30 Dec
2021
30 Dec
'21
10:07 a.m.
I am attempting to get connected from VyOS, and I seem to have several
pieces in place, but I am not able to ping any hosts across any IPIP
tunnels.
I can ping amprgw.ucsd.edu across the public Internet. I have configured a
`tun44` interface. I have ampr-ripd running, and it receives updates every
five minutes. The resulting routes appear in my routing table, and if I do
`ip route get` on 44-net hosts, it shows them routing through my `tun44`
interface. But if I try to ping 44-net hosts or access them at all, I get
timeouts.
What might I be missing?
My gateway public IP is 155.138.247.113. My allocated subnet is
44.31.64.1/27.
I created a firewall group named ALLOW-ALL with a default rule set to
'accept' just to rule that out for troubleshooting.
Tunnel interface configuration:
tunnel tun44 {
address 44.31.64.1/32
description AMPRNET
disable-link-detect
encapsulation ipip
firewall {
in {
name ALLOW-ALL
}
local {
name ALLOW-ALL
}
out {
name ALLOW-ALL
}
}
mtu 1450
multicast enable
remote 0.0.0.0
source-address 155.138.247.113
}
ampr-ripd startup output:
root@vyos:/home/vyos# ampr-ripd -svd -i tun44
Using metric 0 for routes.
Using TCP window 840 for routes.
Using routing table 'main' (254).
Loaded 738 entries from /var/lib/ampr-ripd/encap.txt
Max list size: 1000 entries
Detected tunnel interface address: 44.31.64.1
Interface detected: lo, IP: 127.0.0.1
Interface detected: eth0, IP: 155.138.247.113
Interface detected: tunl0, IP: 0.0.0.0
Interface detected: tun44, IP: 44.31.64.1
Assigned tunnel interface index: 5
Local IPs:
127.0.0.1
155.138.247.113
44.31.64.1
Using gateway 155.138.246.1 for direct 44net endpoints via interface eth0.
Setting routes (738).
Creating multicast RIP UDP listening socket.
Setting up multicast interface.
Waiting for RIPv2 broadcasts...
Broadcasts eventually start appearing.
Before I run ampr-ripd, here's the route I get for 44.0.0.1 — over the
public Internet:
44.0.0.1 via 155.138.246.1 dev eth0 src 155.138.247.113 uid 0
And I can ping 44.0.0.1 in this state.
After I run ampr-ripd, here's the route to 44.0.0.1 — over the tunnel:
44.0.0.1 via 169.228.34.84 dev tun44 src 44.31.64.1 uid 1003
And I can no longer ping 44.0.0.1 — it just times out:
vyos@vyos:~$ ping 44.0.0.1 interface tun44
PING 44.0.0.1 (44.0.0.1) from 44.31.64.1 tun44: 56(84)
bytes of data.
^C
--- 44.0.0.1 ping statistics ---
4 packets transmitted, 0 received, 100% packet loss, time 88ms
This is all on VyOS 1.3 equuleus (Debian buster), hosted at Vultr.
Any ideas, or other troubleshooting suggestions?
Thanks very much!