Cannot make Jool v3.5.8 SIIT DC work

fkerem commented 3 years ago

Hi,

I have a testbed consisting of IPv4 and IPv6 enabled devices. I test SIIT DC with two devices. I configure the client like this:

root@node-a8-97:~# sysctl -w net.ipv4.conf.all.forwarding=1
root@node-a8-97:~# sysctl -w net.ipv6.conf.all.forwarding=1
root@node-a8-97:~# modprobe jool_siit pool6=64:ff9b::/96
root@node-a8-97:~# jool_siit --eamt --add 192.0.2.1 2001:0660:3207:0400::7a

where 2001:0660:3207:0400::7a is server's IPv6 address.

However, I'm not able to get a ping response from 192.0.2.1 or 2001:0660:3207:0400::7a. What do you think can be wrong? I really appreciate your help.

ydahhrk commented 3 years ago

Assuming this is what you have ("Translator" is node-a8-97):

+-----------+
| IPv4 node |
+-----------+
     | 203.0.113.4
     |
     | 203.0.113.1
+------------+
| Translator |
+------------+
     | 2001:0660:3207:0400::1
     |
     | 2001:0660:3207:0400::7a
+-----------+
| IPv6 node |
+-----------+

Is your routing configured properly?

"IPv4 node" needs to know it can reach 192.0.2.1 through the translator:

root@ipv4-node:~# ip route add 192.0.2.1 via 203.0.113.1

And "IPv6 node" needs to know it can reach 64:ff9b through the translator:

root@ipv6-node:~# ip route add 64:ff9b::/96 via 2001:0660:3207:0400::1

If you're in the IPv4 node, the ping should be

root@ipv4-node:~$ ping 192.0.2.1

If you're in the IPv6 node, the ping should be

root@ipv6-node:~$ ping6 64:ff9b::203.0.113.4

fkerem commented 3 years ago

Dear @ydahhrk ,

Thank you very much. The documentation was not really clear to me and your explanation made my day! It's working now. :)

Best,

NICMx / Jool

Cannot make Jool v3.5.8 SIIT DC work #361