Hurricane Electric's IPv6 Tunnel Broker Forums

General IPv6 Topics => IPv6 Basics & Questions & General Chatter => Topic started by: CareyG on May 21, 2011, 09:43:35 AM

Title: IPv6 Tunnel Setup
Post by: CareyG on May 21, 2011, 09:43:35 AM
Guys,

I had a ipv6 tunnel setup i believe on May 16. Everything worked fine the dev team has been testing as were happy and MY BOSS was happy. It quit working some time on Friday, i have of course been on vacation :( i broke the existing tunnel and reconfigured the tunnel to my side 71.164.237.24, everything looks ok but i cant get to the url? confused,any feedback would be great. Thanks the rookie.
Title: Re: IPv6 Tunnel Setup
Post by: cholzhauer on May 21, 2011, 02:04:13 PM
which url?

what commands did you use to set up the tunnel?  what does your routing table look like?  whats the output of ipconfig /all ?
Title: Re: IPv6 Tunnel Setup
Post by: CareyG on May 21, 2011, 02:53:24 PM
Here is the url https://wwwv6.verizon.com/FIOSTVV6/WEB/keepalive.aspx
C:\Users\Administrator>ipconfig /all

Windows IP Configuration

   Host Name . . . . . . . . . . . . : MACG1EEMMLU01
   Primary Dns Suffix  . . . . . . . :
   Node Type . . . . . . . . . . . . : Hybrid
   IP Routing Enabled. . . . . . . . : No
   WINS Proxy Enabled. . . . . . . . : No

Ethernet adapter Client-Server:

   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : BASP Virtual Adapter #2
   Physical Address. . . . . . . . . : 84-2B-2B-01-8C-F9
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes
   IPv6 Address. . . . . . . . . . . : 2002:6968:2074:0:105:104:32:116(Preferred
)
   Link-local IPv6 Address . . . . . : fe80::eca6:6408:7743:3439%20(Preferred)
   IPv4 Address. . . . . . . . . . . : 10.10.2.24(Preferred)
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Default Gateway . . . . . . . . . : 10.10.2.1
   DHCPv6 IAID . . . . . . . . . . . : 528755499
   DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-14-D0-F3-E4-84-2B-2B-01-8C-F7

   DNS Servers . . . . . . . . . . . : fec0:0:0:ffff::1%1
                                       fec0:0:0:ffff::2%1
                                       fec0:0:0:ffff::3%1
   NetBIOS over Tcpip. . . . . . . . : Enabled

Ethernet adapter Server-Server:

   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : BASP Virtual Adapter
   Physical Address. . . . . . . . . : 84-2B-2B-01-8C-F7
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes
   IPv6 Address. . . . . . . . . . . : 2002:6968:2074:0:105:104:32:117(Preferred
)
   Link-local IPv6 Address . . . . . : fe80::8997:3820:70b4:1b3a%19(Preferred)
   IPv4 Address. . . . . . . . . . . : 10.10.3.154(Preferred)
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Default Gateway . . . . . . . . . : ::
   DHCPv6 IAID . . . . . . . . . . . : 511978283
   DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-14-D0-F3-E4-84-2B-2B-01-8C-F7

   DNS Servers . . . . . . . . . . . : 68.238.96.12
                                       68.238.64.12
   NetBIOS over Tcpip. . . . . . . . : Enabled

Tunnel adapter isatap.{97D5529C-4B27-4B78-9B0F-F2078F5A50A4}:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Microsoft ISATAP Adapter
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes

Tunnel adapter isatap.{49B94528-048A-4B96-8079-784DD16DADED}:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Microsoft ISATAP Adapter #2
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes

Tunnel adapter Teredo Tunneling Pseudo-Interface:

   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes
   IPv6 Address. . . . . . . . . . . : 2001:0:4137:9e76:2c6d:b98:b85b:12e7(Prefe
rred)
   Link-local IPv6 Address . . . . . : fe80::2c6d:b98:b85b:12e7%23(Preferred)
   Default Gateway . . . . . . . . . :
   NetBIOS over Tcpip. . . . . . . . : Disabled

