Problems routing IPv6

Looks like the ISP's device is in router mode.

For instance the IPv4 address assigned is "normal" private address, not public IP nor CGNAT IP.

But as I said, even if you do not manage to set bridge mode (prefered!).
There is a chance: does that ISP device allow you to create routes?

This is what the ONT displays for IpV6.

IPv6
WAN Protocol:  	IPv6 - Automatic
WAN IP:  	2001:0569:BD3C:5601:AAA2:37FF:FE14:78E5
WAN Prefix:  	2001:569:BD3C:5601::/64
LAN Prefix:  	2001:569:BD3C:5600::/64
Assigned Prefix:  	2001:569:BD3C:5600::/56
Gateway:  	FE80::2D0:F6FF:FE23:4388
Primary DNS:  	2001:568:ff09:10c:0:0:0:67
Secondary DNS:  	2001:568:ff09:10a:0:0:0:116
LAN GUA:  	2001:0569:BD3C:5600:AAA2:37FF:FE14:78E3

The settings are pretty limited. I checked and there is no place that I can change to bridge mode.

Sometimes ISP can do it remotely upon request.

and manual routes?

wait did that happen?

I have not called ISP yet. They take a long time to respond (sometimes days) so I will look around but from what I have read bridging is a no go on this model.

I am a little confused because my WAN shows to be on the ::5601 subnet and my LAN shows on the 5600 subnet with the win Laptop getting a GUA on the 5600 subnet?

Just to recap. I can plug any machine directly into the ONT and get a GUA and these machines can communicate with IPV6 sites. If however I put the OPenwrt router in between the ONT and the host I no longer get GUAs. The WAN interface of the Openwrt gets a valid GUA on its WAN interface and I can communicate from the Openwrt router to IPV6 sites via the WAN port. For whatever reason I cannot get GUAs on the LAN side of the OpenWRT router.

You do not get a Prefix delegated so you cannot hand out IPv6 addresses to your lan clients.

Your ISP router gets a PD of /56 and if that is put into bridge mode then that /56 PD will get delegated to your router and you should be fine.

Agreed. Still I am surprised that the ISP's router cannot delegate /60 downstream. OpenWrt definitely can do that.

How does your /etc/config/network look like?

There is no bridge mode on this router. I have confirmed with the ISP. The ISP says they have this configuration working for many customers but since I am not using their equipment they cant support me. I do have another ISP supplied AP/router that i was using where the OPenwrt now sits. I suppose I could put that back in and see what happens. In the meanwhile here is the network file

config interface 'loopback'
	option device 'lo'
	option proto 'static'
	option ipaddr '127.0.0.1'
	option netmask '255.0.0.0'

config globals 'globals'
	option ula_prefix 'fd05:eaf1:8ae5::/48'
	option packet_steering '1'

config device
	option name 'br-lan'
	option type 'bridge'
	list ports 'lan1'
	list ports 'lan3'
	list ports 'lan4'
	list ports 'lan5'

config interface 'lan'
	option device 'br-lan'
	option proto 'static'
	option ipaddr '192.168.1.1'
	option netmask '255.255.255.0'
	option ip6assign '60'

config interface 'wan'
	option device 'eth1'
	option proto 'dhcp'
	option peerdns '0'
	list dns '1.0.0.1'
	list dns '9.9.9.9'
	option multipath 'off'

config interface 'wan6'
	option device 'eth1'
	option proto 'dhcpv6'
	option peerdns '0'
	list dns '2001:4860:4860::8888'
	list dns '2001:4860:4860::8844'

config interface 'GuestWifi'
	option proto 'static'
	option ipaddr '192.168.2.1'
	option netmask '255.255.255.0'

config interface 'NPRmaaster'
	option proto 'static'
	option device 'lan2'
	option ipaddr '192.168.100.1'
	option netmask '255.255.255.0'

The wan6 looks normal to me, however I have two more opts.

	option reqaddress 'try'
	option reqprefix '48'

or

	option reqaddress 'try'
	option reqprefix 'auto'
	option norelease '1'

But I do not think it should change anything.

I would expect that empty value default to the above effectively.

But you can try.

Does your ISP device support vlans?

Can you configure ISP device to have larger than a /64 on its LAN? Ideally you'd want XXXX:XXXX:XXXX:XX80::/57, in other words half of the /56 that the ISP is routing to your house appears on the ISP router LAN. Then it should be able to delegate a /60 or so to your OpenWrt router.

If you have to work within a single /64 there is relay mode. This is common for LTE connections since the standard in that industry is to only route a single /64 to each customer. A wired or fiber ISP should do better than that though.

Ah this would make a sense. Even on OpenWrt one has to assign bigger prefix to lan in order to make downstream delegation work. Why I have not thought of this :person_facepalming: .

A subnet is only valid with /64.
I doubt it but I would try as already mentioned:
Set explicit request of address and prefix of size smaller then 56 but larger then 64 and see what happens...

Not sure if I understand. What I mean is that I have set option ip6assign '60' on my lan. Yeah the network itself (devices on it) will be /64 (the assigned /60 prefix with added zeros to /64). With this setting I can have routers in lan -- e.g. If I enable network-sharing via NetworkManager on my Linux desktop then my desktop gets /62. Had I set option ip6assign '64' this would not work IIUIC.

Am I making sense?