aiccu on netbsd mipsel
Shadow Hawkins on Thursday, 09 March 2006 14:31:50
Hi,
I just switched my internet gateway from a Intel machine running linux
to a mipsel machine running netbsd (with a self compiled kernel).
On the Linux box aiccu worked fine. After putting the netbsd
box in place aiccu does not work any more. I enabled ipv6 and routing
and the gif devices. However aiccu does not start automatically on
bootup and when started manually I cannot ping any ipv6 host outside
of my lan. I have ntpd running, the time is correct, I also
have some pf rules for the ipv6 traffic (I tried with quick pass all
already, but no change).
What seems strange to me is that the default route for ipv6 is pointing
at the pop gateway but on the lo0 interface.
Any ideas?
Thanks
Jeremias
Some information on my config:
ifconfig -a
tlp0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
address: 00:10:e0:00:a3:f5
media: Ethernet autoselect (100baseTX full-duplex)
status: active
inet 192.168.0.254 netmask 0xffffff00 broadcast 192.168.0.255
inet6 fe80::210:e0ff:fe00:a3f5%tlp0 prefixlen 64 scopeid 0x1
inet6 2001:6f8:1331:1::1 prefixlen 64
tlp1: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
address: 00:10:e0:00:a3:f3
media: Ethernet autoselect (100baseTX full-duplex)
status: active
inet6 fe80::210:e0ff:fe00:a3f3%tlp1 prefixlen 64 scopeid 0x2
lo0: flags=8009<UP,LOOPBACK,MULTICAST> mtu 33192
inet 127.0.0.1 netmask 0xff000000
inet6 ::1 prefixlen 128
inet6 fe80::1%lo0 prefixlen 64 scopeid 0x3
pflog0: flags=141<UP,RUNNING,PROMISC> mtu 33192
pppoe0: flags=8851<UP,POINTOPOINT,RUNNING,SIMPLEX,MULTICAST> mtu 1492
inet X.X.X.X -> 217.0.116.49 netmask 0xff000000
inet6 fe80::210:e0ff:fe00:a3f5%pppoe0 -> prefixlen 64 scopeid 0x5
gif0: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 1280
tunnel inet 84.167.159.91 --> 212.224.0.188
inet6 fe80::210:e0ff:fe00:a3f5%gif0 -> prefixlen 64 scopeid 0x6
inet6 2001:6f8:900:430::2 -> prefixlen 128
part of my routingtable:
Internet6:
Destination Gateway Flags Refs Use Mtu Interface
::/104 ::1 UGRS 0 0 - lo0 =>
::/96 ::1 UGRS 0 0 - lo0 =>
default 2001:6f8:900:430::1 UGS 0 0 - lo0
::1 ::1 UH 12 0 33192 lo0
::127.0.0.0/104 ::1 UGRS 0 0 - lo0
::224.0.0.0/100 ::1 UGRS 0 0 - lo0
::255.0.0.0/104 ::1 UGRS 0 0 - lo0
::ffff:0.0.0.0/96 ::1 UGRS 0 0 - lo0
2001:6f8:900:430::1 2001:6f8:900:430::2 UGHS 1 0 - gif0
2001:6f8:900:430::2 link#6 UHL 1 0 - lo0
part of my pf.conf:
pass in on $ext_if proto 41 all
pass out on $ext_if proto 41 all
my aiccu.conf:
# AICCU Configuration
# Login information
username NOONEKNOWS
password TOTALLYSECRET
# Interface names to use
ipv4_interface pppoe0
ipv6_interface gif0
# The tunnel_id to use
# (only required when there are multiple tunnels in the list)
tunnel_id SECRETASWELL
# Be verbose?
verbose true
# Daemonize?
daemonize true
# Automatic?
automatic true
aiccu autotest:
aiccu autotest
Tunnel Information for T5528:
POP Id : deham01
IPv6 Local : 2001:6f8:900:430::2/64
IPv6 Remote : 2001:6f8:900:430::1/64
Tunnel Type : 6in4-heartbeat
Adminstate : enabled
Userstate : enabled
#######
####### AICCU Quick Connectivity Test
#######
####### [1/8] Ping the IPv4 Local/Your Outer Endpoint (84.167.159.91)
### This should return so called 'echo replies'
### If it doesn't then check your firewall settings
### Your local endpoint should always be pingable
### It could also indicate problems with your IPv4 stack
PING p54A79F5B.dip0.t-ipconnect.de (84.167.159.91): 56 data bytes
64 bytes from 84.167.159.91: icmp_seq=0 ttl=254 time=104.684 ms
64 bytes from 84.167.159.91: icmp_seq=1 ttl=254 time=102.171 ms
64 bytes from 84.167.159.91: icmp_seq=2 ttl=254 time=104.189 ms
----p54A79F5B.dip0.t-ipconnect.de PING Statistics----
3 packets transmitted, 3 packets received, 0.0% packet loss
round-trip min/avg/max/stddev = 102.171/103.681/104.684/1.331 ms
######
####### [2/8] Ping the IPv4 Remote/POP Outer Endpoint (212.224.0.188)
### These pings should reach the POP and come back to you
### In case there are problems along the route between your
### host and the POP this could not return replies
### Check your firewall settings if problems occur
PING deham01.sixxs.net (212.224.0.188): 56 data bytes
64 bytes from 212.224.0.188: icmp_seq=0 ttl=59 time=61.543 ms
64 bytes from 212.224.0.188: icmp_seq=1 ttl=59 time=61.794 ms
64 bytes from 212.224.0.188: icmp_seq=2 ttl=59 time=61.872 ms
----deham01.sixxs.net PING Statistics----
3 packets transmitted, 3 packets received, 0.0% packet loss
round-trip min/avg/max/stddev = 61.543/61.736/61.872/0.172 ms
######
####### [3/8] Traceroute to the POP (212.224.0.188) over IPv4
### This traceroute should reach the POP
### In case this traceroute fails then you have no connectivity
### to the POP and this is most probably the problem
traceroute to 212.224.0.188 (212.224.0.188), 64 hops max, 40 byte packets
1 217.0.116.49 (217.0.116.49) 92.757 ms 79.886 ms 49.753 ms
2 217.0.67.106 (217.0.67.106) 47.154 ms 48.939 ms 50.706 ms
3 f-eb5.F.DE.net.DTAG.DE (62.154.17.58) 48.208 ms 50.255 ms 50.006 ms
4 62.156.139.226 (62.156.139.226) 48.287 ms 96.950 ms 51.340 ms
5 ge0-1-0-0.br0.ixfra.de.easynet.net (194.64.253.113) 51.323 ms 48.768 ms 51.639 ms
6 ge0-3-0-0.br1.isham.de.easynet.net (212.224.4.97) 59.104 ms 60.343 ms 61.762 ms
