Hi folks,
I got a strange Problem with three of my tunnels. A few days ago the stopped working:
One Tunnel as example:
System is Debian Squeeze, Berlin DE is endpoint
Linux storage1 2.6.32-5-xen-686 #1 SMP Wed Apr 9 23:09:56 UTC 2014 i686 GNU/Linux (The Problem also appears on another vm and physical machine).
/etc/network/interfaces:
auto eth4
iface eth4 inet static
address 1.2.3.100
netmask 255.255.255.248
gateway 1.2.3.97
auto sit1
iface sit1 inet6 v4tunnel
address 2001:123:6c:111::2
netmask 64
local 1.2.3.100
endpoint 216.66.86.114
ttl 255
up ip addr add 2001:123:6d:111:216:3eff:fe4e:8082/64 dev sit1
up ip route add 2000::0/3 via 2001:123:6c:111::1 dev sit1
ifconfig:
[...]
eth4 Link encap:Ethernet Hardware Adresse 00:16:3e:03:2b:e9
inet Adresse:1.2.3.100 Bcast:1.2.3.103 Maske:255.255.255.248
inet6-Adresse: fe80::216:3eff:fe03:2be9/64 Gültigkeitsbereich:Verbindung
UP BROADCAST RUNNING MULTICAST MTU:1500 Metrik:1
RX packets:65926 errors:0 dropped:0 overruns:0 frame:0
TX packets:3082 errors:0 dropped:0 overruns:0 carrier:0
Kollisionen:0 Sendewarteschlangenlänge:1000
RX bytes:6794447 (6.4 MiB) TX bytes:827626 (808.2 KiB)
Interrupt:235
[...]
sit1 Link encap:IPv6-nach-IPv4
inet6-Adresse: 2001:123:6d:111:216:3eff:fe4e:8082/64 Gültigkeitsbereich:Global
inet6-Adresse: 2001:123:6c:111::2/64 Gültigkeitsbereich:Global
inet6-Adresse: fe80::5c32:4264/128 Gültigkeitsbereich:Verbindung
UP PUNKTZUPUNKT RUNNING NOARP MTU:1480 Metrik:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:16 errors:0 dropped:0 overruns:0 carrier:0
Kollisionen:0 Sendewarteschlangenlänge:0
RX bytes:0 (0.0 B) TX bytes:1664 (1.6 KiB)
route -6:
2001:123:6c:111::/64 :: Un 256 0 1 sit1
2001:123:6d:111::/64 :: Un 256 0 0 sit1
2000::/3 2001:123:6c:111::1 UG 1024 0 19 sit1
fe80::/64 :: U 256 0 0 eth0
fe80::/64 :: U 256 0 0 eth1
fe80::/64 :: U 256 0 0 eth2
fe80::/64 :: U 256 0 0 eth3
fe80::/64 :: U 256 0 0 eth4
fe80::/64 :: U 256 0 0 eth5
fe80::/64 :: Un 256 0 0 sit1
::/0 :: !n -1 1 629 lo
::1/128 :: Un 0 1 267 lo
2001:123:6c:111::2/128 :: Un 0 1 0 lo
2001:123:6d:111:216:3eff:fe4e:8082/128 :: Un 0 1 0 lo
fe80::5c32:4264/128 :: Un 0 1 0 lo
fe80::216:3eff:fe03:2be9/128 :: Un 0 1 0 lo
fe80::216:3eff:fe20:7bc9/128 :: Un 0 1 0 lo
fe80::216:3eff:fe2f:ab56/128 :: Un 0 1 0 lo
fe80::216:3eff:fe3e:f100/128 :: Un 0 1 0 lo
fe80::216:3eff:fe42:121f/128 :: Un 0 1 90 lo
fe80::216:3eff:fe4e:8082/128 :: Un 0 1 0 lo
ff00::/8 :: U 256 0 0 eth0
ff00::/8 :: U 256 0 0 eth1
ff00::/8 :: U 256 0 0 eth2
ff00::/8 :: U 256 0 0 eth3
ff00::/8 :: U 256 0 0 eth4
ff00::/8 :: U 256 0 0 eth5
ff00::/8 :: U 256 0 0 sit1
::/0 :: !n -1 1 629 lo
Ping:
ping6 2001:123:6c:111::1
PING 2001:123:6c:111::1(2001:123:6c:111::1) 56 data bytes
^C
--- 2001:123:6c:111::1 ping statistics ---
3 packets transmitted, 0 received, 100% packet loss, time 2013ms
ping6 -n heise.de
PING heise.de(2a02:2e0:3fe:1001:302:

56 data bytes
^C
--- heise.de ping statistics ---
12 packets transmitted, 0 received, 100% packet loss, time 11087ms
IPTables is POLICY ACCEPT - trust me

