Ipv6 configuration

I get /128 addresses, I guess that means a single address, right? Equivalent to a /32 ipv4 address?

I see a /64 in the lan, pretty lame of your ISP. Give them a call to tell them that a /56 or /60 is expected for residential customers.

And how do I proceed after the CIDR notation has been changed?

In a default OpenWrt installation it will work automatically.

1 Like

How? Do I need to enable the DHCPv6 server on the modem and configure the openwrt device as a client? Which address pool should be used for the DHCPv6 server to make this work?

Does your /128 WAN address belong to the /64 LAN subnet?
Can you switch your modem into a bridge mode?

Ideally the ISP will send you a prefix pool. One of those prefixes will be installed as the basis for IPv6 addresses on LAN, and the RA / DHCPv6 server will serve them to endpoint PCs. The OpenWrt defaults are set up to do this.

1 Like

Do you really need to run the vigor 130 in router mode?
You usually have a much better time to use it configured as modem-only, with the PPPoE session being established and terminated on your OpenWrt router (which then forms the public IPv4 endpoint and gets the full IPv6 prefix, to delegate per your policies via DHCPv6-PD).

(the vigor 130 not handing over the prefix properly might already be your issue)

Yes, the /128 WAN address is part of the /64 LAN subnet.

One of those prefixes will be installed as the basis for IPv6 addresses on LAN, and the RA / DHCPv6 server will serve them to endpoint PCs.

Which ipv6 addresses will the clients on the LAN be assigned, the ones beginning with 2003: or the ones beginning with FE80: ?

Should the DHCPv6 Server on the modem be enabled to serve the addresses to the clients on the LAN?

In my current setup, the openwrt device is connected to the modem via ip, so the WAN interface of the openwrt device has an ip address in the 172.16.8.8/29 subnet as well the LAN interface of the modem. The LAN interface of the openwrt device is part of the 192.168.5.0/24 subnet, all clients get their ip-addresses in that subnet.

I'd like to keep this configuration for ipv6 as well, so ideally I'd have the openwrt devices WAN interface in the same ipv6 subnet as the LAN interface of the modem and serve clients on the LAN interface of the openwrt device with ipv6 addresses part of a different ipv6 subnet.
Does it work that way? I'm confused why the modem has two addresses for each ipv6 interface (WAN and LAN both have the global and local addresses)

Consider using your modem as a modem (or bridge) and not as a router.

1 Like

I tried using the modem as a bridge, but I'm not yet familiar with VLAN tag insertion for WAN interfaces on openwrt, which is required by my ISP. I'm not sure if VLAN tag insertion is happening automatically on the draytek when using MPoA in bridge mode and whether or not I need to configure the VLAN tag insertion for the WAN interface of the openwrt device.

Please refer to https://www.draytek.co.uk/support/guides/kb-vigor-130-bridge

I also found that documentation, but I think more fittingly it would be the other document linked on the bottom of that page:

And I would like to know how to set up this 802.1q tagging along with PPPoE on the openwrt device, because when I tried creating a new WAN interface which had tagging enabled, I was unable to reach the device after configuration had been applied.

From the link I gave you:

The connected router does not need to be configured with a VLAN tag to connect to VDSL

You can do the VLAN tagging on the OpenWrt router or the vigor (independently of the PPPoE session and the rest), both works equally well, but I'd prefer doing that on the OpenWrt router (as well). Yes, depending on your router, the configuration syntax varies a bit (swconfig vs DSA vs dedicated interfaces), but it's not rocket science either.

Thank you very much for the suggestion. I tried using your configuration, but it seems the pppoe connection can't be established:


In the logs there are entries documenting that a PPPoE connection attempt is made by the openwrt device which fails due to a PADO timeout.

The line

        option ifname '@wan'              

is automatically changed to

       option device '@wan'              

but I guess that syntax was changed with an openwrt update sometime.

You may have to wait for ~10 minutes, if the ISP has locked onto the DHCP lease of your vigor (and now sees the router for the first time, thinking you'd try two connections at the same time).

I would suggest to switch off modem and router for that time (those 10 minutes, could be more, but 10 minutes are a good start).

I'll try that in the evening. After having put the vigor into bridge mode, how can i access its web interface again?

long term, you can set up a modem interface for the vigor webif (aliased to wan, the wiki has details about it), but for testing I'd keep it simple (until it works).

I suppose check the device manual. my ISP device for instance needs to be accessed on a specific lan port on a specific IPv4 link local address :man_shrugging: