Forum - Cannot connect to POP :: SixXS - IPv6 Deployment & Tunnel Broker

Cannot connect to POP

Shadow Hawkins on Wednesday, 01 February 2012 11:36:42

Hello, I have a Cisco 1841 configured as the tunnel endpoint. Since 3 days I do not have any connectivity. It was working for the past 2 - 3 months. The HB is sent from a Windows computer using AICCU. The tunnel is also UP. The config from the router is below.

ip cef ip name-server 8.8.8.8 ipv6 unicast-routing ipv6 cef ! ! interface Tunnel66 description IPv6 Link to OUTSIDE no ip address zone-member security OUTSIDE ipv6 address 2001:4DD0:FF00:C11::2/64 ipv6 enable ipv6 traffic-filter METER_ICMP in tunnel source Dialer1 tunnel mode ipv6ip tunnel destination 78.35.24.124 ! interface FastEthernet0/0 description Link to INSIDE ip address 192.168.1.250 255.255.255.0 ip nat inside ip virtual-reassembly in zone-member security INSIDE duplex auto speed auto ipv6 address 2001:4DD0:FF00:8C11::250/64 ipv6 nd prefix 2001:4DD0:FF00:8C11::/64 ! interface FastEthernet0/1 description Link to PPPoE Server no ip address duplex auto speed auto pppoe enable group global pppoe-client dial-pool-number 1 pppoe-client ppp-max-payload 1492 no keepalive no cdp enable ! interface Dialer1 description IPv4 Link to OUTSIDE mtu 1492 ip address negotiated no ip proxy-arp ip nbar protocol-discovery ip nat outside ip virtual-reassembly in zone-member security OUTSIDE encapsulation ppp ip tcp adjust-mss 1452 load-interval 60 dialer pool 1 dialer idle-timeout 0 dialer persistent ppp authentication chap pap callin ppp chap hostname 0 <deleted> ppp chap password 7 <deleted> no cdp enable service-policy output INT_D1 ! ipv6 route ::/0 Tunnel66 ! ! ! ipv6 access-list METER_ICMP sequence 20 permit icmp host 2001:4DD0:1234:3::42 host 2001:4DD0:FF00:C11::2 echo-request log sequence 100 permit ipv6 any any !

Cannot connect to POP

Jeroen Massar SixXS Staff

on Wednesday, 01 February 2012 13:01:33

The HB is sent from a Windows computer using AICCU.

The PoP states: Last Heartbeat : 2012-01-29 00:00:21 (1327795221; 3 days 11:55:49 ago) As such, it does not seem you are sending proper heartbeats, which the PoP also states: Clock Off : 5014, last: 85.180.103.68 2012-02-01 11:55:39 (1328097339; 0 days 00:00:31 ago) I guess you need to fix the time on your computer.

The tunnel is also UP.

Note that the state of 'up' is a bit of a misnomer as proto-41 tunnels don't have any real 'up' state. Interestingly you seem to be sending a lot of pings:

Latency Pkt Sent : 11347 Latency Pkt Recv : 62580 Latency Loss : -451.51

Which uncovers a little bug in the latency tester in sixxsd v4. I'll add that to the to-fix list. I'll have to add some content-check too instead of just counting the incoming ones, oops ;)

Cannot connect to POP

Shadow Hawkins on Wednesday, 01 February 2012 16:58:59

one more thing ... I cannot get my AYIYA tunnel up using AICCU from a windows 7 64bit platform. Is there anyway to get it working? Thanks again :)

Cannot connect to POP

Jeroen Massar SixXS Staff

on Wednesday, 01 February 2012 17:03:47

The newest binary (that is the one since December 2011) should work like a charm, just download the executable, install the tun/tap driver, edit the config file and that should be it.

Cannot connect to POP

Shadow Hawkins on Wednesday, 01 February 2012 20:33:39

yes I tried the AICCU windows client because it could be started as a service and it is still not working. with the console utility it only works with one tunnel adapter installed :( any other way to get it working in 64bit Win 7?

Cannot connect to POP

Jeroen Massar SixXS Staff

on Wednesday, 01 February 2012 23:03:26

As clearly stated on the AICCU page the GUI version does not work with newer tun/tap drivers and for sure does not work on Windows Seven either. You need to use the console edition. There is no 64bit edition of AICCU as that is not needed, Windows handles 32bit binaries on a 64bit platform perfectly fine.

Cannot connect to POP

Shadow Hawkins on Thursday, 02 February 2012 09:12:27

yes I'm happy to use the console edition, but it wont work if there are more then one tun adapter's installed. Is there any solution on this?

Cannot connect to POP

Jeroen Massar SixXS Staff

on Thursday, 02 February 2012 11:19:05

It will pick the adapter called 'aiccu' or whatever the ipv6_interface parameter in the config file is set to. But if you claim it does not work, please provide the full output of the program, especially after having set verbose to true.

