IPv6 on WAN

Post new topic   Reply to topic    DD-WRT Forum Index -> Advanced Networking
Goto page Previous  1, 2
Author Message
JAMESMTL
DD-WRT Guru


Joined: 13 Mar 2014
Posts: 856
Location: Montreal, QC

PostPosted: Sun Dec 04, 2016 19:23    Post subject: Reply with quote
W10 default path looks good

the address assigned to W10 machine does not

W10 2804:7f1:2280:1143:ed3c:6c6a:a146:a64d
br0 2804:7f1:2280:45d5:200:ff:fe00:0

can you redo ifconfig to see if router prefix changed?
Sponsor
fggs
DD-WRT Guru


Joined: 28 Jan 2008
Posts: 1741

PostPosted: Sun Dec 04, 2016 19:44    Post subject: Reply with quote
Sure!

Here:

Quote:
root@madmax:~# ifconfig
br0 Link encap:Ethernet HWaddr 20:CF:30:CE:0E:E6
inet addr:172.17.82.23 Bcast:172.17.82.255 Mask:255.255.255.0
inet6 addr: 2804:7f1:2280:1143:200:ff:fe00:0/64 Scope:Global
inet6 addr: fe80::22cf:30ff:fece:ee6/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:28984100 errors:0 dropped:1481 overruns:0 frame:0
TX packets:26842082 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:6120158483 (5.6 GiB) TX bytes:15810570469 (14.7 GiB)

br0:0 Link encap:Ethernet HWaddr 20:CF:30:CE:0E:E6
inet addr:169.254.255.1 Bcast:169.254.255.255 Mask:255.255.0.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1

eth0 Link encap:Ethernet HWaddr 20:CF:30:CE:0E:E4
inet6 addr: fe80::22cf:30ff:fece:ee4/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:52938842 errors:0 dropped:0 overruns:0 frame:0
TX packets:52871596 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:4208587781 (3.9 GiB) TX bytes:4149637312 (3.8 GiB)
Interrupt:4 Base address:0x2000

eth1 Link encap:Ethernet HWaddr 20:CF:30:CE:0E:E6
inet6 addr: fe80::22cf:30ff:fece:ee6/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:1422615 errors:0 dropped:58 overruns:0 frame:50057858
TX packets:1650953 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:1159729719 (1.0 GiB) TX bytes:1204457805 (1.1 GiB)
Interrupt:3 Base address:0x1000

lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MULTICAST MTU:65536 Metric:1
RX packets:292 errors:0 dropped:0 overruns:0 frame:0
TX packets:292 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:35892 (35.0 KiB) TX bytes:35892 (35.0 KiB)

ppp0 Link encap:Point-to-Point Protocol
inet addr:179.186.127.199 P-t-P:189.59.241.234 Mask:255.255.255.255
inet6 addr: fe80::c13b:41f3:5f68:7f9c/10 Scope:Link
inet6 addr: 2804:7f1:240e:d40e:c13b:41f3:5f68:7f9c/64 Scope:Global
UP POINTOPOINT RUNNING MULTICAST MTU:1492 Metric:1
RX packets:513733 errors:0 dropped:0 overruns:0 frame:0
TX packets:432142 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:3
RX bytes:448698883 (427.9 MiB) TX bytes:76041849 (72.5 MiB)

vlan1 Link encap:Ethernet HWaddr 20:CF:30:CE:0E:E4
inet6 addr: fe80::22cf:30ff:fece:ee4/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:26788350 errors:0 dropped:833 overruns:0 frame:0
TX packets:25360301 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:4863059321 (4.5 GiB) TX bytes:14647345723 (13.6 GiB)

vlan2 Link encap:Ethernet HWaddr 20:CF:30:CE:0E:E5
inet6 addr: fe80::22cf:30ff:fece:ee5/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:26150492 errors:0 dropped:0 overruns:0 frame:0
TX packets:27511288 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:15360743120 (14.3 GiB) TX bytes:6470673759 (6.0 GiB)

vlan2:0 Link encap:Ethernet HWaddr 20:CF:30:CE:0E:E5
inet addr:192.168.25.2 Bcast:192.168.25.255 Mask:255.255.255.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1

root@madmax:~#
JAMESMTL
DD-WRT Guru


Joined: 13 Mar 2014
Posts: 856
Location: Montreal, QC

PostPosted: Mon Dec 05, 2016 1:57    Post subject: Reply with quote
and if you run the following commands from windows command prompt

ping ipv6.google.com
tracert ipv6.google.com

and run the following command from router cli

ip6tables -vnL
fggs
DD-WRT Guru


Joined: 28 Jan 2008
Posts: 1741

PostPosted: Mon Dec 05, 2016 14:26    Post subject: Reply with quote
Here:

