Ticket ID: SIXXS #5521442 Ticket Status: User PoP: plwaw01 - ICM (Warsaw)
Subnet Routing Problem - destination unreachable (T65169)
Shadow Hawkins on Thursday, 08 September 2011 01:02:01
I have a problem with subnet (R47154) on my tunnel (T65169).
When I send pings from 2001:6a0:1ab::1 to my tunnel endpoint address, everything is ok. I get a reply.
IP6 2001:6a0:1ab::1 > 2001:6a0:200:288::2: ICMP6, echo request, seq 1, length 64
IP6 2001:6a0:200:288::2 > 2001:6a0:1ab::1: ICMP6, echo reply, seq 1, length 64
But When I send pings from 2001:6a0:1ab::1 to subnet, I'm getting an error from tunnel endpoint on your side.
IP6 2001:6a0:1ab::1 > 2001:6a0:310::1: ICMP6, echo request, seq 1, length 64
IP6 2001:6a0:310::1 > 2001:6a0:1ab::1: ICMP6, echo reply, seq 1, length 64
IP6 2001:6a0:200:288::1 > 2001:6a0:310::1: ICMP6, destination unreachable, unreachable port
All packets sent from my subnet are rejected by tunnel with destination unreachable error.
State change: user
Jeroen Massar on Thursday, 08 September 2011 01:37:19
The state of this ticket has been changed to user
Subnet Routing Problem - destination unreachable (T65169)
Jeroen Massar on Thursday, 08 September 2011 01:37:52
What is the route of these packets and what other configuration are in place?
Subnet Routing Problem - destination unreachable (T65169)
Shadow Hawkins on Thursday, 08 September 2011 17:50:58
There are two Tunnels in one PoP (plwaw01).
(Subnet A) ===(Tunnel A)===> (plwaw01 PoP) ===(Tunnel B)==>(Subnet B)
Subnet A and Tunnel A are OK. I can connect from Subnet addresses and Tunnel A endpoint address to any IPv6 host.
Tunnel B endpoint address works too.
I add subnet B address to other interface on the router with Tunnel B.
When I send some packets which source address is Subnet B, tunnel endpoint on PoP I got "destination unreachable, unreachable port" from PoP.
The same situation is when I send packets from Tunnel/Subnet A.
ICMPv6 Request are going to Subnet B address, but Reply (src addr is from Subnet B) is rejected by PoP.
Debian Linux configuration:
ip6tables is empty, ACCEPT policy
IPv6 routing enabled: net.ipv6.conf.all.forwarding = 1
Posting is only allowed when you are logged in. |