@burrotwrote:HI Everyone,
Wondering if anyone knows if rogers supports static ipv6 assignments?
im trying to get setup with IPV6, however my current firewall that im trying to use doesnt support DHCPV6-PD (palo alto for the curious ones panos 8.1)
they support SLAAC but looks like thats it so far.
Any help appreciated!
They would for business customers, but the set up is considerably different. They have a device called a media converter (I've forgotten what make Rogers uses), which converts fibre to copper. pair. They'd send out a tech to install and test it. It would also support VLANs etc. I have set up similar equipment for Allstream.
However, I doubt you'd get it with the modems that Rogers provides for home and small office use. The whole idea of DHCPv6 and DHCP before it is to minimize the set up required. With these modems, it's essentially connect and go.
Have you contacted Palo Alto support about this? I use pfSense for my firewall/router.
@brhcadwrote:Thank you I can get IPv6 on WAN and LAN now. How to enable this for multiple VLAN? When trying to "track interface" on VLAN, I am only allowed "0 to 0" for the prefix ID. Since LAN is assigned prefix value of 0, there are no more left to assign to VLAN.
"(hexadecimal from 0 to 0) The value in this field is the (Delegated) IPv6 prefix ID"
How do I properly set the IPv6 prefix ID to allow multiple values?
You only select 1 ID for each interface. So, create the interface, either real or VLAN and then select the prefix ID you want to use for it. However, have you selected a prefix larger than /64 from Rogers? On pfSense, there's an option for prefix size, up to a /56.
@SheamusPatt you're seeing temporary IPV6 addresses which are generated by the computers operating system, presumably Windows in this case. The temporary address generation can be turned off if the user desires. However, the use of temporary IPV6 addresses are for your online security and privacy.
Further on this, as mentioned above, IPv6 has something called "privacy addresses", which are default with most (all?) operating systems. The point of this is to prevent your computer from being tracked, should you move to coffee shops etc. There is also a permanent address, MAC based in Linux and usually random number, in Windows. These addresses shouldn't change and are what you'd point the DNS records to for servers etc.. The privacy addresses typically change daily and are valid for a week. However, only the latest is used for new outgoing connections. If the privacy address are causing problems, as you describe, then you can turn off that function and use only the permanent address.
@TechnicallyReal, kick the modem back into Gateway mode, log into the modem and check for both IPV4 and IPV6 addresses in the WAN IP Address field at the upper right hand side of the info block on the STATUS tab. If the IPV6 address is not present, navigate to the BASIC .... GATEWAY FUNCTION tab and ensure that the Router Mode is set to Dual mode. If its only in IPV4 mode, change it to Dual (Stack) mode, save the changes and reboot the modem in either case, ADMIN .... DEVICE RESET .... Device Reset. After the reboot, check for the presence of the IPV6 address in the STATUS TAB.
If the address is not there, that would indicate that the Cable Modem Termination System (CMTS) is not assigning IPV6 addresses as it should. You would have to contact tech support and ask for a Level II tech. Most likely he or she can't do anything about it at the moment, but he or she can pass a report along to the network engineering staff to attend to the issue.
If the IPV6 address is present, then its probably pretty safe to assume that the address is also present when the modem is running in Bridge mode. You could flip the modem into Bridge mode and connect a pc for just long enough to pick up both IPV4 and IPV6 addresses and then physically disconnect the pc right away. Check the pc for its IPV6 addresses by using an ipconfig/all command at a command prompt. If the pc is picking up both addresses, then the modem is supplying both addresses to connected devices. The question at that point is whether or not IPV6 is enabled in the Google router.
Edit: Have a look at the following post from last year regarding an update to the Google wifi router, which includes IPV6 capability. Is your router firmware at the latest release version?
Only question after that is whether or not IPV6 is enabled in the router. I think that a good number of routers these days have separate IPV6 enable/disable functions, so, if you want IPV6, you would have to enable it and reboot the router so that it will pick up the IPV6 prefix from the CMTS.
@TechnicallyReal, Rogers uses Native IPV6. Don't know what mode you tried, so have a look at the following thread for IPV6 settings. There isn't a post for the Google wifi, but, you should be able to use the indicated settings for your Google IPV6 wifi settings.
http://communityforums.rogers.com/t5/Internet/Rogers-IPv6-Status/m-p/373238#M36710
Here's the link for Google wifi. There isn't any selection for Native IPV6, so the question is, whats the default protocol, Native, Static IPV6, Passthrough, etc, etc?
https://support.google.com/wifi/answer/6361450?hl=en
Maybe its time for a question in the Google forums? See if they can clear up the IPV6 settings issue.
One way to see if you have IPv6 is to check the computer address. My IPv6 address start with 2607:. All global addresses currently available start with 2 or 3. There are also link local addresses that start with fe80, but all systems capable of IPv6 would have one of those, regardless of whether an ISP is providing IPv6. As for your DMZ etc., that would depend entirely on your router and how you configured it. When trying to resolve a problem, it's best to start simple and go from there, so try without DMZ first. Given that the router has an IPv6 address, then Rogers is providing it. A simple test to see if IPv6 is working is to open a browser and go to ipv6.google.com. If that works, you have IPv6.
Fwiw, with IPV6 running, if you go to www.speedtest.net and use the Rogers servers to run a speedtest, that test runs using IPV6 addressing. Your IP address that is shown in the test results is an IPV4 address. So, there's room here for some confusion. If you watch the test with Wireshark, you can see the server's IPV6 address and the pc's temporary IPV6 address in use. You can also go to ipv6.speedtest.net to run speedtests. Same thing applies, server uses its IPV6 address and pc uses its temporary IPV6 address.
-
149718 views
-
62 Likes
-
-
