Ticket ID: SIXXS #6758690 Ticket Status: Invalid PoP: gblon02 - Goscomb Technologies (London)
glonb02 dropped 2 tunnels
Shadow Hawkins on Tuesday, 03 April 2012 08:18:20
Both my tunnels to the sixes ipv6 network which go via glonb02 have dropped.
NIC Handle MCJ9-SIXXS
T39369gblon02 - Goscomb Technologiesheartbeat 2a01:348:6:39f::2
T22965gblon02 - Goscomb Technologies118.107.51.2402a01:348:6:25e::2
The two systems run different configurations. The first uses aiccu and heartbeat from a freebsd box and the second runs m0n0wall in a static configuration.
The problem appears to be a failure of glonb02 to create tunnels and pass ip6 packets.
According to aiccu when run on the heartbeat tunnel:
# /usr/local/sbin/sixxs-aiccu test /usr/local/etc/aiccu.conf
ifconfig: SIOCIFCREATE2: File exists
route: writing to routing socket: File exists
add net default: gateway 2a01:348:6:39f::1: route already in table
#######
####### AICCU Quick Connectivity Test
#######
####### [1/8] Ping the IPv4 Local/Your Outer Endpoint (110.232.242.134)
### This should return so called 'echo replies'
### If it doesn't then check your firewall settings
### Your local endpoint should always be pingable
### It could also indicate problems with your IPv4 stack
PING 110.232.242.134 (110.232.242.134): 56 data bytes
64 bytes from 110.232.242.134: icmp_seq=0 ttl=64 time=1.231 ms
121 bytes from gblon02.sixxs.net (77.75.104.126): Destination Port Unreachable
Vr HL TOS Len ID Flg off TTL Pro cks Src Dst
4 5 00 7100 0d99 0 0000 27 11 6eab 110.232.242.134 77.75.104.126
UDP: from port 60934, to port 3740 (decimal)
64 bytes from 110.232.242.134: icmp_seq=1 ttl=64 time=1.087 ms
124 bytes from gblon02.sixxs.net (77.75.104.126): Destination Protocol Unreachable
Vr HL TOS Len ID Flg off TTL Pro cks Src Dst
4 5 00 7400 0dc5 0 0000 05 29 9064 110.232.242.134 77.75.104.126
64 bytes from 110.232.242.134: icmp_seq=2 ttl=64 time=0.856 ms
--- 110.232.242.134 ping statistics ---
3 packets transmitted, 3 packets received, 0.0% packet loss
round-trip min/avg/max/stddev = 0.856/1.058/1.231/0.154 ms
######
Did this work? [Y/n]
####### [2/8] Ping the IPv4 Remote/PoP Outer Endpoint (77.75.104.126)
### These pings should reach the PoP and come back to you
### In case there are problems along the route between your
### host and the PoP this could not return replies
### Check your firewall settings if problems occur
PING 77.75.104.126 (77.75.104.126): 56 data bytes
64 bytes from 77.75.104.126: icmp_seq=0 ttl=50 time=351.580 ms
64 bytes from 77.75.104.126: icmp_seq=1 ttl=50 time=350.114 ms
84 bytes from gblon02.sixxs.net (77.75.104.126): Destination Protocol Unreachable
Vr HL TOS Len ID Flg off TTL Pro cks Src Dst
4 5 00 4c00 0dfb 0 0000 05 29 9056 110.232.242.134 77.75.104.126
92 bytes from gblon02.sixxs.net (77.75.104.126): Destination Protocol Unreachable
Vr HL TOS Len ID Flg off TTL Pro cks Src Dst
4 5 00 5400 0dfc 0 0000 05 29 904d 110.232.242.134 77.75.104.126
64 bytes from 77.75.104.126: icmp_seq=2 ttl=50 time=358.087 ms
