Hi all,
I'm struggling to get ipv6 working on my internal LAN.
I have a Telenet DOCSIS 3.1 E-ROUTER (CV8560E) modem: ipv4 is bridged and ipv6 is routed.
Devices connected directly to this modem get an ipv6 address with a /64 subnet address.
Now I want to use OpenWrt as my own firewall. i'm running version 22.03.0-rc4, as this version support my hardware (NanoPi R4S).
It's a fresh installation. I only added 'relay' to the lan config.
My OpenWrt device gets ipv6 addresses on all interfaces:
However none of the devices connected to my OpenWrt device get an ipv6 address. I have tried all examples from the documentation and none is working.
Do I have to install additional packages? Only the default are installed.
Is the documentation not yet up to date for my version (22.03.0-rc4)?
Can somebody help me?
package network
config interface 'loopback'
option device 'lo'
option proto 'static'
option ipaddr '127.0.0.1'
option netmask '255.0.0.0'
config globals 'globals'
option ula_prefix 'fdfa:82c6:9af4::/48'
config device
option name 'br-lan'
option type 'bridge'
list ports 'eth1'
config device
option name 'eth1'
option macaddr '82:34:28:38:f0:46'
config interface 'lan'
option device 'br-lan'
option proto 'static'
option ipaddr '192.168.1.1'
option netmask '255.255.255.0'
option ip6assign '60'
config device
option name 'eth0'
option macaddr '80:34:28:38:f0:46'
config interface 'wan'
option device 'eth0'
option proto 'dhcp'
config interface 'wan6'
option device 'eth0'
option proto 'dhcpv6'
package dhcp
config dnsmasq
option domainneeded '1'
option localise_queries '1'
option rebind_protection '1'
option rebind_localhost '1'
option local '/lan/'
option domain 'lan'
option expandhosts '1'
option authoritative '1'
option readethers '1'
option leasefile '/tmp/dhcp.leases'
option resolvfile '/tmp/resolv.conf.d/resolv.conf.auto'
option localservice '1'
option ednspacket_max '1232'
config dhcp 'lan'
option interface 'lan'
option start '100'
option limit '150'
option leasetime '12h'
option dhcpv4 'server'
option dhcpv6 'relay'
option ra 'relay'
option relay 'relay'
list ra_flags 'none'
config dhcp 'wan'
option interface 'wan'
option ignore '1'
config odhcpd 'odhcpd'
option maindhcp '0'
option leasefile '/tmp/hosts/odhcpd'
option leasetrigger '/usr/sbin/odhcpd-update'
option loglevel '4'
package firewall
config defaults
option syn_flood '1'
option input 'ACCEPT'
option output 'ACCEPT'
option forward 'REJECT'
config zone
option name 'lan'
list network 'lan'
option input 'ACCEPT'
option output 'ACCEPT'
option forward 'ACCEPT'
config zone
option name 'wan'
list network 'wan'
list network 'wan6'
option input 'REJECT'
option output 'ACCEPT'
option forward 'REJECT'
option masq '1'
option mtu_fix '1'
config forwarding
option src 'lan'
option dest 'wan'
config rule
option name 'Allow-DHCP-Renew'
option src 'wan'
option proto 'udp'
option dest_port '68'
option target 'ACCEPT'
option family 'ipv4'
config rule
option name 'Allow-Ping'
option src 'wan'
option proto 'icmp'
option icmp_type 'echo-request'
option family 'ipv4'
option target 'ACCEPT'
config rule
option name 'Allow-IGMP'
option src 'wan'
option proto 'igmp'
option family 'ipv4'
option target 'ACCEPT'
config rule
option name 'Allow-DHCPv6'
option src 'wan'
option proto 'udp'
option dest_port '546'
option family 'ipv6'
option target 'ACCEPT'
config rule
option name 'Allow-MLD'
option src 'wan'
option proto 'icmp'
option src_ip 'fe80::/10'
list icmp_type '130/0'
list icmp_type '131/0'
list icmp_type '132/0'
