SixXS::Sunset 2017-06-06

Routing problem, once more
[fi] Shadow Hawkins on Friday, 13 January 2017 15:46:49
Hi all, I apologize opening a new thread in spite of that the problem has been discussed in the forum several times over and over. Just didn't find an adequate response... In my home network I have a server (an old laptop) running Debian 6.0.10 (kernel 2.6.32-5-686) and among others aiccu installed. The tunnel seems to work just fine and I can reach other ipv6 hosts in the internet from this server. I also have radvd installed and it seems to advertise as configured and my clients get there ipv6 addresses. But for some reason the connections from the clients to the internet do not work. I'm probably missing some really simple error in config, but anyway I'm stuck. Any hints what to do and change are appreciated! Settings on he server: * aiccu/sixxs: Tunnel T119958 - endpoint 2001:14b8:100:345::2 - enabled Subnet R217502 - prefix 2001:14b8:100:8345::/64 - enabled * ifconfig eth0 Link encap:Ethernet HWaddr 00:e0:00:5a:04:36 inet addr:192.168.144.112 Bcast:192.168.144.255 Mask:255.255.255.0 inet6 addr: 2001:14b8:100:8345:2e0:ff:fe5a:436/64 Scope:Global inet6 addr: fe80::2e0:ff:fe5a:436/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 lo Link encap:Local Loopback inet addr:127.0.0.1 Mask:255.0.0.0 inet6 addr: ::1/128 Scope:Host UP LOOPBACK RUNNING MTU:16436 Metric:1 sixxs Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00 inet6 addr: 2001:14b8:100:345::2/64 Scope:Global inet6 addr: fe80::14b8:100:345:2/64 Scope:Link UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1280 Metric:1 tun0 Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00 inet addr:10.144.112.1 P-t-P:10.144.112.2 Mask:255.255.255.255 UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1500 Metric:1 (I've omitted the RX/TX lines from the output; the tun0 device is for openvpn, currently not working as my ISP is not giving any public ipv4 address anymore, neither ipv6) * route ipv4: 10.144.112.2 dev tun0 proto kernel scope link src 10.144.112.1 10.144.112.0/24 via 10.144.112.2 dev tun0 192.168.144.0/24 dev eth0 proto kernel scope link src 192.168.144.112 default via 192.168.144.1 dev eth0 * route ipv6: 2001:14b8:100:345::/64 dev sixxs proto kernel metric 256 mtu 1280 advmss 1220 hoplimit 0 2001:14b8:100:8345::/64 dev eth0 proto kernel metric 256 mtu 1500 advmss 1440 hoplimit 0 fe80::/64 dev eth0 proto kernel metric 256 mtu 1500 advmss 1440 hoplimit 0 fe80::/64 dev sixxs proto kernel metric 256 mtu 1280 advmss 1220 hoplimit 0 default via 2001:14b8:100:345::1 dev sixxs metric 1024 mtu 1280 advmss 1220 hoplimit 0 * forwarding /proc/sys/net/ipv6/conf/eth0/forwarding : 1 * pinging: PING ipv6.google.com(arn09s05-in-x0e.1e100.net) 56 data bytes 64 bytes from arn09s05-in-x0e.1e100.net: icmp_seq=1 ttl=54 time=37.5 ms --- ipv6.google.com ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms * /etc/radvd.conf: interface eth0 { AdvSendAdvert on ; # Advertise at least every 30 seconds MaxRtrAdvInterval 30; # in order to force non RFC 6106 compliant clients to get a dns address AdvOtherConfigFlag on ; prefix 2001:14b8:100:8345::/64 { AdvOnLink on;# RDNSS 2001:14b8:100:345::1 2001:14b8:100:345::2 { # }; AdvAutonomous on; AdvRouterAddr on; }; }; Settings on the client #1: * Xubuntu 14.04 with kernel 3.13.0-107-generic * no manual configuration done for ipv6 * ifconfig (fresh after recent reboot) eth0 Link encap:Ethernet HWaddr 48:5b:39:c6:42:1b inet addr:192.168.144.77 Bcast:192.168.144.255 Mask:255.255.255.0 inet6 addr: 2001:14b8:100:8345:4a5b:39ff:fec6:421b/64 