--- 77.75.104.126 ping statistics ---
3 packets transmitted, 3 packets received, 0.0% packet loss
round-trip min/avg/max/stddev = 350.114/353.260/358.087/3.465 ms
######
Did this work? [Y/n]
####### [3/8] Traceroute to the PoP (77.75.104.126) over IPv4
### This traceroute should reach the PoP
### In case this traceroute fails then you have no connectivity
### to the PoP and this is most probably the problem
traceroute to 77.75.104.126 (77.75.104.126), 64 hops max, 40 byte packets
1 loop0.core2.smithst.dcsi.net.au (203.27.231.24) 38.093 ms 46.859 ms 39.998 ms
2 gi0-1-200.core1.smithst.dcsi.net.au (203.27.231.17) 25.852 ms 63.611 ms 38.729 ms
3 gi4-0-2.core1.portmel.aussiebb.net (202.142.143.145) 43.055 ms 53.602 ms 22.528 ms
4 gi5-1.bdr1.portmel.aussiebb.net (180.150.0.149) 37.276 ms 45.148 ms 24.841 ms
5 GigabitEthernet2-11.lon55.Melbourne.telstra.net (165.228.138.149) 44.830 ms * 48.035 ms
6 TenGigabitEthernet0-12-0-2.exi-core1.Melbourne.telstra.net (203.50.80.1) 57.939 ms 60.152 ms 49.691 ms
7 Bundle-Ether12.chw-core2.Sydney.telstra.net (203.50.11.74) 59.833 ms 71.081 ms 59.712 ms
8 Bundle-Ether4.ken-core4.Sydney.telstra.net (203.50.6.41) 64.893 ms 60.177 ms 59.808 ms
9 Bundle-Ether1.pad-gw2.Sydney.telstra.net (203.50.6.29) 59.827 ms 60.650 ms 59.741 ms
10 203.50.13.154 (203.50.13.154) 59.876 ms 61.811 ms 59.885 ms
11 i-0-0-2-0.tlot-core01.bx.reach.com (202.84.140.78) 209.802 ms 219.934 ms 209.811 ms
12 i-1-1.tlot03.bi.reach.com (202.84.251.234) 204.748 ms 211.311 ms 204.906 ms
13 xe-11-2-0.edge1.losangeles6.level3.net (4.68.62.9) 214.746 ms 220.607 ms 214.855 ms
14 vlan80.csw3.LosAngeles1.Level3.net (4.69.144.190) 214.664 ms
vlan70.csw2.LosAngeles1.Level3.net (4.69.144.126) 215.152 ms
vlan60.csw1.LosAngeles1.Level3.net (4.69.144.62) 224.985 ms
15 ae-83-83.ebr3.LosAngeles1.Level3.net (4.69.137.41) 229.857 ms
ae-73-73.ebr3.LosAngeles1.Level3.net (4.69.137.37) 218.734 ms
ae-63-63.ebr3.LosAngeles1.Level3.net (4.69.137.33) 240.022 ms
16 ae-3-3.ebr1.SanJose1.Level3.net (4.69.132.9) 249.478 ms 219.749 ms 215.462 ms
17 ae-2-2.ebr2.NewYork1.Level3.net (4.69.135.186) 284.734 ms 285.790 ms 284.861 ms
18 ae-62-62.csw1.NewYork1.Level3.net (4.69.148.34) 284.751 ms
ae-82-82.csw3.NewYork1.Level3.net (4.69.148.42) 301.001 ms
ae-92-92.csw4.NewYork1.Level3.net (4.69.148.46) 287.889 ms
19 ae-71-71.ebr1.NewYork1.Level3.net (4.69.134.69) 296.098 ms 286.034 ms
ae-81-81.ebr1.NewYork1.Level3.net (4.69.134.73) 289.796 ms
20 ae-43-43.ebr2.London1.Level3.net (4.69.137.73) 370.853 ms
ae-44-44.ebr2.London1.Level3.net (4.69.137.77) 370.964 ms
ae-43-43.ebr2.London1.Level3.net (4.69.137.73) 371.546 ms
21 ae-59-224.csw2.London1.Level3.net (4.69.153.142) 348.485 ms
ae-58-223.csw2.London1.Level3.net (4.69.153.138) 360.713 ms
ae-56-221.csw2.London1.Level3.net (4.69.153.130) 350.772 ms
22 ae-2-52.edge4.London1.Level3.net (4.69.139.106) 360.885 ms * *
23 195.50.122.242 (195.50.122.242) 420.839 ms 352.752 ms 359.761 ms
24 xe-0-0-1.rt0.the.uk.goscomb.net (46.17.60.33) 359.934 ms 360.695 ms 364.638 ms