I created a new Tunnel (Frankfurt, DE is endpoint):
/etc/network/interfaces:
auto eth4
iface eth4 inet static
address 1.2.3.101
netmask 255.255.255.248
gateway 1.2.3.97
auto sit1
iface sit1 inet6 v4tunnel
address 2001:132:1f0a:1c8::2
netmask 64
local 1.2.3.101
endpoint 216.66.80.30
ttl 255
up ip addr add 2001:132:1f0b:1c8:216:3eff:fe4e:8082/64 dev sit1
up ip route add 2000::0/3 via 2001:470:1f0a:1c8::1 dev sit1
ifconfig:
[...]
eth4 Link encap:Ethernet Hardware Adresse 00:16:3e:03:2b:e9
inet Adresse:1.2.3.101 Bcast:1.2.3.103 Maske:255.255.255.248
inet6-Adresse: fe80::216:3eff:fe03:2be9/64 Gültigkeitsbereich:Verbindung
UP BROADCAST RUNNING MULTICAST MTU:1500 Metrik:1
RX packets:36 errors:0 dropped:0 overruns:0 frame:0
TX packets:17 errors:0 dropped:0 overruns:0 carrier:0
Kollisionen:0 Sendewarteschlangenlänge:1000
RX bytes:2828 (2.7 KiB) TX bytes:1506 (1.4 KiB)
Interrupt:235
[...]
sit1 Link encap:IPv6-nach-IPv4
inet6-Adresse: 2001:123:1f0b:1c8:216:3eff:fe4e:8082/64 Gültigkeitsbereich:Global
inet6-Adresse: 2001:123:1f0a:1c8::2/64 Gültigkeitsbereich:Global
inet6-Adresse: fe80::5c32:4265/128 Gültigkeitsbereich:Verbindung
UP PUNKTZUPUNKT RUNNING NOARP MTU:1480 Metrik:1
RX packets:2 errors:0 dropped:0 overruns:0 frame:0
TX packets:2 errors:0 dropped:0 overruns:0 carrier:0
Kollisionen:0 Sendewarteschlangenlänge:0
RX bytes:208 (208.0 B) TX bytes:208 (208.0 B)
route -6:
2001:123:1f0a:1c8::/64 :: Un 256 0 1 sit1
2001:123:1f0b:1c8::/64 :: Un 256 0 0 sit1
2000::/3 2001:123:1f0a:1c8::1 UG 1024 0 3 sit1
fe80::/64 :: U 256 0 0 eth0
fe80::/64 :: U 256 0 0 eth1
fe80::/64 :: U 256 0 0 eth2
fe80::/64 :: U 256 0 0 eth3
fe80::/64 :: U 256 0 0 eth4
fe80::/64 :: U 256 0 0 eth5
fe80::/64 :: Un 256 0 0 sit1
::/0 :: !n -1 1 25 lo
::1/128 :: Un 0 1 21 lo
2001:123:1f0a:1c8::2/128 :: Un 0 1 0 lo
2001:123:1f0b:1c8:216:3eff:fe4e:8082/128 :: Un 0 1 2 lo
fe80::5c32:4265/128 :: Un 0 1 0 lo
fe80::216:3eff:fe03:2be9/128 :: Un 0 1 0 lo
fe80::216:3eff:fe20:7bc9/128 :: Un 0 1 0 lo
fe80::216:3eff:fe2f:ab56/128 :: Un 0 1 0 lo
fe80::216:3eff:fe3e:f100/128 :: Un 0 1 0 lo
fe80::216:3eff:fe42:121f/128 :: Un 0 1 0 lo
fe80::216:3eff:fe4e:8082/128 :: Un 0 1 0 lo
ff00::/8 :: U 256 0 0 eth0
ff00::/8 :: U 256 0 0 eth1
ff00::/8 :: U 256 0 0 eth2
ff00::/8 :: U 256 0 0 eth3
ff00::/8 :: U 256 0 0 eth4
ff00::/8 :: U 256 0 0 eth5
ff00::/8 :: U 256 0 0 sit1
::/0 :: !n -1 1 25 lo
Ping6:
ping6 2001:123:1f0a:1c8::1
PING 2001:123:1f0a:1c8::1(2001:123:1f0a:1c8::1) 56 data bytes
64 bytes from 2001:123:1f0a:1c8::1: icmp_seq=1 ttl=64 time=16.9 ms
64 bytes from 2001:123:1f0a:1c8::1: icmp_seq=2 ttl=64 time=23.8 ms
^C
--- 2001:123:1f0a:1c8::1 ping statistics ---
2 packets transmitted, 2 received, 0% packet loss, time 1001ms
rtt min/avg/max/mdev = 16.994/20.414/23.835/3.423 ms
ping6 -n heise.de
PING heise.de(2a02:2e0:3fe:1001:302:

56 data bytes
64 bytes from 2a02:2e0:3fe:1001:302::: icmp_seq=1 ttl=59 time=44.1 ms
64 bytes from 2a02:2e0:3fe:1001:302::: icmp_seq=2 ttl=59 time=22.0 ms
64 bytes from 2a02:2e0:3fe:1001:302::: icmp_seq=3 ttl=59 time=14.4 ms
^C
--- heise.de ping statistics ---
3 packets transmitted, 3 received, 0% packet loss, time 2002ms
rtt min/avg/max/mdev = 14.440/26.866/44.116/12.587 ms
--------------------------------------
I got 5 Tunnels:
1st - Connected via Fritzbox to Berlin - working - created OCT2013 - dynamic ip
2nd - Connected via Linux to Berlin - not working - created OCT2013 - static ip
3rd - Connected via Linux to Berlin - not working - created OCT2013 - static ip
4th - Connected via Linux to Berlin - not working - created OCT2013 - static ip (the not working one described above)
5th - Connected via Linux to Frankfurt - working (the new one described above) - static ip
Got DNS Entries for 2,3,4 and a /48 on the 2nd (and use this in several networks behind the gateway) so dont wanna recreate them (much much work). Support is involved but not responding at the moment

The tunnels worked a few days ago ... so my questions:
1. Has anyone experienced the same problems (with Berlin) ?
2. Any hints on revealing or resolving this problem
3. Could it be, that the tunnel is just broken on server side ?
Thanks in advance

Marcel