Problems to connecto to external IPv6 address

[alienvault]

I have a tunnel with tunnelbroker:

Code Select Expand


root@host1:~# ifconfig he-ipv6
he-ipv6   Link encap:IPv6-en-IPv4 
          Dirección inet6: fe80::57d8:a072/128 Alcance:Enlace
          Dirección inet6: 2001:470:1f08:1982::2/64 Alcance:Global
          ACTIVO PUNTO A PUNTO FUNCIONANDO NOARP  MTU:1472  Métrica:1
          Paquetes RX:7960935 errores:0 perdidos:0 overruns:0 frame:0
          Paquetes TX:4860665 errores:560 perdidos:0 overruns:0 carrier:0
          colisiones:0 long.colaTX:0
          Bytes RX:10731494241 (10.7 GB)  TX bytes:503205290 (503.2 MB)


From this machine (the gateway of my network), I can ping to other sites like ipv6.google.com or 2001:470:1f08:1982::1

Code Select Expand


root@host1:~# ping6 -c4 2001:470:1f08:1982::1
PING 2001:470:1f08:1982::1(2001:470:1f08:1982::1) 56 data bytes
64 bytes from 2001:470:1f08:1982::1: icmp_seq=1 ttl=64 time=44.5 ms
64 bytes from 2001:470:1f08:1982::1: icmp_seq=2 ttl=64 time=44.8 ms
64 bytes from 2001:470:1f08:1982::1: icmp_seq=3 ttl=64 time=44.2 ms
64 bytes from 2001:470:1f08:1982::1: icmp_seq=4 ttl=64 time=44.4 ms

--- 2001:470:1f08:1982::1 ping statistics ---
4 packets transmitted, 4 received, 0% packet loss, time 3005ms
rtt min/avg/max/mdev = 44.238/44.519/44.807/0.203 ms

root@host1:~# mtr 2001:470:1f08:1982::1

                                 My traceroute  [v0.80]
host1 (::)                                                    Thu Jun 23 03:02:09 2011
Keys:  Help   Display mode   Restart statistics   Order of fields   quit
                                                Packets               Pings
Host                                         Loss%   Snt   Last   Avg  Best  Wrst StDev
1. 2001:470:1f08:1982::1                      0.0%    13   44.7  44.3  43.9  44.8   0.4



Code Select Expand


root@host1:~# ping6 -c4 ipv6.google.com
PING ipv6.google.com(bru01m01-in-x68.1e100.net) 56 data bytes
64 bytes from bru01m01-in-x68.1e100.net: icmp_seq=1 ttl=56 time=51.1 ms
64 bytes from bru01m01-in-x68.1e100.net: icmp_seq=2 ttl=56 time=50.8 ms
64 bytes from bru01m01-in-x68.1e100.net: icmp_seq=3 ttl=56 time=51.0 ms
64 bytes from bru01m01-in-x68.1e100.net: icmp_seq=4 ttl=56 time=50.7 ms

--- ipv6.google.com ping statistics ---
4 packets transmitted, 4 received, 0% packet loss, time 3005ms
rtt min/avg/max/mdev = 50.786/50.965/51.186/0.321 ms


root@host1:~# mtr ipv6.google.com

                                 My traceroute  [v0.80]
host1 (::)                                                    Thu Jun 23 03:04:39 2011
Keys:  Help   Display mode   Restart statistics   Order of fields   quit
                                                Packets               Pings
Host                                         Loss%   Snt   Last   Avg  Best  Wrst StDev
1. 2001:470:1f08:1982::1                      0.0%     6   53.1  53.5  53.1  54.5   0.5
2. gige-g4-6.core1.lon1.he.net                0.0%     6   50.6  48.6  44.8  56.4   4.3
3. 2001:7f8:4::3b41:1                         0.0%     6   44.4  44.8  44.4  45.2   0.3
4. 2001:4860::1:0:6                           0.0%     6   45.2  47.7  45.2  52.8   3.8
5. 2001:4860::8:0:2ddf                        0.0%     6   45.3  49.4  44.7  69.8  10.0
6. 2001:4860::8:0:2ac4                        0.0%     6   50.8  50.8  50.4  51.0   0.2
7. 2001:4860::2:0:87b                         0.0%     5   50.7  51.9  50.7  55.7   2.1
8. 2001:4860:0:1::22f                         0.0%     5   55.7  54.5  51.1  57.0   2.2
9. bru01m01-in-x68.1e100.net                  0.0%     5   53.4  51.5  50.9  53.4   1.1



But I have other connection at another ISP (ADSL with IPv4toIPv6):

Code Select Expand


host2# ifconfig wlan0
wlan0     Link encap:Ethernet  direcciónHW 00:21:6a:bf:b5:c2 
          Direc. inet:10.123.123.50  Difus.:10.123.123.255  Másc:255.255.255.0
          Dirección inet6: 2002:57df:baa8:0:221:6aff:febf:b5c2/64 Alcance:Global
          Dirección inet6: fe80::221:6aff:febf:b5c2/64 Alcance:Enlace
          ACTIVO DIFUSIÓN FUNCIONANDO MULTICAST  MTU:1500  Métrica:1
          Paquetes RX:202052 errores:0 perdidos:0 overruns:0 frame:0
          Paquetes TX:134223 errores:0 perdidos:0 overruns:0 carrier:0
          colisiones:0 long.colaTX:1000
          Bytes RX:206282242 (206.2 MB)  TX bytes:21270114 (21.2 MB)