C:\Users\Administrator>ping 2002:6968:2074:0:105:104:32:117

Pinging 2002:6968:2074:0:105:104:32:117 with 32 bytes of data:
Reply from 2002:6968:2074:0:105:104:32:117: time<1ms
Reply from 2002:6968:2074:0:105:104:32:117: time<1ms
Reply from 2002:6968:2074:0:105:104:32:117: time<1ms
Reply from 2002:6968:2074:0:105:104:32:117: time<1ms

Ping statistics for 2002:6968:2074:0:105:104:32:117:
    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 0ms, Maximum = 0ms, Average = 0ms

C:\Users\Administrator>ipconfig /all

Windows IP Configuration

   Host Name . . . . . . . . . . . . : MACG1EEMMLU01
   Primary Dns Suffix  . . . . . . . :
   Node Type . . . . . . . . . . . . : Hybrid
   IP Routing Enabled. . . . . . . . : No
   WINS Proxy Enabled. . . . . . . . : No

Ethernet adapter Client-Server:

   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : BASP Virtual Adapter #2
   Physical Address. . . . . . . . . : 84-2B-2B-01-8C-F9
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes
   IPv6 Address. . . . . . . . . . . : 2002:6968:2074:0:105:104:32:116(Preferred
)
   Link-local IPv6 Address . . . . . : fe80::eca6:6408:7743:3439%20(Preferred)
   IPv4 Address. . . . . . . . . . . : 10.10.2.24(Preferred)
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Default Gateway . . . . . . . . . : 10.10.2.1
   DHCPv6 IAID . . . . . . . . . . . : 528755499
   DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-14-D0-F3-E4-84-2B-2B-01-8C-F7

   DNS Servers . . . . . . . . . . . : fec0:0:0:ffff::1%1
                                       fec0:0:0:ffff::2%1
                                       fec0:0:0:ffff::3%1
   NetBIOS over Tcpip. . . . . . . . : Enabled

Ethernet adapter Server-Server:

   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : BASP Virtual Adapter
   Physical Address. . . . . . . . . : 84-2B-2B-01-8C-F7
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes
   IPv6 Address. . . . . . . . . . . : 2002:6968:2074:0:105:104:32:117(Preferred
)
   Link-local IPv6 Address . . . . . : fe80::8997:3820:70b4:1b3a%19(Preferred)
   IPv4 Address. . . . . . . . . . . : 10.10.3.154(Preferred)
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Default Gateway . . . . . . . . . : ::
   DHCPv6 IAID . . . . . . . . . . . : 511978283
   DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-14-D0-F3-E4-84-2B-2B-01-8C-F7

   DNS Servers . . . . . . . . . . . : 68.238.96.12
                                       68.238.64.12
   NetBIOS over Tcpip. . . . . . . . : Enabled

Tunnel adapter isatap.{97D5529C-4B27-4B78-9B0F-F2078F5A50A4}:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Microsoft ISATAP Adapter
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes

Tunnel adapter isatap.{49B94528-048A-4B96-8079-784DD16DADED}:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Microsoft ISATAP Adapter #2
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes

Tunnel adapter Teredo Tunneling Pseudo-Interface:

   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes
   IPv6 Address. . . . . . . . . . . : 2001:0:4137:9e76:2c6d:b98:b85b:12e7(Prefe
rred)
   Link-local IPv6 Address . . . . . : fe80::2c6d:b98:b85b:12e7%23(Preferred)
   Default Gateway . . . . . . . . . :
   NetBIOS over Tcpip. . . . . . . . : Disabled

C:\Users\Administrator>

I used the tunnel conefig setup,  as i sadi tit worked before not what cahned i wiould lbe glad to ge mre fed back on the issues when i ge back to Texas tommoroww i will see what has changed on the server since i set it up!Thanks for the help!;;Carey











Title: Re: IPv6 Tunnel Setup
Post by: cholzhauer on May 21, 2011, 03:03:48 PM
get rid of the 2002 addresses and use addresses from your routed /64 or 48.  might as well turn off 6to4 completely too
Title: Re: IPv6 Tunnel Setup
Post by: CareyG on May 22, 2011, 09:31:04 AM
Ok thanks, how do i do this? I am really a rookie and need a little help here.. an expanble would be get.. If you dont mind, Thanks man for you taking your time to help me, still confused why it worked before! Thanks----Carey
Title: Re: IPv6 Tunnel Setup
Post by: cholzhauer on May 22, 2011, 12:25:00 PM
To turn off 6o4, teredo, and ISATAP

Code: [Select]
netsh int ipv6 6to4 set state disabled

netsh int ipv6 isatap set state disabled

netsh int teredo set state diasbled

That should get rid of your 2002 address, if not, reboot.  If it's still there, check and make sure it's not statically set

What commands did you use to set up the tunnel? (Please post)

Which interface (if any) is going to talk to the rest of your network?  I ask because you may need to get the /48 too
Title: Re: IPv6 Tunnel Setup
Post by: CareyG on May 23, 2011, 05:40:47 AM
Hello Cholzhauer,

I setup the tunnel putting  public ip address in and pointing to a server and a creating  tunnel.This worked before.... i also added the commands you gave and went the example page for 2008 and added those commands as well.Here is the lastest ipconfig:Note all traffic destine for the internet should 10.10.2.24/ natted 71.164.237.24 just IPv6?
C:\Users\Administrator>ipconfig /all

Windows IP Configuration

   Host Name . . . . . . . . . . . . : MACG1EEMMLU01
   Primary Dns Suffix  . . . . . . . :
   Node Type . . . . . . . . . . . . : Hybrid
   IP Routing Enabled. . . . . . . . : No
   WINS Proxy Enabled. . . . . . . . : No

Ethernet adapter Client-Server:

   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : BASP Virtual Adapter #2
   Physical Address. . . . . . . . . : 84-2B-2B-01-8C-F9
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes
   IPv6 Address. . . . . . . . . . . : 2002:6968:2074:0:105:104:32:116(Preferred
)
   Link-local IPv6 Address . . . . . : fe80::eca6:6408:7743:3439%20(Preferred)
   IPv4 Address. . . . . . . . . . . : 10.10.2.24(Preferred)
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Default Gateway . . . . . . . . . : 10.10.2.1
   DHCPv6 IAID . . . . . . . . . . . : 528755499
   DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-14-D0-F3-E4-84-2B-2B-01-8C-F7

   DNS Servers . . . . . . . . . . . : fec0:0:0:ffff::1%1
                                       fec0:0:0:ffff::2%1
                                       fec0:0:0:ffff::3%1
   NetBIOS over Tcpip. . . . . . . . : Enabled

Ethernet adapter Server-Server:

   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : BASP Virtual Adapter
   Physical Address. . . . . . . . . : 84-2B-2B-01-8C-F7
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes
   IPv6 Address. . . . . . . . . . . : 2002:6968:2074:0:105:104:32:117(Preferred
)
   Link-local IPv6 Address . . . . . : fe80::8997:3820:70b4:1b3a%19(Preferred)
   IPv4 Address. . . . . . . . . . . : 10.10.3.154(Preferred)
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Default Gateway . . . . . . . . . : ::
   DHCPv6 IAID . . . . . . . . . . . : 511978283
   DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-14-D0-F3-E4-84-2B-2B-01-8C-F7

   DNS Servers . . . . . . . . . . . : 68.238.96.12
                                       68.238.64.12
   NetBIOS over Tcpip. . . . . . . . : Enabled
Title: Re: IPv6 Tunnel Setup
Post by: cholzhauer on May 23, 2011, 05:45:47 AM
We still have to deal with those 2002 addresses.  Try this

