Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


255 posts

Ultimate Geek
+1 received by user: 207

Trusted
2degrees

Topic # 240157 23-Aug-2018 15:04
14 people support this post
Send private message quote this post

Update below on IPV6 Address Space allocation - 10th October 2018.

 

Hi All,

 

With the introduction of BYOD (some customers choosing not to use a 2degrees supplied Fritzbox), we've had a bunch of queries about ipv6, how we provision it, what technologies we use etc. In order to assist you with troubleshooting any other equipment you may use, the team (Thanks Aaron) have pulled together the following information.

 

2degrees uses Juniper equipment to terminate subscribers, checkout the following links for more information on the architecture used and the implementation overview - Basic Architecture of a Subscriber Access Dual-Stack Network and Overview of Using DHCPv6 Prefix Delegation.

 

2degrees uses DHCPv6 Prefix Delegation to assign IPv6 prefixes to customer CPE, the only requirement this puts on the CPE is identification and choosing a prefix for delegation. 

 

DHCPv6 prefix delegation process

 

     

  1. The BNG provides IPv6 prefixes available for delegation.  In the case of dynamic customers this is provided by a local address-assignment pool, and for static IPv6 customers the BNG is informed of the /56 prefix to use via our RADIUS server.  Even though it’s a static assignment the BNG will still delegate the prefix to the CPE using DHCPv6.
  2. The CPE requests one or more prefixes from the delegating router.  The standard is a /64 allocation per LAN segment.
  3. The BNG chooses the prefixes for delegation, and responds to the CPE.
  4. The CPE is then responsible for the delegated prefixes.

 

CPE WAN link

 

Below are the methods we support:

 

     

  1. Link-local IPv6 address – The link-local address is provisioned by the appending the interface identifier negotiated by IPv6CP with the IPv6 link-local prefix (fe80::/10).
  2. DHCPv6 prefix delegation – The CPE can use the prefix it receives from the BNG to assign an IPv6 address to the interface between the CPE and BNG.  A Fritzbox modem uses this method by default.

 

Fritz configuration example (in lab environment)

 

 

  • This is the default setup and will establish a native IPv6 connection, the below configuration would be more specific

 

 

  • Here you can see the IPv6 address assigned to the CPE-BNG interface and the prefix that was delegated.
  • The Fritz in its default setup will assign the first available /64 to the LAN segment.
  • For our dynamic subscribers we allocate a /48 or /56 address space depending on the version of code they are running (due to our currently upgrades in progress), for static customers we allocate a /56 address space. Upgrades are planned to be completed in the first week of November 2018 which will see us standardise on /56 for all subscribers.

Nick.


Create new topic
Meow
8017 posts

Uber Geek
+1 received by user: 4006

Moderator
Trusted
Lifetime subscriber

  Reply # 2078025 23-Aug-2018 16:03
Send private message quote this post

Made this sticky.

 

Thanks very much for these guides - they're excellent!





835 posts

Ultimate Geek
+1 received by user: 71

Trusted

  Reply # 2111304 20-Oct-2018 10:05
Send private message quote this post

@NickMack

 

Good to see 2D post this information

 

I was curious as to why 2D does not have their web accessible as IPv6 i.e. AAAA record etc

 

 




255 posts

Ultimate Geek
+1 received by user: 207

Trusted
2degrees

  Reply # 2111362 20-Oct-2018 12:01
Send private message quote this post

xlinknz:

@NickMack


Good to see 2D post this information


I was curious as to why 2D does not have their web accessible as IPv6 i.e. AAAA record etc


 



Great question - not sure, I'll ask - Website is done by 3rd party.

Nick

1758 posts

Uber Geek
+1 received by user: 396

Trusted
Subscriber

  Reply # 2111363 20-Oct-2018 12:06
4 people support this post
Send private message quote this post

If only the other ISP's were so transparent and forthcoming - good to see.





________

 

Antonios K

 

 

 

Click to see full size


835 posts

Ultimate Geek
+1 received by user: 71

Trusted

  Reply # 2111371 20-Oct-2018 12:47
Send private message quote this post

NickMack:
xlinknz:

 

@NickMack

 

Good to see 2D post this information

 

I was curious as to why 2D does not have their web accessible as IPv6 i.e. AAAA record etc

 

 

Great question - not sure, I'll ask - Website is done by 3rd party.

Nick

 

Thank you for the reply

 

I see it is presented via the Redshield Cloud WAF, check whether that that can act as a IPv6 proxy even if the host provider cannot dual stack

 

antoniosk:

 

If only the other ISP's were so transparent and forthcoming - good to see.

 

 

I agree!


211 posts

Master Geek
+1 received by user: 32


  Reply # 2111436 20-Oct-2018 16:00
Send private message quote this post

A related question. I am 2D customer with a Fritz box(1)

 

The DNS server in the Fritz box will resolve hosts on the LAN with a fully qualified domain name in the style $hostname.fritz.box

 

I have enabled IPv6. A dig query returns an ipv4 IP address but an AAAA query for an IPv6 address does not resolve. Have I missed a setting or is the Fritz box unable to do an AAAA for a local hostname?

 

 

 

1. Model:   7490    OS Version:   06.80





Obsequious hypocrite



255 posts

Ultimate Geek
+1 received by user: 207

Trusted
2degrees

  Reply # 2111763 21-Oct-2018 08:52
Send private message quote this post

ObidiahSlope:

A related question. I am 2D customer with a Fritz box(1)


The DNS server in the Fritz box will resolve hosts on the LAN with a fully qualified domain name in the style $hostname.fritz.box


I have enabled IPv6. A dig query returns an ipv4 IP address but an AAAA query for an IPv6 address does not resolve. Have I missed a setting or is the Fritz box unable to do an AAAA for a local hostname?


