ipv6 Setup on Dynamic IP pppoe

Forums › Quic › ipv6 Setup on Dynamic IP pppoe

astrae

268 posts

Ultimate Geek

#311663 5-Feb-2024 13:15

Hi All,

I'm on Dynamic pppoe and trying to give this a go with no luck.

I'm currently trying a Watchguard router but have also tried with a Fortigate 40F on 7.4.

Under the WAN interface on the Fortigate, i've enabled ipv6, DHCP and selected "Prefix Delegation" added an id of 1 with ::/48

and nothing. ipv6 just spins saying "Connecting"

I've tried all available settings on the watchguard with no result.

is ipv6 even enabled on dynamic IP's?

RunningMan

8860 posts

Uber Geek

#3191019 5-Feb-2024 13:26

Yes it's there with a dynamic IPv4. As per the setup page though:

/56 prefix is delivered to you by DHCPv6-PD

Do you mean DHCP client or server enabled? Should be able to hand out client addresses with SLAAC.

Tradepub

Free professional, reference and technical white papers (affiliate link).

astrae

268 posts

Ultimate Geek

#3191021 5-Feb-2024 13:32

Sorry I typo'd 48, i entered /56

This is for the external interface dhcp client. I also tried without specifying a prefix.

michaelmurfy

meow
13166 posts

Uber Geek

Moderator

ID Verified

Trusted

Lifetime subscriber

#3191044 5-Feb-2024 14:52

@astrae The Fortigate is a bit dodgy with this on the current implementation. I would recommend getting a static (it is a once-off cost) and that way you can even do things like RDNS etc. The Fortigate will not get an IP due to lack of IP_NA on the current stack.

As on the Fortigate it expects you to enter an address I think you'll struggle to get this to work.

But here's how to do it if you've got a Static assignment:

On your WAN interface:

config system interface
edit "wan1"
config ipv6
set ip6-allowaccess ping
set dhcp6-prefix-delegation enable
set autoconf enable
config dhcp6-iapd-list
edit 1
next
end
end
end

On your LAN interface:

config system interface
edit "Main Network"
config ipv6
set ip6-address 2407:8b00:xxxx:xxx1::1/64
set ip6-allowaccess ping https ssh snmp http fabric
set ip6-send-adv enable
set ip6-other-flag enable
config ip6-prefix-list
edit 2407:8b00:xxxx:xxx1::/64
next
end
end
end

This will give you IPv6 across all your devices via SLAAC. When IPoE comes along, you'll find your Fortigate will actually get a WAN interface IP and IPv6 support just works a whole lot better with it but don't panic for now if it doesn't.

Michael Murphy | https://murfy.nz
Referral Links: Quic Broadband (use R122101E7CV7Q for free setup)

Are you happy with what you get from Geekzone? Please consider supporting us by subscribing.
Opinions are my own and not the views of my employer.

astrae

268 posts

Ultimate Geek

#3191256 5-Feb-2024 20:38

Thanks @michaelmurfy

I might wait for ipoe then try again

gregb

51 posts

Master Geek

#3191423 6-Feb-2024 14:28

astrae: I might wait for ipoe then try again

The configuration for IPv6 (from what I can see) will be the same. The general process is:

start the session with PPPoE or IPoE and negotiate IPv4 parameters
perform IPv6 DHCP over the link (either the PPPoE/ethernet/vlan interface)
get an IPv6 prefix via DHCPv6 ('IA_PD' aka a /56 prefix)
using the magic of your selected router, assign the first network from the /56 to your internal network

The /56 prefix has 256 ipv6 /64 networks. A large percentage of users will only require a single network from this prefix.

If you have a dynamic prefix, then the network address will need to be propagated to hosts using SLAAC or DHCPv6 (or a combination of both). If you have a static prefix you can cheat having to setup the router to the same level of completeness as you will know the prefix.

theviper

43 posts

Geek

#3197913 20-Feb-2024 14:27

Any tips on getting IPv6 to work on an Amazon Eero 6 acting as the gateway/router? It is very much a black box, and we've shifted to it away from a Fortigate due to the parental controls and ease of use for my wife.

I've enabled IPV6 on the network and clients get a IPV6 DHCP address however IPV6 test sites say it's not working.

If it's a wait till DHCP type thing then no worries.

Also will everyone move to DHCP when it's made GA? or it's an opt in type thing allowing people to pick and choose what suits them like vlan tag on/off on wan.

michaelmurfy

meow
13166 posts

Uber Geek

Moderator

ID Verified

Trusted

Lifetime subscriber

#3197938 20-Feb-2024 15:11

@theviper Best wait on the announcement regarding IPoE (I'm not going to spill any beans that ain't already public) but fully unsure about the Eero as I've never used one personally but is should just work with default IPv6 enabled.

RunningMan

8860 posts

Uber Geek

#3198005 20-Feb-2024 18:03

theviper:
Also will everyone move to DHCP when it's made GA? or it's an opt in type thing allowing people to pick and choose what suits them like vlan tag on/off on wan.

You can use either, or lock to one or the other in your account portal if your router insists on trying both at the same time.