Tunnel and statistics
Shadow Hawkins on Sunday, 06 June 2010 11:04:56
Hi folks,
yesterday I setup my tunnel which terminates on my firewall. The tunnel is a dynamic one and always on as long as my firewall is connected which is all day nearly every day.
From the time the tunnel was created by SixXS until I connected it, the packet loss was 10% where as after wards the loss rises to 100%. This is even while I am using it. Now, I have the firewall ping response disabled as a security feature.
Is there any other way that the tunnel can be checked to see if it is up?
Ian M
Tunnel and statistics
Shadow Hawkins on Sunday, 06 June 2010 12:17:10
Hi folks,
until someone can offer a better solution I have enabled ping visibility for my firewall.
I can see the dropped packets in the firewall log.
Ian M
Tunnel and statistics
Jeroen Massar on Sunday, 06 June 2010 15:47:19
As in general: see the FAQ.
You only have to allow ICMPv6 pings from the tunnel endpoint (<tunnel>::1) to your endpoint (<tunnel>::2)
Also note the FAQ item on connection tracking, which your firewall most likely is doing too.
Posting is only allowed when you are logged in. |