Code: [Select]
netsh int ipv6 delete address Client-Server 2002:6968:2074:0:105:104:32:116
netsh int ipv6 delete address Server-Server 2002:6968:2074:0:105:104:32:117

You also need to use your NAT address to create the tunnel; use 10.10.2.1 or 10.10.3.154 instead of 71.164.237.24.
Title: Re: IPv6 Tunnel Setup
Post by: CareyG on May 23, 2011, 06:05:11 AM
I added those commands us suggested going to test again i have to use 10.10.2.x to get out on the internet, 10.10.3.x is used for our VPN only, 10.10.2.1 is my default gateway to get to the internet?
Title: Re: IPv6 Tunnel Setup
Post by: cholzhauer on May 23, 2011, 06:06:45 AM
Then use 10.10.2.1 to setup the tunnel.
Title: Re: IPv6 Tunnel Setup
Post by: CareyG on May 23, 2011, 06:37:30 AM
ok here we go
Title: Re: IPv6 Tunnel Setup
Post by: CareyG on May 23, 2011, 07:09:56 AM
i did not work here is wha t my coworker changed!
3 things...
i noticed server-server had a default gateway applied 10.10.3.0...i removed it since it is not supposed to have one (static routes are applied)
added dummy public IPv6 address on client-server & server-server NICs
set IPv6 default route to use teredo interface
Title: Re: IPv6 Tunnel Setup
Post by: cholzhauer on May 23, 2011, 07:22:17 AM
Teredo won't work if you ran those three commands I gave you before to disable teredo

An interface needs to have a default gateway...it has to know where to send all unknown traffic.  Your default gateway should point the router that's connected to that interface.  10.10.3.0 couldn't be a router anyway...that address is the network address

What dummy address did you use?

Since you're behind a NAT, is your firewall/router forwarding protocol 41?
Title: Re: IPv6 Tunnel Setup
Post by: CareyG on May 23, 2011, 07:34:34 AM
firewall is forwarding port 41 i have another post you helped me with let me see if i can find it, should dummy address
Title: Re: IPv6 Tunnel Setup
Post by: cholzhauer on May 23, 2011, 07:36:06 AM
keep in mind that port != protocol.

Title: Re: IPv6 Tunnel Setup
Post by: CareyG on May 23, 2011, 08:04:45 AM
firewall is good, not about what to use for a dummy interface (default gateway) 10.10.2.1 will not work tunnel broker only sees the public ip address and will not allow me to use another address it says it being blocked by firewall and firewall is open ?
Title: Re: IPv6 Tunnel Setup
Post by: cholzhauer on May 23, 2011, 08:05:43 AM
The tunnel broker will only see your public IP address...you need to use the NAT address in the commands you enter into the command prompt
Title: Re: IPv6 Tunnel Setup
Post by: cholzhauer on May 24, 2011, 07:53:16 AM
So your tunnel works now?

If you're not getting DNS, check the DNS server you're using.  What OS?  XP will not use IPv6 transport for DNS lookups.

If you're not seeing an AAAA record when you do a nslookup, your DNS server is not returning them.

Did you enter an IPv6 address on your LAN connections?  The directions from HE only tell you how to add an address to your IP6Tunnel adapter.
Title: Re: IPv6 Tunnel Setup
Post by: CareyG on May 24, 2011, 07:56:09 AM
I have the connection working but i am cheating, here are the errors i am getting!
No IPv6 address detected
IPv6 connections work, but connections using DNS names do not use IPv6. For some reason, your browser or your OS is not doing IPv6 DNS 'AAAA' lookups.

Title: Re: IPv6 Tunnel Setup
Post by: cholzhauer on May 24, 2011, 07:56:54 AM
Quote
I have the connection working but i am cheating,

You'll have to elaborate a little.

