• Re: Wanted - IPV6 beginners guide or HowTo

    From Tweed@usenet.tweed@gmail.com to uk.telecom.broadband on Sat Nov 1 19:29:15 2025
    From Newsgroup: uk.telecom.broadband

    Chris Green <cl@isbd.net> wrote:
    We have just moved from PlusNet FTTC to IDNet/Cityfibre FTTP, we have
    thus moved our old landline (that carried the FTTC) to VOIP. That's
    all done and working now.

    Our LAN is still 100% IPV4 and I'm thinking that maybe I should start
    looking at getting IPV6 available. IDNet are always selling their IPV6 expertise and I want to do some more things with VOIP which is easier
    (the VOIP bit anyway) with IPV6.

    So where can I find some sort of tutorial to help me get started? My
    WAN to LAN router is an Asus RT-BE92U which is IPV6 capable, most of
    the computer hardware is running Debian 13, the VOIP is currently on a Yealink W70B.

    What I need (initially anyway) is to get the block of IPV6 addresses
    that IDNet have provided, available to use on the LAN side of the
    router, then any new VOIP hardware can use one of these addresses. The existing IPV4 will have to continue as is. I run dnsmasq in the Asus
    router to provide local DNS and DHCP, I think I need to enable IPV6 in
    that.

    However that's getting a bit detailed, as I said I want a sort of
    generic tutorial to tell me what's involved with getting IPV6 working
    in parallel with IPV4. I'm particularly concerned about firewalls and
    such given that (I think) one loses the protection that NAT gives.

    ThererCOs any number of tutorials findable on the web. IrCOm no great expert but I do have an IDnet/Cityfibre connection. They supplied the Asus router preconfigured, but IrCOm pretty sure they will help you set yours up. Their tech support is excellent. With the router so set up, the LAN just works.
    The router does all the firewalling, no need for NAT. Any IPv6 capable
    device just picks up an address in parallel to any IPv4 one.

    This https://ipv6.chappell-family.com/ipv6tcptest/ can be used to check yourCOve got your firewall configured correctly.
    --- Synchronet 3.21a-Linux NewsLink 1.2
  • From Chris Green@cl@isbd.net to uk.telecom.broadband on Sat Nov 1 20:35:58 2025
    From Newsgroup: uk.telecom.broadband

    Tweed <usenet.tweed@gmail.com> wrote:
    Chris Green <cl@isbd.net> wrote:
    We have just moved from PlusNet FTTC to IDNet/Cityfibre FTTP, we have
    thus moved our old landline (that carried the FTTC) to VOIP. That's
    all done and working now.

    Our LAN is still 100% IPV4 and I'm thinking that maybe I should start looking at getting IPV6 available. IDNet are always selling their IPV6 expertise and I want to do some more things with VOIP which is easier
    (the VOIP bit anyway) with IPV6.

    So where can I find some sort of tutorial to help me get started? My
    WAN to LAN router is an Asus RT-BE92U which is IPV6 capable, most of
    the computer hardware is running Debian 13, the VOIP is currently on a Yealink W70B.

    What I need (initially anyway) is to get the block of IPV6 addresses
    that IDNet have provided, available to use on the LAN side of the
    router, then any new VOIP hardware can use one of these addresses. The existing IPV4 will have to continue as is. I run dnsmasq in the Asus router to provide local DNS and DHCP, I think I need to enable IPV6 in that.

    However that's getting a bit detailed, as I said I want a sort of
    generic tutorial to tell me what's involved with getting IPV6 working
    in parallel with IPV4. I'm particularly concerned about firewalls and
    such given that (I think) one loses the protection that NAT gives.

    ThererCOs any number of tutorials findable on the web. IrCOm no great expert but I do have an IDnet/Cityfibre connection. They supplied the Asus router preconfigured, but IrCOm pretty sure they will help you set yours up. Their tech support is excellent. With the router so set up, the LAN just works.
    The router does all the firewalling, no need for NAT. Any IPv6 capable
    device just picks up an address in parallel to any IPv4 one.

