Can't get ISATAP to connect from XP

Answered Question
Dec 8th, 2009
User Badges:

I'm just not sure what part of the config I am doing wrong or there is some bug i am running into.  I am running c3725-advipservicesk9-mz.124-15.T9.bin.


  The following is the config i have on the router.


interface Tunnel10
description ISATAP itnterface for windows and linux
no ip address
no ip redirects
ipv6 address FD39:26B1:DA1C:2::/64 eui-64
ipv6 enable
no ipv6 nd ra suppress
ipv6 ospf 1 area 0
tunnel source FastEthernet0/0
tunnel mode ipv6ip isatap


  This is the interface brief


ipv6gateway#sh ipv6 int brief
FastEthernet0/0            [up/up]
FastEthernet0/1            [up/up]
    FE80::C000:2EFF:FEF1:1
    FD39:26B1:DA1C:1::1
Tunnel0                    [up/up]
    FE80::C000:2EFF:FEF1:0
    unnumbered (Tunnel10)
Tunnel10                   [up/up]
    FE80::C000:2EFF:FEF1:0
    FD39:26B1:DA1C:2:C000:2EFF:FEF1:0



ipv6gateway#sh ipv6 route
IPv6 Routing Table - 5 entries
Codes: C - Connected, L - Local, S - Static, R - RIP, B - BGP
       U - Per-user Static route, M - MIPv6
       I1 - ISIS L1, I2 - ISIS L2, IA - ISIS interarea, IS - ISIS summary
       O - OSPF intra, OI - OSPF inter, OE1 - OSPF ext 1, OE2 - OSPF ext 2
       ON1 - OSPF NSSA ext 1, ON2 - OSPF NSSA ext 2
       D - EIGRP, EX - EIGRP external
C   FD39:26B1:DA1C:1::/64 [0/0]
     via ::, FastEthernet0/1
L   FD39:26B1:DA1C:1::1/128 [0/0]
     via ::, FastEthernet0/1
C   FD39:26B1:DA1C:2::/64 [0/0]
     via ::, Tunnel10
L   FD39:26B1:DA1C:2:C000:2EFF:FEF1:0/128 [0/0]
     via ::, Tunnel10
L   FF00::/8 [0/0]
     via ::, Null0



  In XP, I ran 'netsh int ipv6 isatap set router 10.156.68.40'.


Tunnel adapter Teredo Tunneling Pseudo-Interface:


        Connection-specific DNS Suffix  . :
        Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
        Physical Address. . . . . . . . . : FF-FF-FF-FF-FF-FF-FF-FF
        Dhcp Enabled. . . . . . . . . . . : No
        IP Address. . . . . . . . . . . . : fe80::ffff:ffff:fffd%5
        Default Gateway . . . . . . . . . :
        NetBIOS over Tcpip. . . . . . . . : Disabled


Tunnel adapter Automatic Tunneling Pseudo-Interface:


        Connection-specific DNS Suffix  . :
        Description . . . . . . . . . . . : Automatic Tunneling Pseudo-Interface


        Physical Address. . . . . . . . . : 0A-9C-35-54
        Dhcp Enabled. . . . . . . . . . . : No
        IP Address. . . . . . . . . . . . : fe80::5efe:10.156.53.84%2
        Default Gateway . . . . . . . . . :
        DNS Servers . . . . . . . . . . . : fec0:0:0:ffff::1%1
                                            fec0:0:0:ffff::2%1
                                            fec0:0:0:ffff::3%1
        NetBIOS over Tcpip. . . . . . . . : Disabled


C:\Documents and Settings\ggee>netsh interface ipv6 show route
Querying active state...


No entries were found.


  What part am I doing wrong?  Is there a better IOS I should be using?  What address should I use to ping6?


