Greetings!
I've successfully installed OpenWRT 21.02-RC1 in my TP-Link Archer C6 v2 (US). After configuring 4 VLANs (one in each port of the device) and putting each one in an exclusive interface and firewall zone, I connected to my ISP via PPPoE. The WAN port is plugged directly into my modem (MitraStar GPT-2741GNAC-N2), configured in bridge mode. I now have a PPPoE-WAN interface and a pseudointerface called WAN_6 created by PPPoE that corresponds to the IPv6 connectivity from my ISP.
LANs:
- BR-LAN (wifi + ethernet segment to home computers, 10.0.1.0/24)
- LAN_CAMERA (ethernet segment for home cameras, 10.0.3.0/24)
- LAN_INTERFONE (ethernet segment for intra-home voip, 10.0.2.0/24)
- LAN_TV (ethernet segment for smart TVs, 10.0.4.0/24)
My ISP gives only one /64 IPv6 prefix, but it seems that RA is not distributing on the subnets. I have IPv4 connectivity on all the LANs, but no IPv6 is provided to anyone. I would like to have IPv6 connectivity on all. If this is not possible, only on BR-LAN is enough.
How can I configure my OpenWRT instance to get this behavior?
Thanks in advance for your help!
All the best,
Helix
My network config:
network.loopback=interface
network.loopback.ifname='lo'
network.loopback.proto='static'
network.loopback.ipaddr='127.0.0.1'
network.loopback.netmask='255.0.0.0'
network.globals=globals
network.globals.ula_prefix='fd59:4812:fd7c::/48'
network.lan=interface
network.lan.type='bridge'
network.lan.ifname='eth0.1'
network.lan.proto='static'
network.lan.netmask='255.255.255.0'
network.lan.ipaddr='10.0.1.1'
network.lan.ip6assign='64'
network.@switch[0]=switch
network.@switch[0].name='switch0'
network.@switch[0].reset='1'
network.@switch[0].enable_vlan='1'
network.@switch_vlan[0]=switch_vlan
network.@switch_vlan[0].device='switch0'
network.@switch_vlan[0].vlan='1'
network.@switch_vlan[0].vid='1'
network.@switch_vlan[0].description='Interno'
network.@switch_vlan[0].ports='0t 2'
network.@switch_vlan[1]=switch_vlan
network.@switch_vlan[1].device='switch0'
network.@switch_vlan[1].vlan='2'
network.@switch_vlan[1].ports='0t 1'
network.@switch_vlan[1].vid='2'
network.@switch_vlan[1].description='WAN'
network.@switch_vlan[2]=switch_vlan
network.@switch_vlan[2].device='switch0'
network.@switch_vlan[2].vlan='3'
network.@switch_vlan[2].vid='3'
network.@switch_vlan[2].description='Interfone'
network.@switch_vlan[2].ports='0t 3'
network.@switch_vlan[3]=switch_vlan
network.@switch_vlan[3].device='switch0'
network.@switch_vlan[3].vlan='4'
network.@switch_vlan[3].vid='4'
network.@switch_vlan[3].description='Cameras'
network.@switch_vlan[3].ports='0t 4'
network.@switch_vlan[4]=switch_vlan
network.@switch_vlan[4].device='switch0'
network.@switch_vlan[4].vlan='5'
network.@switch_vlan[4].vid='5'
network.@switch_vlan[4].description='TV'
network.@switch_vlan[4].ports='0t 5'
network.LAN_INTERFONE=interface
network.LAN_INTERFONE.ifname='eth0.3'
network.LAN_INTERFONE.proto='static'
network.LAN_INTERFONE.netmask='255.255.255.0'
network.LAN_INTERFONE.ipaddr='10.0.2.1'
network.LAN_INTERFONE.delegate='0'
