IPv6 tunnel using HE.net not working - no packages received

Where are the tcpdumps???

Bitte führen Sie die angeforderten Tests gleichzeitig aus.

Please run the requested tests simultaneously.

Yes, @TheLord please confirm:

@orangepizza - see the tcpdump.

1 Like

yes, definitly.
I already used it to get a direct connection to luci web interfache from external (when the firewall was down)

so here is the result of tcpdump while ping from outside to the ip 2001:470:1f0b:2f9::1

root@OpenWrt:~# tcpdump -r dump.pcap
reading from file dump.pcap, link-type EN10MB (Ethernet)
18:49:17.397094 IP ip1f11a480.dynamic.kabel-deutschland.de > tserv1.fra1.he.net: IP6 2001:470:1f0b:2f9:d10a:98d3:75d1:cbff.53594 > 2a01:111:2003::52.80: Flags [S], seq 685867839, win 65472, options [mss 1364,nop,wscale 8,nop,nop,sackOK], length 0
18:49:59.923687 IP ip1f11a480.dynamic.kabel-deutschland.de > tserv1.fra1.he.net: IP6 2001:470:1f0b:2f9:4160:7f5d:a1f5:277.60129 > ordns.he.net.53: 32918+ A? prod.registrar.skype.com. (42)
18:49:59.923875 IP ip1f11a480.dynamic.kabel-deutschland.de > tserv1.fra1.he.net: IP6 2001:470:1f0b:2f9:4160:7f5d:a1f5:277.56782 > ordns.he.net.53: 451+ A? azwus2-client-s.gateway.messenger.live.com. (60)
18:49:59.924121 IP ip1f11a480.dynamic.kabel-deutschland.de > tserv1.fra1.he.net: IP6 2001:470:1f0b:2f9:4160:7f5d:a1f5:277.60037 > ordns.he.net.53: 9049+ AAAA? prod.registrar.skype.com. (42)
18:49:59.924297 IP ip1f11a480.dynamic.kabel-deutschland.de > tserv1.fra1.he.net: IP6 2001:470:1f0b:2f9:4160:7f5d:a1f5:277.59729 > ordns.he.net.53: 13834+ AAAA? azwus2-client-s.gateway.messenger.live.com. (60)
18:49:59.939401 IP ip1f11a480.dynamic.kabel-deutschland.de > tserv1.fra1.he.net: IP6 2001:470:1f0b:2f9:4160:7f5d:a1f5:277.55949 > ordns.he.net.53: 18876+ A? uksouth-prod.notifications.teams.microsoft.com. (64)
18:49:59.939544 IP ip1f11a480.dynamic.kabel-deutschland.de > tserv1.fra1.he.net: IP6 2001:470:1f0b:2f9:4160:7f5d:a1f5:277.57985 > ordns.he.net.53: 21369+ AAAA? uksouth-prod.notifications.teams.microsoft.com. (64)
18:50:00.085481 IP ip1f11a480.dynamic.kabel-deutschland.de > tserv1.fra1.he.net: IP6 2001:470:1f0b:2f9:4160:7f5d:a1f5:277.53710 > 2600:1901:0:38d7::.80: Flags [S], seq 949347955, win 65472, options [mss 1364,nop,wscale 8,nop,nop,sackOK], length 0
18:50:00.106588 IP ip1f11a480.dynamic.kabel-deutschland.de > tserv1.fra1.he.net: IP6 2001:470:1f0b:2f9:4160:7f5d:a1f5:277.60017 > ordns.he.net.53: 32669+ A? client.wns.windows.com. (40)
