![]() ![]() ![]() |
|
I have edgerouter 4
Restored the previously working pppoe config tonight and the pppoe interface doesn't come up, I get static IP on eth0.10 (wan port), but not able to ping etc.
Went back to the config that I butchered to work (i.e. deleted pppoe interface, changed port forwarding and nat interface to eth0.10 (from pppoe), but can't get ipv6 working.
I can't see a ipv6 address on eth0.10, but eth1 (lan) does have ipv6, devices connected to eth1 are also provided an IPv6 address, but not able to ping or access ipv6.
Should there be an ipv6 address on the eth0.10? I recall there use to be one.
interfaces {
ethernet eth0 {
address dhcp
duplex auto
mtu 1508
speed auto
vif 10 {
address dhcp
description Internet
dhcpv6-pd {
pd 0 {
interface eth1 {
host-address ::1
prefix-id :0
service slaac
}
prefix-length /56
}
prefix-only
rapid-commit enable
}
firewall {
in {
ipv6-name WAN6_IN
name WAN_IN
}
local {
ipv6-name WAN6_LOCAL
name WAN_LOCAL
}
}
ipv6 {
address {
autoconf
}
dup-addr-detect-transmits 1
}
mtu 1508
}
}
protocols {
static {
interface-route6 ::/0 {
next-hop-interface eth0.10 {
}
}
}
}
CPU: AMD 5900x | RAM: GSKILL Trident Z Neo RGB F4-3600C16D-32GTZNC-32-GB | MB: Asus X570-E | GFX: EVGA FTW3 Ultra RTX 3080Ti| Monitor: LG 27GL850-B 2560x1440
Quic: https://account.quic.nz/refer/473833 R473833EQKIBX
Got migrated yesterday as well. Internet suddenly went out and caused me a few issues. Haven't had ipv6 since.
The "No IPv6" thing is interesting. Just wait though, don't mess with your Edgerouter configurations as it should just work. My suspicion is something mucked up with the Static IPv6 leases you all have.
@Sounddude one for you.
Michael Murphy | https://murfy.nz
Referral Links: Quic Broadband (use R122101E7CV7Q for free setup)
Are you happy with what you get from Geekzone? Please consider supporting us by subscribing.
Opinions are my own and not the views of my employer.
mentalinc:
I have edgerouter 4
Restored the previously working pppoe config tonight and the pppoe interface doesn't come up, I get static IP on eth0.10 (wan port), but not able to ping etc.
Went back to the config that I butchered to work (i.e. deleted pppoe interface, changed port forwarding and nat interface to eth0.10 (from pppoe), but can't get ipv6 working.
I can't see a ipv6 address on eth0.10, but eth1 (lan) does have ipv6, devices connected to eth1 are also provided an IPv6 address, but not able to ping or access ipv6.
Should there be an ipv6 address on the eth0.10? I recall there use to be one.
I was in exactly the same position, but I have everything working now.
Here's my relevant config:
interfaces {
ethernet eth0 {
description "2 Degrees UFB"
duplex auto
mtu 1500
speed auto
vif 10 {
address dhcp
description "2 Degrees UFB VLAN 10"
dhcpv6-pd {
no-dns
pd 0 {
interface eth1 {
host-address ::1
no-dns
prefix-id :0
service slaac
}
prefix-length /56
}
rapid-commit enable
}
firewall {
in {
ipv6-name WAN6_IN
name WAN_IN
}
local {
ipv6-name WAN6_LOCAL
name WAN_LOCAL
}
}
ipv6 {
dup-addr-detect-transmits 1
}
}
}
Note no 'address' section under ipv6 on WAN interface. I also removed prefix-only.
I had to remove the following section:
protocols {
static {
interface-route6 ::/0 {
next-hop-interface eth0.10 {
}
}
}
}
When this was present, the router did not install the default route from the router advertisement from 2 Degrees, so it never had the correct next hop. (Behaviour different from the pppoe setup)
Of course you also need to substitute eth0.10 for pppoe0 anywhere else in the config - port forwarding, NAT, IPSec, etc.
