I have an ISP router and another router with openwrt connected to it in bridge mode.
This means I can connect to both the ISP's router wifi network and to my router separately.
When connecting to the ISP router, ipv6 works fine, the computer gets an address, all sites recognize it, great. This means my isp does provide ipv6 and the client can use it.
When connecting to my router, I still get an ipv6 ip, but all sites cannot detect I have ipv6 and I have no ipv6 connectivity.
Accessing the router by ssh, I can ping ipv6.google.com just fine.
I don't really know what is happening here... I tried messing around with the wan6 and dhcp settings and there was a time where it worked, but after a reboot it was gone.
Not sure if it makes a difference, but the router serves 3 networks, split by vlan. Ideally I wanted ipv6 on all 3, but only one really needs it.
Can someone point me in the right direction?
Please run the following commands (copy-paste the whole block) and paste the output here, using the "Preformatted text </> " button:
Remember to redact passwords, MAC addresses and any public IP addresses you may have
ubus call system board; \
uci export network; uci export dhcp; uci export firewall; \
head -n -0 /etc/firewall.user; ifstatus wan6; \
ip -6 addr ; ip -6 ro li tab all ; ip -6 ru; \
ls -l /etc/resolv.* /tmp/resolv.* /tmp/resolv.*/* ; head -n -0 /etc/resolv.* /tmp/resolv.* /tmp/resolv.*/*
Here it is
{
"kernel": "5.10.113",
"hostname": "gaia-router-principal",
"system": "ARMv8 Processor rev 3",
"model": "Raspberry Pi 4 Model B Rev 1.2",
"board_name": "raspberrypi,4-model-b",
"rootfs_type": "squashfs",
"release": {
"distribution": "OpenWrt",
"version": "SNAPSHOT",
"revision": "r19641-f167f4a9a4",
"target": "bcm27xx/bcm2711",
"description": "OpenWrt SNAPSHOT r19641-f167f4a9a4"
}
}
package network
config interface 'loopback'
option proto 'static'
option ipaddr '127.0.0.1'
option netmask '255.0.0.0'
option device 'lo'
config globals 'globals'
option ula_prefix 'XXXX:XXXX:XXXX::/48'
config interface 'lan'
option proto 'static'
option stp '1'
option ipaddr '192.168.11.1'
option netmask '255.255.255.0'
option device 'eth1.1'
option ip6assign '64'
config interface 'wan'
option proto 'dhcp'
option peerdns '0'
list dns '1.1.1.1'
list dns '1.0.0.1'
list dns '8.8.8.8'
list dns '8.8.4.4'
option device 'eth0'
option type 'bridge'
config interface 'wan6'
option proto 'dhcpv6'
option peerdns '0'
list dns '2606:4700:4700::1111'
list dns '2606:4700:4700::1001'
list dns '2001:4860:4860::8888'
list dns '2001:4860:4860::8844'
option device 'eth0'
option reqaddress 'try'
option reqprefix '64'
option ip6assign '64'
option delegate '0'
config interface 'zerotier'
option proto 'none'
option device 'ztmjfclcqc'
config device
option name 'eth1'
config device
option name 'eth0'
config interface 'wwan'
option proto 'dhcp'
config device
option type '8021q'
option ifname 'eth1'
option vid '1'
option name 'eth1.1'
config device
option type '8021q'
option ifname 'eth1'
option vid '2'
option name 'eth1.2'
config device
option type '8021q'
option ifname 'eth1'
option vid '3'
option name 'eth1.3'
config device
option type '8021q'
option ifname 'eth1'
option vid '4'
option name 'eth1.4'
config interface 'guest'
option proto 'static'
option device 'eth1.2'
option ipaddr '192.168.10.1'
option netmask '255.255.255.0'
option ip6assign '64'
config interface 'iot'
option proto 'static'
option device 'eth1.3'
option ipaddr '192.168.9.1'
option netmask '255.255.255.0'
option ip6assign '64'
package dhcp
config dnsmasq
option domainneeded '1'
option localise_queries '1'
option rebind_protection '1'
option rebind_localhost '1'
option local '/lan/'
option domain 'lan'
option expandhosts '1'
option authoritative '1'
option readethers '1'
option leasefile '/tmp/dhcp.leases'
option resolvfile '/tmp/resolv.conf.d/resolv.conf.auto'
option localservice '1'
option ednspacket_max '1232'
option quietdhcp '1'
option dnssec '1'
option cachesize '5000'
list notinterface 'wan'
list notinterface 'wan6'
config dhcp 'lan'
option interface 'lan'
option dhcpv4 'server'
option ra_management '1'
option leasetime '30m'
option limit '200'
option start '60'
option force '1'
list dhcp_option ' 6,1.1.1.1,1.0.0.1,8.8.8.8,8.8.4.4'
option ndp 'hybrid'
option master '1'
option ra 'hybrid'
option dhcpv6 'hybrid'
config dhcp 'guest'
option interface 'guest'
option leasetime '30m'
option limit '150'
option start '100'
option force '1'
list dhcp_option '6,1.1.1.1,1.0.0.1,8.8.8.8,8.8.4.4'
option ra 'server'
option dhcpv6 'server'
list dns '2606:4700:4700::1111'
list dns '2606:4700:4700::1001'
list dns '2001:4860:4860::8888'
list dns '2001:4860:4860::8844'
list ra_flags 'managed-config'
list ra_flags 'other-config'
option ra_default '1'
config dhcp 'iot'
option interface 'iot'
option leasetime '30m'
option start '100'
option limit '150'
option force '1'
list dhcp_option ' 6,1.1.1.1,1.0.0.1,8.8.8.8,8.8.4.4'
option ra 'server'
option dhcpv6 'server'
list dns '2606:4700:4700::1111'
list dns '2606:4700:4700::1001'
list dns '2001:4860:4860::8888'
list dns '2001:4860:4860::8844'
list ra_flags 'managed-config'
list ra_flags 'other-config'
config dhcp 'wan'
option interface 'wan'
option ignore '1'
config odhcpd 'odhcpd'
option maindhcp '0'
option leasefile '/tmp/hosts/odhcpd'
option leasetrigger '/usr/sbin/odhcpd-update'
option loglevel '4'
package firewall
config defaults
option input 'ACCEPT'
option output 'ACCEPT'
option forward 'REJECT'
option synflood_protect '1'
option drop_invalid '1'
config zone
option name 'lan'
option input 'ACCEPT'
option output 'ACCEPT'
option forward 'ACCEPT'
list network 'lan'
config zone
option name 'wan'
option output 'ACCEPT'
option masq '1'
option mtu_fix '1'
option forward 'DROP'
option input 'DROP'
list network 'wan'
list network 'wan6'
list network 'wwan'
option masq6 ''\''1'\'''
config forwarding
option src 'lan'
option dest 'wan'
config rule
option name 'Allow-DHCP-Renew'
option src 'wan'
option proto 'udp'
option dest_port '68'
option target 'ACCEPT'
option family 'ipv4'
config rule
option name 'Allow-Ping'
option src 'wan'
option proto 'icmp'
option icmp_type 'echo-request'
option family 'ipv4'
option target 'ACCEPT'
option enabled '0'
config rule
option name 'Allow-IGMP'
option src 'wan'
option proto 'igmp'
option family 'ipv4'
option target 'ACCEPT'
config rule
option name 'Allow-DHCPv6'
option src 'wan'
option proto 'udp'
option src_ip 'fc00::/6'
option dest_ip 'fc00::/6'
option dest_port '546'
option family 'ipv6'
option target 'ACCEPT'
config rule
option name 'Allow-MLD'
option src 'wan'
option proto 'icmp'
option src_ip 'fe80::/10'
list icmp_type '130/0'
list icmp_type '131/0'
list icmp_type '132/0'
list icmp_type '143/0'
option family 'ipv6'
option target 'ACCEPT'
config rule
option name 'Allow-ICMPv6-Input'
option src 'wan'
option proto 'icmp'
list icmp_type 'echo-request'
list icmp_type 'echo-reply'
list icmp_type 'destination-unreachable'
list icmp_type 'packet-too-big'
list icmp_type 'time-exceeded'
list icmp_type 'bad-header'
list icmp_type 'unknown-header-type'
list icmp_type 'router-solicitation'
list icmp_type 'neighbour-solicitation'
list icmp_type 'router-advertisement'
list icmp_type 'neighbour-advertisement'
option limit '1000/sec'
option family 'ipv6'
option target 'ACCEPT'
config rule
option name 'Allow-ICMPv6-Forward'
option src 'wan'
option dest '*'
option proto 'icmp'
list icmp_type 'echo-request'
list icmp_type 'echo-reply'
list icmp_type 'destination-unreachable'
list icmp_type 'packet-too-big'
list icmp_type 'time-exceeded'
list icmp_type 'bad-header'
list icmp_type 'unknown-header-type'
option limit '1000/sec'
option family 'ipv6'
option target 'ACCEPT'
option enabled ''\''0'\'''
config rule
option name 'Allow-IPSec-ESP'
option src 'wan'
option dest 'lan'
option proto 'esp'
option target 'ACCEPT'
config rule
option name 'Allow-ISAKMP'
option src 'wan'
option dest 'lan'
option dest_port '500'
option proto 'udp'
option target 'ACCEPT'
config rule
option name 'Support-UDP-Traceroute'
option src 'wan'
option dest_port '33434:33689'
option proto 'udp'
option family 'ipv4'
option target 'REJECT'
option enabled '0'
config include
option path '/etc/firewall.user'
config rule
option name 'Allow-ZeroTier-Inbound'
list proto 'udp'
option src '*'
option dest_port '9993'
option target 'ACCEPT'
config zone
option name 'zerotier'
option input 'ACCEPT'
option output 'ACCEPT'
option forward 'ACCEPT'
option masq '1'
list network 'ZeroTier'
list network 'zerotier'
config forwarding
option src 'zerotier'
option dest 'lan'
config forwarding
option src 'zerotier'
option dest 'wan'
config forwarding
option src 'lan'
option dest 'zerotier'
config rule
option name 'smb1'
list proto 'udp'
option src 'zerotier'
option src_port '137-138'
option dest 'lan'
option dest_port '137-138'
option target 'ACCEPT'
option enabled '0'
list src_ip '192.168.192.11'
list src_ip 'fe80::d237:45ff:fe2d:5f23'
list dest_ip '192.168.11.1'
list dest_ip 'fe80::d237:45ff:fe2d:5f23'
config rule
option name 'smb2'
list proto 'tcp'
option src 'zerotier'
option src_port '139'
option dest 'lan'
option dest_port '139'
option target 'ACCEPT'
option enabled '0'
list src_ip '192.168.192.11'
list src_ip 'fe80::d237:45ff:fe2d:5f23'
list dest_ip '192.168.11.1'
list dest_ip 'fe80::d237:45ff:fe2d:5f23'
config rule
option name 'smb3'
list proto 'tcp'
option src 'zerotier'
option src_port '445'
option dest 'lan'
option dest_port '445'
option target 'ACCEPT'
option enabled '0'
list src_ip '192.168.192.11'
list src_ip 'fe80::d237:45ff:fe2d:5f23'
list dest_ip '192.168.11.1'
list dest_ip 'fe80::d237:45ff:fe2d:5f23'
config rule
option name 'syncthing'
option src 'wan'
option dest_port '22000'
option target 'ACCEPT'
config rule
option src 'wan'
option target 'ACCEPT'
option name 'file server'
option dest_port '443'
list proto 'tcp'
config include 'miniupnpd'
option type 'script'
option path '/usr/share/miniupnpd/firewall.include'
option family 'any'
option reload '1'
config zone
option name 'guest'
option input 'REJECT'
option output 'ACCEPT'
option forward 'REJECT'
list network 'guest'
option masq '1'
config forwarding
option src 'guest'
option dest 'wan'
config zone
option name 'iot'
option input 'REJECT'
option output 'ACCEPT'
option forward 'REJECT'
option masq '1'
list network 'iot'
config forwarding
option src 'iot'
option dest 'wan'
config rule
option name 'guest dns'
option src 'guest'
option dest_port '53'
option target 'ACCEPT'
config rule
option name 'guest dhcp'
option src 'guest'
option dest_port '67'
option target 'ACCEPT'
option family 'ipv4'
config rule
option name 'iot dhcp'
option src 'iot'
option dest_port '67'
option target 'ACCEPT'
option family 'ipv4'
config rule
option name 'iot dns'
option src 'iot'
option dest_port '53'
option target 'ACCEPT'
config rule
option name 'guest dhcpv6'
option family 'ipv6'
option src 'guest'
option dest_port '546-547'
option target 'ACCEPT'
config rule
option name 'iot dhcpv6'
option family 'ipv6'
option src 'iot'
option dest_port '546-547'
option target 'ACCEPT'
config rule
option src '*'
option dest_port '23'
option target 'ACCEPT'
list proto 'tcp'
list proto 'udp'
option name 'ssh acesso fora'
config include 'nat6'
option path '/etc/firewall.nat6'
option reload '1'
# This file is interpreted as shell script.
# Put your custom iptables rules here, they will
# be executed with each firewall (re-)start.
# Internal uci firewall chains are flushed and recreated on reload, so
# put custom rules into the root chains e.g. INPUT or FORWARD or into the
# special user chains, e.g. input_wan_rule or postrouting_lan_rule.
{
"up": true,
"pending": false,
"available": true,
"autostart": true,
"dynamic": false,
"uptime": 831,
"l3_device": "eth0",
"proto": "dhcpv6",
"device": "eth0",
"updated": [
"routes",
"prefixes",
"data"
],
"metric": 0,
"dns_metric": 0,
"delegation": false,
"ipv4-address": [
],
"ipv6-address": [
],
"ipv6-prefix": [
{
"address": "XXXX:XXX:XXXX:XXXX::",
"mask": 56,
"preferred": 89168,
"valid": 89168,
"class": "wan6",
"assigned": {
}
}
],
"ipv6-prefix-assignment": [
{
"address": "XXXX:XXXX:XXXX:X::",
"mask": 64,
"local-address": {
"address": "XXXX:XXXX:XXXX:X::1",
"mask": 64
}
}
],
"route": [
{
"target": "::",
"mask": 0,
"nexthop": "XXXX::XXXX:XXXX:XXXX:XXXX",
"metric": 512,
"valid": 3669,
"source": "XXXX:XXX:XXXX:XXXX::/56"
}
],
"dns-server": [
"2606:4700:4700::1111",
"2606:4700:4700::1001",
"2001:4860:4860::8888",
"2001:4860:4860::8844"
],
"dns-search": [
],
"neighbors": [
],
"inactive": {
"ipv4-address": [
],
"ipv6-address": [
],
"route": [
],
"dns-server": [
"2001:8a0:2106:5:212:55:154:174",
"2001:8a0:2206:5:212:55:154:190"
],
"dns-search": [
],
"neighbors": [
]
},
"data": {
"passthru": "00170020200108a0210600050212005501540174200108a0220600050212005501540190"
}
}
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 state UNKNOWN qlen 1000
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 state UP qlen 1000
inet6 XXXX:XXX:XXXX:XXXX::1/64 scope global deprecated dynamic
valid_lft 6364sec preferred_lft 0sec
inet6 XXXX:XXXX:XXXX:3::1/64 scope global noprefixroute
valid_lft forever preferred_lft forever
inet6 XXXX:XXX:XXXX:XXXX::1/64 scope global deprecated dynamic
valid_lft 4246sec preferred_lft 0sec
inet6 XXXX::XXXX:XXXX:XXXX:XXXX/64 scope link
valid_lft forever preferred_lft forever