18:50:00.106830 IP ip1f11a480.dynamic.kabel-deutschland.de > tserv1.fra1.he.net: IP6 2001:470:1f0b:2f9:4160:7f5d:a1f5:277.63790 > ordns.he.net.53: 42911+ AAAA? client.wns.windows.com. (40)
18:50:00.119895 IP ip1f11a480.dynamic.kabel-deutschland.de > tserv1.fra1.he.net: IP6 2001:470:1f0b:2f9:4160:7f5d:a1f5:277.62555 > ordns.he.net.53: 45680+ A? reqpool365-my.sharepoint.com. (46)
18:50:00.120194 IP ip1f11a480.dynamic.kabel-deutschland.de > tserv1.fra1.he.net: IP6 2001:470:1f0b:2f9:4160:7f5d:a1f5:277.57086 > ordns.he.net.53: 52038+ AAAA? reqpool365-my.sharepoint.com. (46)
18:50:00.204212 IP ip1f11a480.dynamic.kabel-deutschland.de > tserv1.fra1.he.net: IP6 2001:470:1f0b:2f9:4160:7f5d:a1f5:277.53712 > 2600:1901:0:38d7::.80: Flags [S], seq 663109923, win 65472, options [mss 1364,nop,wscale 8,nop,nop,sackOK], length 0
18:50:00.351907 IP ip1f11a480.dynamic.kabel-deutschland.de > tserv1.fra1.he.net: IP6 2001:470:1f0b:2f9:4160:7f5d:a1f5:277.58328 > ordns.he.net.53: 18220+ A? push.services.mozilla.com. (43)
18:50:00.408495 IP ip1f11a480.dynamic.kabel-deutschland.de > tserv1.fra1.he.net: IP6 2001:470:1f0b:2f9:4160:7f5d:a1f5:277.53713 > 2600:1901:0:38d7::.80: Flags [S], seq 4092772733, win 65472, options [mss 1364,nop,wscale 8,nop,nop,sackOK], length 0
18:50:00.529771 IP ip1f11a480.dynamic.kabel-deutschland.de > tserv1.fra1.he.net: IP6 2001:470:1f0b:2f9:4160:7f5d:a1f5:277.53766 > ordns.he.net.53: 52679+ A? am4pap001.storage.live.com. (44)
18:50:00.529953 IP ip1f11a480.dynamic.kabel-deutschland.de > tserv1.fra1.he.net: IP6 2001:470:1f0b:2f9:4160:7f5d:a1f5:277.65318 > ordns.he.net.53: 14816+ AAAA? am4pap001.storage.live.com. (44)
18:50:00.757436 IP ip1f11a480.dynamic.kabel-deutschland.de > tserv1.fra1.he.net: IP6 2001:470:1f0b:2f9:4160:7f5d:a1f5:277.53714 > 2603:1026:207:3c::2.443: Flags [S], seq 3313522125, win 65472, options [mss 1364,nop,wscale 8,nop,nop,sackOK], length 0
18:50:00.757631 IP ip1f11a480.dynamic.kabel-deutschland.de > tserv1.fra1.he.net: IP6 2001:470:1f0b:2f9:4160:7f5d:a1f5:277.53716 > 2603:1026:207:3c::2.443: Flags [S], seq 3200778311, win 65472, options [mss 1364,nop,wscale 8,nop,nop,sackOK], length 0
18:50:00.757809 IP ip1f11a480.dynamic.kabel-deutschland.de > tserv1.fra1.he.net: IP6 2001:470:1f0b:2f9:4160:7f5d:a1f5:277.53715 > 2603:1026:207:3c::2.443: Flags [S], seq 2265688620, win 65472, options [mss 1364,nop,wscale 8,nop,nop,sackOK], length 0
18:50:00.776564 IP ip1f11a480.dynamic.kabel-deutschland.de > tserv1.fra1.he.net: IP6 2001:470:1f0b:2f9:4160:7f5d:a1f5:277.53717 > 2a01:111:2003::52.80: Flags [S], seq 872917626, win 65472, options [mss 1364,nop,wscale 8,nop,nop,sackOK], length 0
