What can block IPv6 on the intranet?

senseivita · Jul 7, 2021, 5:14 PM

I set up a temporary firewall to test some weird remote connectivity issues with IPv6 but it won't lease addresses. I tried first using prefix delegation from my ISP and when it wouldn't work despite it telling me the ISP's gateway responded I got an address from HE.

I set up the thing, RA is managed, small DHCP range to ID it quickly: it still doesn't work.

On the interface there are zero states, zero bytes on IPv6:

The other site works fine, I SSHed into the firewall to test:

But the other side is tunneled so it doesn't really apply.

I think multicast might be involved but I'm not sure. What can prevent IPv6 from working at/on L2? [if there's something] Follow up: wouldn't whatever that might be blocking it block IPv6 traffic computer-to-computer too?

I had exported the filtered packets on a CSV but I opened it in so many apps one of them converted the tabs. I'll just paste it here.

### !tcp && !dns && !tls && !mdns && !nbns && !ssdp
No.     Time           src addr                src port dst addr                 dst port Protocol Length Info
      1 0.000000       Vitas-Workstation.local          66:d9:e7:92:d8:ad                 EAPOL    135    Key (Message 2 of 4)
      2 0.000223       66:d9:e7:92:d8:ad                Vitas-Workstation.local           EAPOL    113    Key (Message 1 of 4)
      3 0.001464       Vitas-Workstation.local          66:d9:e7:92:d8:ad                 EAPOL    113    Key (Message 4 of 4)
      4 0.001526       66:d9:e7:92:d8:ad                Vitas-Workstation.local           EAPOL    169    Key (Message 3 of 4)
      5 0.004193       Vitas-Workstation.local          VMware_83:bb:c7                   ARP      42     Who has 192.168.43.1? Tell 192.168.43.20
      6 0.004570       0.0.0.0               68         255.255.255.255          67       DHCP     342    DHCP Request  - Transaction ID 0x14b27395
      7 0.006864       VMware_83:bb:c7                  Vitas-Workstation.local           ARP      60     192.168.43.1 is at 00:50:56:83:bb:c7
      8 0.008537       192.168.43.1          67         Vitas-Workstation.local  68       DHCP     342    DHCP ACK      - Transaction ID 0x14b27395
      9 0.016406       ::                               ff02::1:ffc7:aeb8                 ICMPv6   86     Neighbor Solicitation for fe80::1435:e968:37c7:aeb8
     10 0.017612       Vitas-Workstation.local          ff02::2                           ICMPv6   62     Router Solicitation
     11 0.019971       Vitas-Workstation.local          Broadcast                         ARP      42     ARP Announcement for 192.168.43.20
     16 0.129352       Vitas-Workstation.local          Broadcast                         ARP      42     Who has 192.168.43.1? Tell 192.168.43.20
     19 0.130468       VMware_83:bb:c7                  Vitas-Workstation.local           ARP      60     192.168.43.1 is at 00:50:56:83:bb:c7
     94 0.381717       Vitas-Workstation.local 5353     192.168.43.1             5351     NAT-PMP  44     External Address Request
    101 0.400845       Vitas-Workstation.local 3283     zx5.vitanetworks.link    3283     UDP      56     3283 → 3283 Len=14
    169 0.604924       Vitas-Workstation.local 53       192.168.43.1             52567    ICMP     70     Destination unreachable (Port unreachable)
    174 0.631751       Vitas-Workstation.local 5353     192.168.43.1             5351     PCP v2   102    Map Request
    178 0.633081       Vitas-Workstation.local 53       192.168.43.1             63847    ICMP     70     Destination unreachable (Port unreachable)
    183 0.661491       Vitas-Workstation.local 53       192.168.43.1             63976    ICMP     70     Destination unreachable (Port unreachable)
    185 0.696880       Vitas-Workstation.local 53       192.168.43.1             51154    ICMP     70     Destination unreachable (Port unreachable)
    194 0.875539       Vitas-Workstation.local 53       192.168.43.1             49677    ICMP     70     Destination unreachable (Port unreachable)
    195 0.887143       Vitas-Workstation.local 5353     192.168.43.1             5351     NAT-PMP  44     External Address Request
    214 1.011348       Vitas-Workstation.local          ff02::16                          ICMPv6   110    Multicast Listener Report Message v2
    218 1.098039       Vitas-Workstation.local          Broadcast                         ARP      42     Who has 192.168.43.1? Tell 192.168.43.20
