PSA - IPv6 issues on non-fritzbox? Try changing your Prefix Size requested on WAN to /56

Forums › 2degrees (including Slingshot, Orcon, Flip, Stuff Fibre, MyRepublic, 2talk and Vocus) › PSA - IPv6 issues on non-fritzbox? Try changing your Prefix Size requested on WAN to /56

ripdog

548 posts

Ultimate Geek
Inactive user

#242523 2-Nov-2018 04:27

In the past, customers not paying for a static IP were given a /48 IPv6 prefix, and those who were paying would get a /56. 2degrees is currently rolling out a config change which harmonises these configurations, giving everyone a /56.

I just got hit with this, my IPv6 breaking overnight. The fix was simply to change my requested prefix from /48 to /56. All hunky dory again!

Authoritative source: https://www.geekzone.co.nz/forums.asp?forumid=85&topicid=240157

For our dynamic subscribers we allocate a /48 or /56 address space depending on the version of code they are running (due to our currently upgrades in progress), for static customers we allocate a /56 address space. Upgrades are planned to be completed in the first week of November 2018 which will see us standardise on /56 for all subscribers.

1 | 2

3226 posts

Uber Geek

Trusted

#2118198 2-Nov-2018 06:07

Excellent exactly what the issue was

Thanks for the email 2degrees to let us know our config needed to be updated :S

for edgerouter lite (or can be done via the config gui which basically does this below)

delete interfaces ethernet eth0 vif 10 pppoe 0 dhcpv6-pd pd 0 prefix-length /48

set interfaces ethernet eth0 vif 10 pppoe 0 dhcpv6-pd pd 0 prefix-length /56

then a dhcp /renew on your device and you should be sorted again.

CPU: AMD 5900x | RAM: GSKILL Trident Z Neo RGB F4-3600C16D-32GTZNC-32-GB | MB: Asus X570-E | GFX: EVGA FTW3 Ultra RTX 3080Ti| Monitor: LG 27GL850-B 2560x1440

Quic: https://account.quic.nz/refer/473833 R473833EQKIBX

michaelmurfy

meow
13240 posts

Uber Geek

Moderator

ID Verified

Trusted

Lifetime subscriber

#2118210 2-Nov-2018 08:57

That would explain why my IPv6 dropped out a few times over the last few days - I'm static already on a /56.

Thanks for sharing! I do see it as a good thing that 2degrees are making both Static and Dynamic prefixes the same to avoid confusion.

Michael Murphy | https://murfy.nz
Referral Links: Quic Broadband (use R122101E7CV7Q for free setup)

Are you happy with what you get from Geekzone? Please consider supporting us by subscribing.
Opinions are my own and not the views of my employer.

NickMack

962 posts

Ultimate Geek

Trusted

Lifetime subscriber

#2118269 2-Nov-2018 09:37

michaelmurfy:

That would explain why my IPv6 dropped out a few times over the last few days - I'm static already on a /56.

Thanks for sharing! I do see it as a good thing that 2degrees are making both Static and Dynamic prefixes the same to avoid confusion.

Hiya,

We have 2 core devices left to be upgraded (One in Nelson, the other in Blenheim - it's been a journey) - so apart from those locations (depending on which device you're connected to as we have PE diversity), all Dynamic and static IP's should be /56.

This is one of the joys of moving away from 2degrees only supported/supplied devices (Fritzbox) and customers being able to supply their own. For most of the population this is a non-event, however I take the point re-notification. This would/could create confusion for most customers..... so there is a trade off.

Nick.

https://nick.mackechnie.co.nz | NZ ISP latency monitoring - https://smokeping.thenet.gen.nz

michaelmurfy

meow
13240 posts

Uber Geek

Moderator

ID Verified

Trusted

Lifetime subscriber

#2118272 2-Nov-2018 09:42

NickMack:

This is one of the joys of moving away from 2degrees only supported/supplied devices (Fritzbox) and customers being able to supply their own. For most of the population this is a non-event, however I take the point re-notification. This would/could create confusion for most customers..... so there is a trade off.

Fully agree. Also, many people won't understand what IPv6 is. I think posting on forums like Geekzone is a good way of communicating more technical changes out.

On another note! See you tomorrow!

NickMack

962 posts

Ultimate Geek

Trusted

Lifetime subscriber

#2118318 2-Nov-2018 09:55

michaelmurfy:

NickMack:

This is one of the joys of moving away from 2degrees only supported/supplied devices (Fritzbox) and customers being able to supply their own. For most of the population this is a non-event, however I take the point re-notification. This would/could create confusion for most customers..... so there is a trade off.

Fully agree. Also, many people won't understand what IPv6 is. I think posting on forums like Geekzone is a good way of communicating more technical changes out.

On another note! See you tomorrow!

Hiya,

"Also, many people won't understand what IPv6 is. I think posting on forums like Geekzone is a good way of communicating more technical changes out." - Agree, hence why that was the option I chose, the people who are likely to hit an issue from a residential perspective who aren't using a Fritzbox know about GZ and are most likely on here :-)

And yes, look forward to it!

Nick

https://nick.mackechnie.co.nz | NZ ISP latency monitoring - https://smokeping.thenet.gen.nz

BlackHand

131 posts

Master Geek

#2121244 7-Nov-2018 08:23

Since these changes (could be coincidence) my IPv6 keeps dropping off after awhile, my prefix length is set correctly to /56, anything else I need to change (I have a stock standard Edgerouter setup)

NickMack

962 posts

Ultimate Geek

Trusted

Lifetime subscriber

#2121704 7-Nov-2018 16:55

BlackHand:

Since these changes (could be coincidence) my IPv6 keeps dropping off after awhile, my prefix length is set correctly to /56, anything else I need to change (I have a stock standard Edgerouter setup)

Hiya,

Can't comment to your Edge router/configuration - Anyone else having issues as we haven't received any other related escalations?

Nick

https://nick.mackechnie.co.nz | NZ ISP latency monitoring - https://smokeping.thenet.gen.nz

Equinox IT

Cloud spending continues to surge globally, but most organisations haven’t made the changes necessary to maximise the value and cost-efficiency benefits of their cloud investments. Download the whitepaper From Overspend to Advantage now.

BlackHand

131 posts

Master Geek

#2121826 7-Nov-2018 22:06

Looks like there is a seperate thread with lots Edgerouter users experiencing the same issue ... https://www.geekzone.co.nz/forums.asp?forumid=66&topicid=242645 will try to log it now with the customer care team (was just avoiding the pain of trying to explain this to them)

NickMack

962 posts

Ultimate Geek

Trusted

Lifetime subscriber

#2121827 7-Nov-2018 22:10

@Michaelmurfy - thoughts? We aren't seeing this on other devices..

https://nick.mackechnie.co.nz | NZ ISP latency monitoring - https://smokeping.thenet.gen.nz

dfnt

1511 posts

Uber Geek

Lifetime subscriber

#2121831 7-Nov-2018 22:19

Neither @michaelmurfy nor myself have the issue on our ER's, I assume we run off the same BNG in Wellington

NickMack

962 posts

Ultimate Geek

Trusted

Lifetime subscriber

#2121837 7-Nov-2018 22:22

dfnt:
Neither @michaelmurfy nor myself have the issue on our ER's, I assume we run off the same BNG in Wellington

Cool - Can you share your firmware Version and you ipv6 configuration elements for younEdge router?

https://nick.mackechnie.co.nz | NZ ISP latency monitoring - https://smokeping.thenet.gen.nz

dfnt

1511 posts

Uber Geek

Lifetime subscriber

#2121883 7-Nov-2018 23:31

I'm running 2.0b1, but the config is the same and pretty much the same as the EdgeRouter tutorial from @michaelmurfy


firewall {

ipv6-name WAN6_IN {
default-action drop
rule 10 {
action accept
description "allow established"
protocol all
state {
established enable
related enable
}
}
rule 20 {
action drop
description "drop invalid packets"
protocol all
state {
invalid enable
}
}
rule 30 {
action accept
description "allow ICMPv6"
protocol icmpv6
}
}
ipv6-name WAN6_LOCAL {
default-action drop
rule 10 {
action accept
description "allow established"
protocol all
state {
established enable
related enable
}
}
rule 20 {
action drop
description "drop invalid packets"
protocol all
state {
invalid enable
}
}
rule 30 {
action accept
description "allow ICMPv6"
protocol icmpv6
}
rule 40 {
action accept
description "allow DHCPv6 client/server"
destination {
port 546
}
protocol udp
source {
port 547
}
}
}
ipv6-receive-redirects disable
ipv6-src-route disable
}
 

interfaces {
ethernet eth0 {
duplex auto
mtu 1508
speed auto
vif 10 {
mtu 1508
pppoe 0 {
default-route auto
dhcpv6-pd {
pd 0 {
interface eth1 {
host-address ::1
no-dns
prefix-id :0
service slaac
}
prefix-length 56
}
prefix-only
rapid-commit enable
}
firewall {
in {
ipv6-name WAN6_IN
name WAN_IN
}
local {
ipv6-name WAN6_LOCAL
name WAN_LOCAL
}
}
ipv6 {
dup-addr-detect-transmits 1
enable {
}
}