7 vl40.as0-r0.isham.de.easynet.net (212.224.4.225) 58.026 ms 59.467 ms 58.556 ms
8 deham01.sixxs.net (212.224.0.188) 58.938 ms 59.222 ms 58.464 ms
######
###### [4/8] Checking if we can ping IPv6 localhost (::1)
### This confirms if your IPv6 is working
### If ::1 doesn't reply then something is wrong with your IPv6 stack
PING6(56=40+8+8 bytes) ::1 --> ::1
16 bytes from ::1: Echo Request
16 bytes from ::1, icmp_seq=0 hlim=64 dst=::1%3 time=4.732 ms
16 bytes from ::1: Echo Request
16 bytes from ::1, icmp_seq=1 hlim=64 dst=::1%3 time=4.069 ms
16 bytes from ::1: Echo Request
16 bytes from ::1, icmp_seq=2 hlim=64 dst=::1%3 time=4.076 ms
--- ::1 ping6 statistics ---
3 packets transmitted, 3 packets received, 0.0% packet loss
round-trip min/avg/max/std-dev = 4.069/4.292/4.732/0.311 ms
######
###### [5/8] Ping the IPv6 Local/Your Inner Tunnel Endpoint (2001:6f8:900:430::2)
### This confirms that your tunnel is configured
### If it doesn't reply then check your interface and routing tables
PING6(56=40+8+8 bytes) 2001:6f8:900:430::2 --> 2001:6f8:900:430::2
16 bytes from 2001:6f8:900:430::2: Echo Request
16 bytes from 2001:6f8:900:430::2, icmp_seq=0 hlim=64 dst=2001:6f8:900:430::2%3 time=4.843 ms
16 bytes from 2001:6f8:900:430::2: Echo Request
16 bytes from 2001:6f8:900:430::2, icmp_seq=1 hlim=64 dst=2001:6f8:900:430::2%3 time=4.1 ms
64 bytes from 2001:6f8:900:430::1: Echo Request
16 bytes from 2001:6f8:900:430::2: Echo Request
16 bytes from 2001:6f8:900:430::2, icmp_seq=2 hlim=64 dst=2001:6f8:900:430::2%3 time=4.127 ms
--- 2001:6f8:900:430::2 ping6 statistics ---
3 packets transmitted, 3 packets received, 0.0% packet loss
round-trip min/avg/max/std-dev = 4.100/4.357/4.843/0.344 ms
######
###### [6/8] Ping the IPv6 Remote/POP Inner Tunnel Endpoint (2001:6f8:900:430::1)
### This confirms the reachability of the other side of the tunnel
### If it doesn't reply then check your interface and routing tables
### Don't forget to check your firewall of course
### If the previous test was succesful then this could be both
### a firewalling and a routing/interface problem
PING6(56=40+8+8 bytes) 2001:6f8:900:430::2 --> 2001:6f8:900:430::1
16 bytes from 2001:6f8:900:430::1, icmp_seq=0 hlim=64 dst=2001:6f8:900:430::2%6 time=62.79 ms
16 bytes from 2001:6f8:900:430::1, icmp_seq=1 hlim=64 dst=2001:6f8:900:430::2%6 time=63.234 ms
16 bytes from 2001:6f8:900:430::1, icmp_seq=2 hlim=64 dst=2001:6f8:900:430::2%6 time=61.068 ms
--- 2001:6f8:900:430::1 ping6 statistics ---
3 packets transmitted, 3 packets received, 0.0% packet loss
round-trip min/avg/max/std-dev = 61.068/62.364/63.234/0.934 ms
