Hurricane Electric tunnel won't come up...
Hi.
I swapped out my silly router for a Debian box, so I could turn up
ipv6. So now I'm seeing some really strange action in the route table
and it still isn't working for me. H.E. says ping is working from
their side, but it's certainly not working from this side.
Here's the route table strangeness evolves:
First, the table before the sit0+1 are bought up:
# route --inet6
Kernel IPv6 routing table
Destination Next Hop
Flags Metric Ref Use Iface
::1/128 ::
U 0 0 0 lo
fe80::/128 ::
U 0 0 0 lo
fe80::201:2ff:fe57:1274/128 ::
U 0 0 0 lo
fe80::211:95ff:fe21:8ae9/128 ::
U 0 0 0 lo
fe80::/64 ::
U 256 0 0 eth0
fe80::/64 ::
U 256 0 0 eth1
ff02::1/128 ff02::1
UC 0 1 1 eth1
ff00::/8 ::
U 256 0 0 eth0
ff00::/8 ::
U 256 0 0 eth1
Then I bring up the sit interfaces and apply the /64 subnet:
==========
ifconfig sit0 up
ifconfig sit0 inet6 tunnel ::64.71.128.82
ifconfig sit1 up
ifconfig sit1 inet6 add 2001:470:1F00:FFFF::C5F/127
route -A inet6 add ::/0 dev sit1
ifconfig eth1 inet6 add 2001:470:1F00:1683::1/64
==========
# route --inet6
Kernel IPv6 routing table
Destination Next Hop
Flags Metric Ref Use Iface
::1/128 ::
U 0 0 0 lo
::68.101.0.90/128 ::
U 0 0 0 lo
::127.0.0.1/128 ::
U 0 0 0 lo
::192.168.1.1/128 ::
U 0 0 0 lo
::/96 ::
U 256 0 0 sit0
2001:470:1f00:1683::/128 ::
U 0 0 0 lo
2001:470:1f00:1683::1/128 ::
U 0 0 0 lo
2001:470:1f00:1683::/64 ::
U 256 0 0 eth1
2001:470:1f00:ffff::c5e/128 ::
U 0 0 0 lo
2001:470:1f00:ffff::c5f/128 ::
U 0 0 0 lo
2001:470:1f00:ffff::c5e/127 ::
U 256 0 0 sit1
fe80::/128 ::
U 0 0 0 lo
fe80::4465:5a/128 ::
U 0 0 0 lo
fe80::c0a8:101/128 ::
U 0 0 0 lo
fe80::201:2ff:fe57:1274/128 ::
U 0 0 0 lo
fe80::211:95ff:fe21:8ae9/128 ::
U 0 0 0 lo
fe80::/64 ::
U 256 0 0 eth0
fe80::/64 ::
U 256 0 0 eth1
fe80::/64 ::
U 256 0 0 sit1
ff00::/8 ::
U 256 0 0 eth0
ff00::/8 ::
U 256 0 0 eth1
ff00::/8 ::
U 256 0 0 sit1
::/0 ::
U 1 0 0 sit1
This was with the /127 delegation that someone here warned me about
before.
So I took sit1 down and defined it as /128, then put a specific route
to the server end of the circuit down device sit1:
# ifconfig sit1 down
# ifconfig sit1 up
# ifconfig sit1 inet6 add 2001:470:1F00:FFFF::C5F/128
# route -A inet6 add 2001:470:1F00:FFFF::C5E/128 dev sit1
# route -A inet6 add ::/0 dev sit1
# route --inet6
Kernel IPv6 routing table
Destination Next Hop
Flags Metric Ref Use Iface
::1/128 ::
U 0 8 0 lo
::68.101.0.90/128 ::
U 0 0 0 lo
::127.0.0.1/128 ::
U 0 0 0 lo
::192.168.1.1/128 ::
U 0 0 0 lo
::/96 ::
U 256 0 0 sit0
2001:470:1f00:1683::/128 ::
U 0 0 0 lo
2001:470:1f00:1683::1/128 ::
U 0 0 0 lo
2001:470:1f00:1683:202:8aff:fe94:4801/128
2001:470:1f00:1683:202:8aff:fe94:4801 UC 0 62 0 eth1
2001:470:1f00:1683::/64 ::
U 256 0 0 eth1
2001:470:1f00:ffff::c5e/128 2001:470:1f00:ffff::c5e
UHC 0 48 0 sit1
2001:470:1f00:ffff::c5e/128 ::
UH 1 0 0 sit1
2001:470:1f00:ffff::c5f/128 ::
U 0 60 0 lo
fe80::/128 ::
U 0 0 0 lo
fe80::4465:5a/128 ::
U 0 0 0 lo
fe80::c0a8:101/128 ::
U 0 0 0 lo
fe80::201:2ff:fe57:1274/128 ::
U 0 2 0 lo
fe80::211:95ff:fe21:8ae9/128 ::
U 0 0 0 lo
fe80::/64 ::
U 256 0 0 eth0
fe80::/64 ::
U 256 0 0 eth1
fe80::/64 ::
U 256 0 0 sit1
ff02::1/128 ff02::1
UC 0 1 1 eth1
ff00::/8 ::
U 256 0 0 eth0
ff00::/8 ::
U 256 0 0 eth1
ff00::/8 ::
U 256 0 0 sit1
::/0 ::
U 1 0 0 sit1
So now the other end of the pipe is showing up as two routes, both
pointing down sit1. I still don't get any pings or traffic through.
Anyone want to suggest what I'm doing wrong? I'd be glad to take it
off-list and let you see my firewall (which has been completely
disabled to test and sure enough that didn't make any difference
either.
Curt-
--
September 11th, 2001
The proudest day for gun control and central
planning advocates in American history
Reply to: