|
Subnet not working
![[gb]](/s/countries/gb.gif) Shadow Hawkins on Monday, 24 March 2008 00:11:24
[ADMIN NOTE: When you have a problem and want it resolved: File a ticket, don't try and guess what the system is doing and or how it works. That doesn't resolve things, it only will result in maybe working things just because the system works differently from what you expect. eg, that the PoPs only sync once in a while, and not directly when you press the button.]
Hello
I'm trying to setup up a subnet but I've got two problems. The first is that no traffic from the subnet gets routed over the tunnel. I can do ping6 www.sixxs.net and that works ok but when I try to ping6 www.sixxs.net from a laptop on my lan it doesn't work.
The second problem I have is that I've set radvd up as per the instructions at http://www.sixxs.net/faq/connectivity/?faq=usingsubnet&os=linux.router but my laptop on the lan get's an IPV6 address in the subnet but the default route is the local link address of the router not the address on subnet.
I've tried adding an address to the tunnel using ip -6 addr add 2001:4bd0:2001:0:20c:41ff:fe8f:b7e2/128 dev sixxs since I read it was recommended to have a ipv6 address on the subnet assigned to the tunnel but as soon as I do this all ipv6 traffic stops from both my end of the tunnel and the internet. I've checked that forwarding is enabled using cat /proc/sys/net/ipv6/conf/all/forwarding and that comes back as 1.
I'm starting ipv6 using aiccu start and the ipv6 addresses applied to the ethernet are 2001:4bd0:2001:0:20c:41ff:fe8f:b7e2/64 Scope:Global and fe80::20c:41ff:fe8f:b7e2/64 Scope:Link
On the laptop the default route is via fe80::20c:41ff:fe8f:b7e2/64, I've tried changing the route to via 2001:4bd0:2001:0:20c:41ff:fe8f:b7e2/64 and I can then ping the ethernet ipv6 address and also my end of the tunnel. Nothing the other end.
This is the output from ip -6 route
2001:4bd0:2000:3d::/64 via :: dev sixxs metric 256 expires -1356sec mtu 1280 5
2001:4bd0:2001::/64 dev eth0 metric 256 expires -1292sec mtu 1500 advmss 14405
2001:4bd0:2001::/64 dev br0 metric 256 expires -1279sec mtu 1500 advmss 1440 5
2001:4bd0:2001::/64 dev ixp0 metric 256 expires -1273sec mtu 1500 advmss 14405
2001:4bd0:2001::/64 dev ixp0.1 metric 256 expires -1267sec mtu 1500 advmss 145
2001:4bd0:2001::/64 dev ixp0.2 metric 256 expires -1258sec mtu 1500 advmss 145
fe80::/64 dev eth0 metric 256 expires -24598sec mtu 1500 advmss 1220 hoplimit5
fe80::/64 dev ixp0 metric 256 expires -24594sec mtu 1500 advmss 1220 hoplimit5
fe80::/64 dev ixp0.1 metric 256 expires -24594sec mtu 1500 advmss 1220 hoplim5
fe80::/64 dev ixp0.2 metric 256 expires -24594sec mtu 1500 advmss 1220 hoplim5
fe80::/64 dev br0 metric 256 expires -24594sec mtu 1500 advmss 1220 hoplimit 5
fe80::/64 dev ixp1 metric 256 expires -24593sec mtu 1500 advmss 1220 hoplimit5
fe80::/64 via :: dev sixxs metric 256 expires -1356sec mtu 1280 advmss 1220 h5
ff00::/8 dev eth0 metric 256 expires -24598sec mtu 1500 advmss 1220 hoplimit 5
ff00::/8 dev ixp0 metric 256 expires -24594sec mtu 1500 advmss 1220 hoplimit 5
ff00::/8 dev ixp0.1 metric 256 expires -24594sec mtu 1500 advmss 1220 hoplimi5
ff00::/8 dev ixp0.2 metric 256 expires -24594sec mtu 1500 advmss 1220 hoplimi5
ff00::/8 dev br0 metric 256 expires -24594sec mtu 1500 advmss 1220 hoplimit 45
ff00::/8 dev ixp1 metric 256 expires -24593sec mtu 1500 advmss 1220 hoplimit 5
ff00::/8 dev sixxs metric 256 expires -1356sec mtu 1280 advmss 1220 hoplimit 5
default via 2001:4bd0:2000:3d::1 dev sixxs metric 1024 expires -1356sec mtu 15
Any ideas?