Did you see my other suggestions?
Title: Re: IPv6 Tunnel Setup
Post by: CareyG on May 24, 2011, 08:29:44 AM
Ok i added hostfiles to get the urls to work, and went to,test-ipv6.com and that were i saw the errors i listed. on my lan connection i would add the 10. address right and convert to the ipv6 address. Our DNS servers they dont do reverse lookups so i dont think there is much i can do. I am getting there, thanks for the help!
Title: Re: IPv6 Tunnel Setup
Post by: CareyG on May 24, 2011, 08:36:00 AM
My bad important question you asked win 2008 sorry!
Title: Re: IPv6 Tunnel Setup
Post by: cholzhauer on May 24, 2011, 08:37:18 AM
You can use HE's DNS servers instead

No need to convert...use an IP out of the routed /64 range you have listed on your tunnel page
Title: Re: IPv6 Tunnel Setup
Post by: CareyG on May 24, 2011, 08:49:26 AM
No connection now:
C:\Users\Administrator>ipconfig

Windows IP Configuration


Ethernet adapter Client-Server:

   Connection-specific DNS Suffix  . :
   Link-local IPv6 Address . . . . . : fe80::eca6:6408:7743:3439%18
   IPv4 Address. . . . . . . . . . . : 10.10.2.24
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Default Gateway . . . . . . . . . : 10.10.2.1

Ethernet adapter Server-Server:

   Connection-specific DNS Suffix  . :
   Link-local IPv6 Address . . . . . : fe80::8997:3820:70b4:1b3a%17
   IPv4 Address. . . . . . . . . . . : 10.10.3.154
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Default Gateway . . . . . . . . . : ::
Title: Re: IPv6 Tunnel Setup
Post by: cholzhauer on May 24, 2011, 08:51:40 AM
I assume you just cut off the IP6Tunnel adapter

You need to assign an IPv6 address to your Server-Server adapter.  I don't know what your /64 is, but you add it the same way you would add a static IPv4 address, but just choose the IPv6 adapter instead.  If your routed /64 was 2001:db8:1:1::/64, you could use 2001:db8:1:1::1 as your address
Title: Re: IPv6 Tunnel Setup
Post by: CareyG on May 24, 2011, 09:07:32 AM
here are my settings i add a IPV6 address to the network tab? does this show available addresses i can use?
IPv6 Tunnel Endpoints
Server IPv4 Address:72.52.104.74Server IPv6 Address:2001:470:1f04:1ceb::1/64Client IPv4 Address:71.164.237.24Client IPv6 Address:2001:470:1f04:1ceb::2/64Available DNS Resolvers
Anycasted IPv6 Caching Nameserver:2001:470:20::2Anycasted IPv4 Caching Nameserver:74.82.42.42Routed IPv6 Prefixes
Routed /64:2001:470:1f05:1cea::/64Routed /48:2001:470:8737::/48 [X]rDNS DelegationsEditDelegate to dns.he.net | SaverDNS Delegated NS1:ns1.he.netrDNS Delegated NS2:ns2.he.netrDNS Delegated NS3:ns3.he.netrDNS Delegated NS4:ns4.he.netrDNS Delegated NS5:ns5.he.net
Title: Re: IPv6 Tunnel Setup
Post by: cholzhauer on May 24, 2011, 09:09:39 AM
Quote
Routed /64:2001:470:1f05:1cea::/64
Routed /48:2001:470:8737::/48

Use 2001:470:1f05:1cea::1 for your server-server adapter

Add the address with these directions

http://technet.microsoft.com/en-us/library/bb878057.aspx

Your gateway will be 2001:470:1f04:1ceb::1
Title: Re: IPv6 Tunnel Setup
Post by: CareyG on May 24, 2011, 09:28:32 AM
still does not work it complains about the server server interface not a dupe. the client server is the interface that connects to the internet.
Title: Re: IPv6 Tunnel Setup
Post by: CareyG on May 24, 2011, 09:39:12 AM
now nothing works except the internet i need to just remove this and start over, dont no what the cli commands are to just remove every thing