Unable to ping Thread devices remotely

[nikhilkomalan]

Hello developers,

I am currently performing OTA DFU in Thread Network. But currently my OTA DFU implementation is such that i have to run a python script (i.e COAP server) in OTBR and pass the IPv6 address of the device to be upgraded to the script as argument. For above purpose i require .zip firmware package to be present on my OTBR.

So instead of doing above setup, i am looking for a change where i can do OTA DFU on any of the device present on the field supplied to different customers. For that i need to be able to ping the Thread devices remotely.

But currently i am unable to ping my thread devices from outer network. So can anyone please guide me how to get a Global IP address for each Thread device.

I have checked IPv6 forwarding is enabled on my OTBR. Output of "sudo ip6tables -vL" is as shown below for reference:

pi@raspberrypi:~ $ sudo ip6tables -vL
Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 OTBR_FORWARD_INGRESS  all      any    wpan0   anywhere             anywhere            

Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain OTBR_FORWARD_INGRESS (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DROP       all      wpan0  any     anywhere             anywhere             PKTTYPE = unicast
    0     0 DROP       all      any    any     anywhere             anywhere             match-set otbr-ingress-deny-src src
    0     0 ACCEPT     all      any    any     anywhere             anywhere             match-set otbr-ingress-allow-dst dst
    0     0 DROP       all      any    any     anywhere             anywhere             PKTTYPE = unicast
    0     0 ACCEPT     all      any    any     anywhere             anywhere            
pi@raspberrypi:~ $ 

And the ip -6 route is as shown below:

pi@raspberrypi:~ $ ip -6 route
::1 dev lo proto kernel metric 256 pref medium
fd00:ba2e:6310:1::/64 dev wpan0 proto kernel metric 256 pref medium
fd0f:9505:d2d2:7961::/64 dev wpan0 proto kernel metric 256 pref medium
fd11:1111:1122:2222::/64 dev wlan0 proto ra metric 600 pref medium
fe80::/64 dev eth0 proto kernel metric 100 pref medium
fe80::/64 dev wpan0 proto kernel metric 256 pref medium
fe80::/64 dev docker0 proto kernel metric 256 linkdown pref medium
fe80::/64 dev wlan0 proto kernel metric 600 pref medium
default via fe80::928d:78ff:fe76:2700 dev wlan0 proto ra metric 600 pref medium

Thanks in advance.

[jwhui]

You may find the following codelab useful: Thread Border Router - Bidirectional IPv6 Connectivity and DNS-Based Service Discovery