• Welcome to Hurricane Electric's IPv6 Tunnel Broker Forums.

IPv6 Tunnelbroker problem with Cisco IOS, dialer and dynamic IP

Started by criushr, October 29, 2020, 03:55:32 AM

Previous topic - Next topic


I'm posting this topic again, since it looks that I placed my original post into wrong folder.
I'm trying to build HE tunnel for a few days now without success, so I decided to ask for help. Once I configure the tunnel not even P2P IPv6 ping is not working. I'm using c181x-adventerprisek9-mz.151-4.M12a on Cisco 1812 router. I also tried with IpService IOS image with no difference. In order to access Internet I'm using dialer (pppoe) and here is a relevant part of my configuration:

ipv6 unicast-routing
ipv6 cef
interface Loopback6
no ip address
ipv6 address 2001:470:1F15:EB2::A/64
ipv6 enable
interface Tunnel0
description Hurricane Electric IPv6 Tunnel Broker
no ip address
ipv6 address 2001:470:1F14:EB3::2/64
ipv6 enable
tunnel source Dialer0
tunnel mode ipv6ip
tunnel destination
interface FastEthernet0
description INTERNET
no ip address
duplex auto
speed auto
pppoe enable group global
pppoe-client dial-pool-number 1
no cdp enable
interface Dialer0
mtu 1492
ip ddns update HE1
ip address negotiated
ip nat outside
ip virtual-reassembly in
encapsulation ppp
ip tcp adjust-mss 1452
dialer pool 1
dialer-group 1
ppp authentication chap callin
ppp chap hostname xxxx
ppp chap password 7 xxxx
no cdp enable
dialer-list 1 protocol ip permit
dialer-list 1 protocol ipv6 permit
ip route Dialer0
ipv6 route ::/0 Tunnel0

rtr-0#ping ipv6 2001:470:1f14:eb3::1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 2001:470:1F14:EB3::1, timeout is 2 seconds:
Success rate is 0 percent (0/5)
rtr-0#ping ipv6 2001:470:20::2 source loopback 6
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 2001:470:20::2, timeout is 2 seconds:
Packet sent with a source address of 2001:470:1F15:EB2::A
Success rate is 0 percent (0/5)

Any suggestions would be great since I'm stuck.


Also, I got same behavior using advanced IP services IOS (c181x-advipservicesk9-mz.151-4.M12a.bin).
So, no clue what to try next.


Is your Tunnel endpoint correct on the HE portal?
I see you have HE DDNS configured - is this working and correctly updating your endpoint?
Rather than using the inbuilt DDNS client I use an EEM TCL script that is triggered when the Tunnel interface changes the state to up.  It was a script I found on CCO written in 2009 (ipv6-tunnel-update.tcl) - I am sure you can find it and modify it for your details.
Other than that my configuration looks similar to yours.  I can't ping any IPv6 addresses from the router which I think is an issue with IPv6 inspection I have enabled, however from a client or an IOS switch on the inside I can.

Good luck