• Welcome to Hurricane Electric's IPv6 Tunnel Broker Forums.

Google simple CE machine tunnel setup

Started by rattila, January 01, 2025, 04:20:39 AM

Previous topic - Next topic

rattila

Hi,

I've got a very cheap originally free tier compute engine (VM).
I setup my tunnel and the remote end doesn't answer for ping:
root@ub2-1:/etc/netplan# ping 2001:470:1f1a:xxx::1
PING 2001:470:1f1a:xxx::1(2001:470:1f1a:xxx::1) 56 data bytes
From 2001:470:1f1a:xxx::2 icmp_seq=1 Destination unreachable: Address unreachable

I open up the firewall for the tunnel server IP address which the Budapest server.
I didn't get any packet from the server checking tcpdump ens4.

I read somewhere google doesn't allow tunnel protocol 41 (IPv6 encap).
Is that true?

TIA,
Ruzsi

rattila

Addendum:

he-ipv6: flags=209<UP,POINTOPOINT,RUNNING,NOARP>  mtu 1480
        inet6 2001:470:1f1a:xxx::2  prefixlen 64  scopeid 0x0<global>
        sit  txqueuelen 1000  (IPv6-in-IPv4)
        RX packets 0  bytes 0 (0.0 B)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 0  bytes 0 (0.0 B)
        TX errors 191  dropped 0 overruns 0  carrier 191  collisions 0

Something wrong! There are TX error and carrier and no TX packets!
Where could be the problem? In my config (VM) or Google part (filtered protocol)?

I know there is native IPv6 support many GCEs except this very small (almost hobbyist) machines.

TIA,
Ruzsi

snarked

Check your IPv6 address instructions:  Make certain your "xxx" field is an odd number as that is used for the tunnel endpoints.  An even "xxx" is used for the routed /64 at your site (usually on Ethernet), and thus does not belong on the point-to-point interface.