<div dir="ltr"><div>Hi Mark and others<br><br>thanks for your helpful comments and recommendations.<br><br></div><div>I'll try to explain better. The issue here is that my public IP changes as soon as I attempt to establish the 6in4 tunnel.<br></div><div>The worry is that my WAN IP change is triggered by the tunnel somehow. Before, my public IP wouldn't change for days.<br><br>If I get the dynamic IP update to work, I'm not addressing the actual cause of the problem, but soothing the symptoms.<br></div><div><br>In other words, being able to automatically update my public IP, it's just quicker reaction to the public IP re-assignment. Problem is to understand as to why it's happening at all?<br></div><div><br></div><div>Yes, it would be nice to be able to dynamically update the tunnel settings on HE end, but for proof of concept, I can manually change my public IP in both configs.<br></div><div>Also, if I react to IP change quicker, maybe Optus systems will start racing with it (ping-pong) and may cause further problems...<br></div><div><br></div><div>Rebooting the modem/router, for instance, would trigger the public IP change.<br></div><div>What else might?<br><br></div><div>Cheers,<br><br></div><div>Goran<br><br></div><div><br></div><div><br></div><div><div><div class="gmail_extra"><br><div class="gmail_quote">On 2 February 2016 at 11:57, Mark Andrews <span dir="ltr"><<a href="mailto:marka@isc.org" target="_blank">marka@isc.org</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><br>
And <a href="https://forums.he.net/index.php?topic=1994.0" rel="noreferrer" target="_blank">https://forums.he.net/index.php?topic=1994.0</a><br>
<div class=""><div class="h5"><br>
Mark Andrews writes:<br>
><br>
> <a href="https://forums.he.net/index.php?topic=3153.0" rel="noreferrer" target="_blank">https://forums.he.net/index.php?topic=3153.0</a><br>
><br>
> In message <CAJ0TvN+JKsqML4_=<a href="mailto:bQD%2BHBR2GngBkse8kbP_sSAEDZSPG6WXpQ@mail.gmail.com">bQD+HBR2GngBkse8kbP_sSAEDZSPG6WXpQ@mail.gmail.com</a>>, Goran Aleksic writes:<br>
> > --001a1140f54ed8af8f052abe277f<br>
> > Content-Type: text/plain; charset=UTF-8<br>
> ><br>
> > Hi Mark,<br>
> ><br>
> > thanks for sharing that. If you could share relevant config as well, that<br>
> > would be great.<br>
> ><br>
> > Cheers,<br>
> ><br>
> > Goran<br>
> ><br>
> ><br>
> > On 2 February 2016 at 09:57, Mark Andrews <<a href="mailto:marka@isc.org">marka@isc.org</a>> wrote:<br>
> ><br>
> > ><br>
> > > In message <CAFDgZgVft=<br>
> > > <a href="mailto:pJTHhLzEn%2BAhQQFbUgEjup-5CHK4zqxrKysTyz0w@mail.gmail.com">pJTHhLzEn+AhQQFbUgEjup-5CHK4zqxrKysTyz0w@mail.gmail.com</a>>, Tom Storey<br>
> > > writes:<br>
> > > > Is the PPP session dropping by any chance? I think I had something<br>
> > > > like this a year or two ago and it turned out to be a buggy JunOS<br>
> > > > version, I had to roll back to a previous version.<br>
> > > ><br>
> > > > I have successfully brought up a <a href="http://he.net" rel="noreferrer" target="_blank">he.net</a> tunnel with an SRX110, so its<br>
> > > > definitely possible and there should be no unexpected behaviour when<br>
> > > > everything is running fine.<br>
> > ><br>
> > > Additionally HE is setup to authenicate and reconfigure the tunnel<br>
> > > using the observed IPv4 address so this will work through NAT from<br>
> > > a DMZ host so you don't need to know know your public IPv4 address.<br>
> > ><br>