NickMack

962 posts

Ultimate Geek

Trusted

Lifetime subscriber

#2121886 7-Nov-2018 23:36

Thanks @Defiant .. hopefully that helps ;-)

https://nick.mackechnie.co.nz | NZ ISP latency monitoring - https://smokeping.thenet.gen.nz

evilonenz

/dev/urandom
287 posts

Ultimate Geek

ID Verified

Trusted

Lifetime subscriber

#2121920 8-Nov-2018 07:52

I've not seen any issues on my end either, running ERLite-3 on 1.10.7.

Edit: config snippet, seems the same as everyone else.

firewall {
ipv6-name WAN6_IN {
default-action drop
description "WAN6 to internal"
rule 10 {
action accept
description "Allow established/related"
state {
established enable
related enable
}
}
rule 20 {
action drop
description "Drop invalid packets"
state {
invalid enable
}
}
rule 30 {
action accept
description "Allow ICMPv6"
protocol icmpv6
}
}
ipv6-name WAN6_LOCAL {
default-action drop
description "WAN6 to router"
rule 10 {
action accept
description "Allow established/related"
state {
established enable
related enable
}
}
rule 20 {
action drop
description "Drop invalid packets"
state {
invalid enable
}
}
rule 30 {
action accept
description "Allow ICMPv6"
protocol icmpv6
}
rule 40 {
action accept
description "Allow DHCPv6 client/server"
destination {
port 546
}
protocol udp
source {
port 547
}
}
}
ipv6-receive-redirects disable
ipv6-src-route disable
interfaces {
ethernet eth0 {
duplex auto
mtu 1508
speed auto
vif 10 {
description "Internet (PPPoE)"
mtu 1508
pppoe 0 {
default-route auto
dhcpv6-pd {
pd 0 {
interface eth1 {
host-address ::1
prefix-id :0
service slaac
}
prefix-length 56
}
prefix-only
rapid-commit enable
}
firewall {
in {
ipv6-name WAN6_IN
name WAN_IN
}
local {
ipv6-name WAN6_LOCAL
name WAN_LOCAL
}
}
ipv6 {
dup-addr-detect-transmits 1
enable {
}

Smokeping

Referral Links:

Quic - Use code R536299EPGOCN at checkout for free setup
Contact Energy - Use code FRTQDXB for $100 credit

BlackHand

131 posts

Master Geek

#2121927 8-Nov-2018 08:20

I'm running a ER-4 on 1.10.7

firewall {

ipv6-name WAN6_IN {
default-action drop
rule 10 {
action accept
description "allow established"
protocol all
state {
established enable
related enable
}
}
rule 20 {
action drop
description "drop invalid packets"
protocol all
state {
invalid enable
}
}
rule 30 {
action accept
description "allow ICMPv6"
protocol icmpv6
}
}
ipv6-name WAN6_LOCAL {
default-action drop
rule 10 {
action accept
description "allow established"
protocol all
state {
established enable
related enable
}
}
rule 20 {
action drop
description "drop invalid packets"
protocol all
state {
invalid enable
}
}
rule 30 {
action accept
description "allow ICMPv6"
protocol icmpv6
}
rule 40 {
action accept
description "allow DHCPv6"
destination {
port 546
}
protocol udp
source {
port 547
}
}
}
ipv6-receive-redirects disable
ipv6-src-route disable
}

interfaces {
ethernet eth0 {
duplex auto
mtu 1508
speed auto
vif 10 {
mtu 1508
pppoe 0 {
default-route auto
dhcpv6-pd {
pd 0 {
interface eth1 {
host-address ::1
no-dns
prefix-id :0
service slaac
}
prefix-length /56
}
prefix-only
rapid-commit enable
}
firewall {
in {
ipv6-name WAN6_IN
name WAN_IN
}
local {
ipv6-name WAN6_LOCAL
name WAN_LOCAL
}
}
ipv6 {
dup-addr-detect-transmits 1
enable {
}
}

1 | 2