Hi all,
Thanks for all the config! I can't explain it, but just doing the release/renew
command below managed to make my setup "just work".
Hope everyone has a great week!
Regards,
Alex
On Sun, 8 Sep 2019, at 5:21 PM, Chris Lee wrote:
> Hi Alex,
>
> Yes have ER-X running 2.0.6 working well with ABB.. some snippet of interface
> and firewall stanzas below. I put the dhcpv6-pd on switch0 interface for my
> local LAN. I have a virtual interface on the WAN port as well to manage the
> Netcomm NFV modem from ABB that I put into bridge mode. Also have a Netgear
> 4G ethernet router on the second ethernet port that I use the load-balancing
> features with to failover to 4G automatically if NBN/ABB becomes unavailable
> (but haven't enabled IPv6 on the 4G yet), so far works fairly well.
>
> On occasion when there's been issues with IPv6 I've found I've had to
> manually release/delete the DUID and renew dhcpv6-pd on the edgerouter with
> the commands below.
>
> release dhcpv6-pd interface eth0
> delete dhcpv6-pd duid
> renew dhcpv6-pd interface eth0
>
> other than that just show interfaces and you should see your /128 IA-NA IPv6
> address on the eth0 interface and a /64 from the IA-PD on switch0 interface.
>
> interfaces {
> ethernet eth0 {
> address dhcp
> description "WAN Aussie Broadband FTTN"
> dhcp-options {
> default-route update
> default-route-distance 10
> name-server no-update
> }
> dhcpv6-pd {
> pd 0 {
> interface switch0 {
> host-address ::1
> prefix-id :1
> service slaac
> }
> prefix-length /56
> }
> rapid-commit disable
> }
> duplex auto
> firewall {
> in {
> ipv6-name WANv6_IN
> name WAN_IN
> }
> local {
> ipv6-name WANv6_LOCAL
> name WAN_LOCAL
> }
> }
> speed auto
> vif 3 {
> address 10.1.1.2/24
> description "NetComm Management"
> firewall {
> in {
> name WAN_IN
> }
> local {
> name WAN_LOCAL
> }
> }
> mtu 1500
> }
> }
> }
>
>
> firewall {
> ipv6-name WANv6_IN {
> default-action drop
> description "WAN inbound traffic forwarded to LAN"
> enable-default-log
> rule 10 {
> action accept
> description "Allow established/related sessions"
> protocol all
> state {
> established enable
> related enable
> }
> }
> rule 20 {
> action drop
> description "Drop invalid state"
> protocol all
> state {
> invalid enable
> }
> }
> rule 30 {
> action accept
> description "allow ICMPv6"
> protocol icmpv6
> }
> }
> ipv6-name WANv6_LOCAL {
> default-action drop
> description "WAN inbound traffic to the router"
> enable-default-log
> rule 10 {
> action accept
> description "Allow established/related sessions"
> protocol all
> state {
> established enable
> related enable
> }
> }
> rule 20 {
> action drop
> description "Drop invalid state"
> protocol all
> state {
> invalid enable
> }
> }
> rule 30 {
> action accept
> description "Allow IPv6 icmp"
> protocol ipv6-icmp
> }
> rule 40 {
> action accept
> description "allow dhcpv6"
> destination {
> port 546
> }
> protocol udp
> source {
> port 547
> }
> }
> }
> ipv6-receive-redirects disable
> ipv6-src-route disable
> ip-src-route disable
> log-martians disable
> }
>
> Regards,
> Chris
>
> On Sun, Sep 8, 2019 at 2:14 PM Alex Wakefield <[email protected]>
> wrote:
>> Hi,
>>
>> Does anyone have a working IPv6 setup for an EdgeRouter using the AussieBB
>> beta? I'm using an EdgeRouter Lite running v2.0.6.
>>
>> My internal interface manages to get IPs out of the range handed out by
>> Aussie but clients never get an address after that. I'm trying to use SLAAC
>> to hand out IPs. Relevant config on my internet facing port below.
>>
>> ethernet eth0 {
>> address dhcp
>> description AussieBB
>> dhcpv6-pd {
>> pd 1 {
>> interface eth2.20 {
>> host-address ::1
>> no-dns
>> prefix-id 0
>> service slaac
>> }
>> prefix-length 56
>> }
>> rapid-commit enable
>> }
>> duplex auto
>> firewall {
>> in {
>> ipv6-name AussieIn
>> name AussieIn
>> }
>> local {
>> ipv6-name AussieLocal
>> name AussieLocal
>> }
>> out {
>> ipv6-name AussieOut
>> name AussieOut
>> }
>> }
>> ipv6 {
>> address {
>> autoconf
>> }
>> }
>> speed auto
>> }
>>
>> Regards,
>> Alex
>> _______________________________________________
>> AusNOG mailing list
>> [email protected]
>> http://lists.ausnog.net/mailman/listinfo/ausnog
> _______________________________________________
> AusNOG mailing list
> [email protected]
> http://lists.ausnog.net/mailman/listinfo/ausnog
>
_______________________________________________
AusNOG mailing list
[email protected]
http://lists.ausnog.net/mailman/listinfo/ausnog
