IPv6 discussions

xiaofan · Nov 10, 2024

I am giving up on the experiments trying to sub-delegate /56 IPv6 prefix to the sub-routers for now.

It may have something to do with Singtel IPv6 implemenation, or it has something to do with Singtel ZTE F8648P ONR (bridged or unbridged).

In this case, I will just treat the /56 IPv6 prefix delegation from SIngtel side as /64...

Not so sure if any others can carry out such experiments though -- very few Singtel users have got Singtel native IPv6 to work with ZTE F8648P ONR.

geylynd · Nov 10, 2024

xiaofan said:
I am giving up on the experiments trying to sub-delegate /56 IPv6 prefix to the sub-routers for now.

It may have something to do with Singtel IPv6 implemenation, or it has something to do with Singtel ZTE F8648P ONR (bridged or unbridged).

In this case, I will just treat the /56 IPv6 prefix delegation from SIngtel side as /64...

Not so sure if any others can carry out such experiments though -- very few Singtel users have got Singtel native IPv6 to work with ZTE F8648P ONR.

Hi Xiaofan

No issue for my Singtel 1Gbps line (actually 2Gbps speed) with IPv6 access. However, I am moving out to MR 10G plan later this month so may lost IPv6 access soon.

xiaofan · Nov 10, 2024

geylynd said:
Hi Xiaofan

No issue for my Singtel 1Gbps line (actually 2Gbps speed) with IPv6 access. However, I am moving out to MR 10G plan later this month so may lost IPv6 access soon.

Thanks for the info.

No issues with my older Singtel 1Gbps plan with Singtel ONT either. In fact I used a VLAN switch to split into two home networks and I could get /56 IPv6 prefixes on both home networks, and IPv6 prefix delegation to sub routers were working fine as well (tested OpenWRT, Asus RT-AX86U, pfSense and OPNsense).

Unfortunately, Singtel native IPv6 with the Singtel ZTE F8648P XGS-PON ONR (for SingTel 5Gbps and 10Gbps plan, bridged or unbridged) is quite different.

bert64 · Nov 12, 2024

xiaofan said:
Thanks for the info.

No issues with my older Singtel 1Gbps plan with Singtel ONT either. In fact I used a VLAN switch to split into two home networks and I could get /56 IPv6 prefixes on both home networks, and IPv6 prefix delegation to sub routers were working fine as well (tested OpenWRT, Asus RT-AX86U, pfSense and OPNsense).

Unfortunately, Singtel native IPv6 with the Singtel ZTE F8648P XGS-PON ONR (for SingTel 5Gbps and 10Gbps plan, bridged or unbridged) is quite different.

Bridged should be absolutely identical... If the prefix is delegated correctly (ie x00:: through xff:: are routing to you properly) then the problem will be a configuration error on your end.

xiaofan · Nov 12, 2024

bert64 said:
Bridged should be absolutely identical... If the prefix is delegated correctly (ie x00:: through xff:: are routing to you properly) then the problem will be a configuration error on your end.

The difference may be on SingTel side, difference between the GPON based network and XGS-PON based network.

Just an example, bridging behaviour changed recently for ZTE XGS-PON ONR. Previously the unbridged ports will still have Internet access. Now unbridged LAN ports no longer have Internet access even though the ONR itself still have internet access.

Anyway, I would be happy to be proved wrong if other users are able to sort out the issue.

BTW, when I was using ONT with SingTel 1Gbps plan, initially I could only get OpenWRT and Asus working with SingTel native IPv6 and not pfSensen/OPNsense. Later suddenly pfSense/OPNsense also worked without changes on my side. So SingTel side IPv6 implementation did play a part.

xiaofan · Nov 12, 2024

Just a summary of the issue I am facing now.

My setup is a bit strange --> usually people will use the following connection schemes.

a) ONR bridge port --> main OpenWRT router --> main AP (/64 IPv6 prefix deelgation will be fine in this case, no need /56).

b) ONR bridge port --> main OpenWRT router --> LAN 1+AP1 and LAN 2+ AP2 (using firewall rules to seperate the home networks); LAN 1 and LAN 2 will have different IPv4 address segment and different IPv6 prefixes.

c) ONR bridge port --> main OpenWRT router --> managed switch --> AP1 with VLAN ID xx and AP 2 with VLAN ID yy (using VLAN and firewall rules to seperate the home networks). VLAN ID xx and yy will have different IPv4 address segment and different IPv6 prefixes.

