• Welcome to Hurricane Electric's IPv6 Tunnel Broker Forums.

News:

Welcome to Hurricane Electric's Tunnelbroker.net forums!

Main Menu

Problem IPV6

Started by campari, October 15, 2012, 12:35:16 PM

Previous topic - Next topic

campari

 I have a problem with ipv6

root@Rashk0:~# ping6 ipv6.google.com
PING ipv6.google.com(lb-in-x69.1e100.net) 56 data bytes
From campari-4-pt.tunnel.tserv24.sto1.ipv6.he.net icmp_seq=1 Destination unreachable: Address unreachable

help me please . i have a router Dovado 4GR USB Modem internet ( dynamic ip )

root@Rashk0:~# ip addr

8: he-ipv6: <POINTOPOINT,NOARP,UP,LOWER_UP> mtu 1480 qdisc noqueue state UNKNOWN
    link/sit 46.194.146.152 peer 192.168.0.63
    inet6 2001:470:27:2ec::2/64 scope global
       valid_lft forever preferred_lft forever
    inet6 fe80::2ec2:9298/128 scope link
       valid_lft forever preferred_lft forever
-= CaMPaRi =-

cholzhauer

Your router is probably blocking protocol 41.  Capture some traffic and see what you can see

campari

Quote from: cholzhauer on October 15, 2012, 12:47:18 PM
Your router is probably blocking protocol 41.  Capture some traffic and see what you can see

what should i do
-= CaMPaRi =-

cholzhauer

Capture some traffic and see what you can see

broquea

Is your router behind nat?
What commands did you specifically run to bring up the tunnel on your linux box?

campari

Quote from: cholzhauer on October 15, 2012, 01:09:38 PM
Capture some traffic and see what you can see

   
Date: 2012-10-15   
   
Time: 22:27
   Traffic Down / Up (GB)          
Signal: 54 % (4G)    Connection: USB        Modem: 42.5 / 15.6
-= CaMPaRi =-

campari

Quote from: broquea on October 15, 2012, 01:26:31 PM
Is your router behind nat?
What commands did you specifically run to bring up the tunnel on your linux box?

root@Rashk0:~# ifconfig
eth0      Link encap:Ethernet  HWaddr 00:16:36:f2:e2:c0
          inet addr:192.168.0.XX  Bcast:192.168.0.255  Mask:255.255.255.0
          inet6 addr: fe80::216:36ff:fef2:e2c0/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:541307 errors:0 dropped:0 overruns:0 frame:0
          TX packets:419591 errors:0 dropped:0 overruns:2 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:473227164 (451.3 MiB)  TX bytes:71988617 (68.6 MiB)
          Interrupt:21 Base address:0xa000


modprobe ipv6
ip tunnel add he-ipv6 mode sit remote 192.168.0.XX local 46.194.146.152 ttl 255
ip link set he-ipv6 up
ip addr add 2001:470:27:2ec::2/64 dev he-ipv6
ip route add ::/0 dev he-ipv6
ip -f inet6 addr
-= CaMPaRi =-

broquea

There is your issue:

ip tunnel add he-ipv6 mode sit remote 192.168.0.XX local 46.194.146.152 ttl 255

remote needs to be the tunnel-server's IP, and local needs to be that 192.168 ip. Also obfuscating your internal IP and not your external, is like, the most backwards way of trying to protect your IPv4 address, which doesn't need obfuscation when you ask for troubleshooting help anyways ;)

campari

Quote from: broquea on October 15, 2012, 01:51:09 PM
There is your issue:

ip tunnel add he-ipv6 mode sit remote 192.168.0.XX local 46.194.146.152 ttl 255

remote needs to be the tunnel-server's IP, and local needs to be that 192.168 ip. Also obfuscating your internal IP and not your external, is like, the most backwards way of trying to protect your IPv4 address, which doesn't need obfuscation when you ask for troubleshooting help anyways ;)

now it did

modprobe ipv6
ip tunnel add he-ipv6 mode sit remote 216.66.80.90 local 192.168.0.63 ttl 255
ip link set he-ipv6 up
ip addr add 2001:470:27:2ec::2/64 dev he-ipv6
ip route add ::/0 dev he-ipv6
ip -f inet6 addr


it is also
-= CaMPaRi =-

broquea

So can you ping6 Google now?

campari

Quote from: broquea on October 15, 2012, 02:15:11 PM
So can you ping6 Google now?

No

root@Rashk0:~# ping6 ipv6.google.com
PING ipv6.google.com(lb-in-x68.1e100.net) 56 data bytes
From campari-4-pt.tunnel.tserv24.sto1.ipv6.he.net icmp_seq=1 Destination unreachable: Address unreachable
^C
--- ipv6.google.com ping statistics ---
1 packets transmitted, 0 received, +1 errors, 100% packet loss, time 0ms

-= CaMPaRi =-

broquea

Then it is one of three things:

1) your IPv4 endpoint is not up to date in the broker. If it looks like it is, try changing it to something else that pings, and then change it back.
2) your tunnel isn't built correctly on HE's side. email ipv6@he.net and have them verify it is, after you've tried #1.
3) your NAT appliance doesn't pass Protocol 41 IPv6 tunnels to your machines behind it. Most likely need to replace that NAT appliance if this is the case.

campari

 ???
Quote from: broquea on October 15, 2012, 02:35:54 PM
Then it is one of three things:

1) your IPv4 endpoint is not up to date in the broker. If it looks like it is, try changing it to something else that pings, and then change it back.
2) your tunnel isn't built correctly on HE's side. email ipv6@he.net and have them verify it is, after you've tried #1.
3) your NAT appliance doesn't pass Protocol 41 IPv6 tunnels to your machines behind it. Most likely need to replace that NAT appliance if this is the case.

0k thank you man :)
-= CaMPaRi =-