list icmp_type '143/0'
option family 'ipv6'
option target 'ACCEPT'
config rule
option name 'Allow-ICMPv6-Input'
option src 'wan'
option proto 'icmp'
list icmp_type 'echo-request'
list icmp_type 'echo-reply'
list icmp_type 'destination-unreachable'
list icmp_type 'packet-too-big'
list icmp_type 'time-exceeded'
list icmp_type 'bad-header'
list icmp_type 'unknown-header-type'
list icmp_type 'router-solicitation'
list icmp_type 'neighbour-solicitation'
list icmp_type 'router-advertisement'
list icmp_type 'neighbour-advertisement'
option limit '1000/sec'
option family 'ipv6'
option target 'ACCEPT'
config rule
option name 'Allow-ICMPv6-Forward'
option src 'wan'
option dest '*'
option proto 'icmp'
list icmp_type 'echo-request'
list icmp_type 'echo-reply'
list icmp_type 'destination-unreachable'
list icmp_type 'packet-too-big'
list icmp_type 'time-exceeded'
list icmp_type 'bad-header'
list icmp_type 'unknown-header-type'
option limit '1000/sec'
option family 'ipv6'
option target 'ACCEPT'
config rule
option name 'Allow-IPSec-ESP'
option src 'wan'
option dest 'lan'
option proto 'esp'
option target 'ACCEPT'
config rule
option name 'Allow-ISAKMP'
option src 'wan'
option dest 'lan'
option dest_port '500'
option proto 'udp'
option target 'ACCEPT'
head: /etc/firewall.user: No such file or directory
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 state UNKNOWN qlen 1000
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 state UP qlen 1000
inet6 2a02:1811:e40e:1400:8234:28ff:fe38:f046/64 scope global dynamic noprefixroute
valid_lft 232620sec preferred_lft 86383sec
inet6 2a02:1811:e40e:1400::f510/128 scope global dynamic noprefixroute
valid_lft 220582sec preferred_lft 53721sec
inet6 fe80::8234:28ff:fe38:f046/64 scope link
valid_lft forever preferred_lft forever
4: br-lan: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 state UP qlen 1000
inet6 2a02:1811:e40e:1420::1/60 scope global dynamic noprefixroute
valid_lft 226520sec preferred_lft 53720sec
inet6 fdfa:82c6:9af4::1/60 scope global noprefixroute
valid_lft forever preferred_lft forever
inet6 fe80::8034:28ff:fe38:f046/64 scope link
valid_lft forever preferred_lft forever
default from 2a02:1811:e40e:1400::f510 via fe80::6802:b8ff:fe77:c298 dev eth0 metric 384
default from 2a02:1811:e40e:1400::/64 via fe80::6802:b8ff:fe77:c298 dev eth0 metric 384
default from 2a02:1811:e40e:1420::/60 via fe80::6802:b8ff:fe77:c298 dev eth0 metric 384
2a02:1811:e40e:1400::/64 dev eth0 metric 256
unreachable 2a02:1811:e40e:1400::/64 dev lo metric 2147483647
2a02:1811:e40e:1420::/64 dev br-lan metric 1024
unreachable 2a02:1811:e40e:1420::/60 dev lo metric 2147483647
fda6:4b0b:dbf4:2bba::/64 from 2a02:1811:e40e:1400::f510 via fe80::1e53:f9ff:fe0a:18ab dev eth0 metric 512
fda6:4b0b:dbf4:2bba::/64 from 2a02:1811:e40e:1400::/64 via fe80::1e53:f9ff:fe0a:18ab dev eth0 metric 512
fda6:4b0b:dbf4:2bba::/64 from 2a02:1811:e40e:1420::/60 via fe80::1e53:f9ff:fe0a:18ab dev eth0 metric 512
fdfa:82c6:9af4::/64 dev br-lan metric 1024
unreachable fdfa:82c6:9af4::/48 dev lo metric 2147483647
fe80::/64 dev eth0 metric 256
fe80::/64 dev br-lan metric 256
local ::1 dev lo table local metric 0
anycast 2a02:1811:e40e:1400:: dev eth0 table local metric 0
local 2a02:1811:e40e:1400::f510 dev eth0 table local metric 0
local 2a02:1811:e40e:1400:8234:28ff:fe38:f046 dev eth0 table local metric 0
anycast 2a02:1811:e40e:1420:: dev br-lan table local metric 0
local 2a02:1811:e40e:1420::1 dev br-lan table local metric 0
anycast fdfa:82c6:9af4:: dev br-lan table local metric 0
local fdfa:82c6:9af4::1 dev br-lan table local metric 0
anycast fe80:: dev eth0 table local metric 0
anycast fe80:: dev br-lan table local metric 0
local fe80::8034:28ff:fe38:f046 dev br-lan table local metric 0
local fe80::8234:28ff:fe38:f046 dev eth0 table local metric 0
multicast ff00::/8 dev br-lan table local metric 256
multicast ff00::/8 dev eth0 table local metric 256
0: from all lookup local
32766: from all lookup main
4200000000: from 2a02:1811:e40e:1420::1/60 iif br-lan lookup unspec unreachable
lrwxrwxrwx 1 root root 16 Jun 10 09:20 /etc/resolv.conf -> /tmp/resolv.conf
-rw-r--r-- 1 root root 47 Jun 16 14:23 /tmp/resolv.conf
-rw-r--r-- 1 root root 181 Jun 16 14:23 /tmp/resolv.conf.d/resolv.conf.auto
/tmp/resolv.conf.d:
-rw-r--r-- 1 root root 181 Jun 16 14:23 resolv.conf.auto
==> /etc/resolv.conf <==
search lan
nameserver 127.0.0.1
nameserver ::1
==> /tmp/resolv.conf <==
search lan
nameserver 127.0.0.1
nameserver ::1
==> /tmp/resolv.conf.d <==
head: /tmp/resolv.conf.d: I/O error
==> /tmp/resolv.conf.d/resolv.conf.auto <==
# Interface wan
nameserver 195.130.131.5
nameserver 195.130.130.5
search telenet.be
# Interface wan6
nameserver 2a02:1800:100::45:1
nameserver 2a02:1800:100::45:2
search telenet.be
{
"up": true,
"pending": false,
"available": true,
"autostart": true,
"dynamic": false,
"uptime": 12056,
"l3_device": "eth0",
"proto": "dhcpv6",
"device": "eth0",
"metric": 0,
"dns_metric": 0,
"delegation": true,
"ipv4-address": [
],
"ipv6-address": [
{
"address": "2a02:1811:e40e:1400::f510",
"mask": 128,
"preferred": 53720,
"valid": 220581
},
{
"address": "2a02:1811:e40e:1400:8234:28ff:fe38:f046",
"mask": 64,
"preferred": 86383,
"valid": 232620
}
],
"ipv6-prefix": [
{
"address": "2a02:1811:e40e:1420::",
"mask": 60,
"preferred": 53720,
"valid": 226520,
"class": "wan6",
"assigned": {
"lan": {
"address": "2a02:1811:e40e:1420::",
"mask": 60
}
}
}
],
"ipv6-prefix-assignment": [
],
"route": [
{
"target": "2a02:1811:e40e:1400::",
"mask": 64,
"nexthop": "::",
"metric": 256,
"valid": 232620,
"source": "::/0"
},
{
"target": "fda6:4b0b:dbf4:2bba::",
"mask": 64,
"nexthop": "fe80::1e53:f9ff:fe0a:18ab",
"metric": 512,
"valid": 1715,
"source": "2a02:1811:e40e:1420::/60"
},
{
"target": "fda6:4b0b:dbf4:2bba::",
"mask": 64,
"nexthop": "fe80::1e53:f9ff:fe0a:18ab",
"metric": 512,
"valid": 1715,
"source": "2a02:1811:e40e:1400:8234:28ff:fe38:f046/64"
},
{
"target": "fda6:4b0b:dbf4:2bba::",
"mask": 64,
"nexthop": "fe80::1e53:f9ff:fe0a:18ab",
"metric": 512,
"valid": 1715,
"source": "2a02:1811:e40e:1400::f510/128"
},
{
"target": "::",
"mask": 0,
"nexthop": "fe80::6802:b8ff:fe77:c298",
"metric": 384,
"valid": 1783,
"source": "2a02:1811:e40e:1420::/60"
},
{
"target": "::",
"mask": 0,
"nexthop": "fe80::6802:b8ff:fe77:c298",
"metric": 384,
"valid": 1783,
"source": "2a02:1811:e40e:1400:8234:28ff:fe38:f046/64"
},
{
"target": "::",
"mask": 0,
"nexthop": "fe80::6802:b8ff:fe77:c298",
"metric": 384,
"valid": 1783,
"source": "2a02:1811:e40e:1400::f510/128"
}
],
"dns-server": [
"2a02:1800:100::45:1",
"2a02:1800:100::45:2"
],
"dns-search": [
"telenet.be"
],
"neighbors": [
],
"inactive": {
"ipv4-address": [
],
"ipv6-address": [
],
"route": [
],
"dns-server": [
],
"dns-search": [
],
"neighbors": [
]
},
"data": {
"passthru": "001700202a0218000100000000000000004500012a0218000100000000000000004500020018000c0774656c656e657402626500001f00202a0218000100000200000000000000022a021800010000020000000000000003"
}
}