    This https://ipv6.chappell-family.com/ipv6tcptest/ can be used to check yourCOve got your firewall configured correctly.

    Thanks, that's encouraging, maybe it's not as difficult as I thought! :-)
    --
    Chris Green
    -+
    --- Synchronet 3.21a-Linux NewsLink 1.2
  • From Theo@theom+news@chiark.greenend.org.uk to uk.telecom.broadband on Sun Nov 2 14:47:12 2025
    From Newsgroup: uk.telecom.broadband

    Chris Green <cl@isbd.net> wrote:
    Tweed <usenet.tweed@gmail.com> wrote:
    ThererCOs any number of tutorials findable on the web. IrCOm no great expert
    but I do have an IDnet/Cityfibre connection. They supplied the Asus router preconfigured, but IrCOm pretty sure they will help you set yours up. Their tech support is excellent. With the router so set up, the LAN just works. The router does all the firewalling, no need for NAT. Any IPv6 capable device just picks up an address in parallel to any IPv4 one.

    This https://ipv6.chappell-family.com/ipv6tcptest/ can be used to check yourCOve got your firewall configured correctly.

    Thanks, that's encouraging, maybe it's not as difficult as I thought! :-)

    It's pretty straightforward:

    Your router gets handed IP addresses when it connects (exact method depends
    on how it connects, eg PPPoE):
    - at least 1 IPv6 for itself (could be /64 or /128)
    - at least one subnet (often /56 or /64)

    The router runs Neighbour Discovery Protocol so broadcasts out the subnet details to the LAN. Devices receive the broadcasts and configure themselves with an IP based on the subnet address and their MAC address. You don't
    need any kind of DHCP, if they can receive broadcasts they are configured
    with IPv6 addresses.

    They can also decide to configure themselves with a second/third/etc IP for their outbound traffic based on the subnet plus a randomised portion that changes often - this is to prevent internet hosts from fingerprinting them based on the MAC address.

    The firewall works as for IPv4: incoming traffic is by default blocked, and outgoing traffic is allowed through and remembered so the return packets can
    be let back through. The only difference is it doesn't rewrite addresses as
    v4 NAT does.

    You don't need DHCPv6 because NDP means everything autoconfigures. If you insist you can disable NDP and implement DHCPv6, but that's just making life more difficult for yourself. NDP means IPv6 often works when DHCPv4 is
    broken.

    So all you need is to turn on IPv6 on your WAN, make sure NDP is not
    disabled, and you have a working IPv6 LAN.

    Theo
    --- Synchronet 3.21a-Linux NewsLink 1.2
  • From Peter Johnson@peter@parksidewood.nospam to uk.telecom.broadband on Sun Nov 2 18:06:18 2025
    From Newsgroup: uk.telecom.broadband

    On Sat, 1 Nov 2025 18:24:29 +0000, Chris Green <cl@isbd.net> wrote:

    We have just moved from PlusNet FTTC to IDNet/Cityfibre FTTP, we have
    thus moved our old landline (that carried the FTTC) to VOIP. That's
    all done and working now.

    Our LAN is still 100% IPV4 and I'm thinking that maybe I should start
    looking at getting IPV6 available. IDNet are always selling their IPV6 >expertise and I want to do some more things with VOIP which is easier
    (the VOIP bit anyway) with IPV6.

    So where can I find some sort of tutorial to help me get started? My
    WAN to LAN router is an Asus RT-BE92U which is IPV6 capable, most of
    the computer hardware is running Debian 13, the VOIP is currently on a >Yealink W70B.

    What I need (initially anyway) is to get the block of IPV6 addresses
    that IDNet have provided, available to use on the LAN side of the
    router, then any new VOIP hardware can use one of these addresses. The >existing IPV4 will have to continue as is. I run dnsmasq in the Asus
    router to provide local DNS and DHCP, I think I need to enable IPV6 in
    that.