9: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 state UP qlen 1000
inet6 XXXX::XXXX:XXXX:XXXX:XXXX/64 scope link
valid_lft forever preferred_lft forever
19: ztmjfclcqc: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 2800 state UNKNOWN qlen 1000
inet6 XXXX:XXXX:XXXX:XXXX:XXXX:XXXX:XXXX:XXXX/88 scope global
valid_lft forever preferred_lft forever
inet6 XXXX::XXXX:XXXX:XXXX:XXXX/64 scope link
valid_lft forever preferred_lft forever
20: eth1.1@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 state UP qlen 1000
inet6 XXXX:XXX:XXXX:XXXX::1/64 scope global deprecated dynamic
valid_lft 6364sec preferred_lft 0sec
inet6 XXXX:XXXX:XXXX:2::1/64 scope global noprefixroute
valid_lft forever preferred_lft forever
inet6 XXXX:XXXX:XXXX:XXXX::1/64 scope global deprecated dynamic
valid_lft 6364sec preferred_lft 0sec
inet6 XXXX:XXXX:XXXX:XXXX::1/64 scope global deprecated dynamic
valid_lft 4545sec preferred_lft 0sec
inet6 XXXX:XXXX:XXXX:XXXX::2/64 scope global deprecated dynamic
valid_lft 4359sec preferred_lft 0sec
inet6 XXXX:XXXX:XXXX::1/64 scope global deprecated dynamic
valid_lft 4123sec preferred_lft 0sec
inet6 XXXX:XXXX:XXXX:XXXX::1/64 scope global deprecated dynamic
valid_lft 4246sec preferred_lft 0sec
inet6 XXXX::XXXX:XXXX:XXXX:XXXX/64 scope link
valid_lft forever preferred_lft forever
21: eth1.3@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 state UP qlen 1000
inet6 XXXX:XXXX:XXXX:1::1/64 scope global noprefixroute
valid_lft forever preferred_lft forever
inet6 XXXX:XXXX:XXXX:XXXX::1/64 scope global deprecated dynamic
valid_lft 6364sec preferred_lft 0sec
inet6 XXXX:XXXX:XXXX::1/64 scope global deprecated dynamic
valid_lft 5005sec preferred_lft 0sec
inet6 XXXX:XXXX:XXXX:XXXX::1/64 scope global deprecated dynamic
valid_lft 6364sec preferred_lft 0sec
inet6 XXXX::XXXX:XXXX:XXXX:XXXX/64 scope link
valid_lft forever preferred_lft forever
22: eth1.2@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 state UP qlen 1000
inet6 XXXX:XXXX:XXXX:XXXX::1/64 scope global deprecated dynamic
valid_lft 6364sec preferred_lft 0sec
inet6 XXXX:XXXX:XXXX::1/64 scope global noprefixroute
valid_lft forever preferred_lft forever
inet6 XXXX:XXXX:XXXX:XXXX::1/64 scope global deprecated dynamic
valid_lft 6364sec preferred_lft 0sec
inet6 XXXX:XXXX:XXXX:XXXX::1/64 scope global deprecated dynamic
valid_lft 5005sec preferred_lft 0sec
inet6 XXXX:XXXX:XXXX:1::1/64 scope global deprecated dynamic
valid_lft 5005sec preferred_lft 0sec
inet6 XXXX:XXXX:XXXX:XXXX::1/64 scope global deprecated dynamic
valid_lft 4545sec preferred_lft 0sec
inet6 XXXX::XXXX:XXXX:XXXX:XXXX/64 scope link
valid_lft forever preferred_lft forever
default from XXXX:XXXX:XXXX:XXXX::/56 via XXXX::XXXX:XXXX:XXXX:XXXX dev eth0 proto static metric 512 pref medium
XXXX:XXX:XXXX:XXXX::/64 dev eth1.1 proto kernel metric 256 expires 4245sec pref medium
XXXX:XXX:XXXX:XXXX::/64 dev eth0 proto kernel metric 256 expires 6363sec pref medium
XXXX:XXX:XXXX:XXXX::/64 dev eth1.2 proto kernel metric 256 expires 6363sec pref medium
XXXX:XXX:XXXX:XXXX::/64 dev eth1.1 proto kernel metric 256 expires 4544sec pref medium
XXXX:XXX:XXXX:XXXX::/64 dev eth1.3 proto kernel metric 256 expires 6363sec pref medium
XXXX:XXX:XXXX:XXXX::/64 dev eth1.2 proto kernel metric 256 expires 6363sec pref medium
XXXX:XXX:XXXX:XXXX::/64 dev eth1.3 proto kernel metric 256 expires 6363sec pref medium
XXXX:XXX:XXXX:XXXX::/64 dev eth1.2 proto kernel metric 256 expires 5004sec pref medium
XXXX:XXX:XXXX:XXXX::/64 dev eth1.1 proto kernel metric 256 expires 6363sec pref medium
XXXX:XXX:XXXX:XXXX::/64 dev eth0 proto kernel metric 256 expires 4245sec pref medium
XXXX:XXX:XXXX:XXXX::/64 dev eth1.2 proto kernel metric 256 expires 4544sec pref medium
XXXX:XXX:XXXX:XXXX::/64 dev eth1.1 proto kernel metric 256 expires 6363sec pref medium
unreachable XXXX:XXX:XXXX:XXXX::/56 dev lo proto static metric 2147483647 pref medium
XXXX:XXXX:XXXX::/64 dev eth1.1 proto kernel metric 256 expires 4122sec pref medium
XXXX:XXXX:XXXX::/64 dev eth1.3 proto kernel metric 256 expires 5004sec pref medium
XXXX:XXXX:XXXX::/64 dev eth1.2 proto kernel metric 256 expires 6363sec pref medium
XXXX:XXXX:XXXX::/64 dev eth1.2 proto static metric 1024 pref medium
XXXX:XXXX:XXXX:1::/64 dev eth1.2 proto kernel metric 256 expires 5004sec pref medium
XXXX:XXXX:XXXX:1::/64 dev eth1.3 proto kernel metric 256 expires 6363sec pref medium
XXXX:XXXX:XXXX:1::/64 dev eth1.3 proto static metric 1024 pref medium
XXXX:XXXX:XXXX:2::/64 dev eth1.1 proto kernel metric 256 expires 6363sec pref medium
XXXX:XXXX:XXXX:2::/64 dev eth1.1 proto static metric 1024 pref medium
XXXX:XXXX:XXXX:3::/64 dev eth0 proto kernel metric 256 expires 3599sec pref medium
XXXX:XXXX:XXXX:3::/64 dev eth0 proto static metric 1024 pref medium
unreachable XXXX:XXXX:XXXX::/48 dev lo proto static metric 2147483647 pref medium
XXXX:XXXX:XXXX:XXXX:XXXX:XXXX::/88 dev ztmjfclcqc proto kernel metric 256 pref medium
XXXX::/64 dev eth0 proto kernel metric 256 pref medium
XXXX::/64 dev ztmjfclcqc proto kernel metric 256 pref medium
XXXX::/64 dev eth1 proto kernel metric 256 pref medium
XXXX::/64 dev eth1.1 proto kernel metric 256 pref medium
XXXX::/64 dev eth1.3 proto kernel metric 256 pref medium
XXXX::/64 dev eth1.2 proto kernel metric 256 pref medium
local ::1 dev lo table local proto kernel metric 0 pref medium
anycast XXXX:XXX:XXXX:XXXX:: dev eth1.1 table local proto kernel metric 0 pref medium
anycast XXXX:XXX:XXXX:XXXX:: dev eth0 table local proto kernel metric 0 pref medium
anycast XXXX:XXX:XXXX:XXXX:: dev eth1.2 table local proto kernel metric 0 pref medium
local XXXX:XXX:XXXX:XXXX::1 dev eth1.1 table local proto kernel metric 0 pref medium
local XXXX:XXX:XXXX:XXXX::1 dev eth0 table local proto kernel metric 0 pref medium
local XXXX:XXX:XXXX:XXXX::1 dev eth1.2 table local proto kernel metric 0 pref medium
anycast XXXX:XXX:XXXX:XXXX:: dev eth1.1 table local proto kernel metric 0 pref medium
anycast XXXX:XXX:XXXX:XXXX:: dev eth1.3 table local proto kernel metric 0 pref medium
anycast XXXX:XXX:XXXX:XXXX:: dev eth1.2 table local proto kernel metric 0 pref medium
local XXXX:XXX:XXXX:XXXX::1 dev eth1.1 table local proto kernel metric 0 pref medium
local XXXX:XXX:XXXX:XXXX::1 dev eth1.3 table local proto kernel metric 0 pref medium
local XXXX:XXX:XXXX:XXXX::1 dev eth1.2 table local proto kernel metric 0 pref medium
local XXXX:XXX:XXXX:XXXX::2 dev eth1.1 table local proto kernel metric 0 pref medium
anycast XXXX:XXX:XXXX:XXXX:: dev eth1.3 table local proto kernel metric 0 pref medium
anycast XXXX:XXX:XXXX:XXXX:: dev eth1.2 table local proto kernel metric 0 pref medium
anycast XXXX:XXX:XXXX:XXXX:: dev eth1.1 table local proto kernel metric 0 pref medium
local XXXX:XXX:XXXX:XXXX::1 dev eth1.3 table local proto kernel metric 0 pref medium
local XXXX:XXX:XXXX:XXXX::1 dev eth1.2 table local proto kernel metric 0 pref medium
local XXXX:XXX:XXXX:XXXX::1 dev eth1.1 table local proto kernel metric 0 pref medium
anycast XXXX:XXX:XXXX:XXXX:: dev eth0 table local proto kernel metric 0 pref medium
anycast XXXX:XXX:XXXX:XXXX:: dev eth1.2 table local proto kernel metric 0 pref medium
anycast XXXX:XXX:XXXX:XXXX:: dev eth1.1 table local proto kernel metric 0 pref medium
local XXXX:XXX:XXXX:XXXX::1 dev eth0 table local proto kernel metric 0 pref medium
local XXXX:XXX:XXXX:XXXX::1 dev eth1.2 table local proto kernel metric 0 pref medium
local XXXX:XXX:XXXX:XXXX::1 dev eth1.1 table local proto kernel metric 0 pref medium
anycast XXXX:XXXX:XXXX:: dev eth1.1 table local proto kernel metric 0 pref medium
anycast XXXX:XXXX:XXXX:: dev eth1.3 table local proto kernel metric 0 pref medium
anycast XXXX:XXXX:XXXX:: dev eth1.2 table local proto kernel metric 0 pref medium
local XXXX:XXXX:XXXX::1 dev eth1.1 table local proto kernel metric 0 pref medium
local XXXX:XXXX:XXXX::1 dev eth1.3 table local proto kernel metric 0 pref medium
local XXXX:XXXX:XXXX::1 dev eth1.2 table local proto kernel metric 0 pref medium
anycast XXXX:XXXX:XXXX:1:: dev eth1.2 table local proto kernel metric 0 pref medium
anycast XXXX:XXXX:XXXX:1:: dev eth1.3 table local proto kernel metric 0 pref medium
local XXXX:XXXX:XXXX:1::1 dev eth1.2 table local proto kernel metric 0 pref medium
local XXXX:XXXX:XXXX:1::1 dev eth1.3 table local proto kernel metric 0 pref medium
anycast XXXX:XXXX:XXXX:2:: dev eth1.1 table local proto kernel metric 0 pref medium
local XXXX:XXXX:XXXX:2::1 dev eth1.1 table local proto kernel metric 0 pref medium
anycast XXXX:XXXX:XXXX:3:: dev eth0 table local proto kernel metric 0 pref medium
local XXXX:XXXX:XXXX:3::1 dev eth0 table local proto kernel metric 0 pref medium
anycast XXXX:XXXX:XXXX:XXXX:XXXX:XXXX:: dev ztmjfclcqc table local proto kernel metric 0 pref medium
local XXXX:XXXX:XXXX:XXXX:XXXX:XXXX:XXXX:XXXX dev ztmjfclcqc table local proto kernel metric 0 pref medium
anycast XXXX:: dev eth0 table local proto kernel metric 0 pref medium
anycast XXXX:: dev ztmjfclcqc table local proto kernel metric 0 pref medium
anycast XXXX:: dev eth1.1 table local proto kernel metric 0 pref medium
anycast XXXX:: dev eth1 table local proto kernel metric 0 pref medium
anycast XXXX:: dev eth1.3 table local proto kernel metric 0 pref medium
anycast XXXX:: dev eth1.2 table local proto kernel metric 0 pref medium
local XXXX::XXXX:XXXX:XXXX:XXXX dev ztmjfclcqc table local proto kernel metric 0 pref medium
local XXXX::XXXX:XXXX:XXXX:XXXX dev eth1.1 table local proto kernel metric 0 pref medium
local XXXX::XXXX:XXXX:XXXX:XXXX dev eth1 table local proto kernel metric 0 pref medium
local XXXX::XXXX:XXXX:XXXX:XXXX dev eth1.3 table local proto kernel metric 0 pref medium
local XXXX::XXXX:XXXX:XXXX:XXXX dev eth1.2 table local proto kernel metric 0 pref medium
local XXXX::XXXX:XXXX:XXXX:XXXX dev eth0 table local proto kernel metric 0 pref medium
multicast ff00::/8 dev eth0 table local proto kernel metric 256 pref medium
multicast ff00::/8 dev ztmjfclcqc table local proto kernel metric 256 pref medium
multicast ff00::/8 dev eth1.1 table local proto kernel metric 256 pref medium
multicast ff00::/8 dev eth1 table local proto kernel metric 256 pref medium
multicast ff00::/8 dev eth1.3 table local proto kernel metric 256 pref medium
multicast ff00::/8 dev eth1.2 table local proto kernel metric 256 pref medium
0: from all lookup local
2061: from all fwmark 0x3d00/0x3f00 blackhole
2062: from all fwmark 0x3e00/0x3f00 unreachable
32766: from all lookup main
lrwxrwxrwx 1 root root 16 May 15 15:35 /etc/resolv.conf -> /tmp/resolv.conf
-rw-r--r-- 1 root root 47 May 26 15:19 /tmp/resolv.conf
-rw-r--r-- 1 root root 237 May 26 15:19 /tmp/resolv.conf.d/resolv.conf.auto
/tmp/resolv.conf.d:
total 4
-rw-r--r-- 1 root root 237 May 26 15:19 resolv.conf.auto
==> /etc/resolv.conf <==
search lan
nameserver 127.0.0.1
nameserver ::1
==> /tmp/resolv.conf <==
search lan
nameserver 127.0.0.1
nameserver ::1
==> /tmp/resolv.conf.d <==
head: error reading '/tmp/resolv.conf.d': Is a directory
==> /tmp/resolv.conf.d/resolv.conf.auto <==
# Interface wan
nameserver 1.1.1.1
nameserver 1.0.0.1
nameserver 8.8.8.8
nameserver 8.8.4.4
# Interface wan6
nameserver 2606:4700:4700::1111
nameserver 2606:4700:4700::1001
nameserver 2001:4860:4860::8888
nameserver 2001:4860:4860::8844
I have spotted quite a lot of problems, so I need to ask first.
It seems that the ISP router is delegating a prefix, but you are trying to use ipv6relay. This makes it complicated. I would suggest to stick with the delegated prefix configuration. Is that fine?
Yes, absolutely, I can work with the delegated prefix. Like I said, I tried a lot of things, so I must have broken something else, and then I couldn't put the original state.
Enable Allow-ICMPv6-Forward rule in firewall. Guest and IoT zones in firewall need some extras:
config rule
option src 'guest'
option name 'Allow-guest-ICMP6'
option family 'ipv6'
option limit '1000/sec'
option target 'ACCEPT'
option proto 'icmp'
list icmp_type 'destination-unreachable'
list icmp_type 'echo-reply'
list icmp_type 'echo-request'
list icmp_type 'fragmentation-needed'
list icmp_type 'neighbour-advertisement'
list icmp_type 'neighbour-solicitation'
list icmp_type 'port-unreachable'
list icmp_type 'protocol-unreachable'
list icmp_type 'router-solicitation'
list icmp_type 'time-exceeded'
option limit_burst '100'
Then give these
uci set network.wan6.reqprefix='auto'
uci set network.wan6.delegate='1'
uci delete network.wan6.ip6assign
uci set dhcp.lan.ra='server'
uci set dhcp.lan.ra_useleasetime='1'
uci set dhcp.lan.dhcpv6='server'
uci set dhcp.lan.ra_management='1'
uci set dhcp.lan.ra_flags='managed-config other-config'
uci delete dhcp.lan.ndp
uci delete firewall.@zone[1].masq6
uci commit
ifup wan6
service odhcpd restart
service firewall restart
I hope that's all.
Lastly, you are using the same nameservers as forwarder in OpenWrt and advertise it to the users. You can omit the last, let lan hosts get OpenWrt as the nameserver and take advantage of its caching.
Thanks for all the help.
Unfortunately, it still does not work.
However, I noticed something interesting. As soon as I boot my computer, the ipv6 address is recognized by the test site, however a few seconds later it's not.
I couldn't really see what ipv6 detected, and I couldn't replicate it again. Right now I guess it's better, since it gives a "network unreachable" error when I try to ping ipv6.google.com, instead of just timing out.
