No IPv6 Upstream

Sentenzo · November 7, 2021, 4:00pm

Hi all!
I am a newbie with ipv6, my ISP just started sharing it.
Why i have no ipv6 Upstream? While ipv4 wan have ipv6 ip address.. there is some setting missed?


config interface 'loopback'
	option device 'lo'
	option proto 'static'
	option ipaddr '127.0.0.1'
	option netmask '255.0.0.0'

config globals 'globals'
	option ula_prefix 'fda1:a40e:20f2::/48'

config device
	option name 'br-lan'
	option type 'bridge'
	list ports 'eth0'
	list ports 'eth2'
	list ports 'eth3'

config interface 'lan'
	option device 'br-lan'
	option proto 'static'
	option ipaddr '192.168.1.1'
	option netmask '255.255.255.0'
	option ip6assign '60'

config interface 'wan'
	option device 'eth1'
	option proto 'dhcp'
	option ip6assign '64'

config interface 'wan6'
	option device 'eth1'
	option proto 'dhcpv6'
	option reqaddress 'try'
	option reqprefix 'auto'
	option ip6assign '64'

KAD · November 7, 2021, 4:39pm

I am not an expert either, so take this with a grain of salt...

If your ISP is somewhat competent, they will give you a delegated prefix, at least a /56. That means the first 56 bits are fixed by the ISP, the next 8 bits are available for you to subnet your network and the last 64 bits are used to uniquely identify each host on your network.

By saying option ip6assign '64' on your wan6 interface, I believe you don't ask for a delegated prefix. Your wan6 interface will get an IPv6 adress, but you don't get any adresses to assign to the hosts on your network.

For me (19.07) the default values work fine with my ISP. That gives me a /56.

Keep the rest as-is and try this:

config interface 'wan'
	option device 'eth1'
	option proto 'dhcp'

config interface 'wan6'
	option device 'eth1'
	option proto 'dhcpv6'

Sentenzo · November 7, 2021, 4:44pm

Thanks for answer ipv6 didn't appear, it become obtained by 'wan' only if i press - IPv6 assignment length, tryed 56, but no result(

trendy · November 7, 2021, 10:12pm

First make sure the

is removed from wan and wan6

Then post the following:

Please run the following commands (copy-paste the whole block) and paste the output here, using the "Preformatted text </> " button:

Remember to redact passwords, MAC addresses and any public IP addresses you may have

ubus call system board; \
uci export network; uci export dhcp; uci export firewall; \
head -n -0 /etc/firewall.user; \
ip -6 addr ; ip -6 ro li tab all ; ip -6 ru; ifstatus wan6; ifstatus lan; \
ls -l  /etc/resolv.* /tmp/resolv.* /tmp/resolv.*/* ; head -n -0 /etc/resolv.* /tmp/resolv.* /tmp/resolv.*/*

Sentenzo · December 25, 2021, 5:00pm

{
        "kernel": "5.10.87",
        "hostname": "OpenWrt",
        "system": "Intel(R) Pentium(R) CPU G3460 @ 3.50GHz",
        "model": "JSC InfoTeCS ViPNet Coordinator HW1000 Q4",
        "board_name": "jsc-infotecs-vipnet-coordinator-hw1000-q4",
        "rootfs_type": "ext4",
        "release": {
                "distribution": "OpenWrt",
                "version": "SNAPSHOT",
                "revision": "r18404-236c3ea730",
                "target": "x86/64",
                "description": "OpenWrt SNAPSHOT r18404-236c3ea730"
        }
}
package network

config interface 'loopback'
        option device 'lo'
        option proto 'static'
        option ipaddr '127.0.0.1'
        option netmask '255.0.0.0'

config globals 'globals'
        option ula_prefix 'fdbb:f3f0:c7c4::/48'

config device
        option name 'br-lan'
        option type 'bridge'
        list ports 'eth0'

config interface 'lan'
        option device 'br-lan'
        option proto 'static'
        option ipaddr '192.168.1.1'
        option netmask '255.255.255.0'
        option ip6assign '60'

config interface 'wan'
        option device 'eth1'
        option proto 'dhcp'

config interface 'wan6'
        option device 'eth1'
        option proto 'dhcpv6'

package dhcp

config dnsmasq
        option domainneeded '1'
        option boguspriv '1'
        option filterwin2k '0'
        option localise_queries '1'
        option rebind_protection '1'
        option rebind_localhost '1'
        option local '/lan/'
        option domain 'lan'
        option expandhosts '1'
        option nonegcache '0'
        option authoritative '1'
        option readethers '1'
        option leasefile '/tmp/dhcp.leases'
        option resolvfile '/tmp/resolv.conf.d/resolv.conf.auto'
        option nonwildcard '1'
        option localservice '1'
        option ednspacket_max '1232'

config dhcp 'lan'
        option interface 'lan'
        option start '100'
        option limit '150'
        option leasetime '12h'
        option dhcpv4 'server'
        option dhcpv6 'server'
        option ra 'server'
        option ra_slaac '1'
        list ra_flags 'managed-config'
        list ra_flags 'other-config'

config dhcp 'wan'
        option interface 'wan'
        option ignore '1'

config odhcpd 'odhcpd'
        option maindhcp '0'
        option leasefile '/tmp/hosts/odhcpd'
        option leasetrigger '/usr/sbin/odhcpd-update'
        option loglevel '4'

package firewall

config defaults
        option syn_flood '1'
        option input 'ACCEPT'
        option output 'ACCEPT'
        option forward 'REJECT'

config zone
        option name 'lan'
        list network 'lan'
        option input 'ACCEPT'
        option output 'ACCEPT'
        option forward 'ACCEPT'

config zone
        option name 'wan'
        list network 'wan'
        list network 'wan6'
        option input 'REJECT'
        option output 'ACCEPT'
        option forward 'REJECT'
        option masq '1'
        option mtu_fix '1'

config forwarding
        option src 'lan'
        option dest 'wan'

config rule
        option name 'Allow-DHCP-Renew'
        option src 'wan'
        option proto 'udp'
        option dest_port '68'
        option target 'ACCEPT'
        option family 'ipv4'

config rule
        option name 'Allow-Ping'
        option src 'wan'
        option proto 'icmp'
        option icmp_type 'echo-request'
        option family 'ipv4'
        option target 'ACCEPT'

config rule
        option name 'Allow-IGMP'
        option src 'wan'
        option proto 'igmp'
        option family 'ipv4'
        option target 'ACCEPT'

config rule
        option name 'Allow-DHCPv6'
        option src 'wan'
        option proto 'udp'
        option src_ip 'fc00::/6'
        option dest_ip 'fc00::/6'
        option dest_port '546'
        option family 'ipv6'
        option target 'ACCEPT'

config rule
        option name 'Allow-MLD'
        option src 'wan'
        option proto 'icmp'
        option src_ip 'fe80::/10'
        list icmp_type '130/0'
        list icmp_type '131/0'
        list icmp_type '132/0'
        list icmp_type '143/0'
        option family 'ipv6'
        option target 'ACCEPT'

config rule
        option name 'Allow-ICMPv6-Input'
        option src 'wan'
        option proto 'icmp'
        list icmp_type 'echo-request'
        list icmp_type 'echo-reply'
        list icmp_type 'destination-unreachable'
        list icmp_type 'packet-too-big'
        list icmp_type 'time-exceeded'
        list icmp_type 'bad-header'
        list icmp_type 'unknown-header-type'
        list icmp_type 'router-solicitation'
        list icmp_type 'neighbour-solicitation'
        list icmp_type 'router-advertisement'
        list icmp_type 'neighbour-advertisement'
        option limit '1000/sec'
        option family 'ipv6'
        option target 'ACCEPT'

config rule
        option name 'Allow-ICMPv6-Forward'
        option src 'wan'
        option dest '*'
        option proto 'icmp'
        list icmp_type 'echo-request'
        list icmp_type 'echo-reply'
        list icmp_type 'destination-unreachable'
        list icmp_type 'packet-too-big'
        list icmp_type 'time-exceeded'
        list icmp_type 'bad-header'
        list icmp_type 'unknown-header-type'
        option limit '1000/sec'
        option family 'ipv6'
        option target 'ACCEPT'

config rule
        option name 'Allow-IPSec-ESP'
        option src 'wan'
        option dest 'lan'
        option proto 'esp'
        option target 'ACCEPT'

config rule
        option name 'Allow-ISAKMP'
        option src 'wan'
        option dest 'lan'
        option dest_port '500'
        option proto 'udp'
        option target 'ACCEPT'

config rule
        option name 'Support-UDP-Traceroute'
        option src 'wan'
        option dest_port '33434:33689'
        option proto 'udp'
        option family 'ipv4'
        option target 'REJECT'
        option enabled 'false'

config include
        option path '/etc/firewall.user'

# This file is interpreted as shell script.
# Put your custom iptables rules here, they will
# be executed with each firewall (re-)start.

# Internal uci firewall chains are flushed and recreated on reload, so
# put custom rules into the root chains e.g. INPUT or FORWARD or into the
# special user chains, e.g. input_wan_rule or postrouting_lan_rule.
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 state UNKNOWN qlen 1000
    inet6 ::1/128 scope host
       valid_lft forever preferred_lft forever
3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 state UP qlen 1000
    inet6 fe80::16dd:a9ff:fed5:1c7d/64 scope link
       valid_lft forever preferred_lft forever
6: br-lan: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 state UP qlen 1000
    inet6 fdbb:f3f0:c7c4::1/60 scope global noprefixroute
       valid_lft forever preferred_lft forever
    inet6 fe80::16dd:a9ff:fed5:1c7c/64 scope link
       valid_lft forever preferred_lft forever
fdbb:f3f0:c7c4::/64 dev br-lan  metric 1024
unreachable fdbb:f3f0:c7c4::/48 dev lo  metric 2147483647
fe80::/64 dev br-lan  metric 256
fe80::/64 dev eth1  metric 256
local ::1 dev lo table local  metric 0
anycast fdbb:f3f0:c7c4:: dev br-lan table local  metric 0
local fdbb:f3f0:c7c4::1 dev br-lan table local  metric 0
anycast fe80:: dev br-lan table local  metric 0
anycast fe80:: dev eth1 table local  metric 0
local fe80::16dd:a9ff:fed5:1c7c dev br-lan table local  metric 0
local fe80::16dd:a9ff:fed5:1c7d dev eth1 table local  metric 0
multicast ff00::/8 dev br-lan table local  metric 256
multicast ff00::/8 dev eth1 table local  metric 256
0:      from all lookup local
32766:  from all lookup main
4200000001:     from all iif lo lookup unspec 12
4200000003:     from all iif eth1 lookup unspec 12
4200000006:     from all iif br-lan lookup unspec 12
{
        "up": false,
        "pending": true,
        "available": true,
        "autostart": true,
        "dynamic": false,
        "proto": "dhcpv6",
        "device": "eth1",
        "data": {

