IPV6 connection problem

Hi,
Since several days I try to solve a problem, most probably easy for someone who understand OpenWRT in depth. I would like to use IPV6 on OpenWRT installed router ( TL-WDR3600 ). Currently I receive IPV6 public address, and hosts connected to lan network also receives IPV6 addresses. My problem is that IPV6 requests of any type doesn't pass through the router. For example Ping6 IPV6 address or URI 100% packet loss, Any host on lan network Ping6 IPV6 address or URI 100% packet loss. No errors like permission denied is displayed. Could somebody help me solve this problem? IPV6 address is obtained via DHCPv6 client from the provider.

From OpenWrt router:

traceroute6 example.org
ifstatus wan6
ifstatus lan

https://openwrt.org/docs/guide-quick-start/sshadministration

root@LEDE:~# ifstatus lan
{
"up": true,
"pending": false,
"available": true,
"autostart": true,
"dynamic": false,
"uptime": 20483,
"l3_device": "br-lan",
"proto": "static",
"device": "br-lan",
"updated": [
"addresses"
],
"metric": 0,
"dns_metric": 0,
"delegation": true,
"ipv4-address": [
{
"address": "192.168.1.1",
"mask": 24
}
],
"ipv6-address": [

    ],
    "ipv6-prefix": [

    ],
    "ipv6-prefix-assignment": [
            {
                    "address": "2a01:36d:3100:67ef::",
                    "mask": 64,
                    "preferred": 584325,
                    "valid": 584325,
                    "local-address": {
                            "address": "2a01:36d:3100:67ef::1",
                            "mask": 64
                    }
            },
            {
                    "address": "fda6:11aa:bc8b::",
                    "mask": 64,
                    "local-address": {
                            "address": "fda6:11aa:bc8b::1",
                            "mask": 64
                    }
            }
    ],
    "route": [

    ],
    "dns-server": [

    ],
    "dns-search": [

    ],
    "inactive": {
            "ipv4-address": [

            ],
            "ipv6-address": [

            ],
            "route": [

            ],
            "dns-server": [

            ],
            "dns-search": [

            ]
    },
    "data": {

    }

}

root@LEDE:~# ifstatus wan6
Interface wan6 not found

WAN6 exists --> connected to @wan

I STOPPED process after 5 minutes...

root@LEDE:~# traceroute6 openwrt.org
traceroute to openwrt.org (2a03:b0c0:3:d0::1af1:1), 30 hops max, 16 byte packets
1 2a01-036c-3100-67ef-70f0-b236-e290-92cf.pool6.digikabel.hu (2a01:36c:3100:67ef:70f0:b236:e290:92cf) 14.914 ms 12.882 ms 12.250 ms
2 2a01:368:3101:1000::1 (2a01:368:3101:1000::1) 1.230 ms 1.333 ms 1.843 ms
3 * * *
4 * * *
5 * * *
6 * * *
7 * * *
8 * * *
9 * * *
10 * * *
11 * * *
12 * * *
13 * * *
14 * * *
15 * * *
16 * * *
17 * * *
18 * * *
19 * * *
20 * * *
21 * * *
22 * * *
23 * * *
24^C

