SixXS::Sunset 2017-06-06

Ticket ID: SIXXS #864270
Ticket Status: User

PoP: ittrn01 - ITgate (Torino)

no ipv6 connectivity
[it] Shadow Hawkins on Wednesday, 26 November 2008 10:14:45
I've setupped a new static tunnel but I can't receive any traffic. The same problem applies using aiuccu or a static interface in /etc/network/interface Running aiuccu test fails tests 6,7,8 AICCU version: aiccu 20070115-7 from Ubuntu 8.04.1 NIC handle ACE1-SIXXS, TUNNEL T18225, PoP ittrn01 This host is on a datacenter. It has pubblic ipv4 62.149.212.61 Linux linusse.org 2.6.24-21-xen #1 SMP Wed Oct 22 02:11:27 UTC 2008 i686 GNU/Linux INTERFACES: aiccu Link encap:IPv6-in-IPv4 inet6 addr: 2001:1418:100:2b7::2/64 Scope:Global inet6 addr: fe80::3e95:d43d/128 Scope:Link UP POINTOPOINT RUNNING NOARP MTU:1280 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:24 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:0 (0.0 B) TX bytes:10536 (10.2 KB) eth0 Link encap:Ethernet HWaddr 00:22:15:d9:15:7e inet addr:62.149.212.61 Bcast:62.149.223.255 Mask:255.255.224.0 inet6 addr: fe80::222:15ff:fed9:157e/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:4102479 errors:0 dropped:3715471720 overruns:0 frame:0 TX packets:52089 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:329684633 (314.4 MB) TX bytes:33398336 (31.8 MB) Interrupt:16 Base address:0x2000 lo Link encap:Local Loopback inet addr:127.0.0.1 Mask:255.0.0.0 inet6 addr: ::1/128 Scope:Host UP LOOPBACK RUNNING MTU:16436 Metric:1 RX packets:133423 errors:0 dropped:0 overruns:0 frame:0 TX packets:133423 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:18089194 (17.2 MB) TX bytes:18089194 (17.2 MB) vif3.0 Link encap:Ethernet HWaddr fe:ff:ff:ff:ff:ff inet addr:10.0.0.128 Bcast:0.0.0.0 Mask:255.255.255.255 inet6 addr: fe80::fcff:ffff:feff:ffff/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:117 errors:0 dropped:0 overruns:0 frame:0 TX packets:127 errors:0 dropped:5 overruns:0 carrier:0 collisions:0 txqueuelen:32 RX bytes:94150 (91.9 KB) TX bytes:23374 (22.8 KB) # route -n Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface 10.0.0.1 0.0.0.0 255.255.255.255 UH 0 0 0 vif3.0 62.149.192.0 0.0.0.0 255.255.224.0 U 0 0 0 eth0 0.0.0.0 62.149.192.1 0.0.0.0 UG 100 0 0 eth0 # route -n -6 Kernel IPv6 routing table Destination Next Hop Flag Met Ref Use If ::1/128 :: Un 0 1 636 lo 2001:1418:100:2b7::2/128 :: Un 0 1 0 lo 2001:1418:100:2b7::/64 :: Un 256 0 26 aiccu fe80::3e95:d43d/128 :: Un 0 1 0 lo fe80::222:15ff:fed9:157e/128 :: Un 0 1 0 lo fe80::fcff:ffff:feff:ffff/128 :: Un 0 1 0 lo fe80::/64 :: U 256 0 0 eth0 fe80::/64 :: U 256 0 0 vif3.0 fe80::/64 :: Un 256 0 0 aiccu ff00::/8 :: U 256 0 0 eth0 ff00::/8 :: U 256 0 0 vif3.0 ff00::/8 :: U 256 0 0 aiccu ::/0 2001:1418:100:2b7::1 UG 1024 0 0 aiccu ::/0 :: !n -1 1 2 lo # iptables -L -n -v Chain INPUT (policy DROP 6223 packets, 750K bytes) pkts bytes target prot opt in out source destination 2241 335K ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED 28 1932 ACCEPT all -- !eth0 * 0.0.0.0/0 0.0.0.0/0 state NEW 0 0 ACCEPT icmp -- * * 0.0.0.0/0 62.149.212.61 icmp type 8 state NEW,RELATED,ESTABLISHED 0 0 ACCEPT 41 -- * * 213.254.12.34 0.0.0.0/0 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 1 64 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:80 5 320 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:443 