topic Re: IPv6 Trial Update in IPv6 Trial

IPv6 Trial Update

dave — Thu, 24 Apr 2025 22:14:13 GMT

Hi everyone,

The change has just gone out to add IPv6 addresses to everyone that's volunteered to take part. You'll probably need to disconnect and reconnect or reboot your router to pick up the IPv6 prefix. For those on a Hub2 it should just pick it up, other routers may need it enabling.

This site is a good start to test it out: https://test-ipv6.com/

The Plusnet DNS servers support IPv6 AAAA records but only run over IPv4 at the moment as such we're also assigning a he.net IPv6 DNS server address which will should mean the test above gets 10/10.

Please note that any device on your network that supports IPv6 will be assigned an IPv6 address so recoommend checking that the firewall on your router is enabled to stop any external access to your devices. If you want to run an IPv6 server like a web server then on the Hub 2 you can create a pinhole in the firewall which will allow traffic through.

We don't have a specific test plan at the moment so feel free to give things a go and post any issues in this forum and we can take a look into it.

Re: IPv6 Trial Update

jaydee001 — Thu, 24 Apr 2025 23:00:58 GMT

Hi Dave,

Can confirm IPV6 is working and all I needed to do was enable IPV6 on the Asus router and disconnect & reconnect!

So far no issues what so ever but if anything comes up I'll let you know! 👍

Re: IPv6 Trial Update

zpeterk — Fri, 25 Apr 2025 06:40:05 GMT

All working for me on a Draytek 2925 will try tp link next!

Re: IPv6 Trial Update

zpeterk — Fri, 25 Apr 2025 06:50:13 GMT

Here is the page from the TP Link router that doesn't seem so keen to connect

Re: IPv6 Trial Update

MPC — Fri, 25 Apr 2025 07:17:34 GMT

Hi Dave,

Hub2 user - I left it until this morning but it had not automatically picked up the assigned IP6 range. Maybe if I'd have had more patience, it would have...

A quick reboot later and the Hub2 has picked it up the IP6 allocation of a /56 as expected.

I have a bit of work to do for further testing as when I had dual-WAN, I disabled the Hub2's DHCP service and I am using an internal DHCP server instead . ( I needed to set customised IP4 routes and the Hub2 firmware doesn't allow for that ).

All looking good so far!

Thanks,

Mark

Re: IPv6 Trial Update

MisterW — Fri, 25 Apr 2025 07:46:09 GMT

@zpeterk based on an assumption that the Tplink is almost certainly running some form of Openwrt and my experience with my native Openwrt router..

I'd suggest setting the 'Get Ipv6 addess' to DHCPv6 and the 'Prefix delegation' to Enable

Let us know if that makes a difference

Re: IPv6 Trial Update

MPC — Fri, 25 Apr 2025 07:46:18 GMT

Following up on other initial testing:

* Unable to ping6 the Hub2 ip6 address from the lan. Neighbour solicitation is being sent, but no replies are being received.

* Unable to ping6 the Hub2 ip6 address from the internet.

I'm speculating that the Hub2 needs its DHCP service enabled for IP6 addresses to be assigned to the interfaces.

Cheers,

Mark

08:44:55.868709 IP6 2a02:16c8:xxxx:xx00::yy > ff02::1:ff00:1: ICMP6, neighbor solicitation, who has 2a02:16c8:xxxx:xx00::1, length 32

08:44:56.892549 IP6 2a02:16c8:xxxx:xx00::yy > ff02::1:ff00:1: ICMP6, neighbor solicitation, who has 2a02:16c8:xxxx:xx00::1, length 32

Re: IPv6 Trial Update

jrhopkins00 — Fri, 25 Apr 2025 08:27:57 GMT

Thanks @dave! All enabled on Unifi Gateway and working fine so far. For Unifi I had to enable it on the WAN settings, and then again on each LAN, clients are getting IPv6 addresses. IPv6 test shows 10/10, I am using cloud flare DNS.

Re: IPv6 Trial Update

MPC — Fri, 25 Apr 2025 09:06:08 GMT

All working now. PEBKAC.

I'd got the IP6 address allocation turned off on the hub2. Allocations are working fine with that turned back on (without turning on the IP4 DHCP service on the hub2).

Re: IPv6 Trial Update

zpeterk — Fri, 25 Apr 2025 09:15:34 GMT

Still no connection

Re: IPv6 Trial Update

MJN — Fri, 25 Apr 2025 10:00:22 GMT

Thanks Dave (and colleagues) for this - really great to see IPv6 back on the menu!

Up and running here with a Draytek Vigor 2862 and so far so good. IPv6-enabled clients seem to be doing well, including 10/10 results at test-ipv6.com, but I need to do some more work on the DNS side of things to get the servers using it in both directions.

Re: IPv6 Trial Update

IMM — Fri, 25 Apr 2025 10:00:29 GMT

@zpeterk These are the settings I'm using.

I don't understand why the IPv6 address seems to be a link local one but when I set up the Lan as below, I seem to have IPv6 connectivity.

I hope that helps.

Ian

Re: IPv6 Trial Update

MisterW — Fri, 25 Apr 2025 10:29:13 GMT

@IMM

don't understand why the IPv6 address seems to be a link local one but when I set up the Lan as below, I seem to have IPv6 connectivity.