 


1. Model:   7490    OS Version:   06.80



Not something I've looked at before on default Frtiz config, I suspect 99% of residential customers would care less ;-) (I use DNS from my Windows Active Directory, so this resolves fine). I'll have a look at this after the long weekend (camping at the mo) ;-)

Nick

Ps - theres a new version on Fritz OS you can upgrade to.



255 posts

Ultimate Geek
+1 received by user: 207

Trusted
2degrees

  Reply # 2112585 23-Oct-2018 08:57
Send private message quote this post

NickMack:
xlinknz:

 

@NickMack

 

Good to see 2D post this information

 

I was curious as to why 2D does not have their web accessible as IPv6 i.e. AAAA record etc

 



Great question - not sure, I'll ask - Website is done by 3rd party.

Nick

 

 

Website hosted by 3rd party in AWS. I've asked if they can investigate.

 

Update - should be resolved in the coming weeks.




255 posts

Ultimate Geek
+1 received by user: 207

Trusted
2degrees

  Reply # 2113177 24-Oct-2018 11:52
Send private message quote this post

NickMack:
ObidiahSlope:

 

A related question. I am 2D customer with a Fritz box(1)

 

The DNS server in the Fritz box will resolve hosts on the LAN with a fully qualified domain name in the style $hostname.fritz.box

 

I have enabled IPv6. A dig query returns an ipv4 IP address but an AAAA query for an IPv6 address does not resolve. Have I missed a setting or is the Fritz box unable to do an AAAA for a local hostname?

 

1. Model:   7490    OS Version:   06.80

 



Not something I've looked at before on default Frtiz config, I suspect 99% of residential customers would care less ;-) (I use DNS from my Windows Active Directory, so this resolves fine). I'll have a look at this after the long weekend (camping at the mo) ;-)

Nick

Ps - theres a new version on Fritz OS you can upgrade to.

 

Hiya,

 

It looks like AVM haven’t included this feature/functionality - We have fired off a request to have this considered/added in future releases.

 

Tested on the following hardware and firmware - Model  7490: v06.84, v07.01.

 

2degreess-MBP:~ 2degreesengineering$ dig 2degreess-MBP.fritz.box
 
; <<>> DiG 9.10.6 <<>> 2degreess-MBP.fritz.box
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 6578
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 3
 
;; QUESTION SECTION:
;2degreess-MBP.fritz.box.   IN  A
 
;; ANSWER SECTION:
2degreess-MBP.fritz.box. 9  IN  A   192.168.178.22
 
;; AUTHORITY SECTION:
2degreess-MBP.fritz.box. 9  IN  NS  fritz.box.
 
;; ADDITIONAL SECTION:
fritz.box.      9   IN  A   192.168.178.1
fritz.box.      9   IN  AAAA    fd00::c225:6ff:fef2:e1a2
fritz.box.      9   IN  AAAA    2406:e001:2:5401:c225:6ff:fef2:e1a2
 
;; Query time: 0 msec
;; SERVER: 192.168.178.1#53(192.168.178.1)
;; WHEN: Wed Oct 24 11:43:11 NZDT 2018
;; MSG SIZE  rcvd: 143
 
2degreess-MBP:~ 2degreesengineering$ dig -t "AAAA" 2degreess-MBP.fritz.box
 
; <<>> DiG 9.10.6 <<>> -t AAAA 2degreess-MBP.fritz.box
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 24633
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
 
;; QUESTION SECTION:
;2degreess-MBP.fritz.box.   IN  AAAA
 
;; AUTHORITY SECTION:
fritz.box.      9   IN  SOA fritz.box. admin.fritz.box. 1540334593 21600 1800 43200 10
 
;; Query time: 0 msec
;; SERVER: 192.168.178.1#53(192.168.178.1)
;; WHEN: Wed Oct 24 11:43:13 NZDT 2018
;; MSG SIZE  rcvd: 83

 

Nick.


50 posts

Geek
+1 received by user: 21


  Reply # 2121711 7-Nov-2018 17:13
Send private message quote this post

Works for me, and has for years...

 

 

$ dig fritz.box ANY

 

; <<>> DiG 9.9.5-3ubuntu0.18-Ubuntu <<>> fritz.box ANY
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 8239
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 5, AUTHORITY: 1, ADDITIONAL: 3

 

;; QUESTION SECTION:
;fritz.box. IN ANY

 

;; ANSWER SECTION:
fritz.box. 9 IN SOA fritz.box. admin.fritz.box. 1 21600 1800 43200 10
fritz.box. 9 IN NS fritz.box.
fritz.box. 9 IN A 192.168.1.1
fritz.box. 9 IN AAAA fd00::c225:######
fritz.box. 9 IN AAAA 2406:e006:######

 

;; AUTHORITY SECTION:
fritz.box. 9 IN NS fritz.box.

 

;; ADDITIONAL SECTION:
fritz.box. 9 IN A 192.168.1.1
fritz.box. 9 IN AAAA fd00::c225:######
fritz.box. 9 IN AAAA 2406:e006:######

 

;; Query time: 1 msec
;; SERVER: 127.0.1.1#53(127.0.1.1)
;; WHEN: Wed Nov 07 17:11:56 NZDT 2018
;; MSG SIZE rcvd: 268

 

 

 

Works for other internal hosts too.


Create new topic

Twitter »

Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.