Ubiquiti Edgerouter Tutorial

Forums › LAN (ethernet/Wifi/routers/Bluetooth) › Ubiquiti Edgerouter Tutorial

1 | ... | 41 | 42 | 43 | 44 | 45 | 46 | 47 | 48 | 49 | 50 | 51 | ... | 57

3225 posts

Uber Geek

Trusted

#2413422 6-Feb-2020 08:16

More than a reboot was needed. ISP may need to reprovision a new IP if it fails to bring up the PPPoE session with the first one.

CPU: AMD 5900x | RAM: GSKILL Trident Z Neo RGB F4-3600C16D-32GTZNC-32-GB | MB: Asus X570-E | GFX: EVGA FTW3 Ultra RTX 3080Ti| Monitor: LG 27GL850-B 2560x1440

Quic: https://account.quic.nz/refer/473833 R473833EQKIBX

axlback

14 posts

Geek

#2414022 7-Feb-2020 09:34

ipv6 not working on ER-4 on 2degrees.

A request for assistance. Apologies for my ignorance. I've read through multiple posts and found some similar sounding issues from nicmair and metalinc but haven't been able to fix.

Trying to set this up, when I followed the ipv6 portion of the excellent guide at the start it always failed at commit, skewering my connection which required re-set up. After changing the MTU to 1500 on pppoe0 and 1508 on eth0 and eth0.10, it will commit and now an ipv6 address of some type is visible on pppoe0 as per the attached screenshot. Still no external ipv6 access though.

I realise I'm probably missing a lot of required information. If anyone has advice or time to assist I'd appreciate the help.

mentalinc

3225 posts

Uber Geek

Trusted

#2414096 7-Feb-2020 10:15

Reboot the PC you're using and retest.

CPU: AMD 5900x | RAM: GSKILL Trident Z Neo RGB F4-3600C16D-32GTZNC-32-GB | MB: Asus X570-E | GFX: EVGA FTW3 Ultra RTX 3080Ti| Monitor: LG 27GL850-B 2560x1440

Quic: https://account.quic.nz/refer/473833 R473833EQKIBX

CokemonZ

1051 posts

Uber Geek

#2414109 7-Feb-2020 11:01

axlback:

ipv6 not working on ER-4 on 2degrees.

A request for assistance. Apologies for my ignorance. I've read through multiple posts and found some similar sounding issues from nicmair and metalinc but haven't been able to fix.

Trying to set this up, when I followed the ipv6 portion of the excellent guide at the start it always failed at commit, skewering my connection which required re-set up. After changing the MTU to 1500 on pppoe0 and 1508 on eth0 and eth0.10, it will commit and now an ipv6 address of some type is visible on pppoe0 as per the attached screenshot. Still no external ipv6 access though.

I realise I'm probably missing a lot of required information. If anyone has advice or time to assist I'd appreciate the help.

This has been discussed a couple of times before, and I've never managed to get it working - and it seems a couple of others haven't either.

So yeah - if you do, please post how and @me :)

dfnt

1511 posts

Uber Geek

Lifetime subscriber

#2414199 7-Feb-2020 13:10

I think there's an error in the first page:

set interfaces ethernet eth0 pppoe 0 dhcpv6-pd prefix-only

Should be:

set interfaces ethernet eth0 vif 10 pppoe 0 dhcpv6-pd prefix-only

However, I don't think that alone would prevent ipv6 from working as from memory that just stops the cpu usage bug with the EdgeRouter and 2degrees.

axlback

14 posts

Geek

#2414237 7-Feb-2020 14:18

mentalinc:

Reboot the PC you're using and retest.

Thanks, no luck though. Network on my mac configured to obtain ipv6 automatically and hasn't. Same with a windows 10 PC. Both of these machines are wired to a ubiquiti switch plugged into eth1 of the router.

Just to clarify ipv6 works when using Fritzbox or a Synology router.

I have tried both the michaelmurfy and dfny methods, but settled on enabling ipv6 pppoe rather than vlan as per dfnt below:

set system offload ipv6 forwarding enable
set system offload ipv6 vlan enable

to:

set system offload ipv6 forwarding enable
set system offload ipv6 pppoe enable

As per nicmair 7/8/2019, using this seems to work in that it commits and I receive an ipv6 address (? not global as fe80:... ) on pppoe as per the original screenshot, however when I commit I receive the following message:

EdgeRouter-4# commit

[ interfaces ethernet eth0 vif 10 pppoe 0 dhcpv6-pd ]

Stopping daemon...

Starting new daemon...

Sending ICMPv6 packet: Network is unreachable

Again as per nicmair I have not run the command below, despite this I'm not getting any CPU issues:

set interfaces ethernet eth0 pppoe 0 dhcpv6-pd prefix-only

However, if I do run it, I get the following error and my pppoe interface is trashed.

