Comcast Residential /64 Delegation

jpvonhemel

I agree. For some masochistic reason I decided to see if I could figure this out. After I did, I asked myself, “Ok, that’s working. Good job. Now what functionality did it give me?”. I then proceeded to set IPV6 to none for WAN. There is so much more learning I can do that has a real return on investment.

jpvonhemel

I did not know there were t-shirts to earn. That changes everything.

johnpoz

@jpvonhemel said in Comcast Residential /64 Delegation:

There is so much more learning I can do that has a real return on investment.

Very true! I have been wanting to leverage IPv6 at work since 2010-11ish time frame.. Nothing ;) And I work for a major player.. I just recently helped them get /32 from Arin for use in a project..

I will for sure be retired before ipv6 becomes real mainstream protocol.. Sad but that is the way it is..

Bob.Dig

The US has plenty of IPv4 addresses. In other parts of the world this is not the case. For instance in Germany there is more and more IPv4 CG NAT and/or DS-Lite (Dual Stack Lite). So if you want to host something at home, you have to use IPv6... but also every major cellphone provider here supports it ootb, so it is doable, although it sucks big time.

johnpoz

@jpvonhemel said in Comcast Residential /64 Delegation:

I did not know there were t-shirts to earn. That changes everything.

I have to assume they are still giving them out.. Got mine back in 2011 though, so no promises.. But its a fun test, if your up to speed on ipv6 you can run through it a few hours easy.. I did one lazy sunday afternoon.. Biggest thing was getting the IPv6 glue setup on a domain..

johnpoz

@bob-dig said in Comcast Residential /64 Delegation:

So if you want to host something at home, you have to use IPv6

This is true - just hope your "clients" have IPv6 -- hehe.. Ask your typical user what their IP is even IPv4 and they look like a deer in headlights.. But yeah that is one actual use for it in a home setup - getting around CGnat in the IPv4 space.

jpvonhemel

@johnpoz I just have to quiz my wife what our subnet private addresses are, or the unifi controller IP, and instant deer in the headlights.

johnpoz

@jpvonhemel haha, I get it with normal "users" but ask some so called tech guys what their public IP is - they didn't have a clue.. One of my buddies has some shit home wifi router thing at home.. And I ask him why you don't setup a decent network at home.. He spends all day doing firewalls and routers and switches, etc.. So he just wants to turn off at home.

I get that sort of - but to me IT while its work, is also my hobby/fun.. Stuff I can't play with at work, I can play with at home, etc. Like IPv6 ;)

JKnott

@bearhntr said in Comcast Residential /64 Delegation:

I really want to grasp this IPv6 stuff.

A good reference is IPv6 Essentials.

JKnott

@bob-dig said in Comcast Residential /64 Delegation:

The US has plenty of IPv4 addresses. In other parts of the world this is not the case. For instance in Germany there is more and more IPv4 CG NAT and/or DS-Lite (Dual Stack Lite). So if you want to host something at home, you have to use IPv6... but also every major cellphone provider here supports it ootb, so it is doable, although it sucks big time.

There are plenty stuck behind CGNAT in North America too. My ISP, Rogers, provides IPv6 on both cable and cell networks. On the other hand, the big phone company doesn't yet offer IPv6 to consumers on their ADSL or fibre networks and doesn't properly support it on their cell network. My work phone, on that company, it gets only 1/10 on test-ipv6.com. "Danger IPv6 sorta works - however, large packets appear to fail...". They also don't provide IPv6 to devices connected to the hot spot.

JKnott

@johnpoz

Many "tech guys" don't get a lot of things. For example, look at all those who run Windows as admin. That leaves them wide open to malware. On my own computers, I run as a mere mortal, with admin rights when needed, just as I do on Linux.

Many are also not that great on network issues.

jpvonhemel

@jknott Considering our dependency on Windows, I expect to wake up one day and find out that Windows Update promulgated a delayed signed ransomware attack that simultaneously devastated both the enterprise and retail installs, and this then proceeds to global catastrophe.

bearhntr

@johnpoz

Well this is FRUSTRATING AS HELL!!! Got up this AM - noticed that I had a new IPv4 Address on WAN from COMCAST - but the IPv6 one did not change. So I went to the IPv6 test page and now see what I get:

I have done done this page too - where COMCAST support sent me:

This makes no sense - at all. Verified that IPv6 is still setup on the NIC of the Server - the same STATIC addresses I put there.

Curtis

bearhntr

@johnpoz

I used to be a trainer at my job. I used to touch on IPv6 and explain follows:

IPv4 (State . City . Street . House #) - as an example of the 4 numbers.

IPv6 (Planet : Continent : Country : State : City : Street : House # : Room) - so a much more granular address.

It was kewl to see light bulbs come on. LOL

Curtis

bearhntr

@jknott

Agreed - I 95% of the time login to my Windows computers as a 'mere-mortal' and only use Admin stuff when I need it.

I typically login if I have lots to do - on the DC as admin --- so I am not pestered with the warning (you must ask to be a god) --- LOL

Curtis

bearhntr

@jpvonhemel

I think they are calling that WINDOWS 11 !!!

Microsoft in kahootz with the computer manufacturers to see more computers for which they cannot get chips for them - so the prices are 4x what they should be.

Bob.Dig

@bearhntr said in Comcast Residential /64 Delegation:

Well this is FRUSTRATING AS HELL!!!

Do a reboot of pfSense. I have to do that daily (via cron) to keep IPv6 working.

bearhntr

@bob-dig

OK - care to share? CRON? {steps???}

Bob.Dig

@bearhntr First, try if a reboot helps you.
Second, do what @JKnott always advises and go to Interfaces/WAN
DHCP6 Client Configuration
Check the box: Do not allow PD/Address release
This might help you so that you (almost) never get a new IPv6-Prefix.

bearhntr

@bob-dig

I will have to reboot pfSense later - as I work from home, and in the middle of my day here. I will lose Internet during that period of reboot.

Let you all know.

Curtis