May 11, 2024

3395

EdgeRouter Lite 3 IPv6 configuration

Hi;

I am trying to configure the EdgeRouter Lite 3 with two subnets on eth1 and eth2.

The router is behind a Cable Fritzbox. So I get IPv4 and IPv6 addresses. All my devices get both IPv4 and IPv6 addresses, when connected to Fritzbox directly, however, when I connect Edgerouter Lite to Fritzbox, it gets both IPv4 and IPv6 from Fritzbox on eth0, while, it does not relay/advertise the IPv6 prefix to any of eth1 and eth2.

The configuration of IPv6 in Fritzbox is as follows:

Router advertisement in LAn active
           ULA: Assign ULA as long as there is no IPv6 connection(recommended)

Additional IPv6 routers in the home network:
          Also allow IPv6 prefixes that other IPv6 routers announce in the home network
          This FRITZ!Box provides standard Internet access

          Set router advertisement preference (higher preferences are preferred by clients): middle

DNS server in the home network:
         Also announce DNSv6 servers via router advertisement (RFC 5006)

DHCP server in the home network:
        DHCPv6-Server in der FRITZ!Box für das Heimnetz aktivieren:

        Select which information the DHCPv6 server should provide in the home network.
                  Assign DNS servers only: FRITZ!Box is announced as a DNS server via DHCPv6.

In the EdgeRouter Lite firewall, I have rules for the firewall ipv6_name icmpv6 and ports 546-547/udp.

For the interfaces in ethernet I have:

eth0:
               dhcpdv6-pd:
                                     pd: 0
                                             prefix length: /60
                                             interface:
                                                             eth0: 
                                                                     host-address: ::1
                                                                     prefix-id: :0
                                                                     service: slaac
                                                              eth0: 
                                                                     host-address: ::1
                                                                     prefix-id: :1
                                                                     service: slaac
                                                              eth0: 
                                                                     host-address: ::1
                                                                     prefix-id: :2
                                                                     service: slaac
               firewall:
                            in: 
                                ipv6-name: wan_in (Configured in the firewall ipv6-name)
                            local:  
                                ipv6-name: wan_local (Configured in the firewall ipv6-name)

               ipv6: address autoconf
               router-advert:
                            prefix: ::/64

I still cannot get ipv6 on eth1 and eth2, but I get ipv6 on eth0.

What am I missing here for eth1 and eth2?

Thank you in advance

Please also mark the comments that contributed to the solution of the article

Content-ID: 43295658502

Url: https://rootdb.com/forum/edgerouter-lite-3-ipv6-configuration-43295658502.html

Printed on: March 31, 2025 at 11:03 o'clock

17 Comments

Latest comment

Hallo,

Zitat von @Linuxero:
What am I missing here for eth1 and eth2?

Read https://community.ui.com/questions/EdgeRouter-Lite-No-IPv6-Connectivity/ ...
https://nurblieh.medium.com/ipv6-on-the-edgerouter-lite-c95e3cc8d49d
https://wejn.org/2022/01/configuring-ipv6-on-edgerouter-for-fiber7-and-p ...
Firmware?
Config is actually what exeactly?
And DHCP on in the FritzBox dows what, especiaaly since the ERL3 handels all the clients?
Clients hinter EdgeRouter-X bekommen keine IPv6-Global-Unicast-Adresse

Gruss,
Peter

Can also be seen with a Fritzbox serving Dual Stack connections with prefix delegation and firewalls in a cascade setup like above:
https://www.kuerbis.org/2023/03/ipv6-im-heimnetz-mit-pfsense-und-dynamis ...
https://blog.veloc1ty.de/2019/05/26/pfsense-opnsense-ipv6-delegation-fri ...
etc.
Here is a corresponding Cisco router example.

@Pjordorf;
The firmware is v2.0.9-hotfix.7.
I need to get IPv6 on all my clients behing the Edgerouter..
DHCP on Fritzbox should only announce the Fritzbox as a DNS server according to my understanding and the configuration I chose. But this can be changed later, when I get IPv6 working on the Edgerouter.

@hempel;

This setting is wrong, you must provide prefix Information (IA_PD) via DHCPv6 to sub routers!!

When I choose any of the other settings as you suggest, the Edgerouter gets a correct global IPv6 address as well as a private IPv6 address starting with fd00::

Otherwise, the links provided, except for @aqui, correspond to my configuration.

@aqui; interesting links. I am going through them now.

Thank you all

Thank you for all your insights. I am attaching screenshots of my configuration. Maybe this could help show out my problem better.

I cannot arrange the screenshots otherwise

The last two screenshots of fritzbox

Edgerouter screenshots

Edgerouter - firewall screenshots group 1

Edgerouter groups

Edgerouter ipv6-name

I guess I'll send all the screen shots unordered, otherwise it's going to take a lot of time

The last group of screenshots - interfaces on edgerouter

@hempel;

Thank you very much for this link. It has been very helpful. At least all the edgerouter interfaces have now IPv6 addresses.

On the other hand, the clients are not getting any IPv6 address..!

I have tried to use wireshark to check the communication; apparently the client sends RS but no RA comes back to the client.

I have checked the firewall configuration on both the edgerouter and the client. So it cannot be a client firewall problem, since clients get IPv6 and RA when I connect them directly to fritzbox.

As I said, I have compared the firewall settings as per the link you kindly indicated. But I am not sure, what the problem is. The logs on the edgerouter have no indication of ipv6 packets or communication. :|

Question Firewall LAN, WAN, Wireless Routers, Routing Network Management