Hurricane Electric's IPv6 Tunnel Broker Forums

General IPv6 Topics => IPv6 on Linux & BSD & Mac => Topic started by: campari on October 15, 2012, 12:35:16 PM

Title: Problem IPV6
Post by: campari on October 15, 2012, 12:35:16 PM
 I have a problem with ipv6

root@Rashk0:~# ping6 ipv6.google.com
PING ipv6.google.com(lb-in-x69.1e100.net) 56 data bytes
From campari-4-pt.tunnel.tserv24.sto1.ipv6.he.net icmp_seq=1 Destination unreachable: Address unreachable

help me please . i have a router Dovado 4GR USB Modem internet ( dynamic ip )

root@Rashk0:~# ip addr

8: he-ipv6: <POINTOPOINT,NOARP,UP,LOWER_UP> mtu 1480 qdisc noqueue state UNKNOWN
    link/sit 46.194.146.152 peer 192.168.0.63
    inet6 2001:470:27:2ec::2/64 scope global
       valid_lft forever preferred_lft forever
    inet6 fe80::2ec2:9298/128 scope link
       valid_lft forever preferred_lft forever
Title: Re: Problem IPV6
Post by: cholzhauer on October 15, 2012, 12:47:18 PM
Your router is probably blocking protocol 41.  Capture some traffic and see what you can see
Title: Re: Problem IPV6
Post by: campari on October 15, 2012, 01:06:16 PM
Quote from: cholzhauer on October 15, 2012, 12:47:18 PM
Your router is probably blocking protocol 41.  Capture some traffic and see what you can see

what should i do
Title: Re: Problem IPV6
Post by: cholzhauer on October 15, 2012, 01:09:38 PM
Capture some traffic and see what you can see
Title: Re: Problem IPV6
Post by: broquea on October 15, 2012, 01:26:31 PM
Is your router behind nat?
What commands did you specifically run to bring up the tunnel on your linux box?
Title: Re: Problem IPV6
Post by: campari on October 15, 2012, 01:28:15 PM
Quote from: cholzhauer on October 15, 2012, 01:09:38 PM
Capture some traffic and see what you can see

   
Date: 2012-10-15   
   
Time: 22:27
   Traffic Down / Up (GB)          
Signal: 54 % (4G)    Connection: USB        Modem: 42.5 / 15.6
Title: Re: Problem IPV6
Post by: campari on October 15, 2012, 01:30:51 PM
Quote from: broquea on October 15, 2012, 01:26:31 PM
Is your router behind nat?
What commands did you specifically run to bring up the tunnel on your linux box?

root@Rashk0:~# ifconfig
eth0      Link encap:Ethernet  HWaddr 00:16:36:f2:e2:c0
          inet addr:192.168.0.XX  Bcast:192.168.0.255  Mask:255.255.255.0
          inet6 addr: fe80::216:36ff:fef2:e2c0/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:541307 errors:0 dropped:0 overruns:0 frame:0
          TX packets:419591 errors:0 dropped:0 overruns:2 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:473227164 (451.3 MiB)  TX bytes:71988617 (68.6 MiB)
          Interrupt:21 Base address:0xa000


modprobe ipv6
ip tunnel add he-ipv6 mode sit remote 192.168.0.XX local 46.194.146.152 ttl 255
ip link set he-ipv6 up
ip addr add 2001:470:27:2ec::2/64 dev he-ipv6
ip route add ::/0 dev he-ipv6
ip -f inet6 addr
Title: Re: Problem IPV6
Post by: broquea on October 15, 2012, 01:51:09 PM
There is your issue:

ip tunnel add he-ipv6 mode sit remote 192.168.0.XX local 46.194.146.152 ttl 255

remote needs to be the tunnel-server's IP, and local needs to be that 192.168 ip. Also obfuscating your internal IP and not your external, is like, the most backwards way of trying to protect your IPv4 address, which doesn't need obfuscation when you ask for troubleshooting help anyways ;)
Title: Re: Problem IPV6
Post by: campari on October 15, 2012, 01:54:03 PM
Quote from: broquea on October 15, 2012, 01:51:09 PM
There is your issue:

ip tunnel add he-ipv6 mode sit remote 192.168.0.XX local 46.194.146.152 ttl 255

remote needs to be the tunnel-server's IP, and local needs to be that 192.168 ip. Also obfuscating your internal IP and not your external, is like, the most backwards way of trying to protect your IPv4 address, which doesn't need obfuscation when you ask for troubleshooting help anyways ;)

now it did

modprobe ipv6
ip tunnel add he-ipv6 mode sit remote 216.66.80.90 local 192.168.0.63 ttl 255
ip link set he-ipv6 up
ip addr add 2001:470:27:2ec::2/64 dev he-ipv6
ip route add ::/0 dev he-ipv6
ip -f inet6 addr


it is also
Title: Re: Problem IPV6
Post by: broquea on October 15, 2012, 02:15:11 PM
So can you ping6 Google now?
Title: Re: Problem IPV6
Post by: campari on October 15, 2012, 02:17:49 PM
Quote from: broquea on October 15, 2012, 02:15:11 PM
So can you ping6 Google now?

No

root@Rashk0:~# ping6 ipv6.google.com
PING ipv6.google.com(lb-in-x68.1e100.net) 56 data bytes
From campari-4-pt.tunnel.tserv24.sto1.ipv6.he.net icmp_seq=1 Destination unreachable: Address unreachable
^C
--- ipv6.google.com ping statistics ---
1 packets transmitted, 0 received, +1 errors, 100% packet loss, time 0ms

Title: Re: Problem IPV6
Post by: broquea on October 15, 2012, 02:35:54 PM
Then it is one of three things:

1) your IPv4 endpoint is not up to date in the broker. If it looks like it is, try changing it to something else that pings, and then change it back.
2) your tunnel isn't built correctly on HE's side. email ipv6@he.net and have them verify it is, after you've tried #1.
3) your NAT appliance doesn't pass Protocol 41 IPv6 tunnels to your machines behind it. Most likely need to replace that NAT appliance if this is the case.
Title: Re: Problem IPV6
Post by: campari on October 15, 2012, 02:40:50 PM
 ???
Quote from: broquea on October 15, 2012, 02:35:54 PM
Then it is one of three things:

1) your IPv4 endpoint is not up to date in the broker. If it looks like it is, try changing it to something else that pings, and then change it back.
2) your tunnel isn't built correctly on HE's side. email ipv6@he.net and have them verify it is, after you've tried #1.
3) your NAT appliance doesn't pass Protocol 41 IPv6 tunnels to your machines behind it. Most likely need to replace that NAT appliance if this is the case.

0k thank you man :)