    However that's getting a bit detailed, as I said I want a sort of
    generic tutorial to tell me what's involved with getting IPV6 working
    in parallel with IPV4. I'm particularly concerned about firewalls and
    such given that (I think) one loses the protection that NAT gives.

    With an Asus router it's quite simple.
    In the settings click on IPv6 under the Advanced Settings heading.
    That will tell you, by showing you the IPv6 address, if the router and
    line are already configured/enabled for IPv6.
    If not, on the same page, you need Connection type Native; Interface
    PPP; DHCP-PD Enable; Accept Default Route Enable; Connect to DNS
    server automatically Enable; Enable Router Adverisement Enable. Some
    of these are defaults so you wont't have to change all of them.
    Reboot the router.
    When rebooted return to the same page and see if you have an IPv6
    address. If not call/email IDNet and ask them to enable your circuit.
    --- Synchronet 3.21a-Linux NewsLink 1.2
  • From David Wade@g4ugm@dave.invalid to uk.telecom.broadband on Sun Nov 2 20:28:58 2025
    From Newsgroup: uk.telecom.broadband

    On 02/11/2025 18:06, Peter Johnson wrote:
    On Sat, 1 Nov 2025 18:24:29 +0000, Chris Green <cl@isbd.net> wrote:

    We have just moved from PlusNet FTTC to IDNet/Cityfibre FTTP, we have
    thus moved our old landline (that carried the FTTC) to VOIP. That's
    all done and working now.

    Our LAN is still 100% IPV4 and I'm thinking that maybe I should start
    looking at getting IPV6 available. IDNet are always selling their IPV6
    expertise and I want to do some more things with VOIP which is easier
    (the VOIP bit anyway) with IPV6.

    So where can I find some sort of tutorial to help me get started? My
    WAN to LAN router is an Asus RT-BE92U which is IPV6 capable, most of
    the computer hardware is running Debian 13, the VOIP is currently on a
    Yealink W70B.

    What I need (initially anyway) is to get the block of IPV6 addresses
    that IDNet have provided, available to use on the LAN side of the
    router, then any new VOIP hardware can use one of these addresses. The
    existing IPV4 will have to continue as is. I run dnsmasq in the Asus
    router to provide local DNS and DHCP, I think I need to enable IPV6 in
    that.

    However that's getting a bit detailed, as I said I want a sort of
    generic tutorial to tell me what's involved with getting IPV6 working
    in parallel with IPV4. I'm particularly concerned about firewalls and
    such given that (I think) one loses the protection that NAT gives.

    With an Asus router it's quite simple.
    In the settings click on IPv6 under the Advanced Settings heading.
    That will tell you, by showing you the IPv6 address, if the router and
    line are already configured/enabled for IPv6.
    If not, on the same page, you need Connection type Native; Interface
    PPP; DHCP-PD Enable; Accept Default Route Enable; Connect to DNS
    server automatically Enable; Enable Router Adverisement Enable. Some
    of these are defaults so you wont't have to change all of them.
    Reboot the router.
    When rebooted return to the same page and see if you have an IPv6
    address. If not call/email IDNet and ask them to enable your circuit.


    What are the advantages of IPV6?
    Why don't ISPs that support it, such as ZEN dish out a V6 as standard?
    If I don't have DHCP can it cope when I move to a different subnet?

    Dave
    --- Synchronet 3.21a-Linux NewsLink 1.2
  • From Theo@theom+news@chiark.greenend.org.uk to uk.telecom.broadband on Wed Nov 5 11:30:20 2025
    From Newsgroup: uk.telecom.broadband

    David Wade <g4ugm@dave.invalid> wrote:

    What are the advantages of IPV6?

    - being able to reach parts of the internet that are IPv6 only
    - increased speed, by not having to traverse NAT/CGNAT/frontend servers at
    the destination
    - ease of hosting your own services (both locally and at datacentres,
    without having to pay your host extra to rent an IPv4 address)
    - end to end connectivity without NAT traversal hacks

    Why don't ISPs that support it, such as ZEN dish out a V6 as standard?

