Help?

[d3x0r]

ipv6 routing has been working for years for me.  But These latest updates (on my router) have caused issues.   I thought rolling back fixed it, but now it's broken again...

0) I'm using arch-linux; I've rolled back to  Linux tower2 4.1.6-1-ARCH #1 SMP PREEMPT Mon Aug 17 08:52:28 CEST 2015 x86_64 GNU/Linux, and systemd-227,

1) I can 'ping6 www.he.net' from my router (it was slow, but found that I had a slow DNS listed in my resolv.conf which I fixed)

2) I cannot ping from my windows box inside the router... when I tcpdump external interface I get something like

Code Select Expand


tcpdump -n -i eth0 net 66.220.18.42
(my_internal_ip is my v6 address on my windows box, and my_ip is my public v4 IP)

00:00:13.919202 IP my_ip > 66.220.18.42: IP6 my_internal_ip > 2607:f8b0:4005:803::2004: ICMP6, echo request, seq 9, length 40
00:00:13.955633 IP 66.220.18.42 > my_ip: IP6 2607:f8b0:4005:803::2004 > my_internal_ip: ICMP6, echo reply, seq 9, length 40
00:00:13.955718 IP my_ip > 66.220.18.42: IP6 fe80::48c1:634b > 2607:f8b0:4005:803::2004: ICMP6, redirect, my_internal_ip to my_internal_ip, length 136
00:00:13.955728 IP my_ip > 66.220.18.42: IP6 2607:f8b0:4005:803::2004 > my_internal_ip: ICMP6, echo reply, seq 9, length 40
00:00:13.988240 IP 66.220.18.42 > my_ip: IP6 fe80::42dc:122a > fe80::48c1:634b: ICMP6, destination unreachable, beyond scope 2607:f8b0:4005:803::2004, source address fe80::48c1:634b, length 184
00:00:13.989196 IP 66.220.18.42 > my_ip: IP6 2607:f8b0:4005:803::2004 > my_internal_ip: ICMP6, echo reply, seq 9, length 40
00:00:13.989281 IP my_ip > 66.220.18.42: IP6 fe80::48c1:634b > 2607:f8b0:4005:803::2004: ICMP6, redirect, my_internal_ip to my_internal_ip, length 136
00:00:13.989291 IP my_ip > 66.220.18.42: IP6 2607:f8b0:4005:803::2004 > my_internal_ip: ICMP6, echo reply, seq 9, length 40
00:00:14.021240 IP 66.220.18.42 > my_ip: IP6 fe80::42dc:122a > fe80::48c1:634b: ICMP6, destination unreachable, beyond scope 2607:f8b0:4005:803::2004, source address fe80::48c1:634b, length 184
00:00:14.021263 IP 66.220.18.42 > my_ip: IP6 2607:f8b0:4005:803::2004 > my_internal_ip: ICMP6, echo reply, seq 9, length 40
00:00:14.021321 IP my_ip > 66.220.18.42: IP6 fe80::48c1:634b > 2607:f8b0:4005:803::2004: ICMP6, redirect, my_internal_ip to my_internal_ip, length 136
00:00:14.021328 IP my_ip > 66.220.18.42: IP6 2607:f8b0:4005:803::2004 > my_internal_ip: ICMP6, echo reply, seq 9, length 40
00:00:14.054499 IP 66.220.18.42 > my_ip: IP6 fe80::42dc:122a > fe80::48c1:634b: ICMP6, destination unreachable, beyond scope 2607:f8b0:4005:803::2004, source address fe80::48c1:634b, length 184
00:00:14.054541 IP 66.220.18.42 > my_ip: IP6 2607:f8b0:4005:803::2004 > my_internal_ip: ICMP6, echo reply, seq 9, length 40
00:00:14.054621 IP my_ip > 66.220.18.42: IP6 fe80::48c1:634b > 2607:f8b0:4005:803::2004: ICMP6, redirect, my_internal_ip to my_internal_ip, length 136
00:00:14.054632 IP my_ip > 66.220.18.42: IP6 2607:f8b0:4005:803::2004 > my_internal_ip: ICMP6, echo reply, seq 9, length 40
00:00:14.086341 IP 66.220.18.42 > my_ip: IP6 fe80::42dc:122a > fe80::48c1:634b: ICMP6, destination unreachable, beyond scope 2607:f8b0:4005:803::2004, source address fe80::48c1:634b, length 184
00:00:14.086370 IP 66.220.18.42 > my_ip: IP6 2607:f8b0:4005:803::2004 > my_internal_ip: ICMP6, echo reply, seq 9, length 40
00:00:14.086447 IP my_ip > 66.220.18.42: IP6 fe80::48c1:634b > 2607:f8b0:4005:803::2004: ICMP6, redirect, my_internal_ip to my_internal_ip, length 136
00:00:14.086465 IP my_ip > 66.220.18.42: IP6 2607:f8b0:4005:803::2004 > my_internal_ip: ICMP6, echo reply, seq 9, length 40
00:00:14.113274 IP 66.220.18.42 > my_ip: IP6 fe80::42dc:122a > fe80::48c1:634b: ICMP6, destination unreachable, beyond scope 2607:f8b0:4005:803::2004, source address fe80::48c1:634b, length 184
00:00:14.113315 IP 66.220.18.42 > my_ip: IP6 2607:f8b0:4005:803::2004 > my_internal_ip: ICMP6, echo reply, seq 9, length 40
00:00:14.113395 IP my_ip > 66.220.18.42: IP6 fe80::48c1:634b > 2607:f8b0:4005:803::2004: ICMP6, redirect, my_internal_ip to my_internal_ip, length 136
00:00:14.113405 IP my_ip > 66.220.18.42: IP6 2607:f8b0:4005:803::2004 > my_internal_ip: ICMP6, echo reply, seq 9, length 40
00:00:14.141511 IP 66.220.18.42 > my_ip: IP6 fe80::42dc:122a > fe80::48c1:634b: ICMP6, destination unreachable, beyond scope 2607:f8b0:4005:803::2004, source address fe80::48c1:634b, length 184
00:00:14.141552 IP 66.220.18.42 > my_ip: IP6 2607:f8b0:4005:803::2004 > my_internal_ip: ICMP6, echo reply, seq 9, length 40
00:00:14.141620 IP my_ip > 66.220.18.42: IP6 2607:f8b0:4005:803::2004 > my_internal_ip: ICMP6, echo reply, seq 9, length 40
00:00:14.176257 IP 66.220.18.42 > my_ip: IP6 2607:f8b0:4005:803::2004 > my_internal_ip: ICMP6, echo reply, seq 9, length 40
00:00:14.176322 IP my_ip > 66.220.18.42: IP6 2607:f8b0:4005:803::2004 > my_internal_ip: ICMP6, echo reply, seq 9, length 40
00:00:14.203321 IP 66.220.18.42 > my_ip: IP6 2607:f8b0:4005:803::2004 > my_internal_ip: ICMP6, echo reply, seq 9, length 40
00:00:14.203386 IP my_ip > 66.220.18.42: IP6 2607:f8b0:4005:803::2004 > my_internal_ip: ICMP6, echo reply, seq 9, length 40
00:00:14.231409 IP 66.220.18.42 > my_ip: IP6 2607:f8b0:4005:803::2004 > my_internal_ip: ICMP6, echo reply, seq 9, length 40
00:00:14.231452 IP my_ip > 66.220.18.42: IP6 2607:f8b0:4005:803::2004 > my_internal_ip: ICMP6, echo reply, seq 9, length 40
00:00:14.263252 IP 66.220.18.42 > my_ip: IP6 2607:f8b0:4005:803::2004 > my_internal_ip: ICMP6, echo reply, seq 9, length 40
00:00:14.263270 IP my_ip > 66.220.18.42: IP6 2607:f8b0:4005:803::2004 > my_internal_ip: ICMP6, echo reply, seq 9, length 40
00:00:14.290683 IP 66.220.18.42 > my_ip: IP6 2607:f8b0:4005:803::2004 > my_internal_ip: ICMP6, echo reply, seq 9, length 40
00:00:14.290712 IP my_ip > 66.220.18.42: IP6 2607:f8b0:4005:803::2004 > my_internal_ip: ICMP6, echo reply, seq 9, length 40
00:00:14.320683 IP 66.220.18.42 > my_ip: IP6 2607:f8b0:4005:803::2004 > my_internal_ip: ICMP6, echo reply, seq 9, length 40
00:00:14.320714 IP my_ip > 66.220.18.42: IP6 2607:f8b0:4005:803::2004 > my_internal_ip: ICMP6, echo reply, seq 9, length 40
00:00:14.348685 IP 66.220.18.42 > my_ip: IP6 2607:f8b0:4005:803::2004 > my_internal_ip: ICMP6, echo reply, seq 9, length 40
00:00:14.348719 IP my_ip > 66.220.18.42: IP6 2607:f8b0:4005:803::2004 > my_internal_ip: ICMP6, echo reply, seq 9, length 40
00:00:14.376698 IP 66.220.18.42 > my_ip: IP6 2607:f8b0:4005:803::2004 > my_internal_ip: ICMP6, echo reply, seq 9, length 40
00:00:14.376732 IP my_ip > 66.220.18.42: IP6 2607:f8b0:4005:803::2004 > my_internal_ip: ICMP6, echo reply, seq 9, length 40
00:00:14.412139 IP 66.220.18.42 > my_ip: IP6 2607:f8b0:4005:803::2004 > my_internal_ip: ICMP6, echo reply, seq 9, length 40
