Freebox bridge mode + TP-LINK router -> iPv6 configuration

passio -  
brupala Posted messages 111942 Registration date   Status Membre Last intervention   -
Hello, after a month of abandonment, I managed to configure my TP-LINK VR2800 modem in IPv4. It is behind my Freebox, which is in Bridge mode.

For the IPv4 configuration, I set:

Mode: STATIC IP (The dynamic auto mode did not work)

IP Address: ... 82.64.xx.XX
Subnet Mask: ... 255.255.255.0
Gateway: ... 82.64.xx.xx
Primary DNS: 208.67.222.222
Secondary DNS: ... 208.67.220.220

It works.

Below this menu, I can check IPv6 - Enable (And here, it gets stuck)

Then I need to fill in the fields (TP LINK Archer VR2800):

IPv6 Address:
Prefix Length:
IPv6 Gateway:
Primary DNS:
Secondary DNS: (Optional)

Well, I tried to find IPv6 information on mafreebox.free.fr and tested a multitude of combinations ... But the big problem in all cases, I think, is at the Primary DNS level... It requires an IPv6 format and I faced a total desert of information online about what I should put... The configuration tutorials for IPv6 with the Freebox in bridge mode are about routers that I don’t see the correspondence of the fields to fill in with those of my interface.

So, I would like to succeed in this step before the next one, which would be to get rid of the Freebox and switch my router to Modem/Router mode.

Best regards. Thank you. [/img]

6 réponses

brupala Posted messages 111942 Registration date   Status Membre Last intervention   14 421
 
Hi,
do you only have the option of a static IPv6 address on your router?
It should be able to listen to the announcements from other routers and support both stateless and stateful configurations.
I don't know how a FBX behaves in bridge mode with IPv6 today, I advise you to do a Wireshark capture of what comes out of the FBX and look at the frames, especially the RAs (router advertisements).
It seems that Free provides its box with a /61 and that it can therefore manage 8 /64 subnets, but this needs to be verified.
You can find the IPv6 DNS addresses for Free and others (Google, Cloudflare, FDN, Quad9) here: https://www.commentcamarche.net/maison/box-connexion-internet/1805-serveur-dns-orange-free-sfr-bouygues-les-bonnes-adresses/

1
passio
 
For Wireshark, I can't tonight. In the meantime, here are screenshots of the IPv6 Info from my Freebox and from my router. For the response, the invalid IPv6 address refers to the IPv6 displayed in my box, with a suffix added somehow or for some reason by the router.

Here are the screenshots that should contain all the information:
*** Links hidden by moderation to protect private information ***
1
brupala Posted messages 111942 Registration date   Status Membre Last intervention   14 421
 
Whoa,
avoid posting your V4 IP addresses like V6 on a forum like this, I've masked it.
0
brupala Posted messages 111942 Registration date   Status Membre Last intervention   14 421
 
By this story of prefix delegation, if I understand the logic correctly, the FBX remains in router mode for IPV6.
For the router's addressing mode, do you only have SLAAC?
Try delegating the /64 prefix that ends in e2 to your router:
configure a fixed address for it on its LAN within this prefix, for example 2a01:xxxxxe2::d254
and on your box, set the router's link-local address which should be: fe80::52c7:bfff:fed7:710c for the e2/64 prefix gateway
https://lafibre.info/routeur/ipv6-avec-dhcpv6-en-bridge-sur-la-freebox-v6/
https://www.aduf.org/viewtopic.php?t=264855
https://utux.fr/index.php?article13/free-bridge-ipv6
https://x0r.fr/blog/12
0
passio
 
I have the DHCP option, but if I use it, the "IPv6 Address" field remains empty, unlike SLAAC which fills in all the fields.
0
brupala Posted messages 111942 Registration date   Status Membre Last intervention   14 421 > passio
 
yes, normal.
so your router is properly configured by the box, try delegating the e2/64 prefix on the router's LAN
if you don't know your router's link-local address on its WAN, give it its public address (2a01....710c), if the box accepts it.
0
Passio
 
Hello, I don't understand this response.
0
passio
 
Hello and thank you for your response. There is the possibility to use Dynamic mode; however, with IPv4, it doesn't work, I get a message that says basically "it doesn't work, please configure manually." I need to check the values acquired automatically and compare them to see where the issue is. Then, I might be able to look at the values acquired dynamically for IPv6 and make adjustments. I'll take a look.
0
brupala Posted messages 111942 Registration date   Status Membre Last intervention   14 421
 
It seems that it's now a /60, not a /61, to be confirmed for those who can read the received RA.

--
and ... Here you go!
0
Passio
 
Re, it works in Dynamic :) I had to check an advanced options box and enter the DNS manually. The same goes for IPv6, the fields are filled in correctly, except for the DNS... But I can't find the IPv6 DNS addresses from FREE.
0
brupala Posted messages 111942 Registration date   Status Membre Last intervention   14 421
 
The IPv6 DNS of Free, I added them this morning, in fact, otherwise, as I mentioned above, you can take others....
I'm not with Free, but I tested them, they seem to respond:
brupala@saturn ~ $ dig -t AAAA www.free.fr @2a01:e0c:1:1599::23

; <<>> DiG 9.10.3-P4-Ubuntu <<>> -t AAAA www.free.fr @2a01:e0c:1:1599::23
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 51074
;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
;; WARNING: recursion requested but not available

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1680
;; QUESTION SECTION:
;www.free.fr. IN AAAA

;; ANSWER SECTION:
www.free.fr. 86400 IN AAAA 2a01:e0c:1::1

;; Query time: 33 msec
;; SERVER: 2a01:e0c:1:1599::23#53(2a01:e0c:1:1599::23)
;; WHEN: Sun May 19 16:08:35 CEST 2019
;; MSG SIZE rcvd: 68

brupala@saturn ~ $ dig -t AAAA www.free.fr @2a01:e0c:1:1599::22

; <<>> DiG 9.10.3-P4-Ubuntu <<>> -t AAAA www.free.fr @2a01:e0c:1:1599::22
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 54604
;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
;; WARNING: recursion requested but not available

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1680
;; QUESTION SECTION:
;www.free.fr. IN AAAA

;; ANSWER SECTION:
www.free.fr. 86400 IN AAAA 2a01:e0c:1::1

;; Query time: 33 msec
;; SERVER: 2a01:e0c:1:1599::22#53(2a01:e0c:1:1599::22)
;; WHEN: Sun May 19 16:09:31 CEST 2019
;; MSG SIZE rcvd: 68

However, they do not respond to addresses outside of Free as they are not recursive, but it may be because I do not have a Free address.
0
passio
 
Hello, thank you for the response.... unfortunately, it doesn't work. I've tried a lot of things. Here’s my configuration (To compare, I don't understand anything about IPv6):

The router connected to the Freebox (bridge mode):
WAN Interface Name: ipoe_1_d
MAC Address: 52:C7:BF:D7:71:0C
IP Address: 2a01:e0a:7e:xxxx:50c7:bfff
Default Gateway: fe80::f6ca:e5ff:fe4d:f36f
Primary DNS: 2a01:e0c:1:1599::23
Secondary DNS: 2a01:e0c:1:1599::22
Connection Type: Dynamic IP
Prefix Length: 64

______

Configuration of my Freebox (bridge mode):
Local IPv6 link: fe80::f6ca:e5ff:fe4d:f36f (identical)

Be careful if you configure a Next Hop for the first subnet, it will no longer be announced by the Freebox on your network
Prefix: 2a01:e0a:7e:xxxx::/64
Next Hop: (not configured)
Prefix: 2a01:e0a:7e:xxxx::/64
Next Hop: (not configured)
(etc...)

DhcpV6 (not activated)
Force the use of certain IPv6 DNS (not activated).
0
brupala Posted messages 111942 Registration date   Status Membre Last intervention   14 421
 
IP Address: 2a01:e0a:7e:xxxx:50c7:bfff
is not a valid IPv6 address, it's missing some elements, where did you get it from?
the xxxx represents valid hexadecimal characters that I have masked
can you not leave it as an automatic address?
the Freebox address, is it on its WAN?
although, if it's in bridge mode, it shouldn't have 50, but it should have a routable public IPv6 address, I think in 2a01....
then, on the router, we need to check the routing table.
can you do a Wireshark capture of what goes out of your box for 10 minutes, with a PC instead of the router?
0