• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

IPv6 ULA Router Advertisement not working on GUESTS interface with VLAN

Scheduled Pinned Locked Moved IPv6
ipv6ulaunifivlan
23 Posts 5 Posters 4.9k Views 4 Watching
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • J Online
    johnpoz LAYER 8 Global Moderator
    last edited by Apr 10, 2019, 10:30 AM

    yeah was going to say works here too, I just fired up a prefix from my /48 on HE on my guest vlan wifi..And works just fine!

    ipv6-nonula.png

    I could change that to a ula prefix, but don't see how it would matter.. If your saying you see the RA on your AP pfsense is sending them, etc..

    An intelligent man is sometimes forced to be drunk to spend time with his fools
    If you get confused: Listen to the Music Play
    Please don't Chat/PM me for help, unless mod related
    SG-4860 25.07.1 | Lab VMs 2.8.1, 25.07.1

    1 Reply Last reply Reply Quote 0
    • S Offline
      stb
      last edited by Apr 10, 2019, 10:34 AM

      Ok, thanks ... so over to the Unifi forums then ...

      1 Reply Last reply Reply Quote 0
      • N Offline
        NogBadTheBad
        last edited by NogBadTheBad Apr 10, 2019, 10:44 AM Apr 10, 2019, 10:36 AM

        @stb said in IPv6 ULA Router Advertisement not working on GUESTS interface with VLAN:

        s our ISP is IPv4 only, we did not have IPv6 configured at all. Now we want to use IPv6 internally using ULAs. We configured two randomly generated static IPv6 fdxx/48 addresses in the LAN and the GUESTS interface. Then we configured the respective Router Advertisements (mode unmanaged) using a /64 subnet of the /48 prefix of the interfaces (for LAN and GUESTS respectively).
        While it works for the LAN network (even Wifi!) and clients do get IPv6 ULAs assigned (even DNS server is handed out), it does not work on the GUESTS network. Both interfaces have their respective IPv6 address assigned (verified via web and console).
        When looking at the generated /var/etc/radvd.conf of the running radvd process, the two entries for LAN and GUESTS look identical (except of course for the different IPv6 address prefixes). While the one for LAN works, the one for GUESTS does not.
        Firewall rules for GUESTS only have restriction for LAN access, but otherwise, everything is allowed.
        I'm puzzled as how to debug further whether the problem is on the firewall rules (which however work for IPv4), the VLAN configuration (which however works for IPv4), the Unifi Controller configuration (which however works for IPv4) ... any hint on what to check and what to debug are very much appreciated.
        Greetings,

        @stb

        Are you using the Ubiquity Guest Policy settings ?

        Andy

        1 x Netgate SG-4860 - 3 x Linksys LGS308P - 1 x Aruba InstantOn AP22

        G 1 Reply Last reply Apr 10, 2019, 10:49 AM Reply Quote 1
        • J Online
          johnpoz LAYER 8 Global Moderator
          last edited by Apr 10, 2019, 10:43 AM

          So just fired up ula...

          Set my one vlan to eab5 prefix, then another interface on pfsense to the eab6 prefix, and bing bang zoom pinging the other prefix from my phone on the eab5

          ulaworking.jpg

          An intelligent man is sometimes forced to be drunk to spend time with his fools
          If you get confused: Listen to the Music Play
          Please don't Chat/PM me for help, unless mod related
          SG-4860 25.07.1 | Lab VMs 2.8.1, 25.07.1

          1 Reply Last reply Reply Quote 0
          • G Offline
            Grimson Banned @NogBadTheBad
            last edited by Apr 10, 2019, 10:49 AM

            @NogBadTheBad said in IPv6 ULA Router Advertisement not working on GUESTS interface with VLAN:

            Are you using the Ubiquity Guest Policy settings ?

            Most likely, and with the slowness of UBNT when it comes to supporting IPv6 I wouldn't be surprised if that blocks RAs completely.

            N 1 Reply Last reply Apr 10, 2019, 10:52 AM Reply Quote 2
            • N Offline
              NogBadTheBad @Grimson
              last edited by Apr 10, 2019, 10:52 AM

              @Grimson said in IPv6 ULA Router Advertisement not working on GUESTS interface with VLAN:

              @NogBadTheBad said in IPv6 ULA Router Advertisement not working on GUESTS interface with VLAN:

              Are you using the Ubiquity Guest Policy settings ?

              Most likely, and with the slowness of UBNT when it comes to supporting IPv6 I wouldn't be surprised if that blocks RAs completely.

              IPv6 doesn't work if you tick the Guest Policy setting, so he'll need to create a preshared key or enable captive portal on the Guest interface in pfSense.

              Andy

              1 x Netgate SG-4860 - 3 x Linksys LGS308P - 1 x Aruba InstantOn AP22

              1 Reply Last reply Reply Quote 1
              • J Online
                johnpoz LAYER 8 Global Moderator
                last edited by Apr 10, 2019, 10:56 AM

                I don't see a way to add ipv6 networks even in the guest control section.. But I asked when this thread first started if using guest.. Should of been more clear vs asking if using captive portal... But why would you have guest policy on if not using portal, etc.

                But that for sure could be his problem.

                An intelligent man is sometimes forced to be drunk to spend time with his fools
                If you get confused: Listen to the Music Play
                Please don't Chat/PM me for help, unless mod related
                SG-4860 25.07.1 | Lab VMs 2.8.1, 25.07.1

                1 Reply Last reply Reply Quote 0
                • S Offline
                  stb
                  last edited by Apr 10, 2019, 11:32 AM

                  Thanks a lot! That's it! The "Guest Policy" checkbox in the Unifi Wireless Networking section was the issue after all!

                  Sorry for not having been more explicit ... I really thought you were asking for a Guest Captive Portal not being accessible via IPv6.

                  Anyway, thanks to all of you for your continuing support and help!

                  1 Reply Last reply Reply Quote 0
                  • J Online
                    johnpoz LAYER 8 Global Moderator
                    last edited by Apr 10, 2019, 1:28 PM

                    So looking at the new 5.11.10 release, looks like they have added ipv6?

                    from 5.11.5 in the release notes?
                    Add subnet for IPv6 networks in Networks Table.

                    I am currently running 5.10.21 which is not viable direct upgrade.. So can not test for sure until I get on 5.11.10, but you might want to try 5.11.10 if you want ipv6 with guest policy enable. But not captive portal.

                    An intelligent man is sometimes forced to be drunk to spend time with his fools
                    If you get confused: Listen to the Music Play
                    Please don't Chat/PM me for help, unless mod related
                    SG-4860 25.07.1 | Lab VMs 2.8.1, 25.07.1

                    P 1 Reply Last reply Nov 6, 2024, 1:49 PM Reply Quote 0
                    • P Offline
                      pooperman @johnpoz
                      last edited by Nov 6, 2024, 1:49 PM

                      For anyone finding this in 2024, I had to enable "Multicast Enhancement" for the Unifi Wifi network AND I had to disable Hotspot 2.0. Only then did the Router Advertisements flow down to wifi clients. I was sitting in wireshark on a MacOS 14.6 laptop client and suddenly there was a flurry of traffic.

                      Pro-tip: You may have to wait for the RA interval for the Unifi change to make a difference. Default is 200 seconds, you can change this in the RA Server settings. I set mine to 10 seconds then clicked the button to restart the RA server.

                      This worked!

                      Screenshot 2024-11-06 084436.png

                      Screenshot 2024-11-06 084835.png

                      1 Reply Last reply Reply Quote 0
                      • First post
                        Last post
                      Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
                        [[user:consent.lead]]
                        [[user:consent.not_received]]