Loosing IPV6 connectivity after 1 hour with HG8245Q2 (OI Firmware)

JKnott

Can you post the entire capture or at least the part where it changes? I'd like to see what happens when it changes from one to the other. I have a saved capture which shows only link local addresses, as I expected. I have no idea why a global address is used as link local should be good enough to reach the DHCP server or relay.

Do you have anything in the Advanced DHCP6 Client Configuration?

Katan

This is what a have on hand.

Link-local.zip
Global.zip

I´m not so sure now.
did a release and renew and after some time it´s using the link-local address, but no answer...

Starting to loose my sanity here.

Edit:
Nothing in Advanced DHCP6 Client Configuration .

Edit.
@JKnott
As requested. Source IP Change.7z

JKnott

@Katan

Those files don't appear to contain DHCPv6. To capture it, filter on protocol 546. That will capture only DHCPv6 packets. You apparently captured it properly in the captures above.

Also, there's no need to zip those files, unless you're still using a dial up modem.

Katan

@JKnott

Strange, just opened the file.

Edit:
A capture from the windows laptop, that just works.
Laptop Dhcpv6.pcapng

have the full capture if needed.

JKnott

@Katan said in Loosing IPV6 connectivity after 1 hour with HG8245Q2 (OI Firmware):

Strange, just opened the file.

Did you check the one you posted on the site? I don't see any DHCPv6 in it. Here's what I see with your Source IP Change file.

Katan

@JKnott
Yes, the same one.
anyway, here is the file with just DHCPV6.
Source IP Change Dhcpv6.pcapng

JKnott

@Katan

A couple of things. The address changes when it goes from using request to renew. Also, that happens after only a minute or so, which seems fast. I haven't ever seen DHCP, on either IPv4 or IPv6 do something that fast. I tried to monitor my connection over night, but Packet Capture timed out. I'll have to try again with my managed switch.

Katan

@JKnott

Are you sure it´s just a minute, looking on the column time it shows 30 minutes to me (it took about 30 minutes to issue the RENEW during capture, as I was waiting for it to stop capturing).

It´s a 3600s lease.

JKnott

@JKnott

I have been running Wireshark between my firewall and cable modem and have noticed some differences. For example on yours, you go through several solicit/advertise frames, when the normal process is solicit/advertise/request/reply. Then you get one request/reply and then a bunch of renews. On my system, I just get a single solicit/advertise/request/reply sequence and there has been nothing else for 20 minutes so far. Also, both your preferred and valid lifetimes are 3600 seconds, whereas mine are 148853 and 580853. So, I would expect a renewal attempt at just over 43 hours, not 1 as you have. I'll leave my test config up for the rest of the day, but I doubt I'll see anything, given that 43 hour wait for the next request.

Incidentally, the way I'm monitoring this is through a "data tap" or "network tap" I made with a 5 port managed switch. I placed it between my pfSense firewall and cable modem and use a notebook computer, running Wireshark to capture the traffic.

Here's the instructions I posted for making one:
Creating a "data tap"

JKnott

@Katan said in Loosing IPV6 connectivity after 1 hour with HG8245Q2 (OI Firmware):

It´s a 3600s lease.

Take a look at the times in Wireshark. Everything there happened in a half hour.

Katan

@JKnott
Unfortunatly, I only have a 24 port procurve switch that is on the lan side.

JKnott

@Katan

Still, Packet Capture showed what was happening on the WAN side and it doesn't look right to me. I just glanced at the computer where I'm running Wireshark and still haven't seen anything happening in over an hour.

Also, those 5 port managed switches are cheap. I keep mine in my computer bag, so that it will be handy when I need it. It's just part of my toolkit, along with my Ethernet cable tester and punch tools.

JKnott

@JKnott

One other thing I've noticed. You're requesting and receiving a /64 prefix. Is that all your ISP provides? It shouldn't cause a problem though.

Katan

@JKnott said in Loosing IPV6 connectivity after 1 hour with HG8245Q2 (OI Firmware):

@JKnott

One other thing I've noticed. You're requesting and receiving a /64 prefix. Is that all your ISP provides? It shouldn't cause a problem though.

They provide a /56, but for their router, and it delegates in turn /64 prefixes.
Unfortunetly it does not have the option to run as bridge (at least with the user provided with the router).

For IPv4 I have to live with a double NAT.

JKnott

@Katan

????

How are you getting a prefix for your LAN? That's normally done with DHCPv6-PD, but that's generally not provided by gateways.

However, that might explain the strange things in your packet capture. Your prefix is 2804:d57:4b04:6200::. Is your WAN address within that range?

Katan

@JKnott
just restarted the firewall.

the "OI" is my wan in this case

Katan

@JKnott

Changed some settings at the gateway and now got this

But still lost connectivity after the lease expires...
The same on the capture, no responde to RENEW, REBIND and SOLICIT after the interface is UP.

JKnott

@Katan said in Loosing IPV6 connectivity after 1 hour with HG8245Q2 (OI Firmware):

But still lost connectivity after the lease expires...

That's because something strange is happening when those renews start. I haven't seen those before but, then again, I haven't looked. I've been leaving my notebook running Wireshark all day and having seen anything since the original DHCP sequence when I rebooted my firewall this morning. I expect I'll see something happen in the middle of the night tomorrow. As I mentioned, Packet Capture times out long before that, so I have to use my "data tap" and notebook computer to watch for that. What's the lease time for IPv4 DHCP? One hour seems short.

JKnott

@JKnott

I just got something a little over a half hour ago. I see 2 renews and 2 replies, all within about 1/10 second, with both the renews and replies using my link local address.

Katan

@JKnott

I changed last night the gateway from OPT1 to WAN port (mvneta1 to mvneta2) and the dhcp client seem to be working on this port, dhcpv6 is using link-local address and is getting responses for SOLICIT and RENEW at least, without restarting the interface.

Looks like it´s something related to the OPT1 port.

now the computers no LAN side get a global IP of the provided prefix, but does not have connectivity.