Quote:
C:\Users\devas>ping ipv6.google.com

Disparando ipv6.l.google.com [2800:3f0:4003:c00::71] com 32 bytes de dados:
Resposta de 2800:3f0:4003:c00::71: tempo=77ms
Resposta de 2800:3f0:4003:c00::71: tempo=71ms
Resposta de 2800:3f0:4003:c00::71: tempo=75ms
Resposta de 2800:3f0:4003:c00::71: tempo=71ms

Estatísticas do Ping para 2800:3f0:4003:c00::71:
Pacotes: Enviados = 4, Recebidos = 4, Perdidos = 0 (0% de
perda),
Aproximar um número redondo de vezes em milissegundos:
Mínimo = 71ms, Máximo = 77ms, Média = 73ms

Quote:

C:\Users\devas>tracert ipv6.google.com

Rastreando a rota para ipv6.l.google.com [2800:3f0:4003:c00::71]
com no máximo 30 saltos:

1 5 ms 6 ms 1 ms 2804:7f1:2280:1143:200:ff:fe00:0
2 18 ms 17 ms 13 ms 2804:7f4:2000:1::fe
3 20 ms 23 ms 17 ms 2804:7f4:2000:1000::11f
4 22 ms 28 ms 27 ms 2804:7f4:2000:1::122
5 15 ms 16 ms 25 ms 2001:4860:1:1:0:49c1:0:22
6 24 ms 15 ms 25 ms 2001:4860::1:0:cc4f
7 73 ms 78 ms 73 ms 2001:4860::8:0:cab5
8 76 ms 68 ms 89 ms 2001:4860::2:0:c6bb
9 * * * Esgotado o tempo limite do pedido.
10 * * * Esgotado o tempo limite do pedido.
11 * * * Esgotado o tempo limite do pedido.
12 * * * Esgotado o tempo limite do pedido.
13 * * * Esgotado o tempo limite do pedido.
14 * * * Esgotado o tempo limite do pedido.
15 * * * Esgotado o tempo limite do pedido.
16 * * * Esgotado o tempo limite do pedido.
17 72 ms 73 ms 75 ms 2800:3f0:4003:c00::71

Rastreamento concluído.


Quote:
root@madmax:~# iptables -vnL
Chain INPUT (policy ACCEPT 120K packets, 13M bytes)
pkts bytes target prot opt in out source destination
31 1428 logdrop tcp -- ppp0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:8080
25 1380 logdrop tcp -- ppp0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:80
6 240 logdrop tcp -- ppp0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:443
0 0 logdrop tcp -- ppp0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:69
42 2072 logdrop tcp -- ppp0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22
1176 51036 logdrop tcp -- ppp0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:23

Chain FORWARD (policy ACCEPT 516 packets, 30291 bytes)
pkts bytes target prot opt in out source destination
1413K 458M ACCEPT 0 -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
174K 13M lan2wan 0 -- * * 0.0.0.0/0 0.0.0.0/0
0 0 ACCEPT 0 -- br0 br0 0.0.0.0/0 0.0.0.0/0
481 25252 ACCEPT tcp -- * * 0.0.0.0/0 172.17.82.104 tcp dpt:13416
689 54140 ACCEPT udp -- * * 0.0.0.0/0 172.17.82.104 udp dpt:13416
2662 218K ACCEPT udp -- * * 0.0.0.0/0 172.17.82.104 udp dpt:49776
0 0 ACCEPT tcp -- * * 0.0.0.0/0 172.17.82.103 tcp dpt:5557
1 44 ACCEPT tcp -- * * 0.0.0.0/0 172.17.82.104 tcp dpts:5000:5005
1 437 ACCEPT udp -- * * 0.0.0.0/0 172.17.82.104 udp dpts:5000:5005
0 0 TRIGGER 0 -- ppp0 br0 0.0.0.0/0 0.0.0.0/0 TRIGGER type:in match:0 relate:0
170K 13M trigger_out 0 -- br0 * 0.0.0.0/0 0.0.0.0/0
169K 13M ACCEPT 0 -- br0 * 0.0.0.0/0 0.0.0.0/0 state NEW