network.LAN_CAMERA=interface
network.LAN_CAMERA.ifname='eth0.4'
network.LAN_CAMERA.proto='static'
network.LAN_CAMERA.netmask='255.255.255.0'
network.LAN_CAMERA.ipaddr='10.0.3.1'
network.LAN_CAMERA.delegate='0'
network.LAN_TV=interface
network.LAN_TV.proto='static'
network.LAN_TV.ifname='eth0.5'
network.LAN_TV.netmask='255.255.255.0'
network.LAN_TV.ipaddr='10.0.4.1'
network.LAN_TV.delegate='0'
network.wan=interface
network.wan.ifname='eth0.2'
network.wan.proto='pppoe'
network.wan.username='cliente@cliente'
network.wan.password='cliente'
network.wan.ipv6='auto'
My firewall config:
firewall.@defaults[0]=defaults
firewall.@defaults[0].input='ACCEPT'
firewall.@defaults[0].output='ACCEPT'
firewall.@defaults[0].forward='REJECT'
firewall.@defaults[0].synflood_protect='1'
firewall.@zone[0]=zone
firewall.@zone[0].name='lan'
firewall.@zone[0].input='ACCEPT'
firewall.@zone[0].output='ACCEPT'
firewall.@zone[0].forward='ACCEPT'
firewall.@zone[0].network='lan'
firewall.@zone[1]=zone
firewall.@zone[1].name='wan'
firewall.@zone[1].output='ACCEPT'
firewall.@zone[1].masq='1'
firewall.@zone[1].mtu_fix='1'
firewall.@zone[1].network='wan'
firewall.@zone[1].forward='REJECT'
firewall.@zone[1].input='REJECT'
firewall.@forwarding[0]=forwarding
firewall.@forwarding[0].src='lan'
firewall.@forwarding[0].dest='wan'
firewall.@rule[0]=rule
firewall.@rule[0].name='Allow-DHCP-Renew'
firewall.@rule[0].src='wan'
firewall.@rule[0].proto='udp'
firewall.@rule[0].dest_port='68'
firewall.@rule[0].target='ACCEPT'
firewall.@rule[0].family='ipv4'
firewall.@rule[1]=rule
firewall.@rule[1].name='Allow-Ping'
firewall.@rule[1].src='wan'
firewall.@rule[1].proto='icmp'
firewall.@rule[1].icmp_type='echo-request'
firewall.@rule[1].family='ipv4'
firewall.@rule[1].target='ACCEPT'
firewall.@rule[2]=rule
firewall.@rule[2].name='Allow-IGMP'
firewall.@rule[2].src='wan'
firewall.@rule[2].proto='igmp'
firewall.@rule[2].family='ipv4'
firewall.@rule[2].target='ACCEPT'
firewall.@rule[3]=rule
firewall.@rule[3].name='Allow-DHCPv6'
firewall.@rule[3].src='wan'
firewall.@rule[3].proto='udp'
firewall.@rule[3].src_ip='fc00::/6'
firewall.@rule[3].dest_ip='fc00::/6'
firewall.@rule[3].src_port='567'
firewall.@rule[3].dest_port='546'
firewall.@rule[3].family='ipv6'
firewall.@rule[3].target='ACCEPT'
firewall.@rule[4]=rule
firewall.@rule[4].name='Allow-DHCPv6'
firewall.@rule[4].src='wan'
firewall.@rule[4].proto='udp'
firewall.@rule[4].src_ip='fc00::/6'
firewall.@rule[4].dest_ip='fc00::/6'
firewall.@rule[4].src_port='546'
firewall.@rule[4].dest_port='547'
firewall.@rule[4].family='ipv6'
firewall.@rule[4].target='ACCEPT'
firewall.@rule[5]=rule
firewall.@rule[5].name='Allow-MLD'
firewall.@rule[5].src='wan'
firewall.@rule[5].proto='icmp'
firewall.@rule[5].src_ip='fe80::/10'
firewall.@rule[5].icmp_type='130/0' '131/0' '132/0' '143/0'
firewall.@rule[5].family='ipv6'
firewall.@rule[5].target='ACCEPT'
firewall.@rule[6]=rule
firewall.@rule[6].name='Allow-ICMPv6-Input'
firewall.@rule[6].src='wan'
firewall.@rule[6].proto='icmp'
