Tunnel since 2 Days or so not working. vectra# ifconfig ed0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500 ether 00:00:e8:df:67:9d inet6 fe80::200:e8ff:fedf:679d%ed0 prefixlen 64 scopeid 0x1 inet 192.168.1.1 netmask 0xffffffe0 broadcast 192.168.1.31 inet 192.168.1.15 netmask 0xffffffff broadcast 192.168.1.15 inet6 2001:6f8:960:0:200:e8ff:fedf:679d prefixlen 64 media: Ethernet autoselect (10baseT/UTP) dc0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500 options=8<VLAN_MTU> ether 00:80:ad:7d:a2:d0 inet6 fe80::280:adff:fe7d:a2d0%dc0 prefixlen 64 scopeid 0x2 media: Ethernet autoselect (none) status: no carrier plip0: flags=108851<UP,POINTOPOINT,RUNNING,SIMPLEX,MULTICAST,NEEDSGIANT> metric 0 mtu 1500 lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> metric 0 mtu 16384 inet6 ::1 prefixlen 128 inet6 fe80::1%lo0 prefixlen 64 scopeid 0x4 inet 127.0.0.1 netmask 0xff000000 vectra# /etc/rc.d/ntpdate onestart Setting date via ntp. 21 Aug 10:58:51 ntpdate[3851]: step time server 83.169.43.165 offset -0.000606 sec vectra# sixxs-aiccu test /usr/local/etc/aiccu.conf sock_getline() : "200 SixXS TIC Service on nlams04.sixxs.net ready (http://www.sixxs.net)" sock_printf() : "client TIC/draft-00 AICCU/2007.01.15-console-kame FreeBSD/7.4-RELEASE" sock_getline() : "200 Client Identity accepted" sock_printf() : "get unixtime" sock_getline() : "200 1313924363" sock_printf() : "starttls" sock_getline() : "400 This service is not SSL enabled (yet)" TIC Server does not support TLS but TLS is not required, continuing sock_printf() : "username MWB5-SIXXS" sock_getline() : "200 MWB5-SIXXS choose your authentication challenge please" sock_printf() : "challenge md5" sock_getline() : "200 9e211dd7cfe6a4383a85eb5826637718" sock_printf() : "authenticate md5 3ba8b63b19e77a1c38e8447feef43253" sock_getline() : "200 Successfully logged in using md5 as MWB5-SIXXS (___)" sock_printf() : "tunnel list" sock_getline() : "201 Listing tunnels" sock_getline() : "T19772 2001:6f8:900:c57::2 ayiya deham01" sock_getline() : "202 <tunnel_id> <ipv6_endpoint> <ipv4_endpoint> <pop_name>" sock_printf() : "tunnel show T19772" sock_getline() : "201 Showing tunnel information for T19772" sock_getline() : "TunnelId: T19772" sock_getline() : "Type: ayiya" sock_getline() : "IPv6 Endpoint: 2001:6f8:900:c57::2" sock_getline() : "IPv6 POP: 2001:6f8:900:c57::1" sock_getline() : "IPv6 PrefixLength: 64" sock_getline() : "Tunnel MTU: 1280" sock_getline() : "Tunnel Name: SixXs Tunnel" sock_getline() : "POP Id: deham01" sock_getline() : "IPv4 Endpoint: ayiya" sock_getline() : "IPv4 POP: 212.224.0.188" sock_getline() : "UserState: enabled" sock_getline() : "AdminState: enabled" sock_getline() : "Password: _" sock_getline() : "Heartbeat_Interval: 60" sock_getline() : "202 Done" Succesfully retrieved tunnel information for T19772 sock_printf() : "QUIT Deer Stop" Tunnel Information for T19772: POP Id : deham01 IPv6 Local : 2001:6f8:900:c57::2/64 IPv6 Remote : 2001:6f8:900:c57::1/64 Tunnel Type : ayiya Adminstate : enabled Userstate : enabled [tun-start] Trying Configured TUN/TAP interface tun0... [tun-start] Using TUN/TAP interface tun0 [tun-start] Setting TUNSIFHEAD for tun0 add net default: gateway 2001:6f8:900:c57::1 [AYIYA-start] : Anything in