Freebox bridge mode + TP-LINK router -> iPv6 configuration

passio -  
brupala Posted messages 111138 Registration date   Status Member Last intervention   -
Hello, after a month of abandonment, I managed to configure my TP-LINK VR2800 modem in IPv4. It is behind my Freebox, which is in Bridge mode.

For the IPv4 configuration, I set:

Mode: STATIC IP (The dynamic auto mode did not work)

IP Address: ... 82.64.xx.XX
Subnet Mask: ... 255.255.255.0
Gateway: ... 82.64.xx.xx
Primary DNS: 208.67.222.222
Secondary DNS: ... 208.67.220.220

It works.

Below this menu, I can check IPv6 - Enable (And here, it gets stuck)

Then I need to fill in the fields (TP LINK Archer VR2800):

IPv6 Address:
Prefix Length:
IPv6 Gateway:
Primary DNS:
Secondary DNS: (Optional)

Well, I tried to find IPv6 information on mafreebox.free.fr and tested a multitude of combinations ... But the big problem in all cases, I think, is at the Primary DNS level... It requires an IPv6 format and I faced a total desert of information online about what I should put... The configuration tutorials for IPv6 with the Freebox in bridge mode are about routers that I don’t see the correspondence of the fields to fill in with those of my interface.

So, I would like to succeed in this step before the next one, which would be to get rid of the Freebox and switch my router to Modem/Router mode.

Best regards. Thank you. [/img]

6 answers

  1. brupala Posted messages 111138 Registration date   Status Member Last intervention   14 440
     
    Hi,
    do you only have the option of a static IPv6 address on your router?
    It should be able to listen to the announcements from other routers and support both stateless and stateful configurations.
    I don't know how a FBX behaves in bridge mode with IPv6 today, I advise you to do a Wireshark capture of what comes out of the FBX and look at the frames, especially the RAs (router advertisements).
    It seems that Free provides its box with a /61 and that it can therefore manage 8 /64 subnets, but this needs to be verified.
    You can find the IPv6 DNS addresses for Free and others (Google, Cloudflare, FDN, Quad9) here: https://www.commentcamarche.net/maison/box-connexion-internet/1805-serveur-dns-orange-free-sfr-bouygues-les-bonnes-adresses/

    1
  2. passio
     
    For Wireshark, I can't tonight. In the meantime, here are screenshots of the IPv6 Info from my Freebox and from my router. For the response, the invalid IPv6 address refers to the IPv6 displayed in my box, with a suffix added somehow or for some reason by the router.

    Here are the screenshots that should contain all the information:
    *** Links hidden by moderation to protect private information ***
    1
    1. brupala Posted messages 111138 Registration date   Status Member Last intervention   14 440
       
      Whoa,
      avoid posting your V4 IP addresses like V6 on a forum like this, I've masked it.
      0
    2. brupala Posted messages 111138 Registration date   Status Member Last intervention   14 440
       
      By this story of prefix delegation, if I understand the logic correctly, the FBX remains in router mode for IPV6.
      For the router's addressing mode, do you only have SLAAC?
      Try delegating the /64 prefix that ends in e2 to your router:
      configure a fixed address for it on its LAN within this prefix, for example 2a01:xxxxxe2::d254
      and on your box, set the router's link-local address which should be: fe80::52c7:bfff:fed7:710c for the e2/64 prefix gateway
      https://lafibre.info/routeur/ipv6-avec-dhcpv6-en-bridge-sur-la-freebox-v6/
      https://www.aduf.org/viewtopic.php?t=264855
      https://utux.fr/index.php?article13/free-bridge-ipv6
      https://x0r.fr/blog/12
      0
    3. passio
       
      I have the DHCP option, but if I use it, the "IPv6 Address" field remains empty, unlike SLAAC which fills in all the fields.
      0
    4. brupala Posted messages 111138 Registration date   Status Member Last intervention   14 440 > passio
       
      yes, normal.
      so your router is properly configured by the box, try delegating the e2/64 prefix on the router's LAN
      if you don't know your router's link-local address on its WAN, give it its public address (2a01....710c), if the box accepts it.
      0
    5. Passio
       
      Hello, I don't understand this response.
      0
  3. passio
     
    Hello and thank you for your response. There is the possibility to use Dynamic mode; however, with IPv4, it doesn't work, I get a message that says basically "it doesn't work, please configure manually." I need to check the values acquired automatically and compare them to see where the issue is. Then, I might be able to look at the values acquired dynamically for IPv6 and make adjustments. I'll take a look.
    0
  4. Passio
     
