VLANs and subnets...?

that

esuhl, you no not have to reply, but Draytek are one of the very few companies that still update firmware even if the equipment s end of life was years ago

esuhl

that wrote: »

esuhl, you no not have to reply, but Draytek are one of the very few companies that still update firmware even if the equipment s end of life was years ago

Thanks -- I checked, but I'm running the latest firmware.

arciere wrote: »

Ok, I couldn't resist and played a bit with my personal Draytek, I got this after a few changes in the WAN settings page. So yes, it can be done with the Draytek, I think it's just a matter of finding the right settings that work with your non-standard setup.

Can I ask how you set that up? How was your DrayTek connected to the Internet? What WAN settings did you have to change?

arciere wrote: »

The IPv6 address in the test was my computer's address, not my router's. This shows you that, without doing much, you are effectively directly exposed to the Internet.

Did you have to change your LAN settings to get a global IPv6 address on your computer?

arciere

esuhl wrote: »

Can I ask how you set that up? How was your DrayTek connected to the Internet? What WAN settings did you have to change?
Did you have to change your LAN settings to get a global IPv6 address on your computer?

I am with BT Infinity, so probably settings are a bit different. Anyway, all I had to do was:

WAN-->Internet Access-->WAN1 (the telephone cable goes here)-->IPv6-->Connection type: PPP (always on). Note that under the PPPoE tab in the same section you need to have the PPP details set up (username/password/VPI-VCI for ADSL connections, etc).

LAN-->General Setup-->LAN1 IPv6-->Enable IPv6; WAN primary interface WAN1; ULA configuration off; Current IPv6 table I have two addresses, Global and Link
In the same page, I have two DNS servers that are probably auto-generated, Management is set to SLAAC and at the bottom I have the DHCPv6 Server enabled with only Auto IPv6 Range ticked.

esuhl

arciere wrote: »

I am with BT Infinity, so probably settings are a bit different. Anyway, all I had to do was:

WAN-->Internet Access-->WAN1 (the telephone cable goes here)-->IPv6-->Connection type: PPP (always on). Note that under the PPPoE tab in the same section you need to have the PPP details set up (username/password/VPI-VCI for ADSL connections, etc).

Thanks. That was exactly was I was doing. The PPP connection was working perfectly for IPv4.

I've just (a few minutes ago) switched to VDSL (which the DrayTek doesn't support). So I can only connect to the Internet with the Sky router, via the DrayTek's WAN2 port now.

arciere wrote: »

LAN-->General Setup-->LAN1 IPv6-->Enable IPv6; WAN primary interface WAN1; ULA configuration off; Current IPv6 table I have two addresses, Global and Link
In the same page, I have two DNS servers that are probably auto-generated, Management is set to SLAAC and at the bottom I have the DHCPv6 Server enabled with only Auto IPv6 Range ticked.

Hmm... I saw this guide on the DrayTek forum explaining how to set up a PPP IPv6 connection (just as you are describing):

https://www.draytek.co.uk/support/guides/kb-ipv6-ppp

But my router doesn't have the same LAN configuration options on that page. :-/

https://www.dropbox.com/s/hmnbubk5l9t01k0/DrayTek%20LAN%20settings.PNG?dl=0

arciere

If you are using WAN2 you can't use PPP because the line goes to the Sky router, not to the Draytek.

In that case, try to use DHCPv6 client and on the Sky router make sure that IPv6 is enabled, that NAT is disabled or that the Draytek is in the DMZ.

You might also want to enable the "Brigde with LAN1" option on the WAN2 interface, that should allow your clients to capture the IPv6 addresses.

esuhl

arciere wrote: »

If you are using WAN2 you can't use PPP because the line goes to the Sky router, not to the Draytek.

That's right -- I was temporarily using the DrayTek's WAN1 port to connect directly to ADSL, and setting the WAN1 IPv6 type to PPP.

I enabled the LAN DHCPv6 server, with a unique local fd.../64 range. This initially seemed to work. The WAN IPv6 addresses in the DrayTek's "online status" page went green. (It seems the global address is acquired only when a unique local address is assigned.) But test results were mixed:

ipv6-test.com             17/20
test-ipv6.com (HTTP)      9/10
test-ipv6.com (HTTPS)     0/10
Android game              FAIL
Android test app          OK
ping -6 ipv6.google.com   OK

I also looked at the other connection methods. The only ones which don't involve tunnelling are Static IPv6 and DHCPv6 Client.

arciere wrote: »

In that case, try to use DHCPv6 client and on the Sky router make sure that IPv6 is enabled, that NAT is disabled or that the Draytek is in the DMZ.

Thanks; I tried that -- both with just the DrayTek connected directly via WAN1 and via WAN2 and the Sky box. The options allow me to specify an IAID and choose between "prefix delegation" or "non-temporary address".

Regardless of which option I chose, and whether I use the same IAID that I saw on my PC via ipconfig when connected to just the Sky router, or use the DrayTek default, the WAN IPv6s in the DrayTek's status page remain red, and IPv6 didn't work at all.

I managed to make the WAN IPv6 addresses turn green on the status page, by choosing the Static IPv6 connection type, and entering an IP made up of the network prefix issued by Sky, followed by the EUI-64 of the WAN interface, with a /64 range. But the IPv6 tests still failed.

arciere wrote: »

You might also want to enable the "Brigde with LAN1" option on the WAN2 interface, that should allow your clients to capture the IPv6 addresses.

I can't see an option like that anywhere. :-/

If I go into LAN >> Static Route >> IPv6 tab, I can specify:
Destination IP / CIDR prefix length
Gateway IPv6 address
Network interface (LAN, WAN1, WAN2 or WAN3)

Is setting a static route the same as bridging?

arciere

esuhl wrote: »

I managed to make the WAN IPv6 addresses turn green on the status page, by choosing the Static IPv6 connection type, and entering an IP made up of the network prefix issued by Sky, followed by the EUI-64 of the WAN interface, with a /64 range. But the IPv6 tests still failed.

Try to use a /128 mask for the WAN interface. My connection uses PPP and gets the IPv6 address automatically, with a /128 subnet mask.

esuhl wrote: »

I can't see an option like that anywhere. :-/

I should have a 2830 somewhere, I'll see if I can resurrect it, I suspect the options in the settings page are different than what I see on the 2860.

esuhl wrote: »

Is setting a static route the same as bridging?

No, that basically tells the router "if you need to reach IP xyz or IP range xyz-xyz1, send the request through WAN-X

esuhl

arciere wrote: »

Try to use a /128 mask for the WAN interface. My connection uses PPP and gets the IPv6 address automatically, with a /128 subnet mask.

Thanks. I tried that, and tried again with a /128 unique local (fd13...) address too, but it didn't seem to make any difference (e.g. from ipconfig from my PC, etc.)

arciere wrote: »

I should have a 2830 somewhere, I'll see if I can resurrect it, I suspect the options in the settings page are different than what I see on the 2860.

It would be interesting to see if you can make it work. I can't figure out whether the problems I'm having are down to the limitations of the old DrayTek, the Sky router, the ISP's setup... or simply my own incompetence!

arciere

Ok so, I couldn't test the 2830 with a proper ADSL connection but I had a look at the various settings.
What I would do, unless you've done it already, is as follows:
1) Connect the telephone cable to the Draytek (so no Sky router). It will use WAN1
2) Under WAN-->Internet Access-->WAN1 IPv6-->select connection type PPP (or whatever works to get an active internet connection on the Draytek)
3) Under PPPoE/PPPoA section, make sure all the details are correct. According to a post I found online, you should set PPPoA with username install[at]o2broadband[dot]co[dot]uk and password "install". You may have different credentials.
4) In the same section, enable "Bridge Mode" (towards the bottom of the screen)
5) In the LAN section (IPv6 setup), check whether the DHCP sections got populated automatically when the Draytek connected to the internet with an IPv6 address (with Bridge mode on the Draytek, the IPv6 addresses should come directly from the ISP.

If that doesn't work, I suspect the problem is with point 5, with the way the clients obtain their own IPv6 address.

esuhl

arciere wrote: »

Ok so, I couldn't test the 2830 with a proper ADSL connection but I had a look at the various settings.
What I would do, unless you've done it already, is as follows:
1) Connect the telephone cable to the Draytek (so no Sky router). It will use WAN1...

Unfortunately, the DrayTek only supports ADSL using the WAN1 port, and I switched to VDSL a few days ago. I tried anyway, but it doesn't work.

arciere wrote: »

5) In the LAN section (IPv6 setup), check whether the DHCP sections got populated automatically when the Draytek connected to the internet with an IPv6 address (with Bridge mode on the Draytek, the IPv6 addresses should come directly from the ISP.

There doesn't seem to be a "bridge" option for the WAN2 port. And the DrayTek doesn't automatically pick up any global or unique local IPv6 addresses -- I have to add them manually.

arciere wrote: »

If that doesn't work, I suspect the problem is with point 5, with the way the clients obtain their own IPv6 address.

I think you're right.

With just the Sky router (and IPv6 working), the router's DSL port is assigned a global (2a02) IPv6 address with an non-EUI-64 interface ID of ::1. So... that explains why my attempts at using EUI-64 global addresses on the DrayTek failed.

The Sky router's "attached devices" shows my PC with a global (2a02) and link local (fe80). From the PC's ipconfig, these addresses are shown as "Temporary IPv6 Addresses", rather than just "IPv6 Addresses". The interface IDs are seemingly random and change when the PC reboots.

While the (non-temporary) "IPv6 Addresses" in ipconfig also have a seemingly random (non-EUI-64) interface ID, they remain unchanged between reboots of the PC and router. How are they determined?

Anyway, I guess using the DrayTek's "Static IPv6" option won't work, and I need to use "DHCPv6 Client". I'll have another tinker.