|
Ticket ID: SIXXS #10773590 Ticket Status: User PoP: plpoz01 - Poznan Supercomputing and Networking Center (Poznan)
Static tunnel does not work
![[pl]](/s/countries/pl.gif) Shadow Hawkins on Sunday, 29 December 2013 02:14:02
Our static tunnel does not work. The configuration did not change, in particular firewall/routing settings of both IPv4 and IPv6.
NIC handle: MH8732-RIPE
Tunnel: T63217
OS is Debian Squeeze.
root@fw:~# uname -a
Linux fw 2.6.32-5-amd64 #1 SMP Mon Sep 23 22:14:43 UTC 2013 x86_64 GNU/Linux
root@fw:~# ping6 2001:808:100:27::1
PING 2001:808:100:27::1(2001:808:100:27::1) 56 data bytes
From 2001:808:100:27::2 icmp_seq=2 Destination unreachable: Address unreachable
From 2001:808:100:27::2 icmp_seq=3 Destination unreachable: Address unreachable
From 2001:808:100:27::2 icmp_seq=4 Destination unreachable: Address unreachable
From 2001:808:100:27::2 icmp_seq=5 Destination unreachable: Address unreachable
From 2001:808:100:27::2 icmp_seq=6 Destination unreachable: Address unreachable
From 2001:808:100:27::2 icmp_seq=7 Destination unreachable: Address unreachable
^C
--- 2001:808:100:27::1 ping statistics ---
7 packets transmitted, 0 received, +6 errors, 100% packet loss, time 6046ms
root@fw:~# tcpdump -n -i eth0 -s 1500 host 150.254.166.147
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on eth0, link-type EN10MB (Ethernet), capture size 1500 bytes
12:31:47.661325 IP 150.254.115.58 > 150.254.166.147: IP6 2001:808:100:27::2 > 2001:808:100:27::1: ICMP6, echo request, seq 1, length 64
12:31:47.661940 IP 150.254.166.147 > 150.254.115.58: ICMP 150.254.166.147 protocol 41 unreachable, length 132
12:31:48.670335 IP 150.254.115.58 > 150.254.166.147: IP6 2001:808:100:27::2 > 2001:808:100:27::1: ICMP6, echo request, seq 2, length 64
12:31:48.670904 IP 150.254.166.147 > 150.254.115.58: ICMP 150.254.166.147 protocol 41 unreachable, length 132
12:31:49.678334 IP 150.254.115.58 > 150.254.166.147: IP6 2001:808:100:27::2 > 2001:808:100:27::1: ICMP6, echo request, seq 3, length 64
12:31:49.678951 IP 150.254.166.147 > 150.254.115.58: ICMP 150.254.166.147 protocol 41 unreachable, length 132
12:31:50.686343 IP 150.254.115.58 > 150.254.166.147: IP6 2001:808:100:27::2 > 2001:808:100:27::1: ICMP6, echo request, seq 4, length 64
12:31:50.686881 IP 150.254.166.147 > 150.254.115.58: ICMP 150.254.166.147 protocol 41 unreachable, length 132
12:31:51.688323 IP 150.254.115.58 > 150.254.166.147: IP6 2001:808:100:27::2 > 2001:808:100:27::1: ICMP6, echo request, seq 5, length 64
12:31:51.688972 IP 150.254.166.147 > 150.254.115.58: ICMP 150.254.166.147 protocol 41 unreachable, length 132
IPv4 connectivity works fine.
root@fw:~# traceroute -n 150.254.166.147
traceroute to 150.254.166.147 (150.254.166.147), 30 hops max, 60 byte packets
1 150.254.115.57 0.334 ms 0.354 ms 0.358 ms
2 150.254.116.6 0.160 ms 0.167 ms 0.179 ms
3 150.254.115.5 0.550 ms 0.564 ms 0.565 ms
4 150.254.166.147 1.483 ms 1.463 ms 1.421 ms
PoP is unreachable over IPv6 from outside:
root@outside:~$ ip -6 a s
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qlen 1000
inet6 2001:470:1f0b:16c0:7271:bcff:fea2:ad36/64 scope global dynamic
valid_lft 86014sec preferred_lft 14014sec
inet6 2001:470:1f0b:16c0::2/64 scope global
valid_lft forever preferred_lft forever
inet6 fe80::7271:bcff:fea2:ad36/64 scope link
valid_lft forever preferred_lft forever
root@outside:~# traceroute6 -n 2001:808:100:27::1
traceroute to 2001:808:100:27::1 (2001:808:100:27::1), 30 hops max, 80 byte packets
1 2001:470:1f0b:16c0::1 2.351 ms 2.246 ms 2.176 ms
2 2001:470:1f0a:16c0::1 532.732 ms 536.503 ms 540.042 ms