18:50:01.168375 IP ip1f11a480.dynamic.kabel-deutschland.de > tserv1.fra1.he.net: IP6 2001:470:1f0b:2f9:4160:7f5d:a1f5:277.53712 > 2600:1901:0:38d7::.80: Flags [S], seq 663109923, win 65472, options [mss 1364,nop,wscale 8,nop,nop,sackOK], length 0
18:50:01.430452 IP ip1f11a480.dynamic.kabel-deutschland.de > tserv1.fra1.he.net: IP6 2001:470:1f0b:2f9:4160:7f5d:a1f5:277.53713 > 2600:1901:0:38d7::.80: Flags [S], seq 4092772733, win 65472, options [mss 1364,nop,wscale 8,nop,nop,sackOK], length 0
18:50:01.769189 IP ip1f11a480.dynamic.kabel-deutschland.de > tserv1.fra1.he.net: IP6 2001:470:1f0b:2f9:4160:7f5d:a1f5:277.53714 > 2603:1026:207:3c::2.443: Flags [S], seq 3313522125, win 65472, options [mss 1364,nop,wscale 8,nop,nop,sackOK], length 0
18:50:01.769369 IP ip1f11a480.dynamic.kabel-deutschland.de > tserv1.fra1.he.net: IP6 2001:470:1f0b:2f9:4160:7f5d:a1f5:277.53715 > 2603:1026:207:3c::2.443: Flags [S], seq 2265688620, win 65472, options [mss 1364,nop,wscale 8,nop,nop,sackOK], length 0
18:50:01.769529 IP ip1f11a480.dynamic.kabel-deutschland.de > tserv1.fra1.he.net: IP6 2001:470:1f0b:2f9:4160:7f5d:a1f5:277.53716 > 2603:1026:207:3c::2.443: Flags [S], seq 3200778311, win 65472, options [mss 1364,nop,wscale 8,nop,nop,sackOK], length 0
18:50:01.784197 IP ip1f11a480.dynamic.kabel-deutschland.de > tserv1.fra1.he.net: IP6 2001:470:1f0b:2f9:4160:7f5d:a1f5:277.53717 > 2a01:111:2003::52.80: Flags [S], seq 872917626, win 65472, options [mss 1364,nop,wscale 8,nop,nop,sackOK], length 0
18:50:01.992305 IP ip1f11a480.dynamic.kabel-deutschland.de > tserv1.fra1.he.net: IP6 2001:470:1f0b:2f9:4160:7f5d:a1f5:277.53769 > ordns.he.net.53: 49069+ A? config.teams.microsoft.com. (44)
18:50:01.992623 IP ip1f11a480.dynamic.kabel-deutschland.de > tserv1.fra1.he.net: IP6 2001:470:1f0b:2f9:4160:7f5d:a1f5:277.49348 > ordns.he.net.53: 8423+ AAAA? config.teams.microsoft.com. (44)
18:50:02.047625 IP ip1f11a480.dynamic.kabel-deutschland.de > tserv1.fra1.he.net: IP6 2001:470:1f0b:2f9:4160:7f5d:a1f5:277.64053 > ordns.he.net.53: 24440+ A? arc.msn.com. (29)
18:50:02.047808 IP ip1f11a480.dynamic.kabel-deutschland.de > tserv1.fra1.he.net: IP6 2001:470:1f0b:2f9:4160:7f5d:a1f5:277.61676 > ordns.he.net.53: 15292+ AAAA? arc.msn.com. (29)
18:50:02.047971 IP ip1f11a480.dynamic.kabel-deutschland.de > tserv1.fra1.he.net: IP6 2001:470:1f0b:2f9:4160:7f5d:a1f5:277.59489 > ordns.he.net.53: 10667+ A? roaming.officeapps.live.com. (45)