firewall.@rule[6].icmp_type='echo-request' 'echo-reply' 'destination-unreachable' 'packet-too-big' 'time-exceeded' 'bad-header' 'unknown-header-type' 'router-solicitation' 'neighbour-solicitation' 'ro
uter-advertisement' 'neighbour-advertisement'
firewall.@rule[6].limit='1000/sec'
firewall.@rule[6].family='ipv6'
firewall.@rule[6].target='ACCEPT'
firewall.@rule[7]=rule
firewall.@rule[7].name='Allow-ICMPv6-Forward'
firewall.@rule[7].src='wan'
firewall.@rule[7].dest='*'
firewall.@rule[7].proto='icmp'
firewall.@rule[7].icmp_type='echo-request' 'echo-reply' 'destination-unreachable' 'packet-too-big' 'time-exceeded' 'bad-header' 'unknown-header-type'
firewall.@rule[7].limit='1000/sec'
firewall.@rule[7].family='ipv6'
firewall.@rule[7].target='ACCEPT'
firewall.@rule[8]=rule
firewall.@rule[8].name='Allow-IPSec-ESP'
firewall.@rule[8].src='wan'
firewall.@rule[8].dest='lan'
firewall.@rule[8].proto='esp'
firewall.@rule[8].target='ACCEPT'
firewall.@rule[9]=rule
firewall.@rule[9].name='Allow-ISAKMP'
firewall.@rule[9].src='wan'
firewall.@rule[9].dest='lan'
firewall.@rule[9].dest_port='500'
firewall.@rule[9].proto='udp'
firewall.@rule[9].target='ACCEPT'
firewall.@rule[10]=rule
firewall.@rule[10].name='Support-UDP-Traceroute'
firewall.@rule[10].src='wan'
firewall.@rule[10].dest_port='33434:33689'
firewall.@rule[10].proto='udp'
firewall.@rule[10].family='ipv4'
firewall.@rule[10].target='REJECT'
firewall.@rule[10].enabled='false'
firewall.@include[0]=include
firewall.@include[0].path='/etc/firewall.user'
firewall.@zone[2]=zone
firewall.@zone[2].name='lan_interf'
firewall.@zone[2].input='ACCEPT'
firewall.@zone[2].output='ACCEPT'
firewall.@zone[2].forward='ACCEPT'
firewall.@zone[2].network='LAN_INTERFONE'
firewall.@zone[3]=zone
firewall.@zone[3].name='lan_cam'
firewall.@zone[3].input='ACCEPT'
firewall.@zone[3].output='ACCEPT'
firewall.@zone[3].forward='ACCEPT'
firewall.@zone[3].network='LAN_CAMERA'
firewall.@forwarding[1]=forwarding
firewall.@forwarding[1].src='lan_cam'
firewall.@forwarding[1].dest='lan'
firewall.@forwarding[2]=forwarding
firewall.@forwarding[2].src='lan'
firewall.@forwarding[2].dest='lan_cam'
firewall.@zone[4]=zone
firewall.@zone[4].name='lan_tv'
firewall.@zone[4].input='ACCEPT'
firewall.@zone[4].output='ACCEPT'
firewall.@zone[4].forward='ACCEPT'
firewall.@zone[4].network='LAN_TV'
firewall.@forwarding[3]=forwarding
firewall.@forwarding[3].src='lan_tv'
firewall.@forwarding[3].dest='wan'
firewall.@forwarding[4]=forwarding
firewall.@forwarding[4].src='lan_interf'
firewall.@forwarding[4].dest='lan'
firewall.@forwarding[5]=forwarding
firewall.@forwarding[5].src='lan'
firewall.@forwarding[5].dest='lan_interf'
My dhcp config:
dhcp.@dnsmasq[0]=dnsmasq
dhcp.@dnsmasq[0].domainneeded='1'
dhcp.@dnsmasq[0].localise_queries='1'
dhcp.@dnsmasq[0].rebind_protection='1'
dhcp.@dnsmasq[0].rebind_localhost='1'
dhcp.@dnsmasq[0].local='/lan/'
dhcp.@dnsmasq[0].domain='lan'
dhcp.@dnsmasq[0].expandhosts='1'
dhcp.@dnsmasq[0].authoritative='1'
dhcp.@dnsmasq[0].readethers='1'
dhcp.@dnsmasq[0].leasefile='/tmp/dhcp.leases'