> > > I've configured HE tunnels to use RFC 1918 address locally and as<br>
> > > long as the packets goes through the NAT both ways it works.<br>
> > ><br>
> > > Obviously it is better if you only reconfigure on a renumber event<br>
> > > but you could just re-authenticate every 15 minutes from cron.<br>
> > ><br>
> > > Mark<br>
> > ><br>
> > > > On 1 February 2016 at 06:05, Goran Aleksic <<a href="mailto:goran.aleksic@gmail.com">goran.aleksic@gmail.com</a>><br>
> > > > wrote:<br>
> > > > > HI all,<br>
> > > > ><br>
> > > > > I've got Optus ADSL and dynamic public IP.<br>
> > > > > Needed 6-in-4 tunnel (IPv6 encapsulated into IPv4 tunnel), tried using<br>
> > > > > Hurricane Electric IPv6 provider, as I saw positive reviews.<br>
> > > > > I got Juniper SRX 110 modem and have implemented configuration as<br>
> > > > stated on<br>
> > > > ><br>
> > > ><br>
> > > <a href="http://forums.juniper.net/t5/SRX-Services-Gateway/HE-IPv6-tunnel-with-flow" rel="noreferrer" target="_blank">http://forums.juniper.net/t5/SRX-Services-Gateway/HE-IPv6-tunnel-with-flow</a><br>
> > > > -based-IPv6-in-10-4/td-p/69338/highlight/true/page/3<br>
> > > > ><br>
> > > > > Issue is my public IP (on at-1/0/0.0 interface) keeps changing every<br>
> > > > time<br>
> > > > > I attempt the tunnel.<br>
> > > > > This is a twofold problem:<br>
> > > > > 1. on Hurricane Electric page, you need to specify one endpoint of the<br>
> > > > > tunnel, i.e. your public IP<br>
> > > > > 2. In configuration of ip-0/0/0.0 interface (tunnel interface) on<br>
> > > > Juniper<br>
> > > > > SRX, you need to specify your tunnel source IP (a public IP). There<br>
> > > > doesn't<br>
> > > > > seem to be a trick like with Cisco, to use ip unnumbered and imply IP<br>
> > > > > address from your WAN interface...<br>
> > > > ><br>
> > > > > Why would an attempt to establish a IPv4 tunnel to another host trigger<br>
> > > > my<br>
> > > > > public IP to be changed?<br>
> > > > ><br>
> > > > > I'm wondering if anyone has experienced the same or similar issue?<br>
> > > > ><br>
> > > > > Thanks,<br>
> > > > ><br>
> > > > > Alex<br>
> > > > ><br>
> > > > > _______________________________________________<br>
> > > > > AusNOG mailing list<br>
> > > > > <a href="mailto:AusNOG@lists.ausnog.net">AusNOG@lists.ausnog.net</a><br>
> > > > > <a href="http://lists.ausnog.net/mailman/listinfo/ausnog" rel="noreferrer" target="_blank">http://lists.ausnog.net/mailman/listinfo/ausnog</a><br>
> > > > ><br>
> > > > _______________________________________________<br>
> > > > AusNOG mailing list<br>
> > > > <a href="mailto:AusNOG@lists.ausnog.net">AusNOG@lists.ausnog.net</a><br>
> > > > <a href="http://lists.ausnog.net/mailman/listinfo/ausnog" rel="noreferrer" target="_blank">http://lists.ausnog.net/mailman/listinfo/ausnog</a><br>
> > ><br>
> > > --<br>
> > > Mark Andrews, ISC<br>
> > > 1 Seymour St., Dundas Valley, NSW 2117, Australia<br>
> > > PHONE: <a href="tel:%2B61%202%209871%204742" value="+61298714742">+61 2 9871 4742</a> INTERNET: <a href="mailto:marka@isc.org">marka@isc.org</a><br>
> > ><br>
> ><br>
> > --001a1140f54ed8af8f052abe277f<br>
> > Content-Type: text/html; charset=UTF-8<br>
> > Content-Transfer-Encoding: quoted-printable<br>
> ><br>
> > <div dir=3D"ltr"><div><div><div><div><br></div>Hi Mark,<br><br></div>thanks=<br>
> > for sharing that. If you could share relevant config as well, that would b=<br>
> > e great.<br><br></div>Cheers,<br><br></div>Goran<br><br></div><div class=3D=<br>
> > "gmail_extra"><br><div class=3D"gmail_quote">On 2 February 2016 at 09:57, M=<br>
> > ark Andrews <span dir=3D"ltr"><<a href=3D"mailto:<a href="mailto:marka@isc.org">marka@isc.org</a>" target=<br>
> > =3D"_blank"><a href="mailto:marka@isc.org">marka@isc.org</a></a>></span> wrote:<br><blockquote class=3D"gma=<br>
> > il_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-lef=<br>
> > t:1ex"><span class=3D""><br><br>
> > In message <CAFDgZgVft=3D<a href=3D"mailto:<a href="mailto:pJTHhLzEn%252BAhQQFbUgEjup-5CHK">pJTHhLzEn%2BAhQQFbUgEjup-5CHK</a>=<br>
> > <a href="mailto:4zqxrKysTyz0w@mail.gmail.com">4zqxrKysTyz0w@mail.gmail.com</a>">pJTHhLzEn+AhQQFbUgEjup-5CHK4zqxrKysTyz0w@mail=<br>
> > .<a href="http://gmail.com" rel="noreferrer" target="_blank">gmail.com</a></a>>, Tom Storey writes:<br><br>
> > > Is the PPP session dropping by any chance? I think I had something<br><br>
> > > like this a year or two ago and it turned out to be a buggy JunOS<br><br>
> > > version, I had to roll back to a previous version.<br><br>
> > ><br><br>
> > > I have successfully brought up a <a href=3D"<a href="http://he.net" rel="noreferrer" target="_blank">http://he.net</a>" rel=3D"nore=<br>
> > ferrer" target=3D"_blank"><a href="http://he.net" rel="noreferrer" target="_blank">he.net</a></a> tunnel with an SRX110, so its<br><br>
> > > definitely possible and there should be no unexpected behaviour when<b=<br>
> > r><br>
> > > everything is running fine.<br><br>
> > <br><br>
> > </span>Additionally HE is setup to authenicate and reconfigure the tunnel<b=<br>
> > r><br>
> > using the observed IPv4 address so this will work through NAT from<br><br>
> > a DMZ host so you don't need to know know your public IPv4 address.<br><br>
> > <br><br>
> > I've configured HE tunnels to use RFC 1918 address locally and as<br><br>
> > long as the packets goes through the NAT both ways it works.<br><br>
> > <br><br>
> > Obviously it is better if you only reconfigure on a renumber event<br><br>
> > but you could just re-authenticate every 15 minutes from cron.<br><br>
> > <br><br>
> > Mark<br><br>
> > <div class=3D"HOEnZb"><div class=3D"h5"><br><br>
> > > On 1 February 2016 at 06:05, Goran Aleksic <<a href=3D"mailto:<a href="mailto:goran">goran</a>=<br>
> > .<a href="mailto:aleksic@gmail.com">aleksic@gmail.com</a>"><a href="mailto:goran.aleksic@gmail.com">goran.aleksic@gmail.com</a></a>><br><br>
> > > wrote:<br><br>
> > > > HI all,<br><br>
> > > ><br><br>
> > > > I've got Optus ADSL and dynamic public IP.<br><br>
> > > > Needed 6-in-4 tunnel (IPv6 encapsulated into IPv4 tunnel), tried =<br>
> > using<br><br>
> > > > Hurricane Electric IPv6 provider, as I saw positive reviews.<br><br>
> > > > I got Juniper SRX 110 modem and have implemented configuration as=<br>
> > <br><br>
> > > stated on<br><br>
> > > ><br><br>
> > > <a href=3D"<a href="http://forums.juniper.net/t5/SRX-Services-Gateway/HE-IPv6-t=" rel="noreferrer" target="_blank">http://forums.juniper.net/t5/SRX-Services-Gateway/HE-IPv6-t=</a><br>
> > unnel-with-flow" rel=3D"noreferrer" target=3D"_blank"><a href="http://forums.juniper" rel="noreferrer" target="_blank">http://forums.juniper</a>=<br>
> > .net/t5/SRX-Services-Gateway/HE-IPv6-tunnel-with-flow</a><br><br>
> > > -based-IPv6-in-10-4/td-p/69338/highlight/true/page/3<br><br>
> > > ><br><br>
> > > > Issue is=C2=A0 my public IP (on at-1/0/0.0 interface) keeps chang=<br>
> > ing every<br><br>
