Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Lit Fibre (UK) IPv6 stopped after powercut

    Scheduled Pinned Locked Moved IPv6
    42 Posts 3 Posters 5.6k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • F022YF
      F022Y
      last edited by F022Y

      Firstly thank you for the repies. So i am at a complete loss on this as I rebooted to do a packet capture and now IPv6 works like a charm.

      But in case it helps i'll attach the pcaps etc.

      packetcapture-igc0-20250316134737.pcap

      75a79bb3-5245-475f-8384-257cb72571b5-image.png

      32cbe3eb-faf2-4587-a695-b822cce1285a-image.png

      I do have KEA for IPv4 addresses but not for IPv6 as that interface is set to track on the WAN.

      As i say though after a boot she's happy again.

      0361ea14-35b2-49f8-86a8-b80fccb8c6e7-image.png

      Thank you all again

      JKnottJ 1 Reply Last reply Reply Quote 0
      • JKnottJ
        JKnott @F022Y
        last edited by

        @F022Y said in Lit Fibre (UK) IPv6 stopped after powercut:

        But in case it helps i'll attach the pcaps etc.

        I see you didn't follow my directions. Instead of just the DHCP6 stuff, that file includes a lot of irrelevant stuff.

        PfSense running on Qotom mini PC
        i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
        UniFi AC-Lite access point

        I haven't lost my mind. It's around here...somewhere...

        F022YF 1 Reply Last reply Reply Quote 0
        • F022YF
          F022Y @JKnott
          last edited by F022Y

          @JKnott

          Apologies i followed this:-

          a13fd0b4-2b8d-4c0e-8069-c83d808cb9a1-image.png

          The pfsense box is down next to the ONT so by the time i got down and back up my PC had fallen asleep so assume UDP part was cleared

          JKnottJ 1 Reply Last reply Reply Quote 0
          • JKnottJ
            JKnott @F022Y
            last edited by

            @F022Y said in Lit Fibre (UK) IPv6 stopped after powercut:

            Apologies i followed this:-

            Including the instructions about the UDP port to filter on? By filtering on UDP port 546 or 547, doesn't matter which, you would have captured only the DHCPv6 packets.

            Here's one I did a while ago. You'll see it contains only the 4 DHCPv6 packets and nothing else.

            6802868a-e9ce-4868-a817-5b6a5feac3dc-image.png

            PfSense running on Qotom mini PC
            i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
            UniFi AC-Lite access point

            I haven't lost my mind. It's around here...somewhere...

            1 Reply Last reply Reply Quote 0
            • F022YF
              F022Y
              last edited by

              So spoke to soon as it stopped again after scheduled maintence at 2am UTC today so ran through the advise you guys gave again.

              Again after halting the system removing WAN cable booting up setting the following:-

              9c5771c8-a831-4fa4-a633-8e05a9195c39-image.png

              Upon plugging the WAN cable back in IPv6 works again, as i'm in the middle of CDM upgrades on a rubrik cluster can't spend to much time poking.

              Going to leave it overnight to check as another maintenance and see what happens.

              @JKnott I know what i did wrong last time and will make sure not to repeat, now i assume the captured port is WAN? Just want to double check.

              JKnottJ 1 Reply Last reply Reply Quote 0
              • JKnottJ
                JKnott @F022Y
                last edited by

                @F022Y said in Lit Fibre (UK) IPv6 stopped after powercut:

                I know what i did wrong last time and will make sure not to repeat, now i assume the captured port is WAN? Just want to double check.

                Yes, that is correct. When you filter on those UDP ports, you will have 4 packets captured. You can look at the capture file with Wireshark, as I demonstrated with a screen capture.

                Was that scheduled maintenance yours or your ISPs?

                BTW, DHCP6 works exactly like DHCP4, with the solicit, advertise, request and reply packets. However, once that's completed, then the LAN prefix has to be obtained from the reply packet and applied to the LAN. There is nothing comparable to that in IPv4.

                PfSense running on Qotom mini PC
                i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                UniFi AC-Lite access point

                I haven't lost my mind. It's around here...somewhere...

                1 Reply Last reply Reply Quote 0
                • F022YF
                  F022Y
                  last edited by

                  It was ISP based, due to merging networks with their new owners CityFibre.

                  I do appreciate the assist.

                  1 Reply Last reply Reply Quote 0
                  • F022YF
                    F022Y
                    last edited by F022Y

                    It died again, this time no IPv6 at all

                    packetcapture-igc0-20250318162548.pcap

                    JKnottJ 1 Reply Last reply Reply Quote 0
                    • JKnottJ
                      JKnott @F022Y
                      last edited by

                      @F022Y said in Lit Fibre (UK) IPv6 stopped after powercut:

                      about 2 hours ago

                      It died again, this time no IPv6 at all

                      Here's what the reply packet shows:

                      7735df9a-03c8-4856-b5f7-6b50bc55a7e9-image.png

                      The IA address should be the WAN interface address and the prefix address is your LAN prefix. Are you saying you're not seeing either of those? I also see you're getting a /48 prefix size. Nice you can get one that big. I only have a /56. 😭

                      PfSense running on Qotom mini PC
                      i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                      UniFi AC-Lite access point

                      I haven't lost my mind. It's around here...somewhere...

                      1 Reply Last reply Reply Quote 0
                      • F022YF
                        F022Y
                        last edited by

                        Just logged back into pfsense after grabbing that pcap and the interface shows connections.

                        38359671-aa82-4565-81bd-baa134c53aa1-image.png
                        6c1aea32-4c2c-4106-83cd-4b52350c9d18-image.png
                        2aaf8b14-a1c8-402a-b221-867986f77a3a-image.png

                        f8d3a0c6-70ef-4b7e-9c19-2e8f06a790ac-image.png
                        547f6936-57ff-4ba0-8d16-767606958520-image.png

                        10a5f2de-2d7d-4b5b-861f-89f032160347-image.png
                        6b587298-370a-4101-b4f9-b6eb22e8ad17-image.png

                        JKnottJ 1 Reply Last reply Reply Quote 0
                        • JKnottJ
                          JKnott @F022Y
                          last edited by

                          @F022Y

                          Are you seeing the IPv6 pings leave your network? Perhaps there's a routing issue from your ISP. You can see the pings in packet capture, by filtering on ICMP6. You should see both the request and reply in the capture. What happens if you ping something closer than netgate? One thing you can do is traceroute to netgate or other and see how far it goes. Given the ISP is doing stuff, bad routes are a definite possibility.

                          You might also try this by tethering to a cell phone and seeing if you get the same results there. If the cell connection works, you can see if your pings can reach it from your Lit Fibre connection. You may want to use Wireshark on the computer tethered to the phone.

                          PfSense running on Qotom mini PC
                          i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                          UniFi AC-Lite access point

                          I haven't lost my mind. It's around here...somewhere...

                          1 Reply Last reply Reply Quote 0
                          • F022YF
                            F022Y
                            last edited by

                            Nope nothing.

                            7fe32dfb-1093-4e99-b61c-ffd4802bdddf-image.png

                            2530d1f5-1d56-4e77-8103-40d97c30e8d5-image.png

                            e6d08539-ad20-40d4-a201-f9b02953b6b4-image.png

                            packetcapture-igc0-20250318201715.pcap

                            Looks like my 3 cell connection doesn't support IPv6 so unable to test like that.

                            I am right with the LAN config tho, with it being tracked to the WAN?

                            3f208dd7-2dfe-42ff-b928-f037d9039d2c-image.png

                            JKnottJ 2 Replies Last reply Reply Quote 0
                            • JKnottJ
                              JKnott @F022Y
                              last edited by

                              @F022Y said in Lit Fibre (UK) IPv6 stopped after powercut:

                              Looks like my 3 cell connection doesn't support IPv6 so unable to test like that.

                              ????

                              IPv6 is mandatory for 4G & 5G, though some companies do a poor job with it for tethered devices. What happens if you do that IPv6 test from the phone?

                              PfSense running on Qotom mini PC
                              i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                              UniFi AC-Lite access point

                              I haven't lost my mind. It's around here...somewhere...

                              F022YF 1 Reply Last reply Reply Quote 0
                              • JKnottJ
                                JKnott @F022Y
                                last edited by

                                @F022Y

                                That packet capture shows you're pinging a link local address:

                                4c4d37d3-ed9b-42ff-800c-e29b5bb83438-image.png

                                Are you pinging the ISPs MAC on the WAN interface? Or something on your local LAN? Link local packets do not pass through a router, so it has to be something directly connected to whichever network you're on.

                                In that traceroute, I see 4 successful hops, then nothing. This could indicate a routing problem beyond that last one.

                                PfSense running on Qotom mini PC
                                i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                                UniFi AC-Lite access point

                                I haven't lost my mind. It's around here...somewhere...

                                1 Reply Last reply Reply Quote 0
                                • F022YF
                                  F022Y @JKnott
                                  last edited by

                                  @JKnott android on 4G and any attempts to ping or routetrace bbc.co.uk it defaults to IPv4.

                                  33d16491-0a6c-4f77-be29-08ad6175c512-image.png

                                  e06e1778-df60-44ae-b9ba-ce7be224f7f5-image.png

                                  Address i'm pinging is either bbc or netgate i'll do another now pinging bbc.co.uk...........

                                  Just for giggles i've done 2 for comparison.

                                  Capture the LAN port
                                  packetcapture-igc0-20250318212104.pcap

                                  Capture the WAN port
                                  packetcapture-igc1-20250318211922.pcap

                                  JKnottJ 1 Reply Last reply Reply Quote 0
                                  • JKnottJ
                                    JKnott @F022Y
                                    last edited by

                                    @F022Y said in Lit Fibre (UK) IPv6 stopped after powercut:

                                    android on 4G and any attempts to ping or routetrace bbc.co.uk it defaults to IPv4.

                                    Try test-ipv6.com. You should have IPv6 with 4G. However, your cell company may be preventing tethering from working.

                                    Also, you should be trying this when connected to the cell network and not your WiFi, as the pfSense problem would affect it too.

                                    PfSense running on Qotom mini PC
                                    i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                                    UniFi AC-Lite access point

                                    I haven't lost my mind. It's around here...somewhere...

                                    F022YF 1 Reply Last reply Reply Quote 0
                                    • F022YF
                                      F022Y @JKnott
                                      last edited by F022Y

                                      @JKnott just tested, WiFi off and still not playing

                                      Image doesn't want to appear so I'll share when back on desktop.

                                      441aaedb-d9b9-409e-b97c-046219ae56dc-image.png alt text

                                      GertjanG JKnottJ 2 Replies Last reply Reply Quote 0
                                      • GertjanG
                                        Gertjan @F022Y
                                        last edited by

                                        @F022Y

                                        Wow, that's imho quiet unique : an Phone 4G/5G ISP without IPv6 ... ?

                                        What does this mean :

                                        ee58656c-1cf0-409e-8c8f-31b4858e1751-image.png

                                        as I always considered that "test-ipv6.com" is clean and exempt of publicity or other stiff.

                                        No "help me" PM's please. Use the forum, the community will thank you.
                                        Edit : and where are the logs ??

                                        F022YF 1 Reply Last reply Reply Quote 0
                                        • F022YF
                                          F022Y @Gertjan
                                          last edited by

                                          @Gertjan it's brave browser so the left icon is that the the inbuilt "shields" are active the right one is Brave rewards.

                                          GertjanG 1 Reply Last reply Reply Quote 0
                                          • GertjanG
                                            Gertjan @F022Y
                                            last edited by Gertjan

                                            @F022Y

                                            Yeah, get that
                                            And why the red triangle with the warning ?
                                            "test-ipv6.com is script based, and the script ... tests the IPv6 capabilities. If something failed, it shows you are IPv4 only, and maybe this isn't the case.

                                            I find it still hard to believe yo use a phone connection without IPv6 ... There are no free IPv6 IPv4 ! left, no where, and people didn't stop buying phones, so IPv6 isn't really an option these days.

                                            Are you sure IPv6 isn't disabled in your phone ? Just asking, as I don't recognize what phone OS you are using, it doesn't look like mine.

                                            No "help me" PM's please. Use the forum, the community will thank you.
                                            Edit : and where are the logs ??

                                            F022YF 1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.