• Welcome to Hurricane Electric's IPv6 Tunnel Broker Forums.

v6 on extreme with os/x clients behind it can't ping

Started by kencrozier, December 25, 2010, 11:19:28 AM

Previous topic - Next topic


Hi, I have upgraded my extreme's firmware to 7.5.2 and don't get any messages about the tunnel to HE not working  (i wish apple would give a status of the tunnel) ... however I am still having problems pinging and resolving v6 addresses... Here's the configs for everything, the extreme is connected directly to the DSL.

He tunnel config is ...   

IPv6 Tunnel Endpoints
Server IPv4 address:
Server IPv6 address:    2001:470:c:c77::1/64
Client IPv4 address:
Client IPv6 address:    2001:470:c:c77::2/64
Available DNS Resolvers
Anycasted IPv6 Caching Nameserver:   2001:470:20::2
Anycasted IPv4 Caching Nameserver:
Routed IPv6 Prefixes and rDNS Delegations
Routed /48:    2001:470:f2e6::/48
Routed /64:    2001:470:d:c77::/64

extreme V6 setup

IPv6 mode = Tunnel
Block incoming ipv6 connections
config ipv6 = manually
remote ipv4 addr. =
wan ipv6 addr. = 2001:470:c:c77::2
ipv6 default route = 2001:470:c:c77::1
lan ipv6 addr. = 2001:470:d:c77::

Imac is set to get v6 addr automatically

imac if/netstat/ping6s and traceroute6 are ....

Kens-iMac:~ ken$ ping6 2001:470:c:c77::1
PING6(56=40+8+8 bytes) 2001:470:d:c77:d69a:20ff:fec1:aa98 --> 2001:470:c:c77::1
Request timeout for icmp_seq=0
Request timeout for icmp_seq=1
Request timeout for icmp_seq=2
Request timeout for icmp_seq=3
--- 2001:470:c:c77::1 ping6 statistics ---
5 packets transmitted, 0 packets received, 100.0% packet loss

Kens-iMac:~ ken$ ping6 2001:470:c:c77::2
PING6(56=40+8+8 bytes) 2001:470:d:c77:d69a:20ff:fec1:aa98 --> 2001:470:c:c77::2
16 bytes from 2001:470:c:c77::2, icmp_seq=0 hlim=64 time=6.313 ms
16 bytes from 2001:470:c:c77::2, icmp_seq=1 hlim=64 time=0.365 ms
16 bytes from 2001:470:c:c77::2, icmp_seq=2 hlim=64 time=0.364 ms
16 bytes from 2001:470:c:c77::2, icmp_seq=3 hlim=64 time=0.329 ms
16 bytes from 2001:470:c:c77::2, icmp_seq=4 hlim=64 time=0.356 ms
16 bytes from 2001:470:c:c77::2, icmp_seq=5 hlim=64 time=0.354 ms
16 bytes from 2001:470:c:c77::2, icmp_seq=6 hlim=64 time=0.352 ms
16 bytes from 2001:470:c:c77::2, icmp_seq=7 hlim=64 time=0.366 ms
16 bytes from 2001:470:c:c77::2, icmp_seq=8 hlim=64 time=0.356 ms
--- 2001:470:c:c77::2 ping6 statistics ---
9 packets transmitted, 9 packets received, 0.0% packet loss
round-trip min/avg/max/std-dev = 0.329/1.017/6.313/1.872 ms

Kens-iMac:~ ken$ traceroute6 ipv6.google.com
traceroute6 to ipv6.l.google.com (2001:4860:8010::67) from 2001:470:d:c77:d69a:20ff:fec1:aa98, 64 hops max, 12 byte packets
1  2001:470:d:c77:21e:52ff:fef0:5ea2  0.434 ms  0.418 ms  0.364 ms
2  * * *
3  * * *
4  * *^C
Kens-iMac:~ ken$ if
Kens-iMac:~ ken$ ifconfig
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 16384
   inet6 ::1 prefixlen 128
   inet6 fe80::1%lo0 prefixlen 64 scopeid 0x1
   inet netmask 0xff000000
   inet6 fd84:bec3:f7d5:e761:d69a:20ff:fec1:aa98 prefixlen 128
gif0: flags=8010<POINTOPOINT,MULTICAST> mtu 1280
stf0: flags=0<> mtu 1280
   ether d4:9a:20:c1:aa:98
   inet6 fe80::d69a:20ff:fec1:aa98%en0 prefixlen 64 scopeid 0x4
   inet netmask 0xffffff00 broadcast
   inet6 2001:470:d:c77:d69a:20ff:fec1:aa98 prefixlen 64 autoconf
   media: autoselect (1000baseT <full-duplex,flow-control>)
   status: active
   lladdr d4:9a:20:ff:fe:c1:aa:98
   media: autoselect <full-duplex>
   status: inactive
   ether d4:9a:20:5c:2e:b7
   media: autoselect (<unknown type>)
   status: inactive
   ether 00:50:56:c0:00:08
   inet netmask 0xffffff00 broadcast
   ether 00:50:56:c0:00:01
   inet netmask 0xffffff00 broadcast
utun0: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 1500
   inet6 fe80::d69a:20ff:fec1:aa98%utun0 prefixlen 64 scopeid 0x9
   inet6 fd00:6587:52d7:42:d69a:20ff:fec1:aa98 prefixlen 64
Kens-iMac:~ ken$ netstat -r
Routing tables

Destination        Gateway            Flags        Refs      Use   Netif Expire
default          UGSc           55        0     en0
127                localhost          UCS             0        0     lo0
localhost          localhost          UH              4   396004     lo0
169.254            link#4             UCS             1        0     en0        link#4             UHRLW           1     1258     en0      5
172.16.96/24       link#7             UC              1        0  vmnet8      link#7             UHLWbI          1      629  vmnet8
172.16.202/24      link#8             UC              1        0  vmnet1     link#8             UHLWbI          2      627  vmnet1
192.168.1          link#4             UCS             4        0     en0        0:1e:52:f0:5e:a2   UHLWI          73      874     en0   1120        localhost          UHS             0        0     lo0        0:11:24:6f:9:5e    UHLWI           2     5449     en0     39       0:22:41:1b:25:b4   UHLWI           0        0     en0    582      link#4             UHLWbI          1      626     en0

Destination        Gateway            Flags         Netif Expire
default            kcs.local          UGSc            en0
localhost          localhost          UH              lo0
2001:470:d:c77::   link#4             UC              en0
2001:470:d:c77:211 0:11:24:6f:9:5e    UHLW            en0
2001:470:d:c77:21e 0:1e:52:f0:5e:a2   UHLW            en0
2001:470:d:c77:d69 d4:9a:20:c1:aa:98  UHL             lo0
fd00:6587:52d7::   fd00:6587:52d7:42: UGCS          utun0
fd00:6587:52d7:42: fd00:6587:52d7:42: UGHW          utun0
fd00:6587:52d7:42: link#9             UHL             lo0
fd84:bec3:f7d5:e76 link#1             UHL             lo0
fe80::%lo0         localhost          Uc              lo0
localhost          link#1             UHL             lo0
fe80::%en0         link#4             UC              en0
playme.local       0:11:24:6f:9:5e    UHLW            en0
kcs.local          0:1e:52:f0:5e:a2   UHLW            en0
kens-imac.local    d4:9a:20:c1:aa:98  UHL             lo0
fe80::%utun0       fe80::d69a:20ff:fe Uc            utun0
fe80::d69a:20ff:fe link#9             UHL             lo0
ff01::             localhost          Um              lo0
ff02::             localhost          UmC             lo0
ff02::             link#4             UmC             en0
ff02::             fe80::d69a:20ff:fe UmC           utun0
Kens-iMac:~ ken$

is there something basic that i'm doing wrong ?


Forwarding enabled? (No I dont know how, if possible, to set that)


I assume it used to work before the upgrade?

Only thing that caught my eye was the strange default route you listed, but if that's how it was before, I don't know what else to think


no it did not work before the upgrade, as there was a problem with the previous firmware with dynamic addresses ......
What is the funny default route ? what should it be ?


Well, this is what the routing table looks like from one of the working mac's at my company

netstat -nr
Routing tables


Destination                             Gateway                         Flags         Netif Expire
default                                 fe80::21d:a2ff:feaf:2ffc%en0    UGSc            en0
::1                                     ::1                             UH              lo0
2001:470:c27d:f000::/64                 link#5                          UC              en0
2001:470:c27d:f000:225:4bff:feb8:a360   0:25:4b:b8:a3:60                UHL             lo0
fe80::%lo0/64                           fe80::1%lo0                     Uc              lo0
fe80::1%lo0                             link#1                          UHL             lo0
fe80::%en0/64                           link#5                          UC              en0
fe80::21d:a2ff:feaf:2ffc%en0            0:1d:a2:af:2f:fc                UHLW            en0
fe80::225:4bff:feb8:a360%en0            0:25:4b:b8:a3:60                UHL             lo0
ff01::/32                               ::1                             Um              lo0
ff02::/32                               ::1                             UmC             lo0
ff02::/32                               link#5                          UmC             en0
ff02::fb                                link#5                          UHmLW           en0


well after getting my eyes tested I noticed that /64 was 2001:470:d ..... and not 2001:470:c .... as i had it
have changed it but still have the same issues ?


Is there a console on the airport extreme that you can use to test with ping and whatnot?

How is your AE doling out addresses?  Like I mentioned, your default route does not look the route I posted


No there is not a utility to ping from the AES, the address's it is handing out are good and i can ping the local interface on v6