IPv6 Configurations failed

Uruloki · January 18, 2022, 10:09am

Hi everyone, today my ISP activate my IPv6 then this came up to interfaces section

So i wanna test IPv6 if run or doesnt but it doesnt ( tested via https://ipv6test.google.com/ )

Then i tried https://openwrt.org/docs/guide-user/network/ipv6/configuration this link but that doesnt work either

And there is my network and firewall configuration

config interface 'loopback'
        option proto 'static'
        option ipaddr '127.0.0.1'
        option netmask '255.0.0.0'
        option device 'lo'

config globals 'globals'
        option ula_prefix 'fdbc:b715:08bd::/48'

config interface 'lan'
        option proto 'static'
        option netmask '255.255.255.0'
        option ipaddr '10.0.0.1'
        option device 'br-lan'

config interface 'wan'
        option proto 'pppoe'
        option ipv6 'auto'
        option username ''
        option password ''
        option device 'eth1'
        option ip6assign '64'
        list ip6class 'wan_6'

config interface 'modem'
option proto 'static'
        option netmask '255.255.255.0'
        option ipaddr '192.168.1.2'
        option device 'eth1'

config interface 'wan6'
        option proto 'dhcpv6'
        option reqaddress 'try'
        option reqprefix 'auto'
        option device 'pppoe-wan'

config switch
        option name 'switch0'
        option reset '1'
        option enable_vlan '1'

config switch_vlan
        option device 'switch0'
        option vlan '1'
        option ports '1 2 3 4 0'

config device
 option name 'br-lan'
        option type 'bridge'
        list ports 'eth0'

config device
        option name 'wlan1'
        option multicast_router '1'
        option multicast_to_unicast '1'

config device
        option name 'wlan0'
        option multicast_router '1'

config defaults
        option input 'ACCEPT'
        option output 'ACCEPT'
        option synflood_protect '1'
        option forward 'ACCEPT'

config zone
        option name 'lan'
        option input 'ACCEPT'
        option output 'ACCEPT'
        option forward 'ACCEPT'
        list network 'lan'

config zone
        option name 'wan'
        option input 'REJECT'
        option output 'ACCEPT'
        option forward 'REJECT'
        option masq '1'
        option mtu_fix '1'
        list network 'wan'
        list network 'modem'
        list network 'wan6'

config forwarding
option src 'lan'
        option dest 'wan'

config rule
        option name 'Allow-DHCP-Renew'
        option src 'wan'
        option proto 'udp'
        option dest_port '68'
        option target 'ACCEPT'
        option family 'ipv4'

config rule
        option name 'Allow-Ping'
        option src 'wan'
        option proto 'icmp'
        option icmp_type 'echo-request'
        option family 'ipv4'
        option target 'ACCEPT'

config rule
        option name 'Allow-IGMP'
        option src 'wan'
        option proto 'igmp'
        option family 'ipv4'
option target 'ACCEPT'

config rule
        option name 'Allow-DHCPv6'
        option src 'wan'
        option proto 'udp'
        option src_ip 'fc00::/6'
        option dest_ip 'fc00::/6'
        option dest_port '546'
        option family 'ipv6'
        option target 'ACCEPT'

config rule
        option name 'Allow-MLD'
        option src 'wan'
        option proto 'icmp'
        option src_ip 'fe80::/10'
        list icmp_type '130/0'
        list icmp_type '131/0'
        list icmp_type '132/0'
        list icmp_type '143/0'
        option family 'ipv6'
        option target 'ACCEPT'

config rule
        option name 'Allow-ICMPv6-Input'
        option src 'wan'
        option proto 'icmp'
        list icmp_type 'echo-request'
        list icmp_type 'echo-reply'
        list icmp_type 'destination-unreachable'
        list icmp_type 'packet-too-big'
        list icmp_type 'time-exceeded'
        list icmp_type 'bad-header'
        list icmp_type 'unknown-header-type'
        list icmp_type 'router-solicitation'
        list icmp_type 'neighbour-solicitation'
        list icmp_type 'router-advertisement'
        list icmp_type 'neighbour-advertisement'
        option limit '1000/sec'
        option family 'ipv6'
        option target 'ACCEPT'

config rule
        option name 'Allow-ICMPv6-Forward'
        option src 'wan'
        option dest '*'
        option proto 'icmp'
        list icmp_type 'echo-request'
        list icmp_type 'echo-reply'
        list icmp_type 'destination-unreachable'
        list icmp_type 'packet-too-big'
        list icmp_type 'time-exceeded'
        list icmp_type 'bad-header'
        list icmp_type 'unknown-header-type'
        option limit '1000/sec'
        option family 'ipv6'
        option target 'ACCEPT'

jow · January 18, 2022, 10:18am

Your lan interface lacks option ip6assign 60.

Uruloki · January 18, 2022, 10:30am

This option is disabled now switch to 64 (only 64) but still same it doesnt work

mikma · January 18, 2022, 10:38am

Have you also removed ip6assign from the wan interface? It seems you have been delegated one /64 only, which you need on the lan.

Uruloki · January 18, 2022, 10:46am

Can you explain? Im newbie for that and there is lastest network configuration

config interface 'loopback'
        option proto 'static'
        option ipaddr '127.0.0.1'
        option netmask '255.0.0.0'
        option device 'lo'

config globals 'globals'
        option ula_prefix 'fdbc:b715:08bd::/48'

config interface 'lan'
        option proto 'static'
        option netmask '255.255.255.0'
        option ipaddr '10.0.0.1'
        option device 'br-lan'
        option ip6assign '64'

config interface 'wan'
        option proto 'pppoe'
        option ipv6 'auto'
        option username ''
        option password ''
        option device 'eth1'

config interface 'wan6'
        option proto 'dhcpv6'
option reqaddress 'try'
        option reqprefix 'auto'
        option device 'pppoe-wan'

config interface 'modem'
        option proto 'static'
        option netmask '255.255.255.0'
        option ipaddr '192.168.1.2'
        option device 'eth1'

config switch
        option name 'switch0'
        option reset '1'
        option enable_vlan '1'

config switch_vlan
        option device 'switch0'
        option vlan '1'
        option ports '1 2 3 4 0'

config device
        option name 'br-lan'
        option type 'bridge'
        list ports 'eth0'

config device
        option name 'wlan1'
        option multicast_router '1'
        option multicast_to_unicast '1'

config device
        option name 'wlan0'
        option multicast_router '1'

Uruloki · January 19, 2022, 10:21am

Any suggestions?