The configs are here:
{
"kernel": "5.10.113",
"hostname": "gaia-router-principal",
"system": "ARMv8 Processor rev 3",
"model": "Raspberry Pi 4 Model B Rev 1.2",
"board_name": "raspberrypi,4-model-b",
"rootfs_type": "squashfs",
"release": {
"distribution": "OpenWrt",
"version": "SNAPSHOT",
"revision": "r19641-f167f4a9a4",
"target": "bcm27xx/bcm2711",
"description": "OpenWrt SNAPSHOT r19641-f167f4a9a4"
}
}
package network
config interface 'loopback'
option proto 'static'
option ipaddr '127.0.0.1'
option netmask '255.0.0.0'
option device 'lo'
config globals 'globals'
option ula_prefix 'dda1:12ea:dca4::/48'
config interface 'lan'
option proto 'static'
option stp '1'
option ipaddr '192.168.11.1'
option netmask '255.255.255.0'
option device 'eth1.1'
option ip6assign '64'
config interface 'wan'
option proto 'dhcp'
option peerdns '0'
list dns '1.1.1.1'
list dns '1.0.0.1'
list dns '8.8.8.8'
list dns '8.8.4.4'
option device 'eth0'
option type 'bridge'
config interface 'wan6'
option proto 'dhcpv6'
option peerdns '0'
list dns '2606:4700:4700::1111'
list dns '2606:4700:4700::1001'
list dns '2001:4860:4860::8888'
list dns '2001:4860:4860::8844'
option device 'eth0'
option reqprefix '64'
option reqaddress 'try'
option ip6assign '64'
config interface 'zerotier'
option proto 'none'
option device 'ztmjfclcqc'
config device
option name 'eth1'
config device
option name 'eth0'
config interface 'wwan'
option proto 'dhcp'
config device
option type '8021q'
option ifname 'eth1'
option vid '1'
option name 'eth1.1'
config device
option type '8021q'
option ifname 'eth1'
option vid '2'
option name 'eth1.2'
config device
option type '8021q'
option ifname 'eth1'
option vid '3'
option name 'eth1.3'
config device
option type '8021q'
option ifname 'eth1'
option vid '4'
option name 'eth1.4'
config interface 'guest'
option proto 'static'
option device 'eth1.2'
option ipaddr '192.168.10.1'
option netmask '255.255.255.0'
option ip6assign '64'
config interface 'iot'
option proto 'static'
option device 'eth1.3'
option ipaddr '192.168.9.1'
option netmask '255.255.255.0'
option ip6assign '64'
package dhcp
config dnsmasq
option domainneeded '1'
option localise_queries '1'
option rebind_protection '1'
option rebind_localhost '1'
option local '/lan/'
option domain 'lan'
option expandhosts '1'
option authoritative '1'
option readethers '1'
option leasefile '/tmp/dhcp.leases'
option resolvfile '/tmp/resolv.conf.d/resolv.conf.auto'
option localservice '1'
option ednspacket_max '1232'
option quietdhcp '1'
option dnssec '1'
option cachesize '5000'
list notinterface 'wan'
list notinterface 'wan6'
option sequential_ip '1'
option allservers '1'
config dhcp 'lan'
option interface 'lan'
option dhcpv4 'server'
option ra_management '1'
option leasetime '30m'
option limit '200'
option start '60'
option force '1'
option ra 'server'
option ra_useleasetime '1'
option dhcpv6 'server'
list ra_flags 'managed-config'
list ra_flags 'other-config'
list ra_flags 'home-agent'
config dhcp 'guest'
option interface 'guest'
option leasetime '30m'
option limit '150'
option start '100'
option force '1'
option ra 'server'
list ra_flags 'managed-config'
list ra_flags 'other-config'
list ra_flags 'home-agent'
option dhcpv6 'server'
config dhcp 'iot'
option interface 'iot'
option leasetime '30m'
option start '100'
option limit '150'
option force '1'
option ra 'server'
option dhcpv6 'server'
list ra_flags 'managed-config'
list ra_flags 'other-config'
list ra_flags 'home-agent'
config dhcp 'wan'
option interface 'wan'
option ignore '1'
config odhcpd 'odhcpd'
option maindhcp '0'
option leasefile '/tmp/hosts/odhcpd'
option leasetrigger '/usr/sbin/odhcpd-update'
option loglevel '4'
config dhcp 'wan6'
option interface 'wan6'
option ignore '1'
package firewall
config defaults
option input 'ACCEPT'
option output 'ACCEPT'
option forward 'REJECT'
option synflood_protect '1'
option drop_invalid '1'
config zone
option name 'lan'
option input 'ACCEPT'
option output 'ACCEPT'
option forward 'ACCEPT'
list network 'lan'
config zone
option name 'wan'
option output 'ACCEPT'
option masq '1'
option mtu_fix '1'
option forward 'DROP'
option input 'DROP'
list network 'wan'
list network 'wan6'
list network 'wwan'
config forwarding
option src 'lan'
option dest 'wan'
config rule
option name 'Allow-DHCP-Renew'
option src 'wan'
option proto 'udp'
option dest_port '68'
option target 'ACCEPT'
option family 'ipv4'
config rule
option name 'Allow-Ping'
option src 'wan'
option proto 'icmp'
option icmp_type 'echo-request'
option family 'ipv4'
option target 'ACCEPT'
option enabled '0'
config rule
option name 'Allow-IGMP'
option src 'wan'
option proto 'igmp'
option family 'ipv4'
option target 'ACCEPT'
config rule
option name 'Allow-DHCPv6'
option src 'wan'
option proto 'udp'
option src_ip 'fc00::/6'
option dest_ip 'fc00::/6'
option dest_port '546'
option family 'ipv6'
option target 'ACCEPT'
config rule
option name 'Allow-MLD'
option src 'wan'
option proto 'icmp'
option src_ip 'fe80::/10'
list icmp_type '130/0'
list icmp_type '131/0'
list icmp_type '132/0'
list icmp_type '143/0'
option family 'ipv6'
option target 'ACCEPT'
config rule
option name 'Allow-ICMPv6-Input'
option src 'wan'
option proto 'icmp'
list icmp_type 'echo-request'
list icmp_type 'echo-reply'
list icmp_type 'destination-unreachable'
list icmp_type 'packet-too-big'
list icmp_type 'time-exceeded'
list icmp_type 'bad-header'
list icmp_type 'unknown-header-type'
list icmp_type 'router-solicitation'
list icmp_type 'neighbour-solicitation'
list icmp_type 'router-advertisement'
list icmp_type 'neighbour-advertisement'
option limit '1000/sec'
option family 'ipv6'
option target 'ACCEPT'
config rule
option name 'Allow-ICMPv6-Forward'
option src 'wan'
option dest '*'
option proto 'icmp'
list icmp_type 'echo-request'
list icmp_type 'echo-reply'
list icmp_type 'destination-unreachable'
list icmp_type 'packet-too-big'
list icmp_type 'time-exceeded'
list icmp_type 'bad-header'
list icmp_type 'unknown-header-type'
option limit '1000/sec'
option family 'ipv6'
option target 'ACCEPT'
config rule
option name 'Allow-IPSec-ESP'
option src 'wan'
option dest 'lan'
option proto 'esp'
option target 'ACCEPT'
config rule
option name 'Allow-ISAKMP'
option src 'wan'
option dest 'lan'
option dest_port '500'
option proto 'udp'
option target 'ACCEPT'
config rule
option name 'Support-UDP-Traceroute'
option src 'wan'
option dest_port '33434:33689'
option proto 'udp'
option family 'ipv4'
option target 'REJECT'
option enabled '0'
config include
option path '/etc/firewall.user'
config rule
option name 'Allow-ZeroTier-Inbound'
list proto 'udp'
option src '*'
option dest_port '9993'
option target 'ACCEPT'
config zone
option name 'zerotier'
option input 'ACCEPT'
option output 'ACCEPT'
option forward 'ACCEPT'
option masq '1'
list network 'ZeroTier'
list network 'zerotier'
config forwarding
option src 'zerotier'
option dest 'lan'
config forwarding
option src 'zerotier'
option dest 'wan'
config forwarding
option src 'lan'
option dest 'zerotier'
config rule
option name 'smb1'
list proto 'udp'
option src 'zerotier'
option src_port '137-138'
option dest 'lan'
option dest_port '137-138'
option target 'ACCEPT'
option enabled '0'
list src_ip '192.168.192.11'
list src_ip 'fe80::d237:45ff:fe2d:5f23'
list dest_ip '192.168.11.1'
list dest_ip 'fe80::d237:45ff:fe2d:5f23'
config rule
option name 'smb2'
list proto 'tcp'
option src 'zerotier'
option src_port '139'
option dest 'lan'
option dest_port '139'
option target 'ACCEPT'
option enabled '0'
list src_ip '192.168.192.11'
list src_ip 'fe80::d237:45ff:fe2d:5f23'
list dest_ip '192.168.11.1'
list dest_ip 'fe80::d237:45ff:fe2d:5f23'
config rule
option name 'smb3'
list proto 'tcp'
option src 'zerotier'
option src_port '445'
option dest 'lan'
option dest_port '445'
option target 'ACCEPT'
option enabled '0'
list src_ip '192.168.192.11'
list src_ip 'fe80::d237:45ff:fe2d:5f23'
list dest_ip '192.168.11.1'
list dest_ip 'fe80::d237:45ff:fe2d:5f23'
config rule
option name 'syncthing'
option src 'wan'
option dest_port '22000'
option target 'ACCEPT'
config rule
option src 'wan'
option target 'ACCEPT'
option name 'file server'
option dest_port '443'
list proto 'tcp'
config include 'miniupnpd'
option type 'script'
option path '/usr/share/miniupnpd/firewall.include'
option family 'any'
option reload '1'
config zone
option name 'guest'
option input 'REJECT'
option output 'ACCEPT'
option forward 'REJECT'
list network 'guest'
option masq '1'
config forwarding
option src 'guest'
option dest 'wan'
config zone
option name 'iot'
option input 'REJECT'
option output 'ACCEPT'
option forward 'REJECT'
option masq '1'
list network 'iot'
config forwarding
option src 'iot'
option dest 'wan'
config rule
option name 'guest dns'
option src 'guest'
option dest_port '53'
option target 'ACCEPT'
config rule
option name 'guest dhcp'
option src 'guest'
option dest_port '67'
option target 'ACCEPT'
option family 'ipv4'
config rule
option name 'iot dhcp'
option src 'iot'
option dest_port '67'
option target 'ACCEPT'
option family 'ipv4'
config rule
option name 'iot dns'
option src 'iot'
option dest_port '53'
option target 'ACCEPT'
config rule
option name 'guest dhcpv6'
option family 'ipv6'
option src 'guest'
option dest_port '546-547'
option target 'ACCEPT'
config rule
option name 'iot dhcpv6'
option family 'ipv6'
option src 'iot'
option dest_port '546-547'
option target 'ACCEPT'
config rule
option src '*'
option dest_port '23'
option target 'ACCEPT'
list proto 'tcp'
list proto 'udp'
option name 'ssh acesso fora'
config rule
option src 'guest'
option name 'Allow-guest-ICMP6'
option family 'ipv6'
option limit '1000/sec'
option target 'ACCEPT'
option proto 'icmp'
list icmp_type 'destination-unreachable'
list icmp_type 'echo-reply'
list icmp_type 'echo-request'
list icmp_type 'fragmentation-needed'
list icmp_type 'neighbour-advertisement'
list icmp_type 'neighbour-solicitation'
list icmp_type 'port-unreachable'
list icmp_type 'protocol-unreachable'
list icmp_type 'router-solicitation'
list icmp_type 'time-exceeded'
option limit_burst '100'
config rule
option src 'iot'
option name 'Allow-iot-ICMP6'
option family 'ipv6'
option limit '1000/sec'
option target 'ACCEPT'
option proto 'icmp'
list icmp_type 'destination-unreachable'
list icmp_type 'echo-reply'
list icmp_type 'echo-request'
list icmp_type 'fragmentation-needed'
list icmp_type 'neighbour-advertisement'
list icmp_type 'neighbour-solicitation'
list icmp_type 'port-unreachable'
list icmp_type 'protocol-unreachable'
list icmp_type 'router-solicitation'
list icmp_type 'time-exceeded'
option limit_burst '100'
