There is indeed NAT64:
There is indeed NAT64:
I happen to be on an IPv6 connection as well today, though without NAT64 and without a phone in-between (it’s wired.) I just get an invalid certificate when going to that IP address in my browser.
This sounds like a contradiction. Maybe, you get different IPv4 addresses from DNS when you are on NAT64? Do you have any custom DNS settings that would prevent using your ISP’s DNS?
Edit: and what does your phone’s browser do when browsing to the IP address?
Executed on the notebook:
$ nslookup fairphone.com Server: 192.168.43.253 Address: 192.168.43.253#53 Non-authoritative answer: Name: fairphone.com Address: 220.127.116.11 Name: fairphone.com Address: 64:ff9b::5416:6530 $ ping 18.104.22.168 PING 22.214.171.124 (126.96.36.199) 56(84) bytes of data. From 192.168.43.253 icmp_seq=1 Destination Net Unreachable From 192.168.43.253 icmp_seq=2 Destination Net Unreachable ^C --- 188.8.131.52 ping statistics --- 2 packets transmitted, 0 received, +2 errors, 100% packet loss, time 1002ms $ ping 64:ff9b::5416:6530 PING 64:ff9b::5416:6530(64:ff9b::5416:6530) 56 data bytes 64 bytes from 64:ff9b::5416:6530: icmp_seq=1 ttl=239 time=52.3 ms 64 bytes from 64:ff9b::5416:6530: icmp_seq=2 ttl=239 time=41.3 ms ^C --- 64:ff9b::5416:6530 ping statistics --- 2 packets transmitted, 2 received, 0% packet loss, time 1001ms rtt min/avg/max/mdev = 41.338/46.821/52.304/5.483 ms $ ping fairphone.com PING fairphone.com(lb1.ivaldi.nl (64:ff9b::5416:6530)) 56 data bytes 64 bytes from lb1.ivaldi.nl (64:ff9b::5416:6530): icmp_seq=1 ttl=239 time=58.9 ms 64 bytes from lb1.ivaldi.nl (64:ff9b::5416:6530): icmp_seq=2 ttl=239 time=54.5 ms ^C --- fairphone.com ping statistics --- 2 packets transmitted, 2 received, 0% packet loss, time 1001ms rtt min/avg/max/mdev = 54.459/56.694/58.929/2.235 ms
That’s the same IPv4 address for fairphone.com I get on my desktop PC (connected to an IPv4 network), but it does not work over the IPv4/IPv6 connection.
The phone’s browser also cannot access 184.108.40.206.
I see what is happening, websites get an IPv6 address assigned using the NAT64 tunnel.
5416:6530 is the hexadecimal representation of 220.127.116.11, and 64:ff9b:: routes that through the tunnel. Together that forms 64:ff9b::5416:6530. You are supposed to ping or visit that address and clients that understand IPv6 will automatically do so.
I now see that the address your car got, 64:ff9b::5be9:7625, also ends in a hexadecimal representation of the corresponding IPv4 address 18.104.22.168.
Conclusion: Your car fails to connect to IPv6 when it is available. And that causes it to fail on NAT64 networks, because you have to use IPv6 for everything on those networks.
Yep, seems that I have to blame Toyota after all (or actually Panasonic).
Precedence rules for IPv4 vs. IPv6 look quite complex according to this article but in general it makes sense to prefer IPv6 over IPv4 and that is what the car fails to do.
So I’m going back to my workaround (use the old APN) and hope that there will be a firmware update for the car that fixes this issue.
Thank you for helping! I learned some interesting new things during this investigation.
Don’t forget to contact Toyota support. They might not immediately take action but if more people inform them that their services are unreachable on Telekom’s mobile network (you’re likely not the only one on NAT64), they might look into it at some point. While the setup used by Telekom is ugly, you are definitely hitting a car firmware issue here.
Thanks to AlbertJP and Harald for your analysis. It looks like I am having the same problem with VW Passat and a car-net connection using a telekom ipv6 apn since upgrading to Android 10 on my fp3
I changed the apn protocol to ipv4 however without success.
@harald could you tell me what apn settings you changed in order to bypass the error?