3 2001:470:0:69::1 551.066 ms 551.186 ms 551.332 ms
4 2001:470:0:204::2 539.759 ms 539.697 ms 539.707 ms
5 2001:1900:5:1::212 543.654 ms 544.432 ms 543.468 ms
6 2001:1900:5:1::22e 554.480 ms 553.025 ms 557.400 ms
7 2001:1900:5:2:2::79a 567.170 ms 485.198 ms 481.445 ms
8 2001:b10:c000:20e::2 492.317 ms 492.160 ms 492.124 ms
9 2001:808:2:14::1 494.052 ms 490.331 ms 490.313 ms
10 2001:808:2:3003::66 491.600 ms 511.665 ms 511.397 ms
11 2001:808:2:3003::1 511.498 ms 520.651 ms 525.248 ms
12 2001:808:2:3003::66 538.980 ms 529.139 ms 465.515 ms
13 2001:808:2:3003::1 465.510 ms 471.017 ms 470.862 ms
14 2001:808:2:3003::66 470.815 ms 487.092 ms *
15 2001:808:2:3003::1 486.961 ms * 482.779 ms
16 2001:808:2:3003::66 485.772 ms 485.563 ms 494.629 ms
17 2001:808:2:3003::1 500.687 ms 482.447 ms 482.320 ms
18 2001:808:2:3003::66 482.242 ms 481.982 ms 487.584 ms
19 2001:808:2:3003::1 487.767 ms 488.535 ms 469.740 ms
20 2001:808:2:3003::66 469.360 ms 465.707 ms 461.992 ms
21 2001:808:2:3003::1 462.572 ms 472.969 ms 499.239 ms
22 2001:808:2:3003::66 499.131 ms 498.966 ms 531.258 ms
23 2001:808:2:3003::1 531.365 ms 508.027 ms 508.330 ms
24 2001:808:2:3003::66 508.219 ms 508.125 ms 507.514 ms
25 2001:808:2:3003::1 507.017 ms 506.551 ms 506.245 ms
26 2001:808:2:3003::66 513.665 ms 545.078 ms 545.018 ms
27 2001:808:2:3003::1 544.954 ms 513.006 ms 512.841 ms
28 2001:808:2:3003::66 510.574 ms 510.080 ms 510.176 ms
29 * 2001:808:2:3003::1 510.106 ms 522.244 ms
30 2001:808:2:3003::66 522.061 ms 521.976 ms 509.700 ms
Static tunnel does not work
Pings from here:
64 bytes from 2001:808:100:27::2: icmp_seq=2 ttl=55 time=26.4 ms
Static tunnel does not work
Shadow Hawkins on Monday, 30 December 2013 14:43:16
Hi Jerome,
Well, that PoP doesn't work for me neither.
T13710 to plpoz01 stopped working 23 Dec. No changes were made on my side. OS is FreeBSD, tunel is static. My handle is LFW-RIPE.
I see the same symptoms as Mateusz. IPv4 connectivity works, but tcpdump shows:
11:52:50.051191 IP 150.254.166.147 > 176.122.227.43: ICMP
150.254.166.147 protocol 41 unreachable, length 176
BTW: From my other tunnel (T25251 to plwaw01, which works just fine) I can't ping 2001:808:100:27::2 (and you can).
$ ping6 -c 3 2001:808:100:27::2
PING6(56=40+8+8 bytes) 2001:6a0:1cb::1 --> 2001:808:100:27::2
--- 2001:808:100:27::2 ping6 statistics ---
3 packets transmitted, 0 packets received, 100.0% packet loss
Static tunnel does not work
Shadow Hawkins on Monday, 30 December 2013 15:25:07
I'm reaching plpoz01 through other networks than Mateusz, so it seems that the problem is on man.poznan.pl network (or on plpoz01 itself).
$ traceroute -n 150.254.166.147
traceroute to 150.254.166.147 (150.254.166.147), 64 hops max, 40 byte packets
1 176.122.227.254 0.455 ms 0.279 ms 0.362 ms
2 176.122.215.246 1.466 ms 1.810 ms 2.228 ms
3 77.252.107.153 8.231 ms 9.852 ms 10.409 ms
4 83.238.248.53 16.195 ms 14.455 ms
83.238.251.101 18.461 ms
5 83.238.251.217 16.159 ms 16.542 ms 18.628 ms
6 212.126.28.210 14.927 ms 15.509 ms 15.519 ms
7 150.254.210.230 33.597 ms 32.778 ms 32.563 ms
8 150.254.166.147 32.985 ms 32.707 ms 32.530 ms
Static tunnel does not work
As stated, pings here:
64 bytes from 2001:808:100:27::2: icmp_seq=1 ttl=55 time=26.2 ms
Please include traceroutes and other details (as requested by the big yellow/orange box when posting).
Static tunnel does not work
Shadow Hawkins on Tuesday, 31 December 2013 12:37:42
With no changes on my side tunnel started to work yesterday in the evening. Mateusz, how about your case?
|
![[ch]](/s/countries/ch.gif)
on Sunday, 29 December 2013 10:32:29
Posting is only allowed when you are