RT-AC66U IPv6 tunnel

[marco92]

Hi guys i have some problems on setting up my HE IPv6 tunnel on my RT-AC66U.
The router is running 378.54_1 firmware
Here is the settings of IPv6 config page:
Connection type: Tunnel 6rd
DHCP Option: Disable
IPv6 Prefix: (my routered /48 prefix)
IPv6 Prefix Length: 48
IPv4 Border Router: 216.66.80.30
IPv4 Router Mask Length: 24
Tunnel MTU: 1280 (same of HE tunnel advanced control page)
Tunnel TTL: 255
IPv6 DNS Server 1: 2001:470:20::2
IPv6 DNS Server 2: 2001:4860:4860::8888
IPv6 DNS Server 3: 2001:4860:4860::8844
Enable Router Advertisement: Enable
DHCPv6 Server: Enable

What's wrong?
I can't reach any IPv6 server from my local devices. Windows says that my IPv6 is "no access to internet".
If i try to ping some IPv6 server by SSH-ing into the router this is the result:
Marco@RT-AC66U:/# ping -6 www.google.com -w 10
PING www.google.com (2a00:1450:4001:807::1010): 56 data bytes
64 bytes from 2a00:1450:4001:807::1010: seq=0 ttl=58 time=31.078 ms
64 bytes from 2a00:1450:4001:807::1010: seq=1 ttl=58 time=25.891 ms
64 bytes from 2a00:1450:4001:807::1010: seq=2 ttl=58 time=25.955 ms
64 bytes from 2a00:1450:4001:807::1010: seq=3 ttl=58 time=30.067 ms
64 bytes from 2a00:1450:4001:807::1010: seq=4 ttl=58 time=25.825 ms
64 bytes from 2a00:1450:4001:807::1010: seq=5 ttl=58 time=28.545 ms
64 bytes from 2a00:1450:4001:807::1010: seq=6 ttl=58 time=28.702 ms
64 bytes from 2a00:1450:4001:807::1010: seq=7 ttl=58 time=25.922 ms
64 bytes from 2a00:1450:4001:807::1010: seq=8 ttl=58 time=26.128 ms
64 bytes from 2a00:1450:4001:807::1010: seq=9 ttl=58 time=26.130 ms

--- www.google.com ping statistics ---
10 packets transmitted, 10 packets received, 0% packet loss
round-trip min/avg/max = 25.825/27.424/31.078 ms

A traceroute to an IPv6 server:
Marco@RT-AC66U:/# traceroute -6 www.google.com -w 1 -m 12
traceroute to www.google.com (2a00:1450:4001:807::1010), 12 hops max, 16 byte packets
1 xxxxxx-1.tunnel.tserv6.fra1.ipv6.he.net (2001:470:xxxxx:xxxxx::1) 128.369 ms 47.788 ms 57.248 ms
2 v399.core1.fra1.he.net (2001:470:0:69::1) 62.548 ms 58.407 ms 39.596 ms
3 de-cix10.net.google.com (2001:7f8::3b41:0:1) 27.635 ms 80.991 ms 99.721 ms
4 2001:4860::1:0:4ca2 (2001:4860::1:0:4ca2) 62.451 ms 67.449 ms 39.163 ms
5 2001:4860:0:1::6ed (2001:4860:0:1::6ed) 24.732 ms 34.079 ms 57.221 ms
6 2a00:1450:4001:807::a (2a00:1450:4001:807::a) 49.807 ms 68.954 ms 59.306 ms

Tunnel seems to work... But I can't reach any IPv6 server from the local devices connected to the router (LAN devices)

P.S. Sorry for my bad english. XD

 

[RMerlin]

You mention HE, yet you have the tunnel set to 6rd. If you are really using a HE tunnel, set the mode to "6in4" instead.

 

[marco92]

Hi Erik...
I changed IPv6 tunnel configuration but LAN devices can't reach IPv6 servers.

