Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[vimalraj]

Hi,

We have some technical issue with IPv6 router configuration[DLINK 655] when we
try to connect it with ISP provided static IPv6 connection.
We request you to review our IPv6 network topology and
the configurations. DLINK setup and  logs.

Topology
-----------
Laptop - > DLink Router -> ISP link [no firewall]

Note:-
1. We are able to configure the router for internal testing in SLAAC/DHCPv6/Static
                configurations. We are facing issues when we set the ISP provided values in these
                routers and accessing network.(basically DNS settings are not functional with router
                and our network connections to ISP)

ISP provided static values are
----------------------------
   IPv6 Address. . . . . . . . . . . : 2403:0:500:9::a [prefix length - 64]
   Default Gateway . . . . . . . . : 2403:0:500:9::1
   Primary DNS...................... : 2403:0:0:1a::12
   Secondary DNS.................. : 2403:0:0:1a::13


Attached the 1. Ping, 2. Nslookup 3. Tracert logs
-------------------------------------------------------------------------------------------------
C:\Users\NetSet1>ipconfig

Windows IP Configuration


Wireless LAN adapter Wireless Network Connection 6:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :

Wireless LAN adapter Wireless Network Connection:

   Connection-specific DNS Suffix  . :
   IPv6 Address. . . . . . . . . . . : 2403:0:500:9::2
   IPv6 Address. . . . . . . . . . . : 2403:0:500:9:b8c1:370b:1b5f:30bc
   Temporary IPv6 Address. . . . . . : 2403:0:500:9:f8cb:e5c4:9cc9:804c
   Link-local IPv6 Address . . . . . : fe80::b8c1:370b:1b5f:30bc%20
   IPv4 Address. . . . . . . . . . . : 192.168.0.101
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Default Gateway . . . . . . . . . : fe80::5ed9:98ff:fe5c:e718%20
                                       2403:0:500:9::1
                                       192.168.0.1

Ethernet adapter Local Area Connection:

   Connection-specific DNS Suffix  . :
   IPv4 Address. . . . . . . . . . . : 192.168.0.100
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Default Gateway . . . . . . . . . : 192.168.0.1

Tunnel adapter Teredo Tunneling Pseudo-Interface:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :

Tunnel adapter isatap.{7CA2AF07-39C3-4B4B-89C4-D1BB3B5C7098}:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :

Tunnel adapter 6TO4 Adapter:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :

Tunnel adapter isatap.{D83562DE-260B-4C4A-9209-0D645260FB6D}:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :

---------------------------------------------------------------------------------------------
C:\Users\SonyNetSet1>ping 2403:0:500:9::1

Pinging 2403:0:500:9::1 with 32 bytes of data:
Destination host unreachable.
Destination host unreachable.
Destination host unreachable.
Destination host unreachable.

Ping statistics for 2403:0:500:9::1:
    Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),

C:\Users\NetSet1>
---------------------------------------------------------------------------------------------
C:\Users\NetSet1>nslookup 2403:0:0:1a::12
DNS request timed out.
    timeout was 2 seconds.
Server:  UnKnown
Address:  2403:0:0:1a::12

DNS request timed out.
    timeout was 2 seconds.
*** Request to UnKnown timed-out

C:\Users\NetSet1>nslookup 2403:0:0:1a::13
DNS request timed out.
    timeout was 2 seconds.
Server:  UnKnown
Address:  2403:0:0:1a::12

DNS request timed out.
    timeout was 2 seconds.
*** Request to UnKnown timed-out

C:\Users\NetSet1>
-------------------------------------------------------------------------------------------------
C:\Users\SonyNetSet1>tracert -6 www.kame.net
Unable to resolve target system name www.kame.net.

C:\Users\NetSet1>
-------------------------------------------------------------------------------------------------

Regards,
Vimal

[Patrick533]

Do you have the firewall turned on in the DIR-655 by any chance?

My second question is, have you tried configuring just a Windows PC to verify the IPV6 link is operational?

[davevt31]

What Hardware Version amd Firmware Version is the 655?

[PacketTracer]

Hi vimalraj,

you have configured network 2403:0:500:9::/64 for use on your WAN link, your router using 2403:0:500:9::a and 2403:0:500:9::1 beeing the other end of the connection serving as default router. Did I understand this right?

Hence you can't use 2403:0:500:9::/64 within your LAN or WLAN. But exactly that is what you are doing wrong. For example, if you do a ping 2403:0:500:9::1, your PC thinks that this address is inside your LAN/WLAN and tries to resolve the MAC address corresponding to this IPv6 address instead of sending this packet to the default gateway fe80::5ed9:98ff:fe5c:e718 (which is your D-LINK router).

Astonishing enough that your D-LINK router had accepted this configuration: Using 2403:0:500:9::/64 on both its WAN and LAN interface it should have produced an error message!

Ask your provider what IPv6 addresses you may use inside your LAN/WLAN. Maybe he gives you some /56 block, so you can form 256 possible /64 networks from that for use inside your LAN/WLAN. But it must never be the same as the /64 block you use on your WAN link.

PT

[Patrick533]

Furry/All,

Packet Tracer is really your IPV6 expert, not me.

In the future you may want to P/M us both for a quick response, but he will catch what is wrong 99% of the time, me, not so often. Or if I am not 100% sure I can P/M him.

As the name Packet Tracer implies, I can verify he has commercial experience/trade experience with IPV6, me, not yet, I'm just a shade tree dabbler and Packet Tracer helped me offline un-kink some IPV6 problems here at home that I fought with for a week. He looked at the problem said do this, I did and it worked in 60 seconds(the time it takes to re-boot, no need for 2nd and 3rd tries). I have posted the IPV6 firewall setup that he helped me with, just need to sit down and document it when it if not 105F! Yes I have AC and can have $600 electric bills too, instead of this nice shiny new 27" monitor that came Friday!

I have a bunch of questions here, but I know he is busy. I guess there are no 192.168.X.X type addresses used because everything is public with IPV6, so if a ISP gives you a static IP, me thinks they should give you a block of addresses because IPV6 has no NAT. One address will only work for one device, with 6RD you pull from your ISP's address block automatically, with static not so. The first time I ran a IPV6 firewall test and my machines address came back instead of the routers (and I had open ports to the outside world), I nearly soiled myself! All of my banking info/personal info is on this machine! 

Thanks PT! Enjoy a beautiful Sunday afternoon!

Pat 

[FurryNutz]

Why I PM'd you both.  

Your both good and having double the experience just seems better. Having more ideas, feedback and suggestions from more people just helps out users in the forum and gains a better experience for everyone and having a good collective of great people to work with. I hope we can rely on each other on future needs and learn from one another. I know I'd like to get to know more about IPv6 as it seems it's becoming more prominent as ISP start to support it more. I'm still waiting on my ISP.  

Let see if we can get the OP problem resolved now. 

Thanks for the Feeback, Enjoy.

[davevt31]

Better to post here than to PM, as it may help others who have the same or similar issue.

[FurryNutz]

I PM'd them to have them come here and help with suggestions for the OP.  

[Patrick533]

Why I PM'd you both.  

Your both good and having double the experience just seems better. Having more ideas, feedback and suggestions from more people just helps out users in the forum and gains a better experience for everyone and having a good collective of great people to work with. I hope we can rely on each other on future needs and learn from one another. I know I'd like to get to know more about IPv6 as it seems it's becoming more prominent as ISP start to support it more. I'm still waiting on my ISP.  

Let see if we can get the OP problem resolved now. 

Thanks for the Feeback, Enjoy.

You PM'd PT too, OK, makes sense now. Yeah, I was saying that you should send to both of us and you already were, good job, carry on. I thought it was funny he would always show up too. He is good!!!!! Blows me out of the water! He's on the cutting edge, me, just a user.......

Do you have any Charter towns close to you? I can share their 6RD info, damn near plug and play with 6rd!

[FurryNutz]

No, on cableone. No IPv6 anything as of yet. Still need to use try the Hurricane tunnel out one of these days.