Forum - AYIYA tunnel failing through WRT54G v6 router :: SixXS

AYIYA tunnel failing through WRT54G v6 router

Shadow Hawkins on Friday, 07 November 2008 00:55:56

I am having trouble getting my AYIYA tunnel up through my linksys router. I think I have tried most of the solutions out in the forums, and on the FAQs. I'm including a bunch of info that I've gathered so far below. Does anyone have more ideas for me about how to get this tunnel up? I have a linksys WRT54Gv6 with Firmware Version: v1.02.5, which is the latest version for v6. DMZ host is enabled and pointed at my internal tunnel endpoint although I don't believe this is necessary with an AYIYA tunnel My endpoint is a CentOS 4.6 server. I'm using aiccu to start the tunnel, the relevant info from my config is below:

username TNS1-SIXXS password Obfuscated ipv6_interface tun2 tunnel_id T9694 verbose true daemonize true automatic true requiretls false defaultroute true makebeats true behindnat true

I've opened tried opening my iptables to accept all traffic from the POP:

iptables -I RH-Firewall-1-INPUT -s usewr01.sixxs.net -j ACCEPT

I've confirmed my time is synchronized via NTP: syslog snippet from today:

Nov 6 09:28:46 lydia ntpd[6607]: synchronized to 129.6.15.28, stratum 1 Nov 6 09:45:50 lydia ntpd[6607]: synchronized to 192.43.244.18, stratum 1

[bold]aiccu autotest[/bold] output is below, but basically, everything up to test 6 is working. After test 6 (the tunnel itself) it's failing. AICCU AUTOTEST output If I do a tcpdump of all traffic to the POP ip address during the aiccu start and a ping6 to the ipv6 endpoint, this is what I see:

[root@lydia network-scripts]# tcpdump -vv -s 1500 -i eth0 port 5072 or host usewr01.sixxs.net tcpdump: listening on eth0, link-type EN10MB (Ethernet), capture size 1500 bytes 15:53:23.812541 IP (tos 0x0, ttl 64, id 62513, offset 0, flags [DF], proto 17, length: 120) lydia.local.is-design.com.51915 > usewr01.sixxs.net.5072: [bad udp cksum cdff!] UDP, length 92 15:53:23.826775 IP (tos 0x0, ttl 64, id 62514, offset 0, flags [DF], proto 17, length: 72) lydia.local.is-design.com.51915 > usewr01.sixxs.net.5072: [bad udp cksum 743e!] UDP, length 44 15:53:23.828205 IP (tos 0x0, ttl 64, id 62515, offset 0, flags [DF], proto 17, length: 72) lydia.local.is-design.com.51915 > usewr01.sixxs.net.5072: [bad udp cksum 743e!] UDP, length 44 15:53:23.828388 IP (tos 0x0, ttl 64, id 62516, offset 0, flags [DF], proto 17, length: 72) lydia.local.is-design.com.51915 > usewr01.sixxs.net.5072: [bad udp cksum 743e!] UDP, length 44 15:53:27.810940 IP (tos 0x0, ttl 64, id 62517, offset 0, flags [DF], proto 17, length: 120) lydia.local.is-design.com.51915 > usewr01.sixxs.net.5072: [bad udp cksum dc30!] UDP, length 92 15:53:31.810739 IP (tos 0x0, ttl 64, id 62518, offset 0, flags [DF], proto 17, length: 120) lydia.local.is-design.com.51915 > usewr01.sixxs.net.5072: [bad udp cksum 705!] UDP, length 92 15:53:36.480927 IP (tos 0x0, ttl 64, id 62519, offset 0, flags [DF], proto 17, length: 176) lydia.local.is-design.com.51915 > usewr01.sixxs.net.5072: [bad udp cksum b99c!] UDP, length 148 15:53:37.480624 IP (tos 0x0, ttl 64, id 62520, offset 0, flags [DF], proto 17, length: 176) lydia.local.is-design.com.51915 > usewr01.sixxs.net.5072: [bad udp cksum a0d0!] UDP, length 148 15:53:38.480577 IP (tos 0x0, ttl 64, id 62521, offset 0, flags [DF], proto 17, length: 176) lydia.local.is-design.com.51915 > usewr01.sixxs.net.5072: [bad udp cksum 9743!] UDP, length 148

AYIYA tunnel failing through WRT54G v6 router

Shadow Hawkins on Saturday, 08 November 2008 00:17:56

Today I tried configuring this tunnel on another linux box that has a public IP address. I was still unable to start the tunnel, and had the same symptoms (autotest worked correctly until trying to ping the remote ipv6 address). I'm thinking that I must have missed something in how to configure the AYIYA tunnel correctly. below is what the Tunnel info looks like on the website:

Tunnel Name Home PoP Name usewr01 PoP Location Newark, New Jersey, United States United States PoP IPv4 66.55.128.25 Your Location Poulsbo, United States United States Your IPv4 AYIYA, currently 69.34.217.130 IPv6 Prefix 2001:4830:1200:3d::1/64 PoP IPv6 2001:4830:1200:3d::1 Your IPv6 2001:4830:1200:3d::2 Created 2006-09-01 04:30:10 CET State AYIYA (automatically enabled on the fly)

and this is the output of aiccu start

Tunnel Information for T9694: POP Id : usewr01 IPv6 Local : 2001:4830:1200:3d::2/64 IPv6 Remote : 2001:4830:1200:3d::1/64 Tunnel Type : ayiya Adminstate : enabled Userstate : enabled

AYIYA tunnel failing through WRT54G v6 router

Jeroen Massar SixXS Staff

on Monday, 10 November 2008 09:52:03

AYIYA doesn't require the DMZ option, but enabling it should not hurt. Check that your WRT allows through the traffic. Actually, why don't you install X-WRT on the WRT, that way you have AICCU on the WRT and you can terminate your tunnel from there.

Please note Posting is only allowed when you are logged in.