It's also worth a reboot once you have the config done - just to make sure that the 'accept_ra' setting is correctly programmed.
Conrad
CPU: AMD 5900x | RAM: GSKILL Trident Z Neo RGB F4-3600C16D-32GTZNC-32-GB | MB: Asus X570-E | GFX: EVGA FTW3 Ultra RTX 3080Ti| Monitor: LG 27GL850-B 2560x1440
Quic: https://account.quic.nz/refer/473833 R473833EQKIBX
I note that I seem to be less well connected than previously on the new network.
I'm in Wellington and I used to have good connectivity to ACSData, Xtreme, Inspire etc - in the order of 0-1ms. Now everything in Wellington is 10-19ms, so I speculate I'm being tunnelled to Auckland.
Unfortunate as poor connectivity was the reason I avoided Spark/One/etc.
I'll let things settle down in case it's just for the transition, but any suggestions on carriers that do peer locally and openly?
Still in my case there is one positive. I'm using a pcengines APU2 with openwrt as my router. And it currently can't fully reach the max gig connections speeds with pppoe. So I'm hopeful that once I'm migrated and can use dhcp that it should let me reach full gig speeds due to lower cpu overhead from dhcp.
What interfaces on your router are you getting IPv6 addresses?
I only have a /64 on eth1 (LAN). no ipv6 address on eth0 or eth.10.
My config now matches yours, still not getting IPv6 on my PC, (Rebooted both router and PC at the same time)
On the PC I get:
ipconfig /all
IPv6 Address. . . . . . . . . . . : 2404:4408:XXXXXXXXXXXXX:dc06(Preferred)
Temporary IPv6 Address. . . . . . : 2404:XXXXXXXXXXXXX:f050(Preferred)
Link-local IPv6 Address . . . . . : fe80::874e:82f2:9a4b:2b8d%11(Preferred)
Default Gateway . . . . . . . . . : fe80::76ac:b9ff:fed3:fe25%11
I've set 2degrees IPv6 dns servers on my network card currently - otherwise would be pihole..
CPU: AMD 5900x | RAM: GSKILL Trident Z Neo RGB F4-3600C16D-32GTZNC-32-GB | MB: Asus X570-E | GFX: EVGA FTW3 Ultra RTX 3080Ti| Monitor: LG 27GL850-B 2560x1440
Quic: https://account.quic.nz/refer/473833 R473833EQKIBX
mentalinc:
What interfaces on your router are you getting IPv6 addresses?
I only have a /64 on eth1 (LAN). no ipv6 address on eth0 or eth.10.
My config now matches yours, still not getting IPv6 on my PC, (Rebooted both router and PC at the same time)
On the PC I get:
ipconfig /all
IPv6 Address. . . . . . . . . . . : 2404:4408:XXXXXXXXXXXXX:dc06(Preferred)
Temporary IPv6 Address. . . . . . : 2404:XXXXXXXXXXXXX:f050(Preferred)
Link-local IPv6 Address . . . . . : fe80::874e:82f2:9a4b:2b8d%11(Preferred)
Default Gateway . . . . . . . . . : fe80::76ac:b9ff:fed3:fe25%11
I've set 2degrees IPv6 dns servers on my network card currently - otherwise would be pihole..
Hi @mentalinc
I definitely have IPv6 addresses on eth0.10 and eth1.