    219 1.099080       VMware_83:bb:c7                  Vitas-Workstation.local           ARP      60     192.168.43.1 is at 00:50:56:83:bb:c7
    275 1.259668       Vitas-Workstation.local 54573    192.168.43.1             192      UDP      46     54573 → 192 Len=4
    287 1.360694       Vitas-Workstation.local          Broadcast                         ARP      42     ARP Announcement for 192.168.43.20
    366 1.635709       Vitas-Workstation.local 5353     192.168.43.1             5351     PCP v2   102    Map Request
    371 1.681623       Vitas-Workstation.local          Broadcast                         ARP      42     Who has 192.168.43.1? Tell 192.168.43.20
    372 1.682858       VMware_83:bb:c7                  Vitas-Workstation.local           ARP      60     192.168.43.1 is at 00:50:56:83:bb:c7
    378 1.763821       Vitas-Workstation.local 54573    192.168.43.1             192      UDP      46     54573 → 192 Len=4
    383 1.887482       Vitas-Workstation.local 5353     192.168.43.1             5351     NAT-PMP  44     External Address Request
    389 2.011869       Vitas-Workstation.local          ff02::16                          ICMPv6   110    Multicast Listener Report Message v2
    409 3.270652       Vitas-Workstation.local 54573    192.168.43.1             192      UDP      46     54573 → 192 Len=4
    444 3.773036       Vitas-Workstation.local 54573    192.168.43.1             192      UDP      46     54573 → 192 Len=4
    464 4.827349       Vitas-Workstation.local          ff02::2                           ICMPv6   70     Router Solicitation from 80:e6:50:05:a6:5c
    475 5.400547       Vitas-Workstation.local 3283     zx5.vitanetworks.link    3283     UDP      56     3283 → 3283 Len=14
    502 5.689333       Vitas-Workstation.local 53       192.168.43.1             56922    ICMP     70     Destination unreachable (Port unreachable)
    604 6.278622       Vitas-Workstation.local 54573    192.168.43.1             192      UDP      46     54573 → 192 Len=4
    729 6.782905       Vitas-Workstation.local 54573    192.168.43.1             192      UDP      46     54573 → 192 Len=4
    888 8.285988       Vitas-Workstation.local 54573    192.168.43.1             192      UDP      46     54573 → 192 Len=4
    993 8.789802       Vitas-Workstation.local 54573    192.168.43.1             192      UDP      46     54573 → 192 Len=4
   1017 8.936535       Vitas-Workstation.local          ff02::2                           ICMPv6   70     Router Solicitation from 80:e6:50:05:a6:5c
   1199 10.291838      Vitas-Workstation.local 54573    192.168.43.1             192      UDP      46     54573 → 192 Len=4
   1206 10.400710      Vitas-Workstation.local 3283     zx5.vitanetworks.link    3283     UDP      56     3283 → 3283 Len=14
   1218 10.795090      Vitas-Workstation.local 54573    192.168.43.1             192      UDP      46     54573 → 192 Len=4
   1241 13.300490      Vitas-Workstation.local 54573    192.168.43.1             192      UDP      46     54573 → 192 Len=4
   1242 13.804896      Vitas-Workstation.local 54573    192.168.43.1             192      UDP      46     54573 → 192 Len=4
   1431 19.308661      Vitas-Workstation.local 54573    192.168.43.1             192      UDP      46     54573 → 192 Len=4
   1440 19.813233      Vitas-Workstation.local 54573    192.168.43.1             192      UDP      46     54573 → 192 Len=4
   1447 22.075674      Vitas-Workstation.local 53       192.168.43.1             59899    ICMP     70     Destination unreachable (Port unreachable)
   1460 25.314910      Vitas-Workstation.local 54573    192.168.43.1             192      UDP      46     54573 → 192 Len=4
   1464 25.819049      Vitas-Workstation.local 54573    192.168.43.1             192      UDP      46     54573 → 192 Len=4
   1578 34.324286      Vitas-Workstation.local 54573    192.168.43.1             192      UDP      46     54573 → 192 Len=4
   1579 34.828513      Vitas-Workstation.local 54573    192.168.43.1             192      UDP      46     54573 → 192 Len=4
   1629 40.906417      ::                               ff02::1:ffc7:aeb8                 ICMPv6   86     Neighbor Solicitation for fe80::1435:e968:37c7:aeb8
   1636 41.271084      Vitas-Workstation.local 53       192.168.43.1             50069    ICMP     70     Destination unreachable (Port unreachable)
