PfSense - Hurricane Electric - Tunnel Broker Setup
-
With the protocol 41, yeah some gateways will pass it if you put the box behind in the DMZ.. But yeah if your behind nat you can have issues. What is the IP on pfsense wan - is it rfc1918??
-
Well - This sucks…
Read em and weep (Seriously - Start weeping)
https://forums.he.net/index.php?topic=3110.0
-
Yeah - You weren't doing anything wrong… Sorry.
-
Yeah - You weren't doing anything wrong… Sorry.
This might be the result of AT&T wanting all data to go through their routing endpoints (IPv4 and IPv6). So that they can DPI all that traffic too. If only we could encrypt the connection to HE for this tunnel. :(
-
I am going to try setting this up over my private OpenVPN connection to Atlanta and see if it works, screw AT&T.
-
Could be…
Could also be that they are holding you hostage and that if you buy their "business package" for the mere price of 3x as much or something they will stop blocking common ports and protocols like 6 in 4 and smtp...
-
Could be…
Could also be that they are holding you hostage and that if you buy their "business package" for the mere price of 3x as much or something they will stop blocking common ports and protocols like 6 in 4 and smtp...
Possibly if I paid them the $30 more for non-Deep packet inspection (DPI) service, I wouldnt have this trouble. But it seems to be Uverse wide :(
But really I cant complain too loud since I pay $120 now for 1Gbps symmetrical and do get every 'bit' of it.
-
"I am going to try setting this up over my private OpenVPN connection to Atlanta and see if it works, screw AT&T."
Is your site in atlanta a pfsense with a public IP and no NAT?
If so, yeah - You can ride HE through that over a IPV4 UDP vpn to your local pfsense and then just set up HE IPV6 just like you were doing EXCEPT you will need to use the ipv4 address of the atlanta box in the HE config.
-
"I am going to try setting this up over my private OpenVPN connection to Atlanta and see if it works, screw AT&T."
Is your site in atlanta a pfsense with a public IP and no NAT?
If so, yeah - You can ride HE through that over a IPV4 UDP vpn to your local pfsense and then just set up HE IPV6 just like you were doing EXCEPT you will need to use the ipv4 address of the atlanta box in the HE config.
I cant use any HE destination Tunnel? I understand I would be adding latency. Is there something else I am not considering?
-
It would add some latency - yes.