Subnet not working
Shadow Hawkins on Thursday, 20 April 2006 20:58:46
I've tried tried a few things first was to set up my wireless and ethernet on separate subnets and I can send traffic between wireless and ethernet. So routing is working on the router.
I've also tried enabling my firewall with ACCEPT on everything except traffic from the sixxs tunnel and rules to permit pings to cross from sixxs over the router. I've also tried loging all traffic from my pc's and I'm seeing something strange here it is:
First is the result of doing ping6 www.sixxs.net from the router (which works)
Apr 20 19:30:23 (none) user.info kernel: 6wall:net2all:ACCEPT:IN=sixxs OUT= MAC=[snipe] TUNNEL=85.116.5.101->82.46.37.135 SRC=2001:0838:0001:0001:0210:dcff:fe20:7c7c DST=2001:4bd0:2000:003d:0000:0000:0000:0002 LEN=104 TC=0 HOPLIMIT=58 FLOWLBL=0 PROTO=ICMPv6 TYPE=129 CODE=0 ID=371 SEQ=0
Apr 20 19:30:24 (none) user.info kernel: 6wall:net2all:ACCEPT:IN=sixxs OUT= MAC=[snipe] LEN=104 TC=0 HOPLIMIT=58 FLOWLBL=0 PROTO=ICMPv6 TYPE=129 CODE=0 ID=371 SEQ=1
Apr 20 19:30:25 (none) user.info kernel: 6wall:net2all:ACCEPT:IN=sixxs OUT= MAC=[snipe] TUNNEL=85.116.5.101->82.46.37.135 SRC=2001:0838:0001:0001:0210:dcff:fe20:7c7c DST=2001:4bd0:2000:003d:0000:0000:0000:0002 LEN=104 TC=0 HOPLIMIT=58 FLOWLBL=0 PROTO=ICMPv6 TYPE=129 CODE=0 ID=371 SEQ=2
Then ping -6 www.sixxs.net from a pc (which doesn't)
Apr 20 19:32:23 (none) user.info kernel: 6wall:lan2fw:ACCEPT:IN=br0 OUT= MAC=[snipe] SRC=fe80:0000:0000:0000:0201:6cff:fe33:5227 DST=2001:4bd0:2001:0000:0200:41ff:fe8f:b7e2 LEN=72 TC=0 HOPLIMIT=255 FLOWLBL=0 PROTO=ICMPv6 TYPE=135 CODE=0
Apr 20 19:32:28 (none) user.info kernel: 6wall:lan2fw:ACCEPT:IN=br0 OUT= MAC=[snipe] SRC=fe80:0000:0000:0000:0201:6cff:fe33:5227 DST=fe80:0000:0000:0000:020c:41ff:fe8f:b7e2 LEN=72 TC=0 HOPLIMIT=255 FLOWLBL=0 PROTO=ICMPv6 TYPE=136 CODE=0
Then tracert -6 www.sixxs.net from the pc (Which finds a route to the router but that's it)
Apr 20 19:34:30 (none) user.info kernel: 6wall:lan2fw:ACCEPT:IN=br0 OUT= MAC=[snipe] SRC=2001:4bd0:2001:0000:30ba:30c0:4d00:f75d DST=2001:4bd0:2001:0000:0200:41ff:fe8f:b7e2 LEN=72 TC=0 HOPLIMIT=255 FLOWLBL=0 PROTO=ICMPv6 TYPE=136 CODE=0
Apr 20 19:34:34 (none) user.info kernel: 6wall:lan2fw:ACCEPT:IN=br0 OUT= MAC=[snipe] SRC=fe80:0000:0000:0000:0201:6cff:fe33:5227 DST=2001:4bd0:2001:0000:0200:41ff:fe8f:b7e2 LEN=72 TC=0 HOPLIMIT=255 FLOWLBL=0 PROTO=ICMPv6 TYPE=135 CODE=0
Apr 20 19:34:39 (none) user.info kernel: 6wall:lan2fw:ACCEPT:IN=br0 OUT= MAC=[snipe] SRC=fe80:0000:0000:0000:0201:6cff:fe33:5227 DST=fe80:0000:0000:0000:020c:41ff:fe8f:b7e2 LEN=72 TC=0 HOPLIMIT=255 FLOWLBL=0 PROTO=ICMPv6 TYPE=136 CODE=0
ipconfig for my lan connection is:
Ethernet adapter Local Area Connection:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Realtek RTL8169/8110 Family Gigabit Ethernet NIC
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.1.10
Subnet Mask . . . . . . . . . . . : 255.255.255.0
IP Address. . . . . . . . . . . . : 10.102.206.10
Subnet Mask . . . . . . . . . . . : 255.255.255.0
IP Address. . . . . . . . . . . . : 2001:4bd0:2001:0:30ba:30c0:4d00:f75d
IP Address. . . . . . . . . . . . : 2001:4bd0:2001:0:201:6cff:fe33:5227
IP Address. . . . . . . . . . . . : fe80::201:6cff:fe33:5227%6
Default Gateway . . . . . . . . . : 10.102.206.1
2001:4bd0:2001:0:200:41ff:fe8f:b7e2
DNS Servers . . . . . . . . . . . : 10.102.206.1
fec0:0:0:ffff::1%1
fec0:0:0:ffff::2%1
fec0:0:0:ffff::3%1
The route from the pc is as follows
Querying active state...
Publish Type Met Prefix Idx Gateway/Interface Name
------- -------- ---- ------------------------ --- ---------------------
no Manual 0 2001:4bd0:2001::/64 6 Local Area Connection
no Manual 0 ::/0 6 2001:4bd0:2001:0:200:41ff:fe8f:b7e2
I notice that during the tracert on the pc the router responded ok but after that nothing and also looking in the firewall logs I noticed that the source address on the pc changed from the subnet 2001:4bd0:2001::/64 to the link level one. Does anybody know how I can set all pc's on my net to use a ipv6 source address in the subnet provided instead of the fe80 one ?
Subnet not working
![[nl]](/s/countries/nl.gif) Shadow Hawkins on Saturday, 22 April 2006 13:54:20On the laptop the default route is via fe80::20c:41ff:fe8f:b7e2/64, I've tried changing the route to via 2001:4bd0:2001:0:20c:41ff:fe8f:b7e2/64 and I can then ping the ethernet ipv6 address and also my end of the tunnel. Nothing the other end.
This should not be a problem. If your router is advertising itself properly then your PC should learn the proper path without any problem.
I've tried adding an address to the tunnel using ip -6 addr add 2001:4bd0:2001:0:20c:41ff:fe8f:b7e2/128 dev sixxs since I read it was recommended to have a ipv6 address on the subnet assigned to the tunnel but as soon as I do this all ipv6 traffic stops from both my end of the tunnel and the internet. I've checked that forwarding is enabled using cat /proc/sys/net/ipv6/conf/all/forwarding and that comes back as 1.
You should NOT use a /128 prefix length! The link is using a /64 prefix length.
Subnet not working
Shadow Hawkins on Saturday, 22 April 2006 14:05:11
Ohh. What OS is on your laptop exactly?
How did you verify IPv6 routing between your wireless network and your LAN?
Can you make a full drawing? As I seem to be missing various bits and pieces like the LAN IPv6 address of your 'router'. (Not shown in the IPv6 routing table!)
AFAICR you are bridging your LAN and wireless which is quite unlike routing IPv6 traffic.
Subnet not working
Shadow Hawkins on Saturday, 22 April 2006 23:31:11You should NOT use a /128 prefix length! The link is using a /64 prefix length I take it what people mean when they recommend adding a subnet address to the tunnel is "ip -6 addr add 2001:4bd0:2001::1/64 dev sixxs" ?
I tried this and as soon as I did traffic stopped on both directions of the tunnel, couldn't ping6 www.sixxs.net from the router and I couldn't ping6 from the internet.
When using "ip -6 addr del 2001:4bd0:2001::1/128 dev sixxs" I could still ping www.sixxs.net.