25 xe-0-1-0.cs0.thw.uk.goscomb.net (93.89.91.14) 349.807 ms 355.839 ms 346.844 ms
26 gblon02.sixxs.net (77.75.104.126) 367.799 ms 358.697 ms 372.674 ms
######
Did this work? [Y/n]
###### [4/8] Checking if we can ping IPv6 localhost (::1)
### This confirms if your IPv6 is working
### If ::1 doesn't reply then something is wrong with your IPv6 stack
PING6(56=40+8+8 bytes) ::1 --> ::1
16 bytes from ::1: Echo Request
16 bytes from ::1, icmp_seq=0 hlim=64 dst=::1%4 time=3.631 ms
16 bytes from ::1: Echo Request
16 bytes from ::1, icmp_seq=1 hlim=64 dst=::1%4 time=2.448 ms
16 bytes from ::1: Echo Request
16 bytes from ::1, icmp_seq=2 hlim=64 dst=::1%4 time=1.289 ms
--- ::1 ping6 statistics ---
3 packets transmitted, 3 packets received, 0.0% packet loss
round-trip min/avg/max/std-dev = 1.289/2.456/3.631/0.956 ms
######
Did this work? [Y/n]
###### [5/8] Ping the IPv6 Local/Your Inner Tunnel Endpoint (2a01:348:6:39f::2)
### This confirms that your tunnel is configured
### If it doesn't reply then check your interface and routing tables
PING6(56=40+8+8 bytes) 2a01:348:6:39f::2 --> 2a01:348:6:39f::2
16 bytes from 2a01:348:6:39f::2: Echo Request
16 bytes from 2a01:348:6:39f::2, icmp_seq=0 hlim=64 dst=2a01:348:6:39f::2%7 time=3.533 ms
16 bytes from 2a01:348:6:39f::2: Echo Request
16 bytes from 2a01:348:6:39f::2, icmp_seq=1 hlim=64 dst=2a01:348:6:39f::2%7 time=2.322 ms
56 bytes from fe80::260:b0ff:feb5:a53a%pcn0: Router Advertisement
16 bytes from 2a01:348:6:39f::2: Echo Request
16 bytes from 2a01:348:6:39f::2, icmp_seq=2 hlim=64 dst=2a01:348:6:39f::2%7 time=2.277 ms
--- 2a01:348:6:39f::2 ping6 statistics ---
3 packets transmitted, 3 packets received, 0.0% packet loss
round-trip min/avg/max/std-dev = 2.277/2.711/3.533/0.582 ms
######
Did this work? [Y/n]
###### [6/8] Ping the IPv6 Remote/PoP Inner Tunnel Endpoint (2a01:348:6:39f::1)
### This confirms the reachability of the other side of the tunnel
### If it doesn't reply then check your interface and routing tables
### Don't forget to check your firewall of course
### If the previous test was succesful then this could be both
### a firewalling and a routing/interface problem
PING6(56=40+8+8 bytes) 2a01:348:6:39f::2 --> 2a01:348:6:39f::1
--- 2a01:348:6:39f::1 ping6 statistics ---
3 packets transmitted, 0 packets received, 100.0% packet loss
######
Did this work? [Y/n]
HE looking glass shows glomb02 end of tunnel not present
core1.fmt1.he.net> ping ipv6 2a01:348:6:39f::1 numeric count 5
Sending 5, 16-byte ICMPv6 Echo to 2a01:348:6:39f::1
timeout 5000 msec, Hop Limit 64
Request timed out.
Request timed out.
Request timed out.
Request timed out.
Request timed out.
No reply from remote host.# Entry cached for another 35 seconds.
core1.fmt1.he.net> ping ipv6 2a01:348:6:25e::1 numeric count 5
Sending 5, 16-byte ICMPv6 Echo to 2a01:348:6:25e::1
timeout 5000 msec, Hop Limit 64
Request timed out.
Request timed out.
Request timed out.
Request timed out.
Request timed out.
No reply from remote host.# Entry cached for another 34 seconds.
Additional information
HE Traceroute
core1.fmt1.he.net> traceroute ipv6 2a01:348:6:39f::1
Tracing the route to IPv6 node 2a01:348:6:39f::1 from 1 to 30 hops
1 82 ms 1 ms <1 ms 2001:470:0:2f::2
2 55 ms 38 ms 27 ms 2001:470:0:1b4::2
3 54 ms 83 ms 65 ms 2001:470:0:1af::1
4 71 ms 74 ms 92 ms 2001:470:0:1c6::1
5 151 ms 152 ms 153 ms 2001:470:0:128::2
6 150 ms 142 ms 149 ms 2001:7f8:4::999e:1
7 150 ms 153 ms 157 ms 2a01:348::49:1:1
8 138 ms * * 2a01:348::27:1:1
9 149 ms 164 ms 162 ms 2a01:348:0:4:0:3:1:1
10 147 ms 155 ms 144 ms 2a01:348:0:4:0:3:0:1
11 201 ms 147 ms 149 ms 2a01:348:0:4:0:3:1:1
12 152 ms * 164 ms 2a01:348:0:4:0:3:0:1
13 161 ms 149 ms 161 ms 2a01:348:0:4:0:3:1:1
14 149 ms 139 ms 153 ms 2a01:348:0:4:0:3:0:1
15 145 ms 150 ms 150 ms 2a01:348:0:4:0:3:1:1
16 155 ms 182 ms 161 ms 2a01:348:0:4:0:3:0:1
17 149 ms 149 ms 149 ms 2a01:348:0:4:0:3:1:1
18 212 ms * 361 ms 2a01:348:0:4:0:3:0:1
19 157 ms 156 ms 149 ms 2a01:348:0:4:0:3:1:1
20 151 ms 152 ms * 2a01:348:0:4:0:3:0:1
21 214 ms 159 ms 150 ms 2a01:348:0:4:0:3:1:1
22 151 ms 148 ms * 2a01:348:0:4:0:3:0:1
23 148 ms 186 ms 143 ms 2a01:348:0:4:0:3:1:1
24 145 ms 151 ms 151 ms 2a01:348:0:4:0:3:0:1
25 146 ms 151 ms 153 ms 2a01:348:0:4:0:3:1:1
26 146 ms 149 ms 149 ms 2a01:348:0:4:0:3:0:1
27 149 ms 149 ms 150 ms 2a01:348:0:4:0:3:1:1
28 158 ms 141 ms 174 ms 2a01:348:0:4:0:3:0:1
29 167 ms 157 ms 149 ms 2a01:348:0:4:0:3:1:1
30 227 ms 172 ms 194 ms 2a01:348:0:4:0:3:0:1
IP: Errno(8) Trace Route Failed, no response from target node.# Entry cached for another 33 seconds.
core1.fmt1.he.net> traceroute ipv6 2a01:348:6:25e::1
Tracing the route to IPv6 node 2a01:348:6:25e::1 from 1 to 30 hops
1 4 ms <1 ms <1 ms 2001:470:0:2f::2
2 27 ms 53 ms 40 ms 2001:470:0:1b4::2
3 65 ms 68 ms 126 ms 2001:470:0:1af::1
4 69 ms 70 ms 74 ms 2001:470:0:1c6::1
5 149 ms 149 ms 149 ms 2001:470:0:128::2
6 150 ms 200 ms 148 ms 2001:7f8:4::999e:1
7 156 ms 146 ms 149 ms 2a01:348::49:1:1
8 * 151 ms 163 ms 2a01:348::27:1:1
9 198 ms * 181 ms 2a01:348:0:4:0:3:1:1
10 147 ms 149 ms 148 ms 2a01:348:0:4:0:3:0:1
11 149 ms 156 ms 146 ms 2a01:348:0:4:0:3:1:1
12 147 ms * 150 ms 2a01:348:0:4:0:3:0:1
13 161 ms 138 ms 166 ms 2a01:348:0:4:0:3:1:1
14 158 ms 180 ms 160 ms 2a01:348:0:4:0:3:0:1
15 159 ms 149 ms * 2a01:348:0:4:0:3:1:1
16 152 ms 162 ms 173 ms 2a01:348:0:4:0:3:0:1
17 146 ms 142 ms 149 ms 2a01:348:0:4:0:3:1:1
18 150 ms 149 ms 149 ms 2a01:348:0:4:0:3:0:1
19 149 ms 150 ms 150 ms 2a01:348:0:4:0:3:1:1
20 * 151 ms 166 ms 2a01:348:0:4:0:3:0:1
21 158 ms 149 ms 152 ms 2a01:348:0:4:0:3:1:1
22 151 ms 145 ms * 2a01:348:0:4:0:3:0:1
23 * 179 ms 149 ms 2a01:348:0:4:0:3:1:1
24 149 ms 150 ms 149 ms 2a01:348:0:4:0:3:0:1
25 228 ms * 204 ms 2a01:348:0:4:0:3:1:1
26 160 ms 140 ms * 2a01:348:0:4:0:3:0:1
27 166 ms 161 ms 151 ms 2a01:348:0:4:0:3:1:1
28 153 ms 148 ms 146 ms 2a01:348:0:4:0:3:0:1
29 149 ms 149 ms 151 ms 2a01:348:0:4:0:3:1:1
30 148 ms 150 ms * 2a01:348:0:4:0:3:0:1
IP: Errno(8) Trace Route Failed, no response from target node.# Entry cached for another 28 seconds.
Both trace routes appear to be looping at glomb02
State change: invalid
Jeroen Massar on Tuesday, 03 April 2012 10:13:47
The state of this ticket has been changed to invalid
glonb02 dropped 2 tunnels
Jeroen Massar on Tuesday, 03 April 2012 10:19:56 # /usr/local/sbin/sixxs-aiccu test /usr/local/etc/aiccu.conf ifconfig: SIOCIFCREATE2: File exists route: writing to routing socket: File exists add net default: gateway 2a01:348:6:39f::1: route already in table
One cannot run aiccu-test while another aiccu instance is already running.
####### [1/8] Ping the IPv4 Local/Your Outer Endpoint (110.232.242.134) ... PING 110.232.242.134 (110.232.242.134): 56 data bytes 64 bytes from 110.232.242.134: icmp_seq=0 ttl=64 time=1.231 ms
121 bytes from gblon02.sixxs.net (77.75.104.126): Destination Port Unreachable
You have a ping towards your local IP address and get responses back from a remote host?
I suggest you check your system as that is very odd.
###### [5/8] Ping the IPv6 Local/Your Inner Tunnel Endpoint (2a01:348:6:39f::2) ... PING6(56=40+8+8 bytes) 2a01:348:6:39f::2 --> 2a01:348:6:39f::2 ... 56 bytes from fe80::260:b0ff:feb5:a53a%pcn0: Router Advertisement
Why do you see router advertisements on a different interface (pcn0) when pinging a local address on a tunnel (though the kernel likely handles it as loopback)?
Can you show the details of how the tunnel is configured? Thus the output of (g)ifconfig (depending on FreeBSD version), routing tables etc?
glonb02 dropped 2 tunnels
Shadow Hawkins on Tuesday, 03 April 2012 17:36:59
Problem resolved without intervention at my end
Failure detected at 15:26 EST Australian time
Service restored 18:13 EST Australian time
Both the aiccu tunnel and the static tunnel returned to operation.
For future reference:
The file exists error is probably due to a terminated previous instance of aiccu; if I remember correctly the gif interface was probably not torn down and the routes remained.
The second issue (the system is odd) is due to the config: the router is connected by PPP over Ethernet to a bridged WiMax service for its IPv4 connection (pcn0). I also run an IPv4 IPSec link between the 2 sites.
I can provide further details in the morning. Please be aware that this service has been operating successfully without modification for many months.
glonb02 dropped 2 tunnels
Shadow Hawkins on Wednesday, 04 April 2012 01:23:32
pcn0 is the inside interface
rl0 is the outside interface
ifconfig -a pcn0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
ether 00:60:b0:b5:a5:3a
inet6 fe80::260:b0ff:feb5:a53a%pcn0 prefixlen 64 scopeid 0x1
inet 10.0.0.1 netmask 0xffffff00 broadcast 10.0.0.255
inet 192.168.0.1 netmask 0xffffff00 broadcast 192.168.0.255
inet6 2a01:348:245::1 prefixlen 64
media: Ethernet autoselect (100baseTX <full-duplex>)
status: active
rl0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
options=8<VLAN_MTU>
ether 00:18:4d:eb:92:07
inet6 fe80::218:4dff:feeb:9207%rl0 prefixlen 64 scopeid 0x2
media: Ethernet autoselect (100baseTX <full-duplex>)
status: active
plip0: flags=108851<UP,POINTOPOINT,RUNNING,SIMPLEX,MULTICAST,NEEDSGIANT> metric 0 mtu 1500
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> metric 0 mtu 16384
inet6 ::1 prefixlen 128
inet6 fe80::1%lo0 prefixlen 64 scopeid 0x4
inet 127.0.0.1 netmask 0xff000000
gre0: flags=9011<UP,POINTOPOINT,LINK0,MULTICAST> metric 0 mtu 1476
tunnel inet 203.30.68.103 --> 118.107.51.240
inet6 fe80::260:b0ff:feb5:a53a%gre0 prefixlen 64 scopeid 0x5
inet 10.0.0.2 --> 10.100.0.1 netmask 0xffffff00
tun0: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> metric 0 mtu 1492
inet 110.232.242.134 --> 203.27.231.24 netmask 0xffffffff
Opened by PID 53865
gif0: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> metric 0 mtu 1280
tunnel inet 110.232.242.134 --> 77.75.104.126
inet6 fe80::260:b0ff:feb5:a53a%gif0 prefixlen 64 scopeid 0x7
inet6 2a01:348:6:39f::2 --> 2a01:348:6:39f::1 prefixlen 128
Posting is only allowed when you are logged in. |