AIUI the WAN connection doesnt get an IP as such, rather it just gets a static prefix which it delegates. Your LAN looks fine and is allocating IPv6 addresses fine.

For info this is what my IPv6 WAN shows

Note, I have manually assigned the OpenDNS IPv6 DNS servers

Re: IPv6 Trial Update

jrhopkins00 — Fri, 25 Apr 2025 10:35:32 GMT

If you are using 3rd party IPv6 DNS provider, you can temporarily disable IPv4 on a device and test some websites. The ipv6 test website should report all good and ipv4 disabled, and get 10/10. A lot of websites and services will not work this way though, so only recommended as a test.

Re: IPv6 Trial Update

glenpcarter — Fri, 25 Apr 2025 10:48:36 GMT

Thanks Dave

Can confirm all working with Unifi Gateway Max.

Simple to setup, just enabled DHCPv6 on the WAN with the Prefix Delegation set at 56 .

On the LAN side just Enabled Prefix Delegation for Interface Type, set the correct WAN interface for Prefix Delegation an then set Client Address Assignment to SLAAC. All started working after a reboot of the Gateway.

Re: IPv6 Trial Update

IMM — Fri, 25 Apr 2025 11:01:40 GMT

@dave wrote:- Please note that any device on your network that supports IPv6 will be assigned an IPv6 address so recommend checking that the firewall on your router is enabled to stop any external access to your devices.

Can anyone recommend a IPv6 port scanner similar to grc.com's "shields up" that is safe to use. I'd like to check that I'm not leaving myself open to attacks from the Wan side.

Re: IPv6 Trial Update

MJN — Fri, 25 Apr 2025 11:40:05 GMT

@IMM wrote:

I don't understand why the IPv6 address seems to be a link local one but when I set up the Lan as below, I seem to have IPv6 connectivity.

Yeah, I'd say you have IPv6 connectivity too. What does the output of ipconfig (or ifconfig) on a client say? Alternatively, how is a visit to test-ipv6.com looking?

As @MisterW said don't be too misled by the apparent lack of a global IPv6 address on the WAN. It isn't required for general IPv6 connectivity as the link-local address on the WAN port is sufficient for this. It'd only be needed for things link remote configuration over the Internet, or perhaps certain types of IPv4-IPv6 transition mechanism.

Incidentally, my Dratek router *does* happen to have a global IPv6 address on its WAN port (as well as a link local). It obtains a /56 prefix from Plusnet via DHCPv6, assigns the first /64 to the WAN (and creates a /128 address from it to the WAN port using SLAAC) and then assigns the second /64 to the LAN from which clients can either generate their own /128 addresses using SLAAC or request one via DHCPv6 from the router.

Re: IPv6 Trial Update

MJN — Fri, 25 Apr 2025 12:04:24 GMT

@IMM wrote:

Can anyone recommend a IPv6 port scanner similar to grc.com's "shields up" that is safe to use. I'd like to check that I'm not leaving myself open to attacks from the Wan side.

There's a good one at https://ipv6.chappell-family.com/ipv6tcptest/ (further info about what it does here).

Note that it only tests the specific address that it detects you are coming from i.e. the specific machine the browser is on. Whilst with IPv4, and the use of NAT and port forwarding against a single IPv4 WAN address, this has the effect of testing the exposure of the entire network it is a different story with IPv6 and so really needs to be run from individual hosts to determine how exposed they each are.

All that said, the router ought to have a default DENY ALL firewall rule blocking unsolicited incoming IPv6 connections and thus require you to poke specific holes through if/when you want specific services on specific devices exposed. Worth checking this. On my Draytek, so will of course be different for other vendors but it represent the sort of language that might be used, this is found in Firewall > General Setup as Block routing connections initiated from WAN which is disabled by default for IPv4 (given that NAT effectively does the same thing) but enabled by default for IPv6.

Re: IPv6 Trial Update

dave — Fri, 25 Apr 2025 14:27:10 GMT

I'm using a Hub2 with just the out of the box settings and the router gets a 2a02:168c:xxxx::1 as the WAN interface. Unfortunately that IP isn't pingable (yet, we're looking) from the WAN so I can't set up an IPv6 Thinkbroadband graph on it, it is pingable from the LAN though. It doesn't though need that to work because each device on your network will get at least one IPv6 address (I think my Mac has 8!). The prefix is allocated by DHCPv6 from the network.

I've got a pinhole configured to the Hub2 to run a web server on my Linux box, not worked out yet if we can get ICMP through the firewall to allow ping to my server.

Hub 2 also supports stateless (SLAAC) and stateful (DHCPv6) allocation of the IPv6 addresses to the clients.

Interesting to see the variety of devices out there, I think there's a few still to reboot their routers and pick up the IPv6 address.

Re: IPv6 Trial Update

brueton — Fri, 25 Apr 2025 15:00:05 GMT

I have IPv6 working with:

Billion 8800NL

Billion 8899NL R2

tp-link AC2100

They were all reset to factory defaults and then the username & password were entered.

All of them needed IPv6 enabling on the WAN

The two Billion routers needed Issue Router Advertisements enabling on the LAN