I am wondering if it is possible to use SR520 for connecting to Hurricane Electric IPv6 Tunnel?
I have configure the router and everything on the IPV4 front works great. But I go into a black hole when it comes to IPV6.
Attacked is my config, with show ipv6 route, show ipv6 interface, and show int tun 0 .
Issue Having...
1) Computer attached is Ubuntu 10.04 with IPv6 address of 2001:....::4. I can ping myself (::1) so I know IPv6 is working on computer.
2) I can ping the gateway 2001:...::1 as well.
3) I can ping the tunnel 2001:470:7:XXXX::2
4) I cannot ping outside the router on IPv6, but can on IPv4.
5) I cannot browse
One other note, this router is behind another router. The router is doing static nat for from global address to private address. Once again, you can browse and surf on IPv4, but the IPv6 dies..
Internet ==== R1 ======= R2 =====> Server (IPv4: 192.168.64.16 / [2001:470:8:XXXX::4]
R1:
ip nat inside source static tcp 192.168.64.16 80 188.186.131.XXX 80 extendable
ACL on R1
permit 41 any any
IOS Version:
Cisco IOS Software, SR520 Software (SR520-ADVIPSERVICESK9-M), Version 12.4(20)T5, RELEASE SOFTWARE (fc2)
!
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname IPV6A
!
boot-start-marker
boot-end-marker
!
logging message-counter syslog
!
no aaa new-model
!
!
dot11 syslog
ip source-route
!
!
ip dhcp excluded-address 192.168.64.0 192.168.64.30
!
ip dhcp pool home
network 192.168.64.0 255.255.255.0
default-router 192.168.64.1
dns-server 192.168.1.1
!
!
ip cef
!
ipv6 unicast-routing
ipv6 cef
!
multilink bundle-name authenticated
!
!
!
!
!
archive
log config
hidekeys
!
!
!
!
!
interface Tunnel0
description Hurricane Electrice IPv6 tunnel
no ip address
ipv6 address 2001:470:7:XXXX::2/64
ipv6 enable
ipv6 traffic-filter Inside in
ipv6 mtu 1472
tunnel source FastEthernet4
tunnel destination 216.66.22.X
tunnel mode ipv6ip
!
interface FastEthernet0
!
interface FastEthernet1
!
interface FastEthernet2
!
interface FastEthernet3
!
interface FastEthernet4
description Outbound WAN
ip address 192.168.1.16 255.255.255.0
ip nat outside
ip virtual-reassembly
duplex auto
speed auto
!
interface Dot11Radio0
no ip address
shutdown
speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0 54.0
station-role root
!
interface Vlan1
ip address 192.168.64.1 255.255.255.0
ip nat inside
ip virtual-reassembly
ipv6 address 2001:470:8:XXXX::1/64
ipv6 address autoconfig
ipv6 enable
ipv6 mtu 1472
!
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 FastEthernet4
!
no ip http server
no ip http secure-server
ip nat inside source list Out2In interface FastEthernet4 overload
!
ip access-list standard Out2In
permit any log
!
ipv6 route ::/0 Tunnel0
!
!
!
!
!
ipv6 access-list Inside
permit icmp any any
permit tcp any host 2001:470:8:XXXX::4 eq www
permit tcp any host 2001:470:8:XXXX::4 eq 22
permit tcp any host 2001:470:8:XXXX::4 eq smtp
permit tcp any host 2001:470:8:XXXX::4 eq 993
permit tcp any host 2001:470:8:XXXX::4 eq 995
permit ipv6 any any log
deny ipv6 any any log
!
control-plane
!
!
line con 0
no modem enable
line aux 0
line vty 0 4
login
!
scheduler max-task-time 5000
end
Show IPv6 Route
IPv6 Routing Table - Default - 6 entries
Codes: C - Connected, L - Local, S - Static, U - Per-user Static route
R - RIP
O - OSPF Intra, OI - OSPF Inter, OE1 - OSPF ext 1, OE2 - OSPF ext 2
ON1 - OSPF NSSA ext 1, ON2 - OSPF NSSA ext 2
S ::/0 [1/0]
via Tunnel0, directly connected
C 2001:470:7:XXXX::/64 [0/0]
via Tunnel0, directly connected
L 2001:470:7:XXXX::2/128 [0/0]
via Tunnel0, receive
C 2001:470:8:XXXX::/64 [0/0]
via Vlan1, directly connected
L 2001:470:8:XXXX::1/128 [0/0]
via Vlan1, receive
L FF00::/8 [0/0]
via Null0, receive
show ipv6 inter brief
Dot11Radio0 [administratively down/down]
unassigned
FastEthernet0 [up/down]
unassigned
FastEthernet1 [down/down]
unassigned
FastEthernet2 [up/down]
unassigned
FastEthernet3 [up/up]
unassigned
FastEthernet4 [up/up]
unassigned
NVI0 [up/up]
unassigned
Tunnel0 [up/up]
FE80::C0A8:110
2001:470:7:XXXX::2
Vlan1 [up/up]
FE80::EA04:62FF:FE2C:C6A7
2001:470:8:XXXX::1
show int tun 0
Tunnel0 is up, line protocol is up
Hardware is Tunnel
Description: Hurricane Electrice IPv6 tunnel
MTU 17920 bytes, BW 100 Kbit/sec, DLY 50000 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation TUNNEL, loopback not set
Keepalive not set
Tunnel source 192.168.1.16 (FastEthernet4), destination 216.66.22.X
Tunnel protocol/transport IPv6/IP
Tunnel TTL 255
Tunnel transport MTU 1480 bytes
Tunnel transmit bandwidth 8000 (kbps)
Tunnel receive bandwidth 8000 (kbps)
Last input 2w1d, output 00:51:16, output hang never
Last clearing of "show interface" counters never
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 15
Queueing strategy: fifo
Output queue: 0/0 (size/max)
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec
4214 packets input, 3234689 bytes, 0 no buffer
Received 0 broadcasts, 0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
11353 packets output, 1892125 bytes, 0 underruns
0 output errors, 0 collisions, 0 interface resets
0 unknown protocol drops
0 output buffer failures, 0 output buffers swapped out
