VLANs and subnets...?

arciere

Sorry, I forgot that you upgraded to VDSL.

I spent some time with the 2830, I'm fairly convinced that the problem is that the 2830 does not have the option to bridge WAN2 to LAN1, something that more recent models, like the 2860, do have.

Without that option, which apparently is available for WAN1, you are effectively NATing the external IPv6 address on the Draytek.

If my theory is correct, when your Draytek is assigned an IPv6 address and everything in the status page is fine and dandy, if you go to https://www.google.co.uk and type "My IP", you should see the IPv6 address of the Draytek rather than your computer.

EDIT: you could, in theory, connect the Sky router to a switch port on the Draytek, rather than the WAN port, and change the gateway in the DHCP on the Draytek from the Draytek's IP address to the Sky's address. That should make everything work fine (provided that you only leave one DHCP server active, etc etc), but the downside is that you will end up using the Draytek as a dumb switch rather than a proper router.

esuhl

arciere wrote: »

Sorry, I forgot that you upgraded to VDSL.

I spent some time with the 2830, I'm fairly convinced that the problem is that the 2830 does not have the option to bridge WAN2 to LAN1, something that more recent models, like the 2860, do have.

Without that option, which apparently is available for WAN1, you are effectively NATing the external IPv6 address on the Draytek.

Right. But... why would NATing be a problem? Shouldn't it still work...?

arciere wrote: »

If my theory is correct, when your Draytek is assigned an IPv6 address and everything in the status page is fine and dandy, if you go to https://www.google.co.uk and type "My IP", you should see the IPv6 address of the Draytek rather than your computer.

I can get the WAN2 IPv6 addresses looking fine, but the LAN clients don't get global (2a02) IPv6 addresses... unless I manually add the global prefix with the LAN port's EUI-64 suffix in the DrayTek.

In either case, "what is my IPv6" sites show that I don't have a public IPv6 at all. If I ping -6 a web domain, DNS seems to work, but the request times out. :-/

arciere wrote: »

EDIT: you could, in theory, connect the Sky router to a switch port on the Draytek, rather than the WAN port, and change the gateway in the DHCP on the Draytek from the Draytek's IP address to the Sky's address. That should make everything work fine (provided that you only leave one DHCP server active, etc etc), but the downside is that you will end up using the Draytek as a dumb switch rather than a proper router.

Yeah... I really wanted to use the DrayTek "fully", but I think I'll have to admit defeat. On the bright side, I've learnt a lot about IPv6. And the router only cost me £10 on eBay...

---

Can I be really cheeky and ask just a few more questions about IPv6? I've searched, but I just can't find the answers...

1) What is the DHCPv6 "Identity Association ID"? It seems to be a 9-digit decimal number, but where does it come from (router? ISP?) and what does it mean or do?

2) Some IPv6 interface IDs use EUI-64; some are dynamically allocated at random. But others appear random (not using EUI-64), yet persist between reboots. How are these interface IDs determined/calculated?

arciere

esuhl wrote: »

Right. But... why would NATing be a problem? Shouldn't it still work...?

If you have NAT, what talks to the websites is the router on behalf of your devices, not the devices directly . Depending on how those websites run the tests (I don't know), it could be that they can't see your computer and say that the test has failed.
That being said, the Draytek should have some kind of 'IPv6 ping' utility under Diagnostics, maybe it's worth having a look there.

esuhl wrote: »

I can get the WAN2 IPv6 addresses looking fine, but the LAN clients don't get global (2a02) IPv6 addresses... unless I manually add the global prefix with the LAN port's EUI-64 suffix in the DrayTek.

In either case, "what is my IPv6" sites show that I don't have a public IPv6 at all. If I ping -6 a web domain, DNS seems to work, but the request times out. :-/

I think it's because the IPv6 stops at WAN2, from there it is NATted. If WAN2 was bridged to LAN1, it would have been like having a direct connection with no NAT. From the Sky router's point of view, there is only one device connected to it now (the Draytek).

esuhl wrote: »

Yeah... I really wanted to use the DrayTek "fully", but I think I'll have to admit defeat. On the bright side, I've learnt a lot about IPv6. And the router only cost me £10 on eBay...

