Hurricane Electric's IPv6 Tunnel Broker Forums

General IPv6 Topics => IPv6 Basics & Questions & General Chatter => Topic started by: SE1 on October 11, 2011, 10:02:28 AM

Title: ipv6 tests - created tunnel now what?
Post by: SE1 on October 11, 2011, 10:02:28 AM
Hi,

I am newbie just created an ipv6 tunnel from a PC using HE,  would like to know some tests that I can do ?

Need some guidance with what needs to be done next?

Can I create a small LAN environment of IPv6 address and send it out via the tunnel.

Title: Re: ipv6 tests - created tunnel now what?
Post by: cholzhauer on October 11, 2011, 10:04:40 AM
Quote
I am newbie just created an ipv6 tunnel from a PC using HE,  would like to know some tests that I can do ?

You can go through the HE certification program http://ipv6.he.net/certification/

Quote
Can I create a small LAN environment of IPv6 address and send it out via the tunnel.

Sure.  You can use the routed /64 on your info page to do this, or if you have more than one subnet, you can request a /48 and assign different /64's to your different subnets
Title: Re: ipv6 tests - created tunnel now what?
Post by: SE1 on October 11, 2011, 10:50:15 AM
Thanks. I created the tunnel and reached the explorer level.

Need to complete the next levels.
Title: Re: ipv6 tests - created tunnel now what?
Post by: SE1 on October 11, 2011, 11:21:01 AM
how to see my tunnel information ?
Title: Re: ipv6 tests - created tunnel now what?
Post by: cholzhauer on October 11, 2011, 11:28:55 AM
Log in to http://tunnelbroker.net then click on the name of your tunnel

Title: Re: ipv6 tests - created tunnel now what?
Post by: SE1 on October 11, 2011, 11:37:35 AM
Thanks, I am running Ubuntu on a VM on the windows machine which is connected to the tunnel, how do i configure the ubuntu on the virtual box for ipv6 traffic through the tunnel.
Title: Re: ipv6 tests - created tunnel now what?
Post by: cholzhauer on October 11, 2011, 11:44:47 AM
It depends on how you're doing the virtual stuff.  If you're using bridged networking, it'll just work.  (If you're using RA it'll pick up an address and if you're manually assigning addresses, you just have to assign an address)
Title: Re: ipv6 tests - created tunnel now what?
Post by: SE1 on October 11, 2011, 11:56:16 AM
I am using a bridged connection, I have set the default gw on my virtual machine to the windows machine which is the tunnel endpoint, but i am unable to get to the internet from the VM.
Title: Re: ipv6 tests - created tunnel now what?
Post by: cholzhauer on October 11, 2011, 12:14:40 PM
What is the tunnel endpoint set to?  (like the actual address)

You should have the ::2 address on your tunnel adapter.  You also need to put an address on the internal side of your windows machine...take an IP out of your routed /64 or use a /64 from your /48 and assign an address to your local area connection.  The IP on the "local area connection adapter" needs to be in the same subnet as eth0 on your Ubuntu VM


Title: Re: ipv6 tests - created tunnel now what?
Post by: SE1 on October 11, 2011, 01:07:44 PM
Tunnel Details:
Server IPv4 Address:64.62.134.130
Server IPv6 Address:2001:470:66:47::1/64
Client IPv4 Address:138.111.56.12
Client IPv6 Address:2001:470:66:47::2/64

I have assigned 2001:470:66:47::3/64 to my bridged LAN with defualt GW as 2001:470:66:47::1

For the Ubuntu VM, i have created a bridge. See attached the ubuntu address assigned.


