Subnet Problem
Carmen Sandiego on Monday, 12 September 2011 12:15:04
My tunnel is up and works fine. I can ping from the router all IPv6 hosts.
On the router is installed and configured radvd program, is also activated forrward, still on the computers on your local network ipv6 does not work.
I can ping the gateway (router) and PoP IPv6 from local network.
Network does not work behind the POP form subnet addres.
Config
Debian 6.0.2
ifconfig
eth1 Link encap:Ethernet HWaddr 1c:c1:de:02:7b:57
inet addr:192.168.1.100 Bcast:192.168.1.255 Mask:255.255.255.0
inet6 addr: 2001:6a0:304::1/64 Scope:Global
inet6 addr: fe80::1ec1:deff:fe02:7b57/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:45871 errors:0 dropped:0 overruns:0 frame:0
TX packets:69742 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:5419500 (5.1 MiB) TX bytes:81392360 (77.6 MiB)
Memory:fbee0000-fbf00000
sixxs Link encap:IPv6-in-IPv4
inet6 addr: fe80::530e:983a/64 Scope:Link
inet6 addr: 2001:6a0:200:29c::2/64 Scope:Global
inet6 addr: fe80::c0a8:164/64 Scope:Link
UP POINTOPOINT RUNNING NOARP MTU:1280 Metric:1
RX packets:44 errors:0 dropped:0 overruns:0 frame:0
TX packets:53 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:4416 (4.3 KiB) TX bytes:5232 (5.1 KiB)
/etc/network/interfaces
iface eth1 inet static
address 192.168.1.100
netmask 255.255.255.0
broadcast 192.168.1.255
iface eth1 inet6 static
address 2001:6a0:304::1
netmask 64
up ip route add 2001:6a0:304::/64 dev eth1
iface sixxs inet6 v4tunnel
address 2001:6a0:200:29c::2
netmask 64
endpoint 193.219.28.26
ttl 64
up ip link set mtu 1280 dev sixxs
up ip route add default via 2001:6a0:200:29c::1 dev sixxs
Routing
2001:6a0:200:29c::/64 via :: dev sixxs proto kernel metric 256 mtu 1280 advmss 1220 hoplimit 4294967295
2001:6a0:304::/64 dev eth1 metric 1024 mtu 1500 advmss 1440 hoplimit 4294967295
fe80::/64 dev eth1 proto kernel metric 256 mtu 1500 advmss 1440 hoplimit 4294967295
fe80::/64 via :: dev sixxs proto kernel metric 256 mtu 1280 advmss 1220 hoplimit 4294967295
fe80::/64 dev eth0 proto kernel metric 256 mtu 1500 advmss 1440 hoplimit 4294967295
ff00::/8 dev eth1 metric 256 mtu 1500 advmss 1440 hoplimit 4294967295
ff00::/8 dev sixxs metric 256 mtu 1280 advmss 1220 hoplimit 4294967295
ff00::/8 dev eth0 metric 256 mtu 1500 advmss 1440 hoplimit 4294967295
default via 2001:6a0:200:29c::1 dev sixxs metric 1024 mtu 1280 advmss 1220 hoplimit 4294967295
/etc/radvd.conf
interface eth1
{
AdvSendAdvert on;
prefix 2001:6a0:304::/64
{
AdvOnLink on;
AdvAutonomous on;
AdvRouterAddr on;
};
};
Testing]
Ping from router external host
root@mpwik-debian:~# ping6 sixxs.net
PING sixxs.net(gatey.sixxs.net) 56 data bytes
64 bytes from gatey.sixxs.net: icmp_seq=1 ttl=55 time=48.9 ms
64 bytes from gatey.sixxs.net: icmp_seq=2 ttl=55 time=49.8 ms
^C
--- sixxs.net ping statistics ---
2 packets transmitted, 2 received, 0% packet loss, time 1002ms
rtt min/avg/max/mdev = 48.926/49.374/49.822/0.448 ms
Traceroute from router external host
traceroute to sixxs.net (2001:838:2:1::30:67), 30 hops max, 80 byte packets
1 gw-669.waw-01.pl.sixxs.net (2001:6a0:200:29c::1) 13.139 ms 16.378 ms 19.825 ms
2 kp-mm-r3.rtr.net.icm.edu.pl (2001:6a0:1:1::1) 20.023 ms 20.900 ms 22.877 ms
3 2001:b10:c000:204::1 (2001:b10:c000:204::1) 30.757 ms 31.712 ms 34.417 ms
4 dk-ore2.nordu.net (2001:948:2:a::1) 51.896 ms 53.632 ms 55.263 ms
5 dk-ore.nordu.net (2001:948:1:6::2) 57.212 ms 59.165 ms 61.119 ms
6 dk-uni.nordu.net (2001:948:1:4::3) 64.820 ms 33.877 ms 89.189 ms
7 nl-sar.nordu.net (2001:948:1:7::2) 90.970 ms 91.434 ms 91.662 ms
8 ams-ix.ipv6.concepts.nl (2001:7f8:1::a501:2871:1) 95.001 ms 95.352 ms 95.822 ms
9 2001:838:5:a::2 (2001:838:5:a::2) 159.892 ms 58.490 ms 60.448 ms
10 gatey.sixxs.net (2001:838:2:1::30:67) 62.404 ms 64.701 ms 66.607 ms
Ping from subnet external host
C:\Documents and Settings\dt4>ping6 sixxs.net
Badanie sixxs.net [2001:838:2:1::30:67]
z 2001:6a0:304:0:89f4:49b7:f1c9:1af4 z uyciem 32 bajtw danych:
Odpowied z 2001:6a0:200:29c::1: Port docelowy jest nieosigalny.
Odpowied z 2001:6a0:200:29c::1: Port docelowy jest nieosigalny.
Odpowied z 2001:6a0:200:29c::1: Port docelowy jest nieosigalny. (The destination port is unreachable.)
Statystyka badania dla 2001:838:2:1::30:67:
Pakiety: Wysane = 3, Odebrane = 0, Utracone = 3 (100% utraconych),
Traceroute from subnet external host
C:\Documents and Settings\dt4>tracert sixxs.net
Trasa ledzenia do sixxs.net [2001:838:2:1::30:67]
przewysza maksymaln liczb przeskokw 30
1 <1 ms <1 ms <1 ms 2001:6a0:304::1
2 13 ms 12 ms 12 ms gw-669.waw-01.pl.sixxs.net [2001:6a0:200:29c::1]
3 Protok docelowy jest nieosigalny. (Destination Protocol Unreachable.)
Ping from subnet POP
Badanie 2001:6a0:200:29c::1
z 2001:6a0:304:0:89f4:49b7:f1c9:1af4 z uyciem 32 bajtw danych:
Odpowied z 2001:6a0:200:29c::1: bajtw=32 czas=13 ms
Odpowied z 2001:6a0:200:29c::1: bajtw=32 czas=12 ms
Odpowied z 2001:6a0:200:29c::1: bajtw=32 czas=13 ms
Statystyka badania dla 2001:6a0:200:29c::1:
Pakiety: Wysane = 3, Odebrane = 3, Utracone = 0 (0% utraconych),
Szacunkowy czas bdzenia pakietw w millisekundach:
Minimum = 12 ms, Maksimum = 13 ms, rednia = 12 ms
Control-C
Traceroute from subnet POP
C:\Documents and Settings\dt4>tracert 2001:6a0:200:29c::1
Trasa ledzenia do gw-669.waw-01.pl.sixxs.net [2001:6a0:200:29c::1]
przewysza maksymaln liczb przeskokw 30
1 <1 ms <1 ms <1 ms 2001:6a0:304::1
2 12 ms 14 ms 12 ms gw-669.waw-01.pl.sixxs.net [2001:6a0:200:29c::1]
ledzenie zakoczone.
Forwarding is ON
Subnet Problem
Shadow Hawkins on Wednesday, 14 September 2011 20:56:38
It's kind of "same here":
1. I'm also using plwaw1.
2. I'm using aiccu (on dd-wrt).
3. Aiccu starts OK:
root@acrouter:~# aiccu start /jffs/etc/aiccu.conf
sock_getline() : "200 SixXS TIC Service on nlhaa01.sixxs.net ready (http://www.sixxs.net)"
sock_printf() : "client TIC/draft-00 AICCU/2007.01.15-console-linux Linux/2.4.37"
sock_getline() : "200 Client Identity accepted"
sock_printf() : "get unixtime"
sock_getline() : "200 1316025720"
sock_printf() : "username SA8026-RIPE"
sock_getline() : "200 SA8026-RIPE choose your authentication challenge please"
sock_printf() : "challenge md5"
sock_getline() : "200 84f6dc7daa0380c1d6e3e057e3abaf50"
sock_printf() : "authenticate md5 07018a3aae174f80d8c3f069bd051554"
sock_getline() : "200 Successfully logged in using md5 as SA8026-RIPE (Szymon Acedanski)"
sock_printf() : "tunnel show T75542"
sock_getline() : "201 Showing tunnel information for T75542"
sock_getline() : "TunnelId: T75542"
sock_getline() : "Type: ayiya"
sock_getline() : "IPv6 Endpoint: 2001:6a0:200:2a9::2"
sock_getline() : "IPv6 POP: 2001:6a0:200:2a9::1"
sock_getline() : "IPv6 PrefixLength: 64"
sock_getline() : "Tunnel MTU: 1280"
sock_getline() : "Tunnel Name: acrouter"
sock_getline() : "POP Id: plwaw01"
sock_getline() : "IPv4 Endpoint: ayiya"
sock_getline() : "IPv4 POP: 193.219.28.26"
sock_getline() : "UserState: enabled"
sock_getline() : "AdminState: enabled"
sock_getline() : "Password: 0d2729b13929667e2dcc15ba01a99908"
sock_getline() : "Heartbeat_Interval: 60"
sock_getline() : "202 Done"
Succesfully retrieved tunnel information for T75542
sock_printf() : "QUIT Nothing Comes Easy"
Tunnel Information for T75542:
POP Id : plwaw01
IPv6 Local : 2001:6a0:200:2a9::2/64
IPv6 Remote : 2001:6a0:200:2a9::1/64
Tunnel Type : ayiya
Adminstate : enabled
Userstate : enabled
[AYIYA-start] : Anything in Anything (draft-02)
[AYIYA-tun->tundev] : (Socket to TUN) started
4. IPv6 ping from the router works:
root@acrouter:~# ping6 sixxs.net
PING sixxs.net(2620:0:6b0:a:250:56ff:fe99:78f7) 56 data bytes
64 bytes from 2620:0:6b0:a:250:56ff:fe99:78f7: icmp_seq=1 time=338 ms
64 bytes from 2620:0:6b0:a:250:56ff:fe99:78f7: icmp_seq=2 time=338 ms
64 bytes from 2620:0:6b0:a:250:56ff:fe99:78f7: icmp_seq=3 time=335 ms
--- sixxs.net ping statistics ---
3 packets transmitted, 3 received, 0% packet loss, time 2020ms
rtt min/avg/max/mdev = 335.511/337.450/338.529/1.453 ms
5. Radvd is active and seems ok. The bridge interface has a single /64 subnet configured:
root@acrouter:~# ip -6 a
1: lo: <LOOPBACK,MULTICAST,UP>
inet6 ::1/128 scope host
3: eth0: <BROADCAST,MULTICAST,PROMISC,UP>
inet6 fe80::218:39ff:fed4:184e/64 scope link
4: eth1: <BROADCAST,MULTICAST,PROMISC,UP>
inet6 fe80::218:39ff:fed4:1850/64 scope link
5: vlan0: <BROADCAST,MULTICAST,PROMISC,UP>
inet6 fe80::218:39ff:fed4:184e/64 scope link
6: vlan1: <BROADCAST,MULTICAST,UP>
inet6 fe80::218:39ff:fed4:184f/64 scope link
7: br0: <BROADCAST,MULTICAST,PROMISC,UP>
inet6 2001:6a0:306::1/64 scope global
inet6 fe80::218:39ff:fed4:184e/64 scope link
22: sixxs: <POINTOPOINT,MULTICAST,NOARP,UP>
inet6 fe80::4a0:200:2a9:2/64 scope link
inet6 2001:6a0:200:2a9::2/64 scope global
6. From a host in the network I can ping the router and the PoP address:
accek@acksiazeczka Desktop $ ping6 2001:6a0:200:2a9::1
PING6(56=40+8+8 bytes) 2001:6a0:306::adfb:6850:274c:12ed --> 2001:6a0:200:2a9::1
16 bytes from 2001:6a0:200:2a9::1, icmp_seq=0 hlim=63 time=197.152 ms
16 bytes from 2001:6a0:200:2a9::1, icmp_seq=1 hlim=63 time=194.946 ms
16 bytes from 2001:6a0:200:2a9::1, icmp_seq=2 hlim=63 time=195.618 ms
^C
--- 2001:6a0:200:2a9::1 ping6 statistics ---
3 packets transmitted, 3 packets received, 0.0% packet loss
round-trip min/avg/max/std-dev = 194.946/195.905/197.152/0.923 ms
7. But not sixxs.net and others:
accek@acksiazeczka Desktop $ ping6 sixxs.net
PING6(56=40+8+8 bytes) 2001:6a0:306::adfb:6850:274c:12ed --> 2001:838:2:1::30:67
^C
--- sixxs.net ping6 statistics ---
19 packets transmitted, 0 packets received, 100.0% packet loss
It looks like the PoP end responds with ICMP Unreachable:
accek@acksiazeczka ~ $ traceroute6 sixxs.net
traceroute6: Warning: sixxs.net has multiple addresses; using 2001:838:2:1::30:67
traceroute6 to sixxs.net (2001:838:2:1::30:67) from 2001:6a0:306::8cdb:a706:6c7b:f4b6, 64 hops max, 12 byte packets
1 2001:6a0:306::1 3.902 ms !N 1.321 ms !N 1.826 ms !N
root@acrouter:~# tcpdump -n -i sixxs
tcpdump: WARNING: arptype 65534 not supported by libpcap - falling back to cooked socket
tcpdump: WARNING: sixxs: no IPv4 address assigned
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on sixxs, link-type LINUX_SLL (Linux cooked), capture size 96 bytes
18:55:38.806930 IP6 2001:6a0:306:0:adfb:6850:274c:12ed > 2001:838:2:1::30:67: ICMP6, echo request, seq 0, length 16
18:55:39.000108 IP6 2001:6a0:200:2a9::1 > 2001:6a0:306:0:adfb:6850:274c:12ed: ICMP6, destination unreachable[|icmp6]
18:55:39.811016 IP6 2001:6a0:306:0:adfb:6850:274c:12ed > 2001:838:2:1::30:67: ICMP6, echo request, seq 1, length 16
18:55:40.002728 IP6 2001:6a0:200:2a9::1 > 2001:6a0:306:0:adfb:6850:274c:12ed: ICMP6, destination unreachable[|icmp6]
Posting is only allowed when you are logged in. |