Comcast Business IPv6 Setting

[cardins2u]

Anyone here able to setup Comcast Business IPv6 on OPNSense?

I'm having a hard time.

1. WAN - DHCPv6
      - Prefix 56
2. LAN - Track Interface
   - IPv6 Interface WAN
   - ID : 0


I'm getting IPv6 Ips internally but I cannot ping any ipv6. I cannot ping ipv6 from ssh on OPNSense at all.



WAN IP Address (IPv6): 2001:558:600a:ce:xxxxxx846
WAN Default Gateway Address (IPv6): fe80::2e86:xxxx:xxxx:ec22
Delegated prefix (IPv6): 2603:3023:xxd:xxxx::/56
Primary DNS Server (IPv6):2001:558:feed::1
Secondary DNS Server (IPv6):2001:558:feed::2
WAN Link Local Address (IPv6): fe80::xxx:27ff:xxxx:2461

[opnfwb]

I don't have exactly the same setup but, have you tried Prefix 64 on the WAN-side DHCP6 client?

I'm running Prefix 64 DHCP6 on Spectrum/TWC and am getting WAN and LAN IP6 addresses and firewalling/routing is working quite well.

[cardins2u]

yeah I have. I tried 56 60 and 64

no lucky. Comcast is a nightmare.

[bartjsmit]

Try allowing inbound ICMP on IPv6 on the WAN interface?

Bart...

[marjohn56]

Are you seeing v6 addresses on the WAN and/or LAN interfaces?

If not, then select debug mode on dhcp6 and have a look at the logs for dhcp6c entries. Although you'll find the GUI log entries in Services->DHCP->log file, it will be more productive to look at the log file itself /var/log/dhcpd.log.

I would suggest after you enable debugging and save then you reboot, otherwise its possible you could end up with multiple dhcp6c clients.

After the reboot, then look at the log file.

[cardins2u]

hmm werid. I turn on log. rebooted check if there dhcp6c  logs. theres no logs of what so ever. just dhcprelay logs for a dhcp relay i'm running internal.

[marjohn56]

it is iinteresting as it means dhcp6c is not being launched. Enable directly send solicit and repeat the procedure.

[cardins2u]

good news, I got ipv6 address. The IP match the prefix from comcast modem.

But when I ping I get "Request timed out"

[marjohn56]

Good.

Next step, do you have a default allow ipv6 traffic rules in your firewall?

Also there's a disable IPv6 setting somewhere, but I cannot remember where, it should be off by default.