Welcome to Hurricane Electric's Tunnelbroker.net forums!
Started by ftmksix, August 20, 2009, 02:09:02 AM
Quote from: ftmksix on August 20, 2009, 02:09:02 AMHello guys!Need some help here,I already gain a range of IPv6 given by HE as below, Server IPv4 address: 22.214.171.124 Server IPv6 address: 2001:470:1f0a:6b0::1/64 Client IPv4 address: 126.96.36.199 Client IPv6 address: 2001:470:1f0a:6b0::2/64I'm using Cisco 2821 router running behind NAT. My public IP is 188.8.131.52 natting to private IP 10.73.39.250.This my router's configuration interface Tunnel0 description Hurricane Electric IPv6 Tunnel Broker no ip address ipv6 enable ipv6 address 2001:470:1f0a:6b0::2/64 tunnel source 184.108.40.206 tunnel destination 220.127.116.11 tunnel mode ipv6ipipv6 route ::/0 Tunnel0The problem is I can't ping IPv6 HE server but succeed if ping using IPv4...
Quote from: jimb on September 11, 2009, 12:33:16 PMYeh it should work behind a standard "overload" NAT for a single device. But the connection table entry would eventually expire if you don't keep traffic flowing.And of course, as I said, you could dedicate an entire IPv4 to an inside box for this purpose, and it'd work (e.g. static nat for the whole IP). I'm just not sure if you can specifically forward transport protocol 41 to a given internal IP with IOS NAT, as you can with things like iptables.
Quote from: jimb on September 15, 2009, 12:01:21 PMAh I was using Cisco speak for a typical many-to-one NAT situation (overload). I'm also still not sure if IOS NAT can do a "protocol forward" like Linux iptables, screenos, etc. It does fine with UDP and TCP ports, but I didn't see an immediate way to set up a static NAT to just 'forward all IP proto 41 to this internal IP' (without dedicating an entire IP of course).Of course if you're using ScreenOS it changes everything. I actually have an old NS-5gt laying around collecting dust. Which version of ScreenOS does IPv6 and 6in4? I wish Juniper didn't require a contract which costs more than the old 5gt is worth in order to DL OS updates for it. ::)