######
###### [7/8] Traceroute6 to the central SixXS machine (noc.sixxs.net)
### This confirms that you can reach the central machine of SixXS
### If that one is reachable you should be able to reach most IPv6 destinations
### Also check http://www.sixxs.net/ipv6calc/ which should show an IPv6 connection
### If your browser supports IPv6 and uses it of course.
traceroute6 to noc.sixxs.net (2001:838:1:1:210:dcff:fe20:7c7c) from 2001:6f8:1331:1::1, 64 hops max, 12 byte packets
1 2001:6f8:1331:1::1 1.994 ms 1.417 ms 1.946 ms
2 2001:6f8:1331:1::1 2.205 ms 2.356 ms 2.222 ms
3 2001:6f8:1331:1::1 2.371 ms 1.86 ms 2.461 ms
4 2001:6f8:1331:1::1 2.508 ms 2.721 ms 2.639 ms
5 2001:6f8:1331:1::1 2.72 ms 2.931 ms 2.823 ms
6 2001:6f8:1331:1::1 2.894 ms 2.994 ms 3.386 ms
7 2001:6f8:1331:1::1 3.077 ms 3.233 ms 3.177 ms
8 2001:6f8:1331:1::1 3.355 ms 3.344 ms 3.322 ms
9 2001:6f8:1331:1::1 3.497 ms 3.586 ms 3.554 ms
10 2001:6f8:1331:1::1 3.697 ms 3.686 ms 3.598 ms
11 2001:6f8:1331:1::1 3.663 ms 3.97 ms 3.991 ms
12 2001:6f8:1331:1::1 4.063 ms 4.107 ms 4.059 ms
13 2001:6f8:1331:1::1 4.227 ms 4.213 ms 4.139 ms
14 2001:6f8:1331:1::1 4.399 ms 4.473 ms 4.383 ms
15 2001:6f8:1331:1::1 4.585 ms 4.671 ms 4.392 ms
16 2001:6f8:1331:1::1 4.686 ms 4.876 ms 4.705 ms
17 2001:6f8:1331:1::1 4.852 ms 4.915 ms 4.799 ms
18 2001:6f8:1331:1::1 4.973 ms 5.163 ms 5.003 ms
19 2001:6f8:1331:1::1 5.134 ms 5.374 ms 5.174 ms
20 2001:6f8:1331:1::1 5.341 ms 5.41 ms 5.309 ms
21 2001:6f8:1331:1::1 4.895 ms 5.672 ms 5.565 ms
22 2001:6f8:1331:1::1 5.675 ms 5.762 ms 5.145 ms
23 2001:6f8:1331:1::1 5.212 ms 6.088 ms 5.877 ms
24 2001:6f8:1331:1::1 5.931 ms 6.119 ms 6.101 ms
25 2001:6f8:1331:1::1 6.186 ms 6.599 ms 6.235 ms
26 2001:6f8:1331:1::1 6.448 ms 6.612 ms 6.508 ms
27 2001:6f8:1331:1::1 6.652 ms 6.697 ms 6.543 ms
28 2001:6f8:1331:1::1 6.805 ms 7.009 ms 6.744 ms
29 2001:6f8:1331:1::1 6.936 ms 7.069 ms 7.119 ms
30 2001:6f8:1331:1::1 7.573 ms 7.298 ms 7.111 ms
31 2001:6f8:1331:1::1 7.371 ms 7.425 ms 7.332 ms
32 2001:6f8:1331:1::1 7.527 ms 7.57 ms 7.462 ms
33 2001:6f8:1331:1::1 10.731 ms 7.778 ms 7.666 ms
34 2001:6f8:1331:1::1 7.828 ms 7.938 ms 7.837 ms
35 2001:6f8:1331:1::1 8.105 ms 8.113 ms 8.061 ms
36 2001:6f8:1331:1::1 8.341 ms 8.302 ms 8.219 ms
37 2001:6f8:1331:1::1 8.389 ms 8.525 ms 8.368 ms
38 2001:6f8:1331:1::1 8.568 ms 8.671 ms 8.569 ms
39 2001:6f8:1331:1::1 8.746 ms 8.814 ms 8.715 ms
40 2001:6f8:1331:1::1 9.064 ms 8.993 ms 8.903 ms
41 2001:6f8:1331:1::1 9.059 ms 9.192 ms 9.069 ms
42 2001:6f8:1331:1::1 9.255 ms 9.441 ms 9.257 ms
43 2001:6f8:1331:1::1 9.491 ms 9.539 ms 9.489 ms
44 2001:6f8:1331:1::1 9.609 ms 9.712 ms 10.36 ms
45 2001:6f8:1331:1::1 9.522 ms 9.88 ms 12.9 ms
46 2001:6f8:1331:1::1 9.995 ms 10.175 ms 10.092 ms
47 2001:6f8:1331:1::1 10.187 ms 10.238 ms 10.27 ms
48 2001:6f8:1331:1::1 11.043 ms 10.803 ms 10.348 ms
49 2001:6f8:1331:1::1 9.72 ms 10.577 ms 11.302 ms
50 2001:6f8:1331:1::1 10.651 ms 10.785 ms 10.679 ms
51 2001:6f8:1331:1::1 13.905 ms 10.933 ms 10.865 ms
