Client can't ping IPv6 address
Shadow Hawkins on Thursday, 19 December 2013 02:34:51
I have configured aiccu, radvd successfully on OpenWRT and "ping6 sixxs.net" gets correct response.
root@OpenWrt:/etc/config# ping6 sixxs.net
PING sixxs.net (2001:1af8:4050::2): 56 data bytes
64 bytes from 2001:1af8:4050::2: seq=0 ttl=53 time=346.686 ms
64 bytes from 2001:1af8:4050::2: seq=1 ttl=53 time=360.400 ms
When i check the client PC, it get the IPv6 address but it always fails to ping IPv6 address*
$ ping6 sixxs.net
PING6(56=40+8+8 bytes) 4002:123:456:789:55fe:c8c5:6e79:87f --> 2620::6b0:a:250:56ff:fe99:78f7
//stuck here, no any response.
I can't figure out what's wrong. Can you help me?
The following is my configuration:
/etc/config/aiccu:
config aiccu
option username 'FKT3-SIXXS'
option password '*******'
option protocol 'tic'
option server 'tic.sixxs.net'
option interface 'sixxs0'
option tunnel_id
option requiretls '0'
option defaultroute '1'
option nat '1'
option heartbeat '1'
/etc/config/radvd:
config interface
option interface 'lan'
option AdvSendAdvert 1
option AdvManagedFlag 1
option AdvOtherConfigFlag 1
list client ''
option ignore 0
config prefix
option interface 'lan'
# If not specified, a non-link-local prefix of the interface is used
list prefix '4002:123:456:789::/64'
option AdvOnLink 1
option AdvAutonomous 1
option AdvRouterAddr 0
option ignore 0
/etc/config/firewall:
#append
config 'zone'
option 'name' 'wan6'
option 'output' 'ACCEPT'
option 'network' 'wan6'
option 'family' 'ipv6'
option 'input' 'DROP'
option 'forward' 'DROP'
config 'forwarding'
option 'dest' 'wan6'
option 'src' 'lan'
config 'rule'
option 'name' 'RHO'
option 'family' 'ipv6'
option 'target' 'DROP'
option 'extra' '-m rt --rt-type 0'
option 'proto' 'all'
option 'src' 'wan6'
config 'rule'
option 'name' 'RHO2'
option 'family' 'ipv6'
option 'target' 'DROP'
option 'extra' '-m rt --rt-type 0'
option 'proto' 'all'
option 'src' 'wan6'
option 'dest' 'lan'
config 'rule'
option 'target' 'ACCEPT'
option 'output' 'ACCEPT'
option 'forward' 'REJECT'
option 'name' 'Allow-Ping ipv6'
option 'family' 'ipv6'
option 'proto' 'icmp'
option 'src' 'wan6'
option 'limit' '1000/sec'
list 'icmp_type' 'echo-request'
list 'icmp_type' 'destination-unreachable'
list 'icmp_type' 'packet-too-big'
list 'icmp_type' 'time-exceeded'
list 'icmp_type' 'bad-header'
list 'icmp_type' 'unknown-header-type'
list 'icmp_type' 'router-solicitation'
list 'icmp_type' 'neighbour-solicitation'
list 'icmp_type' 'echo-reply'
Client can't ping IPv6 address
Jeroen Massar on Thursday, 19 December 2013 15:08:14 PING6(56=40+8+8 bytes) 4002:123:456:789:55fe:c8c5:6e79:87f --> 2620::6b0:a:250:56ff:fe99:78f7 list prefix '4002:123:456:789::/64'
4002:.... is not even inside 2000::/3 and more importantly not routed to you, thus that will never work.
See your user home under 'subnets' for the list of addresses that you can use.
Posting is only allowed when you are logged in. |