Title: Re: ipv6 tests - created tunnel now what?
Post by: cholzhauer on October 11, 2011, 01:16:29 PM
Somewhere there's another range of IPv6 addresses you didn't see

For example, my info shows

Code: [Select]
Server IPv4 Address:209.51.161.14
Server IPv6 Address:2001:470:1f06:141a::1/64
Client IPv4 Address:72.241.35.194
Client IPv6 Address:2001:470:1f06:141a::2/64
Available DNS Resolvers
Anycasted IPv6 Caching Nameserver:2001:470:20::2
Anycasted IPv4 Caching Nameserver:74.82.42.42
Routed IPv6 Prefixes
Routed /64:2001:470:1f07:141a::/64

The last line says "routed /64"...you'll need to assign IP addresses out of that...you only use ::1 and ::2 out of the  2001:470:66:47::/64 range
Title: Re: ipv6 tests - created tunnel now what?
Post by: SE1 on October 11, 2011, 01:50:03 PM
Thanks.
IPv6 Tunnel Endpoints
Server IPv4 Address:64.62.134.130
Server IPv6 Address:2001:470:66:47::1/64
Client IPv4 Address:138.111.56.12
Client IPv6 Address:2001:470:66:47::2/64
Available DNS Resolvers
Anycasted IPv6 Caching Nameserver:2001:470:20::2
Anycasted IPv4 Caching Nameserver:74.82.42.42
Routed IPv6 Prefixes
Routed /64:2001:470:67:47::/64

I have assigned the Bridged LAN :
Ip address:  2001:470:67:47::3

What addresses do i assign to the ubuntu VM it is bridged, but can't get to the internet from the VM.
Title: Re: ipv6 tests - created tunnel now what?
Post by: cholzhauer on October 11, 2011, 02:25:40 PM
You can easing the next address... 2001:470:67:47::4.

Your gateway is then the ::3 address of the windows vm
Title: Re: ipv6 tests - created tunnel now what?
Post by: SE1 on October 11, 2011, 02:40:48 PM
I have configured the ipv6 addresses as shown in the attachment,

However, I am still not able to get to the internet from the VM.

Title: Re: ipv6 tests - created tunnel now what?
Post by: cholzhauer on October 11, 2011, 02:46:03 PM
Unless i'm missing something, I don't see a 2001 address on there
Title: Re: ipv6 tests - created tunnel now what?
Post by: SE1 on October 11, 2011, 02:50:35 PM
Sorry. Here it is attached.

I can ping the ipv6 address on the windows machine from the VM, but can't access the internet.
Title: Re: ipv6 tests - created tunnel now what?
Post by: SE1 on October 11, 2011, 05:33:23 PM
My topology is as shown in the jpeg.


The default GW for the ubuntu VM is 138.111.56.12 and ipv6 2001:470:67:47::3

i am able to ping client side of the tunnel but not the server side of the tunnel, so cant get to the web.

everything is working perfectly on windows.

P.S. I have also attached the ip address config, please let me know where i went wrong.
Title: Re: ipv6 tests - created tunnel now what?
Post by: cholzhauer on October 12, 2011, 04:13:21 AM
Everything looks good to me.

I assume your tunnel works from the Windows side?

Are you able to ping the windows machine from your Ubuntu VM?
Title: Re: ipv6 tests - created tunnel now what?
Post by: SE1 on October 12, 2011, 11:10:55 AM
yes the tunnel works from the windows side.

I can ping the windows machine from the ubuntu vm but can't access the tunnel from the ubuntu vm.

What could be wrong?
Title: Re: ipv6 tests - created tunnel now what?
Post by: cholzhauer on October 13, 2011, 04:11:34 AM
I'm wondering if there's a setting you need to make on the Windows side to tell it to route traffic
Title: Re: ipv6 tests - created tunnel now what?
Post by: SE1 on October 13, 2011, 11:56:59 AM
I m not sure about that.

Do you know where i can find information about that.
Title: Re: ipv6 tests - created tunnel now what?
Post by: cholzhauer on October 13, 2011, 12:12:18 PM
Found it

Below is a copy of a document written by a college friend that he used to make Windows act as a router.  He wrote it for Vista, but I'm guessing the steps are the same for Win7

Code: [Select]
Steps below were done in Vista.  Steps for Windows 7 might be a little different.

