Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Lit Fibre (UK) IPv6 stopped after powercut

    Scheduled Pinned Locked Moved IPv6
    42 Posts 3 Posters 2.0k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • GertjanG
      Gertjan @JKnott
      last edited by Gertjan

      @JKnott said in Lit Fibre (UK) IPv6 stopped after powercut:

      He said he gets a WAN address, but not LAN, so it's not a DNS issue.

      DNS ? Did I mention DNS somewhere ?
      It's a (I guess, details aren't shown) : "he did't get a prefix so the LAN DHCPv6 server can't work".
      Wanted to see the LAN DHCPv6 server setup, if there was a 'valid' prefix showing, the first ('0' out of the avaible 'ffff'.

      Or even the DHCPv6 WAN client detailed logs :

      0529ea29-acc6-4bd9-af04-3c495897a8fd-image.png

      so prefix negotiation can be seen.

      No "help me" PM's please. Use the forum, the community will thank you.
      Edit : and where are the logs ??

      1 Reply Last reply Reply Quote 0
      • F022YF
        F022Y
        last edited by F022Y

        Firstly thank you for the repies. So i am at a complete loss on this as I rebooted to do a packet capture and now IPv6 works like a charm.

        But in case it helps i'll attach the pcaps etc.

        packetcapture-igc0-20250316134737.pcap

        75a79bb3-5245-475f-8384-257cb72571b5-image.png

        32cbe3eb-faf2-4587-a695-b822cce1285a-image.png

        I do have KEA for IPv4 addresses but not for IPv6 as that interface is set to track on the WAN.

        As i say though after a boot she's happy again.

        0361ea14-35b2-49f8-86a8-b80fccb8c6e7-image.png

        Thank you all again

        JKnottJ 1 Reply Last reply Reply Quote 0
        • JKnottJ
          JKnott @F022Y
          last edited by

          @F022Y said in Lit Fibre (UK) IPv6 stopped after powercut:

          But in case it helps i'll attach the pcaps etc.

          I see you didn't follow my directions. Instead of just the DHCP6 stuff, that file includes a lot of irrelevant stuff.

          PfSense running on Qotom mini PC
          i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
          UniFi AC-Lite access point

          I haven't lost my mind. It's around here...somewhere...

          F022YF 1 Reply Last reply Reply Quote 0
          • F022YF
            F022Y @JKnott
            last edited by F022Y

            @JKnott

            Apologies i followed this:-

            a13fd0b4-2b8d-4c0e-8069-c83d808cb9a1-image.png

            The pfsense box is down next to the ONT so by the time i got down and back up my PC had fallen asleep so assume UDP part was cleared

            JKnottJ 1 Reply Last reply Reply Quote 0
            • JKnottJ
              JKnott @F022Y
              last edited by

              @F022Y said in Lit Fibre (UK) IPv6 stopped after powercut:

              Apologies i followed this:-

              Including the instructions about the UDP port to filter on? By filtering on UDP port 546 or 547, doesn't matter which, you would have captured only the DHCPv6 packets.

              Here's one I did a while ago. You'll see it contains only the 4 DHCPv6 packets and nothing else.

              6802868a-e9ce-4868-a817-5b6a5feac3dc-image.png

              PfSense running on Qotom mini PC
              i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
              UniFi AC-Lite access point

              I haven't lost my mind. It's around here...somewhere...

              1 Reply Last reply Reply Quote 0
              • F022YF
                F022Y
                last edited by

                So spoke to soon as it stopped again after scheduled maintence at 2am UTC today so ran through the advise you guys gave again.

                Again after halting the system removing WAN cable booting up setting the following:-

                9c5771c8-a831-4fa4-a633-8e05a9195c39-image.png

                Upon plugging the WAN cable back in IPv6 works again, as i'm in the middle of CDM upgrades on a rubrik cluster can't spend to much time poking.

                Going to leave it overnight to check as another maintenance and see what happens.

                @JKnott I know what i did wrong last time and will make sure not to repeat, now i assume the captured port is WAN? Just want to double check.