From my router:
admin@router:~$ show interfaces
Codes: S - State, L - Link, u - Up, D - Down, A - Admin Down
Interface IP Address S/L Description
--------- ---------- --- -----------
eth0 - u/u 2 Degrees UFB
eth0.10 123.255.50.74/30 u/u 2 Degrees UFB VLAN 10
2404:440c:1602:fb1::1/128
eth1 192.168.1.254/24 u/u Local
2404:440c:17e2:6e00::1/64
eth2 192.168.10.254/24 u/u Other
eth3 - A/D
lo 127.0.0.1/8 u/u
::1/128
admin@router:~$ show interfaces ethernet eth0 vif 10
eth0.10@eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
link/ether 74:ac:b9:43:32:da brd ff:ff:ff:ff:ff:ff
inet 123.255.50.74/30 brd 123.255.50.75 scope global eth0.10
valid_lft forever preferred_lft forever
inet6 2404:440c:1602:fb1::1/128 scope global
valid_lft forever preferred_lft forever
inet6 fe80::76ac:b9ff:fe43:32da/64 scope link
valid_lft forever preferred_lft forever
Description: 2 Degrees UFB VLAN 10
RX: bytes packets errors dropped overrun mcast
484438345 4150699 0 0 0 0
TX: bytes packets errors dropped carrier collisions
601572740 4662090 0 0 0 0
eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
link/ether 74:ac:b9:43:32:db brd ff:ff:ff:ff:ff:ff
inet 192.168.1.254/24 brd 192.168.1.255 scope global eth1
valid_lft forever preferred_lft forever
inet6 2404:440c:17e2:6e00::1/64 scope global
valid_lft forever preferred_lft forever
inet6 fe80::76ac:b9ff:fe43:32db/64 scope link
valid_lft forever preferred_lft forever
Description: Local
RX: bytes packets errors dropped overrun mcast
235569258785 198244327 0 26 0 1855
TX: bytes packets errors dropped carrier collisions
554621416516 425918606 0 0 0 0
admin@router:~$ show ipv6 route
IPv6 Routing Table
Codes: K - kernel route, C - connected, S - static, R - RIP, O - OSPF,
IA - OSPF inter area, E1 - OSPF external type 1,
E2 - OSPF external type 2, N1 - OSPF NSSA external type 1,
N2 - OSPF NSSA external type 2, B - BGP
Timers: Uptime
IP Route Table for VRF "default"
K ::/0 [0/1024] via fe80::8626:2bff:fe66:1971, eth0.10, 20:03:00
C ::1/128 via ::, lo, 20:04:58
C 2404:440c:1602:fb1::1/128 via ::, eth0.10, 19:57:54
C 2404:440c:17e2:6e00::/64 via ::, eth1, 19:57:53
C fe80::/64 via ::, eth0.10, 20:04:40
From my Mac:
mac:~ conrad$ ifconfig
...
en0: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
options=50b<RXCSUM,TXCSUM,VLAN_HWTAGGING,AV,CHANNEL_IO>
ether 3c:cd:36:66:95:ac
inet6 fe80::2e:59c7:afb6:f83e%en0 prefixlen 64 secured scopeid 0x4
inet6 2404:440c:17e2:6e00:107a:d45b:4361:4a5e prefixlen 64 autoconf secured
inet6 2404:440c:17e2:6e00:78a6:cb6a:f19e:ecef prefixlen 64 autoconf temporary
inet 192.168.1.1 netmask 0xffffff00 broadcast 192.168.1.255
nd6 options=201<PERFORMNUD,DAD>
media: autoselect (1000baseT <full-duplex>)
status: active
...
mac:~ conrad$ netstat -rn
Routing tables
...
Internet6:
Destination Gateway Flags Netif Expire
default fe80::76ac:b9ff:fe43:32db%en0 UGcg en0
...
::1 ::1 UHL lo0
2404:440c:17e2:6e00::/64 link#4 UC en0
...
fe80::%en0/64 link#4 UCI en0
...
mac:~ conrad$ ping6 www.google.com
PING6(56=40+8+8 bytes) 2404:440c:17e2:6e00:78a6:cb6a:f19e:ecef --> 2404:6800:4006:813::2004
16 bytes from 2404:6800:4006:813::2004, icmp_seq=0 hlim=119 time=33.891 ms
16 bytes from 2404:6800:4006:813::2004, icmp_seq=1 hlim=119 time=33.881 ms
^C
mentalinc:
I've set 2degrees IPv6 dns servers on my network card currently - otherwise would be pihole..
Not related since you aren't getting an IPv6 address at all on your router, but I don't actually configure IPv6 DNS name servers. Since I run a local nameserver, I put the 'no-dns' flag in the dhcpv6-pd config to stop the router picking up the IPv6 name servers. I use the router as the local name server, and it forwards unknown requests to 2 Degrees IPv4 name servers. An IPv4 name server has no problem resolving IPv6 addresses, it seems to work fine.