# This file is interpreted as shell script.
# Put your custom iptables rules here, they will
# be executed with each firewall (re-)start.
# Internal uci firewall chains are flushed and recreated on reload, so
# put custom rules into the root chains e.g. INPUT or FORWARD or into the
# special user chains, e.g. input_wan_rule or postrouting_lan_rule.
{
"up": true,
"pending": false,
"available": true,
"autostart": true,
"dynamic": false,
"uptime": 12235,
"l3_device": "eth0",
"proto": "dhcpv6",
"device": "eth0",
"metric": 0,
"dns_metric": 0,
"delegation": true,
"ipv4-address": [
],
"ipv6-address": [
],
"ipv6-prefix": [
{
"address": "XXXX:XXX:XXXX:2d00::",
"mask": 56,
"preferred": 77764,
"valid": 77764,
"class": "wan6",
"assigned": {
"guest": {
"address": "XXXX:XXX:XXXX:2d00::",
"mask": 64
},
"iot": {
"address": "XXXX:XXX:XXXX:2d01::",
"mask": 64
},
"lan": {
"address": "XXXX:XXX:XXXX:2d02::",
"mask": 64
},
"wan6": {
"address": "XXXX:XXX:XXXX:2d03::",
"mask": 64
}
}
}
],
"ipv6-prefix-assignment": [
{
"address": "XXXX:XXX:XXXX:2d03::",
"mask": 64,
"preferred": 77764,
"valid": 77764,
"local-address": {
"address": "XXXX:XXX:XXXX:2d03::1",
"mask": 64
}
},
{
"address": "dda1:12ea:dca4:2::",
"mask": 64,
"local-address": {
"address": "dda1:12ea:dca4:2::1",
"mask": 64
}
}
],
"route": [
{
"target": "::",
"mask": 0,
"nexthop": "XXXX::XXXX:XXXX:XXXX:XXXX",
"metric": 512,
"valid": 3667,
"source": "XXXX:XXX:XXXX:2d00::/56"
}
],
"dns-server": [
"2606:4700:4700::1111",
"2606:4700:4700::1001",
"2001:4860:4860::8888",
"2001:4860:4860::8844"
],
"dns-search": [
],
"neighbors": [
],
"inactive": {
"ipv4-address": [
],
"ipv6-address": [
],
"route": [
],
"dns-server": [
"2001:8a0:2106:5:212:55:154:174",
"2001:8a0:2206:5:212:55:154:190"
],
"dns-search": [
],
"neighbors": [
]
},
"data": {
"passthru": "00170020200108a0210600050212005501540174200108a0220600050212005501540190"
}
}
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 state UNKNOWN qlen 1000
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 state UP qlen 1000
inet6 dda1:12ea:dca4:2::1/64 scope global noprefixroute
valid_lft forever preferred_lft forever
inet6 XXXX:XXX:XXXX:2d03::1/64 scope global dynamic noprefixroute
valid_lft 77765sec preferred_lft 77765sec
inet6 XXXX::XXXX:XXXX:XXXX:XXXX/64 scope link
valid_lft forever preferred_lft forever
9: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 state UP qlen 1000
inet6 XXXX::XXXX:XXXX:XXXX:XXXX/64 scope link
valid_lft forever preferred_lft forever
11: eth1.1@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 state UP qlen 1000
inet6 dda1:12ea:dca4:1::1/64 scope global noprefixroute
valid_lft forever preferred_lft forever
inet6 XXXX:XXX:XXXX:2d02::1/64 scope global dynamic noprefixroute
valid_lft 77765sec preferred_lft 77765sec
inet6 XXXX::XXXX:XXXX:XXXX:XXXX/64 scope link
valid_lft forever preferred_lft forever
12: eth1.2@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 state UP qlen 1000
inet6 XXXX:XXX:XXXX:2d00::1/64 scope global dynamic noprefixroute
valid_lft 77765sec preferred_lft 77765sec
inet6 XXXX::XXXX:XXXX:XXXX:5f23/64 scope link
valid_lft forever preferred_lft forever
13: eth1.3@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 state UP qlen 1000
inet6 dda1:12ea:dca4::1/64 scope global noprefixroute
valid_lft forever preferred_lft forever
inet6 XXXX:XXX:XXXX:2d01::1/64 scope global dynamic noprefixroute
valid_lft 77765sec preferred_lft 77765sec
inet6 XXXX::XXXX:XXXX:XXXX:XXXX/64 scope link
valid_lft forever preferred_lft forever
19: ztmjfclcqc: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 2800 state UNKNOWN qlen 1000
inet6 XXXX:XXXX:XXXX:XXXX:XXXX:XXXX:XXXX:XXXX/88 scope global
valid_lft forever preferred_lft forever
inet6 XXXX::XXXX:XXXX:XXXX:XXXX/64 scope link
valid_lft forever preferred_lft forever
default from XXXX:XXX:XXXX:2d00::/56 via XXXX::XXXX:XXXX:XXXX:XXXX dev eth0 proto static metric 512 pref medium
XXXX:XXX:XXXX:2d00::22f dev eth1.2 proto static metric 1024 pref medium
XXXX:XXX:XXXX:2d00:7d88:d2ed:68dd:c67c dev eth1.2 proto static metric 1024 pref medium
XXXX:XXX:XXXX:2d00:b527:308b:aaba:6fc4 dev eth1.2 proto static metric 1024 pref medium
XXXX:XXX:XXXX:2d00::/64 dev eth1.2 proto static metric 1024 pref medium
XXXX:XXX:XXXX:2d01::/64 dev eth1.3 proto static metric 1024 pref medium
XXXX:XXX:XXXX:2d02::44c dev eth1.1 proto static metric 1024 pref medium
XXXX:XXX:XXXX:2d02::fda1 dev eth1.1 proto static metric 1024 pref medium
XXXX:XXX:XXXX:2d02::/64 dev eth1.1 proto static metric 1024 pref medium
XXXX:XXX:XXXX:2d03::/64 dev eth0 proto static metric 1024 pref medium
unreachable XXXX:XXX:XXXX:2d00::/56 dev lo proto static metric 2147483647 pref medium
dda1:12ea:dca4:0:7d88:d2ed:68dd:c67c dev eth1.2 proto static metric 1024 pref medium
dda1:12ea:dca4::/64 dev eth1.3 proto static metric 1024 pref medium
dda1:12ea:dca4:1::fda1 dev eth1.1 proto static metric 1024 pref medium
dda1:12ea:dca4:1::/64 dev eth1.1 proto static metric 1024 pref medium
dda1:12ea:dca4:2:1898:beff:fe44:cb81 dev eth1.1 proto static metric 1024 pref medium
dda1:12ea:dca4:2:91ed:5bfe:fb19:5cef dev eth1.1 proto static metric 1024 pref medium
dda1:12ea:dca4:2:ac35:32f6:75aa:74ce dev eth1.1 proto static metric 1024 pref medium
dda1:12ea:dca4:2:b8af:4fdc:348e:e053 dev eth1.1 proto static metric 1024 pref medium
dda1:12ea:dca4:2:cc4c:ed09:6a64:8b94 dev eth1.1 proto static metric 1024 pref medium
dda1:12ea:dca4:2::/64 dev eth0 proto static metric 1024 pref medium