                JKnottJ 1 Reply Last reply Reply Quote 0
                • JKnottJ
                  JKnott @F022Y
                  last edited by

                  @F022Y said in Lit Fibre (UK) IPv6 stopped after powercut:

                  I know what i did wrong last time and will make sure not to repeat, now i assume the captured port is WAN? Just want to double check.

                  Yes, that is correct. When you filter on those UDP ports, you will have 4 packets captured. You can look at the capture file with Wireshark, as I demonstrated with a screen capture.

                  Was that scheduled maintenance yours or your ISPs?

                  BTW, DHCP6 works exactly like DHCP4, with the solicit, advertise, request and reply packets. However, once that's completed, then the LAN prefix has to be obtained from the reply packet and applied to the LAN. There is nothing comparable to that in IPv4.

                  PfSense running on Qotom mini PC
                  i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                  UniFi AC-Lite access point

                  I haven't lost my mind. It's around here...somewhere...

                  1 Reply Last reply Reply Quote 0
                  • F022YF
                    F022Y
                    last edited by

                    It was ISP based, due to merging networks with their new owners CityFibre.

                    I do appreciate the assist.

                    1 Reply Last reply Reply Quote 0
                    • F022YF
                      F022Y
                      last edited by F022Y

                      It died again, this time no IPv6 at all

                      packetcapture-igc0-20250318162548.pcap

                      JKnottJ 1 Reply Last reply Reply Quote 0
                      • JKnottJ
                        JKnott @F022Y
                        last edited by

                        @F022Y said in Lit Fibre (UK) IPv6 stopped after powercut:

                        about 2 hours ago

                        It died again, this time no IPv6 at all

                        Here's what the reply packet shows:

                        7735df9a-03c8-4856-b5f7-6b50bc55a7e9-image.png

                        The IA address should be the WAN interface address and the prefix address is your LAN prefix. Are you saying you're not seeing either of those? I also see you're getting a /48 prefix size. Nice you can get one that big. I only have a /56. 😭

                        PfSense running on Qotom mini PC
                        i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                        UniFi AC-Lite access point

                        I haven't lost my mind. It's around here...somewhere...

                        1 Reply Last reply Reply Quote 0
                        • F022YF
                          F022Y
                          last edited by

                          Just logged back into pfsense after grabbing that pcap and the interface shows connections.

                          38359671-aa82-4565-81bd-baa134c53aa1-image.png
                          6c1aea32-4c2c-4106-83cd-4b52350c9d18-image.png
                          2aaf8b14-a1c8-402a-b221-867986f77a3a-image.png

                          f8d3a0c6-70ef-4b7e-9c19-2e8f06a790ac-image.png
                          547f6936-57ff-4ba0-8d16-767606958520-image.png

                          10a5f2de-2d7d-4b5b-861f-89f032160347-image.png
                          6b587298-370a-4101-b4f9-b6eb22e8ad17-image.png

                          JKnottJ 1 Reply Last reply Reply Quote 0
                          • JKnottJ
                            JKnott @F022Y
                            last edited by

                            @F022Y

                            Are you seeing the IPv6 pings leave your network? Perhaps there's a routing issue from your ISP. You can see the pings in packet capture, by filtering on ICMP6. You should see both the request and reply in the capture. What happens if you ping something closer than netgate? One thing you can do is traceroute to netgate or other and see how far it goes. Given the ISP is doing stuff, bad routes are a definite possibility.

                            You might also try this by tethering to a cell phone and seeing if you get the same results there. If the cell connection works, you can see if your pings can reach it from your Lit Fibre connection. You may want to use Wireshark on the computer tethered to the phone.

                            PfSense running on Qotom mini PC
                            i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                            UniFi AC-Lite access point

                            I haven't lost my mind. It's around here...somewhere...

                            1 Reply Last reply Reply Quote 0
                            • F022YF
                              F022Y
                              last edited by

                              Nope nothing.

                              7fe32dfb-1093-4e99-b61c-ffd4802bdddf-image.png

                              2530d1f5-1d56-4e77-8103-40d97c30e8d5-image.png

                              e6d08539-ad20-40d4-a201-f9b02953b6b4-image.png

                              packetcapture-igc0-20250318201715.pcap

                              Looks like my 3 cell connection doesn't support IPv6 so unable to test like that.

                              I am right with the LAN config tho, with it being tracked to the WAN?

