Dotaz: IPv6 6to4 tunel se nedostane k 192.88.99.1

[muhammat]

Konecne jsem nasel cas a odhodlani k zprovozneni IPv6 a vyskytl se zadrhel u 6to4 tunelu.

pingnout brana ::192.88.99.1 nejde vubec (pritom ipv4 adresa 192.88.99.1 je dostupna)

linux:/ # ping6 ::192.88.99.1
PING ::192.88.99.1(::192.88.99.1) 56 data bytes
^C
--- ::192.88.99.1 ping statistics ---
4 packets transmitted, 0 received, 100% packet loss, time 3002ms

pritom se posilaji zabalene pakety (protokol 41), ale odpoved uz neprijde

linux:/etc/sysconfig # tcpdump -i eth3 -vv proto ipv6 or icmp or icmp6
tcpdump: listening on eth3, link-type EN10MB (Ethernet), capture size 96 bytes
05:35:28.241640 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto IPv6 (41), length 124) fw.venku > 192.88.99.1: IP6 (hlim 64, next-header ICMPv6 (58) payload length: 64) fw.venku > ::192.88.99.1: ICMP6, echo request, length 64, seq 1
05:35:29.244407 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto IPv6 (41), length 124) fw.venku > 192.88.99.1: IP6 (hlim 64, next-header ICMPv6 (58) payload length: 64) fw.venku > ::192.88.99.1: ICMP6, echo request, length 64, seq 2
05:35:30.244263 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto IPv6 (41), length 124) fw.venku > 192.88.99.1: IP6 (hlim 64, next-header ICMPv6 (58) payload length: 64) fw.venku > ::192.88.99.1: ICMP6, echo request, length 64, seq 3
05:35:31.244207 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto IPv6 (41), length 124) fw.venku > 192.88.99.1: IP6 (hlim 64, next-header ICMPv6 (58) payload length: 64) fw.venku > ::192.88.99.1: ICMP6, echo request, length 64, seq 4

pouzitim utility hping jsem zjistil, ze protokol 41 skonci na nix-g.nic.cz

linux:/ # hping3 -0 -t 1 -H 41 -T 192.88.99.1
HPING 192.88.99.1 (eth3 192.88.99.1): raw IP mode set, 20 headers + 0 data bytes
hop=1 TTL 0 during transit from ip=197.168.21.1 name=gate.venku
hop=2 TTL 0 during transit from ip=62.240.181.145 name=UNKNOWN
hop=3 TTL 0 during transit from ip=62.240.181.129 name=UNKNOWN
hop=4 TTL 0 during transit from ip=172.16.37.1 name=UNKNOWN
hop=5 TTL 0 during transit from ip=62.240.181.17 name=UNKNOWN
hop=6 TTL 0 during transit from ip=213.192.1.29 name=v242.bb1.pop1.hk.sloane.cz
hop=7 TTL 0 during transit from ip=62.240.163.177 name=te0-7-0-0.tr1.pop1.pra.sloane.cz
hop=8 TTL 0 during transit from ip=91.210.16.13 name=nix-g.nic.cz
^C
--- 192.88.99.1 hping statistic ---
15 packets tramitted, 8 packets received, 47% packet loss
round-trip min/avg/max = 0.0/0.0/0.0 ms

jeste vypis smerovaci tabulky ipv6

linux:/ # route -A inet6
Kernel IPv6 routing table
Destination                                 Next Hop                                Flags Metric Ref    Use Iface
::/96                                       ::                                      U     256    15       0 sit6to4
2002:c5a8:1502:1::/64                       ::                                      U     1024   0        0 eth4
2002::/16                                   ::                                      U     256    0        0 sit6to4
fe80::/64                                   ::                                      U     256    0        0 eth3
fe80::/64                                   ::                                      U     256    0        0 eth4
fe80::/64                                   ::                                      U     256    0        0 sit6to4
fe80::/64                                   ::                                      U     256    0        0 vlan10
::/0                                        ::192.88.99.1                           UG    1024   32       0 sit6to4
::1/128                                     ::                                      U     0      5        1 lo
::197.168.21.2/128                          ::                                      U     0      0        1 lo
2002::/128                                  ::                                      U     0      0        1 lo
2002:c5a8:1502::1/128                       ::                                      U     0      0        1 lo
fe80::/128                                  ::                                      U     0      0        1 lo
fe80::/128                                  ::                                      U     0      0        1 lo
fe80::/128                                  ::                                      U     0      0        1 lo
fe80::20e:cff:febc:16ee/128                 ::                                      U     0      0        1 lo
fe80::21b:21ff:fe20:f745/128                ::                                      U     0      14       1 lo
fe80::21b:21ff:fe20:f745/128                ::                                      U     0      0        1 lo
ff02::1/128                                 ff02::1                                 UC    0      595       0 eth4
ff00::/8                                    ::                                      U     256    0        0 eth3
ff00::/8                                    ::                                      U     256    0        0 eth4
ff00::/8                                    ::                                      U     256    0        0 sit6to4
ff00::/8                                    ::                                      U     256    0        0 vlan10

ifconfig

sit6to4   Link encap:IPv6-in-IPv4
          inet6 addr: 2002:c5a8:1502::1/16 Scope:Global
          inet6 addr: ::197.168.21.2/128 Scope:Compat
          UP RUNNING NOARP  MTU:1472  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:85 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:0 (0.0 b)  TX bytes:8824 (8.6 Kb)

Opravdu uz nevim co s tim, jestli je chyba u me nebo nekde v ceste.

---

---

Odpovědi

[NN]

A co na to obycejny traceroute6 ?

NN

[muhammat]

traceroute6 same timeouty, coz mi teda dava logiku, kdyz druhy konec tunelu nefunguje

linux:/ # traceroute6 ::192.88.99.1
traceroute to ::192.88.99.1 (::192.88.99.1), 30 hops max, 40 byte packets using UDP
 1  * * *
 2  * * *
 3  * * *
 4  * * *
 5  * * *
 6  * * *
^C
linux:/ #

[muhammat]

jeste takovy dotaz

chapu to dobre, ze pro 6to4 tunel pres cznic 6to4 relay nepotrebuji zadnou registraci ?

[muhammat]

Podle toho co jsem se docetl je potreba pro 6to4 verejna IPv4 prepocitana do IPv6, ale tvoje verejna ipv4 197.168.21.2 podle ripe.net patri mobilni siti v jizni africe. Podle nic.cz vypada konfigurace dobre jen nevidim povoleny protokol 41 na firewallu, tak to bych taky proveril. Zdroje:

http://www.root.cz/clanky/6to4-nejjednodussi-cesta-k-ipv6/

http://www.nic.cz/6to4/

NN

[muhammat]

Tyto a spoustu dalsich navodu jsem procetl zkrz nazkrz, nicmene problem zavinila pouze moje hloupost.

Jelikoz adresa rozhrani 197.168.21.2 je verejna IP, tak jsem automaticky predpokladal, ze je to moje verejna IP. Ale kdyz jsem si precetl, ze je to nejaka mobilni sit v africe, tak mi konecne sepnulo. Provider pouziva pro svoje vnitrni adresy rozsah 197.168.x.x a verejna IP, kterou navic vidim kazdy den pri pripojeni k irc, je 62.240.x.x.

Tak Vam velmi dekuji za pripominku, protoze me by to jen tak nedoslo (problem jsem hledal uplne jinde) :).

Stacilo zmenit prefix a 6to4 hned de jak po masle :).

ps. Uz se nedivim, ze 6to4 relay nesel pingnout, kdyz se odpovedi posilaly nekam do afriky.

pss. Je normalni pouzivat verejny IP pro vnitrni site (ja si teda myslel, ze by se nemelo :))

[_-]

Provider je patrně filuta.

[Radovan Garabík]

Stazuj sa providerovi, ze sa nemozes pripojit na server v Afrike. Velmi dolezity server, obchodny partner caka na kontakt a hrozi, ze neinvestuje a prides o obrovsku zakazku...

[rastos]

No ping na 192.88.99.1 mi tiež nedostáva žiadne odpovede. Ale napr. na ipv6.google.com to prejde bez problému

$ ping6 ipv6.google.com
PING ipv6.google.com(2a00:1450:4001:c01::63) 56 data bytes
64 bytes from 2a00:1450:4001:c01::63: icmp_seq=1 ttl=59 time=89.5 ms
64 bytes from 2a00:1450:4001:c01::63: icmp_seq=2 ttl=59 time=83.1 ms
...

Možno chyba nie je u teba, ale na druhom konci.

[muhammat]

Po uprave popsane vyse jede jak ipv6.google.com, tak i brana na adresach ::192.88.99.1 a 2002:c058:6301::1