gmane.network.ipv6.miredo.devel

problem pinging teredo address over switch (bug report?)

Eric Anopolsky — 2008-10-10T20:33:32

Hi, I'm having a problem involving two hosts using miredo. The first is a home server that is connected via ethernet to a wireless/wired router, which is connected to the Internet via DSL. The second host is a laptop that is sometimes connected to the same wireless/wired router and is sometimes connected to a similar setup at work (laptop---wireless/wired router---cable modem). Both wireless/wired routers do NAT for IPv4. When at work, the laptop can ping6 the server's teredo IP. However, at home, I get the following result when I try to ping6 the server from the laptop: eric< at >telesto:~$ ping6 SERVER_IP PING SERVER_IP(SERVER_IP) 56 data bytes From LAPTOP_IP icmp_seq=11 Destination unreachable: Address unreachable From LAPTOP_IP icmp_seq=12 Destination unreachable: Address unreachable From LAPTOP_IP icmp_seq=13 Destination unreachable: Address unreachable From LAPTOP_IP icmp_seq=14 Destination unreachable: Address unreachable From LAPTOP_IP icmp_seq=15 Destination unreachable: Address unreachable From LAPT

Questions and implementation advice about Miredo

Mark van Herpen — 2008-10-13T12:41:45

Hallo, Last week I found Miredo for implementing the Toredo protocol. And I find it very interesting, but I still have some questions. I'm working for a small internet provider based in the Netherlands. We mostly have DSL costumers. We want to implement a IPv6 solutions for those customers, but we aren't able to deliver them native IPv6 due to our DSL-network suppliers. Because most of the DSL modem/routers don't understand tunneling with ipv6, we would like to implement a solution which works with NAT. I've tested your Miredo software, and it works great :). But, now I've got some implementation questions. We want to have our customers a IPv6 address of ours, and not an address from the Toredo pool. I've read in the mailing list archive that this is possible, but there is no answer given on how this is done, except that it's not a standard solution. We want to use a /64 or /48 subnet for this. But when I use a /48 prefix in the configuration, the miredo software keeps assigning an address which isn't i

Intermittent connectivity

Adam MacBeth — 2008-09-26T01:12:38

I'm running the Miredo client 1.1.5-2 on Debian (installed the .deb) and I'm seeing regular connectivity problems. Every so often (somewhere between 2 and 20 minutes, usually about 5) I see "Lost Teredo connectivity" in the logs. After a minute or two connectivity is regained. If I restart miredo, it immediately regains connectivity. This is wreaking havoc on my ability to connect to this machine. IPv4 connectivity does not appear to be affected. The client is configured to use Microsoft's servers right now, but I see the same problems with remlab.net. These servers appear to be responsive at all times. Any thoughts on what might be going on here? Are there any timeout parameters I can tune to improve this situation? Thanks, Adam

difficulty with XP SP2 and Vista SP0

Carlos Rendon — 2008-09-10T21:46:00

Greetings- I'm running miredo-server 1.1.5 on Fedora 9. I haven't been able to get XP SP2 or Vista SP1 to work. However Vista SP0 works perfectly fine and the miredo client running on a separate Fedora 9 machine also works fine. The network setup is the same in all scenarios. The clients are behind a Linksys router and get addresses in 192.168.1.x, the server is 193.168.1.1 and 193.168.1.2. For the Windows firewall setups UDP ports 3544 and 11111 are opened and I've forced Windows to use 11111 for teredo. I've included packet captures of both scenarios below (just ICMPv6 packets). Please let me know if additional information would be useful in diagnosing the problem. Thanks, Carlos Here is the XP SP2 capture: No. Time Source Destination Protocol Info 10 5.018549 fe80::8000:5445:5245:444f ff02::2 ICMPv6 Router solicitation 0000 00 0f 66 08 64 9b 00 14 22 53 42 93 08 00 45

miredo-server on FreeBSD and vista teredo

Jason DiCioccio — 2008-08-23T11:22:15

Greetings all, I'm running miredo-server from ports on FreeBSD 7.0 and having a bit of an issue when trying to connect with a vista client. The Vista client works fine when using microsoft's teredo server(s), however when I try to use miredo I get the error: "Primary teredo server unreachable over UDP." Analyzing the traffic with wireshark on the Vista side shows the router solicitation being sent out, as well as the advertisement being sent back, however I'm not sure what happens with it afterwards. The client keeps sending solicitations as if the advertisement didn't exist. Any help would be appreciated. I've been unable to find any suitable information on google thus far. Thanks! Jason DiCioccio

Need for a computer security contact (FIRST REQUEST) - miredo VEND#144414

CERT Coordination Center — 2008-08-01T19:10:18

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello Folks: We are aware of a problem with one of your products. We are interested in establishing a formal contact with you to facilitate the coordination of vulnerability remediation. Given the sensitive nature of the information typically exchanged during the vulnerability remediation process, we are interested in exchanging PGP or GnuPG keys with you to ensure secure communication. Please follow the steps listed below to begin the key exchange process: 1. You generate a PGP or GnuPG key pair if you do not already have one. 2. You then send the public key to public.gmane.org> via email signed with that key. Please include "VEND#144414" in the subject line of your email message. 3. We will then contact you out-of-band via a trusted telephone number to verify your key fingerprint. This will involve your reading the key fingerprint back to us in hexidecimal format. 4. We will then use your public key to send mail to

ping6 sending to miredo server, not relay

Robert Moskowitz — 2008-07-16T20:15:14

I am running Miredo 1.0.6-1 on Centos 5.2 from the rpmforge repo. I am running a Miredo Server and Relay on a system on my home net (with native IPv6). The server is on port 3544 with two consecutive IPv4 addresses. The relay is on port 3545. I can at times get my Miredo client to connect to the server and get an address. And at times the default v6 route (0::/0) is to the Teredo interface (if I start and stop things enough, either get no response from the server, or I get a response, but my default address is to eth1!). Anyway, right now things all look right. So I do a ping6 -n. I get a proper public v6 address from DNS. The ping6 does out, but to port 3544, not to 3545. I cannot see anything in the miredo.conf man to tell me how to set up the client to what port the relay is on. On the server, I cannot find anything in the miredo-server.conf about connecting to the relay and providing that information to the client. Can someone PLEASE help me out?

Getting relaying working

Robert Moskowitz — 2008-07-16T14:13:02

I am running Miredo 1.0.6-1 on Centos 5.2 from the rpmforge repo. I have edited the /etc/miredo.conf file to use the Microsoft Teredo server: ServerAddress teredo.ipv6.microsoft.com I get an address: Jul 16 07:34:27 nc2400 miredo[6141]: Starting... Jul 16 07:34:27 nc2400 kernel: ADDRCONF(NETDEV_CHANGE): teredo: link becomes ready Jul 16 07:34:35 nc2400 miredo[6145]: Qualified (NAT type: restricted) Jul 16 07:34:35 nc2400 miredo[6145]: New Teredo address/MTU Jul 16 07:34:35 nc2400 miredo[6145]: Teredo pseudo-tunnel started Jul 16 07:34:35 nc2400 miredo[6145]: (address: 2001:0:4137:9e50:0:7fea:b75b:47b9, MTU: 1280) Jul 16 07:34:35 nc2400 kernel: teredo: Disabled Privacy Extensions And I have a default route: Kernel IPv6 routing table Destination Next Hop Flags Metric Ref Use Iface 2001::/32 :: U 256 0 0 teredo fe80::/64 :: U 256 0

[MS-TERE]: Teredo Extensions

Bartley, M. James — 2008-05-06T19:04:40

Re: http://www.remlab.net/miredo/faq.shtml.en#symmnat ... How about an anonymously-/publicly-accessible page? http://msdn.microsoft.com/en-us/library/cc247482.aspx http://msdn.microsoft.com/en-us/library/cc247488.aspx - mjamesb

Is there a ISATAP client?

George — 2008-04-12T19:42:30

I know that Miredo can be a ISATAP server, but how abort ISATAP client? Could Miredo work as a ISATAP client? If not, anybody know to make ISATAP works on Linux? THANKS!

Subnet with Teredo?

Andre-John Mas — 2008-04-05T20:30:08

Hi, Is it possible to create a subnet with the Miredo/Teredo? If it is, how do I know which prefix I should be using? Andre

Miredo at Soft5000 ?

Nadina — 2008-03-27T12:58:23

Hello there, My name is Nadina and I work for Soft5000. We just added to our database. You can see the software details here: http://linux.soft5000.com/download1582.html We ask you if you can, please add our link http://linux.soft5000.com to your references page. Thank you and hope to see more of your products launched soon, Nadina

Why my question is not answered?

Edwin Sanjoto — 2008-03-12T07:35:28

routing all traffic through a relay

Amir Malik — 2008-02-21T08:57:41

Hi, I have set up both a Miredo server and relay on a machine with IPv6 connectivity. From all my Teredo clients, I can access the outside IPv6 world by specifying this server in their Miredo configuration files. The server machine has been assigned a /48 chunk of address space. Clients connecting to any site in this space work properly as a direct/least-hops route. However, when I try to access IPv6 sites outside of this /48, the traffic does not go to the relay I have set up, rather it goes through *.consulintel.es relays, even though my relay/server has (BGP-announced) routes to sites outside of my own /48. I suppose miredo-server is ignoring local routes... Is there a way to let miredo-server know to only use the local relay? Or is route selection happening on the client? All my clients are Miredo... From Teredo client: traceroute to www.isc.org (2001:4f8:0:2::d) from 2001:0:d820:54dd:8c8:f227:b381:5c63, 30 hops max, 16 byte packets 1 2a01:48:1:1:2e0:81ff:fe05:4657 (2a01:48:1:1:2e0:81ff:

Miredo 1.1.4 building failing on MacOS X 10.4.11

Andre-John Mas — 2008-01-04T22:27:39

Hi, I seem to have run into a few problems compiling Miredo 1.1.4 on MacOS X 10.4.11 (PowerPC G4). ./configure --without-Judy make I get the following error: powerpc-apple-darwin8-gcc-4.0.1: -framework: linker input file unused because linking not done powerpc-apple-darwin8-gcc-4.0.1: SystemConfiguration: linker input file unused because linking not done powerpc-apple-darwin8-gcc-4.0.1: -framework: linker input file unused because linking not done powerpc-apple-darwin8-gcc-4.0.1: CoreFoundation: linker input file unused because linking not done gcc -std=gnu99 -DHAVE_CONFIG_H -I. -I.. -I../include -I.. -D_REENTRANT -DLOCALEDIR=\"/usr/local/share/locale\" -O2 -I/opt/local/include -I/usr/include/ -I/usr/local/include/ -I/usr/local/include -g -O2 -framework SystemConfiguration -framework CoreFoundation -Wall -Wextra -Wundef -Wpointer-arith -Wbad-function-cast -Wcast-align -Wwrite-strings -Waggregate-return -Wstrict-prototypes -Wold-style-definition -Wmissing-prototypes -Wmissing-noreturn -Wpacked -Wnested-e

installing miredo in freeBSD 6.2

danank a a — 2007-12-24T08:33:05

Dear sir, My name danang, I'm college student Would You mind helping me about miredo installation, I have a problem when installing them I use freeBSD 6.2 when I compiled the source code as usual, it say "you need to install Judy library..... etc" and then I installed Judy-1.0.4 but when I use command "make" an eror occured in my attachment I include the eror, please help me.... thanks before ____________________________________________________________________________________ Looking for last minute shopping deals? Find them fast with Yahoo! Search. http://tools.search.yahoo.com/newsearch/category.php?category=shopping

isatapd stops working

Glen Eustace — 2007-12-20T03:31:05

Hi, I have isatapd running on a Fedora 7 platform. When one first starts it it works great. Provided one continues generating traffic, the tunnel works. However, if thing go quiet for a while, I haven't managed to determine how long yet, but in the order of 5 - 10 minutes, one gets a network unreachable the next time any IPv6 activity occurs. If there is anything I can do to assts with debugging please let me know. The remote end is a Cisco 6500 Sup 720 running IOS 122-18.SXF6

optional "fixed" teredo address

Frans van Dorsselaer — 2007-11-18T09:59:08

Got an address, but can't use it

2007-11-07T16:11:50

Hi, I've got miredo 1.1.3 installed on Fedora Core 7 and am running in client mode. To get things running I had to edit client-hook to hardcode IP="/sbin/ip" as "$(which ip)" was returning an error for some reason probably to do with my environment. I also defined TABLE=252 in client-hook and edited /etc/iproute2/rt_tables to include the line 252teredo Running miredo -f gets me an address and I can see Router Solicitations and Advertisements on the wire. Things fail when I try ping6 www.kame.net which returns connect: Network is unreachable Any ideas? Mat Ford Principal Researcher BT Group Chief Technology Office office:(+44)(0)1875 341678 mobile:(+44)(0)7917 021303 fax:(+44)(0)1908 860131 meetme:(+44)(0)870 2412996 code: 81010840# (0)800 0321609 pp HWP276, PO Box 234 (HOM-EH), Edinburgh EH12 9UR, UK ________________________________________________ British Telecommunications plc Registered office: 81 Newgate Street London EC1A 7AJ. Registered in England no. 1800000 This electronic

Teredo Relay overloaded?

Miguel A. Diaz — 2007-10-04T16:08:31

Hi, I've noticed that my Teredo Relay (miredo-1.1.2 on linux 2.4.20-8) is working not so well. I can see it is relaying a lot of Teredo traffic, around 100 Kbps (which means around 90 packets per second) for outgoing traffic (native IPv6 --> Teredo Client) and around 50 Kbps (around 40 packets per second) for incoming traffic (Teredo Client --> native IPv6), average data. The network link is not overloaded because I have bandwidth enough. Those data seems to indicate that the Teredo Relay is working well. However when I try to ping6 from one native IPv6 node (PC1 below) using my Teredo Relay to one specific Teredo client (PC2 below), I have no ping6 replies. +------+ ~ ---------------- ~ | PC1 | ( Internet IPv6 )<------>+------+ ~ ---------------- ~ / / / \ +------+ / \ +----------+ +--------+ | Teredo | | Teredo | |==>| Server 1

Size of IPv6 routing table

Miguel A. Diaz — 2007-09-10T11:15:56

Hi, We have recently checked that the Teredo traffic has increased notably since middle of august in our public Teredo relay. As consequence of such huge relay traffic I've realized that a thousands of IPv6 /128 prefixes belonging to the Teredo Prefix are included into the IPv6 routing table: [root< at >ns1]# route --inet6 Kernel IPv6 routing table Destination Flags Metric Ref Use Iface ::1/128 U 0 18182 3 lo 2001:0:4136:e388:0:f1e0:b951:a3a3/128 UC 0 1 0 teredo 2001:0:4136:e388:0:f4f5:ab86:a82f/128 UC 0 1 0 teredo 2001:0:4136:e388:0:f685:ac63:c890/128 UC 0 1 0 teredo 2001:0:4136:e388:0:f812:e7be:a292/128 UC 0 1 0 teredo 2001:0:4136:e388:0:fb25:ab66:ac3c/128 UC 0 1 0 teredo .............. I wonder why the Miredo implementation adds a new entry into the routing table per each Teredo packet received. This makes me to modify