SixXS::Sunset 2017-06-06

Ticket ID: SIXXS #7610370
Ticket Status: User

PoP: iedub01 - HEAnet (Dublin)

Cannot create static tunnel to iedub01
[ie] Shadow Hawkins on Monday, 13 August 2012 17:02:29
Hi, My tunnel T18893 under handle DB7729-RIPE has been successfully active for a number of years but can no longer be created. It is hosted on a Debian box acting as firewall, router, etc. for my network. There has been no configuration changes to this box in the last number of months. I restarted this machine last Thursday 9th August at around 13:15 GMT. Since then the tunnel cannot be recreated. This box was previously restarted succesfully a number of times in the past, most recently during July. Tests performed - Packets are being rejected from iedub01 "protocol 41 unreachable" - Ping v4 tests to iedub01 (193.1.31.74) are successful - Tunnel T20270 which is provided by iedub01 through AICCU to another location has continued to work (and can be restarted) - The static tunnel T18893 was configured to work at the location of T20270. This did not work with the same error message from iedub01 tcpdump of pinging from tunnel host to ipv6.google.com - outbound test
15:41:28.585433 IP 212.17.49.178 > 193.1.31.74: IP6 2001:770:100:122::2 > 2a00:1450:400b:c00::68: ICMP6, echo request, seq 3, length 64 15:41:28.618933 IP 193.1.31.74 > 212.17.49.178: ICMP 193.1.31.74 protocol 41 unreachable, length 132
tcpdump of pinging from another ipv6 host to tunnel host - inbound test
15:58:37.105308 IP 193.1.31.74 > 212.17.49.177: IP6 2001:770:100:136::2 > 2001:770:100:122::2: ICMP6, echo request, seq 3, length 64 15:58:37.105414 IP 212.17.49.178 > 193.1.31.74: IP6 2001:770:100:122::2 > 2001:770:100:136::2: ICMP6, echo reply, seq 3, length 64 15:58:37.137994 IP 193.1.31.74 > 212.17.49.178: ICMP 193.1.31.74 protocol 41 unreachable, length 132
/etc/network/interfaces file
auto sixxs iface sixxs inet6 v4tunnel address 2001:770:100:122::2 netmask 64 endpoint 193.1.31.74 ttl 64 up ip link set mtu 1280 dev sixxs up ip route add default via 2001:770:100:122::1 dev sixxs down ip route del default via 2001:770:100:122::1 dev sixxs
It appears that this problem could be related to a previous issue with iedub01 from 2004 here. I would appreciate any help in this matter. Is iedub01 experiencing any issues at the moment that are not noted in the PoP status page? Thanks in advance, David
State change: user Locked
[ch] Jeroen Massar SixXS Staff on Monday, 13 August 2012 17:13:23
Message is Locked
The state of this ticket has been changed to user
Cannot create static tunnel to iedub01
[ch] Jeroen Massar SixXS Staff on Monday, 13 August 2012 17:16:33
15:41:28.585433 IP 212.17.49.178 > 193.1.31.74: IP6 2001:770:100:122::2 > 2a00:1450:400b:c00::68: ICMP6, echo request, seq 3, length 64
Your endpoint is 212.17.49.177 note 177, not 178.
15:58:37.105308 IP 193.1.31.74 > 212.17.49.177: IP6 2001:770:100:136::2 > 2001:770:100:122::2: ICMP6, echo request, seq 3, length 64
15:58:37.105414 IP 212.17.49.178 > 193.1.31.74: IP6 2001:770:100:122::2 > 2001:770:100:136::2: ICMP6, echo reply, seq 3, length 64
This also shows that iedub01 (193.1.31.74) is sending to the .177 IP (as it is configured) and you are sending packes back from the .178 IP. Configure that correctly and it should work fine. You can set a 'local' option in the interfaces file to fix this.
Cannot create static tunnel to iedub01
[ie] Shadow Hawkins on Monday, 13 August 2012 18:09:08
Perfect, thank you

Please note Posting is only allowed when you are logged in.

Static Sunset Edition of SixXS
©2001-2017 SixXS - IPv6 Deployment & Tunnel Broker