00:00:14.412182 IP my_ip > 66.220.18.42: IP6 2607:f8b0:4005:803::2004 > my_internal_ip: ICMP6, echo reply, seq 9, length 40
00:00:14.445307 IP 66.220.18.42 > my_ip: IP6 2607:f8b0:4005:803::2004 > my_internal_ip: ICMP6, echo reply, seq 9, length 40
00:00:14.445339 IP my_ip > 66.220.18.42: IP6 2607:f8b0:4005:803::2004 > my_internal_ip: ICMP6, echo reply, seq 9, length 40
00:00:14.473313 IP 66.220.18.42 > my_ip: IP6 2607:f8b0:4005:803::2004 > my_internal_ip: ICMP6, echo reply, seq 9, length 40
00:00:14.473346 IP my_ip > 66.220.18.42: IP6 2607:f8b0:4005:803::2004 > my_internal_ip: ICMP6, echo reply, seq 9, length 40
00:00:14.509832 IP 66.220.18.42 > my_ip: IP6 2607:f8b0:4005:803::2004 > my_internal_ip: ICMP6, echo reply, seq 9, length 40
00:00:14.509867 IP my_ip > 66.220.18.42: IP6 2607:f8b0:4005:803::2004 > my_internal_ip: ICMP6, echo reply, seq 9, length 40
00:00:14.540267 IP 66.220.18.42 > my_ip: IP6 2607:f8b0:4005:803::2004 > my_internal_ip: ICMP6, echo reply, seq 9, length 40
00:00:14.540289 IP my_ip > 66.220.18.42: IP6 2607:f8b0:4005:803::2004 > my_internal_ip: ICMP6, echo reply, seq 9, length 40
00:00:14.572581 IP 66.220.18.42 > my_ip: IP6 2607:f8b0:4005:803::2004 > my_internal_ip: ICMP6, echo reply, seq 9, length 40
00:00:14.572616 IP my_ip > 66.220.18.42: IP6 2607:f8b0:4005:803::2004 > my_internal_ip: ICMP6, echo reply, seq 9, length 40
00:00:14.601076 IP 66.220.18.42 > my_ip: IP6 2607:f8b0:4005:803::2004 > my_internal_ip: ICMP6, echo reply, seq 9, length 40
00:00:14.601108 IP my_ip > 66.220.18.42: IP6 2607:f8b0:4005:803::2004 > my_internal_ip: ICMP6, echo reply, seq 9, length 40
00:00:14.630590 IP 66.220.18.42 > my_ip: IP6 2607:f8b0:4005:803::2004 > my_internal_ip: ICMP6, echo reply, seq 9, length 40
00:00:14.630622 IP my_ip > 66.220.18.42: IP6 2607:f8b0:4005:803::2004 > my_internal_ip: ICMP6, echo reply, seq 9, length 40
00:00:14.661265 IP 66.220.18.42 > my_ip: IP6 2607:f8b0:4005:803::2004 > my_internal_ip: ICMP6, echo reply, seq 9, length 40
00:00:14.661299 IP my_ip > 66.220.18.42: IP6 2607:f8b0:4005:803::2004 > my_internal_ip: ICMP6, echo reply, seq 9, length 40
00:00:14.688853 IP 66.220.18.42 > my_ip: IP6 2607:f8b0:4005:803::2004 > my_internal_ip: ICMP6, echo reply, seq 9, length 40
00:00:14.688887 IP my_ip > 66.220.18.42: IP6 2607:f8b0:4005:803::2004 > my_internal_ip: ICMP6, echo reply, seq 9, length 40
00:00:14.721217 IP 66.220.18.42 > my_ip: IP6 2607:f8b0:4005:803::2004 > my_internal_ip: ICMP6, echo reply, seq 9, length 40
00:00:14.721251 IP my_ip > 66.220.18.42: IP6 2607:f8b0:4005:803::2004 > my_internal_ip: ICMP6, echo reply, seq 9, length 40
00:00:14.751382 IP 66.220.18.42 > my_ip: IP6 2607:f8b0:4005:803::2004 > my_internal_ip: ICMP6, echo reply, seq 9, length 40
00:00:14.751403 IP my_ip > 66.220.18.42: IP6 2607:f8b0:4005:803::2004 > my_internal_ip: ICMP6, echo reply, seq 9, length 40
00:00:14.781292 IP 66.220.18.42 > my_ip: IP6 2607:f8b0:4005:803::2004 > my_internal_ip: ICMP6, echo reply, seq 9, length 40
00:00:14.781325 IP my_ip > 66.220.18.42: IP6 2607:f8b0:4005:803::2004 > my_internal_ip: ICMP6, echo reply, seq 9, length 40
00:00:14.810896 IP 66.220.18.42 > my_ip: IP6 2607:f8b0:4005:803::2004 > my_internal_ip: ICMP6, echo reply, seq 9, length 40
00:00:14.810957 IP my_ip > 66.220.18.42: IP6 2607:f8b0:4005:803::2004 > my_internal_ip: ICMP6, echo reply, seq 9, length 40




