Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    TWC IPV6 gateway issues

    Scheduled Pinned Locked Moved IPv6
    13 Posts 7 Posters 15.0k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • DerelictD
      Derelict LAYER 8 Netgate
      last edited by 

      
ifconfig
eth1      Link encap:Ethernet  HWaddr 0c:c4:7a:08:72:5b
          inet addr:192.168.1.9  Bcast:192.168.1.255  Mask:255.255.255.0
          inet6 addr: fe80::ec4:7aff:fe08:725b/64 Scope:Link
          inet6 addr: 2605:e000:1417:4136::2000/128 Scope:Global
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:26307431 errors:0 dropped:0 overruns:0 frame:0
          TX packets:11549255 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:38061911039 (38.0 GB)  TX bytes:3417802752 (3.4 GB)
          Interrupt:20 Memory:df400000-df420000

      Seems like your ubuntu should have 2605:e000:1417:4136::2000/64, not /128. All of the IPv6 addresses on the workstation I'm on now (a mac) are prefixlen 64.  but I don't know if it's necessary.  Seems like unless that /128 is specifically routed to that interface by something it'd be pretty useless.

      Chattanooga, Tennessee, USA
      A comprehensive network diagram is worth 10,000 words and 15 conference calls.
      DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
      Do Not Chat For Help! NO_WAN_EGRESS(TM)

      1 Reply Last reply Reply Quote 0
      • C
        chaunbot
        last edited by

        @Derelict:

        
ifconfig
eth1      Link encap:Ethernet  HWaddr 0c:c4:7a:08:72:5b
          inet addr:192.168.1.9  Bcast:192.168.1.255  Mask:255.255.255.0
          inet6 addr: fe80::ec4:7aff:fe08:725b/64 Scope:Link
          inet6 addr: 2605:e000:1417:4136::2000/128 Scope:Global
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:26307431 errors:0 dropped:0 overruns:0 frame:0
          TX packets:11549255 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:38061911039 (38.0 GB)  TX bytes:3417802752 (3.4 GB)
          Interrupt:20 Memory:df400000-df420000

        Seems like your ubuntu should have 2605:e000:1417:4136::2000/64, not /128. All of the IPv6 addresses on the workstation I'm on now (a mac) are prefixlen 64.  but I don't know if it's necessary.  Seems like unless that /128 is specifically routed to that interface by something it'd be pretty useless.

        Something is wrong with the gateways.

        it doesn't even have a route for ipv6 (ubuntu or windows)

        route
        Kernel IP routing table
        Destination    Gateway        Genmask        Flags Metric Ref    Use Iface
        default        router.os6.org  0.0.0.0        UG    0      0        0 eth1
        192.168.1.0    *              255.255.255.0  U    1      0        0 eth1
        192.168.122.0  *              255.255.255.0  U    0      0        0 virbr0

        1 Reply Last reply Reply Quote 0
        • H
          hda
          last edited by

          @chaunbot:

          … Something is wrong with the gateways.
          it doesn't even have a route for ipv6 (ubuntu or windows)

          To where from WAN do you request an IPv6? i.e. ISP, other router with a prefix 'smaller' than 64?

          Your WAN and LAN should each have a 128bits/64 IP number, not /128's.
          Proof is on the 'Status:Interfaces' page. Show us the page ?

          Your box on the LAN will get a 128 bit number.
          Tell us how or what method is used to get a box or PC (on the LAN) an IPv6 address.

          1 Reply Last reply Reply Quote 0
          • MikeV7896M
            MikeV7896
            last edited by

            @hda:

            Your WAN and LAN should each have a 128bits/64 IP number, not /128's.
            Proof is on the 'Status:Interfaces' page. Show us the page ?

            Your box on the LAN will get a 128 bit number.

            All I'll say here is not always will this be the case.

            I don't have TWC (Time Warner Cable) so I don't know how their IPv6 is set up, but on Comcast, I can actually run link-local only on the WAN side of my router. If I do request a WAN address, it's a /128, and the gateway is still link-local.

            On the LAN though, you're correct. The address should be a 128-bit /64 address from whatever prefix was delegated.

            The S in IOT stands for Security

            1 Reply Last reply Reply Quote 0
            • C
              Cino
              last edited by

              Looking at your WAN/LAN config… It looks correct.. But do you have DHCPv6 server running somehow? They way pfSense GUI configures the files, it doesn't allow DHCPv6 when using a track interface.

              Example of my WAN
              IPv6 Link Local fe80:❌x❌x%em3 
              IPv6 address 2604:2000:x:b0:x❌x:x
              Subnet mask IPv6 128
              Gateway IPv6 fe80::201:x❌x

              Example of my LAN
              IPv6 Link Local fe80::1:1%em2 
              IPv6 address 2604:2000:x❌x❌x:x
              Subnet mask IPv6 64

              From PC
              Default Gateway . . . . . . . . . : fe80::1:1%42
                                                            192.168.0.1

              by chance to you have a ipv6 tunnel setup before? If so, remove all configs for it and see if that helps... Also, have you rebooted your box? When I first setup IPv6 using TWC, I had to reboot my box.. release/renew clients and they were good

              1 Reply Last reply Reply Quote 0
              • C
                chaunbot
                last edited by

                These computers have never had ipv6. I had it going many moons ago and all these machines are on new installs. No tunnels have been setup.

                I ran wireshark and there are advertisements comming from the LAN side of pfsense. I also changed the prefix to /64 on pfsense and checked the prefix hint box. I've restarted pfsense and my win8 and ubuntu machines several times.

                Perhaps when i enabled ipv6 for the first time the machines on the lan were able to grab address. not sure : /

                Thanks for the help so far.