But I believe people who are using scheme b and c will have the same issue. If they do not have issues, then the issue is on my side (eg: wrong IPv6 configuration on the main OpenWRT virtual router).

1. connection scheme
Singtel ZTE F8648P ONR LAN5 (10G LAN port) bridged --> main OpenWRT virtual router (10G capable with dual SFP+ ports) --> Hasivo 8-port 10G SFP+ switch --> Hasivo quad 2.5G port switch with dual 10G SFP+ uplinks --> Asus RT-AX86U in AP mode, Asus TUF-BE6500 in router mode (Double NAT), OpenWRT/pfSense virtual router (Double NAT). Sometimes I will also connect other wireless routers here for testing purpose.

2. Wireless router in AP mode behind the main OpenWRT virtual router --> no issues with IPv6 and internet access

Asus RT-AX86U in AP mode --> LAN and wireless clients will have two IPv6 address, one by DHCPv6 and the other from SLAAC (with prefix 2400:d802:xxx:8900), from the main OpenWRT virtual router. No problems with Internet access using IPv6.

3. Sub-routers behind the main OpenWRT virtual router (Double NAT) --> got issues with IPv6

OpenWRT/pfSense virtual router (Double NAT) with prefix delegation (eg: 2400:d802:xxx:8901, 2400:d802:xxx:8902, etc) --> the router itself will have no internet access using IPv6 (let along LAN and wireless clients), no issues with IPv4.

Asus router in router mode and with prefix delegation (eg: 2400:d802:xxx:8901, 2400:d802:xxx:8902, etc) --> the router itself will have no internet access using IPv6 (let along LAN and wireless clients), no issues with IPv4.

secureshell · Nov 12, 2024

I was able to get VQ to setup my IPV6 by reaching out to them. I heard that they will configure on a per request basis for those who want IPv6

xiaofan · Nov 12, 2024

Interestingly my previous work-around of using 6rd in the Asus sub-router (TUF-BE6500 this time) does not seem to work well this time. The work-around was used when I was not able to bridge the ZTE F8648P XGS-PON ONR.

ping has not issues but Web based IPv6 test will fail. Very strange.

Bash:

PS C:\work> nslookup ipv6.google.com
Server:  TUF_6500-5020
Address:  192.168.50.1

Non-authoritative answer:
Name:    ipv6.l.google.com
Addresses:  2404:6800:4003:c1c::8a
          2404:6800:4003:c1c::8b
          2404:6800:4003:c1c::66
          2404:6800:4003:c1c::71
Aliases:  ipv6.google.com

PS C:\work> ping ipv6.google.com

Pinging ipv6.l.google.com [2404:6800:4003:c1c::8a] with 32 bytes of data:
Reply from 2404:6800:4003:c1c::8a: time=6ms
Reply from 2404:6800:4003:c1c::8a: time=7ms
Reply from 2404:6800:4003:c1c::8a: time=7ms
Reply from 2404:6800:4003:c1c::8a: time=9ms

Ping statistics for 2404:6800:4003:c1c::8a:
    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 6ms, Maximum = 9ms, Average = 7ms

xiaofan said:
BTW, I was trying to figure out what Singtel gives for Singtel ZTE F8648P ONR users when it comes to IPv6. Is it /56 (previous I got this when I was using GPON ONT with Singtel 1Gbps plan) or /64 in terms of prefix delegation?

Looks like it is not possible to know because of the unbridged ONR. And practically speaking, I have to treat it as /64 as all the clients get the same IPv6 address in terms of first 64bits prefix. The ONR WAN itself got a different /128 IPv6 address in a different /64 prefix though.

I have also try to configure the sub-router with static IPv6 and it does not work.

Right now my work-around for the two sub-routers (Double NAT).
1) OpenWRT --> NAT66
2) Asus RT-AX82U --> Singtel 6rd

For other sub-routers like Asus TUF-BE6500 and Xiaomi BE5000 (for experiments only), I use IPv6 passthrough and it seems to work mostly.

xiaofan · Nov 12, 2024

secureshell said:
I was able to get VQ to setup my IPV6 by reaching out to them. I heard that they will configure on a per request basis for those who want IPv6

Nice. Do you get /64 IPv4 prefix delegation? Or even /56?

overratedplot · Nov 12, 2024

secureshell said:
I was able to get VQ to setup my IPV6 by reaching out to them. I heard that they will configure on a per request basis for those who want IPv6

How did you manage this? I contacted them just now and got a different reply:

In regards to your IPv6 inquiry, we regret to inform you that as of now, we only provide IPv4 addresses to our current users.

xiaofan · Nov 12, 2024

xiaofan said:
Interestingly my previous work-around of using 6rd in the Asus sub-router (TUF-BE6500 this time) does not seem to work well this time. The work-around was used when I was not able to bridge the ZTE F8648P XGS-PON ONR.

ping has not issues but Web based IPv6 test will fail. Very strange.

Using 6rd on OpenWRT sub-router, this is good. No issues with either ping or Web based IPv6 test.

Mach3.2 · Nov 12, 2024

secureshell said:
I was able to get VQ to setup my IPV6 by reaching out to them. I heard that they will configure on a per request basis for those who want IPv6

can share how exactly you worded your request?

I tried asking for IPv6 through technical support a month or so ago but they told me don't have.

They allocating a /56 prefix or only a /64?

bert64 · Nov 12, 2024

overratedplot said:
How did you manage this? I contacted them just now and got a different reply:

It's likely that their first line agents are not aware of this, so you'll need to get through to someone more technical/senior. I'd ask to escalate, or see if you can get a contact name from someone who's had success.

bert64 · Nov 12, 2024

xiaofan said:
The difference may be on SingTel side, difference between the GPON based network and XGS-PON based network.

Just an example, bridging behaviour changed recently for ZTE XGS-PON ONR. Previously the unbridged ports will still have Internet access. Now unbridged LAN ports no longer have Internet access even though the ONR itself still have internet access.

Anyway, I would be happy to be proved wrong if other users are able to sort out the issue.

BTW, when I was using ONT with SingTel 1Gbps plan, initially I could only get OpenWRT and Asus working with SingTel native IPv6 and not pfSensen/OPNsense. Later suddenly pfSense/OPNsense also worked without changes on my side. So SingTel side IPv6 implementation did play a part.

This is likely down to the DHCP6 DUID type...
Pfsense uses a different DUID type (DUID-LLT) by default, OpenWRT uses DUID-LL. M1 required DUID-LL, Singtel might have configured it that way initially and then changed it.

This will prevent you getting a prefix at all, once you get a prefix correctly delegated anything beyond that prefix is under your control irrespective of anything upstream.

First thing to do is make sure that the prefix is delegated correctly - sending traffic from an external source (eg ping) to *ANY* address within your prefix should hit the WAN interface of your router. So try to ping XX01::1, XXFF::1 etc from outside while running a tcpdump and make sure the traffic arrives. The traffic will show up on the router, even if there's no reply because you've not assigned the address to anything.
If it doesnt, it looks like you don't actually have a /56 properly delegated.

If it does, see if the router will assign multiple LAN interfaces - eg alongside your existing XX00::/64 LAN, create a separate XXFF::/64 one and make sure it works correctly.

If that's working then your prefix delegation is good, and you can work on downstream delegation.
Make sure that once you delegate a prefix to a downstream router there is an appropriate route added, eg XX01::/64 via LL address of downstream router.

Make sure that a traceroute from outside passes your first router and reaches the second one.

Make sure your firewall rules on both routers are not blocking ICMPv6 messages.

I've never setup PD on OpenWRT, have done it with pfsense many times.

xiaofan · Nov 12, 2024

bert64 said:
This is likely down to the DHCP6 DUID type...
Pfsense uses a different DUID type (DUID-LLT) by default, OpenWRT uses DUID-LL. M1 required DUID-LL, Singtel might have configured it that way initially and then changed it.

This will prevent you getting a prefix at all, once you get a prefix correctly delegated anything beyond that prefix is under your control irrespective of anything upstream.

First thing to do is make sure that the prefix is delegated correctly - sending traffic from an external source (eg ping) to *ANY* address within your prefix should hit the WAN interface of your router. So try to ping XX01::1, XXFF::1 etc from outside while running a tcpdump and make sure the traffic arrives. The traffic will show up on the router, even if there's no reply because you've not assigned the address to anything.
If it doesnt, it looks like you don't actually have a /56 properly delegated.

If it does, see if the router will assign multiple LAN interfaces - eg alongside your existing XX00::/64 LAN, create a separate XXFF::/64 one and make sure it works correctly.

If that's working then your prefix delegation is good, and you can work on downstream delegation.
Make sure that once you delegate a prefix to a downstream router there is an appropriate route added, eg XX01::/64 via LL address of downstream router.

Make sure that a traceroute from outside passes your first router and reaches the second one.

Make sure your firewall rules on both routers are not blocking ICMPv6 messages.

I've never setup PD on OpenWRT, have done it with pfsense many times.

Thanks a lot for the detailed instruction to troubleshoot the issue.

Good thing is that the first step is good. I can see from tcpdump that the traffic arrives when I ping "2400:d802:xxx:89ff::1" from outside host. The address does not exist but I can see it mentioned in the logs. I also tried "2400:d802:xxx:8908::1"

I will try the other steps tomorrow.

Bash:

root@OpenWrt:~# tcpdump -i eth1 icmp6
...
14:22:26.169671 IP6 2400:d803:xxxx:xxxx:xxxx:xxxx:xxxx:b95b > 2400:d802:xxx:89ff::1: ICMP6, echo request, id 60965, seq 2, length 64
14:22:26.169722 IP6 2400:d802:xxx::x:f26 > 2400:d803:xxxx:xxxx:xxxx:xxxx:xxxx:b95b: ICMP6, destination unreachable, unreachable route 2400:d802:xxx:89ff::1, length 112
...

From the outside host, I can also see it reached the WAN address of the main OpenWRT router, which is 2400:d802:xxx::x:f26.

Bash:

root@ubuntu2204ct11:~# ping 2400:d802:xxx:89ff::1
PING 2400:d802:xxx:89ff::1(2400:d802:xxx:89ff::1) 56 data bytes
From 2400:d802:xxx::x:f26 icmp_seq=1 Destination unreachable: No route
...

xiaofan · Nov 13, 2024

xiaofan said:
From the above link.

AS4773 == M1, Fibre and Mobile combined
AS4817 SIMBA -- more for Mobile now as the 2.5G Fibre Internet service just started
AS4657 -- maybe this is for Starhub Mobile??
AS3758 -- Maybe this is for Singtel Business Broadband??

ASN
AS Name
IPv6 Capable
IPv6 Preferred
Samples
AS9506
SINGTEL-FIBRE Singtel Fibre Broadband
0.12%
0.06%
135434
AS4773
MOBILEONELTD-AS-AP MobileOne Ltd. MobileInternet Service Provider Singapore
53.03%
52.24%
111581
AS55430
STARHUB-NGNBN Starhub Ltd
61.52%
61.02%
93690
AS45143
SINGTELMOBILE-AS-AP SINGTEL MOBILE INTERNET SERVICE PROVIDER Singapore
4.64%
4.44%
75069
AS4657
STARHUB-INTERNET StarHub Ltd
0.69%
0.65%
36482
AS4817
STPL-SG-AP Simba Telecom Pte Ltd
58.12%
57.52%
34510
AS56300
MYREPUBLIC-SG MyRepublic Ltd.
0.06%
0.04%
23881
AS3758
SINGNET SingNet
0.68%
0.46%
6343
AS18106
VIEWQWEST-SG-AP Viewqwest Pte Ltd
0.14%
0.04%
5657
AS135600
WHIZCOMMS-AS-AP Whiz Communications Pte Ltd
0.08%
0.08%
2457

The above was on 3-Dec-2023.

Latest update as of today 12-Nov-2024. Quite some Starhub users have IPv6 issues so you can see the drop for Starhub.

Singtel native IPv6 roll-out is still on-going and it makes very difficult for ONR users to get native IPv6, so the percentage is still quite low, but already a big jump from last post. I think the percentage will be native IPv6 combined with 6rd, but the increment will mostly come from native IPv6.

Singtel AS9506 IPv6 capable --> 0.12% to 2.28%.
Singtel AS9506 IPv6 preferred --> 0.06% to 2.21%.

https://stats.labs.apnic.net/ipv6/SG

ASN	AS Name	IPv6 Capable	IPv6 Preferred	Samples
AS9506	SINGTEL-FIBRE Singtel Fibre Broadband	2.28%	2.21%	330,700
AS55430	STARHUB-NGNBN Starhub Ltd	34.23%	30.33%	243,950
AS39832	NO-OPERA	26.90%	0.92%	193,663
AS4773	MOBILEONELTD-AS-AP MobileOne Ltd. MobileInternet Service Provider Singapore	30.77%	29.37%	169,586
AS13335	CLOUDFLARENET	97.65%	94.75%	142,068
AS45143	SINGTELMOBILE-AS-AP SINGTEL MOBILE INTERNET SERVICE PROVIDER Singapore	2.96%	2.90%	130,906
AS141995	CAPL-AS-AP Contabo Asia Private Limited	2.89%	2.17%	79,326
AS4817	STPL-SG-AP Simba Telecom Pte Ltd	45.13%	45.00%	75,543
AS31898	ORACLE-BMC-31898	1.12%	0.63%	68,065
AS56300	MYREPUBLIC-SG MyRepublic Ltd.	0.65%	0.05%	63,372
AS4657	STARHUB-INTERNET StarHub Ltd	0.33%	0.28%	62,795
AS63949	AKAMAI-LINODE-AP Akamai Connected Cloud	39.28%	11.19%	44,185
AS16509	AMAZON-02	30.36%	20.47%	41,701
AS212238	CDNEXT	4.49%	3.31%	28,393
AS3758	SINGNET SingNet	1.80%	1.66%	26,017
AS14061	DIGITALOCEAN-ASN	3.29%	2.37%	25,837
AS136907	HWCLOUDS-AS-AP HUAWEI CLOUDS	0.04%	0.01%	19,357
AS18106	VIEWQWEST-SG-AP Viewqwest Pte Ltd	0.10%	0.06%	17,156
AS199524	GCORE	0.53%	0.40%	16,378
AS53813	ZSCALER-INC	17.02%	0.95%	15,089
AS21859	ZEN-ECN	25.18%	22.15%	12,037
AS17547	M1NET-SG-AP M1 NET LTD	0.30%	0.13%	11,081
AS8849	MELBICOM-EU-AS Melbikomas UAB	14.39%	10.83%	10,883
AS135600	WHIZCOMMS-AS-AP Whiz Communications Pte Ltd	0.05%	0.03%	9,193
AS399812	LAER-AS-SIN1	99.98%	99.95%	8,463

bert64 · Nov 13, 2024

xiaofan said:
The above was on 3-Dec-2023.

Latest update as of today 12-Nov-2024. Quite some Starhub users have IPv6 issues so you can see the drop for Starhub.

Singtel native IPv6 roll-out is still on-going and it makes very difficult for ONR users to get native IPv6, so the percentage is still quite low, but already a big jump from last post. I think the percentage will be native IPv6 combined with 6rd, but the increment will mostly come from native IPv6.

Singtel AS9506 IPv6 capable --> 0.12% to 2.28%.
Singtel AS9506 IPv6 preferred --> 0.06% to 2.21%.

https://stats.labs.apnic.net/ipv6/SG

ASN AS Name IPv6 Capable IPv6 Preferred Samples
AS9506 SINGTEL-FIBRE Singtel Fibre Broadband 2.28% 2.21% 330,700
AS55430 STARHUB-NGNBN Starhub Ltd 34.23% 30.33% 243,950
AS39832 NO-OPERA 26.90% 0.92% 193,663
AS4773 MOBILEONELTD-AS-AP MobileOne Ltd. MobileInternet Service Provider Singapore 30.77% 29.37% 169,586
AS13335 CLOUDFLARENET 97.65% 94.75% 142,068
AS45143 SINGTELMOBILE-AS-AP SINGTEL MOBILE INTERNET SERVICE PROVIDER Singapore 2.96% 2.90% 130,906
AS141995 CAPL-AS-AP Contabo Asia Private Limited 2.89% 2.17% 79,326
AS4817 STPL-SG-AP Simba Telecom Pte Ltd 45.13% 45.00% 75,543
AS31898 ORACLE-BMC-31898 1.12% 0.63% 68,065
AS56300 MYREPUBLIC-SG MyRepublic Ltd. 0.65% 0.05% 63,372
AS4657 STARHUB-INTERNET StarHub Ltd 0.33% 0.28% 62,795
AS63949 AKAMAI-LINODE-AP Akamai Connected Cloud 39.28% 11.19% 44,185
AS16509 AMAZON-02 30.36% 20.47% 41,701
AS212238 CDNEXT 4.49% 3.31% 28,393
AS3758 SINGNET SingNet 1.80% 1.66% 26,017
AS14061 DIGITALOCEAN-ASN 3.29% 2.37% 25,837
AS136907 HWCLOUDS-AS-AP HUAWEI CLOUDS 0.04% 0.01% 19,357
AS18106 VIEWQWEST-SG-AP Viewqwest Pte Ltd 0.10% 0.06% 17,156
AS199524 GCORE 0.53% 0.40% 16,378
AS53813 ZSCALER-INC 17.02% 0.95% 15,089
AS21859 ZEN-ECN 25.18% 22.15% 12,037
AS17547 M1NET-SG-AP M1 NET LTD 0.30% 0.13% 11,081
AS8849 MELBICOM-EU-AS Melbikomas UAB 14.39% 10.83% 10,883
AS135600 WHIZCOMMS-AS-AP Whiz Communications Pte Ltd 0.05% 0.03% 9,193
AS399812 LAER-AS-SIN1 99.98% 99.95% 8,463

Interesting that AS39832 has such a high number of samples, as far as i'm aware that's a VPN service built in to the Opera browser and i wouldnt think so many people would be using it. The low v6 preference would suggest they are using NAT+ULA.
It could also be users from all over the region, where it shows as SG because that's where the regional servers for the service are located.

I wonder what starhub have screwed up, v6 used to work well there.

xiaofan · Nov 13, 2024

bert64 said:
I wonder what starhub have screwed up, v6 used to work well there.

It is discussed here. If you got some time, please help to just take a look at the issues reported in the last two pages (Page 8 and Page 9).
https://forums.hardwarezone.com.sg/...hcp-configuration-disable-ipv6.7067651/page-9

Initially the issue seems to limited to users of GPON based 500Mbps/1Gbps/2Gbps plans, but now the issue seems to be affecting users of XGS-PON based 5Gbps/10Gbps plans as well.

From what I read, there seem to be multiple issues. The strange thing is that some users are not affected at all.

1) Some users cannot get IPv6 address at all. One report says replacing the ONT helped to sort out the issue, which is kind of strange.
2) Some users can get IPv6 address but then either DNS64 or Gateway seem to got issues and then the users may have to disable IPv6 to get working internet.
3) Some latency issues seem to be there as well.
4) The main problem is that Starhub technical support people seem to have no clues about the issue.

xiaofan · Nov 13, 2024

bert64 said:
First thing to do is make sure that the prefix is delegated correctly - sending traffic from an external source (eg ping) to *ANY* address within your prefix should hit the WAN interface of your router. So try to ping XX01::1, XXFF::1 etc from outside while running a tcpdump and make sure the traffic arrives. The traffic will show up on the router, even if there's no reply because you've not assigned the address to anything.
If it doesnt, it looks like you don't actually have a /56 properly delegated.

If it does, see if the router will assign multiple LAN interfaces - eg alongside your existing XX00::/64 LAN, create a separate XXFF::/64 one and make sure it works correctly.

Unfortunately second step failed.

OpenWRT LAN 2 property:
Protocol: Static address
IPv4: 192.168.58.1/24
IPv6: 2400:d802:xxx:89ff::1/64

But then LAN2 clients can not access Internet using IPv6.

Bash:

root@debianct11r1:~# nslookup ipv6.google.com
Server:         2400:d802:xxx:89ff::1
Address:        2400:d802:xxx:89ff::1#53

Non-authoritative answer:
ipv6.google.com canonical name = ipv6.l.google.com.
Name:   ipv6.l.google.com
Address: 2404:6800:4003:c01::66
Name:   ipv6.l.google.com
Address: 2404:6800:4003:c01::8a
Name:   ipv6.l.google.com
Address: 2404:6800:4003:c01::8b
Name:   ipv6.l.google.com
Address: 2404:6800:4003:c01::64

root@debianct11r1:~# ping -c 4 ipv6.google.com
PING ipv6.google.com(sb-in-x64.1e100.net (2404:6800:4003:c01::64)) 56 data bytes

--- ipv6.google.com ping statistics ---
4 packets transmitted, 0 received, 100% packet loss, time 3063ms

bert64 · Nov 13, 2024

xiaofan said:

Unfortunately second step failed.

OpenWRT LAN 2 property:
Protocol: Static address
IPv4: 192.168.58.1/24
IPv6: 2400:d802:xxx:89ff::1/64

But then LAN2 clients can not access Internet using IPv6.

Bash:

root@debianct11r1:~# nslookup ipv6.google.com
Server:         2400:d802:xxx:89ff::1
Address:        2400:d802:xxx:89ff::1#53

Non-authoritative answer:
ipv6.google.com canonical name = ipv6.l.google.com.
Name:   ipv6.l.google.com
Address: 2404:6800:4003:c01::66
Name:   ipv6.l.google.com
Address: 2404:6800:4003:c01::8a
Name:   ipv6.l.google.com
Address: 2404:6800:4003:c01::8b
Name:   ipv6.l.google.com
Address: 2404:6800:4003:c01::64

root@debianct11r1:~# ping -c 4 ipv6.google.com
PING ipv6.google.com(sb-in-x64.1e100.net (2404:6800:4003:c01::64)) 56 data bytes

--- ipv6.google.com ping statistics ---
4 packets transmitted, 0 received, 100% packet loss, time 3063ms

Are you trying to create a 2nd LAN on the first router, or a second router?

That debianct11r1 device is in the 2nd LAN? what does its interface config (ip addr list) and routing table (ip -6 route) show?

When you perform the pings, do they show up on the router's LAN interface? Are they subsequently forwarded out through the WAN interface?

ASN	AS Name	IPv6 Capable	IPv6 Preferred	Samples
AS9506	SINGTEL-FIBRE Singtel Fibre Broadband	0.12%	0.06%	135434
AS4773	MOBILEONELTD-AS-AP MobileOne Ltd. MobileInternet Service Provider Singapore	53.03%	52.24%	111581
AS55430	STARHUB-NGNBN Starhub Ltd	61.52%	61.02%	93690
AS45143	SINGTELMOBILE-AS-AP SINGTEL MOBILE INTERNET SERVICE PROVIDER Singapore	4.64%	4.44%	75069
AS4657	STARHUB-INTERNET StarHub Ltd	0.69%	0.65%	36482
AS4817	STPL-SG-AP Simba Telecom Pte Ltd	58.12%	57.52%	34510
AS56300	MYREPUBLIC-SG MyRepublic Ltd.	0.06%	0.04%	23881
AS3758	SINGNET SingNet	0.68%	0.46%	6343
AS18106	VIEWQWEST-SG-AP Viewqwest Pte Ltd	0.14%	0.04%	5657
AS135600	WHIZCOMMS-AS-AP Whiz Communications Pte Ltd	0.08%	0.08%	2457

IPv6 discussions

High Supremacy Member

Junior Member

High Supremacy Member

Senior Member

High Supremacy Member

High Supremacy Member

Member

High Supremacy Member

High Supremacy Member

Junior Member

High Supremacy Member

Great Supremacy Member

Senior Member

Senior Member

High Supremacy Member

High Supremacy Member

Senior Member

High Supremacy Member

High Supremacy Member

Senior Member