    I don't know why Zen doesn't enable it as standard - mainstream ISPs like BT, Vodafone and Sky do, and it 'just works'. Most people using IPv6 don't know they are.

    If I don't have DHCP can it cope when I move to a different subnet?

    Yes, the router just broadcasts a new subnet and hosts pick that up and renumber. If you want to talk to hosts locally using their global IP there
    are ways, eg mDNS.

    (I'm not sure in practice how frequently domestic IPv6 networks do get renumbered, I think the recommendation is there's a static mapping)

    Theo
    --- Synchronet 3.21a-Linux NewsLink 1.2
  • From David Wade@g4ugm@dave.invalid to uk.telecom.broadband on Wed Nov 5 12:12:18 2025
    From Newsgroup: uk.telecom.broadband

    On 05/11/2025 11:30, Theo wrote:
    David Wade <g4ugm@dave.invalid> wrote:

    What are the advantages of IPV6?

    - being able to reach parts of the internet that are IPv6 only

    any examples of this? Never found any so far?

    - increased speed, by not having to traverse NAT/CGNAT/frontend servers at
    the destination
    - ease of hosting your own services (both locally and at datacentres,
    without having to pay your host extra to rent an IPv4 address)
    - end to end connectivity without NAT traversal hacks


    OK

    Why don't ISPs that support it, such as ZEN dish out a V6 as standard?

    I don't know why Zen doesn't enable it as standard - mainstream ISPs like BT, Vodafone and Sky do, and it 'just works'. Most people using IPv6 don't know they are.


    I was with Plusnet before, and they still don't support it....
    .. I'll see if ZEN will turn it on.


    If I don't have DHCP can it cope when I move to a different subnet?

    Yes, the router just broadcasts a new subnet and hosts pick that up and renumber. If you want to talk to hosts locally using their global IP there are ways, eg mDNS.

    (I'm not sure in practice how frequently domestic IPv6 networks do get renumbered, I think the recommendation is there's a static mapping)


    It was more if I go to a different place. I have a second home and kept
    the WiFi SSIDs the same....

    Theo

    Dave
    --- Synchronet 3.21a-Linux NewsLink 1.2
  • From Peter Johnson@peter@parksidewood.nospam to uk.telecom.broadband on Wed Nov 5 16:31:57 2025
    From Newsgroup: uk.telecom.broadband

    On Wed, 5 Nov 2025 12:12:18 +0000, David Wade <g4ugm@dave.invalid>
    wrote:


    Why don't ISPs that support it, such as ZEN dish out a V6 as standard?

    I don't know why Zen doesn't enable it as standard - mainstream ISPs like BT,
    Vodafone and Sky do, and it 'just works'. Most people using IPv6 don't know >> they are.


    I was with Plusnet before, and they still don't support it....
    .. I'll see if ZEN will turn it on.

    Ask them and they will.
    --- Synchronet 3.21a-Linux NewsLink 1.2
  • From Theo@theom+news@chiark.greenend.org.uk to uk.telecom.broadband on Wed Nov 5 23:02:49 2025
    From Newsgroup: uk.telecom.broadband

    David Wade <g4ugm@dave.invalid> wrote:
    On 05/11/2025 11:30, Theo wrote:
    David Wade <g4ugm@dave.invalid> wrote:

    If I don't have DHCP can it cope when I move to a different subnet?

    Yes, the router just broadcasts a new subnet and hosts pick that up and renumber. If you want to talk to hosts locally using their global IP there are ways, eg mDNS.

    (I'm not sure in practice how frequently domestic IPv6 networks do get renumbered, I think the recommendation is there's a static mapping)


    It was more if I go to a different place. I have a second home and kept
    the WiFi SSIDs the same....

    Since your second home will have a different upstream connection, I'd have thought you'd expect different public IPs? The wifi SSIDs don't affect how machines get IP addressed.

