cancel
Showing results for 
Search instead for 
Did you mean: 

IPv6 Account Problem

DougMa
Grafter
Posts: 115
Thanks: 3
Registered: ‎09-09-2011

Re: IPv6 Account Problem

I think I found the cause: Surf (https://portal.plus.net/surf/).  I had previously logged-in to the member portal using my ipv6 test account and enabled Surf (to block peer-to-peer).  The recent outage was my first reconnection since making that change.  I just disabled Surf and reconnected, immediately receiving an IPv6 allocation.  The broadband firewall is still enabled set to "low".
So it would appear that Plusnet's Surf feature is incompatible with IPv6.  Could someone else check and confirm?
Thanks!
Doug.
brueton
Grafter
Posts: 313
Thanks: 7
Registered: ‎03-07-2009

Re: IPv6 Account Problem

Just enabled Surf, disconnected and reconnected. IPv6 is still working.
Will leave it enabled overnight and try testing again in the morning.
Pete
AndyH
Grafter
Posts: 6,824
Thanks: 1
Registered: ‎27-10-2012

Re: IPv6 Account Problem

I tried enabling/disabling Surf and it made no difference to me.
Still unable to access a lot of sites with IPv6 Sad
DougMa
Grafter
Posts: 115
Thanks: 3
Registered: ‎09-09-2011

Re: IPv6 Account Problem

Thanks for testing... I guess the root cause is a little more specific.  Interestingly I've noticed that my prefix is different to before: I had to update my AAAA records and the firewall rules on my hosted server.  Thankfully the Fritz firewall is pretty clever and my rules reference hosts rather than absolute addresses, so no changes required at this end.
Doug.
AndyH
Grafter
Posts: 6,824
Thanks: 1
Registered: ‎27-10-2012

Re: IPv6 Account Problem

Is it possible for one of the Plusnet network guys to look at my problem?
I am spending far too much time changing settings on the routers/devices on my network. If there is a potential issue Plusnet's end, then it would save me a lot of time!
paulmh5
Plusnet Alumni (retired)
Plusnet Alumni (retired)
Posts: 170
Registered: ‎11-04-2011

Re: IPv6 Account Problem

Quote from: AndyH
Is it possible for one of the Plusnet network guys to look at my problem?

I can try...
I can ping your IP from our core upto a size of 1492

phughes@ptw-cr01-re0> ping 2a02:16c8:2000:xxxx:: size 1444
PING6(1492=40+8+1444 bytes) 2a02:16c8::a --> 2a02:16c8:2000:xxxx::
1452 bytes from 2a02:16c8:2000:xxxx:a6b1:e9ff:fe17:da16, icmp_seq=0 hlim=63 time=6.397 ms
phughes@ptw-cr01-re0> ping 2a02:16c8:2000:xxxx:: size 1445
PING6(1493=40+8+1445 bytes) 2a02:16c8::a --> 2a02:16c8:2000:xxxx::
^C
--- 2a02:16c8:2000:xxxx:: ping6 statistics ---
5 packets transmitted, 0 packets received, 100% packet loss


If you are running a PPPoE setup (like I am) you may need to lower your LAN side IPv6 MTU, mines set to 1400 just while I was testing but other have it a bit higher.

:ip rt6advd ifdetach intf LocalNetwork
:ip rt6advd ifconfig intf=LocalNetwork linkmtu=1492
:ip rt6advd ifattach intf LocalNetwork
:saveall

Other than that I can't see anything wrong with a quick glance and you've done most of the basic troubleshooting already (which helps  Grin )
Plusnet Staff - Lead Network Design/Delivery Engineer
AndyH
Grafter
Posts: 6,824
Thanks: 1
Registered: ‎27-10-2012

Re: IPv6 Account Problem

Hi Paul
Thanks for the response.
I'm running PPPoE - so I've changed the LAN MTU to 1400:
Quote
{admin}=>:ip iflist                              
Interface                            Group  MTU   RX         TX         Admin  Oper
1   loop. . . . . . . . . . . . . .  local  4096  32 MB      40 MB      UP     [UP]  
2   Internet. . . . . . . . . . . .  wan    1492  7675 MB    620 MB     UP     UP    
3   LocalNetwork. . . . . . . . . .  lan    1400  646 MB     7683 MB    UP     [UP]  
4   Multicast . . . . . . . . . . .  wan    1500  32 KB      35 KB      UP     UP  