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:113 6 378 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:53 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:53 Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 0 0 REJECT all -- eth0 eth0 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable 0 0 ACCEPT all -- * * 10.0.0.1 0.0.0.0/0 PHYSDEV match --physdev-in vif3.0 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 PHYSDEV match --physdev-in vif3.0 udp spt:68 dpt:67 Chain OUTPUT (policy ACCEPT 2499 packets, 438K bytes) pkts bytes target prot opt in out source destination # ip6tables -L -n -v Chain INPUT (policy DROP 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 0 0 DROP all * * ::/0 ::/0 rt type:0 6 624 ACCEPT all * * ::/0 ::/0 state RELATED,ESTABLISHED 3 312 ACCEPT all lo * ::1/128 ::/0 3 312 ACCEPT icmpv6 * * ::/0 ::/0 0 0 ACCEPT tcp * * ::/0 ::/0 tcp dpt:22 0 0 ACCEPT tcp * * ::/0 ::/0 tcp dpt:80 0 0 ACCEPT tcp * * ::/0 ::/0 tcp dpt:443 0 0 ACCEPT tcp * * ::/0 ::/0 tcp dpt:113 0 0 ACCEPT udp * * ::/0 ::/0 udp dpt:53 0 0 ACCEPT tcp * * ::/0 ::/0 tcp dpt:53 Chain FORWARD (policy DROP 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 0 0 DROP all * * ::/0 ::/0 rt type:0 Chain OUTPUT (policy ACCEPT 486 packets, 47584 bytes) pkts bytes target prot opt in out source destination 0 0 DROP all * * ::/0 ::/0 rt type:0 # traceroute 213.254.12.34 traceroute to 213.254.12.34 (213.254.12.34), 30 hops max, 40 byte packets 1 host2-192-149-62.serverdedicati.aruba.it (62.149.192.2) 0.414 ms 0.532 ms 0.596 ms 2 12416PT.aruba.it (62.149.190.4) 0.527 ms * * 3 12416P1.aruba.it (62.149.190.3) 0.531 ms * * 4 itgate.mix-it.net (217.29.66.65) 7.825 ms 8.053 ms 8.154 ms 5 213.254.31.241 (213.254.31.241) 10.871 ms 10.754 ms 10.829 ms 6 if-0-0.charleston.CBQ.trn.itgate.net (213.254.0.13) 10.976 ms 10.631 ms 10.561 ms 7 frejus.ITgate.net (213.254.12.34) 11.190 ms 11.191 ms 11.227 ms traceroute6 2001:1418:100:2b7::1 traceroute to 2001:1418:100:2b7::1 (2001:1418:100:2b7::1) from 2001:1418:100:2b7::2, 30 hops max, 16 byte packets 1 * * * 2 * * * 3 * * * 4 * * * 5 * * * 6 * * * 7 * * * 8 * * * 9 * * * 10 * * * 11 * * * 12 * * * 13 * * * [cut] 30 * * * root@linusse:~# tcpdump -i eth0 -n host 213.254.12.34 tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on eth0, link-type EN10MB (Ethernet), capture size 96 bytes 10:09:42.141295 IP 62.149.212.61 > 213.254.12.34: IP6 2001:1418:100:2b7::2.36446 > 2001:1418:100:2b7::1.33434: UDP, length 16 10:09:47.141899 IP 62.149.212.61 > 213.254.12.34: IP6 2001:1418:100:2b7::2.36446 > 2001:1418:100:2b7::1.33434: UDP, length 16 10:09:52.142428 IP 62.149.212.61 > 213.254.12.34: IP6 2001:1418:100:2b7::2.36446 > 2001:1418:100:2b7::1.33434: UDP, length 16 10:09:57.143017 IP 62.149.212.61 > 213.254.12.34: IP6 2001:1418:100:2b7::2.36446 > 2001:1418:100:2b7::1.33434: UDP, length 16 10:10:02.143536 IP 62.149.212.61 > 213.254.12.34: IP6 2001:1418:100:2b7::2.36446 > 2001:1418:100:2b7::1.33434: UDP, length 16 10:10:07.144144 IP 62.149.212.61 > 213.254.12.34: IP6 2001:1418:100:2b7::2.36446 > 2001:1418:100:2b7::1.33434: UDP, length 16 6 packets captured 6 packets received by filter 0 packets dropped by kernel root@linusse:~# tcpdump -i aiccu tcpdump: WARNING: aiccu: no IPv4 address assigned tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on aiccu, link-type RAW (Raw