   1671 41.528811      Vitas-Workstation.local 53       192.168.43.1             63686    ICMP     70     Destination unreachable (Port unreachable)
   1676 41.553266      Vitas-Workstation.local 53       192.168.43.1             59168    ICMP     70     Destination unreachable (Port unreachable)
   1681 41.585627      Vitas-Workstation.local 53       192.168.43.1             57163    ICMP     70     Destination unreachable (Port unreachable)
   1685 41.609471      Vitas-Workstation.local 53       192.168.43.1             54932    ICMP     70     Destination unreachable (Port unreachable)
   1687 41.638505      Vitas-Workstation.local 53       192.168.43.1             64089    ICMP     70     Destination unreachable (Port unreachable)
   1692 41.894460      Vitas-Workstation.local 54573    192.168.43.1             192      UDP      46     54573 → 192 Len=4
###  
###  ABOUT HERE I…
###  
###  → Manually added an IPv6 address from the leased Hurricane Electric range and specified router address
###  → Started pin6 to another computer (keep in mind it scrolls insanely fast, packets start much later)
###  
   1693 41.898231      Vitas-Workstation.local          ff02::16                          ICMPv6   90     Multicast Listener Report Message v2
   1696 42.002748      ::                               ff02::1:ff00:20                   ICMPv6   86     Neighbor Solicitation for 2001:470:c:c73::20
   1703 42.078180      Vitas-Workstation.local 53       192.168.43.1             60267    ICMP     70     Destination unreachable (Port unreachable)
   1717 42.398750      Vitas-Workstation.local 54573    192.168.43.1             192      UDP      46     54573 → 192 Len=4
   1789 43.898393      Vitas-Workstation.local          ff02::16                          ICMPv6   90     Multicast Listener Report Message v2
   1792 44.064632      Vitas-Workstation.local 54573    192.168.43.1          192         UDP      46     54573 → 192 Len=4
   1808 44.568002      Vitas-Workstation.local 54573    192.168.43.1          192         UDP      46     54573 → 192 Len=4
   1841 44.757579      Vitas-Workstation.local          ff02::1:ff00:1                    ICMPv6   86     Neighbor Solicitation for 2001:470:c:c73::1 from 80:e6:50:05:a6:5c
   1904 46.074535      Vitas-Workstation.local 54573    192.168.43.1          192         UDP      46     54573 → 192 Len=4
   1908 46.498473      Vitas-Workstation.local          ff02::1:ff00:1                    ICMPv6   86     Neighbor Solicitation for 2001:470:c:c73::1 from 80:e6:50:05:a6:5c
   1911 46.577042      Vitas-Workstation.local 54573    192.168.43.1          192         UDP      46     54573 → 192 Len=4
   1913 47.458883      Vitas-Workstation.local          ff02::1:ff00:11                   ICMPv6   86     Neighbor Solicitation for 2001:470:c:c73::11 from 80:e6:50:05:a6:5c
   1914 47.509520      Vitas-Workstation.local          ff02::1:ff00:1                    ICMPv6   86     Neighbor Solicitation for 2001:470:c:c73::1 from 80:e6:50:05:a6:5c
   1916 47.694709      Remoting-Client.local            Vitas-Workstation.local           ICMPv6   70     Echo (ping) request id=0xa139, seq=2093, hop limit=64 (reply in 1918)
   1917 47.694714      Remoting-Client.local            Vitas-Workstation.local           ICMPv6   86     Neighbor Advertisement 2001:470:c:c73::11 (sol, ovr) is at 98:e0:d9:80:98:21
   1918 47.694786      Vitas-Workstation.local          Remoting-Client.local             ICMPv6   70     Echo (ping) reply id=0xa139, seq=2093, hop limit=64 (request in 1916)
   1974 48.339493      Remoting-Client.local            Vitas-Workstation.local           ICMPv6   70     Echo (ping) request id=0xa139, seq=2094, hop limit=64 (reply in 1975)
   1975 48.339573      Vitas-Workstation.local          Remoting-Client.local             ICMPv6   70     Echo (ping) reply id=0xa139, seq=2094, hop limit=64 (request in 1974)
   1997 48.462550      Vitas-Workstation.local          Remoting-Client.local             ICMPv6   70     Echo (ping) request id=0x441d, seq=1, hop limit=64 (reply in 1998)
   1998 48.464211      Remoting-Client.local            Vitas-Workstation.local           ICMPv6   70     Echo (ping) reply id=0x441d, seq=1, hop limit=64 (request in 1997)
   2060 48.757919      Vitas-Workstation.local          ff02::1:ff00:1                    ICMPv6   86     Neighbor Solicitation for 2001:470:c:c73::1 from 80:e6:50:05:a6:5c
   2105 49.082389      Vitas-Workstation.local 54573    192.168.43.1          192         UDP      46     54573 → 192 Len=4
