Statische Prefix modem-only met pFsense router

Ofloo · ‎17-07-2018

Naar mijn idee werkt alles aan mijn zijde, maar goed bij telenet helpdesk weigert men me door te verbinden met een netwerk technicus.

Ik heb een pFsense router/firewall maak gebruik van NPt via Telenet en HE.net dus kan ik IPv6 failover gebruiken naar HE.net als IPv6 van telenet niet zou werken.

intern maak ik gebruik van fc00::/7 range en map zo ::/64 per netwerk naar een toegewezen blok. Heeft altijd gewerkt, na verhuis ineens niet meer. HE.net werkt trouwens nog wel.

Als ik google public dns wil proberen te bereiken:

$ mtr 2001:4860:4660::8888
                                         My traceroute  [v0.92]
pinky (fc0x:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx)                                 2018-07-17T02:02:13+0200
Keys:  Help   Display mode   Restart statistics   Order of fields   quit
                                                                Packets               Pings
 Host                                                         Loss%   Snt   Last   Avg  Best  Wrst StDev
 1. fc0x:xxxx:xxxx:xxxx::1                                     0.0%    31    0.4   0.4   0.3   0.5   0.0
 2. 2a02:1800:2:4020::1                                        0.0%    31   12.8  15.8   8.4  72.3  15.1
 3. ???

Zoals je ziet kan ik één IPv6 adres bereiken en daarna niks meer. fc0x valt in mijn netwerk 2a02.. valt daar buiten. Dus NPt doet zijn werk maar geraakt niet verder dan het 2de adres dat in telenet zijn netwerk staat.

Adressen binnen het telenet netwerk werken maar daar buiten niet.

tcpdump -ni vtnet0 host 2a02:1800:2:4020::1
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on vtnet0, link-type EN10MB (Ethernet), capture size 262144 bytes
02:06:45.571473 IP6 2a02:1807:361x:xx:xxxx:xxxx:xxxx:xxxx > 2a02:1800:2:4020::1: ICMP6, echo request, seq 33008, length 24
02:06:45.580884 IP6 2a02:1800:2:4020::1 > 2a02:1807:361x:xx:xxxx:xxxx:xxxx:xxxx: ICMP6, echo reply, seq 33008, length 24
02:06:46.573594 IP6 2a02:1807:361x:xx:xxxx:xxxx:xxxx:xxxx > 2a02:1800:2:4020::1: ICMP6, echo request, seq 33010, length 24
02:06:46.585525 IP6 2a02:1800:2:4020::1 > 2a02:1807:361x:xx:xxxx:xxxx:xxxx:xxxx: ICMP6, echo reply, seq 33010, length 24
02:06:47.575625 IP6 2a02:1807:361x:xx:xxxx:xxxx:xxxx:xxxx > 2a02:1800:2:4020::1: ICMP6, echo request, seq 33012, length 24
02:06:47.584023 IP6 2a02:1800:2:4020::1 > 2a02:1807:361x:xx:xxxx:xxxx:xxxx:xxxx: ICMP6, echo reply, seq 33012, length 24
02:06:48.577633 IP6 2a02:1807:361x:xx:xxxx:xxxx:xxxx:xxxx > 2a02:1800:2:4020::1: ICMP6, echo request, seq 33014, length 24
02:06:48.586394 IP6 2a02:1800:2:4020::1 > 2a02:1807:361x:xx:xxxx:xxxx:xxxx:xxxx: ICMP6, echo reply, seq 33014, length 24
02:06:49.579735 IP6 2a02:1807:361x:xx:xxxx:xxxx:xxxx:xxxx > 2a02:1800:2:4020::1: ICMP6, echo request, seq 33016, length 24
02:06:49.592428 IP6 2a02:1800:2:4020::1 > 2a02:1807:361x:xx:xxxx:xxxx:xxxx:xxxx: ICMP6, echo reply, seq 33016, length 24
02:06:50.581706 IP6 2a02:1807:361x:xx:xxxx:xxxx:xxxx:xxxx > 2a02:1800:2:4020::1: ICMP6, echo request, seq 33018, length 24
02:06:50.591575 IP6 2a02:1800:2:4020::1 > 2a02:1807:361x:xx:xxxx:xxxx:xxxx:xxxx: ICMP6, echo reply, seq 33018, length 24
02:06:51.583641 IP6 2a02:1807:361x:xx:xxxx:xxxx:xxxx:xxxx > 2a02:1800:2:4020::1: ICMP6, echo request, seq 33020, length 24
02:06:51.601808 IP6 2a02:1800:2:4020::1 > 2a02:1807:361x:xx:xxxx:xxxx:xxxx:xxxx: ICMP6, echo reply, seq 33020, length 24
02:06:52.585714 IP6 2a02:1807:361x:xx:xxxx:xxxx:xxxx:xxxx > 2a02:1800:2:4020::1: ICMP6, echo request, seq 33022, length 24
02:06:52.594938 IP6 2a02:1800:2:4020::1 > 2a02:1807:361x:xx:xxxx:xxxx:xxxx:xxxx: ICMP6, echo reply, seq 33022, length 24
02:06:53.587606 IP6 2a02:1807:361x:xx:xxxx:xxxx:xxxx:xxxx > 2a02:1800:2:4020::1: ICMP6, echo request, seq 33024, length 24
02:06:53.594771 IP6 2a02:1800:2:4020::1 > 2a02:1807:361x:xx:xxxx:xxxx:xxxx:xxxx: ICMP6, echo reply, seq 33024, length 24
02:06:54.589764 IP6 2a02:1807:361x:xx:xxxx:xxxx:xxxx:xxxx > 2a02:1800:2:4020::1: ICMP6, echo request, seq 33026, length 24
02:06:54.598108 IP6 2a02:1800:2:4020::1 > 2a02:1807:361x:xx:xxxx:xxxx:xxxx:xxxx: ICMP6, echo reply, seq 33026, length 24

