Hello,
So, I tried what I could find online but this just wouldn't work.
Simple setup lan to wan. ISP router>> openwrt >> wired + wireless clients.
Ipv6 works when clients are connected to ISP router, but does not when connected to openwrt. I don't know much about ipv6. How do I make this work?
Here is my config:
> uci export network; uci export dhcp; uci export firewall; \
> head -n -0 /etc/firewall.user; \
> ip -6 addr ; ip -6 ro li tab all ; ip -6 ru; \
> ls -l /etc/resolv.* /tmp/resolv.* /tmp/resolv.*/* ; head -n -0 /etc/resolv.* /tmp/resolv.* /tmp/resolv.*/* ; ifstatus wan6
{
"kernel": "5.10.146",
"hostname": "OpenWrt1043ND",
"system": "Qualcomm Atheros QCA956X ver 1 rev 0",
"model": "TP-Link TL-WR1043ND v4",
"board_name": "tplink,tl-wr1043nd-v4",
"rootfs_type": "squashfs",
"release": {
"distribution": "OpenWrt",
"version": "22.03.2",
"revision": "r19803-9a599fee93",
"target": "ath79/generic",
"description": "OpenWrt 22.03.2 r19803-9a599fee93"
}
}
package network
config interface 'loopback'
option device 'lo'
option proto 'static'
option ipaddr '127.0.0.1'
option netmask '255.0.0.0'
config globals 'globals'
option ula_prefix 'fd57:2321:0026::/48'
config device
option name 'br-lan'
option type 'bridge'
list ports 'eth0.1'
config interface 'lan'
option device 'br-lan'
option proto 'static'
option ipaddr '192.168.3.10'
option netmask '255.255.255.0'
option ip6assign '64'
list dns '192.168.0.1'
config device
option name 'eth0.2'
option macaddr 'd4:XXXXXXX29:9d'
config interface 'wan'
option device 'eth0.2'
option proto 'static'
option netmask '255.255.255.0'
option ipaddr '192.168.0.19'
option gateway '192.168.0.1'
list dns '192.168.0.1'
option delegate '0'
config switch
option name 'switch0'
option reset '1'
option enable_vlan '1'
config switch_vlan
option device 'switch0'
option vlan '1'
option ports '1 2 3 4 0t'
config switch_vlan
option device 'switch0'
option vlan '2'
option ports '5 0t'
config interface 'wan6'
option proto 'dhcpv6'
option device 'eth0.2'
option reqaddress 'try'
option reqprefix 'auto'
option ip6assign '64'
package dhcp
config dnsmasq
option domainneeded '1'
option boguspriv '1'
option filterwin2k '0'
option localise_queries '1'
option rebind_protection '1'
option rebind_localhost '1'
option local '/lan/'
option domain 'lan'
option expandhosts '1'
option nonegcache '0'
option authoritative '1'
option readethers '1'
option leasefile '/tmp/dhcp.leases'
option resolvfile '/tmp/resolv.conf.d/resolv.conf.auto'
option nonwildcard '1'
option localservice '1'
option ednspacket_max '1232'
config dhcp 'lan'
option interface 'lan'
option start '100'
option limit '150'
option leasetime '12h'
option dhcpv4 'server'
option ndp 'relay'
option ra 'relay'
option dhcpv6 'relay'
config dhcp 'wan'
option interface 'wan'
option ignore '1'
option start '100'
option limit '150'
option leasetime '12h'
config odhcpd 'odhcpd'
option maindhcp '0'
option leasefile '/tmp/hosts/odhcpd'
option leasetrigger '/usr/sbin/odhcpd-update'
option loglevel '3'
config dhcp 'wan6'
option interface 'wan6'
option master '1'
option ra 'relay'
option dhcpv6 'relay'
option ndp 'relay'
package firewall
config defaults
option syn_flood '1'
option input 'ACCEPT'
option output 'ACCEPT'
option forward 'REJECT'
config zone
option name 'lan'
option input 'ACCEPT'
option output 'ACCEPT'
option forward 'ACCEPT'
list network 'lan'
config zone
option name 'wan'
option input 'REJECT'
option output 'ACCEPT'
option forward 'REJECT'
option masq '1'
option mtu_fix '1'
list network 'wan'
list network 'wan6'
config forwarding
option src 'lan'
option dest 'wan'
config rule
option name 'Allow-DHCP-Renew'
option src 'wan'
option proto 'udp'
option dest_port '68'
option target 'ACCEPT'
option family 'ipv4'
config rule
option name 'Allow-Ping'
option src 'wan'
option proto 'icmp'
option icmp_type 'echo-request'
option family 'ipv4'
option target 'ACCEPT'
config rule
option name 'Allow-IGMP'
option src 'wan'
option proto 'igmp'
option family 'ipv4'
option target 'ACCEPT'
config rule
option name 'Allow-DHCPv6'
option src 'wan'
option proto 'udp'
option dest_port '546'
option family 'ipv6'
option target 'ACCEPT'
list src_ip 'fc00::/6'
list dest_ip 'fc00::/6'
config rule
option name 'Allow-MLD'
option src 'wan'
option proto 'icmp'
list icmp_type '130/0'
list icmp_type '131/0'
list icmp_type '132/0'
list icmp_type '143/0'
option family 'ipv6'
option target 'ACCEPT'
list src_ip 'fe80::/10'
list src_ip 'fe80::/10'
config rule
option name 'Allow-ICMPv6-Input'
option src 'wan'
option proto 'icmp'
list icmp_type 'echo-request'
list icmp_type 'echo-reply'
list icmp_type 'destination-unreachable'
list icmp_type 'packet-too-big'
list icmp_type 'time-exceeded'
list icmp_type 'bad-header'
list icmp_type 'unknown-header-type'
list icmp_type 'router-solicitation'
list icmp_type 'neighbour-solicitation'
list icmp_type 'router-advertisement'
list icmp_type 'neighbour-advertisement'
option limit '1000/sec'
option family 'ipv6'
option target 'ACCEPT'
config rule
option name 'Allow-ICMPv6-Forward'
option src 'wan'
option dest '*'
option proto 'icmp'
list icmp_type 'echo-request'
list icmp_type 'echo-reply'
list icmp_type 'destination-unreachable'
list icmp_type 'packet-too-big'
list icmp_type 'time-exceeded'
list icmp_type 'bad-header'
list icmp_type 'unknown-header-type'
option limit '1000/sec'
option family 'ipv6'
option target 'ACCEPT'
config rule
option name 'Allow-IPSec-ESP'
option src 'wan'
option dest 'lan'
option proto 'esp'
option target 'ACCEPT'
config rule
option name 'Allow-ISAKMP'
option src 'wan'
option dest 'lan'
option dest_port '500'
option proto 'udp'
option target 'ACCEPT'
head: /etc/firewall.user: No such file or directory
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 state UNKNOWN qlen 1000
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 state UP qlen 1000
inet6 fe80::d66e:XXXXXXX:299c/64 scope link
valid_lft forever preferred_lft forever
45: eth0.2@eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 state UP qlen 1000
inet6 240XXXXXXX66e:XXXXXXX:299d/64 scope global dynamic noprefixroute
valid_lft 4774sec preferred_lft 4774sec
inet6 fd5XXXXXXX6::1/64 scope global deprecated dynamic
valid_lft 6873sec preferred_lft 0sec
inet6 fe80::d66e:XXXXXXX:299d/64 scope link
valid_lft forever preferred_lft forever
47: br-lan: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 state UP qlen 1000
inet6 fd5XXXXXXX6:1::1/64 scope global noprefixroute
valid_lft forever preferred_lft forever
inet6 fd5XXXXXXX6::1/64 scope global deprecated dynamic
valid_lft 6677sec preferred_lft 0sec
inet6 fe80::d66e:XXXXXXX:299c/64 scope link
valid_lft forever preferred_lft forever
49: wlan0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 state UP qlen 1000