Chain OUTPUT (policy ACCEPT 119K packets, 26M bytes)
pkts bytes target prot opt in out source destination

Chain advgrp_1 (0 references)
pkts bytes target prot opt in out source destination

Chain advgrp_10 (0 references)
pkts bytes target prot opt in out source destination

Chain advgrp_2 (0 references)
pkts bytes target prot opt in out source destination

Chain advgrp_3 (0 references)
pkts bytes target prot opt in out source destination

Chain advgrp_4 (0 references)
pkts bytes target prot opt in out source destination

Chain advgrp_5 (0 references)
pkts bytes target prot opt in out source destination

Chain advgrp_6 (0 references)
pkts bytes target prot opt in out source destination

Chain advgrp_7 (0 references)
pkts bytes target prot opt in out source destination

Chain advgrp_8 (0 references)
pkts bytes target prot opt in out source destination

Chain advgrp_9 (0 references)
pkts bytes target prot opt in out source destination

Chain grp_1 (0 references)
pkts bytes target prot opt in out source destination

Chain grp_10 (0 references)
pkts bytes target prot opt in out source destination

Chain grp_2 (0 references)
pkts bytes target prot opt in out source destination

Chain grp_3 (0 references)
pkts bytes target prot opt in out source destination

Chain grp_4 (0 references)
pkts bytes target prot opt in out source destination

Chain grp_5 (0 references)
pkts bytes target prot opt in out source destination

Chain grp_6 (0 references)
pkts bytes target prot opt in out source destination

Chain grp_7 (0 references)
pkts bytes target prot opt in out source destination

Chain grp_8 (0 references)
pkts bytes target prot opt in out source destination

Chain grp_9 (0 references)
pkts bytes target prot opt in out source destination

Chain lan2wan (1 references)
pkts bytes target prot opt in out source destination

Chain logaccept (0 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT 0 -- * * 0.0.0.0/0 0.0.0.0/0

Chain logdrop (6 references)
pkts bytes target prot opt in out source destination
1280 56156 DROP 0 -- * * 0.0.0.0/0 0.0.0.0/0

Chain logreject (0 references)
pkts bytes target prot opt in out source destination
0 0 REJECT tcp -- * * 0.0.0.0/0 0.0.0.0/0 reject-with tcp-reset

Chain trigger_out (1 references)
pkts bytes target prot opt in out source destination
root@madmax:~#
JAMESMTL
DD-WRT Guru


Joined: 13 Mar 2014
Posts: 856
Location: Montreal, QC

PostPosted: Mon Dec 05, 2016 19:35    Post subject: Reply with quote
well ipv6 is working from your windows machine as you can ping ipv6.google.com. also the traceroute shows the traffic passing through the router.

please post "ip6tables -vnL" and not "iptables -vnL"

also try opening ipv6.google.com in your browser and all three ipv6 tests in my signature as well as this page

http://ipv6-test.com/pmtud/

I suspect there may be an MTU issue at play so please run the following command from windows command prompt

ping ipv6.google.com -l 1232

keep increasing packet size until you find the largest supported packet. max value possible would be 1452 but since your ppp0 mtu is 1492 then i would expect it to be 1444

your radvd conf is broadcasting 1452 so please also run the following from router cli

cat /proc/sys/net/ipv6/conf/ppp0/mtu
fggs
DD-WRT Guru


Joined: 28 Jan 2008
Posts: 1741

PostPosted: Mon Dec 05, 2016 20:50    Post subject: Reply with quote
Sorry, see below, but I also want to confirm my configuration is correct:

- DHCPv6s enabled
- Radvd enabled

Quote:
root@madmax:~# ip6tables -vnL
Chain INPUT (policy ACCEPT 1 packets, 72 bytes)
pkts bytes target prot opt in out source destination
3 312 ACCEPT 0 * * ::/0 ::/0 state RELATED,ESTABLISHED
4 660 ACCEPT udp * * ::/0 ::/0 udp dpt:546
19157 2243K ACCEPT icmpv6 * * ::/0 ::/0
122 12932 ACCEPT 0 * * fe80::/64 ::/0
0 0 ACCEPT 0 br0 * ::/0 ::/0
0 0 DROP 0 * * ::/0 ::/0

Chain FORWARD (policy ACCEPT 4 packets, 390 bytes)
pkts bytes target prot opt in out source destination
1034K 405M ACCEPT 0 * * ::/0 ::/0 state RELATED,ESTABLISHED
38746 3762K ACCEPT 0 * ppp0 ::/0 ::/0
908 47892 ACCEPT icmpv6 * * ::/0 ::/0 ipv6-icmp type 128 limit: avg 2/sec burst 5
9774 686K DROP 0 * * ::/0 ::/0

Chain OUTPUT (policy ACCEPT 49030 packets, 5812K bytes)
pkts bytes target prot opt in out source destination
root@madmax:~#


Also:

Quote:
root@madmax:~# cat /proc/sys/net/ipv6/conf/ppp0/mtu
1492
root@madmax:~#


Result of http://ipv6-test.com/pmtud/:

Quote:
Testing packet size: 1500
Result: no PMTUD problems detected


Largest supported packet is: 1404

From test-ipv6.com I get 9/10

From ipv6-test.com I get sometimes 19/20 but usually 17/20 because I have no reverse on IPv6 and DNS6+IPv4 and DNS6+IPv6 returns Unreachable most of the time, but I guess my ISP is to blame.

From test-ipv6.netiter.dk I get 16/20
JAMESMTL
DD-WRT Guru


Joined: 13 Mar 2014
Posts: 856
Location: Montreal, QC

PostPosted: Tue Dec 13, 2016 4:11    Post subject: Reply with quote
sorry for the delayed reply.

I was under the impression IPv6 was not working on clients. id i understand the situation now it would appear you are saying the ipv6 works but are failing some tests?

if we are trying to debug some tests then you would need to clarify which.

for the ipv6 dns issues you can solve those by switching dns providers. google dns is bulletproof for ipv6
fggs
DD-WRT Guru


Joined: 28 Jan 2008
Posts: 1741

PostPosted: Sun Jan 29, 2017 16:49    Post subject: Reply with quote
I want apologize for the (really) late reply!

Anyway, everything seems to be working, but I don't know if it is my ISP's fault or DHCPv6 server, sometimes the router won't get IPv6.

Also, if I reconnect PPPoE manually due to the issue explained above, I have to disable my NIC and enable again for it to get the new IPv6, I see more than one IPv6 assigned to the card (the old and the current), and I guess Windows routing gets confused.

Other than that, everything working flawlessly thanks to you!
oliver44
DD-WRT Guru


Joined: 01 Jun 2016
Posts: 504

PostPosted: Fri Jan 03, 2020 7:45    Post subject: PPPoE/v6 și DHCPv6 Prefix Delegation (RFC 3769) Reply with quote
i also have a problem with ipv6 using the latest beta firmware version: DD-WRT v3.0-r41813 std (12/29/19) on the wrt1900acs v2 router, my internet provider provides me with a gigabit subscription of 1Gbps PPPoE / v6 and DHCPv6 Prefix Delegation (RFC 3769)
I have found that the router does not allocate my ipv6 sometimes, can you tell me if my settings are correct and if dd wrt supported the ipv6 standard offered by my provider?




Thx

_________________
Internet provider https://en.wikipedia.org/wiki/RCS_%26_RDS 1Gbps
WDR3600 rev.1.5 - DD-Wrt
Linksys WRT1900ACS v.2 DD-Wrt/-OpenWrt



https://ipv6.chappell-family.com/ipv6tcptest/
https://en.internet.nl/connection/e91f490fe1c54cb2b78145c0ab0d2b5a/results
http://www.dnssec-or-not.com/
https://dnscheck.tools/#results
Goto page Previous  1, 2 Display posts from previous:    Page 2 of 2
Post new topic   Reply to topic    DD-WRT Forum Index -> Advanced Networking All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You cannot download files in this forum