dhcp.@dnsmasq[0].resolvfile='/tmp/resolv.conf.d/resolv.conf.auto'
dhcp.@dnsmasq[0].localservice='1'
dhcp.@dnsmasq[0].ednspacket_max='1232'
dhcp.lan=dhcp
dhcp.lan.interface='lan'
dhcp.lan.leasetime='12h'
dhcp.lan.dhcpv4='server'
dhcp.lan.ra_management='1'
dhcp.lan.start='10'
dhcp.lan.limit='50'
dhcp.lan.ra='server'
dhcp.lan.dhcpv6='server'
dhcp.wan=dhcp
dhcp.wan.interface='wan'
dhcp.wan.ignore='1'
dhcp.odhcpd=odhcpd
dhcp.odhcpd.maindhcp='0'
dhcp.odhcpd.leasefile='/tmp/hosts/odhcpd'
dhcp.odhcpd.leasetrigger='/usr/sbin/odhcpd-update'
dhcp.odhcpd.loglevel='4'
dhcp.LAN_CAMERA=dhcp
dhcp.LAN_CAMERA.interface='LAN_CAMERA'
dhcp.LAN_CAMERA.leasetime='6h'
dhcp.LAN_CAMERA.start='10'
dhcp.LAN_CAMERA.limit='20'
dhcp.LAN_INTERFONE=dhcp
dhcp.LAN_INTERFONE.interface='LAN_INTERFONE'
dhcp.LAN_INTERFONE.leasetime='6h'
dhcp.LAN_INTERFONE.start='10'
dhcp.LAN_INTERFONE.limit='20'
dhcp.LAN_TV=dhcp
dhcp.LAN_TV.interface='LAN_TV'
dhcp.LAN_TV.leasetime='12h'
dhcp.LAN_TV.start='10'
dhcp.LAN_TV.limit='15'
dhcp.@host[0]=host
dhcp.@host[0].dns='1'
dhcp.@host[0].mac='24:fd:0d:6d:d9:8e'
dhcp.@host[0].ip='10.0.2.10'
dhcp.@host[0].leasetime='6h'
dhcp.@host[0].name='ipcam-fundos'
dhcp.@host[1]=host
dhcp.@host[1].name='ipcam-lavanderia'
dhcp.@host[1].dns='1'
dhcp.@host[1].mac='24:fd:0d:33:ab:95'
dhcp.@host[1].ip='10.0.2.11'
dhcp.@host[1].leasetime='6h'
dhcp.@host[2]=host
dhcp.@host[2].dns='1'
dhcp.@host[2].mac='24:fd:0d:33:ab:96'
dhcp.@host[2].ip='10.0.2.12'
dhcp.@host[2].leasetime='6h'
dhcp.@host[2].name='ipcam-frente'
dhcp.@host[3]=host
dhcp.@host[3].name='ipcam-corredor'
dhcp.@host[3].dns='1'
dhcp.@host[3].mac='24:fd:0d:4d:88:1b'
dhcp.@host[3].ip='10.0.2.13'
dhcp.@host[3].leasetime='6h'
My ifconfig:
br-lan Link encap:Ethernet HWaddr 84:D8:1B:C6:36:BB
inet addr:10.0.1.1 Bcast:10.0.1.255 Mask:255.255.255.0
inet6 addr: fe80::86d8:1bff:fec6:36bb/64 Scope:Link
inet6 addr: fd59:4812:fd7c::1/64 Scope:Global
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:84501 errors:0 dropped:0 overruns:0 frame:0
TX packets:103516 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:21843831 (20.8 MiB) TX bytes:84386595 (80.4 MiB)
eth0 Link encap:Ethernet HWaddr 84:D8:1B:C6:36:BB
inet6 addr: fe80::86d8:1bff:fec6:36bb/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:405049 errors:0 dropped:1 overruns:15 frame:0
TX packets:359879 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:169557931 (161.7 MiB) TX bytes:200936508 (191.6 MiB)
Interrupt:4
eth0.1 Link encap:Ethernet HWaddr 84:D8:1B:XX:XX:XX
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:84357 errors:0 dropped:0 overruns:0 frame:0
TX packets:103641 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:21824360 (20.8 MiB) TX bytes:84406001 (80.4 MiB)
eth0.2 Link encap:Ethernet HWaddr 84:D8:1B:C6:36:BB
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:135497 errors:0 dropped:146 overruns:0 frame:0
TX packets:96598 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:112066635 (106.8 MiB) TX bytes:25516253 (24.3 MiB)
eth0.3 Link encap:Ethernet HWaddr 84:D8:1B:C6:36:BB
