IPv6 Tracking Interfaces Lose IPv6 Address

JKnott

@johnpoz said in IPv6 Tracking Interfaces Lose IPv6 Address:

From just geographic distance you would think Miami would be better than NY ;)

But perhaps not the telecom distance. There are certain cities where the international carriers appear and the local carriers meet them there. However, this map shows more fibre going from Brazil to Florida than NYC.

BTW, many years ago, when I was working for a telecom carrier, I often worked with some of the international carriers in Toronto, in the same building where he.net is.

johnpoz

@jknott said in IPv6 Tracking Interfaces Lose IPv6 Address:

Why do you have your WiFi on a separate network

Because he wants it that way ;)

I have my trusted wifi on my lan network.. But it uses eap-tls to auth.. And only "my" devices (phone, tablet) can connect. But all of my other wifi networks are on their own vlan.. Guest being 1 of them, but also 2 more for iot and media devices (roku, etc.)

mcury

WIFI is separated from my LAN due to pfblockerng, I was filtering only my LAN network, and leaving WIFI without any filtering..

I also have a personal NAS , which I don't let WIFI users to reach it.. Only port 32400 is allowed for Plex access.

Unfortunately Guest network (VLAN20) is disabled since a long time..
Back in the days before the pandemic I used to make a barbecue with friends once a week and they used the GUEST WIFI, hope those days come back..

If I receive friends today, they will have WPA3, and IPv6 hehe :)
Using a nanohd to split the wifi networks in VLANs

johnpoz

@mcury said in IPv6 Tracking Interfaces Lose IPv6 Address:

they will have WPA3

Something I ran into - maybe it would effect you. I had turned my guest ssid to wpa3 only.. This broke the qr code I had printed on cards for guest to use. If manually added the network it worked just fine.

I had to enable transition mode where wpa2 was on the same ssid.. If your device is wpa3 capable it says it uses that via what my phone says (developer profile on iphone).. But when it was wpa3 only - the qr code would not work, unable to join network.

Just in case you might be doing the same sort of thing with qr codes.. Friends don't like typing in 20+ character psks ;) hehehe

mcury

hmm, nice to know, I didn't test the QR code feature yet, usually I give them the password in the old way, old school password share :)

johnpoz

Yeah I started a thread over on their forums about it

https://community.ui.com/questions/wpa3-qr-code-generation/538e4658-37e7-46a3-882d-ec46ad722744

It's gotten a few responses - but no actual solution.

JKnott

@johnpoz

I guess you'll have to show your guests the QR code on your phone or print new cards.

The password for my main WiFi is 63 random characters, from www.grc.com, but my guest WiFi is only 10. My Sharp Roku TV is on the guest WiFi, because it won't accept 63 characters (try entering that using the TV remote!).

JKnott

@mcury said in IPv6 Tracking Interfaces Lose IPv6 Address:

usually I give them the password in the old way, old school password share :)

Sticky notes?

johnpoz

No I don't think its that - I don't think there is anything in place currently for qr codes and wpa3..

As I said, I just enabled both wpa2 and wpa3 on the ssid and it works, and the phone shows its using wpa3..

I wish it was as simple as just creating a new qr code.. If you know somewhere or app that create such a qr.. Please share.

mcury

@johnpoz

It is a pretty recent thread, two days, maybe it will be fixed in the next release

@JKnott

Yes kkkkkk, sticky notes with beer stain :)

johnpoz

I don't think its really anything to do with the AP firmware.. So I don't think they will be able to fix it.. From what a few were saying has to do with the different auth that wpa3 uses..

Not sure - have not dug that deep into yet. I was really hoping to just have guest be limited to wpa3.. But I will live with this compromise.. Just thought give you a heads up if you were doing the same thing.. And you had friends come over - and you get hey this qr code thing isn't working ;)