IP), capture size 96 bytes 10:10:17.145289 IP6 cl-696.trn-01.it.sixxs.net.36446 > gw-696.trn-01.it.sixxs.net.33434: UDP, length 16 10:10:22.145828 IP6 cl-696.trn-01.it.sixxs.net.36446 > gw-696.trn-01.it.sixxs.net.33434: UDP, length 16 10:10:27.146403 IP6 cl-696.trn-01.it.sixxs.net.36446 > gw-696.trn-01.it.sixxs.net.33434: UDP, length 16 10:10:32.146950 IP6 cl-696.trn-01.it.sixxs.net.36446 > gw-696.trn-01.it.sixxs.net.33434: UDP, length 16 10:10:37.147522 IP6 cl-696.trn-01.it.sixxs.net.36446 > gw-696.trn-01.it.sixxs.net.33434: UDP, length 16 10:10:42.148130 IP6 cl-696.trn-01.it.sixxs.net.36446 > gw-696.trn-01.it.sixxs.net.33434: UDP, length 16 10:10:47.148674 IP6 cl-696.trn-01.it.sixxs.net.36446 > gw-696.trn-01.it.sixxs.net.33434: UDP, length 16 10:10:52.149250 IP6 cl-696.trn-01.it.sixxs.net.36446 > gw-696.trn-01.it.sixxs.net.33434: UDP, length 16 8 packets captured 8 packets received by filter 0 packets dropped by kernel Thanks for your help
State change: user Locked
[ch] Jeroen Massar SixXS Staff on Wednesday, 26 November 2008 11:53:23
Message is Locked
The state of this ticket has been changed to user
no ipv6 connectivity
[ch] Jeroen Massar SixXS Staff on Wednesday, 26 November 2008 11:55:57
static tunnels don't need AICCU. For the rest check your firewalling. The PoP is correctly configured. When tcpdumping always use -n, and don't forget to at least include ICMP from other hosts, it might quite well be that some intermediate router is returning ICMP unreachables or something similar.
no ipv6 connectivity
[it] Shadow Hawkins on Wednesday, 26 November 2008 16:13:57
I'm not so skilled with tcpdump, I've tried doing this test $ ping6 2001:1418:100:2b7::1 -c 3 PING 2001:1418:100:2b7::1(2001:1418:100:2b7::1) 56 data bytes --- 2001:1418:100:2b7::1 ping statistics --- 3 packets transmitted, 0 received, 100% packet loss, time 2009ms # tcpdump -i sixxs -n tcpdump: WARNING: sixxs: no IPv4 address assigned tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on sixxs, link-type RAW (Raw IP), capture size 96 bytes 16:06:31.161309 IP6 2001:1418:100:2b7::2 > 2001:1418:100:2b7::1: ICMP6, echo request, seq 1, length 64 16:06:32.171162 IP6 2001:1418:100:2b7::2 > 2001:1418:100:2b7::1: ICMP6, echo request, seq 2, length 64 16:06:33.171202 IP6 2001:1418:100:2b7::2 > 2001:1418:100:2b7::1: ICMP6, echo request, seq 3, length 64 # tcpdump -i eth0 proto 41 or host 213.254.12.34 or icmp -n tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on eth0, link-type EN10MB (Ethernet), capture size 96 bytes 16:06:31.161322 IP 62.149.212.61 > 213.254.12.34: IP6 2001:1418:100:2b7::2 > 2001:1418:100:2b7::1: ICMP6, echo request, seq 1, length 64 16:06:32.171173 IP 62.149.212.61 > 213.254.12.34: IP6 2001:1418:100:2b7::2 > 2001:1418:100:2b7::1: ICMP6, echo request, seq 2, length 64 16:06:33.171213 IP 62.149.212.61 > 213.254.12.34: IP6 2001:1418:100:2b7::2 > 2001:1418:100:2b7::1: ICMP6, echo request, seq 3, length 64 With a static tunnel configured in /etc/network/interfaces auto sixxs iface sixxs inet6 v4tunnel address 2001:1418:100:2b7::2 netmask 64 endpoint 213.254.12.34 ttl 64 up ip link set mtu 1280 dev sixxs up ip route add default via 2001:1418:100:2b7::1 dev sixxs I can't see any ICMP reply.

Please note Posting is only allowed when you are logged in.

Static Sunset Edition of SixXS
©2001-2017 SixXS - IPv6 Deployment & Tunnel Broker