IPv6 Support

[wpte]

Also, HE requires the client end-point to be 'pinagable' in order to establish a tunnel.

oh yes, forgot that one in the checklist

Edit 2: I spoke too soon. It would appear that I cannot connect to a whole host of ipv6 enabled sites, with any browser, when IPv6 is enabled. This is true, even though I received at perfect score on test-ipv6.com.

Sites like?
if that's the case you might need to contact HE about this for support

[Dapper]

Sites like?

A few of those I tried were Sixxes, sixy.ch and ipv6.internode.on.net as well as any of the HE sites. All failed with IPv6 enabled.

if that's the case you might need to contact HE about this for support

I've posted pretty much the same stuff in their forums as posted here. So far, there's not really any answers.

[theMIROn]

Just checked, all these sites are working and accessable via he.net ipv6 tunnel from router. I'm using Windows XP, Windows 7 and Debian as clients with radvd enabled.
And, btw, about ipv6 firewalling. It's here for ages. ip6tables --help

[Dapper]

Just checked, all these sites are working and accessable via he.net ipv6 tunnel from router. I'm using Windows XP, Windows 7 and Debian as clients with radvd enabled.
And, btw, about ipv6 firewalling. It's here for ages. ip6tables --help

Thanks for the reply. I don't doubt the sites work, they just won't work for me, with the configuration I'm currently using, even though test-ipv6 tells me everything is up and running. Clearly, I am doing something wrong and that's what I'm trying to sort out.

Hopefully, I'll get some more time tomorrow, so I'll set-up a tunnel without the router, just to see if it makes a difference. I also have an account with gogo6, so I'll create a tunnel with their client, too.

Thanks for the info on ip6tables, I'll take a look at that, once I have a correctly working tunnel.

[wpte]

Is your modem also pingable?
or does it send the ping to the router?
either way, HE tunnel needs that

I was thinking, because I have my router in DMZ by default, if the router is behind a firewall and accept pings it doesn't make any difference

[maros]

Hi,
I've setup the 6to4 tunel - I'm able to ping ipv6 sites from router.

$ traceroute6 www.abclinuxu.cz
traceroute to www.abclinuxu.cz (2a01:430:10:ab::3), 30 hops max, 16 byte packets
 1  2002:c058:6301::1 (2002:c058:6301::1)  7.590 ms  6.985 ms  7.065 ms
 2  2001:1488::1 (2001:1488::1)  7.506 ms  7.686 ms  7.186 ms
 3  nix-ipv6.masterinter.net (2001:7f8:14::11:1)  8.761 ms  7.549 ms  7.369 ms
 4  2a01:430:10:ab::3 (2a01:430:10:ab::3)  21.780 ms  11.335 ms  7.479 ms

But I'm not able to use IPv6 from clients. First, they didn't have IPv6 address. I found I should use radvd daemon. I used following configuration:

$ cat /opt/etc/radvd.conf
interface br0 {
    AdvSendAdvert on;
    MinRtrAdvInterval 3; 
    MaxRtrAdvInterval 10;
    prefix 2002:bcaf:2821::/64 {
        AdvOnLink off;
        AdvAutonomous on;
        AdvRouterAddr on;
        Base6to4Interface vlan1;
        AdvPreferredLifetime 20;
        AdvValidLifetime 30;
    };
};

Now clients have IPv6 address, but ping6 still does not work.

|20:34:25 marian@nb ~| $ tracepath6  www.abclinuxu.cz
 1?: [LOCALHOST]                        0.047ms pmtu 1500
 1:  no reply
 2:  no reply
 3:  no reply
 4:  no reply
 5:  no reply
 6:  no reply
 7:  no reply
 8:  no reply
 9:  no reply
10:  no reply
11:  no reply
12:  no reply
13:  no reply
14:  no reply
15:  no reply
16:  no reply
17:  no reply
18:  no reply
19:  no reply
20:  no reply
21:  no reply
22:  no reply
23:  no reply
24:  no reply
25:  no reply
26:  no reply
27:  no reply
28:  no reply
29:  no reply
30:  no reply
31:  no reply
     Too many hops: pmtu 1500
     Resume: pmtu 1500

I'm using 1.9.2.7-d-r2381.

Does I need setup something more?
Is starting of radvd somewhere in web interface?

EDIT: I did touch nothing, but now it works. So the only question is about radvd.

[wpte]

Does I need setup something more?
Is starting of radvd somewhere in web interface?

EDIT: I did touch nothing, but now it works. So the only question is about radvd.

Yes, in the menu you can select to broadcast the ipv6 availability.
It's in the ipv6 menu.

For clients you might need to reboot, or reconfigure the interface

[maros]

Yes, in the menu you can select to broadcast the ipv6 availability.
It's in the ipv6 menu.

Do you mean "Enable router advertisements:"? I've set it to 'Yes'.

For clients you might need to reboot, or reconfigure the interface

I did a re-connect to wifi. On NB it works now, but on my second computer still does not work. Even after restart. Unfotunately, I've no time to investigate it deeply this week :-(

[Dapper]

Apologies for the delay in posting, I've been very busy.

I finally had some time to come back to this problem and I've established the cause of the problem to be the router.

In trouble shooting, I performed the following tasks:

1. Configured IPv6 in the router and updated the tunnel details with HE.
2. Verified connectivity by ping -6 (from the PC) to various IPv6 enabled sites (ipv6.he.net, ipv6.google.com etc.)
3. Tried browsing to various ipv6 enabled sites. Connectivity was available but it was incredibly slow and often timed out completely.
4. Placed the PC in the router DMZ and performed the steps above. No difference was discernible.
5. Turned off the firewall in the router and performed the steps above. No difference discernible.
5. Removed the router from the equation by connecting the PC directly to the Internet.
6. Updated the tunnel details and ran the netsh script from he to configure the tunnel endpoint on the PC.
7. Everything worked as expected

Clearly the router configuration is incorrect but I don't know what I've done wrong. The configuration is as I outlined in my earlier posts and as I say, I can ping -6 various hosts from the PC and although it's horribly slow, I can connect via the browser.

So any clues as to what I may have done wrong or ideas about what I can do to rectify the problem, would be most welcome.

Thanks

[wpte]

So any clues as to what I may have done wrong or ideas about what I can do to rectify the problem, would be most welcome

Oh yes, the thing I always forget to mention actually
Is your router pingable from the internet, that's required by HE

[theMIROn]

Oh yes, the thing I always forget to mention actually
Is your router pingable from the internet, that's required by HE

Would it be usefull to open icmp on the firewall automagicaly from 6to4 tunnel server?

[wpte]

Would it be usefull to open icmp on the firewall automagicaly from 6to4 tunnel server?

would be a good idea, since many people have problems with that part

but it should also be mentioned then somewhere on the web-gui perhaps?

[Dapper]

Oh yes, the thing I always forget to mention actually
Is your router pingable from the internet, that's required by HE

It is 'pingable' if it wasn't I wouldn't have been able to configure it as the end-point for the tunnel. (For now, I have a dynamic address, which changes when the router is booted)

As I said, once the tunnel is established, I can ping ipv6 sites and I can, albeit painfully slowly, connect to ipv6 sites from within the browser.

If there were some issue with ICMP, would this cause the browser issues?

Would it be usefull to open icmp on the firewall automagicaly from 6to4 tunnel server?

I think this would be a good idea. As wpte mentioned, it's something easily overlooked.

[Dapper]

I could really use some help here, please. I feel like I'm banging my head against a wall.

After more testing today, I've found that when testing against http://www.test-ipv6.com

A. With the router connected the 'IPv6 large packet test' always fails with a timeout. All other tests pass.
B. With the router removed and a direct connection to the Internet from the PC, the test is always passed.

According to the site, if this test fails, it may be due to "PMTUD issues; possibly involving IP tunnels." If this is a possible reason for the problems I'm encountering, which settings in the router might be the cause

[wpte]

Sorry Dapper, I'm also not quite sure what the problem is.
but concerning the path MTU... are you sure the tunnel mtu and ttl is filled in?
for mtu I use 1280, and ttl 64.
perhaps you can try to make the MTU larger?

for me everything runs fine except "Test with IPv4 DNS record" because I use openDNS, which is a false positive