Thanks,

Greg

Correct Answer by Laurent Aubert about 7 years 5 months ago

Hi,


I'm also using VB ;-)


Here is what I have when my router is off:



Tunnel adapter Automatic Tunneling Pseudo-Interface:


        Connection-specific DNS Suffix  . :

        Description . . . . . . . . . . . : Automatic Tunneling Pseudo-Interface


        Physical Address. . . . . . . . . : AC-10-00-01

        Dhcp Enabled. . . . . . . . . . . : No

        IP Address. . . . . . . . . . . . : fe80::5efe:172.16.0.1%2

        Default Gateway . . . . . . . . . :

        DNS Servers . . . . . . . . . . . : fec0:0:0:ffff::1%3

                                            fec0:0:0:ffff::2%3

                                            fec0:0:0:ffff::3%3

        NetBIOS over Tcpip. . . . . . . . : Disabled


Once my router is ON:



C:\Documents and Settings\laaubert>netsh interface ipv6 isatap set router 172.16.0.254

Ok.


C:\Documents and Settings\laaubert>ipconfig /all

...


Tunnel adapter Automatic Tunneling Pseudo-Interface:


        Connection-specific DNS Suffix  . :

        Description . . . . . . . . . . . : Automatic Tunneling Pseudo-Interface


        Physical Address. . . . . . . . . : AC-10-00-01

        Dhcp Enabled. . . . . . . . . . . : No

        IP Address. . . . . . . . . . . . : 2011:1::5efe:172.16.0.1

        IP Address. . . . . . . . . . . . : fe80::5efe:172.16.0.1%2

        Default Gateway . . . . . . . . . : fe80::5efe:172.16.0.254%2

        DNS Servers . . . . . . . . . . . : fec0:0:0:ffff::1%3

                                            fec0:0:0:ffff::2%3

                                            fec0:0:0:ffff::3%3

        NetBIOS over Tcpip. . . . . . . . : Disabled


Here is my router configuration:



ipv6 unicast-routing

ipv6 cef

!


interface Tunnel0

description ISATAP

no ip address

no ip redirects

ipv6 address 2011:1::/64 eui-64

ipv6 enable

no ipv6 nd ra suppress

tunnel source Ethernet1/0

tunnel mode ipv6ip isatap


!

interface Ethernet1/0

description ISATAP GW

ip address 172.16.0.254 255.255.255.0

!


I used 12.2(33)SRE.


You can run debug ipv6 icmp and debug ipv6 packet to track the RA and RS:



*Dec 12 03:59:01.515: IPV6: source FE80::5EFE:AC10:1 (Tunnel0)

*Dec 12 03:59:01.515:       dest FF02::2

*Dec 12 03:59:01.515:       traffic class 0, flow 0x0, len 48+20, prot 58, hops 255, forward to ulp

*Dec 12 03:59:01.515: ICMPv6: Received R-Solicit, Src=FE80::5EFE:AC10:1, Dst=FF02::2

*Dec 12 03:59:01.524: IPV6: source FE80::5EFE:AC10:FE (local)

*Dec 12 03:59:01.524:       dest FE80::5EFE:AC10:1 (Tunnel0)

*Dec 12 03:59:01.524:       traffic class 224, flow 0x0, len 96+0, prot 58, hops 255, originating

*Dec 12 03:59:01.524: IPv6-Fwd: Sending on Tunnel0

*Dec 12 03:59:01.524: ICMPv6: Sent R-Advert, Src=FE80::5EFE:AC10:FE, Dst=FE80::5EFE:AC10:1


HTH


Laurent.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
GREGORY GEE Fri, 12/11/2009 - 07:05
User Badges:

I guess I should ask, has anyone done ISATAP from Windows XP?  How?


Thanks,

Greg

Laurent Aubert Fri, 12/11/2009 - 08:37
User Badges:
  • Cisco Employee,

Hi Greg,


Can you ping 10.156.68.40 from your station ?


Your tunnel configuration looks good.


I did the same configuration on my laptop (XR SP2) and it's working fine.


HTH


Laurent.

GREGORY GEE Fri, 12/11/2009 - 09:37
User Badges:

Yes, I have no problem doing ping and telnet to the router.  Out of curiosity,
what router model and IOS version are you using?


I am trying on:


Cisco 3725

c3725-advipservicesk9-mz.124-15.T9.bin


Now to be specific, My XP SP3 is running in Virtual box while I test this setup.  Maybe SP3 has issues.