Code Select Expand


host2 # ping6 -c4 ipv6.google.com
PING ipv6.google.com(fra07s07-in-x6a.1e100.net) 56 data bytes
64 bytes from fra07s07-in-x6a.1e100.net: icmp_seq=1 ttl=58 time=124 ms
64 bytes from fra07s07-in-x6a.1e100.net: icmp_seq=2 ttl=58 time=96.6 ms
64 bytes from fra07s07-in-x6a.1e100.net: icmp_seq=3 ttl=58 time=94.0 ms
64 bytes from fra07s07-in-x6a.1e100.net: icmp_seq=4 ttl=58 time=107 ms

--- ipv6.google.com ping statistics ---
4 packets transmitted, 4 received, 0% packet loss, time 3004ms
rtt min/avg/max/mdev = 94.013/105.656/124.532/12.012 ms



When I try make connections between these machines, I can't because tunnelbroker doesn't know the route to return the packets:

From host2 to host1(tunnelbroker), I try to ping:

Code Select Expand


host2# ping6 2001:470:1f08:1982::2
PING 2001:470:1f08:1982::2(2001:470:1f08:1982::2) 56 data bytes
(no replys)


But at the other side:

Code Select Expand


# tcpdump -nt -i he-ipv6
tcpdump: WARNING: he-ipv6: no IPv4 address assigned
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on he-ipv6, link-type RAW (Raw IP), capture size 65535 bytes
IP6 2002:57df:baa8:0:221:6aff:febf:b5c2 > 2001:470:1f08:1982::2: ICMP6, echo request, seq 55, length 64
IP6 2001:470:1f08:1982::2 > 2002:57df:baa8:0:221:6aff:febf:b5c2: ICMP6, echo reply, seq 55, length 64
IP6 2002:57df:baa8:0:221:6aff:febf:b5c2 > 2001:470:1f08:1982::2: ICMP6, echo request, seq 56, length 64
IP6 2001:470:1f08:1982::2 > 2002:57df:baa8:0:221:6aff:febf:b5c2: ICMP6, echo reply, seq 56, length 64
IP6 2002:57df:baa8:0:221:6aff:febf:b5c2 > 2001:470:1f08:1982::2: ICMP6, echo request, seq 57, length 64
IP6 2001:470:1f08:1982::2 > 2002:57df:baa8:0:221:6aff:febf:b5c2: ICMP6, echo reply, seq 57, length 64


So I checks the traceroutes:
From host2 to host1:

Code Select Expand


host2# mtr 2001:470:1f08:1982::2
                                 My traceroute  [v0.75]
host2 (::)                                                  Thu Jun 23 03:11:41 2011
Keys:  Help   Display mode   Restart statistics   Order of fields   quit
                                                Packets               Pings
Host                                         Loss%   Snt   Last   Avg  Best  Wrst StDev
1. ???
2. 2002:d5c5:1e57::1                          0.0%     6   78.3  77.7  74.8  78.9   1.4
3. ge-1-3-0-2.brd.ipv6.concepts-ict.net       0.0%     6   73.8  76.5  73.8  82.8   3.8
4. gi2-11.nikhef.ipv6.concepts-ict.net        0.0%     6   79.8  79.6  77.9  81.4   1.4
5. 20gigabitethernet1-3.core1.ams1.ipv6.he.n  0.0%     6   77.8  75.2  70.9  81.3   4.0
6. 10gigabitethernet1-4.core1.lon1.he.net     0.0%     6   70.9  74.4  69.6  85.8   6.6
7. ???


From host1 to host2:

Code Select Expand


root@host1:~# mtr 2002:57df:baa8:0:221:6aff:febf:b5c2

                                 My traceroute  [v0.80]
host1 (::)                                                    Thu Jun 23 03:13:08 2011
Keys:  Help   Display mode   Restart statistics   Order of fields   quit
                                                Packets               Pings
Host                                         Loss%   Snt   Last   Avg  Best  Wrst StDev
1. 2001:470:1f08:1982::1                      0.0%     5   68.6  68.5  68.3  68.6   0.1
2. ???


So, it seems a problem with the other side of the IPv6 over IPV4 tunnel (tunnelbroker).

I didn't have a firewall at any machines... and with tcpdump at host2, I never view packets form host1.

Anybody can help me?

Thank you very much.


PS: If I check the same with the /64 and /48 networks that I have assigned, it happens the same.

PS2: Sorry but my poor English.

[cholzhauer]

If I read you post correctly, it's a problem on the 6to4 side

I can ping your side of the tunnel, but I can't ping your 6to4 host.

I think i remember seeing a post on the HE forums not too long ago about someone else having a problem accessing a 6to4 network too