Cannot connect to POP

Shadow Hawkins on Thursday, 02 February 2012 12:49:41

the below output is with 2 tunnel adapters installed

it works when i delete one tunnel adapter. Below is the output when it works

D:\>aiccu-2011-12-12-windows-console.exe start Trying to connect to TIC server tic.sixxs.net sock_getline() : "200 SixXS TIC Service on nlams04.sixxs.net ready (http://www.sixxs.net)" sock_printf() : "client TIC/draft-00 AICCU/2011.12.12-win32 - WinNT/6.1.7601-SP1" sock_getline() : "200 Client Identity accepted" sock_printf() : "get unixtime" sock_getline() : "200 1328182304" sock_printf() : "username SZP1-SIXXS" sock_getline() : "200 SZP1-SIXXS choose your authentication challenge please" sock_printf() : "challenge md5" sock_getline() : "200 a085f8b5b2b3a77dabd87bb8ca869193" sock_printf() : "authenticate md5 7d6ded977df44ed6f44bf3d932245c92" sock_getline() : "200 Successfully logged in using md5 as SZP1-SIXXS (Sooraj Zauner)" sock_printf() : "tunnel show T84546" sock_getline() : "201 Showing tunnel information for T84546" sock_getline() : "TunnelId: T84546" sock_getline() : "Type: ayiya" sock_getline() : "IPv6 Endpoint: 2001:4dd0:ff00:ce5::2" sock_getline() : "IPv6 POP: 2001:4dd0:ff00:ce5::1" sock_getline() : "IPv6 PrefixLength: 64" sock_getline() : "Tunnel MTU: 1280" sock_getline() : "Tunnel Name: Mobilev6" sock_getline() : "POP Id: decgn01" sock_getline() : "IPv4 Endpoint: ayiya" sock_getline() : "IPv4 POP: 78.35.24.124" sock_getline() : "UserState: enabled" sock_getline() : "AdminState: enabled" sock_getline() : "Password: removed" sock_getline() : "Heartbeat_Interval: 60" sock_getline() : "202 Done" Successfully retrieved tunnel information for T84546 sock_printf() : "QUIT None of this is real" Tunnel Information for T84546: PoP Id : decgn01 IPv6 Local : 2001:4dd0:ff00:ce5::2/64 IPv6 Remote : 2001:4dd0:ff00:ce5::1/64 Tunnel Type : ayiya Adminstate : enabled Userstate : enabled aiccu_setup(2001:4dd0:ff00:ce5::2, first) Flag: HAS_IFHEAD not present Flag: NEED_IFHEAD not present Error opening registry key: SYSTEM\CurrentControlSet\Control\Network\{4D36E972-E325-11CE-BFC1-08002BE10318}\SYSTEM\CurrentControlSet\Control\Network\{4D36E972-E325-11CE- 8002BE10318}\{C88D269E-8F84-43BA-9F4F-92341DD86645}\Connection\Name (p3) Using configured interface IPvSIX [tun-start] Trying \\.\Global\Descriptions.tap [tun-start] Trying \\.\Global\{29898C9D-B0A4-4FEF-BDB6-57A562022CEE}.tap [tun-start] Trying \\.\Global\{2CAA64ED-BAA3-4473-B637-DEC65A14C8AA}.tap [tun-start] Trying \\.\Global\{3955B03C-0094-43EB-BD6F-C1BF506F3636}.tap [tun-start] TAP-Win32 Driver Version 9.9 aiccu_setup(2001:4dd0:ff00:ce5::2, other) Flag: HAS_IFHEAD not present Flag: NEED_IFHEAD not present aiccu_os_exec("netsh int ipv6 6to4 set state disabled") Ok. aiccu_os_exec("netsh int ipv6 set teredo disable") Ok. aiccu_os_exec("netsh int ipv6 isatap set state state=disabled") Ok. aiccu_os_exec("netsh int ipv6 set subinterface "IPvSIX" mtu=1280") Ok. aiccu_os_exec("netsh int ipv6 add address "IPvSIX" 2001:4dd0:ff00:ce5::2") The object already exists. aiccu_os_exec("netsh int ipv6 add route 2001:4dd0:ff00:ce5::2/64 IPvSIX") The object already exists. aiccu_os_exec("netsh int ipv6 add route 0::/0 IPvSIX 2001:4dd0:ff00:ce5::1 publish=yes") The object already exists. aiccu_os_exec("netsh advfirewall firewall add rule name="AICCU: Allow incoming ICMPv6 echo request" protocol=icmpv6:8,any dir=in action=allow") Ok. [AYIYA-start] : Anything in Anything (draft-02) [AYIYA-tun->tundev] : (Socket to TUN) started

Cannot connect to POP

Jeroen Massar SixXS Staff

on Thursday, 02 February 2012 13:41:39

Note that it says in the second run:

Using configured interface IPvSIX

Rename that to 'aiccu' and then even with multiple adapters it can work. What you need to do is go to the Network control panel and there name one of the two 'aiccu'. Alternatively if you want to keep that name, just put:

ipv6_interface IPvSIX

in the aiccu.conf as then it will look for that name. I'll add a note in the output that the adapter called $ipv6_interface could not be found and that one has to name it that way for the next release.

Cannot connect to POP

Shadow Hawkins on Thursday, 02 February 2012 14:21:43

The effect is the same. Actually I had the ipv6_interface set to IPvSIX which was the same name for the adapter. now I commented that line from the config and changed the adapter name to aiccu. But the result is still the same. Below is the config

# Login information username SZP1-SIXXS password protocol tic server tic.sixxs.net # Interface names to use ipv6_interface IPvSIX # The tunnel_id to use # (only required when there are multiple tunnels in the list) tunnel_id T84546 # Try to automatically login and setup the tunnel? automatic true # Script to run after setting up the interfaces #setupscript <path> # No configuration, only beat? noconfigure false # TLS Required? requiretls false # Be verbose? verbose true # Daemonize? daemonize false # Behind a NAT? #behindnat false # Make heartbeats when the protocol needs it? makebeats true

Cannot connect to POP

Jeroen Massar SixXS Staff

on Thursday, 02 February 2012 19:44:33

Please try the just released AICCU 2012.02.02, that should resolve this issue.

Cannot connect to POP

Shadow Hawkins on Friday, 03 February 2012 10:26:15

PERFECT it worked!!! thanks again Jeroen

Cannot connect to POP

Shadow Hawkins on Wednesday, 01 February 2012 16:53:48

Thanks Jeroen, The system clock was 4 minutes slow .... and now I have connectivity! cheers :)

Please note Posting is only allowed when you are logged in.