52 2001:6f8:1331:1::1 11.077 ms 11.103 ms 11.015 ms
53 2001:6f8:1331:1::1 12.06 ms 11.506 ms 11.435 ms
54 2001:6f8:1331:1::1 11.368 ms 11.479 ms 12.246 ms
55 2001:6f8:1331:1::1 11.563 ms 11.602 ms 11.509 ms
56 2001:6f8:1331:1::1 11.671 ms 11.881 ms 11.676 ms
57 2001:6f8:1331:1::1 11.992 ms 11.935 ms 11.863 ms
58 2001:6f8:1331:1::1 12.541 ms 12.266 ms 12.043 ms
59 2001:6f8:1331:1::1 12.346 ms 12.314 ms 12.994 ms
60 2001:6f8:1331:1::1 12.402 ms 12.561 ms 12.514 ms
61 2001:6f8:1331:1::1 12.536 ms 12.656 ms 12.787 ms
62 2001:6f8:1331:1::1 15.805 ms 12.873 ms 13.527 ms
63 2001:6f8:1331:1::1 12.926 ms 13.031 ms 12.961 ms
64 2001:6f8:1331:1::1 13.99 ms 13.176 ms 13.152 ms
######
###### [8/8] Traceroute6 to (www.kame.net)
### This confirms that you can reach a Japanese IPv6 destination
### If that one is reachable you should be able to reach most IPv6 destinations
### You should also check http://www.kame.net which should display
### a animated kame (turtle), of course only when your browser supports and uses IPv6
traceroute6 to www.kame.net (2001:200:0:8002:203:47ff:fea5:3085) from 2001:6f8:1331:1::1, 64 hops max, 12 byte packets
1 2001:6f8:1331:1::1 2.125 ms 2.025 ms 1.939 ms
< 2 2001:6f8:1331:1::1 2.201 ms 2.254 ms 2.217 ms
3 2001:6f8:1331:1::1 2.393 ms 2.506 ms 3.956 ms
4 2001:6f8:1331:1::1 2.629 ms 2.636 ms 2.614 ms
5 2001:6f8:1331:1::1 2.805 ms 2.82 ms 2.788 ms
6 2001:6f8:1331:1::1 2.885 ms 2.981 ms 2.997 ms
7 2001:6f8:1331:1::1 3.072 ms 3.173 ms 3.139 ms
8 2001:6f8:1331:1::1 3.401 ms 3.379 ms 6.426 ms
9 2001:6f8:1331:1::1 3.435 ms 3.492 ms 3.508 ms
10 2001:6f8:1331:1::1 4.676 ms 3.682 ms 3.797 ms
11 2001:6f8:1331:1::1 3.87 ms 3.856 ms 3.843 ms
12 2001:6f8:1331:1::1 4.059 ms 4.195 ms 4.029 ms
13 2001:6f8:1331:1::1 3.512 ms 4.365 ms 4.259 ms
14 2001:6f8:1331:1::1 4.373 ms 4.38 ms 4.527 ms
15 2001:6f8:1331:1::1 5.273 ms 4.579 ms 4.516 ms
16 2001:6f8:1331:1::1 4.752 ms 4.808 ms 4.634 ms
17 2001:6f8:1331:1::1 4.966 ms 5.107 ms 4.977 ms
18 2001:6f8:1331:1::1 5.033 ms 5.062 ms 5.17 ms
19 2001:6f8:1331:1::1 5.134 ms 5.247 ms 5.138 ms
20 2001:6f8:1331:1::1 4.643 ms 5.418 ms 5.574 ms
21 2001:6f8:1331:1::1 5.491 ms 5.592 ms 5.495 ms
22 2001:6f8:1331:1::1 5.009 ms 5.788 ms 5.958 ms
23 2001:6f8:1331:1::1 5.867 ms 5.945 ms 5.856 ms
24 2001:6f8:1331:1::1 6.027 ms 6.372 ms 6.044 ms
25 2001:6f8:1331:1::1 6.253 ms 6.312 ms 6.23 ms
26 2001:6f8:1331:1::1 6.408 ms 6.751 ms 6.397 ms
27 2001:6f8:1331:1::1 6.857 ms 6.954 ms 6.579 ms
28 2001:6f8:1331:1::1 7.093 ms 6.882 ms 6.746 ms
29 2001:6f8:1331:1::1 7.309 ms 7.392 ms 7.099 ms
30 2001:6f8:1331:1::1 7.191 ms 7.231 ms 7.469 ms
31 2001:6f8:1331:1::1 7.426 ms 7.464 ms 7.327 ms
32 2001:6f8:1331:1::1 7.608 ms 7.638 ms 7.6 ms
33 2001:6f8:1331:1::1 7.675 ms 7.793 ms 7.74 ms
34 2001:6f8:1331:1::1 7.881 ms 8.37 ms 7.959 ms