    If you have multiple upstreams, it's possible to declare a private subnet in the fc00::/10 range and then set your router to do a 1:1 stateless NAT that
    to an upstream address in your ISP's range 2001:aaaa:bbbb:cccc::/64, eg fc00::12:34:56 gets NATted to 2001:aaaa:bbbb:cccc::12:34:56. That means you are insulated from your upstream IP but still have the benefits of IPv6 (without the disbenefits of IPv4 stateful NAT).

    Theo
    --- Synchronet 3.21a-Linux NewsLink 1.2
  • From David Wade@g4ugm@dave.invalid to uk.telecom.broadband on Thu Nov 6 00:25:53 2025
    From Newsgroup: uk.telecom.broadband

    On 05/11/2025 23:02, Theo wrote:
    David Wade <g4ugm@dave.invalid> wrote:
    On 05/11/2025 11:30, Theo wrote:
    David Wade <g4ugm@dave.invalid> wrote:

    If I don't have DHCP can it cope when I move to a different subnet?

    Yes, the router just broadcasts a new subnet and hosts pick that up and
    renumber. If you want to talk to hosts locally using their global IP there >>> are ways, eg mDNS.

    (I'm not sure in practice how frequently domestic IPv6 networks do get
    renumbered, I think the recommendation is there's a static mapping)


    It was more if I go to a different place. I have a second home and kept
    the WiFi SSIDs the same....

    Since your second home will have a different upstream connection, I'd have thought you'd expect different public IPs? The wifi SSIDs don't affect how machines get IP addressed.

    Well I think I need to go and do the tutorials. At present my IPV4
    network is a total mess and needs sorting.

    So in the main house I have a Fritz!Box on a ZEN FTTP connection, but
    this has a second router, a Draytek with its WAN port plugged into one
    of the Fritz! LAN ports. The Fritz!Box forwards most inbound connections
    to to the Draytek. There are some WiFi access points plugged into the
    Draytek.

    On checking the APs seem to be only manageable via IPV4 but I assume
    they appear to pass IPV6 traffic correctly (They are Draytek AP902s)

    This is a hang-over from when I had VDSL and the Draytek was the primary router. I think I need to flatten the network

    In the holiday home there is a Huawei router which I can't change as the
    fibre goes directly into it. Its connection is IP4 only on CGNAT. There
    is a second Fritz!Box which creates a VPN back into the UK which I tend
    to only use for TV.



    If you have multiple upstreams, it's possible to declare a private subnet in the fc00::/10 range and then set your router to do a 1:1 stateless NAT that to an upstream address in your ISP's range 2001:aaaa:bbbb:cccc::/64, eg fc00::12:34:56 gets NATted to 2001:aaaa:bbbb:cccc::12:34:56. That means you are insulated from your upstream IP but still have the benefits of IPv6 (without the disbenefits of IPv4 stateful NAT).

    OK that sounds interesting. I'll look at that.


    Theo

    Dave
    --- Synchronet 3.21a-Linux NewsLink 1.2
  • From Graham J@nobody@nowhere.co.uk to uk.telecom.broadband on Thu Nov 6 08:40:32 2025
    From Newsgroup: uk.telecom.broadband

    David Wade wrote:

    [snip]

    So in the main house I have a Fritz!Box on a ZEN FTTP connection, but
    this has a second router, a Draytek with its WAN port plugged into one
    of the Fritz! LAN ports. The Fritz!Box forwards most inbound connections
    to to the Draytek. There are some WiFi access points plugged into the Draytek.

    There is no need whatever for the Fritz!Box. Remove it, and connect
    your Draytek WAN port to the ONT. Use the Zen credentials in the
    Draytek WAN port.

    On checking the APs seem to be only manageable via IPV4 but I assume
    they appear to pass IPV6 traffic correctly (They are Draytek AP902s)

    This is a hang-over from when I had VDSL and the Draytek was the primary router. I think I need to flatten the network

    In the holiday home there is a Huawei router which I can't change as the fibre goes directly into it. Its connection is IP4 only on CGNAT. There
    is a second Fritz!Box which creates a VPN back into the UK which I tend
    to only use for TV.

