• Welcome to Hurricane Electric's IPv6 Tunnel Broker Forums.

Can't ping from outside the network

Started by BamaKevinT, August 31, 2009, 09:38:39 PM

Previous topic - Next topic

BamaKevinT

I'm having a strange issue with one of the California tunnels.. I can ping the ipv6 address assigned from the box its assigned to, but I can't ping it from another box (which is also ipv6 enabled). Here are the responses:

From a server OUTSIDE of the network:

PING 2001:470:1f04:3f6::8(2001:470:1f04:3f6::8) 56 data bytes
From 2001:470:0:45::2 icmp_seq=1 Destination unreachable: Address unreachable
From 2001:470:0:45::2 icmp_seq=2 Destination unreachable: Address unreachable
From 2001:470:0:45::2 icmp_seq=5 Destination unreachable: Address unreachable

--- 2001:470:1f04:3f6::8 ping statistics ---
5 packets transmitted, 0 received, +3 errors, 100% packet loss, time 4000ms

However, that same box can ping kame.net's ipv6 address:

bear:/home/phlux/inspircd/conf# ping6 2001:200:0:8002:203:47ff:fea5:3085
PING 2001:200:0:8002:203:47ff:fea5:3085(2001:200:0:8002:203:47ff:fea5:3085) 56 data bytes
64 bytes from 2001:200:0:8002:203:47ff:fea5:3085: icmp_seq=1 ttl=55 time=207 ms
64 bytes from 2001:200:0:8002:203:47ff:fea5:3085: icmp_seq=2 ttl=55 time=206 ms
64 bytes from 2001:200:0:8002:203:47ff:fea5:3085: icmp_seq=3 ttl=55 time=206 ms
64 bytes from 2001:200:0:8002:203:47ff:fea5:3085: icmp_seq=4 ttl=55 time=206 ms
64 bytes from 2001:200:0:8002:203:47ff:fea5:3085: icmp_seq=5 ttl=55 time=205 ms

--- 2001:200:0:8002:203:47ff:fea5:3085 ping statistics ---
5 packets transmitted, 5 received, 0% packet loss, time 4002ms
rtt min/avg/max/mdev = 205.687/206.585/207.624/0.758 ms

I don't know why the box wouldn't be responding.. it's not behind a firewall of any type :\ The others are set up the same way, and all respond to incoming connections.

Thanks for the help..

BamaKevinT

I neglected to mention that 'bear' can ping the other machine using ipv4.

broquea

well, you are using 1f04, which is part of the tunne'ls /64 and not the routed, which would be 1f05. When you ping out from bear, what IPv6 address is it sourcing from. wasy fix is start using your statically routed /64 and put the ips on eth0.