Thanks,

Greg

GREGORY GEE Fri, 12/11/2009 - 11:40
User Badges:

Related to above, how can I tell if it works?  How do I test it?


Greg

Correct Answer
Laurent Aubert Fri, 12/11/2009 - 20:01
User Badges:
  • Cisco Employee,

Hi,


I'm also using VB ;-)


Here is what I have when my router is off:



Tunnel adapter Automatic Tunneling Pseudo-Interface:


        Connection-specific DNS Suffix  . :

        Description . . . . . . . . . . . : Automatic Tunneling Pseudo-Interface


        Physical Address. . . . . . . . . : AC-10-00-01

        Dhcp Enabled. . . . . . . . . . . : No

        IP Address. . . . . . . . . . . . : fe80::5efe:172.16.0.1%2

        Default Gateway . . . . . . . . . :

        DNS Servers . . . . . . . . . . . : fec0:0:0:ffff::1%3

                                            fec0:0:0:ffff::2%3

                                            fec0:0:0:ffff::3%3

        NetBIOS over Tcpip. . . . . . . . : Disabled


Once my router is ON:



C:\Documents and Settings\laaubert>netsh interface ipv6 isatap set router 172.16.0.254

Ok.


C:\Documents and Settings\laaubert>ipconfig /all

...


Tunnel adapter Automatic Tunneling Pseudo-Interface:


        Connection-specific DNS Suffix  . :

        Description . . . . . . . . . . . : Automatic Tunneling Pseudo-Interface


        Physical Address. . . . . . . . . : AC-10-00-01

        Dhcp Enabled. . . . . . . . . . . : No

        IP Address. . . . . . . . . . . . : 2011:1::5efe:172.16.0.1

        IP Address. . . . . . . . . . . . : fe80::5efe:172.16.0.1%2

        Default Gateway . . . . . . . . . : fe80::5efe:172.16.0.254%2

        DNS Servers . . . . . . . . . . . : fec0:0:0:ffff::1%3

                                            fec0:0:0:ffff::2%3

                                            fec0:0:0:ffff::3%3

        NetBIOS over Tcpip. . . . . . . . : Disabled


Here is my router configuration:



ipv6 unicast-routing

ipv6 cef

!


interface Tunnel0

description ISATAP

no ip address

no ip redirects

ipv6 address 2011:1::/64 eui-64

ipv6 enable

no ipv6 nd ra suppress

tunnel source Ethernet1/0

tunnel mode ipv6ip isatap


!

interface Ethernet1/0

description ISATAP GW

ip address 172.16.0.254 255.255.255.0

!


I used 12.2(33)SRE.


You can run debug ipv6 icmp and debug ipv6 packet to track the RA and RS:



*Dec 12 03:59:01.515: IPV6: source FE80::5EFE:AC10:1 (Tunnel0)

*Dec 12 03:59:01.515:       dest FF02::2

*Dec 12 03:59:01.515:       traffic class 0, flow 0x0, len 48+20, prot 58, hops 255, forward to ulp

*Dec 12 03:59:01.515: ICMPv6: Received R-Solicit, Src=FE80::5EFE:AC10:1, Dst=FF02::2

*Dec 12 03:59:01.524: IPV6: source FE80::5EFE:AC10:FE (local)

*Dec 12 03:59:01.524:       dest FE80::5EFE:AC10:1 (Tunnel0)

*Dec 12 03:59:01.524:       traffic class 224, flow 0x0, len 96+0, prot 58, hops 255, originating

*Dec 12 03:59:01.524: IPv6-Fwd: Sending on Tunnel0

*Dec 12 03:59:01.524: ICMPv6: Sent R-Advert, Src=FE80::5EFE:AC10:FE, Dst=FE80::5EFE:AC10:1


HTH


Laurent.

GREGORY GEE Fri, 12/18/2009 - 09:35
User Badges:

Thanks.  Moving from a 3725 running c3725-advipservicesk9-mz.124-15.T9.bin to a 7200 running c7200-adventerprisek9-mz.122-33.SRC.bin made it all work.


Thanks,

Greg

Actions

This Discussion