Ticket ID: SIXXS #864270 Ticket Status: User PoP: ittrn01 - ITgate (Torino)
no ipv6 connectivity
Shadow Hawkins on Wednesday, 26 November 2008 10:14:45
I've setupped a new static tunnel but I can't receive any traffic.
The same problem applies using aiuccu or a static interface in /etc/network/interface
Running aiuccu test fails tests 6,7,8
AICCU version:
aiccu 20070115-7 from Ubuntu 8.04.1
NIC handle ACE1-SIXXS, TUNNEL T18225, PoP ittrn01
This host is on a datacenter. It has pubblic ipv4 62.149.212.61
Linux linusse.org 2.6.24-21-xen #1 SMP Wed Oct 22 02:11:27 UTC 2008 i686 GNU/Linux
INTERFACES:
aiccu Link encap:IPv6-in-IPv4
inet6 addr: 2001:1418:100:2b7::2/64 Scope:Global
inet6 addr: fe80::3e95:d43d/128 Scope:Link
UP POINTOPOINT RUNNING NOARP MTU:1280 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:24 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:0 (0.0 B) TX bytes:10536 (10.2 KB)
eth0 Link encap:Ethernet HWaddr 00:22:15:d9:15:7e
inet addr:62.149.212.61 Bcast:62.149.223.255 Mask:255.255.224.0
inet6 addr: fe80::222:15ff:fed9:157e/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:4102479 errors:0 dropped:3715471720 overruns:0 frame:0
TX packets:52089 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:329684633 (314.4 MB) TX bytes:33398336 (31.8 MB)
Interrupt:16 Base address:0x2000
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:133423 errors:0 dropped:0 overruns:0 frame:0
TX packets:133423 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:18089194 (17.2 MB) TX bytes:18089194 (17.2 MB)
vif3.0 Link encap:Ethernet HWaddr fe:ff:ff:ff:ff:ff
inet addr:10.0.0.128 Bcast:0.0.0.0 Mask:255.255.255.255
inet6 addr: fe80::fcff:ffff:feff:ffff/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:117 errors:0 dropped:0 overruns:0 frame:0
TX packets:127 errors:0 dropped:5 overruns:0 carrier:0
collisions:0 txqueuelen:32
RX bytes:94150 (91.9 KB) TX bytes:23374 (22.8 KB)
# route -n
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
10.0.0.1 0.0.0.0 255.255.255.255 UH 0 0 0 vif3.0
62.149.192.0 0.0.0.0 255.255.224.0 U 0 0 0 eth0
0.0.0.0 62.149.192.1 0.0.0.0 UG 100 0 0 eth0
# route -n -6
Kernel IPv6 routing table
Destination Next Hop Flag Met Ref Use If
::1/128 :: Un 0 1 636 lo
2001:1418:100:2b7::2/128 :: Un 0 1 0 lo
2001:1418:100:2b7::/64 :: Un 256 0 26 aiccu
fe80::3e95:d43d/128 :: Un 0 1 0 lo
fe80::222:15ff:fed9:157e/128 :: Un 0 1 0 lo
fe80::fcff:ffff:feff:ffff/128 :: Un 0 1 0 lo
fe80::/64 :: U 256 0 0 eth0
fe80::/64 :: U 256 0 0 vif3.0
fe80::/64 :: Un 256 0 0 aiccu
ff00::/8 :: U 256 0 0 eth0
ff00::/8 :: U 256 0 0 vif3.0
ff00::/8 :: U 256 0 0 aiccu
::/0 2001:1418:100:2b7::1 UG 1024 0 0 aiccu
::/0 :: !n -1 1 2 lo
# iptables -L -n -v
Chain INPUT (policy DROP 6223 packets, 750K bytes)
pkts bytes target prot opt in out source destination
2241 335K ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
28 1932 ACCEPT all -- !eth0 * 0.0.0.0/0 0.0.0.0/0 state NEW
0 0 ACCEPT icmp -- * * 0.0.0.0/0 62.149.212.61 icmp type 8 state NEW,RELATED,ESTABLISHED
0 0 ACCEPT 41 -- * * 213.254.12.34 0.0.0.0/0
0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22
1 64 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:80
5 320 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:443
0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:113
6 378 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:53
0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:53
Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
0 0 REJECT all -- eth0 eth0 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable
0 0 ACCEPT all -- * * 10.0.0.1 0.0.0.0/0 PHYSDEV match --physdev-in vif3.0
0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 PHYSDEV match --physdev-in vif3.0 udp spt:68 dpt:67
Chain OUTPUT (policy ACCEPT 2499 packets, 438K bytes)
pkts bytes target prot opt in out source destination
# ip6tables -L -n -v
Chain INPUT (policy DROP 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
0 0 DROP all * * ::/0 ::/0 rt type:0
6 624 ACCEPT all * * ::/0 ::/0 state RELATED,ESTABLISHED
3 312 ACCEPT all lo * ::1/128 ::/0
3 312 ACCEPT icmpv6 * * ::/0 ::/0
0 0 ACCEPT tcp * * ::/0 ::/0 tcp dpt:22
0 0 ACCEPT tcp * * ::/0 ::/0 tcp dpt:80
0 0 ACCEPT tcp * * ::/0 ::/0 tcp dpt:443
0 0 ACCEPT tcp * * ::/0 ::/0 tcp dpt:113
0 0 ACCEPT udp * * ::/0 ::/0 udp dpt:53
0 0 ACCEPT tcp * * ::/0 ::/0 tcp dpt:53
Chain FORWARD (policy DROP 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
0 0 DROP all * * ::/0 ::/0 rt type:0
Chain OUTPUT (policy ACCEPT 486 packets, 47584 bytes)
pkts bytes target prot opt in out source destination
0 0 DROP all * * ::/0 ::/0 rt type:0
# traceroute 213.254.12.34
traceroute to 213.254.12.34 (213.254.12.34), 30 hops max, 40 byte packets
1 host2-192-149-62.serverdedicati.aruba.it (62.149.192.2) 0.414 ms 0.532 ms 0.596 ms
2 12416PT.aruba.it (62.149.190.4) 0.527 ms * *
3 12416P1.aruba.it (62.149.190.3) 0.531 ms * *
4 itgate.mix-it.net (217.29.66.65) 7.825 ms 8.053 ms 8.154 ms
5 213.254.31.241 (213.254.31.241) 10.871 ms 10.754 ms 10.829 ms
6 if-0-0.charleston.CBQ.trn.itgate.net (213.254.0.13) 10.976 ms 10.631 ms 10.561 ms
7 frejus.ITgate.net (213.254.12.34) 11.190 ms 11.191 ms 11.227 ms
traceroute6 2001:1418:100:2b7::1
traceroute to 2001:1418:100:2b7::1 (2001:1418:100:2b7::1) from 2001:1418:100:2b7::2, 30 hops max, 16 byte packets
1 * * *
2 * * *
3 * * *
4 * * *
5 * * *
6 * * *
7 * * *
8 * * *
9 * * *
10 * * *
11 * * *
12 * * *
13 * * *
[cut]
30 * * *
root@linusse:~# tcpdump -i eth0 -n host 213.254.12.34
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on eth0, link-type EN10MB (Ethernet), capture size 96 bytes
10:09:42.141295 IP 62.149.212.61 > 213.254.12.34: IP6 2001:1418:100:2b7::2.36446 > 2001:1418:100:2b7::1.33434: UDP, length 16
10:09:47.141899 IP 62.149.212.61 > 213.254.12.34: IP6 2001:1418:100:2b7::2.36446 > 2001:1418:100:2b7::1.33434: UDP, length 16
10:09:52.142428 IP 62.149.212.61 > 213.254.12.34: IP6 2001:1418:100:2b7::2.36446 > 2001:1418:100:2b7::1.33434: UDP, length 16
10:09:57.143017 IP 62.149.212.61 > 213.254.12.34: IP6 2001:1418:100:2b7::2.36446 > 2001:1418:100:2b7::1.33434: UDP, length 16
10:10:02.143536 IP 62.149.212.61 > 213.254.12.34: IP6 2001:1418:100:2b7::2.36446 > 2001:1418:100:2b7::1.33434: UDP, length 16
10:10:07.144144 IP 62.149.212.61 > 213.254.12.34: IP6 2001:1418:100:2b7::2.36446 > 2001:1418:100:2b7::1.33434: UDP, length 16
6 packets captured
6 packets received by filter
0 packets dropped by kernel
root@linusse:~# tcpdump -i aiccu
tcpdump: WARNING: aiccu: no IPv4 address assigned
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on aiccu, link-type RAW (Raw IP), capture size 96 bytes
10:10:17.145289 IP6 cl-696.trn-01.it.sixxs.net.36446 > gw-696.trn-01.it.sixxs.net.33434: UDP, length 16
10:10:22.145828 IP6 cl-696.trn-01.it.sixxs.net.36446 > gw-696.trn-01.it.sixxs.net.33434: UDP, length 16
10:10:27.146403 IP6 cl-696.trn-01.it.sixxs.net.36446 > gw-696.trn-01.it.sixxs.net.33434: UDP, length 16
10:10:32.146950 IP6 cl-696.trn-01.it.sixxs.net.36446 > gw-696.trn-01.it.sixxs.net.33434: UDP, length 16
10:10:37.147522 IP6 cl-696.trn-01.it.sixxs.net.36446 > gw-696.trn-01.it.sixxs.net.33434: UDP, length 16
10:10:42.148130 IP6 cl-696.trn-01.it.sixxs.net.36446 > gw-696.trn-01.it.sixxs.net.33434: UDP, length 16
10:10:47.148674 IP6 cl-696.trn-01.it.sixxs.net.36446 > gw-696.trn-01.it.sixxs.net.33434: UDP, length 16
10:10:52.149250 IP6 cl-696.trn-01.it.sixxs.net.36446 > gw-696.trn-01.it.sixxs.net.33434: UDP, length 16
8 packets captured
8 packets received by filter
0 packets dropped by kernel
Thanks for your help
State change: user
Jeroen Massar on Wednesday, 26 November 2008 11:53:23
The state of this ticket has been changed to user
no ipv6 connectivity
Jeroen Massar on Wednesday, 26 November 2008 11:55:57
static tunnels don't need AICCU. For the rest check your firewalling. The PoP is correctly configured. When tcpdumping always use -n, and don't forget to at least include ICMP from other hosts, it might quite well be that some intermediate router is returning ICMP unreachables or something similar.
no ipv6 connectivity
Shadow Hawkins on Wednesday, 26 November 2008 16:13:57
I'm not so skilled with tcpdump, I've tried doing this test
$ ping6 2001:1418:100:2b7::1 -c 3
PING 2001:1418:100:2b7::1(2001:1418:100:2b7::1) 56 data bytes
--- 2001:1418:100:2b7::1 ping statistics ---
3 packets transmitted, 0 received, 100% packet loss, time 2009ms
# tcpdump -i sixxs -n
tcpdump: WARNING: sixxs: no IPv4 address assigned
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on sixxs, link-type RAW (Raw IP), capture size 96 bytes
16:06:31.161309 IP6 2001:1418:100:2b7::2 > 2001:1418:100:2b7::1: ICMP6, echo request, seq 1, length 64
16:06:32.171162 IP6 2001:1418:100:2b7::2 > 2001:1418:100:2b7::1: ICMP6, echo request, seq 2, length 64
16:06:33.171202 IP6 2001:1418:100:2b7::2 > 2001:1418:100:2b7::1: ICMP6, echo request, seq 3, length 64
# tcpdump -i eth0 proto 41 or host 213.254.12.34 or icmp -n
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on eth0, link-type EN10MB (Ethernet), capture size 96 bytes
16:06:31.161322 IP 62.149.212.61 > 213.254.12.34: IP6 2001:1418:100:2b7::2 > 2001:1418:100:2b7::1: ICMP6, echo request, seq 1, length 64
16:06:32.171173 IP 62.149.212.61 > 213.254.12.34: IP6 2001:1418:100:2b7::2 > 2001:1418:100:2b7::1: ICMP6, echo request, seq 2, length 64
16:06:33.171213 IP 62.149.212.61 > 213.254.12.34: IP6 2001:1418:100:2b7::2 > 2001:1418:100:2b7::1: ICMP6, echo request, seq 3, length 64
With a static tunnel configured in /etc/network/interfaces
auto sixxs
iface sixxs inet6 v4tunnel
address 2001:1418:100:2b7::2
netmask 64
endpoint 213.254.12.34
ttl 64
up ip link set mtu 1280 dev sixxs
up ip route add default via 2001:1418:100:2b7::1 dev sixxs
I can't see any ICMP reply.
Posting is only allowed when you are logged in. |