IPv6 (connection network is unreachable) [Solved]

[ffaabb]

Hello,
I have configure IPv6 with DHCP6 on my WAN interface. it’s works because i have obtain an IP address v6 of my ISP.
But it’s impossible to ping with ipv6.

root@turris:~# ping6 www.openwrt.org

PING www.openwrt.org(wiki-01.infra.openwrt.org) 56 data bytes
From 2a01:XXX:XXX:XXXX::1 icmp_seq=1 Destination unreachable: Address unreachab le
From 2a01:XXX:XXX:XXXX::1 icmp_seq=2 Destination unreachable: Address unreachab le
From 2a01:XXX:XXX:XXXX::1 icmp_seq=3 Destination unreachable: Address unreachab le
From 2a01:XXX:XXX:XXXX::1 icmp_seq=4 Destination unreachable: Address unreachab le
— www.openwrt.org ping statistics —
7 packets transmitted, 0 received, +4 errors, 100% packet loss, time 9251ms

root@turris:~# ifstatus wan6
{
        "up": true,
        "pending": false,
        "available": true,
        "autostart": true,
        "dynamic": false,
        "uptime": 158,
        "l3_device": "eth2.832",
        "proto": "dhcpv6",
        "device": "eth2.832",
        "updated": [
                "routes",
                "prefixes"
        ],
        "metric": 0,
        "dns_metric": 0,
        "delegation": true,
        "ipv4-address": [

        ],
        "ipv6-address": [

        ],
        "ipv6-prefix": [
                {
                        "address": "2a01:XXXX:XXX:XXXX::",
                        "mask": 56,
                        "preferred": 259032,
                        "valid": 259032,
                        "class": "wan6",
                        "assigned": {
                                "lan": {
                                        "address": "2a01:XXX:XXX:XXXX::",
                                        "mask": 60
                                }
                        }
                }
        ],
        "ipv6-prefix-assignment": [

        ],
        "route": [
                {
                        "target": "::",
                        "mask": 0,
                        "nexthop": "fe80::ba0:bab",
                        "metric": 4096,
                        "valid": 259032,
                        "source": "2a01:XXXX:XXX:XXXX::/56"
                }
        ],
        "dns-server": [

        ],
        "dns-search": [

        ],
        "neighbors": [

        ],
        "inactive": {
                "ipv4-address": [

                ],
                "ipv6-address": [

                ],
                "route": [

                ],
                "dns-server": [

                ],
                "dns-search": [

                ],
                "neighbors": [

                ]
        },
        "data": {

        }
}

All trafic from LAN to WAN is authorized on the firewall.

I’m use Turris OS 5.2.7

Best regards

[AreYouLoco]

Try to ping your IPv6 Gateway.
You can check it out by ip -6 route.

[ffaabb]

Hello,
I can ping my IPv6 Gateway.

[AreYouLoco]

It seems like you dont have dns server assigned. Can you ping ip directly not an resolvable address.

Try to ping google dns servers:
2001:4860:4860::8888 and
2001:4860:4860::8844

[ffaabb]

I can’t ping dns servers :

root@turris:~# ping6 2001:4860:4860::8888
PING 2001:4860:4860::8888(2001:4860:4860::8888) 56 data bytes
From 2a01:XXX:XXX:XXX::1 icmp_seq=1 Destination unreachable: Address unreachable
From 2a01:XXX:XXX:XXX::1 icmp_seq=2 Destination unreachable: Address unreachable
From 2a01:XXX:XXX:XXX::1 icmp_seq=3 Destination unreachable: Address unreachable

[AreYouLoco]

Give all of this information to your ISP and ask for support there. It might be some misconfiguration on their side.

[ffaabb]

I have found it :

I have check the option and it’s works !

[AreYouLoco]

Why did you disable that rule in the first place.?
Mark as solved with your post.

[ffaabb]

@AreYouLoco Thank you for your help.
The rule was disabled some many months ago. I have never works IPV6 with my ISP…
and undoubtedly I had deactivated it as a precaution.