<div dir="ltr"><div>It sounds like when the tunnel comes up, all outbound traffic tries to go over the tunnel interface instead of the ADSL interface, which causes the PPP session to drop, and re-establish, causing your IP address to change.<br><br></div>Ben<br><div><br><div class="gmail_quote"><div dir="ltr">On Tue, Feb 2, 2016 at 1:09 PM Goran Aleksic <<a href="mailto:goran.aleksic@gmail.com">goran.aleksic@gmail.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div>Hi Mark and others<br><br>thanks for your helpful comments and recommendations.<br><br></div><div>I'll try to explain better. The issue here is that my public IP changes as soon as I attempt to establish the 6in4 tunnel.<br></div><div>The worry is that my WAN IP change is triggered by the tunnel somehow. Before, my public IP wouldn't change for days.<br><br>If I get the dynamic IP update to work, I'm not addressing the actual cause of the problem, but soothing the symptoms.<br></div><div><br>In other words, being able to automatically update my public IP, it's just quicker reaction to the public IP re-assignment. Problem is to understand as to why it's happening at all?<br></div><div><br></div><div>Yes, it would be nice to be able to dynamically update the tunnel settings on HE end, but for proof of concept, I can manually change my public IP in both configs.<br></div><div>Also, if I react to IP change quicker, maybe Optus systems will start racing with it (ping-pong) and may cause further problems...<br></div><div><br></div><div>Rebooting the modem/router, for instance, would trigger the public IP change.<br></div><div>What else might?<br><br></div><div>Cheers,<br><br></div><div>Goran<br><br></div><div><br></div><div><br></div><div><div><div class="gmail_extra"><br><div class="gmail_quote">On 2 February 2016 at 11:57, Mark Andrews <span dir="ltr"><<a href="mailto:marka@isc.org" target="_blank">marka@isc.org</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><br>
And <a href="https://forums.he.net/index.php?topic=1994.0" rel="noreferrer" target="_blank">https://forums.he.net/index.php?topic=1994.0</a><br>
<div><div><br>
Mark Andrews writes:<br>
><br>
> <a href="https://forums.he.net/index.php?topic=3153.0" rel="noreferrer" target="_blank">https://forums.he.net/index.php?topic=3153.0</a><br>
><br>
> In message <CAJ0TvN+JKsqML4_=<a href="mailto:bQD%2BHBR2GngBkse8kbP_sSAEDZSPG6WXpQ@mail.gmail.com" target="_blank">bQD+HBR2GngBkse8kbP_sSAEDZSPG6WXpQ@mail.gmail.com</a>>, Goran Aleksic writes:<br>
> > --001a1140f54ed8af8f052abe277f<br>
> > Content-Type: text/plain; charset=UTF-8<br>
> ><br>
> > Hi Mark,<br>
> ><br>
> > thanks for sharing that. If you could share relevant config as well, that<br>
> > would be great.<br>
> ><br>
> > Cheers,<br>
> ><br>
> > Goran<br>
> ><br>
> ><br>
> > On 2 February 2016 at 09:57, Mark Andrews <<a href="mailto:marka@isc.org" target="_blank">marka@isc.org</a>> wrote:<br>
> ><br>
> > ><br>
> > > In message <CAFDgZgVft=</div></div></blockquote></div></div></div></div></div><div dir="ltr"><div><div><div class="gmail_extra"><div class="gmail_quote"><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div><div><br>
> > > <a href="mailto:pJTHhLzEn%2BAhQQFbUgEjup-5CHK4zqxrKysTyz0w@mail.gmail.com" target="_blank">pJTHhLzEn+AhQQFbUgEjup-5CHK4zqxrKysTyz0w@mail.gmail.com</a>>, Tom Storey<br>
> > > writes:<br>
> > > > Is the PPP session dropping by any chance? I think I had something<br>
> > > > like this a year or two ago and it turned out to be a buggy JunOS<br>
> > > > version, I had to roll back to a previous version.<br>
> > > ><br>
> > > > I have successfully brought up a <a href="http://he.net" rel="noreferrer" target="_blank">he.net</a> tunnel with an SRX110, so its<br>
> > > > definitely possible and there should be no unexpected behaviour when<br>
> > > > everything is running fine.<br>
> > ><br>