But still no go Sad
This is what is happening:

Facebook is another one:

The strange thing is I can ping the sites like Facebook with ICMP and also on TCP Port 80:
Quote
~ Andrew$ ping6 2a03:2880:2110:df07:face:b00c::1
PING6(56=40+8+8 bytes) 2a02:16c8:2000:1100:91c7:b933:405f:5e37 --> 2a03:2880:2110:df07:face:b00c::1
16 bytes from 2a03:2880:2110:df07:face:b00c::1, icmp_seq=0 hlim=50 time=91.054 ms
16 bytes from 2a03:2880:2110:df07:face:b00c::1, icmp_seq=1 hlim=50 time=90.794 ms
16 bytes from 2a03:2880:2110:df07:face:b00c::1, icmp_seq=2 hlim=50 time=90.541 ms

Quote
sh-3.2# nmap -6 -Pn --traceroute -p 80 facebook.com
Starting Nmap 6.40-2 ( http://nmap.org ) at 2014-04-01 12:32 BST
Nmap scan report for facebook.com (2a03:2880:2110:df07:face:b00c::1)
Host is up (0.089s latency).
rDNS record for 2a03:2880:2110:df07:face:b00c::1: edge-star6-shv-13-frc1.facebook.com
PORT   STATE SERVICE
80/tcp open  http
TRACEROUTE (using port 80/tcp)
HOP RTT       ADDRESS
1   2.21 ms   2a02:16c8:2000:1100:a6b1:e9ff:fe17:da16
2   7.32 ms   2a02:16c8:0:1::19
3   6.91 ms   2a02:16c8:1:2::13
4   6.58 ms   2a02:16c8::b
5   6.23 ms   lonap.he.net (2001:7f8:17::1b1b:1)
6   6.25 ms   10ge3-1.core1.lon2.he.net (2001:470:0:2cd::1)
7   71.90 ms  100ge1-1.core1.nyc4.he.net (2001:470:0:2cf::2)
8   77.06 ms  100ge5-1.core1.ash1.he.net (2001:470:0:299::1)
9   137.75 ms facebook-as32934.10gigabitethernet6.switch3.ash1.he.net (2001:470:0:1bf::2)
10  ... 11
12  120.55 ms ae88.dr02.frc1.tfbnw.net (2620:0:1cff:dead:beef::65b)
13  90.57 ms  po1020.csw13b.frc1.tfbnw.net (2620:0:1cff:dead:beef::12b5)
14  ... 17
18  89.10 ms  edge-star6-shv-13-frc1.facebook.com (2a03:2880:2110:df07:face:b00c::1)

It's almost like my browser is sending the requests, but nothing is coming back - but even that doesn't make a whole lot of sense because I am able ping the sites with TCP on Port 80. This is all very confusing  Huh
Edit: I should add that I can run the http://test-ipv6.com/ absolutely fine - I get 10/10 there. Even http://ipv6.google.com works fine. But some sites just refuse to load - I tried http://ipv6labs.cyberis.co.uk/logo.png as just a basic image with no scripts/html and even this will not load.
I have also tried various gateways - PCL/PTN/PTW to rule out that being a problem. I've even borrowed a neighbour's laptop to rule out all my equipment being at fault! Smiley
I was thinking whether it might be worth trying a PPP connection directly to the ONT but I am not sure if that will work with IPv6.
AndyH
Grafter
Posts: 6,824
Thanks: 1
Registered: ‎27-10-2012

Re: IPv6 Account Problem

I tried a direct PPPoE connection to the ONT:
Quote
ppp0: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 1492
inet6 fe80::12dd:xxx:xxx:15da%ppp0 prefixlen 64 scopeid 0xa
inet 81.174.1xx.1xx --> 195.166.128.195 netmask 0xff000000
nd6 options=1<PERFORMNUD>

But IPv6 doesn't seem to work at all on my Mac. Under the PPPoE settings, I've got Configure IPv4 set to Using PPP and Configure IPv6 set to Configure Automatically (other choices are Manually and Link-Local only)
AndyH
Grafter
Posts: 6,824
Thanks: 1
Registered: ‎27-10-2012

Re: IPv6 Account Problem

Was unable to figure out how to set up a PPPoE IPv6 connection directly to the ONT.
I tried wget to see if that worked (with a 30 sec timeout):
Quote
sh-3.2# wget -6 -T 30 www.thinkbroadband.com
--2014-04-01 17:08:39--  http://www.thinkbroadband.com/
Resolving www.thinkbroadband.com... 2a02:68:1::4
Connecting to www.thinkbroadband.com|2a02:68:1::4|:80... connected.
HTTP request sent, awaiting response... Read error (Operation timed out) in headers.
Retrying.

That pretty much sums up the problem. The HTTP request is being sent, but nothing is coming back.
paulmh5
Plusnet Alumni (retired)
Plusnet Alumni (retired)
Posts: 170
Registered: ‎11-04-2011

Re: IPv6 Account Problem

If you sick wireshark on while you are doing this does it provide any useful information, are you getting anything at all back from TBB (acks/resets etc...)?  Is it the same for all IPv6 sites?  I know you mentioned the problem was the same I'm just curious to see if they all behave the same to a HTTP GET.
Plusnet Staff - Lead Network Design/Delivery Engineer
chrcoluk
Grafter
Posts: 1,990
Thanks: 5
Registered: ‎11-12-2013

Re: IPv6 Account Problem

something has happened.
I still have ipv6 connectivity but its very slow, 3mbit/sec on single threaded throughput.
also my ipv6 tbb graphs look very different to my ipv4 again.
AndyH
Grafter
Posts: 6,824
Thanks: 1
Registered: ‎27-10-2012

Re: IPv6 Account Problem

Quote from: paulmh5
If you sick wireshark on while you are doing this does it provide any useful information, are you getting anything at all back from TBB (acks/resets etc...)?  Is it the same for all IPv6 sites?  I know you mentioned the problem was the same I'm just curious to see if they all behave the same to a HTTP GET.

Most IPv6 sites won't work - the few that will are http://ipv6.google.com and http://test-ipv6.com
I'm getting SYN, SYN-ACK and ACK messages back when using Wireshark. I've attached 3 Wireshark screenshots from using wget: TBB/Cyberis Logo (both of which don't work) and Google (which works - the longer image). The initial handshake looks fine (I think).
AndyH
Grafter
Posts: 6,824
Thanks: 1
Registered: ‎27-10-2012

Re: IPv6 Account Problem

**deleted duplicate **
paulmh5
Plusnet Alumni (retired)
Plusnet Alumni (retired)
Posts: 170
Registered: ‎11-04-2011

Re: IPv6 Account Problem

I've attached my wireshark.  I can see my connection is starting with a lower MSS than yours and I get a lot more SYN and ACK packets before the actual GET request goes through.
I'm not sure if this helps/explains why some sites work and some don't mind you.  I'd be interested to see if anyone else sees similar wiresharks to either you or me.
I'll have an ask about the team tomorrow see if anyone has any immediate ideas but it does seem like an odd one.
As far as I can tell the lesson here is....If its working leave well alone  Grin
Plusnet Staff - Lead Network Design/Delivery Engineer
AndyH
Grafter
Posts: 6,824
Thanks: 1
Registered: ‎27-10-2012

Re: IPv6 Account Problem

If I try from a browser, I also get a lot more SYN/ACK packets - but I also get duplicates and retransmitted packets.
http://ipv6labs.cyberis.co.uk/logo.png should be a good one to try because it's a single HTTP request. There's also http://ipv4labs.cyberis.co.uk/logo.png to compare IPv4 vs IPv6.
This problem has totally baffled me  Shocked
We know my trial account should be fine - another trialist has tested it and had no problems. I tried his trial account and the problem still occurred.
I would put money on this being down to whatever BT TSO did Thursday morning (I am going to try and prove this tomorrow). The fact that I tried a router firmware upgrade has to be coincidental as I've tried a different router that has never been used before.
This is indeed a lesson of leave it alone or it will break Smiley