Hurricane Electric's IPv6 Tunnel Broker Forums

General IPv6 Topics => IPv6 on Routing Platforms => Topic started by: criushr on October 29, 2020, 03:55:32 AM

Title: IPv6 Tunnelbroker problem with Cisco IOS, dialer and dynamic IP
Post by: criushr on October 29, 2020, 03:55:32 AM
Hello.
I'm posting this topic again, since it looks that I placed my original post into wrong folder.
I'm trying to build HE tunnel for a few days now without success, so I decided to ask for help. Once I configure the tunnel not even P2P IPv6 ping is not working. I'm using c181x-adventerprisek9-mz.151-4.M12a on Cisco 1812 router. I also tried with IpService IOS image with no difference. In order to access Internet I'm using dialer (pppoe) and here is a relevant part of my configuration:

!
ipv6 unicast-routing
ipv6 cef
!
interface Loopback6
no ip address
ipv6 address 2001:470:1F15:EB2::A/64
ipv6 enable
!
interface Tunnel0
description Hurricane Electric IPv6 Tunnel Broker
no ip address
ipv6 address 2001:470:1F14:EB3::2/64
ipv6 enable
tunnel source Dialer0
tunnel mode ipv6ip
tunnel destination 216.66.84.46
!
interface FastEthernet0
description INTERNET
no ip address
duplex auto
speed auto
pppoe enable group global
pppoe-client dial-pool-number 1
no cdp enable
!
interface Dialer0
mtu 1492
ip ddns update HE1
ip address negotiated
ip nat outside
ip virtual-reassembly in
encapsulation ppp
ip tcp adjust-mss 1452
dialer pool 1
dialer-group 1
ppp authentication chap callin
ppp chap hostname xxxx
ppp chap password 7 xxxx
no cdp enable
!
dialer-list 1 protocol ip permit
dialer-list 1 protocol ipv6 permit
!
ip route 0.0.0.0 0.0.0.0 Dialer0
ipv6 route ::/0 Tunnel0

rtr-0#ping ipv6 2001:470:1f14:eb3::1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 2001:470:1F14:EB3::1, timeout is 2 seconds:
.....
Success rate is 0 percent (0/5)
rtr-0#ping ipv6 2001:470:20::2 source loopback 6
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 2001:470:20::2, timeout is 2 seconds:
Packet sent with a source address of 2001:470:1F15:EB2::A
.....
Success rate is 0 percent (0/5)
office-0#

Any suggestions would be great since I'm stuck.
Title: Re: IPv6 Tunnelbroker problem with Cisco IOS, dialer and dynamic IP
Post by: criushr on November 01, 2020, 01:18:42 AM
Also, I got same behavior using advanced IP services IOS (c181x-advipservicesk9-mz.151-4.M12a.bin).
So, no clue what to try next.
Title: Re: IPv6 Tunnelbroker problem with Cisco IOS, dialer and dynamic IP
Post by: AndrewButterworth on November 17, 2020, 12:57:10 PM
Is your Tunnel endpoint correct on the HE portal?
I see you have HE DDNS configured - is this working and correctly updating your endpoint?
Rather than using the inbuilt DDNS client I use an EEM TCL script that is triggered when the Tunnel interface changes the state to up.  It was a script I found on CCO written in 2009 (ipv6-tunnel-update.tcl) - I am sure you can find it and modify it for your details.
Other than that my configuration looks similar to yours.  I can't ping any IPv6 addresses from the router which I think is an issue with IPv6 inspection I have enabled, however from a client or an IOS switch on the inside I can.

Good luck
Andy