Why don't you have a look at a simple Vigor 130 modem like this https://www.ebay.co.uk/itm/draytek-vigor-130/324054540578?hash=item4b7327e122:g:SacAAOSw74xd-h9q

It's probably going to cost you more than £10, but it's worth considering if you want to keep using the Draytek.

esuhl wrote: »

Can I be really cheeky and ask just a few more questions about IPv6? I've searched, but I just can't find the answers...

1) What is the DHCPv6 "Identity Association ID"? It seems to be a 9-digit decimal number, but where does it come from (router? ISP?) and what does it mean or do?

I'm not an expert in IPv6, but from what I understood the IAID is used to identify a specific interface on a system (like an Ethernet card).

esuhl wrote: »

2) Some IPv6 interface IDs use EUI-64; some are dynamically allocated at random. But others appear random (not using EUI-64), yet persist between reboots. How are these interface IDs determined/calculated?

I'm not 100% sure, but I believe that those that do not change are based on the MAC address of the interface.

esuhl

Cheers. I had a look at the Vigor 130, and even DrayTek say it will work with my 2830-series router:
https://www.draytek.co.uk/support/guides/sky-fibre-setup-guide#compatibility-list

I'm very tempted... I might keep an eye out for one going cheap...
Anyway, thanks once again for your help. :beer:

arciere

Actually...(sorry but now this has become my personal challenge )
Have you tried to tweak the Firewall settings on the Draytek?
You can try to set a new rule to allow all traffic from WAN to LAN (Firewall-->Filter Setup). Just set 'Any' everywhere and see if that makes any difference (or you can disable the firewall altogether).
You will still have the Firewall on the Sky's router shielding you, but if IPv6 starts to work after turning off the Firewall on the Draytek, you know that it's something that can be done, you only need to spend time re-enabling the Firewall and starting to experiment with the different protocols.

esuhl

arciere wrote: »

Actually...(sorry but now this has become my personal challenge )

Ha ha! I know the feeling!

arciere wrote: »

Have you tried to tweak the Firewall settings on the Draytek?
You can try to set a new rule to allow all traffic from WAN to LAN (Firewall-->Filter Setup). Just set 'Any' everywhere and see if that makes any difference (or you can disable the firewall altogether).

Yes -- I tried disabling the firewall on the DrayTek, but sadly it didn't make any difference. I also tested with the Windows firewall disabled "just in case".

arciere wrote: »

You will still have the Firewall on the Sky's router shielding you, but if IPv6 starts to work after turning off the Firewall on the Draytek, you know that it's something that can be done, you only need to spend time re-enabling the Firewall and starting to experiment with the different protocols.

I'd put the DrayTek in the Sky router's DMZ, so even Sky's firewall was bypassed when I tested.

The only thing I don't quite understand is the IAID... :-/

I was wondering if there might be other firmware I could use -- either to enable "bridge mode" on the Sky router, or WAN/LAN bridging on the DrayTek, but I haven't found anything yet.

arciere

esuhl wrote: »

I was wondering if there might be other firmware I could use -- either to enable "bridge mode" on the Sky router, or WAN/LAN bridging on the DrayTek, but I haven't found anything yet.

Have you tried DD-WRT? That could potentially fix your problem, if you are happy not using the Draytek interface/firmware...

esuhl

arciere wrote: »

Have you tried DD-WRT? That could potentially fix your problem, if you are happy not using the Draytek interface/firmware...

Without IPv6, I don't have a use for the DrayTek, so yeah -- I'd be totally happy!

I looked at DD-WRT and Open-WRT, but I couldn't find much information on whether they support DrayTek routers. The documentation suggests looking at the circuit board to identify the chipsets in use, processor, RAM and flash memory sizes, etc., to figure out which firwmare (if any) is suitable.

I figured out the CPU in my DrayTek is made by Alfa Networks, but but haven't got much further yet...

I did find a forum post by someone with a later model (2960?) who had got the firmware working (except for VoIP). So... maybe it's possible...?

Have you got DD-WRT working on any DrayTek routers yourself?

arciere

esuhl wrote: »

Have you got DD-WRT working on any DrayTek routers yourself?

Not really, my experience with dd-wrt is limited to a couple of Netgear routers unfortunately. Worth a try if you are really giving up on the Draytek, otherwise if you try and it doesn't work you may end up with a nice yellowish piece of IT art (don't know why but all my old Drayteks have turned pale yellow :j )
The alternative is to look around for a used Vigor 130 (or actually, any VDSL bridge modem)