unreachable dda1:12ea:dca4::/48 dev lo proto static metric 2147483647 pref medium
fd80:56c2:e21c:e768:1e99:9300::/88 dev ztmjfclcqc proto kernel metric 256 pref medium
fe80::/64 dev eth0 proto kernel metric 256 pref medium
fe80::/64 dev eth1 proto kernel metric 256 pref medium
fe80::/64 dev eth1.1 proto kernel metric 256 pref medium
fe80::/64 dev eth1.2 proto kernel metric 256 pref medium
fe80::/64 dev eth1.3 proto kernel metric 256 pref medium
fe80::/64 dev ztmjfclcqc proto kernel metric 256 pref medium
local ::1 dev lo table local proto kernel metric 0 pref medium
anycast XXXX:XXX:XXXX:2d00:: dev eth1.2 table local proto kernel metric 0 pref medium
local XXXX:XXX:XXXX:2d00::1 dev eth1.2 table local proto kernel metric 0 pref medium
anycast XXXX:XXX:XXXX:2d01:: dev eth1.3 table local proto kernel metric 0 pref medium
local XXXX:XXX:XXXX:2d01::1 dev eth1.3 table local proto kernel metric 0 pref medium
anycast XXXX:XXX:XXXX:2d02:: dev eth1.1 table local proto kernel metric 0 pref medium
local XXXX:XXX:XXXX:2d02::1 dev eth1.1 table local proto kernel metric 0 pref medium
anycast XXXX:XXX:XXXX:2d03:: dev eth0 table local proto kernel metric 0 pref medium
local XXXX:XXX:XXXX:2d03::1 dev eth0 table local proto kernel metric 0 pref medium
anycast dda1:12ea:dca4:: dev eth1.3 table local proto kernel metric 0 pref medium
local dda1:12ea:dca4::1 dev eth1.3 table local proto kernel metric 0 pref medium
anycast dda1:12ea:dca4:1:: dev eth1.1 table local proto kernel metric 0 pref medium
local dda1:12ea:dca4:1::1 dev eth1.1 table local proto kernel metric 0 pref medium
anycast dda1:12ea:dca4:2:: dev eth0 table local proto kernel metric 0 pref medium
local dda1:12ea:dca4:2::1 dev eth0 table local proto kernel metric 0 pref medium
anycast XXXX:XXXX:XXXX:XXXX:XXXX:XXXX:: dev ztmjfclcqc table local proto kernel metric 0 pref medium
local XXXX:XXXX:XXXX:XXXX:XXXX:XXXX:XXXX:XXXX dev ztmjfclcqc table local proto kernel metric 0 pref medium
anycast fe80:: dev eth0 table local proto kernel metric 0 pref medium
anycast fe80:: dev eth1.2 table local proto kernel metric 0 pref medium
anycast fe80:: dev eth1.3 table local proto kernel metric 0 pref medium
anycast fe80:: dev eth1.1 table local proto kernel metric 0 pref medium
anycast fe80:: dev eth1 table local proto kernel metric 0 pref medium
anycast fe80:: dev ztmjfclcqc table local proto kernel metric 0 pref medium
local fe80::6097:e9ff:fe18:1932 dev ztmjfclcqc table local proto kernel metric 0 pref medium
local fe80::d237:45ff:fe2d:5f23 dev eth1.2 table local proto kernel metric 0 pref medium
local fe80::d237:45ff:fe2d:5f23 dev eth1.3 table local proto kernel metric 0 pref medium
local fe80::d237:45ff:fe2d:5f23 dev eth1.1 table local proto kernel metric 0 pref medium
local fe80::d237:45ff:fe2d:5f23 dev eth1 table local proto kernel metric 0 pref medium
local fe80::dea6:32ff:fe7b:4c1b dev eth0 table local proto kernel metric 0 pref medium
multicast ff00::/8 dev eth1.1 table local proto kernel metric 256 pref medium
multicast ff00::/8 dev eth1.2 table local proto kernel metric 256 pref medium
multicast ff00::/8 dev eth1.3 table local proto kernel metric 256 pref medium
multicast ff00::/8 dev eth0 table local proto kernel metric 256 pref medium
multicast ff00::/8 dev eth1 table local proto kernel metric 256 pref medium
multicast ff00::/8 dev ztmjfclcqc table local proto kernel metric 256 pref medium
0: from all lookup local
2061: from all fwmark 0x3d00/0x3f00 blackhole
2062: from all fwmark 0x3e00/0x3f00 unreachable
32766: from all lookup main
4200000000: from XXXX:XXX:XXXX:2d00::1/64 iif eth1.2 unreachable
4200000000: from XXXX:XXX:XXXX:2d01::1/64 iif eth1.3 unreachable
4200000000: from XXXX:XXX:XXXX:2d02::1/64 iif eth1.1 unreachable
4200000000: from XXXX:XXX:XXXX:2d03::1/64 iif eth0 unreachable
lrwxrwxrwx 1 root root 16 May 15 15:35 /etc/resolv.conf -> /tmp/resolv.conf
-rw-r--r-- 1 root root 47 May 26 17:44 /tmp/resolv.conf
-rw-r--r-- 1 root root 237 May 26 16:54 /tmp/resolv.conf.d/resolv.conf.auto
/tmp/resolv.conf.d:
total 4
-rw-r--r-- 1 root root 237 May 26 16:54 resolv.conf.auto
==> /etc/resolv.conf <==
search lan
nameserver 127.0.0.1
nameserver ::1
==> /tmp/resolv.conf <==
search lan
nameserver 127.0.0.1
nameserver ::1
==> /tmp/resolv.conf.d <==
head: error reading '/tmp/resolv.conf.d': Is a directory
==> /tmp/resolv.conf.d/resolv.conf.auto <==
# Interface wan
nameserver 1.1.1.1
nameserver 1.0.0.1
nameserver 8.8.8.8
nameserver 8.8.4.4
# Interface wan6
nameserver 2606:4700:4700::1111
nameserver 2606:4700:4700::1001
nameserver 2001:4860:4860::8888
nameserver 2001:4860:4860::8844
My last message got me thinking and I did a test:
The router has full ipv6 connectivity, I can ping google.
I have ipv6 address in the clients, and I can ping the ipv6 default gateway (the router ipv6)
In the clients I can't ping google ipv6.
So I'm guessing this means there is a routing problem in the router, packets destined to it work fine, but packets to another network don't work.
Analyze your default route to see where it goes, since it was redacted in your posting. For example, my default route goes to the LLA of my ISP’s router.
Edit: if the router can ping external IPv6 addresses ok, as you already mentioned, then ignore my post. Could be firewall (forward) related.
I tried to, but this is out of my knowledge...
Well, my addresses change everytime I restart the interface, so I'm guessing there's no harm in posting.