Anything (draft-02) heartbeat_socket() - IPv4 : 192.168.1.1 ####### [AYIYA-tun->tundev] : (Socket to TUN) started ####### AICCU Quick Connectivity Test ####### ####### [1/8] Ping the IPv4 Local/Your Outer Endpoint (192.168.1.1) ### This should return so called 'echo replies' ### If it doesn't then check your firewall settings ### Your local endpoint should always be pingable ### It could also indicate problems with your IPv4 stack PING 192.168.1.1 (192.168.1.1): 56 data bytes 64 bytes from 192.168.1.1: icmp_seq=0 ttl=64 time=0.059 ms 64 bytes from 192.168.1.1: icmp_seq=1 ttl=64 time=0.053 ms 64 bytes from 192.168.1.1: icmp_seq=2 ttl=64 time=0.037 ms --- 192.168.1.1 ping statistics --- 3 packets transmitted, 3 packets received, 0.0% packet loss round-trip min/avg/max/stddev = 0.037/0.050/0.059/0.009 ms ###### Did this work? [Y/n] Y ####### [2/8] Ping the IPv4 Remote/PoP Outer Endpoint (212.224.0.188) ### These pings should reach the PoP and come back to you ### In case there are problems along the route between your ### host and the PoP this could not return replies ### Check your firewall settings if problems occur PING 212.224.0.188 (212.224.0.188): 56 data bytes 64 bytes from 212.224.0.188: icmp_seq=0 ttl=56 time=68.779 ms 64 bytes from 212.224.0.188: icmp_seq=1 ttl=56 time=72.765 ms 64 bytes from 212.224.0.188: icmp_seq=2 ttl=56 time=67.802 ms --- 212.224.0.188 ping statistics --- 3 packets transmitted, 3 packets received, 0.0% packet loss round-trip min/avg/max/stddev = 67.802/69.782/72.765/2.147 ms ###### Did this work? [Y/n] Y ####### [3/8] Traceroute to the PoP (212.224.0.188) over IPv4 ### This traceroute should reach the PoP ### In case this traceroute fails then you have no connectivity ### to the PoP and this is most probably the problem traceroute to 212.224.0.188 (212.224.0.188), 64 hops max, 40 byte packets 1 fritz (192.168.1.30) 0.899 ms 0.680 ms 0.608 ms 2 87.186.225.11 (87.186.225.11) 53.419 ms 48.318 ms 47.912 ms 3 217.0.88.230 (217.0.88.230) 51.728 ms 52.542 ms 53.728 ms 4 hh-ea4-i.HH.DE.NET.DTAG.DE (62.154.33.37) 61.913 ms 64.617 ms 61.890 ms 5 80.150.168.78 (80.150.168.78) 59.720 ms 60.273 ms 61.945 ms 6 ge3-8.br2.isham.de.easynet.net (87.86.71.245) 63.855 ms 64.438 ms 65.656 ms 7 ge7-1.cr20.isham.de.easynet.net (212.224.4.89) 65.817 ms 66.533 ms 65.738 ms 8 deham01.sixxs.net (212.224.0.188) 65.154 ms 66.465 ms 67.813 ms ###### Did this work? [Y/n] Y ###### [4/8] Checking if we can ping IPv6 localhost (::1) ### This confirms if your IPv6 is working ### If ::1 doesn't reply then something is wrong with your IPv6 stack PING6(56=40+8+8 bytes) ::1 --> ::1 16 bytes from ::1: Echo Request 16 bytes from ::1, icmp_seq=0 hlim=64 dst=::1%4 time=0.696 ms 16 bytes from ::1: Echo Request 16 bytes from ::1, icmp_seq=1 hlim=64 dst=::1%4 time=0.521 ms 16 bytes from ::1: Echo Request 16 bytes from ::1, icmp_seq=2 hlim=64 dst=::1%4 time=0.476 ms --- ::1 ping6 statistics --- 3 packets transmitted, 3 packets received, 0.0% packet loss round-trip min/avg/max/std-dev = 0.476/0.564/0.696/0.095 ms ###### Did this work? [Y/n] Y ###### [5/8] Ping the IPv6 Local/Your Inner Tunnel Endpoint (2001:6f8:900:c57::2) ### This confirms that your tunnel is configured ### If it doesn't reply then check your interface