inet6 fe80::d66e:XXXXXXX:299c/64 scope link
valid_lft forever preferred_lft forever
default from 2405:XXXXXXX:78::/64 via fe80::XXXXXXX:c9bd dev eth0.2 metric 384
240XXXXXXX0a8:1 dev eth0.2 metric 1024
2405:XXXXXXX:78:691a:becd:3d54:f710 dev br-lan metric 1024
2405:XXXXXXX:78::/64 dev eth0.2 metric 256
unreachable 2405:XXXXXXX:78::/64 dev lo metric 2147483647
fd5XXXXXXX6::/64 dev br-lan metric 256 expires 0sec
fd5XXXXXXX6::/64 dev eth0.2 metric 256 expires 0sec
fd5XXXXXXX6:1::/64 dev br-lan metric 1024
unreachable fd5XXXXXXX6::/48 dev lo metric 2147483647
fe80::/64 dev eth0 metric 256
fe80::/64 dev eth0.2 metric 256
fe80::/64 dev br-lan metric 256
fe80::/64 dev wlan0 metric 256
local ::1 dev lo table local metric 0
anycast 2405:XXXXXXX:78:: dev eth0.2 table local metric 0
local 240XXXXXXX66e:XXXXXXX:299d dev eth0.2 table local metric 0
anycast fd5XXXXXXX6:: dev br-lan table local metric 0
anycast fd5XXXXXXX6:: dev eth0.2 table local metric 0
local fd5XXXXXXX6::1 dev br-lan table local metric 0
local fd5XXXXXXX6::1 dev eth0.2 table local metric 0
anycast fd5XXXXXXX6:1:: dev br-lan table local metric 0
local fd5XXXXXXX6:1::1 dev br-lan table local metric 0
anycast fe80:: dev eth0 table local metric 0
anycast fe80:: dev eth0.2 table local metric 0
anycast fe80:: dev br-lan table local metric 0
anycast fe80:: dev wlan0 table local metric 0
local fe80::d66e:XXXXXXX:299c dev eth0 table local metric 0
local fe80::d66e:XXXXXXX:299c dev br-lan table local metric 0
local fe80::d66e:XXXXXXX:299c dev wlan0 table local metric 0
local fe80::d66e:XXXXXXX:299d dev eth0.2 table local metric 0
multicast ff00::/8 dev eth0 table local metric 256
multicast ff00::/8 dev eth0.2 table local metric 256
multicast ff00::/8 dev br-lan table local metric 256
multicast ff00::/8 dev wlan0 table local metric 256
0: from all lookup local
32766: from all lookup main
lrwxrwxrwx 1 root root 16 Oct 15 2022 /etc/resolv.conf -> /tmp/resolv.conf
-rw-r--r-- 1 root root 0 Feb 20 12:23 /tmp/resolv.conf
-rw-r--r-- 1 root root 131 Feb 20 12:23 /tmp/resolv.conf.d/resolv.conf.auto
/tmp/resolv.conf.d:
-rw-r--r-- 1 root root 131 Feb 20 12:23 resolv.conf.auto
==> /etc/resolv.conf <==
==> /tmp/resolv.conf <==
==> /tmp/resolv.conf.d <==
head: /tmp/resolv.conf.d: I/O error
==> /tmp/resolv.conf.d/resolv.conf.auto <==
# Interface lan
nameserver 192.168.0.1
# Interface wan
nameserver 192.168.0.1
# Interface wan6
nameserver 240XXXXXXX0a8:1
{
"up": true,
"pending": false,
"available": true,
"autostart": true,
"dynamic": false,
"uptime": 246,
"l3_device": "eth0.2",
"proto": "dhcpv6",
"device": "eth0.2",
"metric": 0,
"dns_metric": 0,
"delegation": true,
"ipv4-address": [
],
"ipv6-address": [
{
"address": "240XXXXXXX66e:XXXXXXX:299d",
"mask": 64,
"preferred": 4774,
"valid": 4774
}
],
"ipv6-prefix": [
],
"ipv6-prefix-assignment": [
],
"route": [
{
"target": "2405:XXXXXXX:78::",
"mask": 64,
"nexthop": "::",
"metric": 256,
"valid": 4774,
"source": "::/0"
},
{
"target": "::",
"mask": 0,
"nexthop": "fe80::XXXXXXX:c9bd",
"metric": 384,
"valid": 3586,
"source": "240XXXXXXX66e:XXXXXXX:299d/64"
}
],
"dns-server": [
"240XXXXXXX0a8:1"
],
"dns-search": [
],
"neighbors": [
],
"inactive": {
"ipv4-address": [
],
"ipv6-address": [
],
"route": [
],
"dns-server": [
],
"dns-search": [
],
"neighbors": [
]
},
"data": {
}
}