here are all the addresses:
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 state UNKNOWN qlen 1000
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 state UP qlen 1000
inet6 dda1:12ea:dca4:4::1/64 scope global noprefixroute
valid_lft forever preferred_lft forever
inet6 2001:8a0:ec9e:8004::1/64 scope global dynamic noprefixroute
valid_lft 89970sec preferred_lft 89970sec
inet6 2001:8a0:ec9e:8003::1/64 scope global dynamic noprefixroute
valid_lft 89970sec preferred_lft 89970sec
inet6 dda1:12ea:dca4:3::1/64 scope global noprefixroute
valid_lft forever preferred_lft forever
inet6 fe80::dea6:32ff:fe7b:4c1b/64 scope link
valid_lft forever preferred_lft forever
9: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 state UP qlen 1000
inet6 fe80::d237:45ff:fe2d:5f23/64 scope link
valid_lft forever preferred_lft forever
11: eth1.1@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 state UP qlen 1000
inet6 2001:8a0:ec9e:8002::1/64 scope global dynamic noprefixroute
valid_lft 89970sec preferred_lft 89970sec
inet6 dda1:12ea:dca4:2::1/64 scope global noprefixroute
valid_lft forever preferred_lft forever
inet6 fe80::d237:45ff:fe2d:5f23/64 scope link
valid_lft forever preferred_lft forever
12: eth1.2@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 state UP qlen 1000
inet6 2001:8a0:ec9e:8000::1/64 scope global dynamic noprefixroute
valid_lft 89970sec preferred_lft 89970sec
inet6 dda1:12ea:dca4::1/64 scope global noprefixroute
valid_lft forever preferred_lft forever
inet6 fe80::d237:45ff:fe2d:5f23/64 scope link
valid_lft forever preferred_lft forever
13: eth1.3@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 state UP qlen 1000
inet6 2001:8a0:ec9e:8001::1/64 scope global dynamic noprefixroute
valid_lft 89970sec preferred_lft 89970sec
inet6 dda1:12ea:dca4:1::1/64 scope global noprefixroute
valid_lft forever preferred_lft forever
inet6 fe80::d237:45ff:fe2d:5f23/64 scope link
valid_lft forever preferred_lft forever
19: ztmjfclcqc: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 2800 state UNKNOWN qlen 1000
inet6 fd80:56c2:e21c:e768:1e99:9314:ef6a:f665/88 scope global
valid_lft forever preferred_lft forever
inet6 fe80::a879:b4ff:fed0:274c/64 scope link
valid_lft forever preferred_lft forever
default from 2001:8a0:ec9e:8000::/56 via fe80::22e0:9cff:fe1e:fc01 dev eth0 proto static metric 512 pref medium
2001:8a0:ec9e:8000::/64 dev eth1.2 proto static metric 1024 pref medium
2001:8a0:ec9e:8001::/64 dev eth1.3 proto static metric 1024 pref medium
2001:8a0:ec9e:8002::/64 dev eth1.1 proto static metric 1024 pref medium
2001:8a0:ec9e:8003::/64 dev eth0 proto static metric 1024 pref medium
2001:8a0:ec9e:8004::/64 dev eth0 proto static metric 1024 pref medium
unreachable 2001:8a0:ec9e:8000::/56 dev lo proto static metric 2147483647 pref medium
dda1:12ea:dca4::/64 dev eth1.2 proto static metric 1024 pref medium
dda1:12ea:dca4:1::/64 dev eth1.3 proto static metric 1024 pref medium
dda1:12ea:dca4:2::/64 dev eth1.1 proto static metric 1024 pref medium
dda1:12ea:dca4:3::/64 dev eth0 proto static metric 1024 pref medium
dda1:12ea:dca4:4::/64 dev eth0 proto static metric 1024 pref medium
unreachable dda1:12ea:dca4::/48 dev lo proto static metric 2147483647 pref medium
fd80:56c2:e21c:e768:1e99:9300::/88 dev ztmjfclcqc proto kernel metric 256 pref medium
fe80::/64 dev eth0 proto kernel metric 256 pref medium
fe80::/64 dev eth1 proto kernel metric 256 pref medium
fe80::/64 dev eth1.1 proto kernel metric 256 pref medium
fe80::/64 dev eth1.2 proto kernel metric 256 pref medium
fe80::/64 dev eth1.3 proto kernel metric 256 pref medium
fe80::/64 dev ztmjfclcqc proto kernel metric 256 pref medium
local ::1 dev lo table local proto kernel metric 0 pref medium
anycast 2001:8a0:ec9e:8000:: dev eth1.2 table local proto kernel metric 0 pref medium
local 2001:8a0:ec9e:8000::1 dev eth1.2 table local proto kernel metric 0 pref medium
anycast 2001:8a0:ec9e:8001:: dev eth1.3 table local proto kernel metric 0 pref medium
local 2001:8a0:ec9e:8001::1 dev eth1.3 table local proto kernel metric 0 pref medium
anycast 2001:8a0:ec9e:8002:: dev eth1.1 table local proto kernel metric 0 pref medium
local 2001:8a0:ec9e:8002::1 dev eth1.1 table local proto kernel metric 0 pref medium
anycast 2001:8a0:ec9e:8003:: dev eth0 table local proto kernel metric 0 pref medium
local 2001:8a0:ec9e:8003::1 dev eth0 table local proto kernel metric 0 pref medium
anycast 2001:8a0:ec9e:8004:: dev eth0 table local proto kernel metric 0 pref medium
local 2001:8a0:ec9e:8004::1 dev eth0 table local proto kernel metric 0 pref medium
anycast dda1:12ea:dca4:: dev eth1.2 table local proto kernel metric 0 pref medium
local dda1:12ea:dca4::1 dev eth1.2 table local proto kernel metric 0 pref medium
anycast dda1:12ea:dca4:1:: dev eth1.3 table local proto kernel metric 0 pref medium
local dda1:12ea:dca4:1::1 dev eth1.3 table local proto kernel metric 0 pref medium
anycast dda1:12ea:dca4:2:: dev eth1.1 table local proto kernel metric 0 pref medium
local dda1:12ea:dca4:2::1 dev eth1.1 table local proto kernel metric 0 pref medium
anycast dda1:12ea:dca4:3:: dev eth0 table local proto kernel metric 0 pref medium
local dda1:12ea:dca4:3::1 dev eth0 table local proto kernel metric 0 pref medium
anycast dda1:12ea:dca4:4:: dev eth0 table local proto kernel metric 0 pref medium
local dda1:12ea:dca4:4::1 dev eth0 table local proto kernel metric 0 pref medium
anycast fd80:56c2:e21c:e768:1e99:9300:: dev ztmjfclcqc table local proto kernel metric 0 pref medium
local fd80:56c2:e21c:e768:1e99:9314:ef6a:f665 dev ztmjfclcqc table local proto kernel metric 0 pref medium
anycast fe80:: dev eth0 table local proto kernel metric 0 pref medium
anycast fe80:: dev eth1 table local proto kernel metric 0 pref medium
anycast fe80:: dev eth1.1 table local proto kernel metric 0 pref medium
anycast fe80:: dev eth1.3 table local proto kernel metric 0 pref medium
anycast fe80:: dev ztmjfclcqc table local proto kernel metric 0 pref medium
anycast fe80:: dev eth1.2 table local proto kernel metric 0 pref medium
local fe80::a879:b4ff:fed0:274c dev ztmjfclcqc table local proto kernel metric 0 pref medium
local fe80::d237:45ff:fe2d:5f23 dev eth1 table local proto kernel metric 0 pref medium
local fe80::d237:45ff:fe2d:5f23 dev eth1.1 table local proto kernel metric 0 pref medium
local fe80::d237:45ff:fe2d:5f23 dev eth1.3 table local proto kernel metric 0 pref medium
local fe80::d237:45ff:fe2d:5f23 dev eth1.2 table local proto kernel metric 0 pref medium
local fe80::dea6:32ff:fe7b:4c1b dev eth0 table local proto kernel metric 0 pref medium
multicast ff00::/8 dev eth1.1 table local proto kernel metric 256 pref medium
multicast ff00::/8 dev eth1.2 table local proto kernel metric 256 pref medium
multicast ff00::/8 dev eth1.3 table local proto kernel metric 256 pref medium
multicast ff00::/8 dev eth0 table local proto kernel metric 256 pref medium
multicast ff00::/8 dev eth1 table local proto kernel metric 256 pref medium
multicast ff00::/8 dev ztmjfclcqc table local proto kernel metric 256 pref medium
0: from all lookup local
32766: from all lookup main
4200000000: from 2001:8a0:ec9e:8000::1/64 iif eth1.2 unreachable
4200000000: from 2001:8a0:ec9e:8001::1/64 iif eth1.3 unreachable
4200000000: from 2001:8a0:ec9e:8002::1/64 iif eth1.1 unreachable
4200000000: from 2001:8a0:ec9e:8003::1/64 iif eth0 unreachable
4200000000: from 2001:8a0:ec9e:8004::1/64 iif eth0 unreachable
and as you see, even inside the router, from that interface it doesn't work:
~# ping -6 google.com -I eth0 -c 1
PING google.com (2a00:1450:4003:80a::200e): 56 data bytes
64 bytes from 2a00:1450:4003:80a::200e: seq=0 ttl=116 time=16.173 ms
--- google.com ping statistics ---
1 packets transmitted, 1 packets received, 0% packet loss
round-trip min/avg/max = 16.173/16.173/16.173 ms
~# ping -6 google.com -I eth1 -c 1
PING google.com (2a00:1450:4003:80a::200e): 56 data bytes
ping: sendto: Network unreachable
Sorry, but this is expected. How will google server answer you when you send the packet to the lan interface?
ip6assign is still there. Reqprefix is still 64. Change them to disabled and auto respectively.
Well.. something happened in my ISP
Now it's returning Server returned IA_PD status 'No Prefix Available (No prefixes have been assigned)
and now I can't get any ipv6 connectivity, even in the router. Any ideas of what happened?
No idea, maybe something changed from their side? Better give them a call.