Here is the configuration:

Connection type: Tunnel 6in4
Server IPv4 Address: 216.66.80.30
Client IPv6 Address: 2001:470:xxxx:xxxx::2 (copied from HE tunnelbroker's "Client IPv6 Address" field)
IPv6 Prefix Length: 64
Server IPv6 Address: 2001:470:xxxx:xxxx::1 (copied from HE tunnelbroker's "Server IPv6 Address" field)
Tunnel MTU: 1280 (same as HE tunnelbroker's MTU field on advanced config page)
Tunnel TTL: 255
LAN Prefix Length: 48
LAN IPv6 Prefix: 2001:470:xxxx:: (copied from HE tunnelbroker's "Routed /48" field)
IPv6 DNS Server 1: 2001:470:20::2 (copied from HE tunnelbroker's "Anycasted IPv6 Caching Nameserver" field)
IPv6 DNS Server 2: 2001:4860:4860::8888 (google IPv6 DNS)
IPv6 DNS Server 3: 2001:4860:4860::8844 (google IPv6 DNS)
Enable Router Advertisement: Enable
Enable DHCPv6 Server: Enable

With this config IPv6 still work only on router (if i try to ping/traceroute an IPv6 server from SSH, the ping/traceroute works fine).
If i try to ping/traceroute the same server on any local device the ping/traceroute fails.

Regards,
Marco.

 

[RMerlin]

Re-check your tunnel configuration. HE tunnel is working fine for me.

The default routed tunnel from HE is a /64. Try with that prefix first, I've never tried with the /48 so I don't know the details of that particular setup (and I wonder who would need more than 2^64 IPs at home anyway).

 

[john9527]

If you are using the /48 routing, you have to make a special request to have it activated (I think there's a link off of the '?' button on the HE page).

Also, I just leave the mtu set as '0' for the default.

Also work's fine for me, with /64 prefix and '0' mtu settings.

 

[marco92]

still not working...
NEW CONFIG:
Connection type: Tunnel 6in4
Server IPv4 Address: 216.66.80.30
Client IPv6 Address: 2001:470:xxxx:xxxx::2 (copied from HE tunnelbroker's "Client IPv6 Address" field)
IPv6 Prefix Length: 64
Server IPv6 Address: 2001:470:xxxx:xxxx::1 (copied from HE tunnelbroker's "Server IPv6 Address" field)
Tunnel MTU: 0
Tunnel TTL: 255
LAN Prefix Length: 64
LAN IPv6 Prefix: 2001:470:xxxx:xxx:: (copied from HE tunnelbroker's "Routed /64" field)
IPv6 DNS Server 1: 2001:470:20::2 (copied from HE tunnelbroker's "Anycasted IPv6 Caching Nameserver" field)
IPv6 DNS Server 2: 2001:4860:4860::8888 (google IPv6 DNS)
IPv6 DNS Server 3: 2001:4860:4860::8844 (google IPv6 DNS)
Enable Router Advertisement: Enable
Enable DHCPv6 Server: Enable

I deleted routed /48 from HE tunnelbroker's control page and re-setted tunnel MTU to 1480 on HE advanced control page.

I have problem with IPv6 tunnel since 376.44 release....
With releases before of 376.44 my IPv6 tunnel worked good.... (the settings was the same of tunnel 6rd that i posted on firs post.)

 

[RMerlin]

still not working...

I have problem with IPv6 tunnel since 376.44 release....
With releases before of 376.44 my IPv6 tunnel worked good.... (the settings was the same of tunnel 6rd that i posted on firs post.)

Make sure you have Ping enabled on the WAN interface, and that you are somehow updating the endpoint with your current IP (either through a script, or through the Tunnelbroker DDNS).

 

[marco92]

Ping is enabled on my firewall page... The tunnel endpoint is correcty updated by dnsomatic.
mark92.no-ip.org if you want to try pinging the router.

 

[PabloAbonia]

I believe the endpoint needs to be updated by www.tunnelbroker.net. You'll need to use the hostname, username, and password /ddns key provided by he.net.

 

[marco92]

I double cecked the tunnel broker's endpoint IP... It is the same that i have on my router's WAN port.
Ez-ipupdate send my IP to dns-o-matic, and dns-o-matic update my no-ip.org, tunnelbroker, and OpenDNS accounts.
No error from dns-o-matic service... In fact my ip is properly updated in each service


P.S. I did nvram reset after 378.50 firmware flash and manually re-conf the router.

Why are my Messages awaiting moderator approval every time?

 

[L&LD]

http://www.snbforums.com/threads/posts-flagged-for-moderator-approval.25126/

marco92, the link above answers your last question.

Edit: Yup! I'm waiting for approval now too.

 

[marco92]

I Finally found the problem!!!
All IPv6 tunnel config was correct... but if i only enable Parental Control the IPv6 tunnel stops working... Is it a normal thing?