| Ticket ID: SIXXS #11508077 Ticket Status: User PoP: nlhaa01 - Leaseweb B.V. (Haarlem) 
protocol 41 unreachable ![[nl]](/s/countries/nl.gif) Shadow Hawkins on Friday, 25 April 2014 19:21:33 
I'm trying to get my first tunnel up and running (T145665). My router reports the tunnel being up. I can ping the local and remote IPv4 address and I can ping my local IPv4 address. If I try to ping the IPv6 tunnel IP address on the Leaseweb site I see a protocol 41 unreachable in a packet capture.
20:31:34.499107 IP 94.210.218.46 > 94.75.219.73: IP6 2001:1af8:fe00:461::2 > 2001:1af8:fe00:461::1: ICMP6, echo request, seq 9, length 64
20:31:34.509201 IP 94.75.219.73 > 94.210.218.46: ICMP 94.75.219.73 protocol 41 unreachable, length 132
I also see heartbeat packets going to the remote IPv4 address port 3740, but I don't receive a response.
show interfaces ethernet eth0 capture port 3740  
Capturing traffic on eth0 port 3740 ...
21:17:02.739879 IP 94.210.218.46.48399 > 94.75.219.73.3740: UDP, length 92
21:18:02.859868 IP 94.210.218.46.38071 > 94.75.219.73.3740: UDP, length 92
21:19:02.979885 IP 94.210.218.46.39532 > 94.75.219.73.3740: UDP, length 92
21:20:03.099878 IP 94.210.218.46.51810 > 94.75.219.73.3740: UDP, length 92
I'm using a UBNT Edgemax Lite router
    tunnel tun0 {
        address 2001:1af8:fe00:461::2/64
        encapsulation sit
        local-ip 94.210.218.46
        mtu 1280
        multicast disable
        remote-ip 94.75.219.73
        ttl 255
    }
protocols {
    static {
        interface-route6 ::/0 {
            next-hop-interface tun0 {
            }
        }
    }
}
The firewall is disabled for the time being (to eliminate fw issues).
S>* 0.0.0.0/0 [210/0] via 94.210.218.1, eth0.400
C>* 94.210.218.0/23 is directly connected, eth0.400
C>* 127.0.0.0/8 is directly connected, lo
C>* 192.168.21.0/24 is directly connected, eth0.10
S>* 192.168.22.0/24 [1/0] via 192.168.21.254, eth0.10
C>* 212.121.121.128/32 is directly connected, pppoe0
S>* ::/0 [1/0] is directly connected, tun0
C>* ::1/128 is directly connected, lo
C>* 2001:1af8:fe00:461::/64 is directly connected, tun0
C>* 2001:1af8:fe00:8461::/64 is directly connected, eth0.400
C * fe80::/64 is directly connected, eth0.400
C * fe80::/64 is directly connected, eth0.10
C * fe80::/64 is directly connected, eth1
C>* fe80::/64 is directly connected, eth0
C>* fe80::5ed2:da2e/128 is directly connected, tun0
traceroute to 94.75.219.73 (94.75.219.73), 30 hops max, 38 byte packets
 1  5ED2DA01.cm-7-3d.dynamic.ziggo.nl (94.210.218.1)  9.126 ms  9.265 ms  9.085 ms
 2  mnd-rc0001-cr101-ae15-230.core.as9143.net (213.51.165.153)  6.362 ms  103.382 ms  8.315 ms
 3  asd-tr0042-cr101-ae7-0.core.as9143.net (213.51.158.2)  10.349 ms  8.285 ms  7.915 ms
 4  leaseweb.evoswitch.nl-ix.net (193.239.116.221)  11.837 ms  10.112 ms  10.825 ms
 5  85.17.100.37 (85.17.100.37)  10.966 ms  11.661 ms  11.921 ms
 6  evo-hv5-te-2-3.evo.leaseweb.net (94.75.219.249)  11.095 ms  hv5 (94.75.219.251)  9.220 ms  94.75.219.253 (94.75.219.253)  9.136 ms
 7  nlhaa01.sixxs.net (94.75.219.73)  16.937 ms  16.597 ms  7.804 ms
Codes: S - State, L - Link, u - Up, D - Down, A - Admin Down
Interface    IP Address                        S/L  Description                 
---------    ----------                        ---  -----------                 
eth0         -                                 u/u                              
eth0.10      192.168.21.245/24                 u/u  data                        
eth0.400     94.210.218.46/23                  u/u                              
             2001:1af8:fe00:8461::1/64        
eth1         -                                 u/u                              
eth2         -                                 u/D                              
lo           127.0.0.1/8                       u/u                              
             ::1/128                          
pppoe0       89.146.28.141                     u/u                              
tun0         2001:1af8:fe00:461::2/64          u/u                              
Heartbeat script:
#!/usr/bin/python
#
import time,hashlib,subprocess,socket,os
localv6="2001:1af8:fe00:461::2/64"
password="xxxxxxxxxxxxxxxxxxxx"
remotev4="94.75.219.73"
remotev6="2001:1af8:fe00:461::1/64"
while 1:
 hbBase="HEARTBEAT TUNNEL " + localv6 + " sender " + str(int(time.time()))
 hbToSend=hbBase + " " + hashlib.md5(hbBase + " " + password).hexdigest()
 sock = socket.socket(socket.AF_INET,socket.SOCK_DGRAM)
 sock.sendto(hbToSend, (remotev4, 3740))
 sock.close()
 with open(os.devnull, "w") as fnull:
  subprocess.call(["/bin/ping6", "-s", "8", "-c", "1", "-q", remotev6], stdout=fnull, stderr=fnul
 time.sleep(60)
Somebody some hints, tips or suggestions?
 
protocol 41 unreachable ![[nl]](/s/countries/nl.gif) Shadow Hawkins on Friday, 25 April 2014 19:54:12 
pfff, how stupid can I be.... Just assumed the howto on the following site was perfect..
https://community.ubnt.com/t5/EdgeMAX-Configuration-Examples/EdgeMAX-SIXXS-connectivity-without-AICCU-with-minimum-system/ta-p/550596
It suggest to use the IPv6 address including the netmask for local and remote IPv6 addresses in the heartbeat script. Remove the netmask and all works like a charm
Please close this issue...
 
 |