Quote from: mikenzb on January 23, 2011, 09:06:34 PM
Quote from: jimb on January 23, 2011, 04:16:10 PM
Yeah something like that. I don't think my old speedtouch had one of those. It was only being used as a bridge anyway.
ha i get what you mean.
Its kind of like using MS-DOS with no GUI.
Heck, since when did MS-DOS have a GUI? :P
@Jimb: Yup, all Speedtouches have those kind of crappy web interfaces. But I like the CLI anyhow, even though it's a really weird one 8). Are you by the way already on native IP6? My ISP here seems to be ready for it, but they don't offer it yet to mainstream consumers :-\
Nope. I'm using a tunnel. But I should be able to get native IPv6. I'm on comcast business and apparently they have given it to a few users. Not sure if my area supports it yet. Sort of hitting a wall inquiring about it though.
I played with their 6to4 gateways, but found the response to be way slower than HEs.
Quote from: hisken on January 24, 2011, 03:32:17 PM
Quote from: mikenzb on January 23, 2011, 09:06:34 PM
Quote from: jimb on January 23, 2011, 04:16:10 PM
Yeah something like that. I don't think my old speedtouch had one of those. It was only being used as a bridge anyway.
ha i get what you mean.
Its kind of like using MS-DOS with no GUI.
Heck, since when did MS-DOS have a GUI? :P
@Jimb: Yup, all Speedtouches have those kind of crappy web interfaces. But I like the CLI anyhow, even though it's a really weird one 8). Are you by the way already on native IP6? My ISP here seems to be ready for it, but they don't offer it yet to mainstream consumers :-\
I think MS-dos 3.1.
My Isp(orcon) is ready but Nz telecom isn't
We are all on telecom cabinets and excahnges so if there not ready no other ISP will be.
Nz so slow on there internet they dont even have Cable tv here. Well some of nz has cable tv(Fiber) but not in Auckland
They say its going be 2020 untill nz gets 100Mb Download and 50Mb Upload Speeds
All of nz is still on copper and theres only 1 ISP that offers VDSL2+ Thats only if your lucky and your on a cabinet that has fiber running too it.