> > > Additionally HE is setup to authenicate and reconfigure the tunnel<br>
> > > using the observed IPv4 address so this will work through NAT from<br>
> > > a DMZ host so you don't need to know know your public IPv4 address.<br>
> > ><br>
> > > I've configured HE tunnels to use RFC 1918 address locally and as<br>
> > > long as the packets goes through the NAT both ways it works.<br>
> > ><br>
> > > Obviously it is better if you only reconfigure on a renumber event<br>
> > > but you could just re-authenticate every 15 minutes from cron.<br>
> > ><br>
> > > Mark<br>
> > ><br>
> > > > On 1 February 2016 at 06:05, Goran Aleksic <<a href="mailto:goran.aleksic@gmail.com" target="_blank">goran.aleksic@gmail.com</a>><br>
> > > > wrote:<br>
> > > > > HI all,<br>
> > > > ><br>
> > > > > I've got Optus ADSL and dynamic public IP.<br>
> > > > > Needed 6-in-4 tunnel (IPv6 encapsulated into IPv4 tunnel), tried using<br>
> > > > > Hurricane Electric IPv6 provider, as I saw positive reviews.<br>
> > > > > I got Juniper SRX 110 modem and have implemented configuration as<br>
> > > > stated on<br>
> > > > ><br>
> > > ><br>
> > > <a href="http://forums.juniper.net/t5/SRX-Services-Gateway/HE-IPv6-tunnel-with-flow" rel="noreferrer" target="_blank">http://forums.juniper.net/t5/SRX-Services-Gateway/HE-IPv6-tunnel-with-flow</a><br>
> > > > -based-IPv6-in-10-4/td-p/69338/highlight/true/page/3<br>
> > > > ><br>
> > > > > Issue is my public IP (on at-1/0/0.0 interface) keeps changing every<br>
> > > > time<br>
> > > > > I attempt the tunnel.<br>
> > > > > This is a twofold problem:<br>
> > > > > 1. on Hurricane Electric page, you need to specify one endpoint of the<br>
> > > > > tunnel, i.e. your public IP<br>
> > > > > 2. In configuration of ip-0/0/0.0 interface (tunnel interface) on<br>
> > > > Juniper<br>
> > > > > SRX, you need to specify your tunnel source IP (a public IP). There<br>
> > > > doesn't<br>
> > > > > seem to be a trick like with Cisco, to use ip unnumbered and imply IP<br>
> > > > > address from your WAN interface...<br>
> > > > ><br>
> > > > > Why would an attempt to establish a IPv4 tunnel to another host trigger<br>
> > > > my<br>
> > > > > public IP to be changed?<br>
> > > > ><br>
> > > > > I'm wondering if anyone has experienced the same or similar issue?<br>
> > > > ><br>
> > > > > Thanks,<br>
> > > > ><br>
> > > > > Alex<br>
> > > > ><br>
> > > > > _______________________________________________<br>
> > > > > AusNOG mailing list<br>
> > > > > <a href="mailto:AusNOG@lists.ausnog.net" target="_blank">AusNOG@lists.ausnog.net</a><br>
> > > > > <a href="http://lists.ausnog.net/mailman/listinfo/ausnog" rel="noreferrer" target="_blank">http://lists.ausnog.net/mailman/listinfo/ausnog</a><br>
> > > > ><br>
> > > > _______________________________________________<br>
> > > > AusNOG mailing list<br>
> > > > <a href="mailto:AusNOG@lists.ausnog.net" target="_blank">AusNOG@lists.ausnog.net</a><br>
> > > > <a href="http://lists.ausnog.net/mailman/listinfo/ausnog" rel="noreferrer" target="_blank">http://lists.ausnog.net/mailman/listinfo/ausnog</a><br>
> > ><br>
> > > --<br>
> > > Mark Andrews, ISC<br>
> > > 1 Seymour St., Dundas Valley, NSW 2117, Australia<br>
> > > PHONE: <a href="tel:%2B61%202%209871%204742" value="+61298714742" target="_blank">+61 2 9871 4742</a> INTERNET: <a href="mailto:marka@isc.org" target="_blank">marka@isc.org</a><br>
> > ><br>
> ><br></div></div></blockquote></div></div></div></div></div><div dir="ltr"><div><div><div class="gmail_extra"><div class="gmail_quote"><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div><div>
> > --001a1140f54ed8af8f052abe277f<br>
> > Content-Type: text/html; charset=UTF-8<br>
> > Content-Transfer-Encoding: quoted-printable<br>
> ><br>
> > <div dir=3D"ltr"><div><div><div><div><br></div>Hi Mark,<br><br></div>thanks=<br>
> > for sharing that. If you could share relevant config as well, that would b=<br>
