gif tunnels on 9.0 (wheezy) not working?
Hey folks!
I'm having trouble getting gif tunnels (he.net v6tunnel) to work
(definitely worked ~1Y ago, not any more):
> ifconfig gif0 create
> ifconfig gif0 tunnel 93.104.168.176 216.66.80.30
> ifconfig gif0 inet6 2001:470:1f0a:102b::2 2001:470:1f0a:102b::1 prefixlen 128
> route -n add -inet6 default 2001:470:1f0a:102b::1
> ifconfig gif0 up
> gif0: flags=8151<UP,POINTOPOINT,RUNNING,PROMISC,MULTICAST> metric 0 mtu 1280
> tunnel inet 93.104.168.176 --> 216.66.80.30
> inet6 2001:470:1f0a:102b::2 --> 2001:470:1f0a:102b::1 prefixlen 128
> inet6 fe80::29c:2ff:fea0:c1d8%gif0 prefixlen 64 scopeid 0x13
> options=1<ACCEPT_REV_ETHIP_VER>
> nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
I can see the IPv6 packets travel to the outside:
> 18:32:51.477917 IP6 stwhsieglitzhof-1-pt.tunnel.tserv6.fra1.ipv6.he.net > stwhsieglitzhof-1.tunnel.tserv6.fra1.ipv6.he.net: ICMP6, neighbor solicitation, who has stwhsieglitzhof-1.tunnel.tserv6.fra1.ipv6.he.net, length 24
> `.....:. ..p.
> .+........ ..p.
> .+..........}..... ..p.
> .+........
And I can see the tunnel packets in both directions on the IPv4
interface:
> 18:32:47.479959 IP ppp-93-104-168-176.dynamic.mnet-online.de > tserv1.fra1.he.net: IP6 stwhsieglitzhof-1-pt.tunnel.tserv6.fra1.ipv6.he.net > stwhsieglitzhof-1.tunnel.tserv6.fra1.ipv6.he.net: ICMP6, echo request, seq 2, length 56
> E..t.....)..]h...BP.`....8:@ ..p.
> .+........ ..p.
> .+............;.../>3R.....R...............
> ..................
> 18:32:47.532209 IP tserv1.fra1.he.net > ppp-93-104-168-176.dynamic.mnet-online.de: IP6 stwhsieglitzhof-1.tunnel.tserv6.fra1.ipv6.he.net > stwhsieglitzhof-1-pt.tunnel.tserv6.fra1.ipv6.he.net: ICMP6, echo reply, seq 2, length 56
> E..t..@..)P..BP.]h..`....8:@ ..p.
> .+........ ..p.
> .+............;.../>3R.....R...............
> ..................
but I can't see the returning IPv6 packets on the gif interface (and
ping6 doesn't get anything as well).
Ideas?
Christoph
--
9FED 5C6C E206 B70A 5857 70CA 9655 22B9 D49A E731
Debian Developer | Lisp Hacker | CaCert Assurer
Reply to: