XP + NAT not working
Shadow Hawkins on Thursday, 15 January 2004 01:19:09
IPv6 6in4 not working on IPng.
I followed the script autogenerated, carefully look at forum topics (disable firewall, remove unnecessary routes ...), but unsuccessfully.
I have a STH Pro enabled for proto 41 forwaring to my internal IP target,
FYI, if i ping kame it realy query AAAA but then ping fail (no ICMP packet send if i lookup using ethereal).
Any XP guru have ideas ?
For your reference here is the various config dump :
C:\>netsh interface ipv6 show route
Recherche du statut actif...
Publier Type Mét Préfixe Idx Nom passerelle/interface
------- -------- --- ------------------------ --- ------------------------
-
no Manuel 1 ::/0 9 SixXS
no Manuel 1 3ffe:8114:1000::732/127 9 SixXS
C:\>netsh interface ipv6 show address
Recherche du statut actif...
Interface 9 : SixXS
Type adr. Ãtat DAD Vie valide Vie préf. Adresse
--------- --------- ---------- ---------- -----------------------------------
Manuel Préféré infinite infinite 3ffe:8114:1000::733
Liaison Préféré infinite infinite fe80::9:5242:3e99
Interface 8 : Réseau Local 10
Type adr. Ãtat DAD Vie valide Vie préf. Adresse
--------- --------- ---------- ---------- -----------------------------------
Liaison Provisoire infinite infinite fe80::260:97ff:fe3e:2655
Interface 6 : Teredo Tunneling Pseudo-Interface
Type adr. Ãtat DAD Vie valide Vie préf. Adresse
--------- --------- ---------- ---------- -----------------------------------
Liaison Préféré infinite infinite fe80::5445:5245:444f
Interface 5 : Connexion réseau sans fil
Type adr. Ãtat DAD Vie valide Vie préf. Adresse
--------- --------- ---------- ---------- -----------------------------------
Liaison Préféré infinite infinite fe80::230:abff:fe0d:97fe
Interface 4 : Réseau Local 100
Type adr. Ãtat DAD Vie valide Vie préf. Adresse
--------- --------- ---------- ---------- -----------------------------------
Liaison Provisoire infinite infinite fe80::250:daff:fee2:5a9f
Interface 2 : Automatic Tunneling Pseudo-Interface
Type adr. Ãtat DAD Vie valide Vie préf. Adresse
--------- --------- ---------- ---------- -----------------------------------
Liaison Préféré infinite infinite fe80::5efe:10.6.18.32
Interface 1 : Loopback Pseudo-Interface
Type adr. Ãtat DAD Vie valide Vie préf. Adresse
--------- --------- ---------- ---------- -----------------------------------
Boucle de rappel Préféré infinite infinite ::1
Liaison Préféré infinite infinite fe80::1
C:\>netsh interface ipv6 show interface
Recherche du statut actif...
Idx Mét MTU Ãtat Nom
--- --- ----- ---------- -----
9 1 1280 Déconnecté SixXS
8 0 1500 Déconnecté Réseau Local 10
6 2 1280 Déconnecté Teredo Tunneling Pseudo-Interface
5 0 1500 Connecté Connexion réseau sans fil
4 0 1500 Déconnecté Réseau Local 100
3 1 1280 Connecté 6to4 Pseudo-Interface
2 1 1280 Connecté Automatic Tunneling Pseudo-Interface
1 0 1500 Connecté Loopback Pseudo-Interface
C:\>netsh interface ipv6 show state
Ãtat de 6over4 : default
Adresses compatibles v4 : default
C:\>netsh interface ipv6 show privacy
Recherche du statut actif...