uci show network; ip a; ip -6 r

root@LEDE:~# uci show network; ip a; ip -6 r
network.loopback=interface
network.loopback.ifname='lo'
network.loopback.proto='static'
network.loopback.ipaddr='127.0.0.1'
network.loopback.netmask='255.0.0.0'
network.globals=globals
network.globals.ula_prefix='fda6:11aa:bc8b::/48'
network.lan=interface
network.lan.type='bridge'
network.lan.proto='static'
network.lan.ipaddr='192.168.1.1'
network.lan.netmask='255.255.255.0'
network.lan.ip6assign='64'
network.lan._orig_ifname='eth0.1 wlan0 radio1.network1'
network.lan._orig_bridge='true'
network.lan.ifname='eth0.1'
network.wan=interface
network.wan.ifname='eth0.2'
network.wan._orig_ifname='eth0.2'
network.wan._orig_bridge='false'
network.wan.proto='pppoe'
network.wan.username=''
network.wan.password='
'
network.wan.ipv6='auto'
network.@switch[0]=switch
network.@switch[0].name='switch0'
network.@switch[0].reset='1'
network.@switch[0].enable_vlan='1'
network.@switch_vlan[0]=switch_vlan
network.@switch_vlan[0].device='switch0'
network.@switch_vlan[0].vlan='1'
network.@switch_vlan[0].ports='2 3 4 5 0t'
network.@switch_vlan[1]=switch_vlan
network.@switch_vlan[1].device='switch0'
network.@switch_vlan[1].vlan='2'
network.@switch_vlan[1].ports='1 0t'
network.WAN6=interface
network.WAN6._orig_ifname='eth0'
network.WAN6._orig_bridge='false'
network.WAN6.proto='dhcpv6'
network.WAN6.reqaddress='try'
network.WAN6.reqprefix='auto'
network.WAN6.ifname='@wan'
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
link/ether 10:fe:ed:c1:b8:ee brd ff:ff:ff:ff:ff:ff
inet6 fe80::12fe:edff:fec1:b8ee/64 scope link
valid_lft forever preferred_lft forever
3: sit0@NONE: mtu 1480 qdisc noop state DOWN group default qlen 1
link/sit 0.0.0.0 brd 0.0.0.0
5: wlan1: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN group default qlen 1000
link/ether 10:fe:ed:c1:b8:f0 brd ff:ff:ff:ff:ff:ff
6: br-lan: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
link/ether 10:fe:ed:c1:b8:ee brd ff:ff:ff:ff:ff:ff
inet 192.168.1.1/24 brd 192.168.1.255 scope global br-lan
valid_lft forever preferred_lft forever
inet6 2a01:36d:3100:67ef::1/64 scope global noprefixroute dynamic
valid_lft 583520sec preferred_lft 583520sec
inet6 fda6:11aa:bc8b::1/64 scope global noprefixroute
valid_lft forever preferred_lft forever
inet6 fe80::12fe:edff:fec1:b8ee/64 scope link
valid_lft forever preferred_lft forever
7: eth0.1@eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master br-lan state UP group default qlen 1000
link/ether 10:fe:ed:c1:b8:ee brd ff:ff:ff:ff:ff:ff
8: eth0.2@eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
link/ether 10:fe:ed:c1:b8:ee brd ff:ff:ff:ff:ff:ff
inet6 fe80::12fe:edff:fec1:b8ee/64 scope link
valid_lft forever preferred_lft forever
9: pppoe-wan: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1492 qdisc fq_codel state UNKNOWN group default qlen 3
link/ppp
inet 84.236.123.94 peer 10.0.0.1/32 scope global pppoe-wan
valid_lft forever preferred_lft forever
inet6 2a01:36c:3100:67ef:1dbe:abf6:fba:16/128 scope global noprefixroute dynamic
valid_lft 86123sec preferred_lft 14123sec
inet6 fe80::1dbe:abf6:fba:16/10 scope link
valid_lft forever preferred_lft forever
10: wlan0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master br-lan state UP group default qlen 1000
link/ether 10:fe:ed:c1:b8:ef brd ff:ff:ff:ff:ff:ff
inet6 fe80::12fe:edff:fec1:b8ef/64 scope link
valid_lft forever preferred_lft forever
default from 2a01:36c:3100:67ef:1dbe:abf6:fba:16 via fe80::70f0:b236:e290:92cf dev pppoe-wan proto static metric 512 pref medium
default from 2a01:36c:3100:67ef::/64 via fe80::70f0:b236:e290:92cf dev pppoe-wan proto static metric 512 pref medium
default from 2a01:36d:3100:67ef::/64 via fe80::70f0:b236:e290:92cf dev pppoe-wan proto static metric 512 pref medium
2a01:36c:3100:67ef::/64 dev pppoe-wan proto static metric 256 pref medium
2a01:36d:3100:67ef::/64 dev br-lan proto static metric 1024 pref medium
unreachable 2a01:36d:3100:67ef::/64 dev lo proto static metric 2147483647 error -148 pref medium
fda6:11aa:bc8b::/64 dev br-lan proto static metric 1024 pref medium
unreachable fda6:11aa:bc8b::/48 dev lo proto static metric 2147483647 error -148 pref medium
fe80::/64 dev eth0 proto kernel metric 256 pref medium
fe80::/64 dev eth0.2 proto kernel metric 256 pref medium
fe80::/64 dev br-lan proto kernel metric 256 pref medium
fe80::/64 dev wlan0 proto kernel metric 256 pref medium
fe80::/10 dev pppoe-wan metric 1 pref medium
fe80::/10 dev pppoe-wan proto kernel metric 256 pref medium