18:50:02.048135 IP ip1f11a480.dynamic.kabel-deutschland.de > tserv1.fra1.he.net: IP6 2001:470:1f0b:2f9:4160:7f5d:a1f5:277.54302 > ordns.he.net.53: 47839+ AAAA? roaming.officeapps.live.com. (45)
18:50:02.068871 IP ip1f11a480.dynamic.kabel-deutschland.de > tserv1.fra1.he.net: IP6 2001:470:1f0b:2f9:4160:7f5d:a1f5:277.52780 > ordns.he.net.53: 16703+ A? api.onedrive.com. (34)
18:50:02.069151 IP ip1f11a480.dynamic.kabel-deutschland.de > tserv1.fra1.he.net: IP6 2001:470:1f0b:2f9:4160:7f5d:a1f5:277.64515 > ordns.he.net.53: 7878+ AAAA? api.onedrive.com. (34)
18:50:02.376637 IP ip1f11a480.dynamic.kabel-deutschland.de > tserv1.fra1.he.net: IP6 2001:470:1f0b:2f9:4160:7f5d:a1f5:277.51329 > ordns.he.net.53: 36490+ AAAA? ipv4only.arpa. (31)
18:50:02.376903 IP ip1f11a480.dynamic.kabel-deutschland.de > tserv1.fra1.he.net: IP6 2001:470:1f0b:2f9:4160:7f5d:a1f5:277.53722 > 2600:1901:0:38d7::.80: Flags [S], seq 508506041, win 65472, options [mss 1364,nop,wscale 8,nop,nop,sackOK], length 0
18:50:02.407826 IP ip1f11a480.dynamic.kabel-deutschland.de > tserv1.fra1.he.net: IP6 2001:470:1f0b:2f9:4160:7f5d:a1f5:277.53723 > 2600:1901:0:38d7::.80: Flags [S], seq 470491741, win 65472, options [mss 1364,nop,wscale 8,nop,nop,sackOK], length 0
18:50:02.523659 IP ip1f11a480.dynamic.kabel-deutschland.de > tserv1.fra1.he.net: IP6 2001:470:1f0b:2f9:4160:7f5d:a1f5:277.55296 > ordns.he.net.53: 52006+ A? outlook.office365.com. (39)
18:50:02.523839 IP ip1f11a480.dynamic.kabel-deutschland.de > tserv1.fra1.he.net: IP6 2001:470:1f0b:2f9:4160:7f5d:a1f5:277.57119 > ordns.he.net.53: 14630+ AAAA? outlook.office365.com. (39)
18:50:02.665174 IP ip1f11a480.dynamic.kabel-deutschland.de > tserv1.fra1.he.net: IP6 2001:470:1f0b:2f9:4160:7f5d:a1f5:277.53724 > 2600:1901:0:38d7::.80: Flags [S], seq 2076345396, win 65472, options [mss 1364,nop,wscale 8,nop,nop,sackOK], length 0
18:50:02.759144 IP ip1f11a480.dynamic.kabel-deutschland.de > tserv1.fra1.he.net: IP6 2001:470:1f0b:2f9:4160:7f5d:a1f5:277.60895 > ordns.he.net.53: 7737+ A? skydrive.wns.windows.com. (42)
18:50:02.759389 IP ip1f11a480.dynamic.kabel-deutschland.de > tserv1.fra1.he.net: IP6 2001:470:1f0b:2f9:4160:7f5d:a1f5:277.49509 > ordns.he.net.53: 61238+ AAAA? skydrive.wns.windows.com. (42)
18:50:03.039849 IP ip1f11a480.dynamic.kabel-deutschland.de > tserv1.fra1.he.net: IP6 2001:470:1f0b:2f9:4160:7f5d:a1f5:277.53726 > 2620:1ec:42::132.443: Flags [S], seq 1368019892, win 65535, options [mss 1364,nop,wscale 8,nop,nop,sackOK], length 0
18:50:03.439711 IP ip1f11a480.dynamic.kabel-deutschland.de > tserv1.fra1.he.net: IP6 2001:470:1f0b:2f9:4160:7f5d:a1f5:277.53723 > 2600:1901:0:38d7::.80: Flags [S], seq 470491741, win 65472, options [mss 1364,nop,wscale 8,nop,nop,sackOK], length 0
18:50:03.622889 IP ip1f11a480.dynamic.kabel-deutschland.de > tserv1.fra1.he.net: IP6 2001:470:1f0b:2f9:4160:7f5d:a1f5:277.53729 > 2603:1026:206:1::2.443: Flags [S], seq 1287346074, win 65472, options [mss 1364,nop,wscale 8,nop,nop,sackOK], length 0
18:50:03.623167 IP ip1f11a480.dynamic.kabel-deutschland.de > tserv1.fra1.he.net: IP6 2001:470:1f0b:2f9:4160:7f5d:a1f5:277.53730 > 2603:1026:206:1::2.443: Flags [S], seq 3766098899, win 65472, options [mss 1364,nop,wscale 8,nop,nop,sackOK], length 0
18:50:03.623359 IP ip1f11a480.dynamic.kabel-deutschland.de > tserv1.fra1.he.net: IP6 2001:470:1f0b:2f9:4160:7f5d:a1f5:277.53731 > 2603:1026:206:1::2.443: Flags [S], seq 3250016990, win 65472, options [mss 1364,nop,wscale 8,nop,nop,sackOK], length 0
18:50:03.623536 IP ip1f11a480.dynamic.kabel-deutschland.de > tserv1.fra1.he.net: IP6 2001:470:1f0b:2f9:4160:7f5d:a1f5:277.53732 > 2603:1026:206:1::2.443: Flags [S], seq 3687187517, win 65472, options [mss 1364,nop,wscale 8,nop,nop,sackOK], length 0
18:50:03.668436 IP ip1f11a480.dynamic.kabel-deutschland.de > tserv1.fra1.he.net: IP6 2001:470:1f0b:2f9:4160:7f5d:a1f5:277.53724 > 2600:1901:0:38d7::.80: Flags [S], seq 2076345396, win 65472, options [mss 1364,nop,wscale 8,nop,nop,sackOK], length 0
18:50:03.776594 IP ip1f11a480.dynamic.kabel-deutschland.de > tserv1.fra1.he.net: IP6 2001:470:1f0b:2f9:4160:7f5d:a1f5:277.53716 > 2603:1026:207:3c::2.443: Flags [S], seq 3200778311, win 65472, options [mss 1364,nop,wscale 8,nop,nop,sackOK], length 0
18:50:03.776776 IP ip1f11a480.dynamic.kabel-deutschland.de > tserv1.fra1.he.net: IP6 2001:470:1f0b:2f9:4160:7f5d:a1f5:277.53714 > 2603:1026:207:3c::2.443: Flags [S], seq 3313522125, win 65472, options [mss 1364,nop,wscale 8,nop,nop,sackOK], length 0
18:50:03.776937 IP ip1f11a480.dynamic.kabel-deutschland.de > tserv1.fra1.he.net: IP6 2001:470:1f0b:2f9:4160:7f5d:a1f5:277.53715 > 2603:1026:207:3c::2.443: Flags [S], seq 2265688620, win 65472, options [mss 1364,nop,wscale 8,nop,nop,sackOK], length 0
18:50:03.791710 IP ip1f11a480.dynamic.kabel-deutschland.de > tserv1.fra1.he.net: IP6 2001:470:1f0b:2f9:4160:7f5d:a1f5:277.53717 > 2a01:111:2003::52.80: Flags [S], seq 872917626, win 65472, options [mss 1364,nop,wscale 8,nop,nop,sackOK], length 0
