Forum - Subnet does not work :: SixXS - IPv6 Deployment & Tunnel Broker

Subnet does not work

Shadow Hawkins on Wednesday, 20 June 2012 01:13:17

Hello, Problem; Debian server cannot ping6 any internet address. My OpenBSD server is able to connect to the ipv6 world just fine. I am also able to ping both the subnet address 2001:16d8:ff00:8550::20 assigned to the lan interface, vic1, and the tunnel endpoint, on gif0, 2001:16d8:ff00:550::2, from subnetonline.com Sixxs

Subnet: 2001:16d8:ff00:8550::/64 Endpoint: 2001:16d8:ff00:550::2 Remote: 2001:16d8:ff00:550::1

OPENBSD SERVER ifconfig gif0

gif0: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 1280 priority: 0 groups: gif egress physical address inet 80.252.171.171 --> 82.96.56.14 inet6 fe80::20c:29ff:feab:ad2d%gif0 -> prefixlen 64 scopeid 0x6 inet6 2001:16d8:ff00:550::2 -> 2001:16d8:ff00:550::1 prefixlen 128

ifconfig vic1

vic1: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500 lladdr 00:0c:29:ab:ad:37 priority: 0 media: Ethernet autoselect status: active inet 1.3.3.1 netmask 0xffffff00 broadcast 1.3.3.255 inet6 2001:16d8:ff00:8550::20 prefixlen 64

cat /etc/rtadvd.conf

vic1::addr="2001:16d8:ff00:8550::":prefixlen#64:raflags#64:

ping6 www.kame.net

PING6(56=40+8+8 bytes) 2001:16d8:ff00:550::2 --> 2001:200:dff:fff1:216:3eff:feb1:44d7 16 bytes from 2001:200:dff:fff1:216:3eff:feb1:44d7, icmp_seq=0 hlim=43 time=303.818 ms 16 bytes from 2001:200:dff:fff1:216:3eff:feb1:44d7, icmp_seq=1 hlim=43 time=305.208 ms 16 bytes from 2001:200:dff:fff1:216:3eff:feb1:44d7, icmp_seq=2 hlim=43 time=307.642 ms --- orange.kame.net ping6 statistics --- 3 packets transmitted, 3 packets received, 0.0% packet loss round-trip min/avg/max/std-dev = 303.818/305.556/307.642/1.580 ms

DEBIAN LINUX SERVER route -n6

ernel IPv6 routing table Destination Next Hop Flag Met Ref Use If 2001:16d8:ff00:8550::10/128 :: U 256 0 0 eth0 2001:16d8:ff00:8550::/64 :: U 1024 0 1 eth0 fe80::/64 :: U 256 0 0 eth0 ::/0 2001:16d8:ff00:8550:: UG 1024 0 197 eth0 ::/0 :: !n -1 9339049 lo ::1/128 :: Un 0 1 7 lo 2001:16d8:ff00:8550::10/128 :: Un 0 1 747 lo ff00::/8 :: U 256 0 0 eth0 ::/0 :: !n -1 9339049 lo

ifconfig

eth0 Link encap:Ethernet HWaddr 00:0c:29:84:e0:71 inet addr:1.3.3.19 Bcast:1.3.3.255 Mask:255.255.255.0 inet6 addr: 2001:16d8:ff00:8550::10/128 Scope:Global UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:699164 errors:0 dropped:0 overruns:0 frame:0 TX packets:779559 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:82110670 (78.3 MiB) TX bytes:96121604 (91.6 MiB) Interrupt:18 Base address:0x2000

ping6 www.kame.net

PING www.kame.net(2001:200:dff:fff1:216:3eff:feb1:44d7) 56 data bytes From 2001:16d8:ff00:8550::10 icmp_seq=2 Destination unreachable: Address unreachable From 2001:16d8:ff00:8550::10 icmp_seq=3 Destination unreachable: Address unreachable From 2001:16d8:ff00:8550::10 icmp_seq=4 Destination unreachable: Address unreachable ^C --- www.kame.net ping statistics --- 4 packets transmitted, 0 received, +3 errors, 100% packet loss, time 2999ms

Why does the linux machine not get out on the internet? eth0 and vic1 is on the same network and ipv4 traffic works just fine.. What did I miss? Thanks!

Subnet does not work

Jeroen Massar SixXS Staff

on Wednesday, 20 June 2012 01:25:43

vic1::addr="2001:16d8:ff00:8550::":prefixlen#64:raflags#64:

You have RA, yet:

2001:16d8:ff00:8550::10/128 :: Un 0 1 747 lo

You manually configured an address and apparently do not get a RA'd address?

::/0 :: !n -1 9339049 lo

Two default routes over loopback? You might want to get rid of those. Though they might be fine as their metrics are high. Try "ip -6 ro show" as that is a better way to check routes and other properties.

Why does the linux machine not get out on the internet? eth0 and vic1 is on the same network and ipv4 traffic works just fine.. What did I miss?

I can only guess at a multicast issue, as your RA is not coming through apparently. But that is something that should not happen with hardware from the last ten years - Did you enable forwarding on the OpenBSD box? - Are you firewalling on either host? - Can you ping the gateway from the client? - Can you check the output of "ip -6 nei show" which should contain the neighbor addresses of the gateway and other hosts. - Where does a traceroute6 go? - What does tcpdump show? Start with those first ;)

Subnet does not work

Shadow Hawkins on Wednesday, 20 June 2012 23:19:26

Hi, Thank you for using your valuable time helping me. I was able to track down my problems and solve them based on your questions; 1) My interfaces was not configured correctly. 2) I was missing two sysctl parameters. Once corrected, everything works. Thanks! Sincerely, Alexander

Subnet does not work

Jeroen Massar SixXS Staff

on Wednesday, 20 June 2012 23:43:30

Enjoy proper end-to-end connectivity ;)

Please note Posting is only allowed when you are logged in.