1.  Open Regedit, navigate to: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\TCPIP6\Parameters
Add STRING value called ‘DisabledComponents’ and set its value to 0; Reboot
Open the LAN adapter properties and open the IPv6 properties
Manually add an address from this subnet: 2001:db8:1f07:e9a::/64
Keep the prefix at 64
Add this gateway: 2001:db8:1f06:e9a::1
Add this DNS server: 2001:db8:200::2 (this is one of HE’s DNS servers)
Click OK and OK to save the changes
Open ‘cmd’ and type the following commands
netsh interface teredo set state disabled
netsh interface ipv6 add v6v4tunnel IP6Tunnel <your local IP address> 216.66.22.2
netsh interface ipv6 add address IP6Tunnel 2001:db8:1f06:e9a::2
netsh interface ipv6 add route ::/0 IP6Tunnel 2001:db8:1f06:e9a::1

10.  Test IPv6 connectivity by pinging or opening a website like ipv6.google.com

Steps to configure host to act as IPv6 router

1.  In CMD type: netsh int ipv6 set interface IP6Tunnel forwarding=enabled
2.  Next, type: netsh int ipv6 set interface "Local Area Connection" forwarding=enabled advertise=enabled
3.  Next, add the first address of the routed IP address to the Local Area Connection
netsh int ipv6 add address "Local Area Connection" 2001:db8:8:a0a::1
4.  Next, add the default route and next hop for the tunnel and Local Area Connection, then publish it:
netsh int ipv6 set route 2001:db8:8:a0a::/64 "Local Area Connection" publish=yes
5.  Next, add the default route for the tunnel and publish it:
netsh interface ipv6 set route ::/0 IP6Tunnel 2001:db8:7:a0a::1 publish=yes

I've changed all addresses to use the documentation prefix, so you'd obviously need to use your ranges to make it work
Title: Re: ipv6 tests - created tunnel now what?
Post by: SE1 on October 13, 2011, 12:52:21 PM
hey thanks for the reply.


I am able to get to the internet through the vm but i cant ping the server tunnel endpoint: 2001:470:66:47::1; why is that?
I check the with testipv6.com; it passes all the tests however the ipv6 address shown differs from the static one i configured.


IPv6 Tunnel Endpoints
Server IPv4 Address:64.62.134.130
Server IPv6 Address:2001:470:66:47::1/64
Client IPv4 Address:138.111.56.12
Client IPv6 Address:2001:470:66:47::2/64
Available DNS Resolvers
Anycasted IPv6 Caching Nameserver:2001:470:20::2
Anycasted IPv4 Caching Nameserver:74.82.42.42
Routed IPv6 Prefixes
Routed /64:2001:470:67:47::/64
Title: Re: ipv6 tests - created tunnel now what?
Post by: cholzhauer on October 13, 2011, 12:54:44 PM
What IPv6 address is it showing?

I wouldn't worry about pinging that ::1 address if your tunnel is working.  Can you ping ipv6.google.com from your VM?
Title: Re: ipv6 tests - created tunnel now what?
Post by: SE1 on October 13, 2011, 01:04:35 PM
I can ping ipv6.google.com.

The address shown is 2001:470:67:47:a00:27ff:fe89:7feb. My VM is getting that address, but the interfaces file has eth0 inet6 --> 2001:470:67:47::4

seuser@seuser-desktop:~$ ifconfig -a
eth0      Link encap:Ethernet  HWaddr 08:00:27:89:7f:eb 
          inet addr:138.111.56.10  Bcast:138.111.56.127  Mask:255.255.255.128
          inet6 addr: 2001:470:67:47:a00:27ff:fe89:7feb/64 Scope:Global
          inet6 addr: fe80::a00:27ff:fe89:7feb/64 Scope:Link
          inet6 addr: 2001:470:67:47::4/64 Scope:Global
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:41 errors:0 dropped:0 overruns:0 frame:0
          TX packets:59 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:3513 (3.5 KB)  TX bytes:7887 (7.8 KB)


what could be the issue?
Title: Re: ipv6 tests - created tunnel now what?
Post by: cholzhauer on October 13, 2011, 01:08:42 PM
That address you listed is your RA assigned address

If you want to use the ::4 address, tell the VM to not do RA
Title: Re: ipv6 tests - created tunnel now what?
Post by: SE1 on October 13, 2011, 01:21:49 PM
Thanks a lot for your help. It is working.