Scope:Global inet6 addr: fe80::4a5b:39ff:fec6:421b/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 lo Link encap:Local Loopback inet addr:127.0.0.1 Mask:255.0.0.0 inet6 addr: ::1/128 Scope:Host UP LOOPBACK RUNNING MTU:65536 Metric:1 * route ipv4: default via 192.168.144.1 dev eth0 169.254.0.0/16 dev eth0 scope link metric 1000 192.168.144.0/24 dev eth0 proto kernel scope link src 192.168.144.77 * route ipv6: 2001:14b8:100:8345::/64 dev eth0 proto kernel metric 256 expires 86386sec fe80::/64 dev eth0 proto kernel metric 256 default via fe80::8eeb:c6ff:fec7:eb0c dev eth0 proto ra metric 1024 expires 1508sec hoplimit 64 default via fe80::2e0:ff:fe5a:436 dev eth0 proto ra metric 1024 expires 76sec hoplimit 64 * forwarding: /proc/sys/net/ipv6/conf/eth0/forwarding: 0 * neighbours fe80::8eeb:c6ff:fec7:eb0c dev eth0 lladdr 8c:eb:c6:c7:eb:0c router DELAY fe80::2e0:ff:fe5a:436 dev eth0 lladdr 00:e0:00:5a:04:36 router STALE * pinging the server: PING 2001:14b8:100:8345:2e0:ff:fe5a:436(2001:14b8:100:8345:2e0:ff:fe5a:436) 56 data bytes 64 bytes from 2001:14b8:100:8345:2e0:ff:fe5a:436: icmp_seq=1 ttl=64 time=0.388 ms --- 2001:14b8:100:8345:2e0:ff:fe5a:436 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms * pinging ipv6.google.com: PING ipv6.google.com(arn06s07-in-x0e.1e100.net) 56 data bytes --- ipv6.google.com ping statistics --- 1 packets transmitted, 0 received, 100% packet loss, time 0ms * traceroute6 ipv6.google.com: traceroute to ipv6.l.google.com (2a00:1450:400f:805::200e) from 2001:14b8:100:8345:4a5b:39ff:fec6:421b, 30 hops max, 24 byte packets 1 * * * Similar results with another client running Debian Jessie. Most of the problems discussed in the forum seemed to be related to missing ipv6 address on the server interface from the sixxs offered subnet, but that is not the problem here. The server eth0 interface has address 2001:14b8:100:8345:2e0:ff:fe5a:436 that belongs to the subnet given, although not being the recommended 2001:14b8:100:8345::1 or 2, so this time the problem must elsewhere. But where? //rkv Risto Virtanen
Routing problem, once more
[ch] Jeroen Massar SixXS Staff on Tuesday, 14 February 2017 10:27:52
Risto Virtanen wrote:
eth0 Link encap:Ethernet HWaddr 00:e0:00:5a:04:36 inet addr:192.168.144.112 Bcast:192.168.144.255 Mask:255.255.255.0 inet6 addr: 2001:14b8:100:8345:2e0:ff:fe5a:436/64 Scope:Global
You might want to check with "ip -6 addr show" and "ip -6 ro show". "ifconfig" should be avoided on Linux as much as possible btw. You are missing a fe80::/ style address there. Though likely it is there and it is fe80::2e0:ff:fe5a:436 that is mentioned below on the client.
* route ipv6: 2001:14b8:100:8345::/64 dev eth0 proto kernel metric 256 expires 86386sec fe80::/64 dev eth0 proto kernel metric 256 default via fe80::8eeb:c6ff:fec7:eb0c dev eth0 proto ra metric 1024 expires 1508sec hoplimit 64 default via fe80::2e0:ff:fe5a:436 dev eth0 proto ra metric 1024 expires 76sec hoplimit 64
You have two defaults routes from two different hosts. The last one matches your host above, the other though is a magic one come elsewhere that is also advertising routes (hence 'proto ra').
* pinging ipv6.google.com:
Try 'ip -6 ro get <address>' instead, that will show you where the packets are supposed to go. Then use 'traceroute6 <address>' to see if they really go there. Also, do check your firewall and all other properties in the list on the contact page.

Please note Posting is only allowed when you are logged in.

Static Sunset Edition of SixXS
©2001-2017 SixXS - IPv6 Deployment & Tunnel Broker