There is no such thing as "line protocol is up" for tunnels. Unfortunately CIsco included that, but there is no "up" state for tunnels as there is no negotiation for that state. Instead of stating "it is up", you might want to paste the output of your running configuration. More details, like above, of your tunnel and setup would help a lot to help you. The primary question always becomes: are you behind a NAT? That statement is only there as AICCU is the 'primary' implementation. The various heartbeat scripts also work. The big problem with those scripts though is that when the heartbeat password changes one has to manually update it. AICCU uses TIC for retrieving the parameters. According to the Live Tunnel Status for T83038 the tunnel pings sometimes at least. But the primarily problem seen is: Heartbeat Hash Fail : 749, last: 93.210.48.92 2015-04-07 09:06:00 (1428397560; 0 days 00:00:07 ago) Hence, you seem to have configured something wrong there.

Hello! I have a working tunnel configuration with Cisco 891 with 154-3.M2 (Advanced IP services). router#more flash:heartbeat6.tcl # Written by Jakob Pfeiffer <code@pfeiffer.ws> # Version 0.2 (2010-06-10) package require md5 set localv6 "2001:xxxx:xxxx:xxxx::2"; # Your IPv6 (e.g. 2001:a60:ffff:1a2b::2 set password "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"; # Tunnel passphrase (see below) set remotev4 "xx.xx.xx.xx"; # PoP IPv4 (e.g. 62.245.150.2) set remotev6 "2001:xxxx:xxxx:xxxx::1"; # PoP IPv6 (e.g. 2001:a60:ffff:1a2b::1 # Sending heartbeat and IPv6 ping every 60 seconds. set hb "HEARTBEAT TUNNEL $localv6 sender [clock second]" set hbhash "$hb [string tolower [md5::md5 -hex "$hb $password"]]" puts $hbhash; # Write to std out (debug only). # Open new udp socket. set sock1 [udp_open] fconfigure $sock1 -remote [list $remotev4 3740] puts $sock1 $hbhash; # Write to udp socket. close $sock1 ping ipv6 $remotev6 repeat 1 source $localv6 #### END OF hearthbeat6.tcl For the password, check that you have exactly the same password at Live Tunnel status at Txxxx -page: Heartbeat Information (Heartbeat and AYIYA protocols only) Last Heartbeat2015-05-13 20:17:00 (1431548220; 0 days 00:00:00 ago) Heartbeat Passwordxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx Before the TCL configuration, make sure you can actually ping the tunnel: router#ping ipv6 2001:xxxx:xxxx:xxxx::1 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 2001:xxxx:xxxx:xxxx::1, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 12/14/16 ms Check that your tunnel is up from both IPv4 and IPv6 side: router#show int tunnel 61 Tunnel61 is up, line protocol is up Hardware is Tunnel Description: 6in4 tunnel to SixXS MTU 17920 bytes, BW 100000 Kbit/sec, RxBW 5000 Kbit/sec, DLY 50000 usec, reliability 255/255, txload 1/255, rxload 13/255 Encapsulation TUNNEL, loopback not set Keepalive not set Tunnel linestate evaluation up Tunnel source "My local IPv6 DHCP address from ISP" (GigabitEthernet0), destination Sixx's POP router#show ipv6 int tunnel 61 Tunnel61 is up, line protocol is up IPv6 is enabled, link-local address is FE80::xxxxxxxxxxxx No Virtual link-local address(es): Description: 6in4 tunnel to SixXS Global unicast address(es): 2001:xxxx:xxxx:xxxx::2, subnet is 2001:xxxx:xxxx:xxxx::/64 Sami

Also running heartbeat6.tcl (the version in the previous forum post) manually providers following output: router#tclsh flash:heartbeat6.tcl HEARTBEAT TUNNEL 2001:xxxx:xxxx:xxxx::2 sender 1234567890 xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx Type escape sequence to abort. Sending 1, 100-byte ICMP Echos to 2001:xxxx:xxxx:xxxx::1, timeout is 2 seconds: Packet sent with a source address of 2001:xxxx:xxxx:xxxx::2 ! Success rate is 100 percent (1/1), round-trip min/avg/max = 16/16/16 ms Sami PS: I'm having 1 public IPv4 IP from ISP via DHCP on Gigabit0 interface (WAN). I have private IPv4 network in the LAN interface and IPv4 NAT configured to the Gigabit0 interface.

And if you're having access lists on your Cisco, permit protocol 41 from your pop and also ICMPv4. Here how I've done this. interface GigabitEthernet0 description Cable Modem WAN ip address dhcp hostname router ip access-group inboundfilters in ip access-list extended inboundfilters <stuff removed> permit 41 host <POP IP> any permit icmp host <POP IP> any <stuff removed> Sami