Paramètres d'adresses anonymes
-----------------------------------------------------
Utiliser les adresses anonymes : disabled
Tentatives de détection d'adresses en double : 5
Durée de vie maximale : 7d
Durée de vie maximale préférée : 1d
Temps de régénération : 5s
Temps aléatoire maximale : 10m
Temps aléatoire : 7m37s
C:\>netsh interface ipv6 show destinationcache
Interface 9: SixXS
PMTU Adresse de destination Adresse de saut suivant
---- --------------------------------------------- --------------------------
1280 2001:200:0:8002:203:47ff:fea5:3085 2001:200:0:8002:203:47ff:fea5
:3085
1280 3ffe:8114:1000::732 3ffe:8114:1000::732
1280 3ffe:8114:1000::733 3ffe:8114:1000::733
Interface 2: Automatic Tunneling Pseudo-Interface
PMTU Adresse de destination Adresse de saut suivant
---- --------------------------------------------- --------------------------
1280 3ffe:8114:1000::732 ::206.123.31.115
C:\>netsh interface ipv6 show teredo
Paramètres Teredo
---------------------------------------------
Type : default
Nom du serveur : default
Interv. d'actual. du client : default
Port client : default
Statut : offline
Erreur : aucune
C:\>netsh interface ipv6 show neighbors
Interface 9 : SixXS
Adresse Internet Adresse physique Type
-------------------------------------------- ----------------- -----------
2001:200:0:8002:203:47ff:fea5:3085 212.19.192.219 Permanent
3ffe:8114:1000::732 212.19.192.219 Permanent
3ffe:8114:1000::733 82.66.62.153 Permanent
fe80::9:5242:3e99 82.66.62.153 Permanent
Interface 8 : Réseau Local 10
Adresse Internet Adresse physique Type
-------------------------------------------- ----------------- -----------
fe80::260:97ff:fe3e:2655 Incomplet
Interface 6 : Teredo Tunneling Pseudo-Interface
Adresse Internet Adresse physique Type
-------------------------------------------- ----------------- -----------
fe80::5445:5245:444f 0.0.0.0:0 Permanent
Interface 5 : Connexion réseau sans fil
Adresse Internet Adresse physique Type
-------------------------------------------- ----------------- -----------
fe80::230:abff:fe0d:97fe 00-30-ab-0d-97-fe Permanent
Interface 4 : Réseau Local 100
Adresse Internet Adresse physique Type
-------------------------------------------- ----------------- -----------
fe80::250:daff:fee2:5a9f Incomplet
Interface 2 : Automatic Tunneling Pseudo-Interface
Adresse Internet Adresse physique Type
-------------------------------------------- ----------------- -----------
3ffe:bc0:8000::104b Incomplet
::206.123.31.115 206.123.31.115 Permanent
fe80::5efe:10.6.18.32 127.0.0.1 Permanent
3ffe:8114:1000::732 Incomplet
Interface 1 : Loopback Pseudo-Interface
Adresse Internet Adresse physique Type
-------------------------------------------- ----------------- -----------
fe80::1 Permanent
::1 Permanent
XP + NAT not working
Jeroen Massar on Friday, 16 January 2004 11:46:14
You could start by disabling 6to4 and teredo, then checking your local machine for firewalls, anti-virus programs (yes, mcafee kills IPv6), banking software and actually anything that wedges into the network stack.
Nothing is working so far :(
Shadow Hawkins on Monday, 19 January 2004 14:31:03
Hi all,
I've uninstall the XP IPv6 plus then follow the script provided by sixxs and it still fail.
One element i noticed was that the IGMP IPv4 routing is "non installed"....
(netsh ro in ip ig) Is it needed for 6over4 ?
if i try to "install" then it say "Ok" but is still not installed.
FYI, i've stopped all firewall & antivirus i know, i tested with/without 6to4, auto tunel, privacy, ... I spend several hours, and i am still stuck.
Maybe i should setup a Linux instead for IPv6 to work as expected, ey ;-)
FYI, when i use ethereal on the network interface, i can see the AAAA DNS query and answer, but no other IPv6 related stream for trying to reach the host (when pinging or connectingg) !!!
Any ideas is still very welcomed.
Tnx & Rgs,
JB
Nothing is working so far :(
Jeroen Massar on Monday, 19 January 2004 17:05:20
IGMP == Internet Group Management Protocol (IPv4), for IPv6 it is btw built into ICMPv6, it really isn't required for proto-41 tunneling.
Nevertheless it should simply work like at all other people who are using it.
Check that you using XP SP1 with all patches applied, that you have not installed any firewall or weird banking software which stick themselves into the IP stack and then simply block all IPv6 calls and ofcourse recheck everything you have configured. Take a good look at the outputs of the netsh command, check that the XP IPv6 builtin firewall is disabled and try ping6ing localhost, local endpoint, remote endpoint, far away, traceroute hosts and debug it... have fun :)
Firewall ?
Shadow Hawkins on Tuesday, 20 January 2004 00:52:43
Is there a way for me to know if there is a remaining firewall ? My fear is that SP1 new IPv6 is still enabled even if i think it is disabled !
Rgs,
JB
Firewall ?
Jeroen Massar on Tuesday, 20 January 2004 01:16:07
I think that you have a stupid 'firewall/banking/antivirus' program blocking it actually. The builtin firewall can be found under: "netsh firewall" and in default mode restricts inbound icmp and inbound multicast. TCP should work though. You should also see neighbour discovery and other packets floating around, which you apparently don't see. Thus check thou apps ;)
Posting is only allowed when you are logged in. |