inet addr:10.0.2.1 Bcast:10.0.2.255 Mask:255.255.255.0
inet6 addr: fe80::86d8:1bff:fec6:36bb/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:39987 errors:0 dropped:9 overruns:0 frame:0
TX packets:8 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:2973051 (2.8 MiB) TX bytes:896 (896.0 B)
eth0.4 Link encap:Ethernet HWaddr 84:D8:1B:C6:36:BB
inet addr:10.0.3.1 Bcast:10.0.3.255 Mask:255.255.255.0
inet6 addr: fe80::86d8:1bff:fec6:36bb/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:9 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:0 (0.0 B) TX bytes:966 (966.0 B)
eth0.5 Link encap:Ethernet HWaddr 84:D8:1B:C6:36:BB
inet addr:10.0.4.1 Bcast:10.0.4.255 Mask:255.255.255.0
inet6 addr: fe80::86d8:1bff:fec6:36bb/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:6 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:0 (0.0 B) TX bytes:636 (636.0 B)
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:65536 Metric:1
RX packets:18300 errors:0 dropped:0 overruns:0 frame:0
TX packets:18300 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:1627790 (1.5 MiB) TX bytes:1627790 (1.5 MiB)
pppoe-wan Link encap:Point-to-Point Protocol
inet addr:aaa.bbb.ccc.ddd P-t-P:200.146.17.1 Mask:255.255.255.255
inet6 addr: fe80::943b:3b4b:43e5:6547/128 Scope:Link
inet6 addr: 2804:1b3:8280:b6c2:xxxx:xxxx:xxxx:xxxx/64 Scope:Global
UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1492 Metric:1
RX packets:122515 errors:0 dropped:0 overruns:0 frame:0
TX packets:88913 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:3
RX bytes:109501439 (104.4 MiB) TX bytes:23329557 (22.2 MiB)
wlan1 Link encap:Ethernet HWaddr 84:D8:1B:C6:36:BB
inet6 addr: fe80::86d8:1bff:fec6:36bb/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:143 errors:0 dropped:0 overruns:0 frame:0
TX packets:269 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:21509 (21.0 KiB) TX bytes:48924 (47.7 KiB)
My ip -6 -ro:
default from 2804:1b3:8280:b6c2::/64 via fe80::fa13:8ff:fe25:af11 dev pppoe-wan metric 512
unreachable 2804:1b3:8280:b6c2::/64 dev lo metric 2147483647
fd59:4812:fd7c::/64 dev br-lan metric 1024
unreachable fd59:4812:fd7c::/48 dev lo metric 2147483647
fe80::943b:3b4b:43e5:6547 dev pppoe-wan metric 256
fe80::fa13:8ff:fe25:af11 dev pppoe-wan metric 1
fe80::/64 dev eth0 metric 256
fe80::/64 dev eth0.4 metric 256
fe80::/64 dev eth0.3 metric 256
fe80::/64 dev eth0.5 metric 256
fe80::/64 dev br-lan metric 256
fe80::/64 dev wlan1 metric 256
anycast 2804:1b3:8280:b6c2:: dev pppoe-wan metric 0
anycast fd59:4812:fd7c:: dev br-lan metric 0
anycast fe80:: dev eth0.3 metric 0
anycast fe80:: dev eth0 metric 0
anycast fe80:: dev eth0.5 metric 0
anycast fe80:: dev eth0.4 metric 0
anycast fe80:: dev br-lan metric 0
anycast fe80:: dev wlan1 metric 0
multicast ff00::/8 dev eth0 metric 256
multicast ff00::/8 dev eth0.4 metric 256
multicast ff00::/8 dev eth0.3 metric 256
multicast ff00::/8 dev eth0.5 metric 256
multicast ff00::/8 dev pppoe-wan metric 256
multicast ff00::/8 dev br-lan metric 256
multicast ff00::/8 dev wlan1 metric 256