Question 510
A fictional service-provider team at Elmbridge Networks is reviewing a wholesale access handoff. The finding is: The IPv6 overlay route exists, yet encapsulated packets drop because the IPv4 underlay has no valid path to the tunnel destination. Which focused engineering action would best correct the fault?
Explanation
Correct Answer
Restore independent IPv4 underlay reachability to both tunnel endpoints and verify the IPv6 overlay path. This treats the fault shown by Elmbridge Networks: an IPv6-over-IPv4 tunnel depends on the IPv4 underlay that transports encapsulated packets; overlay route presence cannot replace underlay connectivity. Confirm success when both IPv4 endpoint paths are reachable and IPv6 packets traverse the encapsulated link end to end.
Incorrect Answers
Allow the required scoped ICMPv6 neighbor discovery exchanges and confirm neighbor cache resolution. This addresses IPv6 neighbor discovery filtering, but the reported symptoms arise from IPv6 over IPv4 tunnel underlay. For this case, verify instead that both IPv4 endpoint paths are reachable and IPv6 packets traverse the encapsulated link end to end.
Specify a reachable IPv6 next hop with correct interface scope where required and verify IPv6 route installation. Its normal acceptance signal would be the intended IPv6 destination has an active route with a resolved next hop and working egress interface. Here the deciding check is different: both IPv4 endpoint paths are reachable and IPv6 packets traverse the encapsulated link end to end.
Add an approved encryption layer such as IPsec when confidentiality is required, while retaining GRE only if needed for routing encapsulation. That could help in a case involving GRE confidentiality limitation. This failure instead depends on IPv6 over IPv4 tunnel underlay; an IPv6-over-IPv4 tunnel depends on the IPv4 underlay that transports encapsulated packets; overlay route presence cannot replace underlay connectivity.