|
Trouble setting up a SIXXS tunnel with Apple Airport Extreme
![[nl]](/s/countries/nl.gif) Shadow Hawkins on Tuesday, 24 August 2010 15:59:31
I'm trying to set up a SIXXS tunnel to my Apple Airport Extreme router, but I haven't been successful yet. My goal is to setup my own registered IPv6 network behind the Apple router.
Before I tried to set up this tunnel I already had IPv6 running. The Apple router was set up in automatic tunnel mode, my Vista PC has all tunnel protocols disabled, and is getting its IPv6 address from the Apple router using DHCP. With this setup I had no problem reaching IPv6.google.com.
I've now asked for a Sixxs tunnel, and got these specifications in return:
-------
Tunnel Id : T38397
PoP Name : nlams05 (nl.surfnet [AS1103])
TIC Server : tic.sixxs.net (which is the default in AICCU)
Your Location : Groningen, nl
SixXS IPv6 : 2001:610:600:747::1/64
Your IPv6 : 2001:610:600:747::2/64
SixXS IPv4 : 192.87.102.107
Tunnel Type : Dynamic (heartbeat)
-------
The IPv4 address I get from my ISP is in principle dynamic, although it doesn't change very often.
With this specification I set up the Apple Airport as follows:
IPv6 mode: tunnel
Block incoming IPv6 connections: checked
Configure IPv6: Manually
Remote IPv4 address: 192.87.102.107
WAN IPv6 address: 2001:610:600:747::2
IPv6 route: 2001:610:600:747::1
IPv6 LAN address: blank (no subnet address yet)
I've also made the following IPv6 firewall entry:
Description: Tunnel Public Interface
IPv6 address: 2001:610:600:747::2/64
Allow all services and ports: checked
I used the AICCU utility to enable the tunnel, but it told me I had to check the "Behind NAT" box, and I did.
My LAN interface now shows this information:
Ethernet adapter Local Area Connection:
Connection-specific DNS Suffix . : groni1.gr.home.nl
Description . . . . . . . . . . . : Realtek PCIe GBE Family Controller
Physical Address. . . . . . . . . : 00-03-0D-82-CC-CE
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . : fe80::11a:6dcd:aa8f:9172%8(Preferred)
IPv4 Address. . . . . . . . . . . : 192.168.11.100(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Lease Obtained. . . . . . . . . . : 23 August 2010 23:27:37
Lease Expires . . . . . . . . . . : 24 August 2010 19:27:40
Default Gateway . . . . . . . . . : 192.168.11.1
DHCP Server . . . . . . . . . . . : 192.168.11.1
DHCPv6 IAID . . . . . . . . . . . : 201327373
DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-0F-85-7F-A6-00-03-0D-82-CC-CE
DNS Servers . . . . . . . . . . . : 192.168.11.1
NetBIOS over Tcpip. . . . . . . . : Enabled
Vista has the latest patches, and the Airport has firmware revision 7.4.2.
However so far no luck reaching IPv6.google.com. I'm a bit lost now, and don't know what to do to resolve the problem. If someone can help me out, I would be very happy.
Trouble setting up a SIXXS tunnel with Apple Airport Extreme
Tunnel Type : Dynamic (heartbeat)
I am quite sure that Airport's do not support the <i>heartbeat</i> protocol (they don't support AYIYA either unfortunately). As such you will have to <b>use a static tunnel</b> OR you have to setup a different host which can send the heartbeats for you (which is a bit silly).
I used the AICCU utility to enable the tunnel, but it told me I had to check the "Behind NAT" box, and I did.
I assume that you are trying to run AICCU on the host behind it. In that case you will have to disable the tunnel on the Airport. And most likely you will have to use an AYIYA tunnel to that host, indeed then the Airport won't be terminating the tunnel.
Trouble setting up a SIXXS tunnel with Apple Airport Extreme
Shadow Hawkins on Tuesday, 24 August 2010 16:33:35
OK, then I will try to change the tunnel to a static one.
I already gathered that I should not be using the AICCU utility on my PC, but the AICCU utility is needed to enable the tunnel. So it should (in theory) be running on the Apple router, and that is not possible.
Trouble setting up a SIXXS tunnel with Apple Airport Extreme
Shadow Hawkins on Tuesday, 24 August 2010 17:27:57
I changed the tunnel type to static, but no luck. The tunnel is static, enabled, but not working. I now wonder whether or not an Apple Airport can be used as endpoint for a SIXXS tunnel.