In addition, I would like to verify, whether VW has the same problem. However I don’t know how to prove it. The analysis was done with win10 correct? So how have you been able to prove the root cause being the car hardware?
Hi @fymwpm, which operator are you using? This is important to know as the unusual IPv6 setup of Deutsche Telekom was a major factor (even though the blame lay with the car hardware.)
We indeed used a laptop for analysis, to rule out problems with the phone’s IPv6 implementation. It looks like the FP3 implements IPv6 correctly, hence I don’t think we need to repeat the whole process.
I have some simple questions for you instead:
- Could you post a screenshot of test-ipv6.com on your phone while connected to mobile internet?
- Do other devices (laptops or phones) have internet access when connected to your hotspot?
I think it will not work changing only the protocol in the APN settings. You will also have to use a different APN network address, and maybe change other settings. It is also important to reboot the phone after changing APN settings, or the new settings won’t be used.
If it helps I could post the settings for German Telekom cards. APN settings for all providers should be available free on the Internet.
To analyze the communication between phone and car I used Wireshark on my Linux notebook. Wireshark is a popular network analysis tool and available for several platforms (also Windows).
However, I’m no longer sure that is is really a problem of the car’s software…
A week ago I did another test with the Telekom SIM card and the IPv6 APN settings, but instead of using the FP3 I inserted the card in my old FP2 - and it worked! The same car, the same SIM card, the same APN settings - working on FP2 with Android 7, not working on FP3 with Android 10.
Currently I don’t have the time to do deeper investigations but it might turn out that Fairphone (or Google) messed something up, not Toyota (or any other car manufacturer).
Thanks for your response.
I have the same provider as Harald, German Telekom. When connecting to the mobile phone hotspot with my notebook I have access to the internet. I recently provided internet to another phone and that worked as well. Please find a screenshot from test-ipv6.com, taken from my phone while connected via mobile network:
@harald thanks for your response.
I would indeed be interested to try your settings on my FP3. So far, I did only change the protocol (and rebooted afterwards) but that was not getting me anywhere.
The settings are these:
- Name = Telekom
- APN = internet.telekom
- User name = telekom
- Password = telekom
- MMSC = http://mms.t-mobile.de/servlets/mms
- MMS proxy = 172.28.23.131
- MMS port = 8008
- MCC = 262
- MNC = 01
- authentication type = PAP
- APN type = default,supl,mms
- APN protocol = IPv4
- APN roaming protocol = IPv4
All other fields (proxy etc.) are empty.
@harald, it would be interesting to see why the FP2 works. A quick Google search indicates that IPv6 hotspots were introduced as of Android 7, and that some Android phones run an IPv4-to-v6 translator called clatd. Maybe the FP2 is using this translator while the FP3 doesn’t have it or it doesn’t work for hotspots.
@fymwpm if a laptop can get a connection over this hotspot, then, in my opinion, so should a car. I don’t see any good excuse for car manufacturers not to support this setup if other devices do.
I can’t test anything on my own mobile internet connection, as I don’t have IPv6. My operator only enables it for ‘select’ devices and hasn’t published the APN settings to do it yourself. Their online how-to for the FP3 uses an IPv4 APN. (Simply changing the network type in the APN does not work.)
Thanks a lot
I will try and report.
I do have two alternative APNs now, one for IPv4 and one for IPv6 and can switch between both.
With IPv4 i can connect now.
I will approach my car dealer with this finding and have him contact VW.
From what I read, Android 9 and 10 should still include the clatd translator for NAT64 services. Without it, Android apps that aren’t IPv6-compatible will also stop working.
Could you raise an issue with Fairphone Support about this just to get this clarified?
If someone can confirm that FP3 Android 9 and/or the FP2 indeed translate IP addresses on the Deutsche Telekom network, the issue can be added to this list.
Interesting. On my phone with mobile data, the test IPV6 site says there’s no IPV6 support. Zero!
I’m on O2 UK.
My VW Passat cannot access the internet through the FP3 hotspot but another phone can use the hotspot.
@jarvis my car dealer installed the latest software version before I started my own investigation.
You may want to double check, whether you have the most recent version as well.
This topic was automatically closed 90 days after the last reply. New replies are no longer allowed.