IPv6 Tunnel Setup

CareyG · May 21, 2011, 09:43:35 AM

Guys,

I had a ipv6 tunnel setup i believe on May 16. Everything worked fine the dev team has been testing as were happy and MY BOSS was happy. It quit working some time on Friday, i have of course been on vacation :( i broke the existing tunnel and reconfigured the tunnel to my side 71.164.237.24, everything looks ok but i cant get to the url? confused,any feedback would be great. Thanks the rookie.

cholzhauer · May 21, 2011, 02:04:13 PM

which url?

what commands did you use to set up the tunnel? what does your routing table look like? whats the output of ipconfig /all ?

CareyG · May 21, 2011, 02:53:24 PM

Here is the url https://wwwv6.verizon.com/FIOSTVV6/WEB/keepalive.aspx
C:\Users\Administrator>ipconfig /all

Windows IP Configuration

Host Name . . . . . . . . . . . . : MACG1EEMMLU01
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No

Ethernet adapter Client-Server:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : BASP Virtual Adapter #2
Physical Address. . . . . . . . . : 84-2B-2B-01-8C-F9
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
IPv6 Address. . . . . . . . . . . : 2002:6968:2074:0:105:104:32:116(Preferred
)
Link-local IPv6 Address . . . . . : fe80::eca6:6408:7743:3439%20(Preferred)
IPv4 Address. . . . . . . . . . . : 10.10.2.24(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 10.10.2.1
DHCPv6 IAID . . . . . . . . . . . : 528755499
DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-14-D0-F3-E4-84-2B-2B-01-8C-F7

DNS Servers . . . . . . . . . . . : fec0:0:0:ffff::1%1
fec0:0:0:ffff::2%1
fec0:0:0:ffff::3%1
NetBIOS over Tcpip. . . . . . . . : Enabled

Ethernet adapter Server-Server:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : BASP Virtual Adapter
Physical Address. . . . . . . . . : 84-2B-2B-01-8C-F7
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
IPv6 Address. . . . . . . . . . . : 2002:6968:2074:0:105:104:32:117(Preferred
)
Link-local IPv6 Address . . . . . : fe80::8997:3820:70b4:1b3a%19(Preferred)
IPv4 Address. . . . . . . . . . . : 10.10.3.154(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : ::
DHCPv6 IAID . . . . . . . . . . . : 511978283
DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-14-D0-F3-E4-84-2B-2B-01-8C-F7

DNS Servers . . . . . . . . . . . : 68.238.96.12
68.238.64.12
NetBIOS over Tcpip. . . . . . . . : Enabled

Tunnel adapter isatap.{97D5529C-4B27-4B78-9B0F-F2078F5A50A4}:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft ISATAP Adapter
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes

Tunnel adapter isatap.{49B94528-048A-4B96-8079-784DD16DADED}:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft ISATAP Adapter #2
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes

Tunnel adapter Teredo Tunneling Pseudo-Interface:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
IPv6 Address. . . . . . . . . . . : 2001:0:4137:9e76:2c6d:b98:b85b:12e7(Prefe
rred)
Link-local IPv6 Address . . . . . : fe80::2c6d:b98:b85b:12e7%23(Preferred)
Default Gateway . . . . . . . . . :
NetBIOS over Tcpip. . . . . . . . : Disabled

C:\Users\Administrator>ping 2002:6968:2074:0:105:104:32:117

Pinging 2002:6968:2074:0:105:104:32:117 with 32 bytes of data:
Reply from 2002:6968:2074:0:105:104:32:117: time<1ms
Reply from 2002:6968:2074:0:105:104:32:117: time<1ms
Reply from 2002:6968:2074:0:105:104:32:117: time<1ms
Reply from 2002:6968:2074:0:105:104:32:117: time<1ms

Ping statistics for 2002:6968:2074:0:105:104:32:117:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms

C:\Users\Administrator>ipconfig /all

Windows IP Configuration

Host Name . . . . . . . . . . . . : MACG1EEMMLU01
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No

Ethernet adapter Client-Server:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : BASP Virtual Adapter #2
Physical Address. . . . . . . . . : 84-2B-2B-01-8C-F9
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
IPv6 Address. . . . . . . . . . . : 2002:6968:2074:0:105:104:32:116(Preferred
)
Link-local IPv6 Address . . . . . : fe80::eca6:6408:7743:3439%20(Preferred)
IPv4 Address. . . . . . . . . . . : 10.10.2.24(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 10.10.2.1
DHCPv6 IAID . . . . . . . . . . . : 528755499
DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-14-D0-F3-E4-84-2B-2B-01-8C-F7

DNS Servers . . . . . . . . . . . : fec0:0:0:ffff::1%1
fec0:0:0:ffff::2%1
fec0:0:0:ffff::3%1
NetBIOS over Tcpip. . . . . . . . : Enabled

Ethernet adapter Server-Server:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : BASP Virtual Adapter
Physical Address. . . . . . . . . : 84-2B-2B-01-8C-F7
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
IPv6 Address. . . . . . . . . . . : 2002:6968:2074:0:105:104:32:117(Preferred
)
Link-local IPv6 Address . . . . . : fe80::8997:3820:70b4:1b3a%19(Preferred)
IPv4 Address. . . . . . . . . . . : 10.10.3.154(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : ::
DHCPv6 IAID . . . . . . . . . . . : 511978283
DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-14-D0-F3-E4-84-2B-2B-01-8C-F7

DNS Servers . . . . . . . . . . . : 68.238.96.12
68.238.64.12
NetBIOS over Tcpip. . . . . . . . : Enabled

Tunnel adapter isatap.{97D5529C-4B27-4B78-9B0F-F2078F5A50A4}:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft ISATAP Adapter
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes

Tunnel adapter isatap.{49B94528-048A-4B96-8079-784DD16DADED}:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft ISATAP Adapter #2
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes

Tunnel adapter Teredo Tunneling Pseudo-Interface:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
IPv6 Address. . . . . . . . . . . : 2001:0:4137:9e76:2c6d:b98:b85b:12e7(Prefe
rred)
Link-local IPv6 Address . . . . . : fe80::2c6d:b98:b85b:12e7%23(Preferred)
Default Gateway . . . . . . . . . :
NetBIOS over Tcpip. . . . . . . . : Disabled

C:\Users\Administrator>

I used the tunnel conefig setup, as i sadi tit worked before not what cahned i wiould lbe glad to ge mre fed back on the issues when i ge back to Texas tommoroww i will see what has changed on the server since i set it up!Thanks for the help!;;Carey

cholzhauer · May 21, 2011, 03:03:48 PM

get rid of the 2002 addresses and use addresses from your routed /64 or 48. might as well turn off 6to4 completely too

CareyG · May 22, 2011, 09:31:04 AM

Ok thanks, how do i do this? I am really a rookie and need a little help here.. an expanble would be get.. If you dont mind, Thanks man for you taking your time to help me, still confused why it worked before! Thanks----Carey

cholzhauer · May 22, 2011, 12:25:00 PM

To turn off 6o4, teredo, and ISATAP

Code Select


netsh int ipv6 6to4 set state disabled

netsh int ipv6 isatap set state disabled

netsh int teredo set state diasbled

That should get rid of your 2002 address, if not, reboot. If it's still there, check and make sure it's not statically set

What commands did you use to set up the tunnel? (Please post)

Which interface (if any) is going to talk to the rest of your network? I ask because you may need to get the /48 too

CareyG · May 23, 2011, 05:40:47 AM

Hello Cholzhauer,

I setup the tunnel putting public ip address in and pointing to a server and a creating tunnel.This worked before.... i also added the commands you gave and went the example page for 2008 and added those commands as well.Here is the lastest ipconfig:Note all traffic destine for the internet should 10.10.2.24/ natted 71.164.237.24 just IPv6?
C:\Users\Administrator>ipconfig /all

Windows IP Configuration

Host Name . . . . . . . . . . . . : MACG1EEMMLU01
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No

Ethernet adapter Client-Server:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : BASP Virtual Adapter #2
Physical Address. . . . . . . . . : 84-2B-2B-01-8C-F9
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
IPv6 Address. . . . . . . . . . . : 2002:6968:2074:0:105:104:32:116(Preferred
)
Link-local IPv6 Address . . . . . : fe80::eca6:6408:7743:3439%20(Preferred)
IPv4 Address. . . . . . . . . . . : 10.10.2.24(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 10.10.2.1
DHCPv6 IAID . . . . . . . . . . . : 528755499
DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-14-D0-F3-E4-84-2B-2B-01-8C-F7

DNS Servers . . . . . . . . . . . : fec0:0:0:ffff::1%1
fec0:0:0:ffff::2%1
fec0:0:0:ffff::3%1
NetBIOS over Tcpip. . . . . . . . : Enabled

Ethernet adapter Server-Server:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : BASP Virtual Adapter
Physical Address. . . . . . . . . : 84-2B-2B-01-8C-F7
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
IPv6 Address. . . . . . . . . . . : 2002:6968:2074:0:105:104:32:117(Preferred
)
Link-local IPv6 Address . . . . . : fe80::8997:3820:70b4:1b3a%19(Preferred)
IPv4 Address. . . . . . . . . . . : 10.10.3.154(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : ::
DHCPv6 IAID . . . . . . . . . . . : 511978283
DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-14-D0-F3-E4-84-2B-2B-01-8C-F7

DNS Servers . . . . . . . . . . . : 68.238.96.12
68.238.64.12
NetBIOS over Tcpip. . . . . . . . : Enabled

cholzhauer · May 23, 2011, 05:45:47 AM

We still have to deal with those 2002 addresses. Try this

Code Select


netsh int ipv6 delete address Client-Server 2002:6968:2074:0:105:104:32:116
netsh int ipv6 delete address Server-Server 2002:6968:2074:0:105:104:32:117

You also need to use your NAT address to create the tunnel; use 10.10.2.1 or 10.10.3.154 instead of 71.164.237.24.

CareyG · May 23, 2011, 06:05:11 AM

I added those commands us suggested going to test again i have to use 10.10.2.x to get out on the internet, 10.10.3.x is used for our VPN only, 10.10.2.1 is my default gateway to get to the internet?

cholzhauer · May 23, 2011, 06:06:45 AM

Then use 10.10.2.1 to setup the tunnel.

CareyG · May 23, 2011, 06:37:30 AM

ok here we go

CareyG · May 23, 2011, 07:09:56 AM

i did not work here is wha t my coworker changed!
3 things...
i noticed server-server had a default gateway applied 10.10.3.0...i removed it since it is not supposed to have one (static routes are applied)
added dummy public IPv6 address on client-server & server-server NICs
set IPv6 default route to use teredo interface

cholzhauer · May 23, 2011, 07:22:17 AM

Teredo won't work if you ran those three commands I gave you before to disable teredo

An interface needs to have a default gateway...it has to know where to send all unknown traffic. Your default gateway should point the router that's connected to that interface. 10.10.3.0 couldn't be a router anyway...that address is the network address

What dummy address did you use?

Since you're behind a NAT, is your firewall/router forwarding protocol 41?

CareyG · May 23, 2011, 07:34:34 AM

firewall is forwarding port 41 i have another post you helped me with let me see if i can find it, should dummy address

cholzhauer · May 23, 2011, 07:36:06 AM

keep in mind that port != protocol.

News:

IPv6 Tunnel Setup