                              3f208dd7-2dfe-42ff-b928-f037d9039d2c-image.png

                              JKnottJ 2 Replies Last reply Reply Quote 0
                              • JKnottJ
                                JKnott @F022Y
                                last edited by

                                @F022Y said in Lit Fibre (UK) IPv6 stopped after powercut:

                                Looks like my 3 cell connection doesn't support IPv6 so unable to test like that.

                                ????

                                IPv6 is mandatory for 4G & 5G, though some companies do a poor job with it for tethered devices. What happens if you do that IPv6 test from the phone?

                                PfSense running on Qotom mini PC
                                i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                                UniFi AC-Lite access point

                                I haven't lost my mind. It's around here...somewhere...

                                F022YF 1 Reply Last reply Reply Quote 0
                                • JKnottJ
                                  JKnott @F022Y
                                  last edited by

                                  @F022Y

                                  That packet capture shows you're pinging a link local address:

                                  4c4d37d3-ed9b-42ff-800c-e29b5bb83438-image.png

                                  Are you pinging the ISPs MAC on the WAN interface? Or something on your local LAN? Link local packets do not pass through a router, so it has to be something directly connected to whichever network you're on.

                                  In that traceroute, I see 4 successful hops, then nothing. This could indicate a routing problem beyond that last one.

                                  PfSense running on Qotom mini PC
                                  i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                                  UniFi AC-Lite access point

                                  I haven't lost my mind. It's around here...somewhere...

                                  1 Reply Last reply Reply Quote 0
                                  • F022YF
                                    F022Y @JKnott
                                    last edited by

                                    @JKnott android on 4G and any attempts to ping or routetrace bbc.co.uk it defaults to IPv4.

                                    33d16491-0a6c-4f77-be29-08ad6175c512-image.png

                                    e06e1778-df60-44ae-b9ba-ce7be224f7f5-image.png

                                    Address i'm pinging is either bbc or netgate i'll do another now pinging bbc.co.uk...........

                                    Just for giggles i've done 2 for comparison.

                                    Capture the LAN port
                                    packetcapture-igc0-20250318212104.pcap

                                    Capture the WAN port
                                    packetcapture-igc1-20250318211922.pcap

                                    JKnottJ 1 Reply Last reply Reply Quote 0
                                    • JKnottJ
                                      JKnott @F022Y
                                      last edited by

                                      @F022Y said in Lit Fibre (UK) IPv6 stopped after powercut:

                                      android on 4G and any attempts to ping or routetrace bbc.co.uk it defaults to IPv4.

                                      Try test-ipv6.com. You should have IPv6 with 4G. However, your cell company may be preventing tethering from working.

                                      Also, you should be trying this when connected to the cell network and not your WiFi, as the pfSense problem would affect it too.

                                      PfSense running on Qotom mini PC
                                      i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                                      UniFi AC-Lite access point

                                      I haven't lost my mind. It's around here...somewhere...

                                      F022YF 1 Reply Last reply Reply Quote 0
                                      • F022YF
                                        F022Y @JKnott
                                        last edited by F022Y

                                        @JKnott just tested, WiFi off and still not playing

                                        Image doesn't want to appear so I'll share when back on desktop.

                                        441aaedb-d9b9-409e-b97c-046219ae56dc-image.png alt text

                                        GertjanG JKnottJ 2 Replies Last reply Reply Quote 0
                                        • GertjanG
                                          Gertjan @F022Y
                                          last edited by

                                          @F022Y

                                          Wow, that's imho quiet unique : an Phone 4G/5G ISP without IPv6 ... ?

                                          What does this mean :

                                          ee58656c-1cf0-409e-8c8f-31b4858e1751-image.png

                                          as I always considered that "test-ipv6.com" is clean and exempt of publicity or other stiff.

                                          No "help me" PM's please. Use the forum, the community will thank you.
                                          Edit : and where are the logs ??

                                          F022YF 1 Reply Last reply Reply Quote 0
                                          • F022YF
                                            F022Y @Gertjan
                                            last edited by

                                            @Gertjan it's brave browser so the left icon is that the the inbuilt "shields" are active the right one is Brave rewards.

                                            GertjanG 1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.