If you don't have a local domain then it doesn't matter.
(Also make sure your WAN6_LOCAL firewall rules allow DHCPv6 - but I expect it would be there from the previous configuration.)
I am in the South Island and speedtest been showing 300/60 all night. Not that its an issue for me, but something isnt quite right.
Thanks @ConradB, something not right in my config somehow as eth0.10 doesn't match what you're seeing - but my config matches yours:
Sent you PM with full (but sanitised config) - thanks
show interfaces ethernet eth0 vif 10
I'm missing an inet6 entry on eth0.10
show ipv6 route is missing the eth0.10 line
IP Route Table for VRF "default"
K ::/0 [0/1024] via fe80::e641:64ff:fe91:f, eth0.10, 01:39:28
C ::1/128 via ::, lo, 01:41:04
C 2404:XXXXXXXX:9500::/64 via ::, eth1, 01:39:27
C fe80::/64 via ::, eth0.10, 01:40:45
interfaces {
ethernet eth0 {
description "2 Degrees UFB"
duplex auto
mtu 1500
speed auto
vif 10 {
address dhcp
description Internet
dhcpv6-pd {
no-dns
pd 0 {
interface eth1 {
host-address ::1
no-dns
prefix-id :0
service slaac
}
prefix-length /56
}
rapid-commit enable
}
firewall {
in {
ipv6-name WAN6_IN
name WAN_IN
}
local {
ipv6-name WAN6_LOCAL
name WAN_LOCAL
}
}
ipv6 {
dup-addr-detect-transmits 1
}
}
}
v6 Firewall config/rules match - https://www.geekzone.co.nz/downloads/er_v6.txt
ipv6-name WAN6_IN {
default-action drop
rule 10 {
action accept
description "allow established"
protocol all
state {
established enable
related enable
}
}
rule 20 {
action drop
description "drop invalid packets"
protocol all
state {
invalid enable
}
}
rule 30 {
action accept
description "allow ICMPv6"
protocol icmpv6
}
}
ipv6-name WAN6_LOCAL {
default-action drop
rule 10 {
action accept
description "allow established"
protocol all
state {
established enable
related enable
}
}
rule 20 {
action drop
description "drop invalid packets"
protocol all
state {
invalid enable
}
}
rule 30 {
action accept
description "allow ICMPv6"
protocol icmpv6
}
rule 40 {
action accept
description "allow DHCPv6 client/server"
destination {
port 546
}
protocol udp
source {
port 547
}
}
}
ipv6-receive-redirects disable
ipv6-src-route disable
ip-src-route disable
log-martians enable
name WAN_IN {
default-action drop
description "WAN to internal"
rule 10 {
action accept
description "Allow established/related"
state {
established enable
related enable
}
}
rule 20 {
action drop
description "Drop invalid state"
state {
invalid enable
}
}
}
name WAN_LOCAL {
default-action drop
description "WAN to router"
rule 10 {
action accept
description "Allow established/related"
state {
established enable
related enable
}
}
rule 20 {
action drop
description "Drop invalid state"
state {
invalid enable
}
}
}
CPU: AMD 5900x | RAM: GSKILL Trident Z Neo RGB F4-3600C16D-32GTZNC-32-GB | MB: Asus X570-E | GFX: EVGA FTW3 Ultra RTX 3080Ti| Monitor: LG 27GL850-B 2560x1440
Quic: https://account.quic.nz/refer/473833 R473833EQKIBX
Bluntj:
I am in the South Island and speedtest been showing 300/60 all night. Not that its an issue for me, but something isnt quite right.
It's the same for me since being migrated on the 4th. Are you connecting using DHCP or PPPoE?
mentalinc:
Thanks @ConradB, something not right in my config somehow as eth0.10 doesn't match what you're seeing - but my config matches yours:
Sent you PM with full (but sanitised config) - thanks
I'll check out the config. FYI in case it's relevant I am running v2.0.9-hotfix.6
Conrad
|
![]() ![]() ![]() |