Trouble setting up a SIXXS tunnel with Apple Airport Extreme
"no luck" and "it does not work" is not very useful if you don't post any details about what does not work of course.
The PoP side of the tunnel is up:
64 bytes from 2001:610:600:747::1: icmp_seq=1 ttl=59 time=2.60 ms
Your side of the tunnel replies with:
19:00:30.038484 IP 94.212.59.226 > 192.87.102.107: ICMP host 94.212.59.226 unreachable - admin prohibited filter, length 36
0x0000: 4520 0038 7dab 0000 f701 8480 5ed4 3be2 E..8}.......^.;.
0x0010: c057 666b 030d 6278 0000 0000 4500 007c .Wfk..bx....E..|
0x0020: 0000 4000 3929 7fe0 c057 666b 5ed4 3be2 ..@.9)...Wfk^.;.
0x0030: 6000 0000 0040 3a3a `....@::
As such you'll have to configure your airport correctly before it will work...
Block incoming IPv6 connections: checked
Maybe that has to do something with it?
Trouble setting up a SIXXS tunnel with Apple Airport Extreme
Shadow Hawkins on Tuesday, 24 August 2010 20:00:58
What I was trying to say is that the change to static has no visible effect. I still can't reach ipv6.google.com.
I don't think the "Block incoming IPv6 connections" has something to do with this problem. That setting was also active when I used the automatic tunnel setting on the Apple router, and then I got a connection to ipv6.google.com.
There is not very much to configure or to see on an Apple router. It's typical Apple, just a very few configuration items, no CLI interface, no loggings etc.
It's a good fast router, and the automatic 6to4 tunnel worked in one try.
Trouble setting up a SIXXS tunnel with Apple Airport Extreme
I still can't reach ipv6.google.com.
I assume you are trying this from your PC and not the Airport. As the PC doesn't get an address from the airport as there is no subnet configured on it, indeed you won't be able to reach it.
That setting was also active when I used the automatic tunnel setting on the Apple router, and then I got a connection to ipv6.google.com.
Could be, I don't know how the Airport defines certain things. The reason why you could reach it is because 'automatic' means 6to4 and thus from your public IPv4 address you are given a 2002:<ipv4>:<ipv4>::/48 and thus you have a subnet and thus your PC can get an address from that.
As for Apple, well, they either make something that works or they leave it out because they don't take the time to properly test it. Best place to complain is on the Apple IPv6 list which has several great Apple folks on it, but unfortunately they can't get everything done that they would like to have.
Trouble setting up a SIXXS tunnel with Apple Airport Extreme
Shadow Hawkins on Tuesday, 24 August 2010 21:08:43I assume you are trying this from your PC and not the Airport. As the PC doesn't get an address from the airport as there is no subnet configured on it, indeed you won't be able to reach it.
That makes sense. But I can't apply for a subnet yet.
So if I understand this correctly, when I ask for a tunnel the first time, it can work with a normal host as endpoint. However, if I want to use a IPv6 capable router as end point, I can't get a working tunnel since I can't get a subnet at this time and the router needs a real IPv6 network address on the LAN side.
Trouble setting up a SIXXS tunnel with Apple Airport Extreme
![[us]](/s/countries/us.gif) Shadow Hawkins on Monday, 06 September 2010 17:37:37
I've done a static tunnel with a subnet behind on an Airport Extreme -- it was extremely stable; set and forget.
If you don't have a subnet, you could just set up the router to connect to the tunnel and let it run a few weeks until you earn enough credits for a subnet. (You have no real IPv6 connectivity in the meanwhile and, of course, if your ISP DHCP isn't as 'static' as you think, you'll never get there.)
Alternatively, you might setting your workstation as the DMZ host (e.g. forwarding all traffic/port to it) and run AICCU to connect to the tunnel. If this works, you'll have IPv6 connectivity on that one host until you earn enough points.
