[ale] IPv6 tunnel create error-success!

[Michael H. Warfield]

On Sun, 2011-01-23 at 07:42 -0500, Paul Cartwright wrote: 
> On 01/23/2011 06:33 AM, Paul Cartwright wrote:
> > new thread..
> > ok, so I installed a WRT54GL with DD-WRT on it. created an account at
> > Hurricane Electric. Not sure if it is just me or my environment, but
> > google/chrome made it impossible to hit the SUBMIT button to create a
> > tunnel, I had to use Opera.. Chrome just sat there looking stupid. Opera
> > at least started the process, BUT I got this back:
> > 
> > Error: Your IPv4 endpoint is unreachable or unstable. Please make sure
> > ICMP is not blocked. If you are blocking ICMP, please allow 66.220.2.74
> > through your firewall.
> > 
> > so, what do I do with DD-WRT to make this error go away?? I have a
> > static IP on the modem, if that helps.
> >
> had to turn OFF wan-block anonymous WAN Requests (ping)
> and turn on DMZ ( I thought I tried those before, maybe the settings
> didn't save..)

Ah, so you solved that problem and that's why I was able to ping you
before replying in another thread.  Cool.

> IPv6 Tunnel Endpoints
> 	Server IPv4 address:	216.66.22.2
> 	Server IPv6 address:	2001:470:7:a1c::1/64
> 	Client IPv4 address:	208.65.91.107
> 	Client IPv6 address:	2001:470:7:a1c::2/64
> Available DNS Resolvers
> 	Anycasted IPv6 Caching Nameserver:	2001:470:20::2
> 	Anycasted IPv4 Caching Nameserver:	74.82.42.42
> Routed IPv6 Prefixes and rDNS Delegations
> 	Routed /48:	Allocate /48
> 	Routed /64:	2001:470:8:a1c::/64
> 	RDNS Delegation NS1:	none
> 	RDNS Delegation NS2:	none
> 	RDNS Delegation NS3:	none
> 	RDNS Delegation NS4:	none
> 	RDNS Delegation NS5:	none

> then it has a button for show-config:
> modprobe ipv6
> ip tunnel add he-ipv6 mode sit remote 216.66.22.2 local 208.65.91.107
> ttl 255
> ip link set he-ipv6 up
> ip addr add 2001:470:7:a1c::2/64 dev he-ipv6
> ip route add ::/0 dev he-ipv6
> ip -f inet6 addr

That's a very manual process.  That's like a dry bare bones process
that's very distro agnostic.  I would find the process for your distro
first and try that.  It's very different from Ubuntu to Fedora.

It's almost certain that you will NOT have to do the "modprobe ipv6".

> ( I have not done this yet...)

What distro?

On Fedora, I would just set up a sit tunnel by creating a file
in /etc/sysconfig/network-scripts like this:

/etc/sysconfig/network-scripts

# SIT Tunnel to Hurricane Electric tunnelbroker.net
DEVICE=sit1
BOOTPROTO=none
ONBOOT=yes
IPV6INIT=yes
IPV6TUNNELIPV4=216.66.22.2
IPV6ADDR=2001:470:7:a1c::2/64

Then just "ifup sit1" and the scripts will do the rest.

(Note: Do NOT use sit0 - that is/was reserved)

Ubuntu, you're on your own.  I don't know.

AFA that /64 goes, you've got more work to do to set that up, but that's
another tale.

Mike
-- 
Michael H. Warfield (AI4NB) | (770) 985-6132 |  mhw at WittsEnd.com
   /\/\|=mhw=|\/\/          | (678) 463-0932 |  http://www.wittsend.com/mhw/
   NIC whois: MHW9          | An optimist believes we live in the best of all
 PGP Key: 0x674627FF        | possible worlds.  A pessimist is sure of it!
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 482 bytes
Desc: This is a digitally signed message part
Url : http://mail.ale.org/pipermail/ale/attachments/20110123/8243037d/attachment.bin