[LUGOS] SIT tunel, ICMP protocol 41 port 0 unreachable

[Rok Potočnik]

torej... mam ene težave, pa nism prepričan ali so distro/kernel based al težava zarad tagiranih vlanov... ne izključujem možnosti, da sm js kje zamučkal...

sit tunel med dvema kištama:
A - centos 5.7 eth0 ip 1.1.1.1
B - centos 6 eth0.2 ip 2.2.2.2 (vlan tagiran promet)

konfiguracija A:
iptables -I INPUT -s 2.2.2.2 -j ACCEPT
ip6tables -I INPUT -j ACCEPT
ip tunnel add test6 mode sit remote 2.2.2.2 local 1.1.1.1 dev eth0
ip link set test6 up
ip -6 a 2001::1/64 dev test6

konfiguracija B:
iptables -I INPUT -s 1.1.1.1 -j ACCEPT
ip6tables -I INPUT -j ACCEPT
ip tunnel add test6 mode sit remote 1.1.1.1 local 2.2.2.2 dev eth0.2
ip link set test6 up
ip -6 a 2001::2/64 dev test6



tcpdump na A s filtrom 'proto 41 or icmp and host 2.2.2.2'

ping B > A


ping A > B


kakšna ideja?

--
LP, Rok

problem pa je, da mi tunel ne deluje zaradi tega, ker B vrača ICMP protocol 41 port 0 unreachable, kar se lepo vidi v primeru pinganja ter tcpdumpanja... 18:18:15.307007 IP (tos 0x0, ttl 63, id 0, offset 0, flags [DF], proto: IPv6 (41), length: 124) 2.2.2.2 > 1.1.1.1: IP6 (hlim 64, next-header: ICMPv6 (58), length: 64) 2001::2 > 2001::1: [icmp6 sum ok] ICMP6, echo request, length 64, seq 62 18:18:15.307027 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto: IPv6 (41), length: 124) 1.1.1.1 > 2.2.2.2: IP6 (hlim 64, next-header: ICMPv6 (58), length: 64) 2001::1 > 2001::2: [icmp6 sum ok] ICMP6, echo reply, length 64, seq 62 18:18:15.355523 IP (tos 0xc0, ttl 63, id 17154, offset 0, flags [none], proto: ICMP (1), length: 152) 2.2.2.2 > 1.1.1.1: ICMP 2.2.2.2 protocol 41 port 0 unreachable, length 132 18:35:44.712166 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto: IPv6 (41), length: 124) 1.1.1.1 > 2.2.2.2: IP6 (hlim 64, next-header: ICMPv6 (58), length: 64) 2001::1 > 2001::2: [icmp6 sum ok] ICMP6, echo request, length 64, seq 0 18:35:44.761041 IP (tos 0xc0, ttl 63, id 18184, offset 0, flags [none], proto: ICMP (1), length: 152) 2.2.2.2 > 1.1.1.1: ICMP 2.2.2.2 protocol 41 port 0 unreachable, length 132

smime.p7s
Description: S/MIME Cryptographic Signature

_______________________________________________
lugos-list mailing list
lugos-list@lugos.si
http://liste2.lugos.si/cgi-bin/mailman/listinfo/lugos-list