what would cause this?  what other information can I provide?

I have the connection setup with systemd configurations...

Code Select Expand


# he-tunnel.netdev
[Match]

[NetDev]
Name=he-ipv6
Kind=sit
MTUBytes=1480

[Tunnel]
Local=my_ip # my public IP
Remote=66.220.18.42
TTL=255

# he-tunnel.network

[Match]
Name=he-ipv6

[Network]
Address=2001:###::2/64
Gateway=2001:###::1/64



my routing table for -6 looks like

Code Select Expand


ip -6 route

2001:####::/64 dev he-ipv6  proto kernel  metric 256  pref medium
fe80::/64 dev he-ipv6  proto kernel  metric 256  pref medium
fe80::/64 dev eno1  proto kernel  metric 256  pref medium
fe80::/64 dev br0  proto kernel  metric 256  pref medium
fe80::/64 dev eth0  proto kernel  metric 256  pref medium
default dev he-ipv6  metric 1024  pref medium


a linux ping looks simply like...

Code Select Expand


00:11:15.758481 IP 72.193.99.75 > 66.220.18.42: IP6 2001:####::2 > 2001:470:0:76::2: ICMP6, echo request, seq 1, length 64
00:11:15.794360 IP 66.220.18.42 > 72.193.99.75: IP6 2001:470:0:76::2 > 2001:####::2: ICMP6, echo reply, seq 1, length 64
00:11:16.759993 IP 72.193.99.75 > 66.220.18.42: IP6 2001:####::2 > 2001:470:0:76::2: ICMP6, echo request, seq 2, length 64
00:11:16.799157 IP 66.220.18.42 > 72.193.99.75: IP6 2001:470:0:76::2 > 2001:####::2: ICMP6, echo reply, seq 2, length 64
00:11:17.761800 IP 72.193.99.75 > 66.220.18.42: IP6 2001:####::2 > 2001:470:0:76::2: ICMP6, echo request, seq 3, length 64
00:11:17.804900 IP 66.220.18.42 > 72.193.99.75: IP6 2001:470:0:76::2 > 2001:####::2: ICMP6, echo reply, seq 3, length 64
00:11:18.763530 IP 72.193.99.75 > 66.220.18.42: IP6 2001:####::2 > 2001:470:0:76::2: ICMP6, echo request, seq 4, length 64
00:11:18.800690 IP 66.220.18.42 > 72.193.99.75: IP6 2001:470:0:76::2 > 2001:####::2: ICMP6, echo reply, seq 4, length 64


[cholzhauer]

I have no experience with Arch, but the basic concept is easy, and it sounds like you've made it work before.

Setup a tunnel on your router...make sure it works.  Configure an address from your routed /64 on your inside interface, and use RADVD to advertise a /64 to the rest of your network, making sure your router is actually configured to route (some OS's need specific commands to do so)

[d3x0r]

I was missing an IPv6 on my bridge interface.

My Internal lan goes through a bridge to join wireless/network and ipv6 tunnel into that device... was playing with it tonight and realized I couldn't ping the address I thought was public, so I brought up my old router and went through my configs and found a missing 'ip addr add br0 ...'