        }
}
{
        "up": true,
        "pending": false,
        "available": true,
        "autostart": true,
        "dynamic": false,
        "uptime": 254,
        "l3_device": "br-lan",
        "proto": "static",
        "device": "br-lan",
        "updated": [
                "addresses"
        ],
        "metric": 0,
        "dns_metric": 0,
        "delegation": true,
        "ipv4-address": [
                {
                        "address": "192.168.1.1",
                        "mask": 24
                }
        ],
        "ipv6-address": [

        ],
        "ipv6-prefix": [

        ],
        "ipv6-prefix-assignment": [
                {
                        "address": "fdbb:f3f0:c7c4::",
                        "mask": 60,
                        "local-address": {
                                "address": "fdbb:f3f0:c7c4::1",
                                "mask": 60
                        }
                }
        ],
        "route": [

        ],
        "dns-server": [

        ],
        "dns-search": [

        ],
        "neighbors": [

        ],
        "inactive": {
                "ipv4-address": [

                ],
                "ipv6-address": [

                ],
                "route": [

                ],
                "dns-server": [

                ],
                "dns-search": [

                ],
                "neighbors": [

                ]
        },
        "data": {

        }
}
lrwxrwxrwx    1 root     root            16 Dec 24 22:15 /etc/resolv.conf -> /tmp/resolv.conf
-rw-r--r--    1 root     root            47 Dec 25 16:55 /tmp/resolv.conf
-rw-r--r--    1 root     root            60 Dec 25 16:55 /tmp/resolv.conf.d/resolv.conf.auto

/tmp/resolv.conf.d:
-rw-r--r--    1 root     root            60 Dec 25 16:55 resolv.conf.auto
==> /etc/resolv.conf <==
search lan
nameserver 127.0.0.1
nameserver ::1

==> /tmp/resolv.conf <==
search lan
nameserver 127.0.0.1
nameserver ::1

==> /tmp/resolv.conf.d <==
head: /tmp/resolv.conf.d: I/O error

==> /tmp/resolv.conf.d/resolv.conf.auto <==
# Interface wan
nameserver 109.195.160.1
nameserver 5.3.3.3

trendy · December 25, 2021, 5:42pm

wan6 is not up.

Try to run ifup wan6; sleep 10; ifstatus wan6 and post here the output.

Sentenzo · December 25, 2021, 6:04pm

root@OpenWrt:~# ifup wan6; sleep 10; ifstatus wan6
{
        "up": false,
        "pending": true,
        "available": true,
        "autostart": true,
        "dynamic": false,
        "proto": "dhcpv6",
        "device": "eth1",
        "data": {

        }
}

trendy · December 25, 2021, 6:52pm

Contact your ISP and verify that they offer IPv6. If they do, ask them which protocol they are using.

Sentenzo · December 25, 2021, 6:53pm

Yes, they provide, if i setup PPPoE it will work, but i just want use dhcp as a modern type of connection, thank you anyway!

trendy · December 25, 2021, 7:11pm

You cannot use whichever protocol you like, only the ones supported by your ISP.

Sentenzo · December 25, 2021, 9:42pm

Why you think so? Maybe your isp have no options, I live in Russia, ISP - DOM.Ru, (not adv), i can use PPPoE or DHCP, what i want, i have also access to maintain my line in my account, i can enable/disable NAT from ISP, enable/disable IPv6, i can enable/disable SMTP.. etc..

jamesmacwhite · December 25, 2021, 10:10pm

I would confirm their IPv6 implementation supports having your WAN interface as DHCP. If it works via PPPoE, why not just use PPPoE? Providing they are giving you a proper prefix like a /56, this will then be distributed to your LAN clients most likely with DHCPv6 or SLAAC (based on your device support), that's pretty modern, no?

Sentenzo · December 26, 2021, 8:39am

Because as far as i know, PPPoE requires additional PPPoE distribution switch, while DHCP does not.

trendy · December 26, 2021, 8:06pm

Well, if you are able to do all those things, then I suppose you don't need our help here. OpenWrt is probing for DHCPv6, if there is some DHCP6 server on your ISP, it will advertise itself.