Not Getting IPv6 .. Please Help

[muneebkalathil]

Hi ..

I tried Tunnelbroker with pfsense with the help of https://doc.pfsense.org/index.php/Using_IPv6_with_a_Tunnel_Broker
and I am successful from from my home system. I can ping ipv6.google.com and got 10/10 from test-ipv6.com

But when I do this from my college. I cant ping or browse ipv6 sites.

I created a small LAN (192.168.10.1/24)  in college with 3 systems.
1 for pfSense and 2 clients. My clients got the IPv6  address from the DHCPv6.

I did all the steps according to that and also enabled ipv4 & ipv6 icmp on WAN & LAN from my main gateway(192.168.1.1).
My Main gateway is also pfsense.

Is there any more steps to do ?

Incase if u need . please check the attachment

Thank You
Muneeb K

[doktornotor]

Did you reboot after setting this up? (Also, I hope you understand you cannot use the same tunnel both at home and at college. You need to set up a separate tunnel for each location at HE.)

[muneebkalathil]

I rebooted several times .

i used seperate tunels for btoh hom n coleg.

[muneebkalathil]

Still no Answers ??? :(

[Gertjan]

@muneebkalathil:

Still no Answers ??? :(

You already wrote up the (start of the) answer yourself:
@muneebkalathil:

I tried Tunnelbroker with pfsense with the help of https://doc.pfsense.org/index.php/Using_IPv6_with_a_Tunnel_Broker
and I am successful from from my home system. I can ping ipv6.google.com and got 10/10 from test-ipv6.com

But when I do this from my college. I cant ping or browse ipv6 sites.

So, this is all about ONE thing : search the differences between the setup. At least one of them explains your situation.

[muneebkalathil]

At Home , There is only one pfSense .

well in College , I am doing under another pfSense Gateway (192.168.1.1).

[doktornotor]

@muneebkalathil:

At Home , There is only one pfSense .
well in College , I am doing under another pfSense Gateway (192.168.1.1).

Good that you mention just now… Unless that another pfSense does pass IPv6 protocol though, it will not ever work.

[Gertjan]

@doktornotor:

Good that you mention just now….....

IMHO, he did - reread message #1.

Now, up to muneebkalathil to check if the main gateway is "IPv6-Ok".

[doktornotor]

The only thing I read there is "enabled ipv4 & ipv6 icmp on WAN & LAN from my main gateway(192.168.1.1)". You need protocol 41 (IPv6) passed through.

[johnpoz]

So your double natting to this pfsense box 192.168.1.1 which is in front of your pfsense box that also nats.  Does that pfsense have a public on its wan?

You mention your at school - is this the schools network?  Or do you have your own private internet connection.  Many schools lock down their networks, where they don't even want you running nat that would allow you to put non registered devices on their network.  It would be quite possible that they are blocking protocol 41 which is required for a HE tunnel.

From the HE faq

*Two important notes:

Your IPv4 endpoint address must be reachable via ICMP ECHO_REQUEST (Internet Control Message Protocol).
    If you are using a NAT (Network Address Translation) appliance, please make sure it allows and forwards IP protocol 41.

What is IP Protocol 41?
    IP Protocol 41 is one of the Internet Protocol numbers. Within the IPv4 header, the IPv4 Protocol field is set to 41 to indicate an encapsulated IPv6 packet.

Even if they do allow it.. Not sure it would work through a double nat?  Do you have access to this pfsense in front of yours - is it allowing protocol 41?  Is it sending it to your 2nd pfsense wan IP?  See attached.