[6bone] problem setting up routing for a /48
John Fraizer
tvo@EnterZone.Net
Wed, 10 Jul 2002 17:14:54 -0400 (EDT)
I am having problems getting routing to work with IPv6 and linux.
I have a tunnel set up to freenet6 on router1.
Freenet6 has assigned 3ffe:b80:e32::/48 to me and I have
3ffe:b80:e32:1::1/64 bound up on lec0.
[root@Border1 bin]# ip -6 address
1: lo: <LOOPBACK,UP> mtu 16436 qdisc noqueue
inet6 ::1/128 scope host
2: eth0: <BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast qlen 100
inet6 fe80::250:4ff:fe76:4875/10 scope link
4: dummy0: <BROADCAST,NOARP,UP> mtu 1500 qdisc noqueue
inet6 fe80::200:ff:fe00:0/10 scope link
8: lec0: <BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast qlen 100
inet6 fe80::220:48ff:fe0e:e3cc/10 scope link
inet6 3ffe:b80:e32:1::1/64 scope global
9: sit1@NONE: <POINTOPOINT,NOARP,UP> mtu 1480 qdisc noqueue
inet6 fe80::4223:5f1e/10 scope link
inet6 fe80::4223:4025/10 scope link
inet6 fe80::d173:7f16/10 scope link
inet6 3ffe:b80:2:a8ac::2/128 scope global
inet6 fe80::4223:5f01/10 scope link
The routing table appears to be appropriate:
[root@Border1 bin]# ip -6 route
3ffe:b80:e32:1::/64 dev lec0 proto kernel metric 256 mtu 1500
3ffe:b80:e32::/48 dev lec0 metric 1 mtu 1500
fe80::/10 dev dummy0 proto kernel metric 256 mtu 1500
fe80::/10 dev eth0 proto kernel metric 256 mtu 1500
fe80::/10 dev lec0 proto kernel metric 256 mtu 1500
fe80::/10 via :: dev sit1 proto kernel metric 256 mtu 1480
ff00::/8 dev dummy0 proto kernel metric 256 mtu 1500
ff00::/8 dev eth0 proto kernel metric 256 mtu 1500
ff00::/8 dev lec0 proto kernel metric 256 mtu 1500
ff00::/8 dev sit1 proto kernel metric 256 mtu 1480
default dev sit1 metric 1 mtu 1480
unreachable default dev lo metric -1 error -101
I have 3ffe:b80:e32:1::2/64 bound up on router2:
[root@Border2 bin]# ip -6 address
1: lo: <LOOPBACK,UP> mtu 16436 qdisc noqueue
inet6 ::1/128 scope host
2: eth0: <BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast qlen 100
inet6 fe80::290:27ff:fecb:aafb/10 scope link
inet6 3ffe:b80:e32:1::2/64 scope global
3: dummy0: <BROADCAST,NOARP,UP> mtu 1500 qdisc noqueue
inet6 fe80::200:ff:fe00:0/10 scope link
...and the appropriate default (::/0) pointed at 3ffe:b80:e32:1::1
[root@Border2 bin]# ip -6 route
3ffe:b80:e32:1::/64 dev eth0 proto kernel metric 256 mtu 1500
fe80::/10 dev dummy0 proto kernel metric 256 mtu 1500
fe80::/10 dev eth0 proto kernel metric 256 mtu 1500
ff00::/8 dev dummy0 proto kernel metric 256 mtu 1500
ff00::/8 dev eth0 proto kernel metric 256 mtu 1500
default via 3ffe:b80:e32:1::1 dev eth0 metric 1024 mtu 1500
unreachable default dev lo metric -1 error -101
The problem is that routing is problematic at best from router2:
[root@Border2 bin]# ping6 www.6bone.net
PING www.6bone.net(www.6bone.net) 56 data bytes
>From 3ffe:b80:e32:1::1: Destination unreachable: Address unreachable
>From 3ffe:b80:e32:1::1: Destination unreachable: Address unreachable
--- www.6bone.net ping statistics ---
2 packets transmitted, 0 packets received, +2 errors, 100% packet loss
If I ping www.6bone.net from router1:
[root@Border1 bin]# ping6 www.6bone.net
PING www.6bone.net(www.6bone.net) 56 data bytes
64 bytes from www.6bone.net: icmp_seq=0 hops=62 time=52.691 msec
64 bytes from www.6bone.net: icmp_seq=1 hops=62 time=72.086 msec
--- www.6bone.net ping statistics ---
2 packets transmitted, 2 packets received, 0% packet loss
round-trip min/avg/max/mdev = 52.691/62.388/72.086/9.700 ms
...I can then reach it from router2. In the display below, I started a
ping6 from router2 to www.6bone.net. I then started a ping6 from router1
(the gateway for router2) to www.6bone.net. As soon as the ping6 on
router1 started, the ping6 on router2 starts working:
[root@Border2 bin]# ping6 www.6bone.net
PING www.6bone.net(www.6bone.net) 56 data bytes
>From 3ffe:b80:e32:1::1: Destination unreachable: Address unreachable
>From 3ffe:b80:e32:1::1: Destination unreachable: Address unreachable
>From 3ffe:b80:e32:1::1: Destination unreachable: Address unreachable
64 bytes from www.6bone.net: icmp_seq=3 hops=61 time=53.873 msec
64 bytes from www.6bone.net: icmp_seq=4 hops=61 time=53.169 msec
64 bytes from www.6bone.net: icmp_seq=5 hops=61 time=53.721 msec
--- www.6bone.net ping statistics ---
7 packets transmitted, 3 packets received, +3 errors, 57% packet loss
round-trip min/avg/max/mdev = 53.169/53.587/53.873/0.403 ms
I then stopped the ping6 on router1 and soon after, router2 could no
longer reach www.6bone.net:
[root@Border2 bin]# ping6 www.6bone.net
PING www.6bone.net(www.6bone.net) 56 data bytes
64 bytes from www.6bone.net: icmp_seq=0 hops=61 time=58.586 msec
64 bytes from www.6bone.net: icmp_seq=1 hops=61 time=53.383 msec
64 bytes from www.6bone.net: icmp_seq=2 hops=61 time=59.519 msec
64 bytes from www.6bone.net: icmp_seq=3 hops=61 time=63.576 msec
64 bytes from www.6bone.net: icmp_seq=4 hops=61 time=61.473 msec
64 bytes from www.6bone.net: icmp_seq=5 hops=61 time=59.763 msec
64 bytes from www.6bone.net: icmp_seq=6 hops=61 time=53.719 msec
64 bytes from www.6bone.net: icmp_seq=7 hops=61 time=59.625 msec
64 bytes from www.6bone.net: icmp_seq=8 hops=61 time=59.989 msec
64 bytes from www.6bone.net: icmp_seq=9 hops=61 time=53.450 msec
64 bytes from www.6bone.net: icmp_seq=10 hops=61 time=53.551 msec
64 bytes from www.6bone.net: icmp_seq=11 hops=61 time=53.595 msec
64 bytes from www.6bone.net: icmp_seq=12 hops=61 time=59.718 msec
64 bytes from www.6bone.net: icmp_seq=13 hops=61 time=65.459 msec
64 bytes from www.6bone.net: icmp_seq=14 hops=61 time=53.319 msec
64 bytes from www.6bone.net: icmp_seq=15 hops=61 time=54.186 msec
64 bytes from www.6bone.net: icmp_seq=16 hops=61 time=56.177 msec
64 bytes from www.6bone.net: icmp_seq=17 hops=61 time=53.511 msec
64 bytes from www.6bone.net: icmp_seq=18 hops=61 time=53.473 msec
64 bytes from www.6bone.net: icmp_seq=19 hops=61 time=54.107 msec
64 bytes from www.6bone.net: icmp_seq=20 hops=61 time=59.824 msec
64 bytes from www.6bone.net: icmp_seq=21 hops=61 time=53.605 msec
>From 3ffe:b80:e32:1::1: Destination unreachable: Address unreachable
>From 3ffe:b80:e32:1::1: Destination unreachable: Address unreachable
--- www.6bone.net ping statistics ---
24 packets transmitted, 22 packets received, +2 errors, 8% packet loss
round-trip min/avg/max/mdev = 53.319/56.982/65.459/3.750 ms
Traceroute6 yields the same results. As long as router1 has a ping6 going
against www.6bone.net, router2 can get there via router1:
[root@Border2 bin]# traceroute6 www.6bone.net
traceroute to 6bone.net (3ffe:b00:c18:1::10) from 3ffe:b80:e32:1::2, 30
hops max, 16 byte packets
1 3ffe:b80:e32:1::1 (3ffe:b80:e32:1::1) 2.269 ms 1.306 ms 0.871 ms
2 3ffe:b00:c18:1:2a0:c9ff:fefc:1feb (3ffe:b00:c18:1:2a0:c9ff:fefc:1feb) 62.574 ms 93.856 ms 61.972 ms
3 www.6bone.net (3ffe:b00:c18:1::10) 82.151 ms 53.484 ms 53.66 ms
...within 30 seconds of stopping the ping6 to www.6bone.net on router1,
router2 can't get there:
[root@Border2 bin]# traceroute6 www.6bone.net
traceroute to 6bone.net (3ffe:b00:c18:1::10) from 3ffe:b80:e32:1::2, 30
hops max, 16 byte packets
1 3ffe:b80:e32:1::1 (3ffe:b80:e32:1::1) 0.997 ms !H 1.668 ms !H 0.873 ms !H
Can anyone tell me what I'm doing wrong here? I'm at my wits end!
---
John Fraizer | High-Security Datacenter Services |
EnterZone, Inc | Dedicated circuits 64k - 155M OC3 |
http://www.enterzone.net/ | Virtual, Dedicated, Colocation |