Can I setup a Ipv6 LAN running on the VM and send traffic through the tunnel ?
Title: Re: ipv6 tests - created tunnel now what?
Post by: cholzhauer on October 13, 2011, 01:24:08 PM
Quote
Can I setup a Ipv6 LAN running on the VM and send traffic through the tunnel ?

I guess I'm not sure what you mean by this

Title: Re: ipv6 tests - created tunnel now what?
Post by: SE1 on October 13, 2011, 01:28:09 PM
Is it possible to have multiple interfaces on the VM each in a different IPv6 network, and send the traffic through the tunnel outside?
Title: Re: ipv6 tests - created tunnel now what?
Post by: cholzhauer on October 13, 2011, 01:30:06 PM
Sure.

This is where you'd need your /48.

Simply pick a /64 for use on each interface (assuming you wanted the interfaces to be on different subnets/networks) and away you go.
Title: Re: ipv6 tests - created tunnel now what?
Post by: SE1 on October 13, 2011, 01:48:51 PM
Quote
If you want to use the ::4 address, tell the VM to not do RA

how do i do this? I'm still getting those addresses.

Quote
This is where you'd need your /48.

Simply pick a /64 for use on each interface (assuming you wanted the interfaces to be on different subnets/networks) and away you go.

WHere do we use the /48.
Title: Re: ipv6 tests - created tunnel now what?
Post by: cholzhauer on October 14, 2011, 04:05:33 AM
You need the /48 if you're using multiple subnets...you know 2001:db8:12:1::/64, 2001:db8:12:2::/64, ect  if your two adapters are on different networks, eg 192.168.1.0/24 and 192.168.2.0/24, you need to assign a different /64 to each

You can either tell the VM not to do RA (depends on your OS) or just tell whatever is doing RA not to do it

Title: Re: ipv6 tests - created tunnel now what?
Post by: SE1 on October 17, 2011, 09:59:48 AM
My windows machine has multiple ipv6 address, how do i remove the second one , coz it uses it to for ipv6. (attached jpeg).

Title: Re: ipv6 tests - created tunnel now what?
Post by: cholzhauer on October 17, 2011, 10:09:46 AM
Which one?

The third one is a temporary address..remove it by doing a

Code: [Select]
netsh int ipv6 set privacy disabled

The second one is an RA address...if you don't want it, either tell your router not to do RA or tell your computer to stop accepting it  http://luka.manojlovic.net/2011/06/08/my-contribution-to-ipv6-day-configuring-ipv6-in-windows-server-2008-r2-video-tutorial/

Title: Re: ipv6 tests - created tunnel now what?
Post by: SE1 on October 17, 2011, 11:04:56 AM
One more question,

when I try to create a virtual interface in the VM,

auto eth0:0
iface eth0:0 inet6 static
address 2001:470:481c::1
netmask 48

i get an error:
STOCSIFFLAGS: Cannot assign requested address.

the address is the /48 assigned.

What could be the problem?
Title: Re: ipv6 tests - created tunnel now what?
Post by: cholzhauer on October 17, 2011, 11:07:14 AM
You don't want to use the entire /48...you have to take /64's out of it

so if your /48 is 2001:470:481c::/48, you can use

2001:470:481c:1::/64
2001:470:481c:2::/64
etc

you can use what you have, just change the netmask to 64, which would give you a subnet of 2001:470:481c:0::/64
Title: Re: ipv6 tests - created tunnel now what?
Post by: SE1 on October 17, 2011, 11:12:23 AM
I still get the same error,

cannot assign requested address.
Title: Re: ipv6 tests - created tunnel now what?
Post by: cholzhauer on October 19, 2011, 05:24:10 AM
Looks like it could be a number of things...one of the things that google brought up was a user that was trying to configure an address the wrong way.

Isn't there a GUI you could run it though?