   2108 49.481806      Remoting-Client.local            Vitas-Workstation.local           ICMPv6   70     Echo (ping) request id=0xa139, seq=2095, hop limit=64 (reply in 2109)
   2109 49.481925      Vitas-Workstation.local          Remoting-Client.local             ICMPv6   70     Echo (ping) reply id=0xa139, seq=2095, hop limit=64 (request in 2108)
   2116 49.584093      Vitas-Workstation.local 54573    192.168.43.1          192         UDP      46     54573 → 192 Len=4
   2155 50.457520      Remoting-Client.local            Vitas-Workstation.local           ICMPv6   70     Echo (ping) request id=0xa139, seq=2096, hop limit=64 (reply in 2156)
   2156 50.457572      Vitas-Workstation.local          Remoting-Client.local             ICMPv6   70     Echo (ping) reply id=0xa139, seq=2096, hop limit=64 (request in 2155)
   2157 50.541699      Vitas-Workstation.local          ff02::1:ff00:1                    ICMPv6   86     Neighbor Solicitation for 2001:470:c:c73::1 from 80:e6:50:05:a6:5c
   2159 51.379114      Remoting-Client.local            Vitas-Workstation.local           ICMPv6   70     Echo (ping) request id=0xa139, seq=2097, hop limit=64 (reply in 2160)
   2160 51.379170      Vitas-Workstation.local          Remoting-Client.local             ICMPv6   70     Echo (ping) reply id=0xa139, seq=2097, hop limit=64 (request in 2159)
   2161 51.552404      Vitas-Workstation.local          ff02::1:ff00:1                    ICMPv6   86     Neighbor Solicitation for 2001:470:c:c73::1 from 80:e6:50:05:a6:5c
   2162 51.992814      Remoting-Client.local            Vitas-Workstation.local           ICMPv6   86     Neighbor Solicitation for 2001:470:c:c73::20 from 98:e0:d9:80:98:21
   2163 51.992867      Vitas-Workstation.local          Remoting-Client.local             ICMPv6   78     Neighbor Advertisement 2001:470:c:c73::20 (sol)
   2164 52.607801      Remoting-Client.local            Vitas-Workstation.local           ICMPv6   70     Echo (ping) request id=0xa139, seq=2098, hop limit=64 (reply in 2165)
   2165 52.607855      Vitas-Workstation.local          Remoting-Client.local             ICMPv6   70     Echo (ping) reply id=0xa139, seq=2098, hop limit=64 (request in 2164)
   2167 52.758303      Vitas-Workstation.local          ff02::1:ff00:1                    ICMPv6   86     Neighbor Solicitation for 2001:470:c:c73::1 from 80:e6:50:05:a6:5c
   2169 53.529451      Remoting-Client.local            Vitas-Workstation.local           ICMPv6   70     Echo (ping) request id=0xa139, seq=2099, hop limit=64 (reply in 2171)
   2171 53.529524      Vitas-Workstation.local          Remoting-Client.local             ICMPv6   70     Echo (ping) reply id=0xa139, seq=2099, hop limit=64 (request in 2169)
   2189 54.448727      Remoting-Client.local            Vitas-Workstation.local           ICMPv6   70     Echo (ping) request id=0xa139, seq=2100, hop limit=64 (reply in 2190)
   2190 54.448770      Vitas-Workstation.local          Remoting-Client.local             ICMPv6   70     Echo (ping) reply id=0xa139, seq=2100, hop limit=64 (request in 2189)
   2194 54.583734      Vitas-Workstation.local          ff02::1:ff00:1                    ICMPv6   86     Neighbor Solicitation for 2001:470:c:c73::1 from 80:e6:50:05:a6:5c
   2197 55.089086      Vitas-Workstation.local 54573    192.168.43.1          192         UDP      46     54573 → 192 Len=4
   2198 55.590767      Vitas-Workstation.local 54573    192.168.43.1          192         UDP      46     54573 → 192 Len=4
   2199 55.592119      Remoting-Client.local            Vitas-Workstation.local           ICMPv6   70     Echo (ping) request id=0xa139, seq=2101, hop limit=64 (reply in 2200)
   2200 55.592185      Vitas-Workstation.local          Remoting-Client.local             ICMPv6   70     Echo (ping) reply id=0xa139, seq=2101, hop limit=64 (request in 2199)
   2201 55.593880      Vitas-Workstation.local          ff02::1:ff00:1                    ICMPv6   86     Neighbor Solicitation for 2001:470:c:c73::1 from 80:e6:50:05:a6:5c
   2205 56.577300      Remoting-Client.local            Vitas-Workstation.local           ICMPv6   70     Echo (ping) request id=0xa139, seq=2102, hop limit=64 (reply in 2206)
   2206 56.577347      Vitas-Workstation.local          Remoting-Client.local             ICMPv6   70     Echo (ping) reply id=0xa139, seq=2102, hop limit=64 (request in 2205)

This is soo weird. Anyway, thanks !