EdgeRouter-4# commit

[ interfaces ethernet eth0 pppoe 0 dhcpv6-pd ]

sysctl: cannot stat /proc/sys/net/ipv6/conf/pppoe0/accept_ra: No such file or directory

Starting new daemon...

pppoe0: No such device

If I repeat the entire process and then get back to that stage and modify it to include vif 10 as below ,then I get a different error:

EdgeRouter-4# set interfaces ethernet eth0 vif 10 pppoe 0 dhcpv6-pd prefix-only

Unit number must be unique.

Since I have the fe80 address I then set a default route as per michaelmurfy instructions, commit, save, and reboot everything, without luck.

I realise this router is outside my skillset but would love to get it running and hopefully not have to modify it for a while...

mentalinc

3225 posts

Uber Geek

Trusted

#2414263 7-Feb-2020 14:58

How long have you been pumping commands at the router?

You may want to backup what you have and start again....

please note the below commands are to improve performance (hardware acceleration), not enable IPv6

set system offload ipv6 forwarding enable
set system offload ipv6 vlan enable

to:

set system offload ipv6 forwarding enable
set system offload ipv6 pppoe enable

CPU: AMD 5900x | RAM: GSKILL Trident Z Neo RGB F4-3600C16D-32GTZNC-32-GB | MB: Asus X570-E | GFX: EVGA FTW3 Ultra RTX 3080Ti| Monitor: LG 27GL850-B 2560x1440

Quic: https://account.quic.nz/refer/473833 R473833EQKIBX

Equinox IT

Cloud spending continues to surge globally, but most organisations haven’t made the changes necessary to maximise the value and cost-efficiency benefits of their cloud investments. Download the whitepaper From Overspend to Advantage now.

axlback

14 posts

Geek

#2414268 7-Feb-2020 15:07

mentalinc:

How long have you been pumping commands at the router?

You may want to backup what you have and start again....

please note the below commands are to improve performance (hardware acceleration), not enable IPv6

set system offload ipv6 forwarding enable
set system offload ipv6 vlan enable

to:

set system offload ipv6 forwarding enable
set system offload ipv6 pppoe enable

Way too long ;) I've hard reset several times and started from scratch, still no dice.

Thanks for the clarification regarding the offload.

axlback

14 posts

Geek

#2414365 7-Feb-2020 19:23

dfnt:

I think there's an error in the first page:

set interfaces ethernet eth0 pppoe 0 dhcpv6-pd prefix-only

Should be:

set interfaces ethernet eth0 vif 10 pppoe 0 dhcpv6-pd prefix-only

However, I don't think that alone would prevent ipv6 from working as from memory that just stops the cpu usage bug with the EdgeRouter and 2degrees.

Thanks, I did correct that and managed to commit and save, and no longer receive any errors when commiting, but still no functioning ipv6.

Is the set a default route instruction correct for my situation (set protocols static interface-route6 ::/0 next-hop-interface pppoe0)?

dfnt

1511 posts

Uber Geek

Lifetime subscriber

#2414384 7-Feb-2020 20:28

Yeah, the default route is required

Have you applied the ipv6 firewall rules? From memory you need to allow dhcpv6 otherwise you won’t get assigned anything https://murfy.nz/files/er_v6.txt

I’m not with 2degrees nor do I use an edgerouter anymore so I’m a little rusty

Can you run:
show interfaces ethernet eth0 vif 10 pppoe 0

And paste the output here, remove your pppoe username and password

mentalinc

3225 posts

Uber Geek

Trusted

#2414393 7-Feb-2020 21:51

here's what mine looks like (working config)

default-route auto

dhcpv6-pd {

pd 0 {

interface eth2 {

host-address ::1

no-dns

prefix-id :1

service slaac

}

prefix-length /56

}

prefix-only

rapid-commit enable

}

firewall {

in {

ipv6-name WAN6_IN

name WAN_IN

}

local {

ipv6-name WAN6_LOCAL

name WAN_LOCAL

}

ipv6 {

dup-addr-detect-transmits 1

enable {

}

mtu 1500

name-server auto

password XXXXX

user-id XXXX@

CPU: AMD 5900x | RAM: GSKILL Trident Z Neo RGB F4-3600C16D-32GTZNC-32-GB | MB: Asus X570-E | GFX: EVGA FTW3 Ultra RTX 3080Ti| Monitor: LG 27GL850-B 2560x1440

Quic: https://account.quic.nz/refer/473833 R473833EQKIBX

axlback

14 posts

Geek

#2414506 8-Feb-2020 08:05

✅It's working - shamefully I had not rebooted the router prior to responding. Thanks to everyone on this thread but in particular to dfnt, mentalinc, and michaelmurfy.

