IPv6IP 6to4 Tunnel will not ping from one side to other

---

Simulation page

I have ipv6 ospf 1 area 0 on both side 1-3 and 2-4.
1-2 is IPv4 Tunnel IPv6IP 6to4.

I get OE2 on iosv-3 and 4. I would think IPv6 OSPF Area 0 would go through the tunnel and connect as one area.

@michael-mckenney ,

Try it simply first, remove the ospf and try static routing between 1-2 and see if you can ping through...

I'm seeing beneath your diagram it looks as if pings are working since you're getting routing coming through.. I think that each side of your configure 1-3 and 2-4 are not seen as a single big area but 2 separate Area 0 and that's why you're getting what looks like a redistribution with the E2. This is because with the IPv6 versions of IGPs (EIGRPv6 and OSPFv3) cannot be used across 6 to 4 tunneling. This is because they use Link Local Addresses to form their adjacency.

I have read the book and searched for examples. I watched your videos. Did you mention that point in the videos? I did not see that posted about IPv6 IGPs can't be tunneled. I was wondering about that since IPv4 works out to my TFTP server fine.

I will remove OSPF and try just static routing for both. Thanks.

@michael-mckenney ,

I'm not sure if we mentioned in in videos but if anyone did, it's Don Pezet. I do know the IPv6 versions of IGP use link local addresses for adjacency and that's why you're seeing the E2 entries.

If it's not working verify by simplifying that it's not just a routing issue.

OK, on my design. Flat-1 allows me to contact my TFTP server in the real world. I can redirect Sh Run and other commands to it for my web site. iosv-3 0.0.0.0 0.0.0.0 points to 172.16.1..1. My Fortinet 60E static routes go to 192.168.1.203, the interface between iosv-3 and flat.

I wonder since IPv6 does not go out and back in, if that could be part of the problem with VIRL. I did point iosv-3 IPv6 route 0.0.0.0 0.0.0.0 g0/1, the interface back to iosv-1. iosv-4 0.0.0.0 0.0.0.0 g0/1 back to iosv-2. Static routes in the tunnel seem right.

Tonight, I will rerun the stuff for the web site commands.

iosv-4#ping 1010::1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 1010::1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 2/4/14 ms
iosv-4#ping 1000::1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 1000::1, timeout is 2 seconds:
.....
Success rate is 0 percent (0/5)
iosv-4#ping 1000::2
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 1000::2, timeout is 2 seconds:
.....
Success rate is 0 percent (0/5)

@michael-mckenney,

Check your static IPv6 routes between 1 and 2 also!

If you're getting ping at that point, then go back and implement OSPFv3 between your segments. You should see in the output between routers, the adjacency forming on the link local and not on your configured IPv6 addresses.

Diagram has the static routes at the bottom for both sides. I can't ping across the tunnel at all. I can ping up and down each side fine.

@michael-mckenney,

I'm stumped as to why it's not working with the pings... I'm going to have to go with the "reboot the router" at this point. If the links you have on your sim page is accurate, then it looks like it should be working.

I started it at home tonight clean.

I dropped OSPF completely.

I have static routes from

4 to 2: ip route 0.0.0.0 0.0.0.0 192.168.60.1
2 to 1: ip route 0.0.0.0 0.0.0.0 192.168.32.1
1 to 3: ip route 0.0.0.0 0.0.0.0 192.168.40.2
3 to Fortinet: ip route 0.0.0.0 0.0.0.0 172.16.1.1
Fortinet to 3: 192.168.1.203 (its port)

It is like I am missing a route through the tunnel. I can't ping across the tunnel

I have tried 2 to 1 even as 192.168.40.1.

32..1 is tunnel side of iosv-1
40.1 outside of iosv-1

@michael-mckenney,

I'll have setup my lab and do some testing on my end to see what additional issue may be causing this...

@michael-mckenney,

Ok. I had a chance to setup your topology in my lab. I only changed the interfaces to all gig ports (0/0, 1/0).

At first, when I setup the topology, I wasn't getting pings across the tunnel.

1. I had to redistribute the static routes into the ipv6 router ospf 1
2. I was silly and forgot to do a no shutdown on the active interfaces.
3. Once everything was up, I could see the routes to the other side in my R3 and R4.
4. I was able to ping once the routes showed up there.

Let me know if you want to see my configs, just email me ronnie@itpro.tv. I'll send a copy of each router config.

I have a call into VIRL team about something else. They are webex in on Monday. I will ask them about it. I think it is a bug or feature as some call it.