    Re, it works in Dynamic :) I had to check an advanced options box and enter the DNS manually. The same goes for IPv6, the fields are filled in correctly, except for the DNS... But I can't find the IPv6 DNS addresses from FREE.
    0
    1. brupala Posted messages 111138 Registration date   Status Member Last intervention   14 440
       
      The IPv6 DNS of Free, I added them this morning, in fact, otherwise, as I mentioned above, you can take others....
      I'm not with Free, but I tested them, they seem to respond:
      brupala@saturn ~ $ dig -t AAAA www.free.fr @2a01:e0c:1:1599::23

      ; <<>> DiG 9.10.3-P4-Ubuntu <<>> -t AAAA www.free.fr @2a01:e0c:1:1599::23
      ;; global options: +cmd
      ;; Got answer:
      ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 51074
      ;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
      ;; WARNING: recursion requested but not available

      ;; OPT PSEUDOSECTION:
      ; EDNS: version: 0, flags:; udp: 1680
      ;; QUESTION SECTION:
      ;www.free.fr. IN AAAA

      ;; ANSWER SECTION:
      www.free.fr. 86400 IN AAAA 2a01:e0c:1::1

      ;; Query time: 33 msec
      ;; SERVER: 2a01:e0c:1:1599::23#53(2a01:e0c:1:1599::23)
      ;; WHEN: Sun May 19 16:08:35 CEST 2019
      ;; MSG SIZE rcvd: 68

      brupala@saturn ~ $ dig -t AAAA www.free.fr @2a01:e0c:1:1599::22

      ; <<>> DiG 9.10.3-P4-Ubuntu <<>> -t AAAA www.free.fr @2a01:e0c:1:1599::22
      ;; global options: +cmd
      ;; Got answer:
      ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 54604
      ;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
      ;; WARNING: recursion requested but not available

      ;; OPT PSEUDOSECTION:
      ; EDNS: version: 0, flags:; udp: 1680
      ;; QUESTION SECTION:
      ;www.free.fr. IN AAAA

      ;; ANSWER SECTION:
      www.free.fr. 86400 IN AAAA 2a01:e0c:1::1

      ;; Query time: 33 msec
      ;; SERVER: 2a01:e0c:1:1599::22#53(2a01:e0c:1:1599::22)
      ;; WHEN: Sun May 19 16:09:31 CEST 2019
      ;; MSG SIZE rcvd: 68

      However, they do not respond to addresses outside of Free as they are not recursive, but it may be because I do not have a Free address.
      0
  5. passio
     
    Hello, thank you for the response.... unfortunately, it doesn't work. I've tried a lot of things. Here’s my configuration (To compare, I don't understand anything about IPv6):

    The router connected to the Freebox (bridge mode):
    WAN Interface Name: ipoe_1_d
    MAC Address: 52:C7:BF:D7:71:0C
    IP Address: 2a01:e0a:7e:xxxx:50c7:bfff
    Default Gateway: fe80::f6ca:e5ff:fe4d:f36f
    Primary DNS: 2a01:e0c:1:1599::23
    Secondary DNS: 2a01:e0c:1:1599::22
    Connection Type: Dynamic IP
    Prefix Length: 64

    ______

    Configuration of my Freebox (bridge mode):
    Local IPv6 link: fe80::f6ca:e5ff:fe4d:f36f (identical)

    Be careful if you configure a Next Hop for the first subnet, it will no longer be announced by the Freebox on your network
    Prefix: 2a01:e0a:7e:xxxx::/64
    Next Hop: (not configured)
    Prefix: 2a01:e0a:7e:xxxx::/64
    Next Hop: (not configured)
    (etc...)

    DhcpV6 (not activated)
    Force the use of certain IPv6 DNS (not activated).
    0
    1. brupala Posted messages 111138 Registration date   Status Member Last intervention   14 440
       
      IP Address: 2a01:e0a:7e:xxxx:50c7:bfff
      is not a valid IPv6 address, it's missing some elements, where did you get it from?
      the xxxx represents valid hexadecimal characters that I have masked
      can you not leave it as an automatic address?
      the Freebox address, is it on its WAN?
      although, if it's in bridge mode, it shouldn't have 50, but it should have a routable public IPv6 address, I think in 2a01....
      then, on the router, we need to check the routing table.
      can you do a Wireshark capture of what goes out of your box for 10 minutes, with a PC instead of the router?
      0