[hipl-users] Re: Problems with RVS

  • From: Miika Komu <mkomu@xxxxxxxxx>
  • To: hipl-users@xxxxxxxxxxxxx
  • Date: Thu, 17 Oct 2013 21:20:16 +0300

Hi Paola,

(returning offline discussion to online)

my guess of the origins of your problem is that the host machine of your virtual machines is Windows, and it does not allow raw sockets, even for virtual machines. This is probably the reason why HIP-over-UDP-over-IPv4 works, but HIP-over-IPv6 doesn't.

If you really want to do NAT traversal with HIP, please consider:

1. Using Linux (or OS-X) as the host machine (Linux live CD/USB images are available) 2. Use HIP over UDP and IPv4, and employ the relay server as instructed in the manual (the relay server requires a public IPv4 address)

Btw, your Teredo configuration is not fully functional because I can't reach your VMs, even though you can reach by yourself.

P.S. OpenHIP has some native support for Windows.

On 10/16/2013 07:45 PM, Paola Venuso wrote:
Hi Miika,

at the initiator:

paola2@ubuntu2:~$ lsmod|grep xfrm
xfrm_user              31160  1
xfrm_algo              14952  3 xfrm_user,esp6,esp4
xfrm6_mode_beet        12577  1
xfrm4_mode_beet        12498  1

at the responder :

paola@ubuntu:~$ lsmod|grep xfrm
xfrm_user              31160  1
xfrm_algo              14952  3 xfrm_user,esp6,esp4
xfrm6_mode_beet        12577  2
xfrm4_mode_beet        12498  2

Then I used ping6 with the server address and I could reach it. I
invoked add map command and ping6 and waited for more then a minute but
nothing happened so I stopped it:

paola@ubuntu:~$ ping6 2001:10:5403:41fe:a5df:5f02:9680:b6d2PING
56 data bytes
--- 2001:10:5403:41fe:a5df:5f02:9680:b6d2 ping statistics ---
222 packets transmitted, 0 received, 100% packet loss, time 221196ms

paola@ubuntu:~$ hipconf daemon get ha all
Sending user message 22 to HIPD on socket 3
Sent 40 bytes
Waiting to receive daemon info.
240 bytes received from HIP daemon.
  Shotgun mode is off.
  Broadcast mode is off.
  Local HIT: 2001:0012:421d:99a0:005d:d60f:73b0:4407
  Peer  HIT: 2001:0010:5403:41fe:a5df:5f02:9680:b6d2
  Local LSI:
  Peer  LSI:
  Local IP: 3ffe:0000:0000:0000:0000:0000:0000:0002
  Local NAT traversal UDP port: 0
  Peer  IP: 3ffe:0000:0000:0000:0000:0000:0000:0001
  Peer  NAT traversal UDP port: 0
  Peer  hostname:

2013/10/16 Miika Komu <mkomu@xxxxxxxxx <mailto:mkomu@xxxxxxxxx>>

    Hi Paola,

    On 10/16/2013 12:46 PM, Paola Venuso wrote:

        Hi Miika,

        I deleted the incorrect line with "hipconf" and changed the
        debug mode
        to "all". I'm sending two emails with the output of the debug
        the message is too big.

    What does "lsmod|grep xfrm" give you? It should be:
    xfrm_user              35921  1
    xfrm6_mode_beet        12658  7
    xfrm4_mode_beet        12611  7

        This is the output of the initiator

    I failed to see any 3ffe::xx/64 addresses in the log. Did you forget
    to invoke "hipconf daemon add map"?

    Here's an example (please do not copy paste blindly, you need to
    change the addresses and interface names):

       sudo ip addr add 3ffe::1/64 dev eth0 # add IPv6 addr for server

       sudo ip addr add 3ffe::2/64 dev eth0 # add IPv6 addr for client
       ping6 3ffe::2 # can you reach the server?
       sudo hipconf daemon rst all # reset hipd daemon state
       hipconf daemon add map 2001:15:e156:8a78:3226:dbaa:__f2ff:ed06
       ping6 2001:15:e156:8a78:3226:dbaa:__f2ff:ed06
       <wait for one minute>
    56 data bytes
    64 bytes from 2001:15:e156:8a78:3226:dbaa:__f2ff:ed06: icmp_seq=2
    ttl=64 time=29.8 ms
    64 bytes from 2001:15:e156:8a78:3226:dbaa:__f2ff:ed06: icmp_seq=3
    ttl=64 time=47.5 ms

    I'd like to see "hipconf daemon get ha all" output after this.

Other related posts: