Lit Fibre (UK) IPv6 stopped after powercut

F022Y

Apologies i followed this:-

The pfsense box is down next to the ONT so by the time i got down and back up my PC had fallen asleep so assume UDP part was cleared

JKnott

@F022Y said in Lit Fibre (UK) IPv6 stopped after powercut:

Apologies i followed this:-

Including the instructions about the UDP port to filter on? By filtering on UDP port 546 or 547, doesn't matter which, you would have captured only the DHCPv6 packets.

Here's one I did a while ago. You'll see it contains only the 4 DHCPv6 packets and nothing else.

F022Y

So spoke to soon as it stopped again after scheduled maintence at 2am UTC today so ran through the advise you guys gave again.

Again after halting the system removing WAN cable booting up setting the following:-

Upon plugging the WAN cable back in IPv6 works again, as i'm in the middle of CDM upgrades on a rubrik cluster can't spend to much time poking.

Going to leave it overnight to check as another maintenance and see what happens.

@JKnott I know what i did wrong last time and will make sure not to repeat, now i assume the captured port is WAN? Just want to double check.

JKnott

@F022Y said in Lit Fibre (UK) IPv6 stopped after powercut:

I know what i did wrong last time and will make sure not to repeat, now i assume the captured port is WAN? Just want to double check.

Yes, that is correct. When you filter on those UDP ports, you will have 4 packets captured. You can look at the capture file with Wireshark, as I demonstrated with a screen capture.

Was that scheduled maintenance yours or your ISPs?

BTW, DHCP6 works exactly like DHCP4, with the solicit, advertise, request and reply packets. However, once that's completed, then the LAN prefix has to be obtained from the reply packet and applied to the LAN. There is nothing comparable to that in IPv4.

F022Y

It was ISP based, due to merging networks with their new owners CityFibre.

I do appreciate the assist.

F022Y

It died again, this time no IPv6 at all

packetcapture-igc0-20250318162548.pcap

JKnott

@F022Y said in Lit Fibre (UK) IPv6 stopped after powercut:

about 2 hours ago

It died again, this time no IPv6 at all

Here's what the reply packet shows:

The IA address should be the WAN interface address and the prefix address is your LAN prefix. Are you saying you're not seeing either of those? I also see you're getting a /48 prefix size. Nice you can get one that big. I only have a /56.

F022Y

Just logged back into pfsense after grabbing that pcap and the interface shows connections.

JKnott

@F022Y

Are you seeing the IPv6 pings leave your network? Perhaps there's a routing issue from your ISP. You can see the pings in packet capture, by filtering on ICMP6. You should see both the request and reply in the capture. What happens if you ping something closer than netgate? One thing you can do is traceroute to netgate or other and see how far it goes. Given the ISP is doing stuff, bad routes are a definite possibility.

You might also try this by tethering to a cell phone and seeing if you get the same results there. If the cell connection works, you can see if your pings can reach it from your Lit Fibre connection. You may want to use Wireshark on the computer tethered to the phone.

F022Y

Nope nothing.

packetcapture-igc0-20250318201715.pcap

Looks like my 3 cell connection doesn't support IPv6 so unable to test like that.

I am right with the LAN config tho, with it being tracked to the WAN?

JKnott

@F022Y said in Lit Fibre (UK) IPv6 stopped after powercut:

Looks like my 3 cell connection doesn't support IPv6 so unable to test like that.

????

IPv6 is mandatory for 4G & 5G, though some companies do a poor job with it for tethered devices. What happens if you do that IPv6 test from the phone?

JKnott

@F022Y

That packet capture shows you're pinging a link local address:

Are you pinging the ISPs MAC on the WAN interface? Or something on your local LAN? Link local packets do not pass through a router, so it has to be something directly connected to whichever network you're on.

In that traceroute, I see 4 successful hops, then nothing. This could indicate a routing problem beyond that last one.

F022Y

@JKnott android on 4G and any attempts to ping or routetrace bbc.co.uk it defaults to IPv4.

Address i'm pinging is either bbc or netgate i'll do another now pinging bbc.co.uk...........

Just for giggles i've done 2 for comparison.

Capture the LAN port
packetcapture-igc0-20250318212104.pcap

Capture the WAN port
packetcapture-igc1-20250318211922.pcap

JKnott

@F022Y said in Lit Fibre (UK) IPv6 stopped after powercut:

android on 4G and any attempts to ping or routetrace bbc.co.uk it defaults to IPv4.

Try test-ipv6.com. You should have IPv6 with 4G. However, your cell company may be preventing tethering from working.

Also, you should be trying this when connected to the cell network and not your WiFi, as the pfSense problem would affect it too.

F022Y

@JKnott just tested, WiFi off and still not playing

Image doesn't want to appear so I'll share when back on desktop.

alt text

Gertjan

@F022Y

Wow, that's imho quiet unique : an Phone 4G/5G ISP without IPv6 ... ?

What does this mean :

as I always considered that "test-ipv6.com" is clean and exempt of publicity or other stiff.

F022Y

@Gertjan it's brave browser so the left icon is that the the inbuilt "shields" are active the right one is Brave rewards.

Gertjan

@F022Y

Yeah, get that
And why the red triangle with the warning ?
"test-ipv6.com is script based, and the script ... tests the IPv6 capabilities. If something failed, it shows you are IPv4 only, and maybe this isn't the case.

I find it still hard to believe yo use a phone connection without IPv6 ... There are no free ~~IPv6~~ IPv4 ! left, no where, and people didn't stop buying phones, so IPv6 isn't really an option these days.

Are you sure IPv6 isn't disabled in your phone ? Just asking, as I don't recognize what phone OS you are using, it doesn't look like mine.

F022Y

@Gertjan sorry not following.

The right icon, the triangle is brave rewards so the warning is that brave rewards is not contributing to the page.

"I find it still hard to believe yo use a phone connection without IPv6 ... There are no free IPv6 left, no where, and people didn't stop buying phones, so IPv6 isn't really an option these days."

I presume you meant IPv4 here?

As for phone OS, bog standard Android 15 with March security patches on a pixel 9 pro and ipv6 is enabled as test-ipv6.com worked fine when fibre service was.

Gertjan

@F022Y said in Lit Fibre (UK) IPv6 stopped after powercut:

I presume you meant IPv4 here?

Great, yeah, you're right.

edit : your phone OS seems recent.
So it's your "phone data carrier ISP" ....
Very soon, they will have IPv6 - or leave the market.