> > e great.<br><br></div>Cheers,<br><br></div>Goran<br><br></div><div class=3D=<br>
> > "gmail_extra"><br><div class=3D"gmail_quote">On 2 February 2016 at 09:57, M=<br>
> > ark Andrews <span dir=3D"ltr"><<a href=3D"mailto:<a href="mailto:marka@isc.org" target="_blank">marka@isc.org</a>" target=<br>
> > =3D"_blank"><a href="mailto:marka@isc.org" target="_blank">marka@isc.org</a></a>></span> wrote:<br><blockquote class=3D"gma=<br>
> > il_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-lef=<br>
> > t:1ex"><span class=3D""><br><br>
> > In message <CAFDgZgVft=3D<a href=3D"mailto:<a href="mailto:pJTHhLzEn%252BAhQQFbUgEjup-5CHK" target="_blank">pJTHhLzEn%2BAhQQFbUgEjup-5CHK</a>=<br>
> > <a href="mailto:4zqxrKysTyz0w@mail.gmail.com" target="_blank">4zqxrKysTyz0w@mail.gmail.com</a>">pJTHhLzEn+AhQQFbUgEjup-5CHK4zqxrKysTyz0w@mail=<br>
> > .<a href="http://gmail.com" rel="noreferrer" target="_blank">gmail.com</a></a>>, Tom Storey writes:<br><br>
> > > Is the PPP session dropping by any chance? I think I had something<br><br>
> > > like this a year or two ago and it turned out to be a buggy JunOS<br><br>
> > > version, I had to roll back to a previous version.<br><br>
> > ><br><br>
> > > I have successfully brought up a <a href=3D"<a href="http://he.net" rel="noreferrer" target="_blank">http://he.net</a>" rel=3D"nore=<br>
> > ferrer" target=3D"_blank"><a href="http://he.net" rel="noreferrer" target="_blank">he.net</a></a> tunnel with an SRX110, so its<br><br>
> > > definitely possible and there should be no unexpected behaviour when<b=<br>
> > r><br>
> > > everything is running fine.<br><br>
> > <br><br>
> > </span>Additionally HE is setup to authenicate and reconfigure the tunnel<b=<br>
> > r><br>
> > using the observed IPv4 address so this will work through NAT from<br><br>
> > a DMZ host so you don't need to know know your public IPv4 address.<br><br>
> > <br><br>
> > I've configured HE tunnels to use RFC 1918 address locally and as<br><br>
> > long as the packets goes through the NAT both ways it works.<br><br>
> > <br><br>
> > Obviously it is better if you only reconfigure on a renumber event<br><br>
> > but you could just re-authenticate every 15 minutes from cron.<br><br>
> > <br><br>
> > Mark<br><br>
> > <div class=3D"HOEnZb"><div class=3D"h5"><br><br>
> > > On 1 February 2016 at 06:05, Goran Aleksic <<a href=3D"mailto:<a href="mailto:goran" target="_blank">goran</a>=<br>
> > .<a href="mailto:aleksic@gmail.com" target="_blank">aleksic@gmail.com</a>"><a href="mailto:goran.aleksic@gmail.com" target="_blank">goran.aleksic@gmail.com</a></a>><br><br>
> > > wrote:<br><br>
> > > > HI all,<br><br>
> > > ><br><br>
> > > > I've got Optus ADSL and dynamic public IP.<br><br>
> > > > Needed 6-in-4 tunnel (IPv6 encapsulated into IPv4 tunnel), tried =<br>
> > using<br><br>
> > > > Hurricane Electric IPv6 provider, as I saw positive reviews.<br><br>
> > > > I got Juniper SRX 110 modem and have implemented configuration as=<br>
> > <br><br>
> > > stated on<br><br>
> > > ><br><br>
> > > <a href=3D"<a href="http://forums.juniper.net/t5/SRX-Services-Gateway/HE-IPv6-t=" rel="noreferrer" target="_blank">http://forums.juniper.net/t5/SRX-Services-Gateway/HE-IPv6-t=</a><br>
> > unnel-with-flow" rel=3D"noreferrer" target=3D"_blank"><a href="http://forums.juniper" rel="noreferrer" target="_blank">http://forums.juniper</a>=<br>
> > .net/t5/SRX-Services-Gateway/HE-IPv6-tunnel-with-flow</a><br><br>
> > > -based-IPv6-in-10-4/td-p/69338/highlight/true/page/3<br><br>
> > > ><br><br>
> > > > Issue is=C2=A0 my public IP (on at-1/0/0.0 interface) keeps chang=<br>
> > ing every<br><br>
> > > time<br><br>
> > > > I attempt the tunnel.<br><br>
> > > > This is a twofold problem:<br><br>
> > > > 1. on Hurricane Electric page, you need to specify one endpoint o=<br>
> > f the<br><br>
> > > > tunnel, i.e. your public IP<br><br>
