Prefix delegation bij router in pppoe

Hey allemaal,

Graag wat uitleg en hulp bij prefix delegation in de volgende ipv6 setup.

Mijn setup bestaat uit een router (wrt1200ac, lede) met zijn wan poort
aangesloten op een lan poort van een bbox3. Deze router bouwt via passthrough
eigenschap van de bbox een eigen pppoe sessie op.

Graag had ik een ipv6 prefix om enkele subnetten op te bouwen achter deze
router, maar dit lijkt niet te lukken. Enkele concrete vragen:

- Klopt het dat ik geen prefix krijg toegewezen?
- De wan interface heeft een mask van 128-bits i.p.v. 64-bits en een link
local address. Dit heeft iets te maken met de ptp? Krijgt deze interface ook
geen global ipv6?
- De wan6 interface is opgebouwd met SLAAC op basis van het mac address van de
router? Waarom krijgt deze interface geen prefix /56 or /60 toegewezen?

Meer details over de LEDE/openwrt configuratie, vind je hieronder.

Groetjes,
Dirk


config globals 'globals'
option ula_prefix 'fda9:ef92:de1f::/48'

config interface 'wan'
option ifname 'eth1.2'
option proto 'pppoe'
option username 'xxx'
option password 'xxx'
option ipv6 'auto'

config interface 'wan6'
option ifname 'eth1.2'
option proto 'dhcpv6'
option reqaddress 'try'
option reqprefix '56'

config interface 'lan'
option type 'bridge'
option ifname 'eth0.1'
option proto 'static'
option netmask '255.255.255.0'
option ipaddr '192.168.3.1'
option ip6assign '64'
option ip6hint '1111'

Dit geeft de volgende resultaten:

> ifstatus wan
{
"up": true,
"pending": false,
"available": true,
"autostart": true,
"dynamic": false,
"uptime": 44921,
"l3_device": "pppoe-wan",
"proto": "pppoe",
"device": "eth1.2",
"updated": [
"addresses",
"routes"
],
"metric": 0,
"dns_metric": 0,
"delegation": true,
"ipv4-address": [
{
"address": "uu.uu.uu.uu",
"mask": 32
}
],
"ipv6-address": [
{
` "address": "fe80::qqqq:qq09:dbqq:qqqq",
"mask": 128
}
],
"ipv6-prefix": [

],
"ipv6-prefix-assignment": [

],
"route": [
{
"target": "0.0.0.0",
"mask": 0,
"nexthop": "62.4.202.1",
"source": "0.0.0.0\/0"
}
],
"dns-server": [
"195.238.2.22",
"195.238.2.21"
],
"dns-search": [

],
"inactive": {
"ipv4-address": [

],
"ipv6-address": [

],
"route": [

],
"dns-server": [

],
"dns-search": [

]
},
"data": {

}
}

en

ifstatus wan6
{
"up": true,
"pending": false,
"available": true,
"autostart": true,
"dynamic": false,
"uptime": 44966,
"l3_device": "eth1.2",
"proto": "dhcpv6",
"device": "eth1.2",
"metric": 0,
"dns_metric": 0,
"delegation": true,
"ipv4-address": [

],
"ipv6-address": [
{
"address": "2a02:a03f:yyyy:yyyy:zzzz:zzff:fezz:zzz",
"mask": 64,
"preferred": 212591,
"valid": 212591
}
],
"ipv6-prefix": [

],
"ipv6-prefix-assignment": [

],
"route": [
{
"target": "2a02:a03f:yyyy:yyyy::",
"mask": 64,
"nexthop": "::",
"metric": 256,
"valid": 212591,
"source": "::\/0"
},
{
"target": "2a02:a03f:yyyy:yyyy::",
"mask": 56,
"nexthop": "fe80::pppp:ppff:fepp:pppp",
"metric": 512,
"valid": 212591,
"source": "2a02:a03f:yyyy:yyyy:zzzz:zzff:fezz:zzzz\/64"
},
{
"target": "::",
"mask": 0,
"nexthop": "fe80::pppp:ppff:fepp:pppp",
"metric": 512,
"valid": 1381,
"source": "2a02:a03f:yyyy:yyyy:zzzz:zzff:fezz:zzzz\/64"
}
],
"dns-server": [

],
"dns-search": [

],
"inactive": {
"ipv4-address": [

],
"ipv6-address": [

],
"route": [

],
"dns-server": [

],
"dns-search": [

]
},
"data": {

}
}

en, tot slot,

ifstatus lan
{
"up": true,
"pending": false,
"available": true,
"autostart": true,
"dynamic": false,
"uptime": 45056,
"l3_device": "br-lan",
"proto": "static",
"device": "br-lan",
"updated": [
"addresses"
],
"metric": 0,
"dns_metric": 0,
"delegation": true,
"ipv4-address": [
{
"address": "192.168.3.1",
"mask": 24
}
],
"ipv6-address": [

],
"ipv6-prefix": [

],
"ipv6-prefix-assignment": [
{
"address": "2a02:a03f:xxxx:xxxx::",
"mask": 64,
"preferred": 300610,
"valid": 300610,
"local-address": {
"address": "2a02:a03f:xxxx:xxxx::1",
"mask": 64
}
},
{
"address": "fda9:ef92:de1f:1111::",
"mask": 64,
"local-address": {
"address": "fda9:ef92:de1f:1111::1",
"mask": 64
}
}
],
"route": [

],
"dns-server": [

],
"dns-search": [

],
"inactive": {
"ipv4-address": [

],
"ipv6-address": [

],
"route": [

],
"dns-server": [

],
"dns-search": [

]
},
"data": {

}
}

Tot slot the firewall settings,

config zone
option name 'wan'
list network 'wan'
list network 'wan6'
option input 'REJECT'
option output 'ACCEPT'
option forward 'REJECT'
option masq '1'
option mtu_fix '1'

config rule
option name 'Allow-DHCPv6'
option src 'wan'
option proto 'udp'
option src_ip 'fc00::/6'
option dest_ip 'fc00::/6'
option dest_port '546'
option family 'ipv6'
option target 'ACCEPT'

config rule
option name 'Allow-MLD'
option src 'wan'
option proto 'icmp'
option src_ip 'fe80::/10'
list icmp_type '130/0'
list icmp_type '131/0'
list icmp_type '132/0'
list icmp_type '143/0'
option family 'ipv6'
option target 'ACCEPT'

config rule
option name 'Allow-ICMPv6-Input'
option src 'wan'
option proto 'icmp'
list icmp_type 'echo-request'
list icmp_type 'echo-reply'
list icmp_type 'destination-unreachable'
list icmp_type 'packet-too-big'
list icmp_type 'time-exceeded'
list icmp_type 'bad-header'
list icmp_type 'unknown-header-type'
list icmp_type 'router-solicitation'
list icmp_type 'neighbour-solicitation'
list icmp_type 'router-advertisement'
list icmp_type 'neighbour-advertisement'
option limit '1000/sec'
option family 'ipv6'
option target 'ACCEPT'

config rule
option name 'Allow-ICMPv6-Forward'
option src 'wan'
option dest '*'
option proto 'icmp'
list icmp_type 'echo-request'
list icmp_type 'echo-reply'
list icmp_type 'destination-unreachable'
list icmp_type 'packet-too-big'
list icmp_type 'time-exceeded'
list icmp_type 'bad-header'
list icmp_type 'unknown-header-type'
option limit '1000/sec'
option family 'ipv6'
option target 'ACCEPT'