Make interface name lowercase and fix the firewall zone:

uci rename network.WAN6="wan6"
uci commit network
service network reload
uci -q delete firewall.@zone[1].network
uci add_list firewall.@zone[1].network="wan"
uci add_list firewall.@zone[1].network="wan6"
uci commit firewall
service firewall restart

Test using IPv6-address from the prefix:

ping6 -c 3 -I 2a01:36d:3100:67ef::1 example.org
1 Like

root@LEDE:~# ping6 -c 3 -I 2a01:36d:3100:67ef::1 openwrt.org
PING openwrt.org (2a03:b0c0:3:d0::1af1:1) from 2a01:36d:3100:67ef::1: 56 data bytes

--- openwrt.org ping statistics ---
3 packets transmitted, 0 packets received, 100% packet loss

wan6 status already listing!

root@LEDE:~# ifstatus wan6
{
"up": true,
"pending": false,
"available": true,
"autostart": true,
"dynamic": false,
"uptime": 66,
"l3_device": "pppoe-wan",
"proto": "dhcpv6",
"device": "pppoe-wan",
"updated": [
"addresses",
"routes",
"prefixes",
"data"
],
"metric": 0,
"dns_metric": 0,
"delegation": true,
"ipv4-address": [

    ],
    "ipv6-address": [
            {
                    "address": "2a01:36c:3100:624f:399c:f2a1:107f:b8e5",
                    "mask": 128,
                    "preferred": 604726,
                    "valid": 604726
            }
    ],
    "ipv6-prefix": [
            {
                    "address": "2a01:36d:3100:624f::",
                    "mask": 64,
                    "preferred": 604726,
                    "valid": 604726,
                    "class": "wan6",
                    "assigned": {
                            "lan": {
                                    "address": "2a01:36d:3100:624f::",
                                    "mask": 64
                            }
                    }
            }
    ],
    "ipv6-prefix-assignment": [

    ],
    "route": [
            {
                    "target": "2a01:36c:3100:624f::",
                    "mask": 64,
                    "nexthop": "::",
                    "metric": 256,
                    "valid": 86324,
                    "source": "::\/0"
            },
            {
                    "target": "::",
                    "mask": 0,
                    "nexthop": "fe80::c89:c07d:4eb3:483f",
                    "metric": 512,
                    "valid": 1724,
                    "source": "2a01:36d:3100:624f::\/64"
            },
            {
                    "target": "::",
                    "mask": 0,
                    "nexthop": "fe80::c89:c07d:4eb3:483f",
                    "metric": 512,
                    "valid": 1724,
                    "source": "2a01:36c:3100:624f:399c:f2a1:107f:b8e5\/128"
            }
    ],
    "dns-server": [
            "2a01:368:a::1",
            "2a01:368:a::2"
    ],
    "dns-search": [

    ],
    "inactive": {
            "ipv4-address": [

            ],
            "ipv6-address": [

            ],
            "route": [

            ],
            "dns-server": [

            ],
            "dns-search": [

            ]
    },
    "data": {
            "passthru": "001700202a010368000a000000000000000000012a010368000                                                                                                                                        a00000000000000000002"
    }

}

I don't see any obvious problems in your current configuration.
Try to reboot the router and check the diagnostics again.
If nothing changes, then I suspect some firewall/routing issue on the side of the ISP.
If they don't fix it fast enough, you can obtain a working IPv6-prefix from a tunnel broker.

Thanks for your help!!! I already rebooted device, but it still doesn't work :frowning:
Contacting the provider was my first reaction to the problem, but they said there is no configuration problem on their side. My opinion is, they never checked it :frowning: They simply replied it is ok, and closed the case from their side. I will try to find some professional guy at my provider. Maybe he will help me!

Anyway thanks again for your time and affort!!

1 Like

Most probably you must be right! I tried to connect my Win10 laptop directly to ISP modem through PPPoE connection ( without router ) and the result was exactly the same! IPV6 addresses are assigned and received, but the outgoing IPV6 connections seems to be blocked...

Thanks again!!

2 Likes