and routing tables PING6(56=40+8+8 bytes) 2001:6f8:900:c57::2 --> 2001:6f8:900:c57::2 16 bytes from 2001:6f8:900:c57::2: Echo Request 16 bytes from 2001:6f8:900:c57::2, icmp_seq=0 hlim=64 dst=2001:6f8:900:c57::2%5 time=0.706 ms 16 bytes from 2001:6f8:900:c57::2: Echo Request 16 bytes from 2001:6f8:900:c57::2, icmp_seq=1 hlim=64 dst=2001:6f8:900:c57::2%5 time=0.617 ms 16 bytes from 2001:6f8:900:c57::2: Echo Request 16 bytes from 2001:6f8:900:c57::2, icmp_seq=2 hlim=64 dst=2001:6f8:900:c57::2%5 time=0.648 ms --- 2001:6f8:900:c57::2 ping6 statistics --- 3 packets transmitted, 3 packets received, 0.0% packet loss round-trip min/avg/max/std-dev = 0.617/0.657/0.706/0.037 ms ###### Did this work? [Y/n] Y ###### [6/8] Ping the IPv6 Remote/PoP Inner Tunnel Endpoint (2001:6f8:900:c57::1) ### This confirms the reachability of the other side of the tunnel ### If it doesn't reply then check your interface and routing tables ### Don't forget to check your firewall of course ### If the previous test was succesful then this could be both ### a firewalling and a routing/interface problem PING6(56=40+8+8 bytes) 2001:6f8:900:c57::2 --> 2001:6f8:900:c57::1 --- 2001:6f8:900:c57::1 ping6 statistics --- 3 packets transmitted, 0 packets received, 100.0% packet loss ###### Did this work? [Y/n] n vectra# sixxs-aiccu start /usr/local/etc/aiccu.conf & vectra# ifconfig tun0 tun0: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> metric 0 mtu 1280 inet6 fe80::200:e8ff:fedf:679d%tun0 prefixlen 64 scopeid 0x5 inet6 fe80::4f8:900:c57:2%tun0 prefixlen 64 scopeid 0x5 inet6 2001:6f8:900:c57::2 --> 2001:6f8:900:c57::1 prefixlen 128 Opened by PID 3905 vectra# netstat -rn Routing tables Internet: Destination Gateway Flags Refs Use Netif Expire default 192.168.1.30 UGS 0 4077 ed0 127.0.0.1 127.0.0.1 UH 0 104 lo0 192.168.1.0/27 link#1 UC 0 0 ed0 192.168.1.1 00:00:e8:df:67:9d UHLW 1 12 lo0 192.168.1.4 00:24:1d:cc:3a:de UHLW 1 1052 ed0 1197 192.168.1.15/32 link#1 UC 0 0 ed0 192.168.1.30 00:04:0e:95:06:97 UHLW 2 0 ed0 1098 Internet6: Destination Gateway Flags Netif Expire ::/96 ::1 UGRS lo0 => default 2001:6f8:900:c57::1 UGS tun0 ::1 ::1 UHL lo0 ::ffff:0.0.0.0/96 ::1 UGRS lo0 2001:6f8:900:c57::1 link#5 UHL tun0 2001:6f8:900:c57::2 link#5 UHL lo0 2001:6f8:960::/64 link#1 UC ed0 2001:6f8:960:0:200:e8ff:fedf:679d 00:00:e8:df:67:9d UHL lo0 2001:6f8:960:0:1c41:3853:5862:337a 00:0e:35:86:13:c8 UHLW ed0 fe80::/10 ::1 UGRS lo0 fe80::%ed0/64 link#1 UC ed0 fe80::200:e8ff:fedf:679d%ed0 00:00:e8:df:67:9d UHL lo0 fe80::fc29:8fb8:4f9d:3a2%ed0 00:24:1d:cc:3a:de UHLW ed0 fe80::%dc0/64 link#2 UC dc0 fe80::280:adff:fe7d:a2d0%dc0 00:80:ad:7d:a2:d0 UHL lo0 fe80::%lo0/64 fe80::1%lo0 U lo0 fe80::1%lo0 link#4 UHL lo0 fe80::200:e8ff:fedf:679d%tun0 link#5 UHL lo0 fe80::4f8:900:c57:2%tun0 link#5 UHL lo0 ff01:1::/32 link#1 UC ed0 ff01:2::/32 link#2 UC dc0 ff01:4::/32 ::1 UC lo0 ff01:5::/32 link#5 UC tun0 ff02::/16 ::1 UGRS lo0 ff02::%ed0/32 link#1 UC ed0 ff02::%dc0/32 link#2 UC dc0 ff02::%lo0/32 ::1 UC lo0 ff02::%tun0/32 link#5 UC tun0 vectra# ping6 2001:6f8:900:c57::1 PING6(56=40+8+8 bytes) 2001:6f8:900:c57::2 --> 2001:6f8:900:c57::1 ^C --- 2001:6f8:900:c57::1 ping6 statistics --- 5 packets transmitted, 0 packets received, 100.0% packet loss ... greetings Marcel