Tcpdump met als target google public dns:

tcpdump -ni vtnet0 host 2001:4860:4660::8888
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on vtnet0, link-type EN10MB (Ethernet), capture size 262144 bytes
02:03:47.774329 IP6 2a02:1807:361x:xx:xxxx:xxxx:xxxx:xxxx > 2001:4860:4660::8888: ICMP6, echo request, seq 33408, length 24
02:03:47.837165 IP6 2a02:1807:361x:xx:xxxx:xxxx:xxxx:xxxx > 2001:4860:4660::8888: ICMP6, echo request, seq 33409, length 24
02:03:47.900007 IP6 2a02:1807:361x:xx:xxxx:xxxx:xxxx:xxxx > 2001:4860:4660::8888: ICMP6, echo request, seq 33410, length 24
02:03:47.962824 IP6 2a02:1807:361x:xx:xxxx:xxxx:xxxx:xxxx > 2001:4860:4660::8888: ICMP6, echo request, seq 33411, length 24
02:03:48.025625 IP6 2a02:1807:361x:xx:xxxx:xxxx:xxxx:xxxx > 2001:4860:4660::8888: ICMP6, echo request, seq 33412, length 24
02:03:48.088490 IP6 2a02:1807:361x:xx:xxxx:xxxx:xxxx:xxxx > 2001:4860:4660::8888: ICMP6, echo request, seq 33413, length 24
02:03:48.151349 IP6 2a02:1807:361x:xx:xxxx:xxxx:xxxx:xxxx > 2001:4860:4660::8888: ICMP6, echo request, seq 33414, length 24
02:03:48.214142 IP6 2a02:1807:361x:xx:xxxx:xxxx:xxxx:xxxx > 2001:4860:4660::8888: ICMP6, echo request, seq 33415, length 24
02:03:48.339860 IP6 2a02:1807:361x:xx:xxxx:xxxx:xxxx:xxxx > 2001:4860:4660::8888: ICMP6, echo request, seq 33417, length 24
02:03:48.402772 IP6 2a02:1807:361x:xx:xxxx:xxxx:xxxx:xxxx > 2001:4860:4660::8888: ICMP6, echo request, seq 33418, length 24
02:03:48.465598 IP6 2a02:1807:361x:xx:xxxx:xxxx:xxxx:xxxx > 2001:4860:4660::8888: ICMP6, echo request, seq 33419, length 24
02:03:48.528492 IP6 2a02:1807:361x:xx:xxxx:xxxx:xxxx:xxxx > 2001:4860:4660::8888: ICMP6, echo request, seq 33420, length 24
02:03:48.591259 IP6 2a02:1807:361x:xx:xxxx:xxxx:xxxx:xxxx > 2001:4860:4660::8888: ICMP6, echo request, seq 33421, length 24
02:03:48.653961 IP6 2a02:1807:361x:xx:xxxx:xxxx:xxxx:xxxx > 2001:4860:4660::8888: ICMP6, echo request, seq 33422, length 24
02:03:48.716863 IP6 2a02:1807:361x:xx:xxxx:xxxx:xxxx:xxxx > 2001:4860:4660::8888: ICMP6, echo request, seq 33423, length 24
02:03:48.779715 IP6 2a02:1807:361x:xx:xxxx:xxxx:xxxx:xxxx > 2001:4860:4660::8888: ICMP6, echo request, seq 33424, length 24
02:03:48.842498 IP6 2a02:1807:361x:xx:xxxx:xxxx:xxxx:xxxx > 2001:4860:4660::8888: ICMP6, echo request, seq 33425, length 24
02:03:48.905347 IP6 2a02:1807:361x:xx:xxxx:xxxx:xxxx:xxxx > 2001:4860:4660::8888: ICMP6, echo request, seq 33426, length 24
02:03:48.968176 IP6 2a02:1807:361x:xx:xxxx:xxxx:xxxx:xxxx > 2001:4860:4660::8888: ICMP6, echo request, seq 33427, length 24
02:03:49.031046 IP6 2a02:1807:361x:xx:xxxx:xxxx:xxxx:xxxx > 2001:4860:4660::8888: ICMP6, echo request, seq 33428, length 24
02:03:49.093869 IP6 2a02:1807:361x:xx:xxxx:xxxx:xxxx:xxxx > 2001:4860:4660::8888: ICMP6, echo request, seq 33429, length 24
02:03:49.156658 IP6 2a02:1807:361x:xx:xxxx:xxxx:xxxx:xxxx > 2001:4860:4660::8888: ICMP6, echo request, seq 33430, length 24
02:03:49.219505 IP6 2a02:1807:361x:xx:xxxx:xxxx:xxxx:xxxx > 2001:4860:4660::8888: ICMP6, echo request, seq 33431, length 24
02:03:49.345181 IP6 2a02:1807:361x:xx:xxxx:xxxx:xxxx:xxxx > 2001:4860:4660::8888: ICMP6, echo request, seq 33433, length 24
02:03:49.408089 IP6 2a02:1807:361x:xx:xxxx:xxxx:xxxx:xxxx > 2001:4860:4660::8888: ICMP6, echo request, seq 33434, length 24
02:03:49.470926 IP6 2a02:1807:361x:xx:xxxx:xxxx:xxxx:xxxx > 2001:4860:4660::8888: ICMP6, echo request, seq 33435, length 24
02:03:49.533789 IP6 2a02:1807:361x:xx:xxxx:xxxx:xxxx:xxxx > 2001:4860:4660::8888: ICMP6, echo request, seq 33436, length 24
02:03:49.596577 IP6 2a02:1807:361x:xx:xxxx:xxxx:xxxx:xxxx > 2001:4860:4660::8888: ICMP6, echo request, seq 33437, length 24
02:03:49.659434 IP6 2a02:1807:361x:xx:xxxx:xxxx:xxxx:xxxx > 2001:4860:4660::8888: ICMP6, echo request, seq 33438, length 24
02:03:49.722336 IP6 2a02:1807:361x:xx:xxxx:xxxx:xxxx:xxxx > 2001:4860:4660::8888: ICMP6, echo request, seq 33439, length 24
02:03:49.785186 IP6 2a02:1807:361x:xx:xxxx:xxxx:xxxx:xxxx > 2001:4860:4660::8888: ICMP6, echo request, seq 33440, length 24
02:03:49.848000 IP6 2a02:1807:361x:xx:xxxx:xxxx:xxxx:xxxx > 2001:4860:4660::8888: ICMP6, echo request, seq 33441, length 242a02:1807:361x:
02:03:49.910831 IP6 2a02:1807:361x:xx:xxxx:xxxx:xxxx:xxxx > 2001:4860:4660::8888: ICMP6, echo request, seq 33442, length 24
02:03:49.973682 IP6 2a02:1807:361x:xx:xxxx:xxxx:xxxx:xxxx > 2001:4860:4660::8888: ICMP6, echo request, seq 33443, length 24
02:03:50.036468 IP6 2a02:1807:361x:xx:xxxx:xxxx:xxxx:xxxx > 2001:4860:4660::8888: ICMP6, echo request, seq 33444, length 24
02:03:50.099317 IP6 2a02:1807:361x:xx:xxxx:xxxx:xxxx:xxxx > 2001:4860:4660::8888: ICMP6, echo request, seq 33445, length 24
02:03:50.161993 IP6 2a02:1807:361x:xx:xxxx:xxxx:xxxx:xxxx > 2001:4860:4660::8888: ICMP6, echo request, seq 33446, length 24
02:03:50.224885 IP6 2a02:1807:361x:xx:xxxx:xxxx:xxxx:xxxx > 2001:4860:4660::8888: ICMP6, echo request, seq 33447, length 24
02:03:50.350571 IP6 2a02:1807:361x:xx:xxxx:xxxx:xxxx:xxxx > 2001:4860:4660::8888: ICMP6, echo request, seq 33449, length 24
02:03:50.413463 IP6 2a02:1807:361x:xx:xxxx:xxxx:xxxx:xxxx > 2001:4860:4660::8888: ICMP6, echo request, seq 33450, length 24
02:03:50.476310 IP6 2a02:1807:361x:xx:xxxx:xxxx:xxxx:xxxx > 2001:4860:4660::8888: ICMP6, echo request, seq 33451, length 24
02:03:50.539123 IP6 2a02:1807:361x:xx:xxxx:xxxx:xxxx:xxxx > 2001:4860:4660::8888: ICMP6, echo request, seq 33452, length 24
02:03:50.601942 IP6 2a02:1807:361x:xx:xxxx:xxxx:xxxx:xxxx > 2001:4860:4660::8888: ICMP6, echo request, seq 33453, length 24
02:03:50.664701 IP6 2a02:1807:361x:xx:xxxx:xxxx:xxxx:xxxx > 2001:4860:4660::8888: ICMP6, echo request, seq 33454, length 24
02:03:50.727624 IP6 2a02:1807:361x:xx:xxxx:xxxx:xxxx:xxxx > 2001:4860:4660::8888: ICMP6, echo request, seq 33455, length 24
02:03:50.790407 IP6 2a02:1807:361x:xx:xxxx:xxxx:xxxx:xxxx > 2001:4860:4660::8888: ICMP6, echo request, seq 33456, length 24
02:03:50.853229 IP6 2a02:1807:361x:xx:xxxx:xxxx:xxxx:xxxx > 2001:4860:4660::8888: ICMP6, echo request, seq 33457, length 24
02:03:50.916038 IP6 2a02:1807:361x:xx:xxxx:xxxx:xxxx:xxxx > 2001:4860:4660::8888: ICMP6, echo request, seq 33458, length 24
02:03:50.978946 IP6 2a02:1807:361x:xx:xxxx:xxxx:xxxx:xxxx > 2001:4860:4660::8888: ICMP6, echo request, seq 33459, length 24
02:03:51.041712 IP6 2a02:1807:361x:xx:xxxx:xxxx:xxxx:xxxx > 2001:4860:4660::8888: ICMP6, echo request, seq 33460, length 24
02:03:51.104518 IP6 2a02:1807:361x:xx:xxxx:xxxx:xxxx:xxxx > 2001:4860:4660::8888: ICMP6, echo request, seq 33461, length 24

Tcpdump met als target het telenet adres (gateway?):

Ofloo · ‎24-07-2018

ok dat klopt ik heb je antwoord nader bekeken, maar zo is het ook geconfigureerd.

fc01:ad:ad:cafe::/64 wordt gemapped naar bv 2a02:1807:3611:ab::/64

En dus wordt bv

fc01:ad:ad:cafe:123:abc:abc:abc => 2a02:1807:3611:ab:123:abc:abc:abc

Geef me anders je email dan stuur ik je een niet gecensureerde tcpdump dan kan je kijken met wireshark.

'k Weet eigenlijk niet waarom je zo focused op dat NPt gebeuren ik zie op tcpdump het IP juist gemapped. Daar zit het niet het zit gewoon bij Telenet. Anders zie je die traffiek niet tussen in bij een traceroute.

StefaanH · ‎24-07-2018

@Ofloo@ schreef:
...knip...
Geef me anders je email dan stuur ik je een niet gecensureerde tcpdump dan kan je kijken met wireshark.
... knip ...

@Ofloo Kleine tip: Je kan hem steeds een privé bericht sturen ...

StefaanH | Krak
De Gustibus et Coloribus non est disputandum.
Vergeet niet om likes te geven en/of als oplossing te markeren.

igvfer · ‎24-07-2018

@StefaanH@ schreef:
@Ofloo@ schreef:
...knip...
Geef me anders je email dan stuur ik je een niet gecensureerde tcpdump dan kan je kijken met wireshark.
... knip ...

@Ofloo Kleine tip: Je kan hem steeds een privé bericht sturen ...

Klikken op de gebruikersnaam en je kan een privebericht sturen.

  Ignace (igvfer) | Krak
  Niets is mooi of lelijk, het is enkel wij die het mooi of lelijk vinden.
  Vergeet niet om likes te geven en/of als oplossing te markeren.

Ofloo · ‎25-07-2018

Link tcpdump verstuurt, ..

Ofloo · ‎31-07-2018

Gisteren was ik gecontacteerd door een telenet medewerker, en vandaag werkt alles weer, er was inderdaad een probleem op één van hun routers.

41178 netweters	17753 gesprekken
19181 vragen	5995 oplossingen