I've followed the suguestion on these forums and setup the link manually instead of using aiccu and added the subnet address first and then my end point ip6 address and I can then ping www.sixxs.net but trying to ping6 the subnet address I've added to the sixxs tunnel from the internet fails. I'm wondering if the subnet is actually getting routed from the PoP correctly?
Ohh. What OS is on your laptop exactly?
The laptop runs Windows XP as well as my PC
How did you verify IPv6 routing between your wireless network and your LAN?
Can you make a full drawing? As I seem to be missing various bits and pieces like the LAN IPv6 address of your 'router'. (Not shown in the IPv6 routing table!)
AFAICR you are bridging your LAN and wireless which is quite unlike routing IPv6 traffic
Sorry for the confusion the router I have has four ports which each run on a vlan and these are what's bridged. I've changed my setup slightly so that the router uses ::1 of each subnet, the setup is now as follows
Internet <--- sixxs ---> Router <--- eth0 ---> Laptop (eth0 = wireless)
...................................^
...................................| (br0 , bridge of four ethernet ports)
................................-------
................................^ ^ ^ ^ (vlans ipx0.1, ipx0.2 ..)
................................| | | |
...............................PC
The address tunnel address is 2001:4bd0:2000:3d::2/64
The subnet assigned is 2001:4bd0:2001/48 of which I've assigned to the following ports:
Wireless subnet 2001:4bd0:2001:1::/64 and ip6 address assigned to eth0 is 2001:4bd0:2001:1::1
ip -6 show addr eth0 =
ip -6 addr show dev eth0
8: eth0: <BROADCAST,MULTICAST,UP> mtu 1500 qlen 1000
inet6 2001:4bd0:2001:1::1/64 scope global
valid_lft forever preferred_lft forever
inet6 fe80::20c:41ff:fe8f:b7e0/64 scope link
valid_lft forever preferred_lft forever
The bridge of four ethernet ports br0 I've assigned 2001:4bd0:2001::/64 with ip6
address 2001:4bd0:2001::1
ip -6 addr show dev br0
13: br0: <BROADCAST,MULTICAST,UP> mtu 1500
inet6 2001:4bd0:2001::1/64 scope global
valid_lft forever preferred_lft forever
inet6 fe80::20c:41ff:fe8f:b7e2/64 scope link
valid_lft forever preferred_lft forever
I'm still having a few problems with radvd I've tried using the settings in the FAQ interface eth1
{
AdvSendAdvert on;
prefix [IPv6 Prefix]/64
{
};
};
and tried settings derived from a example in a ipv6 howto
interface br0
{
AdvSendAdvert on;
prefix 2001:4bd0:2001:0::/64
{
AdvOnLink on;
AdvAutonomous on;
};
};
interface eth0
{
AdvSendAdvert on;
prefix 2001:4bd0:2001:1::/64
{
AdvOnLink on;
AdvAutonomous on;
};
};
But the PC's always get the local-link address of the gateway fe80::20c:41ff:fe8f:b7e2/64 on br0 and not it's subnet ip 2001:4bd0:2001::1/64
What I get on the pc when doing netsh int ipv6 show route is:
Querying active state...