                @Cino:

                Looking at your WAN/LAN config… It looks correct.. But do you have DHCPv6 server running somehow? They way pfSense GUI configures the files, it doesn't allow DHCPv6 when using a track interface.

                Example of my WAN
                IPv6 Link Local fe80:❌x❌x%em3 
                IPv6 address 2604:2000:x:b0:x❌x:x
                Subnet mask IPv6 128
                Gateway IPv6 fe80::201:x❌x

                Example of my LAN
                IPv6 Link Local fe80::1:1%em2 
                IPv6 address 2604:2000:x❌x❌x:x
                Subnet mask IPv6 64

                From PC
                Default Gateway . . . . . . . . . : fe80::1:1%42
                                                              192.168.0.1

                by chance to you have a ipv6 tunnel setup before? If so, remove all configs for it and see if that helps... Also, have you rebooted your box? When I first setup IPv6 using TWC, I had to reboot my box.. release/renew clients and they were good

                1 Reply Last reply Reply Quote 0
                • C
                  chaunbot
                  last edited by

                  Ubuntu seems to be getting a /64 now.

                  ifconfig
                  eth1      Link encap:Ethernet  HWaddr 0c:c4:7a:08:72:5b 
                            inet addr:192.168.1.9  Bcast:192.168.1.255  Mask:255.255.255.0
                            inet6 addr: 2605:e000:1417:4136:ec4:7aff:fe08:725b/64 Scope:Global
                            inet6 addr: 2605:e000:1417:4136:7168:fb3c:e6b0:f62a/64 Scope:Global
                            inet6 addr: fe80::ec4:7aff:fe08:725b/64 Scope:Link
                            UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
                            RX packets:14879 errors:0 dropped:0 overruns:0 frame:0
                            TX packets:9985 errors:0 dropped:0 overruns:0 carrier:0
                            collisions:0 txqueuelen:1000
                            RX bytes:13197253 (13.1 MB)  TX bytes:2401732 (2.4 MB)
                            Interrupt:20 Memory:df400000-df420000

                  eth2      Link encap:Ethernet  HWaddr 0c:c4:7a:08:72:5a 
                            inet6 addr: 2605:e000:1417:4136:ec4:7aff:fe08:725a/64 Scope:Global
                            inet6 addr: fe80::ec4:7aff:fe08:725a/64 Scope:Link
                            inet6 addr: 2605:e000:1417:4136:b4b0:20f6:f59:8eea/64 Scope:Global
                            UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
                            RX packets:2219 errors:0 dropped:56 overruns:0 frame:0
                            TX packets:712 errors:0 dropped:0 overruns:0 carrier:0
                            collisions:0 txqueuelen:1000
                            RX bytes:538723 (538.7 KB)  TX bytes:74923 (74.9 KB)
                            Interrupt:16 Memory:df100000-df120000

                  lo        Link encap:Local Loopback 
                            inet addr:127.0.0.1  Mask:255.0.0.0
                            inet6 addr: ::1/128 Scope:Host
                            UP LOOPBACK RUNNING  MTU:65536  Metric:1
                            RX packets:1804 errors:0 dropped:0 overruns:0 frame:0
                            TX packets:1804 errors:0 dropped:0 overruns:0 carrier:0
                            collisions:0 txqueuelen:0
                            RX bytes:520367 (520.3 KB)  TX bytes:520367 (520.3 KB)

                  virbr0    Link encap:Ethernet  HWaddr c2:07:6f:46:6e:12 
                            inet addr:192.168.122.1  Bcast:192.168.122.255  Mask:255.255.255.0
                            UP BROADCAST MULTICAST  MTU:1500  Metric:1
                            RX packets:0 errors:0 dropped:0 overruns:0 frame:0
                            TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
                            collisions:0 txqueuelen:0
                            RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)

                  ubuntu ~ # ping6 ipv6.google.com
                  PING ipv6.google.com(2607:f8b0:4007:807::200e) 56 data bytes
                  ^C
                  –- ipv6.google.com ping statistics ---
                  4 packets transmitted, 0 received, 100% packet loss, time 2999ms

                  1 Reply Last reply Reply Quote 0
                  • C
                    chaunbot
                    last edited by

                    I guess im confused why pfsense thinks the locallink is the ipv6 gateway

                    1 Reply Last reply Reply Quote 0
                    • DerelictD
                      Derelict LAYER 8 Netgate
                      last edited by

                      It is OK to have local links as routers in IPv6.  In fact it's encouraged.  My workstation has a public IP assigned, but my IPv6 default gateway is the local-link of pfSense.  It disconnects the IPv6 subnets (of which there might be many assigned to one segment) from the router links.  It, in a way, creates a layer 2.5.

                      Chattanooga, Tennessee, USA
                      A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                      DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                      Do Not Chat For Help! NO_WAN_EGRESS(TM)

                      1 Reply Last reply Reply Quote 0
                      • H
                        hda
                        last edited by

                        @virgiliomi:

                        … If I do request a WAN address, it's a /128, and the gateway is still link-local.

                        Stand corrected. I found out (with FB7360 supplying pfSense) the WAN can work as a /128 or a /64, depending on config of the IP supply method. Yes here the gateway is a local address too.

                        1 Reply Last reply Reply Quote 0
                        • M
                          mrsunfire
                          last edited by

                          Anything new here?

                          Netgate 6100 MAX

                          1 Reply Last reply Reply Quote 0
                          • ivorI
                            ivor
                            last edited by

                            Do not revive old posts. Start a new one and state your issue.

                            Need help fast? Our support is available 24/7 https://www.netgate.com/support/

                            1 Reply Last reply Reply Quote 0
                            • First post
                              Last post
                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.