For CokemonZ, I reset the router and started from scratch about 10 times, but the final attempt was done as below.

Setup WAN+2LAN2 as per page 1 of thread. Note I did not tick set up ipv6 default firewall, I added this manually later through the CLI as per michaelmurfy. I have no idea if this mattered or not.

Hardware offload as per page 1

Changed MTU on eth0 and eth0.10 to 1508; pppoe to 1500

Ran the following commands (the only change to page 1 as per dfnt prefix-only)

set interfaces ethernet eth0 vif 10 pppoe 0 ipv6 enable

edit interfaces ethernet eth0 vif 10 pppoe 0 dhcpv6-pd pd 0

set prefix-length /56

set interface eth1 host-address ::1

set interface eth1 prefix-id :0

set interface eth1 service slaac

top

set interfaces ethernet eth0 vif 10 pppoe 0 dhcpv6-pd prefix-only

commit

save

set protocols static interface-route6 ::/0 next-hop-interface pppoe0

commit

save

set up ipv6 firewall through CLI as above

reboot

Not sure of the significance of the slight differences between mentalinc and my configurations or if the default ipv6 firewall that is applied on set up was an issue.

dfnt: Yeah, the default route is required

Have you applied the ipv6 firewall rules? From memory you need to allow dhcpv6 otherwise you won’t get assigned anything https://murfy.nz/files/er_v6.txt

I’m not with 2degrees nor do I use an edgerouter anymore so I’m a little rusty

Can you run:
show interfaces ethernet eth0 vif 10 pppoe 0

And paste the output here, remove your pppoe username and password

Thanks, slightly different to mentalinc. After going through this am now receiving a local ipv6 address on eth1 as well but still not passing external checks e.g. test-ipv6.

@EdgeRouter-4# show interfaces ethernet eth0 vif 10 pppoe 0

default-route auto

dhcpv6-pd {

pd 0 {

interface eth1 {

host-address ::1

prefix-id :0

service slaac

}

prefix-length /56

}

prefix-only

}

firewall {

in {

ipv6-name WAN6_IN

name WAN_IN

}

local {

ipv6-name WAN6_LOCAL

name WAN_LOCAL

}

ipv6 {

enable {

}

mtu 1500

name-server auto

password ****

user-id ****@snap.net.nz

dfnt

1511 posts

Uber Geek

Lifetime subscriber

#2414593 8-Feb-2020 11:03

Nice one @axlback

Always a sense of relief when it just works 👍

axlback

14 posts

Geek

#2424707 20-Feb-2020 22:05

I'm at it again, now trying to add ipv6 to my VLANs, eth1.30 and eth1.40

I've tried the instructions as per #1806397 (changing vif to my tags), but get this error:

@EdgeRouter-4# edit interfaces ethernet eth0 vif 10 pppoe 0 dhcpv6-pd pd 0

[edit interfaces ethernet eth0 vif 10 pppoe 0 dhcpv6-pd pd 0]

@EdgeRouter-4# set interface eth1 vif 30 host-address ::1

The specified configuration node is not valid

Set failed

[edit interfaces ethernet eth0 vif 10 pppoe 0 dhcpv6-pd pd 0]

Any help appreciated. Current config below.

default-route auto

dhcpv6-pd {

pd 0 {

interface eth1 {

host-address ::1

prefix-id :0

service slaac

}

interface eth2 {

host-address ::1

prefix-id :1

service slaac

}

prefix-length /56

}

prefix-only

rapid-commit enable

}

firewall {

in {

ipv6-name WAN6_IN

name WAN_IN

}

local {

ipv6-name WAN6_LOCAL

name WAN_LOCAL

}

ipv6 {

dup-addr-detect-transmits 1

enable {

}

mtu 1500

name-server auto

password ****

user-id ****@snap.net.nz

CokemonZ

1051 posts

Uber Geek

#2430304 2-Mar-2020 19:42

In the past you've all been very helpful, and it's 100% appreciated.

So time for me to ask again.

I am with 2 degrees, and nothing has changed on my router (Edgerouter POE) but I can no longer share my plex server externally.

It seems I am in a double NAT situation caused by CGNAT, as my 'what is my ip' IP is different from what my router says is my IP.

Is there anyway I can fix this myself? Or do I need to buy a static IP?

Actually, finally got off my butt and setup ipv6 - thanks to axlback and the others who went through the pain.

works like a charm now.

EDIT: No it doesn't work like a charm. Works for me on my mobile, but not my brother on his laptop. hmmmmmm

1 | ... | 41 | 42 | 43 | 44 | 45 | 46 | 47 | 48 | 49 | 50 | 51 | ... | 57