> > > > 2. In configuration of ip-0/0/0.0 interface (tunnel interface) on=<br>
> > <br><br>
> > > Juniper<br><br>
> > > > SRX, you need to specify your tunnel source IP (a public IP). The=<br>
> > re<br><br>
> > > doesn't<br><br>
> > > > seem to be a trick like with Cisco, to use ip unnumbered and impl=<br>
> > y IP<br><br>
> > > > address from your WAN interface...<br><br>
> > > ><br><br>
> > > > Why would an attempt to establish a IPv4 tunnel to another host t=<br>
> > rigger<br><br>
> > > my<br><br>
> > > > public IP to be changed?<br><br>
> > > ><br><br>
> > > > I'm wondering if anyone has experienced the same or similar i=<br>
> > ssue?<br><br>
> > > ><br><br>
> > > > Thanks,<br><br>
> > > ><br><br>
> > > > Alex<br><br>
> > > ><br><br>
> > > > _______________________________________________<br><br>
> > > > AusNOG mailing list<br><br>
> > > > <a href=3D"mailto:<a href="mailto:AusNOG@lists.ausnog.net" target="_blank">AusNOG@lists.ausnog.net</a>"><a href="mailto:AusNOG@lists.ausnog.ne" target="_blank">AusNOG@lists.ausnog.ne</a>=<br>
> > t</a><br><br>
> > > > <a href=3D"<a href="http://lists.ausnog.net/mailman/listinfo/ausnog" rel="noreferrer" target="_blank">http://lists.ausnog.net/mailman/listinfo/ausnog</a>" rel=<br>
> > =3D"noreferrer" target=3D"_blank"><a href="http://lists.ausnog.net/mailman/listinfo/=" rel="noreferrer" target="_blank">http://lists.ausnog.net/mailman/listinfo/=</a><br>
> > ausnog</a><br><br>
> > > ><br><br>
> > > _______________________________________________<br><br>
> > > AusNOG mailing list<br><br>
> > > <a href=3D"mailto:<a href="mailto:AusNOG@lists.ausnog.net" target="_blank">AusNOG@lists.ausnog.net</a>"><a href="mailto:AusNOG@lists.ausnog.net" target="_blank">AusNOG@lists.ausnog.net</a></a>=<br>
> > <br><br>
> > > <a href=3D"<a href="http://lists.ausnog.net/mailman/listinfo/ausnog" rel="noreferrer" target="_blank">http://lists.ausnog.net/mailman/listinfo/ausnog</a>" rel=3D"nor=<br>
> > eferrer" target=3D"_blank"><a href="http://lists.ausnog.net/mailman/listinfo/ausnog" rel="noreferrer" target="_blank">http://lists.ausnog.net/mailman/listinfo/ausnog</a><=<br>
> > /a><br><br>
> > <br><br>
> > </div></div><span class=3D"HOEnZb"><font color=3D"#888888">--<br><br>
> > Mark Andrews, ISC<br><br>
> > 1 Seymour St., Dundas Valley, NSW 2117, Australia<br><br>
> > PHONE: <a href=3D"tel:%2B61%202%209871%204742" value=3D"+61298714742">+61 2=<br>
> > 9871 4742</a>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=<br>
> > =A0INTERNET: <a href=3D"mailto:<a href="mailto:marka@isc.org" target="_blank">marka@isc.org</a>"><a href="mailto:marka@isc.org" target="_blank">marka@isc.org</a></a><br><br>
> > </font></span></blockquote></div><br></div><br>
> ><br>
> > --001a1140f54ed8af8f052abe277f--</div></div></blockquote></div></div></div></div></div><div dir="ltr"><div><div><div class="gmail_extra"><div class="gmail_quote"><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div><div><br>
> --<br>
> Mark Andrews, ISC<br>
> 1 Seymour St., Dundas Valley, NSW 2117, Australia<br>
> PHONE: <a href="tel:%2B61%202%209871%204742" value="+61298714742" target="_blank">+61 2 9871 4742</a> INTERNET: <a href="mailto:marka@isc.org" target="_blank">marka@isc.org</a><br>
--<br>
Mark Andrews, ISC<br>
1 Seymour St., Dundas Valley, NSW 2117, Australia<br>
PHONE: <a href="tel:%2B61%202%209871%204742" value="+61298714742" target="_blank">+61 2 9871 4742</a> INTERNET: <a href="mailto:marka@isc.org" target="_blank">marka@isc.org</a><br>
</div></div></blockquote></div></div></div></div></div>
_______________________________________________<br>
AusNOG mailing list<br>
<a href="mailto:AusNOG@lists.ausnog.net" target="_blank">AusNOG@lists.ausnog.net</a><br>
<a href="http://lists.ausnog.net/mailman/listinfo/ausnog" rel="noreferrer" target="_blank">http://lists.ausnog.net/mailman/listinfo/ausnog</a><br>
</blockquote></div></div></div>