    So that may be why you use the Fritz!Box in the UK. But you could
    create a LAN-to-LAN VPN with a Draytek router in the holiday home. I've
    done this a lot, for customer support. Where there was CGNAT at the
    customer site, I configured the VPN to use PPTP so the customer site
    dialled in to my home router, and the connection was always-on. There
    may be more secure methods.
    --
    Graham J
    --- Synchronet 3.21a-Linux NewsLink 1.2
  • From David Wade@g4ugm@dave.invalid to uk.telecom.broadband on Thu Nov 6 16:40:35 2025
    From Newsgroup: uk.telecom.broadband

    On 06/11/2025 08:40, Graham J wrote:
    David Wade wrote:

    [snip]

    So in the main house I have a Fritz!Box on a ZEN FTTP connection, but
    this has a second router, a Draytek with its WAN port plugged into one
    of the Fritz! LAN ports. The Fritz!Box forwards most inbound
    connections to to the Draytek. There are some WiFi access points
    plugged into the Draytek.

    There is no need whatever for the Fritz!Box.-a Remove it, and connect
    your Draytek WAN port to the ONT.-a Use the Zen credentials in the
    Draytek WAN port.


    I would love to do that but the VPN performance of the Draytek is pants.


    On checking the APs seem to be only manageable via IPV4 but I assume
    they appear to pass IPV6 traffic correctly (They are Draytek AP902s)

    This is a hang-over from when I had VDSL and the Draytek was the
    primary router. I think I need to flatten the network

    In the holiday home there is a Huawei router which I can't change as
    the fibre goes directly into it. Its connection is IP4 only on CGNAT.
    There is a second Fritz!Box which creates a VPN back into the UK which
    I tend to only use for TV.

    So that may be why you use the Fritz!Box in the UK.-a But you could
    create a LAN-to-LAN VPN with a Draytek router in the holiday home.-a I've done this a lot, for customer support.-a Where there was CGNAT at the customer site, I configured the VPN to use PPTP so the customer site
    dialled in to my home router, and the connection was always-on.-a There
    may be more secure methods.


    I started with a pair of Drayteks and the problem was their VPN
    performance sucked leading to stutter on coronation street.
    Newer faster Drayteks were expensive, not as much as a divorce but a lot
    more than the second Fritz!box

    Dave
    --- Synchronet 3.21a-Linux NewsLink 1.2
  • From Brian Gregory@void-invalid-dead-dontuse@email.invalid to uk.telecom.broadband on Thu Nov 6 19:07:14 2025
    From Newsgroup: uk.telecom.broadband

    On 05/11/2025 11:30, Theo wrote:
    Yes, the router just broadcasts a new subnet and hosts pick that up and renumber. If you want to talk to hosts locally using their global IP there are ways, eg mDNS.

    IME the router usually reboots so everything sees the connection go down
    and come back up.

    If you have a separate switch or Wi-Fi repeater which don't reboot then something connected to either of them may have problems.

    (I'm not sure in practice how frequently domestic IPv6 networks do get renumbered, I think the recommendation is there's a static mapping)

    Static works best but some ISPs insist on choosing you a new block of
    IPv6 each time you connect.
    --
    Brian Gregory (in England).
    --- Synchronet 3.21a-Linux NewsLink 1.2
  • From Marco Moock@mm@dorfdsl.de to uk.telecom.broadband on Tue Nov 18 11:34:51 2025
    From Newsgroup: uk.telecom.broadband

    On 05.11.2025 12:12 Uhr David Wade wrote:

    On 05/11/2025 11:30, Theo wrote:
    David Wade <g4ugm@dave.invalid> wrote:

    What are the advantages of IPV6?

    - being able to reach parts of the internet that are IPv6 only

    any examples of this? Never found any so far?

    Various home users don't get public IPv4 anymore. If you want to
    connect to such machines, you can only use IPv6.
    --
    kind regards
    Marco

    Send spam to 1762341138muell@stinkedores.dorfdsl.de

    --- Synchronet 3.21a-Linux NewsLink 1.2