IPv6 address allocated but not working
-
@pankaj13 ,
I've been playing with my BGW210-700 to test and learn IPv6 on my home network. My service has IPv4 static subnet, but IPv6 is dynamic.
When looking at your screenshot, without seen the subnet on your v6 address, I don't know if you were receiving different /64 subnets on not.
In my case, when looking the RG, I see a /64 address, so configured my pf WAN to DHCP6 and let the delegation at /64. tracking my LAN IPv6 to the WAN, I get an IPv6 address and all my devices behind the LAN are also getting their IPs and able to surf no problem.
The WAN is getting a IPv6 address of xxx:xxx:xxx:2d80:xxx:xxx:xxx:xxx and the LAN a xxx:xxx:xxx:2d8f:xxx:xxx:xxx:xxx, the last subnet on that /60 range. I've tried to request different delegations from the ISP, but always get the same subnet and the LAN IPv6 breaks (no IPv6 IP is obtained).
To stop playing with my production pf, I just created a VM, connected it's WAN to the RG, and the LAN was assigned to another switch. When looking at the assignments, I see the WAN on the same subnet, 2d80, but the LAN now is on 2dge.
That 2d80 is the RG Global Unicast: Global Unicast IPv6 Address XXX:XXX:XXX:2d80::1
IPv6 Addressing Subnet (including length) XXX:XXX:XXX:2d80::/64
And now I see:IPv6 Delegated Prefix Subnet (including length) XXX:XXX:XXX:2d8e::/64 , XXX:XXX:XXX:2d8f::/64, listed in the RG network status.
All working fine, by the way. Just trying to find out how to force the ISP to delegate the multiple /64 that I think are available ... at least 16 of them :)
Just as info.
-
@amello said in IPv6 address allocated but not working:
All working fine, by the way. Just trying to find out how to force the ISP to delegate the multiple /64 that I think are available ... at least 16 of them :)
On the WAN page, you can select the number of /64s in the DHCPv6 Prefix Delegation size box. Also, you probably also want to enable Do not allow PD/Address release, so that your prefix doesn't change.
-
Hi @JKnott
On my WAN configuration I see, under DHCP6 configuration: DHCPv6 Prefix Delegation size, set to /64, do you mean change it to /60 or something like that? I've tried that with no avail, if that's what you mean.
Enabling Do not allow PD/Address release so won't change IPs, thanks for the tip.
-
That Prefix Delegation size refers to the size of the address block you get from the ISP. I get a /56, so I select 56. If your ISP provides 16 /64s, you'd select 60 for the prefix size. Then, on the LAN side, for each interface, you use IPv6 Prefix ID to select which of the /64s you want to use for that interface. If only /64 works for Prefix Delegation, then that's all you're getting from the ISP. By "no avail" do you mean you see no difference? Or it stops working? As I mentioned, you need to use both those settings to make use of multiple /64s.
-
Yes, I've tried setting my prefix delegation size to /60. The WAN gets an IPv6, but the tracking LAN won't.
I don't know what the ISP provide. With two pf connected to the same ISP router, I get the same IPV6 on the WAN and two different IPv6 on the tracking LANs. They seem to be on different /64 subnets, as the WANs gets a 2d80 and the LANs get 2d8e and 2d8f, on the 4th quibble
Looking at this I think those three subnets are part of a /60 (xxx:xxx:xxx:2d8::/60).
I might need to play a little, setting some interfaces for opt1 and opt2 to a static IPv6 using 2d8d and 2d8c subnets, with the clients on matching IPv6 subnets, and see what would happen.
-
With two pf connected to the same ISP router
Do you have another router between you and the ISP? I asked about this earlier If so, you won't get any IPv6 addresses on the LAN side of pfSense. For pfSense to work properly, the modem MUST be in bridge mode.
Once you've done that, you should be getting a prefix on the LAN side.
Post the prefixes for the LAN side here, so we can see what you're getting.
Have you asked on the AT&T forums to find out what's provided?
-
@JKnott said in IPv6 address allocated but not working:
Do you have another router between you and the ISP?
Yes, as stated on my first post above, a BGW210-700.
@JKnott said in IPv6 address allocated but not working:
For pfSense to work properly, the modem MUST be in bridge mode.
I don't know of anyway to bridge that device and could lose my IPv4 static subnet with that.
@JKnott said in IPv6 address allocated but not working:
Have you asked on the AT&T forums to find out what's provided?
In fact, just got the information. The device has 16 LAN /64 subnets available:
The first used for LAN-device IP address assignment using SLAAC and DHCPv6
and the others for cascade routers using Prefix Delegation.The only way to do what I want is, to your point, let pf handles everything, from authentication to delegation, and that's not possible, with the type of service I get. Maybe with fiber ...
Thanks again for your replies.
-
@amello said in IPv6 address allocated but not working:
The only way to do what I want is, to your point, let pf handles everything, from authentication to delegation, and that's not possible, with the type of service I get. Maybe with fiber ...
Maybe you should be asking in the AT&T forums about this. I don't know what sort of service you have, but I'm on a cable modem. In gateway mode, my modem provides a single /64. In bridge mode, with pfSense, I get up to 256 /64s. I suspect what you want is available. You just have to find out how. For example, why do you think your modem can't be placed in bridge mode?
-
Again thanks for your reply.
@JKnott said in IPv6 address allocated but not working:
Maybe you should be asking in the AT&T forums about this.
I was talking with some at&t guys about it today, but will expand to the forum.
@JKnott said in IPv6 address allocated but not working:
I don't know what sort of service you have
It is u-verse, so DSL on dry line.
@JKnott said in IPv6 address allocated but not working:
I suspect what you want is available.
It is, but not with that router.
@JKnott said in IPv6 address allocated but not working:
why do you think your modem can't be placed in bridge mode?
For what I read so far. It seems that that Aris can handle IP Passthrough and Default Server, and as I understood the latter is like putting a host in DMZ.
For now I'm keeping my LAN on IPv6 and the other interfaces on IPv4.
Thanks again for all your help!
-
@amello said in IPv6 address allocated but not working:
It is u-verse, so DSL on dry line.
A couple of my friends have ADSL and get IPv6. I don't know the details though.
For what I read so far. It seems that that Aris can handle IP Passthrough and Default Server, and as I understood the latter is like putting a host in DMZ.
Perhaps the people in the forums can help with that.