18:50:04.053500 IP ip1f11a480.dynamic.kabel-deutschland.de > tserv1.fra1.he.net: IP6 2001:470:1f0b:2f9:4160:7f5d:a1f5:277.53726 > 2620:1ec:42::132.443: Flags [S], seq 1368019892, win 65535, options [mss 1364,nop,wscale 8,nop,nop,sackOK], length 0
18:50:04.670504 IP ip1f11a480.dynamic.kabel-deutschland.de > tserv1.fra1.he.net: IP6 2001:470:1f0b:2f9:4160:7f5d:a1f5:277.53730 > 2603:1026:206:1::2.443: Flags [S], seq 3766098899, win 65472, options [mss 1364,nop,wscale 8,nop,nop,sackOK], length 0
18:50:04.670758 IP ip1f11a480.dynamic.kabel-deutschland.de > tserv1.fra1.he.net: IP6 2001:470:1f0b:2f9:4160:7f5d:a1f5:277.53732 > 2603:1026:206:1::2.443: Flags [S], seq 3687187517, win 65472, options [mss 1364,nop,wscale 8,nop,nop,sackOK], length 0
18:50:04.670920 IP ip1f11a480.dynamic.kabel-deutschland.de > tserv1.fra1.he.net: IP6 2001:470:1f0b:2f9:4160:7f5d:a1f5:277.53729 > 2603:1026:206:1::2.443: Flags [S], seq 1287346074, win 65472, options [mss 1364,nop,wscale 8,nop,nop,sackOK], length 0
18:50:04.671083 IP ip1f11a480.dynamic.kabel-deutschland.de > tserv1.fra1.he.net: IP6 2001:470:1f0b:2f9:4160:7f5d:a1f5:277.53731 > 2603:1026:206:1::2.443: Flags [S], seq 3250016990, win 65472, options [mss 1364,nop,wscale 8,nop,nop,sackOK], length 0
18:50:05.447586 IP ip1f11a480.dynamic.kabel-deutschland.de > tserv1.fra1.he.net: IP6 2001:470:1f0b:2f9:4160:7f5d:a1f5:277.53723 > 2600:1901:0:38d7::.80: Flags [S], seq 470491741, win 65472, options [mss 1364,nop,wscale 8,nop,nop,sackOK], length 0
18:50:05.649845 IP ip1f11a480.dynamic.kabel-deutschland.de > tserv1.fra1.he.net: IP6 2001:470:1f0b:2f9:4160:7f5d:a1f5:277.51278 > ordns.he.net.53: 26813+ AAAA? reqpool365.sharepoint.com. (43)
18:50:05.672846 IP ip1f11a480.dynamic.kabel-deutschland.de > tserv1.fra1.he.net: IP6 2001:470:1f0b:2f9:4160:7f5d:a1f5:277.53724 > 2600:1901:0:38d7::.80: Flags [S], seq 2076345396, win 65472, options [mss 1364,nop,wscale 8,nop,nop,sackOK], length 0
18:50:05.798747 IP ip1f11a480.dynamic.kabel-deutschland.de > tserv1.fra1.he.net: IP6 2001:470:1f0b:2f9:4160:7f5d:a1f5:277.49361 > ordns.he.net.53: 37979+ A? mobile.pipe.aria.microsoft.com. (48)
18:50:05.798932 IP ip1f11a480.dynamic.kabel-deutschland.de > tserv1.fra1.he.net: IP6 2001:470:1f0b:2f9:4160:7f5d:a1f5:277.64227 > ordns.he.net.53: 62634+ AAAA? mobile.pipe.aria.microsoft.com. (48)
18:50:06.060962 IP ip1f11a480.dynamic.kabel-deutschland.de > tserv1.fra1.he.net: IP6 2001:470:1f0b:2f9:4160:7f5d:a1f5:277.53726 > 2620:1ec:42::132.443: Flags [S], seq 1368019892, win 65535, options [mss 1364,nop,wscale 8,nop,nop,sackOK], length 0

1 Like

I tried to help another user with an identical problem a little while back, also on Vodafone Cable Germany.

I narrowed the problem down to one of two things

  • problem with authentication on HE Net's side for that server
  • Vodafone Cable Germany blocking IP protocol 41

Subsequently, the user gave me their henet login and tunnel details and I tried to set up a 6in4 tunnel myself, which I know works for me - my provider does not block protocol 41. I had identical symptoms.

I could see the packets going out, ipv6 encapsulated in ipv4 and sent to the remote gateway on henet's end. But not a single reply. I even put a sniffer on the wire outside my firewall.

So, while I don't have a solution to your issue, I don't believe the problem is related to Vodafone Cable Germany blocking 6in4. It looks more like an authentication issue or something similar on henet's end.

You're using the exact same server he was: tserv1.fra1.he.net

I think that you need to first get the tunnel endpoint IPs working, and only then you should test the connectivity of the inside-LAN delegated routable prefix.

The tunnel endpoints are '2001:470:1f0a:2f7::2/64' and '2001:470:1f0a:2f7::1/64', right?'

I can ping your tunnel's henet endpoint, but not the endpoint at the router.

root@router1:~# ping -6 2001:470:1f0a:2f7::1
PING 2001:470:1f0a:2f7::1 (2001:470:1f0a:2f7::1): 56 data bytes
64 bytes from 2001:470:1f0a:2f7::1: seq=0 ttl=57 time=26.263 ms
64 bytes from 2001:470:1f0a:2f7::1: seq=1 ttl=57 time=26.318 ms
64 bytes from 2001:470:1f0a:2f7::1: seq=2 ttl=57 time=117.286 ms
^C
--- 2001:470:1f0a:2f7::1 ping statistics ---
3 packets transmitted, 3 packets received, 0% packet loss
round-trip min/avg/max = 26.263/56.622/117.286 ms

root@router1:~# ping -6 2001:470:1f0a:2f7::2
PING 2001:470:1f0a:2f7::2 (2001:470:1f0a:2f7::2): 56 data bytes
^C
--- 2001:470:1f0a:2f7::2 ping statistics ---
4 packets transmitted, 0 packets received, 100% packet loss

Some minor config points below...

This might be unnecessary:

If possible, you should use your /48 routable prefix from henet, so that you are not locked into a single /64.

The normal ip6assign default for LAN is 60, so that there is delegation possibility (of several /64s), which is useful if you have /48. OpenWrt automatically only uses the /64s as necessary from that /60.

option ip6assign '64' #EDIT 60-65
1 Like

I actually have multiple IPv6 LANs and subLANs (and multiple assignments properly registered with HE - I'm an original Sage) so I also use subnet hints for one the hextets to be issued to LANs...but yes, the OP could just use the issued network in its entirety.

I have been struggling with the exact same issue for a few days but still no luck.

I'm also on Vodafone Cable Germany with bridge mode activated.

I tried to create a tunnel through tserv1.par2.he.net and used it on my dedicated server, also running openwrt -> It works.
Then I used the exact same configuration on my home openwrt router -> No response.
I tried with two different openwrt routers but neither of them worked.
I even tried to connect my Windows 10 PC directly to the Vodafone router and set up 6in4. Still no luck.

I turned to 6to4 but I couldn't even reach 192.88.99.1:

traceroute to 192.88.99.1 (192.88.99.1), 30 hops max, 46 byte packets
 1  ipbcc078fe.dynamic.kabel-deutschland.de (188.192.120.254)  11.547 ms  8.281 ms  11.670 ms
 2  ip5886df1e.static.kabel-deutschland.de (88.134.223.30)  7.755 ms  6.617 ms  9.455 ms
 3  ip5886c243.static.kabel-deutschland.de (88.134.194.67)  9.764 ms  9.616 ms  9.441 ms
 4  145.254.3.100 (145.254.3.100)  8.802 ms  11.703 ms  8.966 ms
 5  145.254.2.179 (145.254.2.179)  18.553 ms  17.313 ms  20.319 ms
 6  145.254.2.179 (145.254.2.179)  19.167 ms  15.503 ms  17.101 ms
 7  ipv4.decix-frankfurt.core1.fra1.he.net (80.81.192.172)  16.206 ms  17.227 ms  15.790 ms
 8  100ge0-35.core2.dus1.he.net (184.104.194.210)  26.644 ms  24.070 ms  25.441 ms
 9  100ge5-2.core1.ams1.he.net (184.104.194.209)  24.641 ms  *  *
10  *  *  *
11  *  *  *
12  *  *  *
13  *  *  *

At this point I'm pretty sure that Vodafone is filtering protocol 41 for whatever reason. I couldn't reach 192.88.99.1 even on their cellular network.

Probably the only way to get ipv6 connection in this situation is to use some VPN services.

I managed to setup wireguard and use that as a ipv6 tunnel. Apparently Vodafone cannot block wireguard traffic :upside_down_face:

Basically I ordered a VPS located close to me which has a /64 ipv6 block. Then I setup VPS to use /128 from the /64 block on eth0 and allow forwarding on both directions in the firewall. Wireguard also uses /128 from the /64 block on both sides. Finally I set the whole /64 as ULA prefix and route all ipv6 traffic through wireguard in openwrt. Surprisingly it works. The latency is only 20ms and there is no packet loss, which is even better than using 6in4 tunnels.

1 Like