35 2001:6f8:1331:1::1 8.051 ms 8.935 ms 8.829 ms
36 2001:6f8:1331:1::1 8.267 ms 8.579 ms 8.425 ms
37 2001:6f8:1331:1::1 8.714 ms 12.08 ms 8.669 ms
38 2001:6f8:1331:1::1 7.841 ms 8.66 ms 8.578 ms
39 2001:6f8:1331:1::1 9.195 ms 8.869 ms 8.79 ms
40 2001:6f8:1331:1::1 8.93 ms 9.051 ms 8.992 ms
41 2001:6f8:1331:1::1 9.094 ms 9.662 ms 9.44 ms
42 2001:6f8:1331:1::1 9.203 ms 9.389 ms 9.718 ms
43 2001:6f8:1331:1::1 9.448 ms 9.497 ms 10.153 ms
44 2001:6f8:1331:1::1 9.542 ms 10.178 ms 9.9 ms
45 2001:6f8:1331:1::1 9.625 ms 9.85 ms 10.282 ms
46 2001:6f8:1331:1::1 9.102 ms 10.369 ms 9.973 ms
47 2001:6f8:1331:1::1 11.213 ms 10.584 ms 11.076 ms
48 2001:6f8:1331:1::1 11.096 ms 12.332 ms 10.25 ms
49 2001:6f8:1331:1::1 9.704 ms 13.651 ms 10.457 ms
50 2001:6f8:1331:1::1 10.69 ms 11.484 ms 10.702 ms
51 2001:6f8:1331:1::1 10.813 ms 12.855 ms 12.804 ms
52 2001:6f8:1331:1::1 15.892 ms 12.117 ms 11.912 ms
53 2001:6f8:1331:1::1 12.265 ms 12.285 ms 12.952 ms
54 2001:6f8:1331:1::1 12.594 ms 11.625 ms 11.602 ms
55 2001:6f8:1331:1::1 11.181 ms 11.741 ms 12.261 ms
56 2001:6f8:1331:1::1 11.822 ms 12.671 ms 12.017 ms
57 2001:6f8:1331:1::1 12.11 ms 12.262 ms 12.035 ms
58 2001:6f8:1331:1::1 12.329 ms 12.849 ms 12.543 ms
59 2001:6f8:1331:1::1 12.223 ms 12.479 ms 13.737 ms
60 2001:6f8:1331:1::1 12.581 ms 12.481 ms 12.415 ms
61 2001:6f8:1331:1::1 12.562 ms 12.699 ms 12.61 ms
62 2001:6f8:1331:1::1 13.015 ms 13.261 ms 13.522 ms
63 2001:6f8:1331:1::1 13.657 ms 13.018 ms 13.01 ms
64 2001:6f8:1331:1::1 13.844 ms 13.37 ms 16.334 ms
######
###### ACCU Quick Connectivity Test (done)
### Either the above all works and gives no problems
### or it shows you where what goes wrong
### Check the SixXS FAQ (http://www.sixxs.net/faq/
### for more information and possible solutions or hints
### Don't forget to check the Forums (http://www.sixxs.net/forum/)
### for a helping hand.
### Passing the output of 'aiccu autotest >aiccu.log' is a good idea.
aiccu on netbsd mipsel
Jeroen Massar on Thursday, 09 March 2006 14:50:32 What seems strange to me is that the default route for ipv6 is pointing at the pop gateway but on the lo0 interface.
Which is indeed causing the problem. Remove it and add it using the correct interface and all should be fine.
Also you might be interrested in reading the big orange section.
aiccu on netbsd mipsel
Shadow Hawkins on Thursday, 09 March 2006 16:36:53
Thanks for the fast response... I read the big yellow section,
but since I was not sure if my issue is such a case i just posted it here.
I deleted the route with the wrong interface and added one with the correct
interface (but i guess aiccu will create this
route again next time)..
I tried this before but it seems I made something wrong last time,
now everything is fine.
Regards
Jeremias
Posting is only allowed when you are logged in. |