> > > time<br><br>
> > > > I attempt the tunnel.<br><br>
> > > > This is a twofold problem:<br><br>
> > > > 1. on Hurricane Electric page, you need to specify one endpoint o=<br>
> > f the<br><br>
> > > > tunnel, i.e. your public IP<br><br>
> > > > 2. In configuration of ip-0/0/0.0 interface (tunnel interface) on=<br>
> > <br><br>
> > > Juniper<br><br>
> > > > SRX, you need to specify your tunnel source IP (a public IP). The=<br>
> > re<br><br>
> > > doesn't<br><br>
> > > > seem to be a trick like with Cisco, to use ip unnumbered and impl=<br>
> > y IP<br><br>
> > > > address from your WAN interface...<br><br>
> > > ><br><br>
> > > > Why would an attempt to establish a IPv4 tunnel to another host t=<br>
> > rigger<br><br>
> > > my<br><br>
> > > > public IP to be changed?<br><br>
> > > ><br><br>
> > > > I'm wondering if anyone has experienced the same or similar i=<br>
> > ssue?<br><br>
> > > ><br><br>
> > > > Thanks,<br><br>
> > > ><br><br>
> > > > Alex<br><br>
> > > ><br><br>
> > > > _______________________________________________<br><br>
> > > > AusNOG mailing list<br><br>
> > > > <a href=3D"mailto:<a href="mailto:AusNOG@lists.ausnog.net">AusNOG@lists.ausnog.net</a>"><a href="mailto:AusNOG@lists.ausnog.ne">AusNOG@lists.ausnog.ne</a>=<br>
> > t</a><br><br>
> > > > <a href=3D"<a href="http://lists.ausnog.net/mailman/listinfo/ausnog" rel="noreferrer" target="_blank">http://lists.ausnog.net/mailman/listinfo/ausnog</a>" rel=<br>
> > =3D"noreferrer" target=3D"_blank"><a href="http://lists.ausnog.net/mailman/listinfo/=" rel="noreferrer" target="_blank">http://lists.ausnog.net/mailman/listinfo/=</a><br>
> > ausnog</a><br><br>
> > > ><br><br>
> > > _______________________________________________<br><br>
> > > AusNOG mailing list<br><br>
> > > <a href=3D"mailto:<a href="mailto:AusNOG@lists.ausnog.net">AusNOG@lists.ausnog.net</a>"><a href="mailto:AusNOG@lists.ausnog.net">AusNOG@lists.ausnog.net</a></a>=<br>
> > <br><br>
> > > <a href=3D"<a href="http://lists.ausnog.net/mailman/listinfo/ausnog" rel="noreferrer" target="_blank">http://lists.ausnog.net/mailman/listinfo/ausnog</a>" rel=3D"nor=<br>
> > eferrer" target=3D"_blank"><a href="http://lists.ausnog.net/mailman/listinfo/ausnog" rel="noreferrer" target="_blank">http://lists.ausnog.net/mailman/listinfo/ausnog</a><=<br>
> > /a><br><br>
> > <br><br>
> > </div></div><span class=3D"HOEnZb"><font color=3D"#888888">--<br><br>
> > Mark Andrews, ISC<br><br>
> > 1 Seymour St., Dundas Valley, NSW 2117, Australia<br><br>
> > PHONE: <a href=3D"tel:%2B61%202%209871%204742" value=3D"+61298714742">+61 2=<br>
> > 9871 4742</a>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=<br>
> > =A0INTERNET: <a href=3D"mailto:<a href="mailto:marka@isc.org">marka@isc.org</a>"><a href="mailto:marka@isc.org">marka@isc.org</a></a><br><br>
> > </font></span></blockquote></div><br></div><br>
> ><br>
> > --001a1140f54ed8af8f052abe277f--<br>
> --<br>
> Mark Andrews, ISC<br>
> 1 Seymour St., Dundas Valley, NSW 2117, Australia<br>
> PHONE: <a href="tel:%2B61%202%209871%204742" value="+61298714742">+61 2 9871 4742</a> INTERNET: <a href="mailto:marka@isc.org">marka@isc.org</a><br>
--<br>
Mark Andrews, ISC<br>
1 Seymour St., Dundas Valley, NSW 2117, Australia<br>
PHONE: <a href="tel:%2B61%202%209871%204742" value="+61298714742">+61 2 9871 4742</a> INTERNET: <a href="mailto:marka@isc.org">marka@isc.org</a><br>
</div></div></blockquote></div><br></div></div></div></div>