Trouble setting up a SIXXS tunnel with Apple Airport Extreme
Shadow Hawkins on Friday, 27 August 2010 12:26:51
I've gone back to my previous automatic 6to4 setup. As you can see there is one hop less in the 6to4 route, en both endpoints are at surfnet:
tracert 192.88.99.1 (6to4 gateway)
Tracing route to 192.88.99.1 over a maximum of 30 hops
1 <1 ms <1 ms <1 ms router [192.168.11.1]
2 5 ms 5 ms 5 ms 10.203.64.1
3 35 ms 5 ms 6 ms gn-rc0002-cr102-irb-202.core.as9143.net [213.51.133.241]
4 8 ms 9 ms 9 ms asd-tr0409-cr101-ae2-0.core.as9143.net [213.51.158.16]
5 8 ms 9 ms 9 ms asd-tr0409-ds101-po2.core.as9143.net [213.51.158.157]
6 9 ms 9 ms 9 ms private-surfnet-as1103.core.as9143.net [213.51.156.22]
7 9 ms 9 ms 12 ms AE2.500.JNR01.Asd001A.surf.net [145.145.80.78]
8 10 ms 9 ms 9 ms V1131.sw4.amsterdam1.surf.net [145.145.19.170]
9 10 ms 9 ms 9 ms 192.88.99.1
Trace complete.
tracert 192.87.102.107
Tracing route to sixxs.surfnet.nl [192.87.102.107]
over a maximum of 30 hops:
1 <1 ms <1 ms <1 ms router [192.168.11.1]
2 5 ms 5 ms 6 ms 10.203.64.1
3 25 ms 5 ms 55 ms gn-rc0002-cr101-irb-201.core.as9143.net [213.51.133.225]
4 10 ms 10 ms 11 ms zl-rc0001-cr102-ae2-0.core.as9143.net [213.51.158.87]
5 31 ms 24 ms 24 ms asd-tr0409-cr101-ae3-0.core.as9143.net [213.51.158.146]
6 11 ms 11 ms 9 ms asd-tr0409-ds101-po2.core.as9143.net [213.51.158.157]
7 17 ms 10 ms 11 ms private-surfnet-as1103.core.as9143.net [213.51.156.22]
8 10 ms 11 ms 12 ms AE2.500.JNR01.Asd001A.surf.net [145.145.80.78]
9 10 ms 11 ms 11 ms V1131.sw4.amsterdam1.surf.net [145.145.19.170]
10 10 ms 11 ms 12 ms sixxs.surfnet.nl [192.87.102.107]
Trace complete.
I now also have an IPv6 network address on my LAN:
Ethernet adapter Local Area Connection:
Connection-specific DNS Suffix . : groni1.gr.home.nl
Description . . . . . . . . . . . : Realtek PCIe GBE Family Controller
Physical Address. . . . . . . . . : 00-03-0D-82-CC-CE
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IPv6 Address. . . . . . . . . . . : 2002:5ed4:3be2:0:11a:6dcd:aa8f:9172(Preferred)
Temporary IPv6 Address. . . . . . : 2002:5ed4:3be2:0:c9a8:1eea:3ed5:faa3(Preferred)
Link-local IPv6 Address . . . . . : fe80::11a:6dcd:aa8f:9172%8(Preferred)
IPv4 Address. . . . . . . . . . . : 192.168.11.100(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Lease Obtained. . . . . . . . . . : 23 August 2010 23:27:37
Lease Expires . . . . . . . . . . : 25 August 2010 13:27:44
Default Gateway . . . . . . . . . : fe80::224:36ff:fe9e:27ad%8
192.168.11.1
DHCP Server . . . . . . . . . . . : 192.168.11.1
DNS Servers . . . . . . . . . . . : 192.168.11.1
NetBIOS over Tcpip. . . . . . . . : Enabled
I will now try to find a kind of DYNdns solution for my IPv6 network.
Trouble setting up a SIXXS tunnel with Apple Airport Extreme
![[ca]](/s/countries/ca.gif) Shadow Hawkins on Wednesday, 06 October 2010 16:43:49
Are you using DHCP or PPPoE to connect to your provider?
If you are using PPPoE, then you have two choices native or 6to4. There is a bug in the tunnel setup if you are using PPPoE, which prevents it from working. This issue has been in place for at least two years and I don't even know if this has been addressed in the new Apple Airport Extreme routers.
Trouble setting up a SIXXS tunnel with Apple Airport Extreme
I have been told that there are at least 4 hardware revisions of Apple Airport Extreme, depending on how new it is certain firmware upgrades have certain features that work and others that don't.
Apparently one will have to buy the newest one to get all the features that Apple actually promises to one..... way to go Apple...
|
![[ch]](/s/countries/ch.gif)
on Tuesday, 24 August 2010 16:01:25
Posting is only allowed when you are