Publish Type Met Prefix Idx Gateway/Interface Name
------- -------- ---- ------------------------ --- ---------------------
no Autoconf 256 ::/0 7 fe80::20c:41ff:fe8f:b7e2
no Autoconf 8 2001:4bd0:2001::/64 7 Local Area Connection
I've tried taking the ::/0 7 fe80::20c... entry out disabling radvd and replacing it so the entry reads
"no Manual 256 ::/0 7 2001:4bd0:2001::1"
On the laptop I've got a similar setup but with:
Publish Type Met Prefix Idx Gateway/Interface Name
------- -------- ---- ------------------------ --- ---------------------
no Autoconf 256 ::/0 6 fe80::20c:41ff:fe8f:b7e0
no Autoconf 8 2001:4bd0:2001:1::/64 6 Local Area Connection
like wise I replaced the ::/0 entry so it read
"no Manual 256 ::/0 6 2001:4bd0:2001:1::1"
Address on the PC is:
Interface 9: Local Area Connection
Unicast Address : 2001:4bd0:2001:0:201:6cff:fe33:5227
Type : Public
DAD State : Preferred
Valid lifetime : 29d23h58m55s
Preferred lifetime: 6d23h58m55s
Scope : Global
Prefix Origin : Router Advertisement
Suffix Origin : Link-Layer Address
Unicast Address : fe80::201:6cff:fe33:5227
Type : Link
DAD State : Preferred
Valid lifetime : infinite
Preferred lifetime: infinite
Scope : Link
Prefix Origin : Well-known
Suffix Origin : Link-Layer Address
Whereas on the laptop I have:
Interface 7: Local Area Connection
Unicast Address : 2001:4bd0:2001:1:206:25ff:fe42:7e84
Type : Public
DAD State : Preferred
Valid lifetime : 29d23h59m21s
Preferred lifetime: 6d23h59m21s
Scope : Global
Prefix Origin : Router Advertisement
Suffix Origin : Link-Layer Address
Unicast Address : fe80::206:25ff:fe42:7e84
Type : Link
DAD State : Preferred
Valid lifetime : infinite
Preferred lifetime: infinite
Scope : Link
Prefix Origin : Well-known
Suffix Origin : Link-Layer Address
Now I can ping6 2001:4bd0:2001:0:201:6cff:fe33:5227 from 2001:4bd0:2001:1:206:25ff:fe42:7e84 and 2001:4bd0:2001:1:206:25ff:fe42:7e84 from 2001:4bd0:2001:0:201:6cff:fe33:5227
But I can't ping www.sixxs.net from either although I can ping www.sixxs.net from the router but that isn't using the subnet.
I take it the 2001:4bd0:2001:0 and 2001:4bd0:2001:1 subnets are being routed since their assigned to separete interfaces. I've noticed that when pinging a host on the subnet the source address from the pc is 2001:4bd0:2001:0:201:6cff:fe33:5227 whereas when pinging www.sixxs.net it changes to fe80::206:25ff:fe42:7e84 now surely a fe80 address can't be forwarded over the sixxs tunnel!
Subnet not working
Shadow Hawkins on Sunday, 23 April 2006 12:03:55
Followup I'm not sure how correct this is but I've read that IPV6 does all communication between the router and host via the routers local-link only.
In case this was correct I've manually added a default route to fe80::/64 via the network connection and just kept the routes that were set up by autoconf, my routing table on the pc now shows up as:
Querying active state...
Publish Type Met Prefix Idx Gateway/Interface Name
------- -------- ---- ------------------------ --- ---------------------
no Manual 0 fe80::/64 6 Local Area Connection
no Autoconf 8 2001:4bd0:2001::/64 6 Local Area Connection
no Autoconf 256 ::/0 6 fe80::20c:41ff:fe8f:b7e2
After this modification I can now see in my logs traffic being sent to the sixxs tunnel with a source address of my pc's subnet address. Although there's still nothing coming back!
Now I've checked ifconfig on the router and I can see that when I do ping6 www.sixxs.net on a pc the number of transmitted packets increase but the number of received packets stay the same.
If I traceroute6 my endpoint from a website on the internet the number of packets increases whereas if I traceroute6 a host on the subnet the number of packets received on the sixxs tunnel doesn't increase and the traceroute6 fails upto my POP.
So is the problem at the POP ? It does have a route to send traffic for the subnet either over the tunnel or via the end point? Or is there something I need to setup at this end like ripngd, reverse dns or ospf6d so that the POP knows it can route 2001:4bd0:2001::/48 over the tunnel?
Subnet not working
Shadow Hawkins on Monday, 24 March 2008 00:12:39
[ADMIN EDIT: "solution" removed as it is a non solution which is just a side effect of PoPs actually being configured after a while and not directly when people think it is configured]
Subnet not working
![[us]](/s/countries/us.gif) Shadow Hawkins on Monday, 24 March 2008 00:13:26
[ADMIN EDIT: post removed as it misinforms]
Subnet not working
When you have a problem with the PoP, report the problem by reading the contact page and filing a ticket.
The above is probably simply caused by the mere fact of time, the PoP configurations don't get updated in realtime, thus disabling/enabling the tunnel doesn't have any effect at all.
|
![[ch]](/s/countries/ch.gif)
on Monday, 24 March 2008 00:05:14
Posting is only allowed when you are