[6bone] problem setting up routing for a /48

John Fraizer tvo@EnterZone.Net
Wed, 10 Jul 2002 17:14:54 -0400 (EDT)


I am having problems getting routing to work with IPv6 and linux.

I have a tunnel set up to freenet6 on router1.

Freenet6 has assigned 3ffe:b80:e32::/48 to me and I have
3ffe:b80:e32:1::1/64 bound up on lec0.

[root@Border1 bin]# ip -6 address
1: lo: <LOOPBACK,UP> mtu 16436 qdisc noqueue
    inet6 ::1/128 scope host
2: eth0: <BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast qlen 100
    inet6 fe80::250:4ff:fe76:4875/10 scope link
4: dummy0: <BROADCAST,NOARP,UP> mtu 1500 qdisc noqueue
    inet6 fe80::200:ff:fe00:0/10 scope link
8: lec0: <BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast qlen 100
    inet6 fe80::220:48ff:fe0e:e3cc/10 scope link
    inet6 3ffe:b80:e32:1::1/64 scope global
9: sit1@NONE: <POINTOPOINT,NOARP,UP> mtu 1480 qdisc noqueue
    inet6 fe80::4223:5f1e/10 scope link
    inet6 fe80::4223:4025/10 scope link
    inet6 fe80::d173:7f16/10 scope link
    inet6 3ffe:b80:2:a8ac::2/128 scope global
    inet6 fe80::4223:5f01/10 scope link

The routing table appears to be appropriate:

[root@Border1 bin]# ip -6 route
3ffe:b80:e32:1::/64 dev lec0  proto kernel  metric 256  mtu 1500
3ffe:b80:e32::/48 dev lec0  metric 1  mtu 1500
fe80::/10 dev dummy0  proto kernel  metric 256  mtu 1500
fe80::/10 dev eth0  proto kernel  metric 256  mtu 1500
fe80::/10 dev lec0  proto kernel  metric 256  mtu 1500
fe80::/10 via :: dev sit1  proto kernel  metric 256  mtu 1480
ff00::/8 dev dummy0  proto kernel  metric 256  mtu 1500
ff00::/8 dev eth0  proto kernel  metric 256  mtu 1500
ff00::/8 dev lec0  proto kernel  metric 256  mtu 1500
ff00::/8 dev sit1  proto kernel  metric 256  mtu 1480
default dev sit1  metric 1  mtu 1480
unreachable default dev lo  metric -1  error -101


I have 3ffe:b80:e32:1::2/64 bound up on router2:

[root@Border2 bin]# ip -6 address
1: lo: <LOOPBACK,UP> mtu 16436 qdisc noqueue
    inet6 ::1/128 scope host
2: eth0: <BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast qlen 100
    inet6 fe80::290:27ff:fecb:aafb/10 scope link
    inet6 3ffe:b80:e32:1::2/64 scope global
3: dummy0: <BROADCAST,NOARP,UP> mtu 1500 qdisc noqueue
    inet6 fe80::200:ff:fe00:0/10 scope link

...and the appropriate default (::/0) pointed at 3ffe:b80:e32:1::1

[root@Border2 bin]# ip -6 route
3ffe:b80:e32:1::/64 dev eth0  proto kernel  metric 256  mtu 1500
fe80::/10 dev dummy0  proto kernel  metric 256  mtu 1500
fe80::/10 dev eth0  proto kernel  metric 256  mtu 1500
ff00::/8 dev dummy0  proto kernel  metric 256  mtu 1500
ff00::/8 dev eth0  proto kernel  metric 256  mtu 1500
default via 3ffe:b80:e32:1::1 dev eth0  metric 1024  mtu 1500
unreachable default dev lo  metric -1  error -101


The problem is that routing is problematic at best from router2:

[root@Border2 bin]# ping6 www.6bone.net
PING www.6bone.net(www.6bone.net) 56 data bytes
>From 3ffe:b80:e32:1::1: Destination unreachable: Address unreachable
>From 3ffe:b80:e32:1::1: Destination unreachable: Address unreachable

--- www.6bone.net ping statistics ---
2 packets transmitted, 0 packets received, +2 errors, 100% packet loss

If I ping www.6bone.net from router1:

[root@Border1 bin]# ping6 www.6bone.net
PING www.6bone.net(www.6bone.net) 56 data bytes
64 bytes from www.6bone.net: icmp_seq=0 hops=62 time=52.691 msec
64 bytes from www.6bone.net: icmp_seq=1 hops=62 time=72.086 msec

--- www.6bone.net ping statistics ---
2 packets transmitted, 2 packets received, 0% packet loss
round-trip min/avg/max/mdev = 52.691/62.388/72.086/9.700 ms

...I can then reach it from router2.  In the display below, I started a
ping6 from router2 to www.6bone.net.  I then started a ping6 from router1
(the gateway for router2) to www.6bone.net.  As soon as the ping6 on
router1 started, the ping6 on router2 starts working:

[root@Border2 bin]# ping6 www.6bone.net
PING www.6bone.net(www.6bone.net) 56 data bytes
>From 3ffe:b80:e32:1::1: Destination unreachable: Address unreachable
>From 3ffe:b80:e32:1::1: Destination unreachable: Address unreachable
>From 3ffe:b80:e32:1::1: Destination unreachable: Address unreachable
64 bytes from www.6bone.net: icmp_seq=3 hops=61 time=53.873 msec
64 bytes from www.6bone.net: icmp_seq=4 hops=61 time=53.169 msec
64 bytes from www.6bone.net: icmp_seq=5 hops=61 time=53.721 msec

--- www.6bone.net ping statistics ---
7 packets transmitted, 3 packets received, +3 errors, 57% packet loss
round-trip min/avg/max/mdev = 53.169/53.587/53.873/0.403 ms


I then stopped the ping6 on router1 and soon after, router2 could no
longer reach www.6bone.net:

[root@Border2 bin]# ping6 www.6bone.net
PING www.6bone.net(www.6bone.net) 56 data bytes
64 bytes from www.6bone.net: icmp_seq=0 hops=61 time=58.586 msec
64 bytes from www.6bone.net: icmp_seq=1 hops=61 time=53.383 msec
64 bytes from www.6bone.net: icmp_seq=2 hops=61 time=59.519 msec
64 bytes from www.6bone.net: icmp_seq=3 hops=61 time=63.576 msec
64 bytes from www.6bone.net: icmp_seq=4 hops=61 time=61.473 msec
64 bytes from www.6bone.net: icmp_seq=5 hops=61 time=59.763 msec
64 bytes from www.6bone.net: icmp_seq=6 hops=61 time=53.719 msec
64 bytes from www.6bone.net: icmp_seq=7 hops=61 time=59.625 msec
64 bytes from www.6bone.net: icmp_seq=8 hops=61 time=59.989 msec
64 bytes from www.6bone.net: icmp_seq=9 hops=61 time=53.450 msec
64 bytes from www.6bone.net: icmp_seq=10 hops=61 time=53.551 msec
64 bytes from www.6bone.net: icmp_seq=11 hops=61 time=53.595 msec
64 bytes from www.6bone.net: icmp_seq=12 hops=61 time=59.718 msec
64 bytes from www.6bone.net: icmp_seq=13 hops=61 time=65.459 msec
64 bytes from www.6bone.net: icmp_seq=14 hops=61 time=53.319 msec
64 bytes from www.6bone.net: icmp_seq=15 hops=61 time=54.186 msec
64 bytes from www.6bone.net: icmp_seq=16 hops=61 time=56.177 msec
64 bytes from www.6bone.net: icmp_seq=17 hops=61 time=53.511 msec
64 bytes from www.6bone.net: icmp_seq=18 hops=61 time=53.473 msec
64 bytes from www.6bone.net: icmp_seq=19 hops=61 time=54.107 msec
64 bytes from www.6bone.net: icmp_seq=20 hops=61 time=59.824 msec
64 bytes from www.6bone.net: icmp_seq=21 hops=61 time=53.605 msec
>From 3ffe:b80:e32:1::1: Destination unreachable: Address unreachable
>From 3ffe:b80:e32:1::1: Destination unreachable: Address unreachable

--- www.6bone.net ping statistics ---
24 packets transmitted, 22 packets received, +2 errors, 8% packet loss
round-trip min/avg/max/mdev = 53.319/56.982/65.459/3.750 ms


Traceroute6 yields the same results.  As long as router1 has a ping6 going
against www.6bone.net, router2 can get there via router1:

[root@Border2 bin]# traceroute6 www.6bone.net
traceroute to 6bone.net (3ffe:b00:c18:1::10) from 3ffe:b80:e32:1::2, 30
hops max, 16 byte packets
 1  3ffe:b80:e32:1::1 (3ffe:b80:e32:1::1)  2.269 ms  1.306 ms  0.871 ms
 2  3ffe:b00:c18:1:2a0:c9ff:fefc:1feb (3ffe:b00:c18:1:2a0:c9ff:fefc:1feb)  62.574 ms  93.856 ms  61.972 ms
 3  www.6bone.net (3ffe:b00:c18:1::10)  82.151 ms  53.484 ms  53.66 ms

...within 30 seconds of stopping the ping6 to www.6bone.net on router1,
router2 can't get there:

[root@Border2 bin]# traceroute6 www.6bone.net
traceroute to 6bone.net (3ffe:b00:c18:1::10) from 3ffe:b80:e32:1::2, 30
hops max, 16 byte packets
 1  3ffe:b80:e32:1::1 (3ffe:b80:e32:1::1)  0.997 ms !H  1.668 ms !H  0.873 ms !H


Can anyone tell me what I'm doing wrong here?  I'm at my wits end!


---
John Fraizer              | High-Security Datacenter Services |
EnterZone, Inc            | Dedicated circuits 64k - 155M OC3 |
http://www.enterzone.net/ | Virtual, Dedicated, Colocation    |