tools.cisco.com via IPv6 down for me, for you?

patoberli · ‎09-14-2021

Hi All

My devices can't access tools.cisco.com to update their SMART (or rather no so...) license status via IPv6. As this is the preferred protocol for most devices today, they only try it via IPv6.

Here some data:

$ ping 2001:420:1101:5::A
PING 2001:420:1101:5::A(2001:420:1101:5::a) 56 data bytes
^C
--- 2001:420:1101:5::A ping statistics ---
8 packets transmitted, 0 received, 100% packet loss, time 12ms

$ telnet 2001:420:1101:5::A 443
Trying 2001:420:1101:5::a...
^C
$ nslookup tools.cisco.com
Server: 192.168.20.10
Address: 192.168.20.10#53

Non-authoritative answer:
Name: tools.cisco.com
Address: 72.163.4.38
Name: tools.cisco.com
Address: 2001:420:1101:5::a

tracert 2001:420:1101:5::A

Tracing route to tools1.cisco.com [2001:420:1101:5::a]
over a maximum of 30 hops:

1 <1 ms 1 ms <1 ms redacted
2 <1 ms <1 ms <1 ms redacted
3 1 ms 1 ms 1 ms swiRA2-10GE-0-0-26.switch.ch [2001:620:0:ffc8::1]
4 1 ms 1 ms 1 ms swiAG1-10GE-0-0-1-1.switch.ch [2001:620:0:c058::1]
5 5 ms 1 ms 1 ms swiEZ1-10GE-2-1.switch.ch [2001:620:0:c050::2]
6 2 ms 2 ms 2 ms swiEZ3-B3.switch.ch [2001:620:0:c00d::2]
7 60 ms 18 ms 11 ms 10gigabitethernet1-2.core1.zrh1.he.net [2001:7f8:c:8235:194:42:48:80]
8 7 ms 6 ms 6 ms e0-35.core2.gva1.he.net [2001:470:0:4ac::2]
9 16 ms 16 ms 16 ms 100ge2-1.core1.par2.he.net [2001:470:0:55d::1]
10 89 ms * * 100ge11-2.core1.nyc4.he.net [2001:470:0:54::1]
11 90 ms 90 ms 89 ms e0-36.core1.nyc7.he.net [2001:470:0:565::2]
12 * * * Request timed out.
13 125 ms 127 ms 127 ms n54ny22crs.ipv6.att.net [2001:1890:ff:ffff:12:122:130:170]
14 126 ms 127 ms 126 ms wswdc22crs.ipv6.att.net [2001:1890:ff:ffff:12:122:28:42]
15 130 ms 134 ms 133 ms attga21crs.ipv6.att.net [2001:1890:ff:ffff:12:122:2:29]
16 131 ms 135 ms 133 ms dlstx22crs.ipv6.att.net [2001:1890:ff:ffff:12:122:2:110]
17 126 ms 126 ms 126 ms dlstx408me9.ipv6.att.net [2001:1890:ff:ffff:12:122:118:121]
18 * * * Request timed out.
19 * * * Request timed out.
20 * * * Request timed out.
21 * * * Request timed out.
22 ^C

Is this down for you to?

Based on the logs of my IPv6 enabled devices, it's down since several days if not weeks. The site/server also seems unreachable when using https://ipv6-test.com/validate.php, so I don't think it's my site.

Thanks

Patrick

patoberli · ‎09-16-2021

It seems Cisco fixed it:

telnet 2001:420:1101:5::A 443
Trying 2001:420:1101:5::a...
Connected to 2001:420:1101:5::A.
Escape character is '^]'.
^C
Connection closed by foreign host.

Although my router still can't connect, but that might be a local firewall issue.