2degrees & USG: Correct MTU/MSS?

Forums › 2degrees (including Slingshot, Orcon, Flip, Stuff Fibre, MyRepublic, 2talk and Vocus) › 2degrees & USG: Correct MTU/MSS?

Benoire

2798 posts

Uber Geek

#239396 16-Jul-2018 08:41

I've been using an Ubiquiti USG for about 6 months now and all is good with the IPv4 connection, but IPv6 is not working... Some of this appears related to the new controller version I'm running but I wonder if its also the mss-clamping setting. Presently, with IPv6 set to DHCP-PD and IPv4 recieving the static IP, the MSS clamping is sitting at 1452 in the config when I run mca-ctrl -t dump-cfg on the USG itself. I've read other posts that perhaps the MTU should be set higher, somewhere around 1508 and therefore the corresponding MSS-clamping setting would also be higher than 1452 (1480?).

Anyone else running a USG with 2degrees and IPv4/IPv6 running? For reference, my controller version is 5.8.24 which might have broken IPv6 but I want to eliminate all other issues first.

Thanks,

Chris

1 | 2

131 posts

Master Geek

#2056839 16-Jul-2018 09:26

Have a look at https://www.geekzone.co.nz/forums.asp?forumid=85&topicid=238142 might help with your issue?

ANglEAUT

2326 posts

Uber Geek

Trusted

Lifetime subscriber

#2056924 16-Jul-2018 10:30

These settings work for me.

WhatsApp voice calls & VoIP not 100%, but IPv6 is a go.

Please keep this GZ community vibrant by contributing in a constructive & respectful manner.

Benoire

2798 posts

Uber Geek

#2056933 16-Jul-2018 10:45

@lcl

What are you network settings for IPv6 for both WAN and perhaps LAN? Do you have a seperate WLAN network too?

Edit: Also what is your controller version?

ANglEAUT

2326 posts

Uber Geek

Trusted

Lifetime subscriber

#2058077 18-Jul-2018 06:36

Controller version: 5.7.23

USG version: 4.4.22.5086045

IPv6 WAN settings as per above.

IPv6 LAN settings

If you have specific commands that I can run from a terminal for you, that might be easier?

Please keep this GZ community vibrant by contributing in a constructive & respectful manner.

Benoire

2798 posts

Uber Geek

#2058088 18-Jul-2018 07:59

Thanks, my issue is a controller problem. The 5.8.2x series will not allow the PD identity to be filled without the USG failing to provision and fall over. I had it working in 5.7.28, but moving to 5.8 has killed IPv6 for me..

Have you tried pinging facebook using IPv6 only to confirm it works?

ANglEAUT

2326 posts

Uber Geek

Trusted

Lifetime subscriber

#2061404 23-Jul-2018 22:31

Benoire:

Thanks, my issue is a controller problem. The 5.8.2x series will not allow the PD identity to be filled without the USG failing to provision and fall over. I had it working in 5.7.28, but moving to 5.8 has killed IPv6 for me..

Have you tried pinging facebook using IPv6 only to confirm it works?

Tell me about it. Grabbed the screen shots for you in the evening and did an upgrade of the controller in the morning. Also had the provisioning error

U-Gateway configuration commit error. Error message: { "DELETE" : { "failure" : "0" , "success" : "1"} , "SESSION_ID" : "68623b5805d051d008a6f2a383" , "SET" : { "error" : { "interfaces ethernet eth0 vif 10 pppoe 2 dhcpv6-pd pd 0 interface eth1 prefix-id ..." : "invalid prefix ID\n\nValue validation failed\n"} , "failure" : "1" , "success" : "1"}}

Still had IPv6 working then. Tried to rollback controller & USG firmware. Lost IPv6 since then. Also have additional tabs; Ports & Stats plus WAN section missing.

Not too sure what to do now? Search of UBNT forums was not helpful.

Please keep this GZ community vibrant by contributing in a constructive & respectful manner.

michaelmurfy

meow
13260 posts

Uber Geek

Moderator

ID Verified

Trusted

Lifetime subscriber

#2061410 23-Jul-2018 22:35

What are you folks running your USG's on controller wise? A PC on the network?

If so, feel free to PM me and I can set you up on my cloud controller. I'm yet to try IPv6 on 2degrees but have got IPv6 enabled on a number of sites (including my own Edgerouter).

As for MTU - 1500 with 1508 on the main Ethernet interface.

Michael Murphy | https://murfy.nz
Referral Links: Quic Broadband (use R122101E7CV7Q for free setup)

Are you happy with what you get from Geekzone? Please consider supporting us by subscribing.
Opinions are my own and not the views of my employer.

Sharesies

Trade NZ and US shares and funds with Sharesies (affiliate link).

ANglEAUT

2326 posts

Uber Geek

Trusted

Lifetime subscriber

#2061453 24-Jul-2018 08:14

michaelmurfy: What are you folks running your USG's on controller wise? A PC on the network?

Previously, Windows server, now Raspberry Pi 2. Everything was running fine before the latest controller update.

Thanks for the offer. Did see it in the other discussions already.

Please keep this GZ community vibrant by contributing in a constructive & respectful manner.

Benoire

2798 posts

Uber Geek

#2061477 24-Jul-2018 08:37

I run my controller on a VM on my vsphere lab; is HA enabled and on a vSAN 2 node so generally doesn't fall over that easily... only ever need access from home so no need for in the cloud.

I've hit the issues of the prefix ID failing on the latest stable controller, i.e. if you have more than one network, entering prefix IDs causes the USG to fail to provision and 'crash' so have got IPv6 only enabled on the lan and not the wLAN

chevrolux

4962 posts

Uber Geek
Inactive user

#2061482 24-Jul-2018 08:44

I'd suggest you are very keen running anything UBNT deem to be "Alpha" software - they have never had a good track record with pre-release stuff!!

Benoire

2798 posts

Uber Geek

#2061502 24-Jul-2018 09:15

IPv6 was fine in the 5.7.x controller range, they broke it in the 5.8.xx range

ANglEAUT

2326 posts

Uber Geek

Trusted

Lifetime subscriber

#2061982 24-Jul-2018 22:58

Benoire: IPv6 was fine in the 5.7.x controller range, they broke it in the 5.8.xx range

They sure did. I've downgraded back to v5.7.23. I now have the WAN options again and upload the correct screen shots that work for me.

Please keep this GZ community vibrant by contributing in a constructive & respectful manner.

michaelmurfy

meow
13260 posts

Uber Geek

Moderator

ID Verified

Trusted

Lifetime subscriber

#2061986 24-Jul-2018 23:23

IPv6 is not broken with 5.8.x - same with 5.9.x. It is in-fact more stable in these versions.

The options for it have just moved to Settings --> Networks. Under WAN settings you'll see IPv6. For 2degrees select "Using DHCPv6" along with a Prefix Delegation Size of 56.

Next, you'll need to go back into Networks and under your Network scroll down to Configure IPv6 Network. Change it to Prefix Delegation, select your WAN interface and change the Prefix ID to 1 for a single network like so (I am using Cloudflare DNS with this site - you can leave this as Auto):

I've confirmed this working with the latest 5.9.x controller software. I would actually recommend 5.8 or 5.9 if you're running IPv6 as it is much more stable.

Benoire

2798 posts

Uber Geek

#2062028 25-Jul-2018 08:49

IPv6 is broken if you have more than one network defined in your controller; assigning different prefix IDs causes the USG to fail provisioning and eventually break and assigning the same prefix id (or leaving it blank) causes it to not assign an IPv6 to the LAN port. I have only assigned it to my main lan so its working but my wLAN which runs of the 2nd usg port is not able to get one due to the above. Its being well documented by others on the official forums with a large error code.

ANglEAUT

2326 posts

Uber Geek

Trusted

Lifetime subscriber

#2062556 25-Jul-2018 20:20

michaelmurfy:

IPv6 is not broken with 5.8.x - same with 5.9.x. It is in-fact more stable in these versions. ...

Something surely broke for me. My USG went into a provisioning loop and I then lost IPv6.

My LAN is fairly simple, Wi-Fi & LAN together plus 1 guest Wi-Fi. If I have a configuration error, I would hope that a pre-upgrade validation check would flag that.

Please keep this GZ community vibrant by contributing in a constructive & respectful manner.

1 | 2