Setup Hurricane Electric tunnel on Zyxel USG XX?

[jea101]

My USG 50 arrived Thursday and I have a working IPv4 setup.  Since it supports IPv6 in IPv4 I would like to use it to manage a Hurricane Electric IPv6 tunnel.  Are there instructions somewhere on how to do this for a USG XX?  I have the HE end setup.   However, the example in the USG manual is for a point to point tunnel between two Zywalls.   

[cholzhauer]

I would think its the same basic idea.  What options are they looking for?

[jea101]

After going through the setup again I found that the USG LAN IP needs to be 2001:470:1f0e:1134::2/64 instead of /128.  I also had to add a firewall rule to allow IP6to 4 (protocol 41) and manually configure the HE IPv6 DNS server.  The windows 7 PCs now have valid IPv6 addresses in the same /64

However, if I do a tracert to google.com the name is resolved to an IPv6 address which implies that DNS is working but the trace times out.  I don’t see anything being blocked by the firewall so I don’t know why tracert isn’t working.

C:\Users\janderso>tracert google.com

Tracing route to google.com [2001:4860:800a::71]
over a maximum of 30 hops:

  1     *        *        *     Request timed out.
  2     *        *        *     Request timed out.
  3     *        *        *     Request timed out.
  4     *        *        *     Request timed out.
  5     *        *        *     Request timed out.
  6  ^C
C:\Users\janderso>

[jea101]

Code:

Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

C:\Users\janderso>route print
===========================================================================
Interface List
 16...4c eb 42 40 d5 0d ......Intel(R) Centrino(R) Wireless-N 1030
  1...........................Software Loopback Interface 1
 13...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter
 18...00 00 00 00 00 00 00 e0 Teredo Tunneling Pseudo-Interface
===========================================================================

IPv4 Route Table
===========================================================================
Active Routes:
Network Destination        Netmask          Gateway       Interface  Metric
          0.0.0.0          0.0.0.0      172.30.30.1    172.30.30.211    276
        127.0.0.0        255.0.0.0         On-link         127.0.0.1    306
        127.0.0.1  255.255.255.255         On-link         127.0.0.1    306
  127.255.255.255  255.255.255.255         On-link         127.0.0.1    306
      172.30.30.0    255.255.255.0         On-link     172.30.30.211    276
    172.30.30.211  255.255.255.255         On-link     172.30.30.211    276
    172.30.30.255  255.255.255.255         On-link     172.30.30.211    276
        224.0.0.0        240.0.0.0         On-link         127.0.0.1    306
        224.0.0.0        240.0.0.0         On-link     172.30.30.211    276
  255.255.255.255  255.255.255.255         On-link         127.0.0.1    306
  255.255.255.255  255.255.255.255         On-link     172.30.30.211    276
===========================================================================
Persistent Routes:
  Network Address          Netmask  Gateway Address  Metric
          0.0.0.0          0.0.0.0    172.24.80.161  Default
          0.0.0.0          0.0.0.0      172.30.30.1  Default
===========================================================================

IPv6 Route Table
===========================================================================
Active Routes:
 If Metric Network Destination      Gateway
 16    281 ::/0                     fe80::ca6c:87ff:fe36:f82e
  1    306 ::1/128                  On-link
 18     58 2001::/32                On-link
 18    306 2001:0:9d38:953c:30b8:503:9e9f:fcd3/128
                                    On-link
 16     33 2001:470:1f0e:1134::/64  On-link
 16    281 2001:470:1f0e:1134:449e:56a8:92c1:caa0/128
                                    On-link
 16    281 2001:470:1f0e:1134:a09e:8e1d:2703:62e7/128
                                    On-link
 16    281 fe80::/64                On-link
 18    306 fe80::/64                On-link
 18    306 fe80::30b8:503:9e9f:fcd3/128
                                    On-link
 16    281 fe80::a09e:8e1d:2703:62e7/128
                                    On-link
  1    306 ff00::/8                 On-link
 18    306 ff00::/8                 On-link
 16    281 ff00::/8                 On-link
===========================================================================
Persistent Routes:
  None

C:\Users\janderso>

[jea101]

That is the link local address of the router.  There is a policy route that tells it to route IPv6 from the LAN2 interface to the tunnel.   Note from my second post that the PC is able to access the DNS server via the tunnel and resolve google.com.